Merge pull request #194 from LoRexxar/develop

update to 2.6.3

README.md

@@ -330,4 +330,5 @@ KunLun-M 是 404Team [星链计划](https://github.com/knownsec/404StarLink-Proj
 - Dubhe [Sndav](https://github.com/Sndav)
 - [#jax777](https://github.com/jax777)
 - [lavon321](https://github.com/lavon321)
+- [Raul1718](https://github.com/Raul1718)
 - [akkuman](https://github.com/akkuman)

core/__version__.py

@@ -7,7 +7,7 @@
 __issue_page__ = 'https://github.com/LoRexxar/Kunlun-M/issues/new'
 __python_version__ = sys.version.split()[0]
 __platform__ = platform.platform()
-__version__ = '2.6.2'
+__version__ = '2.6.3'
 __author__ = 'LoRexxar'
 __author_email__ = 'LoRexxar@gmail.com'
 __license__ = 'MIT License'

core/vuln_apis/murphysec.py

@@ -48,7 +48,7 @@ def get_vulns_from_murphysec(language, package_name, version):
             logger.error("[Vendor][Murphysec Scan] Api Token error.")
 
         else:
-            vuls = data['data']
+            vuls = data['data']['vuln_info']
 
             for vul in vuls:
                 vuln = {}

docs/changelog.md

@@ -272,4 +272,11 @@
     - 为JS的语义分析扫描添加硬限制以应对混淆代码。
 - 2021-08-16
     - KunLun-M 2.6.2
-    - 更新了组件漏洞表，添加了受影响版本字段
+    - 更新了组件漏洞表，添加了受影响版本字段
+- 2021-09-30
+    - KunLun-M 2.6.3
+    - 修复了关于PHP ast分析的部分bug @lavon321 #188
+    - 修复了在处理同一漏洞多结果的忽略问题
+    - 修复了deps api的bug @raul17 #192
+    - 组件扫描添加了墨非api
+    - 添加了组件搜索功能并完善了相应页面显示内容

templates/dashboard/vendors/vendor_vuln_detail.html

@@ -5,8 +5,7 @@
 <div>
 
 <div class="box box-primary">
-<div class="box-header with-border
-">
+<div class="box-header with-border">
   <h3 class="box-title">Vendor Vuls Details</h3>
 </div>
 <div class="box-body">

templates/dashboard/vendors/vendors_list.html

@@ -2,6 +2,41 @@
 {% block title %}Vendors list{% endblock %}
 
 {% block body %}
+<div>
+
+<form id="fileform" role="form" method="get" enctype="multipart/form-data" action="{% url 'dashboard:vendor_details' %}">
+
+
+<div class="box box-primary">
+    <div class="box-header with-border">
+  <h3 class="box-title">Search Vendor</h3>
+</div>
+<div class="box-body">
+  <!-- Date -->
+  <!-- Date and time range -->
+  <div class="form-group">
+    <label>Vendor Name:</label>
+
+    <div class="input-group">
+      <div class="input-group-addon">
+        <i class="fa fa-laptop "></i>
+      </div>
+      <input type="text" class="form-control pull-right" name="vendorname" value="" >
+    </div>
+              ps: use * to indicate wildcard, just like jackson*.
+    <!-- /.input group -->
+  </div>
+  </div>
+  <!-- /.box -->
+    <div class="box-footer">
+        <div class="btn-group">
+          <button id="submit" type="submit" class="btn btn-primary">Search</button>
+        </div>
+  </div>
+</div>
+</form>
+</div>
+
 <div class="row">
         <div class="col-xs-12">
           <div class="box">