Regression?

[cikasole]

Try this
./sploitscan CVE-2020-8813...

With v0.10.2 I get
┌───[ 💥 VulnCheck Exploits ]
|
├ Date: 2022-09-30
└ URL: https://github.com/p0dalirius/CVE-2020-8813-Cacti-RCE-in-graph_realtime
|
├ Date: 2021-05-11
└ URL: https://github.com/0xm4ud/Cacti-CVE-2020-8813

With v0.10.3 - no VulnCheck Exploit section in output! Nothing at all. Same with other CVEs...

[xaitax]

Hi @cikasole, I reckon there is an issue with your key again.

$ sploitscan.py CVE-2020-8813

███████╗██████╗ ██╗      ██████╗ ██╗████████╗███████╗ ██████╗ █████╗ ███╗   ██╗
██╔════╝██╔══██╗██║     ██╔═══██╗██║╚══██╔══╝██╔════╝██╔════╝██╔══██╗████╗  ██║
███████╗██████╔╝██║     ██║   ██║██║   ██║   ███████╗██║     ███████║██╔██╗ ██║
╚════██║██╔═══╝ ██║     ██║   ██║██║   ██║   ╚════██║██║     ██╔══██║██║╚██╗██║
███████║██║     ███████╗╚██████╔╝██║   ██║   ███████║╚██████╗██║  ██║██║ ╚████║
╚══════╝╚═╝     ╚══════╝ ╚═════╝ ╚═╝   ╚═╝   ╚══════╝ ╚═════╝╚═╝  ╚═╝╚═╝  ╚═══╝
v0.10.3 / Alexander Hagenah / @xaitax / ah@primepage.de

╔═══════════════════════╗
║ CVE ID: CVE-2020-8813 ║
╚═══════════════════════╝

┌───[ 🔍 Vulnerability information ]
|
├ Published:   2020-02-22
├ Base Score:  N/A (N/A)
├ Vector:      N/A
└ Description: graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell
               metacharacters in a cookie, if a guest user has the graph real-time privilege.

┌───[ ♾️ Exploit Prediction Score (EPSS) ]
|
└ EPSS Score:  92.06% Probability of exploitation.

┌───[ 🛡️ CISA KEV Catalog ]
|
└ ❌ No data found.

┌───[ 💣 Public Exploits (Total: 7) ]
|
├ GitHub
│  ├ Date: 2022-09-30 - https://github.com/p0dalirius/CVE-2020-8813-Cacti-RCE-in-graph_realtime
│  ├ Date: 2021-05-29 - https://github.com/hexcowboy/CVE-2020-8813
│  └ Date: 2020-02-23 - https://github.com/mhaskar/CVE-2020-8813
│
├ VulnCheck
│  ├ Date: 2022-09-30 - https://github.com/p0dalirius/CVE-2020-8813-Cacti-RCE-in-graph_realtime
│  └ Date: 2021-05-11 - https://github.com/0xm4ud/Cacti-CVE-2020-8813
│
├ Exploit-DB
│  ├ Date: 2020-02-03 - https://www.exploit-db.com/exploits/48144
│  └ Date: 2020-02-03 - https://www.exploit-db.com/exploits/48145
│
└ Other
   ├ PacketStorm: https://packetstormsecurity.com/search/?q=CVE-2020-8813
   └ Nuclei: https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/http/cves/2020/CVE-2020-8813.yaml

But on another note, if no exploit is found on one of the platforms, it will not display it anymore.

[cikasole]

Sorry, it's me again.
But, you might consider making it more clear in README.md.
By default, all the three locations for Linux config.json are ignored if there is another config file in SploitScan/sploitscan.
And SploitScan/sploitscan is not always the current directory.

Thank you, this is a great tool.

[cikasole]

But, then... I tried CVE-2007-4723...

traceback (most recent call last):
File "/opt/SploitScan/./sploitscan.py", line 6, in
cli()
File "/opt/SploitScan/sploitscan/sploitscan.py", line 1067, in cli
main(args.cve_ids, args.export, args.import_file, args.type, args.config, args.debug)
File "/opt/SploitScan/sploitscan/sploitscan.py", line 984, in main
public_exploits = fetch_and_display_public_exploits(cve_id)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/opt/SploitScan/sploitscan/sploitscan.py", line 880, in fetch_and_display_public_exploits
display_public_exploits(github_data, vulncheck_data, exploitdb_data, packetstorm_data, nuclei_data, vulncheck_error)
File "/opt/SploitScan/sploitscan/sploitscan.py", line 365, in display_public_exploits
exploits, total = template(True)
^^^^^^^^^^^^^^^
ValueError: not enough values to unpack (expected 2, got 1)

With 0.10.2, it works...

[xaitax]

Thanks for your continuous testing and support. I fixed the issue but no release yet.
git pull and please run again.

Issue was that I haven't considered in the code that an exploit doesn't exist :D

[xaitax]

I will also look at how I can improve the config logic in the coming days.

[cikasole]

It works now.
Thank you and best regards...