From 15db3ec195a33ac4684550b2aefdce6074142905 Mon Sep 17 00:00:00 2001 From: LoRexxar Date: Thu, 30 Sep 2021 17:29:42 +0800 Subject: [PATCH 1/3] add search vendor api --- .../dashboard/vendors/vendor_vuln_detail.html | 3 +- templates/dashboard/vendors/vendors_list.html | 35 +++++++++++++++++++ 2 files changed, 36 insertions(+), 2 deletions(-) diff --git a/templates/dashboard/vendors/vendor_vuln_detail.html b/templates/dashboard/vendors/vendor_vuln_detail.html index 4e809616..1559b271 100644 --- a/templates/dashboard/vendors/vendor_vuln_detail.html +++ b/templates/dashboard/vendors/vendor_vuln_detail.html @@ -5,8 +5,7 @@
-
+

Vendor Vuls Details

diff --git a/templates/dashboard/vendors/vendors_list.html b/templates/dashboard/vendors/vendors_list.html index bfe8e434..0f2d3801 100644 --- a/templates/dashboard/vendors/vendors_list.html +++ b/templates/dashboard/vendors/vendors_list.html @@ -2,6 +2,41 @@ {% block title %}Vendors list{% endblock %} {% block body %} +
+ +
+ + +
+
+

Search Vendor

+
+
+ + +
+ + +
+
+ +
+ +
+ ps: use * to indicate wildcard, just like jackson*. + +
+
+ + +
+
+
+
From 883274cbedeeb900d1d4ec99f1a3d5197642cb0c Mon Sep 17 00:00:00 2001 From: LoRexxar Date: Thu, 30 Sep 2021 17:37:19 +0800 Subject: [PATCH 2/3] update 2.6.3 --- README.md | 1 + core/__version__.py | 2 +- docs/changelog.md | 9 ++++++++- 3 files changed, 10 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 14d8b1f2..3ca543a2 100644 --- a/README.md +++ b/README.md @@ -330,4 +330,5 @@ KunLun-M 是 404Team [星链计划](https://github.com/knownsec/404StarLink-Proj - Dubhe [Sndav](https://github.com/Sndav) - [#jax777](https://github.com/jax777) - [lavon321](https://github.com/lavon321) +- [Raul1718](https://github.com/Raul1718) - [akkuman](https://github.com/akkuman) diff --git a/core/__version__.py b/core/__version__.py index f44256bf..106fa67b 100644 --- a/core/__version__.py +++ b/core/__version__.py @@ -7,7 +7,7 @@ __issue_page__ = 'https://github.com/LoRexxar/Kunlun-M/issues/new' __python_version__ = sys.version.split()[0] __platform__ = platform.platform() -__version__ = '2.6.2' +__version__ = '2.6.3' __author__ = 'LoRexxar' __author_email__ = 'LoRexxar@gmail.com' __license__ = 'MIT License' diff --git a/docs/changelog.md b/docs/changelog.md index 401e8bad..e8ca283c 100644 --- a/docs/changelog.md +++ b/docs/changelog.md @@ -272,4 +272,11 @@ - 为JS的语义分析扫描添加硬限制以应对混淆代码。 - 2021-08-16 - KunLun-M 2.6.2 - - 更新了组件漏洞表,添加了受影响版本字段 \ No newline at end of file + - 更新了组件漏洞表,添加了受影响版本字段 +- 2021-09-30 + - KunLun-M 2.6.3 + - 修复了关于PHP ast分析的部分bug @lavon321 #188 + - 修复了在处理同一漏洞多结果的忽略问题 + - 修复了deps api的bug @raul17 #192 + - 组件扫描添加了墨非api + - 添加了组件搜索功能并完善了相应页面显示内容 \ No newline at end of file From 9c336961b7e0953797010c7c3bd698b4c3c5b671 Mon Sep 17 00:00:00 2001 From: LoRexxar Date: Thu, 30 Sep 2021 18:02:54 +0800 Subject: [PATCH 3/3] fix murphysec bug --- core/vuln_apis/murphysec.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/vuln_apis/murphysec.py b/core/vuln_apis/murphysec.py index 9166c524..c7b29d37 100644 --- a/core/vuln_apis/murphysec.py +++ b/core/vuln_apis/murphysec.py @@ -48,7 +48,7 @@ def get_vulns_from_murphysec(language, package_name, version): logger.error("[Vendor][Murphysec Scan] Api Token error.") else: - vuls = data['data'] + vuls = data['data']['vuln_info'] for vul in vuls: vuln = {}