exploitdb/2025.03.20 package update

[octo-sts]

[stevebeattie]

For malcontent scanning, this is yet another example where differential analysis would be an improvement. The difference between the prior published version of the exploitdb package and the one prepared for update is:

$ diff -Naur exploitdb-2024.11.26-r0 exploitdb-2025.03.20-r0 | diffstat
 .PKGINFO                                                    |   11 -
 .melange.yaml                                               |  315 ++++++++++++++++++++++++++++++++++
 usr/share/app/exploitdb/exploits/multiple/webapps/52087.txt |   45 ++++
 usr/share/app/exploitdb/exploits/php/webapps/52083.py       |   65 +++++++
 usr/share/app/exploitdb/exploits/php/webapps/52084.txt      |   15 +
 usr/share/app/exploitdb/exploits/php/webapps/52085.py       |  249 ++++++++++++++++++++++++++
 usr/share/app/exploitdb/exploits/php/webapps/52086.txt      |   19 ++
 usr/share/app/exploitdb/exploits/windows/local/52088.txt    |   31 +++
 usr/share/app/exploitdb/files_exploits.csv                  |    6 
 var/lib/db/sbom/exploitdb-2024.11.26-r0.spdx.json           |   87 ---------
 var/lib/db/sbom/exploitdb-2025.03.20-r0.spdx.json           |   87 +++++++++
 11 files changed, 838 insertions(+), 92 deletions(-)

and the malcontent diff output looks like:

$ mal --format simple diff exploitdb-2024.11.26-r0.apk exploitdb-2025.03.20-r0.apk  
++++ added: exploitdb-2025.03.20-r0.apk ∴ /usr/share/app/exploitdb/exploits/php/webapps/52083.py
+3P/sig_base/webshell_php
+3P/sig_base/webshell_php_eval
+anti-static/obfuscation/php
+exec/imports/python
+exec/shell/command
+impact/exploit
+impact/exploit/cve
+impact/remote_access/php
+impact/remote_access/remote_eval
+impact/remote_access/reverse_shell
+net/http/post
+net/url/embedded
+net/url/parse
+net/url/request
++++ added: exploitdb-2025.03.20-r0.apk ∴ /usr/share/app/exploitdb/exploits/php/webapps/52085.py
+anti-static/obfuscation/php
+anti-static/obfuscation/python
+data/base64/decode
+data/base64/encode
+data/encoding/base64
+exec/imports/python
+exec/program
+exec/program/opaque
+exec/shell/command
+fs/path/etc
+fs/path/relative
+fs/path/usr_bin
+impact/exploit
+impact/exploit/cve
+impact/remote_access/remote_eval
+net/http/post
+net/url/embedded
+net/url/request

[octo-sts]

superseded by #47600