Skip to content

Releases: projectdiscovery/nuclei-templates

Nuclei Templates v10.2.5 - Release Notes

15 Jul 07:45
@princechaddha princechaddha
v10.2.5
4ed154c
Compare
Choose a tag to compare
Nuclei Templates v10.2.5 - Release Notes Latest
Latest

New Templates Added: 75 | CVEs Added: 22 | First-time contributions: 5

🔥 Release Highlights 🔥

What's Changed

💰 Bounties Rewarded 💰

False Negatives

Templates Added

  • [CVE-2025-53624] Docusaurus Gists Plugin < 4.0.0 - GitHub Personal Access Token Exposure (@darses) [high]
  • [CVE-2025-52488] DNN (DotNetNuke) - Unicode Path Normalization NTLM Hash Disclosure (@assetnote, @dhiyaneshdk, @iamnoooob, @pdresearch) [high] 🔥
  • [CVE-2025-49493] Akamai CloudTest < 60 2025.06.02 - XML External Entity (XXE) (@xbow, @3th1c_yuk1) [critical]
  • [CVE-2025-48827] vBulletin 5.0.0-6.0.3 - Authentication Bypass (@pszyszkowski) [critical] 🔥
  • [CVE-2025-47813] Wing FTP Server <= 7.4.3 - Path Disclosure via Overlong UID Cookie (@rcesecurity, @pdteam) [medium]
  • [CVE-2025-47812] Wing FTP Server <= 7.4.3 - Remote Code Execution (@rcesecurity, @4m3rr0r) [critical] (kev) 🔥
  • [CVE-2025-41646] RevPi Webstatus <= v2.4.5 - Authentication Bypass (@dhiyaneshdk) [critical]
  • [CVE-2025-34040] Zhiyuan OA Platform - Arbitrary File Upload (@iamnoooob, @pdresearch) [critical]
  • [CVE-2025-32815] NetMRI < 7.6.1 - Authentication Bypass via Hardcoded Credentials (@iamnoooob, @pdresearch) [medium]
  • [CVE-2025-32814] NetMRI Unauthenticated SQL Injection via skipjackUsername (@iamnoooob, @pdresearch) [critical]
  • [CVE-2025-32813] Infoblox NetMRI < 7.6.1 - Unauthenticated Command Injection in get_saml_request (@iamnoooob, @pdresearch) [high]
  • [CVE-2025-27505] GeoServer - Missing Authorization on REST API Index (@securitytaters) [medium]
  • [CVE-2025-6216] Allegra - Authentication Bypass via Predictable Password Reset Token (@iamnoooob, @pdresearch) [critical]
  • [CVE-2025-5777] Citrix NetScaler Memory Disclosure - CitrixBleed 2 (@watchtowr, @dhiyaneshdk, @darses) [critical] (kev) 🔥
  • [CVE-2025-4380] Ads Pro Plugin <= 4.89 - Local File Inclusion (@iamnoooob, @rootxharsh, @pdresearch) [critical] 🔥
  • [CVE-2025-2010] WordPress JobWP Plugin <= 2.3.9 - SQL Injection (@iamnoooob, @rootxharsh, @pdresearch) [critical] 🔥
  • [CVE-2024-50334] Scoold < 1.64.0 - Authentication Bypass (@xbow, @iamnoooob, @pdresearch) [medium]
  • [CVE-2024-42475] Fortinet SSL-VPN - Heap-Based Buffer Overflow (@0xhaggis, @pszyszkowski) [critical] 🔥
  • [CVE-2023-49230] Peplink Balance Two before 8.4.0 - Unauthenticated Config Upload (@Srilakivarma) [high]
  • [CVE-2022-23397] Cedar Gate EZ-NET <= 6.8.0 - Cross-Site Scripting (@Srilakivarma) [medium]
  • [CVE-2020-9548] FasterXML Jackson Databind <=2.9.10.4 - Remote Code Execution (@tomaquet18) [critical] 🔥
  • [CVE-2020-9547] FasterXML jackson-databind - Deserialization Remote Code Execution (@Pranjalnegi) [critical] 🔥
  • [account-lockout-threshold] Account Lockout Threshold Check (@nukunga[SungHyunJeon]) [medium]
  • [admin-account-rename] Administrator Account Rename Check (@nukunga[SungHyunJeon]) [medium]
  • [admin-group-minimal] Minimum Administrator Group Membership Check (@nukunga[SungHyunJeon]) [medium]
  • [autologon-control] Autologon Function Control Check (@nukunga[SungHyunJeon]) [medium]
  • [crash-on-audit-fail] Shutdown on Audit Failure Check (@nukunga[SungHyunJeon]) [medium]
  • [dns-zone-transfer-check] DNS Zone Transfer Check (@nukunga[SungHyunJeon]) [medium]
  • [ftp-access-control-check] FTP Access Control Check (@nukunga[SungHyunJeon]) [medium]
  • [ftp-anonymous-check] Anonymous FTP Disabled Check (@nukunga[SungHyunJeon]) [medium]
  • [ftp-directory-permission-check] FTP Directory Access Permission Check (@nukunga[SungHyunJeon]) [medium]
  • [hard-disk-default-share] Hard Disk Default Share Removal Check (@nukunga[SungHyunJeon]) [medium]
  • [password-cleartext-encryption] Store Passwords Using Reversible Encryption Check (@nukunga[SungHyunJeon]) [medium]
  • [password-never-expires] Password Expiry Setting Check (@nukunga[SungHyunJeon]) [medium]
  • [rds-removal-check] RDS Removal Check (@nukunga[SungHyunJeon]) [medium]
  • [remote-registry-access-check] Remote Registry Service Disabled Check (@nukunga[SungHyunJeon]) [medium]
  • [remote-system-shutdown] Remote System Forced Shutdown Privilege Check (@nukunga[SungHyunJeon]) [medium]
  • [sam-file-access-control] SAM File Access Control Check (@nukunga[SungHyunJeon]) [medium]
  • [service-pack-check] Latest Service Pack Check (@nukunga[SungHyunJeon]) [medium]
  • [shutdown-without-logon] Shutdown Without Logon Check (@nukunga[SungHyunJeon]) [medium]
  • [unnecessary-accounts-check] Unnecessary Accounts Detection (@nukunga[SungHyunJeon]) [medium]
  • [unnecessary-service-check] Unnecessary Service Removal Check (@nukunga[SungHyunJeon]) [medium]
  • [molgenis-default-login] Molgenis - Default Login (@ritikchaddha) [high]
  • [cisco-cm-panel] Cisco Unified CM Console - Panel (@rxerium) [info]
  • [cisco-prime-license-manager-panel] Cisco Prime License Manager - Detect (@rxerium) [info]
  • [google-adk-api-exposed] Google ADK API Exposure (@princechaddha) [unknown]
  • [google-adk-webui-exposed] Google ADK Development UI Exposure (@princechaddha) [unknown]
  • [molgenis-panel] Molgenis Panel - Exposure (@matejsmycka) [info]
  • [peplink-panel] Peplink Login Panel - Detect (@pussycat0x) [info]
  • [wingftp-panel] Wing FTP Server Login Panel - Detect (@pdteam) [info]
  • [torrent-magnet-detect] Torrent Magnet - Detect (@rxerium) [info]
  • [dd-wrt-controlpanel-exposure] DD-WRT Control Panel - Exposure (@dhiyaneshdk) [low]
  • [pritunl-installer] Pritunl - Installation (@dhiyaneshdk) [high]
  • [twonky-server-exposure] Twonky Server - Exposure (@dhiyaneshdk) [high]
  • [sessionize] Sessionize User Information - Detect (@rxerium) [info]
  • [graphql-apiforwp-detect] Graphql apiforwp Detect (@princechaddha) [info]
  • [graphql-apollo-detect] Graphql Apollo Detect (@princechaddha) [info]
  • [graphql-ariadne-detect] Graphql Ariadne Detect (@princechaddha) [info]
  • [graphql-dianajl-detect] Graphql Dianajl Detect (@princechaddha) [info]
  • [graphql-flutter-detect] Graphql Flutter Detect (@princechaddha) [info]
  • [graphql-go-detect] Graphql Go Detect (@princechaddha) [info]
  • [graphql-gqlgen-detect] Graphql Gqlgen Detect (@princechaddha) [info]
  • [graphql-graphene-detect] Graphql Graphene Detect (@princechaddha) [info]
  • [graphql-hasura-detect] Graphql Hasura Detect (@princechaddha) [info]
  • [graphql-hypergraphql-detect] Graphql Hypergraphql Detect (@princechaddha) [info]
  • [graphql-java-detect] Graphql Java Detect (@princechaddha) [info]
  • [graphql-juniper-detect] Graphql Juniper Detect (@princechaddha) [info]
  • [graphql-php-detect] Graphql PHP Detect (@princechaddha) [info]
  • [graphql-ruby-detect] Graphql Ruby Detect (@princechaddha) [info]
  • [graphql-sangria-detect] Graphql Sangria Detect (@princechaddha) [info]
  • [graphql-strawberry-detect] Graphql Strawberry Detect (@princechaddha) [info]
  • [graphql-tartiflette-detect] Graphql Tartiflette Detect (@princechaddha) [info]
  • [graphql-wpgraphql-detect] Graphql wpgraphql Detect (@princechaddha) [info]
  • [infoblox-netmri-rails-cookie-rce] Infoblox NetMRI < 7.6.1 - Remote Code Execution via Hardcoded Ruby Cookie Secret Key (@iamnoooob, @pdresearch) [critical]
  • [jdwp-detect] Java Debug Wire Protocol - Detect (@johnk3r) [info]

New Contributors

Full Changelog: v10.2.4...v10.2.5

Contributors

xbow, johnk3r, and 24 other contributors
Assets 3
Loading

Nuclei Templates v10.2.4 - Release Notes

01 Jul 11:32
@princechaddha princechaddha
v10.2.4
f10132e
Compare
Choose a tag to compare
Nuclei Templates v10.2.4 - Release Notes

New Templates Added: 67 | CVEs Added: 30 | First-time contributions: 9

🔥 Release Highlights 🔥

What's Changed

Bounties Rewarded 💰

Bug Fixes

False Negatives

False Positives

Enhancements

  • Updated CVE-2019-0604.yaml (#12479)
  • Updated cisco-ise-admin-panel (#12477)
  • Updated and renamed moodle-filter-jmol-lfi.yaml & moodle-filter-jmol-xss.yaml (#12470)
  • Updated gogs-panel (#12466)
  • Updated and renamed vbulletin-replacead-rce.yaml to CVE-2025-48828.yaml (#12421)
  • Updated versa-director-login (#12422)
  • Updated veeam-backup-manager-login (#12399)
  • Updated misp-panel (#12390)
  • Updated privatebin-detect (#12354)
  • Updated mitel-micollab-panel (#12344)
  • Updated ActiveMQ default login & detection (#12329)
  • Updated Apache Airflow default login (#12328)
  • Updated apachespark-ui-exposed.yaml (#12289)
  • Updated tech-detect.yaml (#12274)

Templates Added

New Contributors

Read more

Contributors

yusuf, geeknik, and 33 other contributors
Loading

Nuclei Templates v10.2.3 - Release Notes

16 Jun 14:43
@princechaddha princechaddha
v10.2.3
8a23273
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
Nuclei Templates v10.2.3 - Release Notes

New Templates Added: 105 | CVEs Added: 75 | First-time contributions: 9

🔥 Release Highlights 🔥

What's Changed

Bug Fixes

  • Fixed FN in jupyter-notebooks-exposed.yaml (Issue #12260).

False Negatives

  • Improved detection in exposed-mcp-server.yaml (Issue #12269).

False Positives

  • Reduced FPs in CVE-2025-24813.yaml (Issue #12332).
  • Fixed FP in vscode-launch.yaml for custom 404 pages (Issue #12206).
  • Improved matrix-homeserver-detect.yaml to reduce FPs (Issue #12152).
  • Enhanced version detect scan to lower FPs (Issue #11698).
  • Fixed FP in CVE-2020-0618.yaml due to poor validation (Issue #11498).
  • Updated waf-detect:securesphere to filter FPs from OPNSense (Issue #12362).
  • Fixed FP in CVE-2025-4009.yaml (Issue #12343).
  • Reduced FPs in aspnet-version-detect (Issue #12211).
  • Fixed FP in rsync-list-modules.yaml (Issue #12208).
  • Lowered FPs for Apache Tomcat (Issue #12143).

Enhancements

  • Updated Jenkins default login for newer versions (Issue #12327).
  • Improved empirec2-default-login.yaml (Issue #12295).
  • Enhanced yealink-default-login.yaml (Issue #12294).
  • Updated fortinet-fortigate-panel.yaml (Issue #12275).
  • Improved favicon-detect.yaml (Issue #12273).
  • Added MCP SSE endpoint detection template (Issue #12268).
  • Updated hfs-exposure (Issue #12267).
  • Added NGSURVEY login panel detection (Issue #12261).
  • Updated versa concerto patch reference (Issue #12227).
  • Enhanced CVE-2019-7543.yaml (Issue #12230).
  • Improved discord-webhook.yaml (Issue #12224).
  • Added WP plugin & theme detection templates (Issue #12203).
  • Updated vbulletin-replacead-rce.yaml (Issue #12164).
  • Added version extract to sysaid-panel (Issue #12132).
  • Enhanced swagger-api.yaml (Issue #12091).
  • Updated phpwind-installer.yaml (Issue #12046).

Templates Added

Read more

Contributors

hdm, righettod, and 28 other contributors
Loading

v10.2.2

27 May 03:52
@princechaddha princechaddha
v10.2.2
050a2ba
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
Compare
Choose a tag to compare
v10.2.2

What's Changed

New Templates Added: 65 | CVEs Added: 41 | First-time contributions: 4

🔥 Release Highlights 🔥

Bug Fixes

  • Updated affected vBulletin versions in vbulletin-replacead-rce.yaml (Issue #12150).
  • Renamed CVE-2022-31126 to CVE-2022-31137 (Issue #12103).
  • Updated and renamed thinkphp-5022-rce.yaml to CVE-2018-20062.yaml (Issue #12096).
  • Fixed payload for CVE-2019-17444 to avoid false positives (Issue #12050).

False Negatives

  • NA

False Positives

  • Reduced false positives in Next.js cache poisoning headers (Issue #12000).
  • Fixed false positives in s3-bucket-policy-public-access.yaml (Issue #12085).

Enhancements

Templates Added

New Contributors

Full Changelog: https://github.com/projectdiscovery/nuclei-te...

Read more

Contributors

ap3r, aushack, and 19 other contributors
Loading

v10.2.1

13 May 11:06
@princechaddha princechaddha
v10.2.1
7cbcbbe
Compare
Choose a tag to compare
v10.2.1

What's Changed

New Templates Added: 41 | CVEs Added: 16 | First-time contributions: 7

🔥 Release Highlights 🔥

Bug Fixes

  • Fixed template for CVE-2025-32101 (Issue #11933).
  • Corrected false negative in CVE-2020-26948 (Issue #12056).
  • Fixed broken path to reference file causing 404 errors (Issue #11987).
  • Modified regex to accept IPs in location header (Issue #12026).
  • Updated Huawei WAF detection rule for accurate server header (Issue #12022).

False Negatives

  • Addressed pre-authentication RCE vulnerability in CraftCMS 4.x and 5.x (Issue #12020).

False Positives

  • Reduced false positives in Azure Cloud Templates (Issue #12047).
  • Fixed false positive in CVE-2022-21587 PoC affecting system (Issue #11702).

Enhancements

Template Updates

New Contributors

Full Changelog: v10.2.0...v10.2.1

Contributors

righettod, adaminfinitum, and 21 other contributors
Loading

GCP Cloud Configuration Templates - Nuclei Templates v10.2.0 🎉

27 Apr 17:31
@princechaddha princechaddha
v10.2.0
b01a0db
Compare
Choose a tag to compare
GCP Cloud Configuration Templates - Nuclei Templates v10.2.0 🎉

🔥 Release Highlights 🔥

We’re excited to announce the expansion of the Nuclei Templates with new templates specifically for Google Cloud Platform (GCP) Configurations. This release introduces a series of specialized security checks tailored for a wide range of GCP services, including Compute Engine, GKE clusters, Cloud Storage buckets, BigQuery datasets, and more. These new templates are crafted to pinpoint common misconfigurations, ensure compliance with regulatory standards, and maintain adherence to industry best practices, leveraging advanced features such as flow and code analysis.

The introduction of these GCP-specific templates empowers security teams to conduct thorough security audits of their GCP environments, uncovering critical misconfigurations and vulnerabilities. Moreover, these checks can be tailored to meet the unique operational demands of different teams, aiding in the prompt detection and remediation of security issues.

We encourage contributors and reviewers to provide their valuable feedback and suggestions to help enhance and evolve these GCP security templates further. For more details, please visit our latest blog post.

Other Highlights

What's Changed

New Templates Added: 268 | CVEs Added: 11 | First-time contributions: 4

  • [CVE-2025-34028] Commvault - SSRF via /commandcenter/deployWebpackage.do (@dhiyaneshdk, @abhishekrautela) [critical] 🔥
  • [CVE-2025-32433] Erlang/OTP SSH - Remote Code Execution (@iamnoooob, @rootxharsh, @pdresearch, @darses) [critical] 🔥
  • [CVE-2025-31324] SAP NetWeaver Visual Composer Metadata Uploader - Deserialization (@iamnoooob, @rootxharsh, @parthmalhotra, @pdresearch) [critical] 🔥
  • [CVE-2025-30406] Gladinet CentreStack < 16.4.10315.56368 - Unauth RCE (@iamnoooob, @rootxharsh, @pdresearch) [critical] 🔥
  • [CVE-2025-29306] FoxCMS v.1.2.5 - Remote Code Execution (@ritikchaddha) [critical] 🔥
  • [CVE-2025-28367] mojoPortal <=2.9.0.1 - Directory Traversal (@dhiyaneshdk) [medium]
  • [CVE-2025-27892] Shopware < 6.5.8.13 - SQL Injection (@iamnoooob, @rootxharsh, @pdresearch) [critical]
  • [CVE-2024-32870] iTop Hub Connector - Information Disclosure (@dhiyaneshdk) [medium]
  • [CVE-2024-6235] NetScaler Console - Sensitive Information Disclosure (@dhiyaneshdk) [critical] 🔥
  • [CVE-2022-35507] Proxmox - CRLF Injection (@dhiyaneshdk) [high]
  • [CVE-2022-28508] MantisBT < 2.25.2 - Cross-Site Scripting (@ritikchaddha) [medium]
  • [gcloud-api-key-restrictions-missing] Missing API Key API Restrictions (@princechaddha) [medium]
  • [gcloud-api-key-unrestricted] Unrestricted API Key Usage (@princechaddha) [medium]
  • [gcloud-api-keys-inactive-services] API Keys Should Only Exist for Active Services (@princechaddha) [low]
  • [gcloud-critical-service-apis-disabled] Critical Service APIs Not Enabled (@princechaddha) [critical]
  • [gcloud-security-center-api-disabled] Security Command Center API Disabled (@princechaddha) [high]
  • [gcloud-cloud-asset-disabled] Cloud Asset Inventory Not Enabled (@princechaddha) [high]
  • [gcloud-artifact-registry-public] Publicly Accessible Artifact Registry Repositories (@princechaddha) [high]
  • [gcloud-vuln-scan-missing] Artifact Registry Vulnerability Scanning Not Enabled (@princechaddha) [high]
  • [gcloud-bigquery-cmek-not-enabled] BigQuery Dataset Encryption with Customer-Managed Encryption Keys Not Enabled (@princechaddha) [high]
  • [gcloud-bigquery-cmk-not-enabled] BigQuery Datasets Not Encrypted with Customer-Managed Keys (@princechaddha) [high]
  • [gcloud-bigquery-public-datasets] Publicly Accessible BigQuery Datasets (@princechaddha) [high]
  • [gcloud-backend-bucket-missing-storage] Backend Buckets Referencing Missing Storage Buckets (@princechaddha) [high]
  • [gcloud-cdn-backend-bucket] Check Cloud CDN Backend Bucket Configuration (@princechaddha) [medium]
  • [gcloud-cdn-origin-auth-unconfigured] Unconfigured Cloud CDN Origin Authentication (@princechaddha) [medium]
  • [gcloud-cdn-ssl-enforcement] Cloud CDN SSL/TLS Not Enforced (@princechaddha) [medium]
  • [gcloud-cdn-tls-unenforced] Unenforced SSL/TLS on Cloud CDN Backend Service Origins (@princechaddha) [medium]
  • [gcloud-certificate-validity-exceeded] Exceeded SSL Certificate Validity Period (@princechaddha) [medium]
  • [gcloud-disk-image-public-access] Disk Images Publicly Shared (@princechaddha) [medium]
  • [gcloud-instance-group-autohealing-disabled] Instance Group Autohealing Not Enabled (@princechaddha) [high]
  • [gcloud-mig-no-load-balancer] Managed Instance Group Not Using Load Balancer (@princechaddha) [low]
  • [gcloud-mig-single-zone] Managed Instance Group Not Configured for Multiple Zones (@princechaddha) [low]
  • [gcloud-oslogin-disabled] OS Login Not Enabled for GCP Projects (@princechaddha) [low]
  • [gcloud-persistent-disks-suspended-vms] Persistent Disks Attached to Suspended Virtual Machines (@princechaddha) [high]
  • [gcloud-vm-automatic-restart-disabled] VM Instance Automatic Restart Not Enabled (@princechaddha) [medium]
  • [gcloud-vm-confidential-computing-disabled] VM Instance Confidential Computing Not Enabled (@princechaddha) [medium]
  • [gcloud-vm-default-service-account-full-access] VM Instance Using Default Service Account with Full API Access (@princechaddha) [medium]
  • [gcloud-vm-default-service-account] VM Instance Using Default Service Account (@princechaddha) [medium]
  • [gcloud-vm-deletion-protection-disabled] VM Instance Deletion Protection Not Enabled (@princechaddha) [medium]
  • [gcloud-vm-disk-autodelete-enabled] Auto-Delete Not Disabled for VM Instance Persistent Disks (@princechaddha) [medium]
  • [gcloud-vm-disk-cmk-not-enabled] Virtual Machine Disk Encryption with Customer-Managed Keys Not Enabled (@princechaddha) [high]
  • [gcloud-vm-disk-csek-disabled] VM Disk Encryption with Customer-Supplied Keys Disabled (@princechaddha) [high]
  • [gcloud-vm-disk-csek-not-enabled] Virtual Machine Disk Encryption with Customer-Supplied Keys Not Enabled (@princechaddha) [high]
  • [gcloud-vm-ip-forwarding-enabled] IP Forwarding Not Disabled for VM Instances (@princechaddha) [medium]
  • [gcloud-vm-maintenance-terminate] VM Instance Maintenance Policy Set to Terminate (@princechaddha) [high]
  • [gcloud-vm-oslogin-2fa-disabled] OS Login with 2FA Authentication Not Enabled for VM Instances (@princechaddha) [high]
  • [gcloud-vm-preemptible-enabled] VM Instance Preemptibility Not Disabled (@princechaddha) [high]
  • [gcloud-vm-project-ssh-keys-enabled] Block Project-Wide SSH Keys Not Enabled (@princechaddha) [medium]
  • [gcloud-vm-public-ip-enabled] VM Instance Using Public IP Address (@princechaddha) [high]
  • [gcloud-vm-serial-console-enabled] Interactive Serial Console Support Not Disabled (@princechaddha) [medium]
  • [gcloud-vm-shielded-disabled] Shielded VM Security Features Not Enabled (@princechaddha) [medium]
  • [gcloud-dataproc-no-cmk] Dataproc Cluster Not Using Customer-Managed Keys (@princechaddha) [high]
  • [gcloud-dataproc-public-access] Dataproc Cluster Publicly Accessible (@princechaddha) [high]
  • [gcloud-dns-dangling-records] Dangling DNS Records Check (@princechaddha) [high]
  • [gcloud-dns-dnssec-unenabled] DNSSEC Not Enabled for Google Cloud DNS Zones (@princechaddha) [medium]
  • [gcloud-dnssec-keysigning-rsasha1] DNSSEC RSASHA1 Algorithm Deprecated Usage (@princechaddha) [medium]
  • [gcloud-dnssec-rsasha1-deprecated] DNSSEC RSASHA1 Algorithm Deprecated (@princechaddha) [medium]
  • [gcloud-filestore-deletion-protection-disabled] Filestore Instance Deletion Protection Not Enabled (@princechaddha) [medium]
  • [gcloud-filestore-no-backups] Filestore Instance Not Using On-Demand Backup (@princechaddha) [high]
  • [gcloud-filestore-no-cmek] Filestore Instance Not Using Customer-Managed Encryption Keys (@princechaddha) [high]
  • [gcloud-filestore-no-vpc-controls] Filestore Instance Not Protected by VPC Service Controls (@princechaddha) [medium]
  • [gcloud-filestore-unrestricted-access] Filestore Instance Client Access Not Restricted by IP (@princechaddha) [medium]
  • [gcloud-func-auto-runtime-updates-disabled] Automatic Runtime Security Updates Disabled in Google Cloud Functions (@princechaddha) [medium]
  • [gcloud-func-cmek-not-used] No Customer-Managed Encryption Keys in Google Cloud Functions (@princechaddha) [high]
  • [gcloud-func-inactive-svc-acc] Inactive Service Accounts in Google Cloud Functions (@princechaddha) [high]
  • [gcloud-func-min-instances-unset] Unset Minimum Instances for Cloud Functions (@princechaddha) [medium]
  • [gcloud-func-missing-labels] Missing User-Defined Labels in Google Cloud Functions (@princechaddha) [low]
  • [gcloud-func-no-vpc-access] No Serverless VPC Access in Google Cloud Functions (@princechaddha) [high]
  • [gcloud-func-public-access] Publicly Accessible Google Cloud Functions (@princechaddha) [high]
  • [gcloud-func-pubsub-dlt-missing] Configure Dead Lettering for Pub/Sub-Triggered Functions (@princechaddha) [low]
  • [gcloud-func-secrets-unmanaged] Use Secrets Manager for Managing Secrets in Google Cloud Functions (@princechaddha) [medium]
  • [gcloud-func-unrestricted-outbound] Unrestricted Outbound Network Access in Google Cloud Functions (@princechaddha) [high]
  • [gcp-cloud-fu...
Read more

Contributors

righettod, matusso, and 17 other contributors
Loading

v10.1.7

12 Apr 13:43
@princechaddha princechaddha
v10.1.7
196ed9f
Compare
Choose a tag to compare
v10.1.7

What's Changed

🔥 Release Highlights 🔥

False Negatives

  • Improved detection in halo-tism-sqli.yaml (PR #11892).

False Positives

  • Reduced false positives in hashicorp-consul-unauth.yaml (Issues #11852, #11881)
  • Corrected misdetection in headless-open-redirect.yaml with specific redirect target (Issue #11885)

Enhancements

  • Applied waitdialog handling to improve detection in dom-xss.yaml (PR #11921).
  • Updated detection logic in CVE-2025-1974.yaml for Ingress-Nginx RCE (PR #11917).
  • Updated smb-shares.yaml to refine share enumeration (PR #11880).
  • Improved login detection in emqx-default-login.yaml (PR #11865).
  • Refined credential detection in apache-hertzbeat-default-login.yaml (PR #11850).

Bug Fixes

  • Fixed metadata resolution issue in ldap-metadata.yaml (PR #11922).

Template Updates

New Templates Added: 64 | CVEs Added: 28 | First-time contributions: 6

New Contributors

Full Changelog: v10.1.6...v10.1.7

Contributors

micktaiwan, nvn1729, and 20 other contributors
Loading

v10.1.6

28 Mar 11:35
@princechaddha princechaddha
v10.1.6
30af57b
Compare
Choose a tag to compare
v10.1.6

What's Changed

🔥 Release Highlights 🔥

False Negatives

False Positives

Enhancements

Bug Fixes

Template Updates

New Templates Added: 78 | CVEs Added: 45 | First-time contributions: 8

New Contributors

Read more

Contributors

lee, sean, and 30 other contributors
Loading

CSP Bypass Templates - Nuclei Templates v10.1.5 🎉

10 Mar 12:01
@princechaddha princechaddha
v10.1.5
f41c1e9
Compare
Choose a tag to compare
CSP Bypass Templates - Nuclei Templates v10.1.5 🎉

🔥 Release Highlights 🔥

With this release, we are adding new CSP Bypass (DAST) Nuclei Templates to help security teams and bug hunters efficiently identify Content Security Policy (CSP) misconfigurations. These templates automate the detection of CSP bypass techniques, allowing testers to analyze real-world attack scenarios where CSP restrictions can be circumvented in the presence of existing XSS vulnerabilities.

We encourage contributors and reviewers to provide their valuable feedback and suggestions to help enhance and update these CSP Bypass templates further. For more details, please visit our latest blog post.

Other Highlights

What's Changed

New Templates Added: 281 | CVEs Added: 23 | First-time contributions: 4

Read more

Contributors

eric, geeknik, and 24 other contributors
Loading

v10.1.3

21 Feb 18:41
@princechaddha princechaddha
v10.1.3
b98b28b
Compare
Choose a tag to compare
v10.1.3

What's Changed

🔥 Release Highlights 🔥

False Negatives

  • [FALSE-NEGATIVE] wp-user-enum.yaml #11533
    Fix FN wp-user-enum.yaml #11556

False Positives

Enhancements

  • Update CVE-2023-26360.yaml #11524
  • Update Duplicate id #11530
  • Update prestashop-cartabandonmentpro-file-upload.yaml (Added Additional Path) #11573
  • fix(apache): make reference links correct #11604
  • Add new title support for jenkins-openuser-register.yaml #11606
  • Update siteminder-dom-xss.yaml #11613
  • Update CVE-2020-11710.yaml #11619
  • Update fingerprinthub-web-fingerprints.yaml #11622
  • Disabling redirects for mixed-active-content template #11628
  • Refactor the "NETDATA" template. #11629

Bug Fixes

  • NA

Template Updates

New Templates Added: 52 | CVEs Added: 25 | First-time contributions: 11

New Contributors

Full Changelog: v10.1.2...v10.1.3

Contributors

lee, chirag, and 25 other contributors
Loading