v9.4.0

projectdiscovery/nuclei-templatesv9.4.0Mar 18, 2023by ehsandeep

AI Summary

Released with 65 new templates and a fix for CVE-2022-45362, focusing on token exposure, PHP vulnerabilities, and misconfigurations.

Key Highlights

Added 65 new templates and fixed a critical CVE.
Focused on exposure of sensitive tokens (GitHub, GitLab, AWS).
Included PHP Xdebug RCE and PHPMyAdmin unauth templates.

New Features

Fixed CVE-2022-45362
Token exposures for GitHub, GitLab, AWS, and Heroku
PHP Xdebug RCE vulnerability template
Apache Nifi and Magnolia misconfigurations
Exposed panels for Veriz0wn OSINT

Full Release Notes

## What's Changed

- Fixed cves/2022/CVE-2022-45362.yaml by @Bisstocuz 

### New Templates Added: 65
- cves/2023/CVE-2023-26255.yaml by @DhiyaneshDK
- cves/2023/CVE-2023-26256.yaml by @pikpikcu
- cves/2022/CVE-2022-47002.yaml by @iamnoooob,@rootxharsh,@pdresearch
- cves/2022/CVE-2022-47003.yaml by @iamnoooob,@rootxharsh,@pdresearch
- cves/2019/CVE-2019-6799.yaml by @pwnhxl
- cves/2017/CVE-2017-14524.yaml by @0x_Akoko
- cves/2015/CVE-2015-2863.yaml by @0x_Akoko
- vulnerabilities/other/brightsign-dsdws-ssrf.yaml by @0x_Akoko
- vulnerabilities/php/php-xdebug-rce.yaml by @pwnhxl
- vulnerabilities/phpmyadmin-unauth.yaml by @pwnhxl
- vulnerabilities/ueditor/ueditor-ssrf.yaml by @pwnhxl
- vulnerabilities/ueditor/ueditor-xss.yaml by @pwnhxl
- misconfiguration/apache/apache-nifi-unauth.yaml by @pwnhxl
- misconfiguration/everything-listing.yaml by @pussycat0x
- misconfiguration/installer/magnolia-installer.yaml by @pussycat0x
- misconfiguration/laravel-debug-infoleak.yaml by @pwnhxl
- default-logins/magnolia-default-login.yaml by @pussycat0x
- exposed-panels/magnolia-panel.yaml by @pussycat0x
- exposed-panels/veriz0wn-osint.yaml by @pussycat0x
- exposures/files/reactapp-env-js.yaml by @random-robbie
- exposures/tokens/adobe/adobe-oauth-secret.yaml by @DhiyaneshDK
- exposures/tokens/age/age-public-key.yaml by @DhiyaneshDK
- exposures/tokens/age/age-secret-key.yaml by @DhiyaneshDK
- exposures/tokens/amazon/aws-account-id.yaml by @DhiyaneshDK
- exposures/tokens/amazon/aws-api-key.yaml by @DhiyaneshDK
- exposures/tokens/amazon/aws-session-token.yaml by @DhiyaneshDK
- exposures/tokens/codeclimate/codeclimate-token.yaml by @DhiyaneshDK
- exposures/tokens/crates/crates-api-key.yaml by @DhiyaneshDK
- exposures/tokens/dynatrace/dynatrace-api-token.yaml by @DhiyaneshDK
- exposures/tokens/facebook/facebook-access-token.yaml by @DhiyaneshDK
- exposures/tokens/github/github-app.yaml by @DhiyaneshDK
- exposures/tokens/github/github-oauth-access.yaml by @DhiyaneshDK
- exposures/tokens/github/github-personal-access.yaml by @DhiyaneshDK
- exposures/tokens/github/github-refresh.yaml by @DhiyaneshDK
- exposures/tokens/gitlab/gitlab-personal-token.yaml by @DhiyaneshDK
- exposures/tokens/gitlab/gitlab-pipeline-token.yaml by @DhiyaneshDK
- exposures/tokens/gitlab/gitlab-runner-token.yaml by @DhiyaneshDK
- exposures/tokens/google/google-client-id.yaml by @DhiyaneshDK
- exposures/tokens/google/google-oauth-prefixed.yaml by @DhiyaneshDK
- exposures/tokens/heroku/heroku-api-key.yaml by @DhiyaneshDK
- exposures/tokens/jenkins/jenkins-crumb-token.yaml by @DhiyaneshDK
- exposures/tokens/mailgun/mailgun-api-token.yaml by @DhiyaneshDK
- exposures/tokens/newrelic/newrelic-pixie-api-key.yaml by @DhiyaneshDK
- exposures/tokens/newrelic/newrelic-pixie-deploy-key.yaml by @DhiyaneshDK
- exposures/tokens/npm/npm-access-token.yaml by @DhiyaneshDK
- exposures/tokens/nuget/nuget-api-key.yaml by @DhiyaneshDK
- exposures/tokens/openai/openai-api-key.yaml by @DhiyaneshDK
- exposures/tokens/pypi/pypi-upload-token.yaml by @DhiyaneshDK
- exposures/tokens/ruby/rubygems-api-key.yaml by @DhiyaneshDK
- exposures/tokens/sauce/sauce-token.yaml by @DhiyaneshDK
- exposures/tokens/segment/segment-public-token.yaml by @DhiyaneshDK
- exposures/tokens/shopify/shopify-app-secret.yaml by @DhiyaneshDK
- exposures/tokens/shopify/shopify-customapp-token.yaml by @DhiyaneshDK
- exposures/tokens/shopify/shopify-legacy-token.yaml by @DhiyaneshDK
- exposures/tokens/shopify/shopify-public-token.yaml by @DhiyaneshDK
- exposures/tokens/square/square-access.yaml by @DhiyaneshDK
- exposures/tokens/square/square-oauth-secret-token.yaml by @DhiyaneshDK
- exposures/tokens/stackhawk/stackhawk-api.yaml by @DhiyaneshDK
- exposures/tokens/telegram/telegram-bot-token.yaml by @DhiyaneshDK
- exposures/tokens/twilio/twilio-api-key.yaml by @DhiyaneshDK
- technologies/nacos-version.yaml by @Arm!tage
- osint/couchsurfing.yaml by @philippedelteil
- ssl/revoked-ssl-certificate.yaml by @pussycat0x
- file/js/js-analyse.yaml by @ayadim
- file/audit/pfsense/set-hostname.yaml by @pussycat0x

## New Contributors
* @ayadim made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/6868
* @Bisstocuz made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/6914

**Full Changelog**: https://github.com/projectdiscovery/nuclei-templates/compare/v9.3.9...v9.4.0