v9.4.1

projectdiscovery/nuclei-templatesv9.4.1Mar 27, 2023by princechaddha

AI Summary

Added 69 new templates focusing on CVEs, specific vulnerabilities like Gitea RCE and Splash SSRF, and various file keys.

Key Highlights

Added 69 new templates including critical vulnerabilities.
Expanded file keys detection for Adobe, Age, Amazon, and Google.
Included exposed panels for Cobalt Strike C2.

New Features

CVE-2023-28432, CVE-2023-28343
Gitea RCE vulnerability template
Splash Render SSRF vulnerability
Cobalt Strike C2 exposed panel
File keys for Adobe, Age, Amazon, Google, and more

Full Release Notes

## What's Changed

### New Templates Added : `69`

- cves/2023/CVE-2023-28432.yaml by @Mr-xn 🔥
- cves/2023/CVE-2023-28343.yaml by @pikpikcu 🔥
- cves/2023/CVE-2023-27587.yaml by @vagnerd
- cves/2023/CVE-2023-27292.yaml by @r3Y3r53
- cves/2023/CVE-2023-0261.yaml by @theamanrawat
- cves/2023/CVE-2023-0236.yaml by @r3Y3r53
- cves/2022/CVE-2022-31854.yaml by @theamanrawat
- cves/2022/CVE-2022-26833.yaml by @true13
- cves/2022/CVE-2022-4325.yaml by @r3Y3r53
- cves/2022/CVE-2022-4320.yaml by @r3Y3r53
- cves/2022/CVE-2022-4117.yaml by @theamanrawat
- cves/2022/CVE-2022-3933.yaml by @r3Y3r53
- cves/2022/CVE-2022-3908.yaml by @theamanrawat
- cves/2022/CVE-2022-3800.yaml by @JC175
- cves/2022/CVE-2022-1398.yaml by @theamanrawat
- cves/2022/CVE-2022-1329.yaml by @theamanrawat 🔥
- cves/2022/CVE-2022-0415.yaml by @theamanrawat
- cves/2022/CVE-2022-0206.yaml by @r3Y3r53
- cves/2021/CVE-2021-28419.yaml by @theamanrawat
- cves/2021/CVE-2021-24970.yaml by @r3Y3r53
- cves/2021/CVE-2021-24862.yaml by @theamanrawat
- cves/2021/CVE-2021-24452.yaml by @theamanrawat
- cves/2021/CVE-2021-24436.yaml by @theamanrawat
- cves/2020/CVE-2020-11530.yaml by @theamanrawat
- cves/2020/CVE-2020-14144.yaml by @theamanrawat
- cves/2020/CVE-2020-15867.yaml by @theamanrawat
- cves/2020/CVE-2020-7107.yaml by @theamanrawat
- vulnerabilities/gitea/gitea-rce.yaml by @theamanrawat
- vulnerabilities/splash/splash-render-ssrf.yaml by @pwnhxl
- exposed-panels/c2/cobalt-strike-c2.yaml by @pussycat0x
- misconfiguration/httponly-cookie-detect.yaml by Mr. Bobo HP
- misconfiguration/installer/gogs-installer.yaml by @dhiyaneshDk
- misconfiguration/nacos-authentication-bypass.yaml by @Esonhugh
- misconfiguration/unauth-apache-kafka-ui.yaml by @theamanrawat
- token-spray/api-networksdb.yaml by @0xpugazh
- ssl/untrusted-root-certificate.yaml by @pussycat0x
- file/audit/pfsense/configure-dns-server.yaml by @pussycat0x
- file/audit/pfsense/configure-session-timeout.yaml by @pussycat0x
- file/audit/pfsense/enable-https-protocol.yaml by @pussycat0x
- file/audit/pfsense/password-protected-consolemenu.yaml by @pussycat0x
- file/keys/adobe-secret.yaml by @DhiyaneshDK
- file/keys/age/age-identity-secret-key.yaml by @DhiyaneshDK
- file/keys/age/age-recipient-public-key.yaml by @DhiyaneshDK
- file/keys/amazon/amazon-account-id.yaml by @DhiyaneshDK
- file/keys/amazon/amazon-session-token.yaml by @DhiyaneshDK
- file/keys/code-climate-token.yaml by @DhiyaneshDK
- file/keys/cratesio-api-key.yaml by @DhiyaneshDK
- file/keys/facebook/fb-access-token.yaml by @DhiyaneshDK
- file/keys/gitlab/gitlab-personal-accesstoken.yaml by @DhiyaneshDK
- file/keys/gitlab/gitlab-pipeline-triggertoken.yaml by @DhiyaneshDK
- file/keys/gitlab/gitlab-runner-regtoken.yaml by @DhiyaneshDK
- file/keys/google/google-clientid.yaml by @DhiyaneshDK
- file/keys/google/google-oauth-clientsecret.yaml by @DhiyaneshDK
- file/keys/heroku-key.yaml by @DhiyaneshDK
- file/keys/jenkins-token.yaml by @DhiyaneshDK
- file/keys/newrelic/newrelic-pixie-apikey.yaml by @DhiyaneshDK
- file/keys/newrelic/newrelic-pixie-deploykey.yaml by @DhiyaneshDK
- file/keys/npm-accesstoken.yaml by @DhiyaneshDK
- file/keys/nuget-key.yaml by @DhiyaneshDK
- file/keys/openai-key.yaml by @DhiyaneshDK
- file/keys/pypi-token.yaml by @DhiyaneshDK
- file/keys/rubygems-key.yaml by @DhiyaneshDK
- file/keys/sauce-access-token.yaml by @DhiyaneshDK
- file/keys/segment-public-api.yaml by @DhiyaneshDK
- file/keys/shopify-public-access.yaml by @DhiyaneshDK
- file/keys/telegram-token.yaml by @DhiyaneshDK
- technologies/icecast-mediaserver-detect.yaml by @pussycat0x
- technologies/splash-rendering-service.yaml by @pussycat0x
- technologies/thinkphp-detect.yaml by @pwnhxl

## New Contributors
* @vagnerd made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/6903
* @Esonhugh made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/6912
* @kazet made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/6931
* @JC175 made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/6772
* @ThePirateWhoSmellsOfSunflowers made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/6939
* @sl4x0 made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/6943
* @MrHarshvardhan made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/6756

**Full Changelog**: https://github.com/projectdiscovery/nuclei-templates/compare/v9.4.0...v9.4.1