v9.5.0

projectdiscovery/nuclei-templatesv9.5.0May 11, 2023by princechaddha

AI Summary

Major refactoring of the directory structure, addition of metadata auto-generation, and updates to Log4j templates.

Key Highlights

  • Organized and categorized directory structure for improved management
  • Auto-generated max-request counter for each template
  • Log4j templates update to address potential false positives
  • Curated KEV & Trending CVEs

Breaking Changes

  • Directory structure refactoring
  • Template metadata changes (max-request counter)

New Features

  • Directory reorganization
  • Metadata auto-generation
  • CVE template enhancements

Full Release Notes

### Release Highlight:

1. **Nuclei Templates Refactoring**: organized and categorized directory structure for improved management of nuclei templates.
2. **Enhanced CVE Templates**: more comprehensive vulnerability analysis with added information like [CPE](https://nvd.nist.gov/products/cpe) and [EPSS Score](https://www.first.org/epss).
3. **Template Metadata**: auto-generated `max-request` counter to each template, allowing easy filtering and visibility of maximum request.
4. **Log4j Templates Update**: updated templates addressing potential false positives related to **Log4j**.
5. **KEV & Trending CVEs**: a curated selection of noteworthy [Known Exploited Vulnerabilities (KEV)](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) and [Trending CVEs](https://cvetrends.com), highlighted with 🔥.

See [nuclei-templates v9.5.0](https://github.com/projectdiscovery/nuclei-templates/milestone/2?closed=1), https://github.com/projectdiscovery/nuclei/discussions/3648, https://blog.projectdiscovery.io/nuclei-template-v9-5-0-update/ for more details.

-----

### New Templates Added : `61`

- **http/cves/2023/CVE-2023-32235.yaml** by @j3ssie 🔥
- http/cves/2023/CVE-2023-31059.yaml by @parthmalhotra,@pdresearch
- http/cves/2023/CVE-2023-30212.yaml by @theamanrawat
- http/cves/2023/CVE-2023-30210.yaml by @theamanrawat
- http/cves/2023/CVE-2023-29922.yaml by @Co5mos
- http/cves/2023/CVE-2023-29489.yaml by @DhiyaneshDK
- http/cves/2023/CVE-2023-27524.yaml by @DhiyaneshDK,@0xf4n9x
- http/cves/2023/CVE-2023-27350.yaml by @rootxharsh,@iamnoooob,@pdresearch 🔥
- **http/cves/2023/CVE-2023-26360.yaml** by @DhiyaneshDK 🔥
- **http/cves/2023/CVE-2023-25135.yaml** by @iamnoooob,@rootxharsh,@pdresearch 🔥
- **http/cves/2023/CVE-2023-20864.yaml** by @rootxharsh,@iamnoooob,@pdresearch 🔥
- **http/cves/2023/CVE-2023-1671.yaml** by @Co5mos 🔥
- http/cves/2023/CVE-2023-1020.yaml by @theamanrawat
- http/cves/2022/CVE-2022-46020.yaml by @theamanrawat
- http/cves/2022/CVE-2022-45038.yaml by @theamanrawat
- http/cves/2022/CVE-2022-45037.yaml by @theamanrawat
- http/cves/2022/CVE-2022-4328.yaml by @theamanrawat
- http/cves/2022/CVE-2022-42096.yaml by @theamanrawat
- http/cves/2022/CVE-2022-42095.yaml by @theamanrawat
- http/cves/2022/CVE-2022-3980.yaml by dabla
- http/cves/2022/CVE-2022-27985.yaml by @theamanrawat
- http/cves/2022/CVE-2022-27984.yaml by @theamanrawat
- http/cves/2022/CVE-2022-24716.yaml by @DhiyaneshDK 🔥
- http/cves/2022/CVE-2022-24266.yaml by @theamanrawat
- http/cves/2022/CVE-2022-24265.yaml by @theamanrawat
- http/cves/2022/CVE-2022-24264.yaml by @theamanrawat
- http/cves/2021/CVE-2021-44228.yaml by @melbadry9
- http/cves/2021/CVE-2021-30175.yaml by @edoardottt
- http/cves/2021/CVE-2021-27320.yaml by @theamanrawat
- http/cves/2021/CVE-2021-27319.yaml by @theamanrawat
- http/cves/2021/CVE-2021-27316.yaml by @theamanrawat
- http/cves/2021/CVE-2021-27315.yaml by @theamanrawat
- http/cves/2021/CVE-2021-27314.yaml by @theamanrawat
- http/cves/2020/CVE-2020-27481.yaml by @edoardottt
- http/cves/2019/CVE-2019-3398.yaml by @rootxharsh,@iamnoooob,@pdresearch
- http/cves/2017/CVE-2017-17731.yaml by @j4vaovo
- http/vulnerabilities/apache/apache-druid-kafka-connect-rce.yaml by @j4vaovo
- http/vulnerabilities/generic/generic-env.yaml by @kazet
- http/vulnerabilities/wordpress/advanced-booking-calendar-sqli.yaml by @theamanrawat
- http/vulnerabilities/wordpress/wp-autosuggest-sql-injection.yaml by @theamanrawat
- http/vulnerabilities/wordpress/wpml-xss.yaml by @bugvsme
- http/misconfiguration/apache/apache-zeppelin-unauth.yaml by @j4vaovo
- http/default-logins/powerjob-default-login.yaml by @j4vaovo
- http/default-logins/umami/umami-default-login.yaml by @barthy.koeln
- http/exposures/configs/platformio-ini.yaml by @DhiyaneshDK
- http/exposures/logs/nginx-shards.yaml by @DhiyaneshDK
- http/exposures/tokens/postman/postman-key.yaml by @DhiyaneshDK
- http/exposed-panels/eclipse-birt-panel.yaml by Shiva (Strobes Security)
- http/exposed-panels/jedox-web-panel.yaml by Team Syslifters
- http/exposed-panels/oracle-opera-login.yaml by @DhiyaneshDK
- http/exposed-panels/papercut-ng-panel.yaml by @ritikchaddha
- http/exposed-panels/proxmox-panel.yaml by @lum8rjack
- http/exposed-panels/red-lion-panel.yaml by @ritikchaddha
- http/exposed-panels/sophos-web-appliance.yaml by @DhiyaneshDk
- network/enumeration/smtp-commands-enum.yaml by @pussycat0x
- network/enumeration/smtp/smtp-user-enum.yaml by @pussycat0x
- http/fuzzing/ssrf-via-proxy.yaml by @geeknik,@petergrifin
- http/fuzzing/waf-fuzz.yaml by @dwisiswant0,@lu4nx,@Myst7ic
- http/osint/mail-archive.yaml by @lu4nx
- http/technologies/wordpress/plugins/gdpr-cookie-compliance.yaml by @ricardomaia
- file/keys/postman-api-key.yaml by @DhiyaneshDK
- headless/technologies/sap-spartacus.yaml by @TechbrunchFR

## New Contributors
* @lum8rjack made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7110
* @barthy-koeln made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7164
* @mlec1 made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/6967
* @ViCrack made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7182
* @j3ssie made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7188
* @chucklesb made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7195
* @david-bla made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7203
* @avisscr made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7172

**Full Changelog**: https://github.com/projectdiscovery/nuclei-templates/compare/v9.4.3...v9.4.4