v9.5.0
projectdiscovery/nuclei-templatesv9.5.0May 11, 2023by princechaddha
AI Summary
Major refactoring of the directory structure, addition of metadata auto-generation, and updates to Log4j templates.
Key Highlights
- Organized and categorized directory structure for improved management
- Auto-generated max-request counter for each template
- Log4j templates update to address potential false positives
- Curated KEV & Trending CVEs
Breaking Changes
- Directory structure refactoring
- Template metadata changes (max-request counter)
New Features
- Directory reorganization
- Metadata auto-generation
- CVE template enhancements
Full Release Notes
### Release Highlight: 1. **Nuclei Templates Refactoring**: organized and categorized directory structure for improved management of nuclei templates. 2. **Enhanced CVE Templates**: more comprehensive vulnerability analysis with added information like [CPE](https://nvd.nist.gov/products/cpe) and [EPSS Score](https://www.first.org/epss). 3. **Template Metadata**: auto-generated `max-request` counter to each template, allowing easy filtering and visibility of maximum request. 4. **Log4j Templates Update**: updated templates addressing potential false positives related to **Log4j**. 5. **KEV & Trending CVEs**: a curated selection of noteworthy [Known Exploited Vulnerabilities (KEV)](https://www.cisa.gov/known-exploited-vulnerabilities-catalog) and [Trending CVEs](https://cvetrends.com), highlighted with 🔥. See [nuclei-templates v9.5.0](https://github.com/projectdiscovery/nuclei-templates/milestone/2?closed=1), https://github.com/projectdiscovery/nuclei/discussions/3648, https://blog.projectdiscovery.io/nuclei-template-v9-5-0-update/ for more details. ----- ### New Templates Added : `61` - **http/cves/2023/CVE-2023-32235.yaml** by @j3ssie 🔥 - http/cves/2023/CVE-2023-31059.yaml by @parthmalhotra,@pdresearch - http/cves/2023/CVE-2023-30212.yaml by @theamanrawat - http/cves/2023/CVE-2023-30210.yaml by @theamanrawat - http/cves/2023/CVE-2023-29922.yaml by @Co5mos - http/cves/2023/CVE-2023-29489.yaml by @DhiyaneshDK - http/cves/2023/CVE-2023-27524.yaml by @DhiyaneshDK,@0xf4n9x - http/cves/2023/CVE-2023-27350.yaml by @rootxharsh,@iamnoooob,@pdresearch 🔥 - **http/cves/2023/CVE-2023-26360.yaml** by @DhiyaneshDK 🔥 - **http/cves/2023/CVE-2023-25135.yaml** by @iamnoooob,@rootxharsh,@pdresearch 🔥 - **http/cves/2023/CVE-2023-20864.yaml** by @rootxharsh,@iamnoooob,@pdresearch 🔥 - **http/cves/2023/CVE-2023-1671.yaml** by @Co5mos 🔥 - http/cves/2023/CVE-2023-1020.yaml by @theamanrawat - http/cves/2022/CVE-2022-46020.yaml by @theamanrawat - http/cves/2022/CVE-2022-45038.yaml by @theamanrawat - http/cves/2022/CVE-2022-45037.yaml by @theamanrawat - http/cves/2022/CVE-2022-4328.yaml by @theamanrawat - http/cves/2022/CVE-2022-42096.yaml by @theamanrawat - http/cves/2022/CVE-2022-42095.yaml by @theamanrawat - http/cves/2022/CVE-2022-3980.yaml by dabla - http/cves/2022/CVE-2022-27985.yaml by @theamanrawat - http/cves/2022/CVE-2022-27984.yaml by @theamanrawat - http/cves/2022/CVE-2022-24716.yaml by @DhiyaneshDK 🔥 - http/cves/2022/CVE-2022-24266.yaml by @theamanrawat - http/cves/2022/CVE-2022-24265.yaml by @theamanrawat - http/cves/2022/CVE-2022-24264.yaml by @theamanrawat - http/cves/2021/CVE-2021-44228.yaml by @melbadry9 - http/cves/2021/CVE-2021-30175.yaml by @edoardottt - http/cves/2021/CVE-2021-27320.yaml by @theamanrawat - http/cves/2021/CVE-2021-27319.yaml by @theamanrawat - http/cves/2021/CVE-2021-27316.yaml by @theamanrawat - http/cves/2021/CVE-2021-27315.yaml by @theamanrawat - http/cves/2021/CVE-2021-27314.yaml by @theamanrawat - http/cves/2020/CVE-2020-27481.yaml by @edoardottt - http/cves/2019/CVE-2019-3398.yaml by @rootxharsh,@iamnoooob,@pdresearch - http/cves/2017/CVE-2017-17731.yaml by @j4vaovo - http/vulnerabilities/apache/apache-druid-kafka-connect-rce.yaml by @j4vaovo - http/vulnerabilities/generic/generic-env.yaml by @kazet - http/vulnerabilities/wordpress/advanced-booking-calendar-sqli.yaml by @theamanrawat - http/vulnerabilities/wordpress/wp-autosuggest-sql-injection.yaml by @theamanrawat - http/vulnerabilities/wordpress/wpml-xss.yaml by @bugvsme - http/misconfiguration/apache/apache-zeppelin-unauth.yaml by @j4vaovo - http/default-logins/powerjob-default-login.yaml by @j4vaovo - http/default-logins/umami/umami-default-login.yaml by @barthy.koeln - http/exposures/configs/platformio-ini.yaml by @DhiyaneshDK - http/exposures/logs/nginx-shards.yaml by @DhiyaneshDK - http/exposures/tokens/postman/postman-key.yaml by @DhiyaneshDK - http/exposed-panels/eclipse-birt-panel.yaml by Shiva (Strobes Security) - http/exposed-panels/jedox-web-panel.yaml by Team Syslifters - http/exposed-panels/oracle-opera-login.yaml by @DhiyaneshDK - http/exposed-panels/papercut-ng-panel.yaml by @ritikchaddha - http/exposed-panels/proxmox-panel.yaml by @lum8rjack - http/exposed-panels/red-lion-panel.yaml by @ritikchaddha - http/exposed-panels/sophos-web-appliance.yaml by @DhiyaneshDk - network/enumeration/smtp-commands-enum.yaml by @pussycat0x - network/enumeration/smtp/smtp-user-enum.yaml by @pussycat0x - http/fuzzing/ssrf-via-proxy.yaml by @geeknik,@petergrifin - http/fuzzing/waf-fuzz.yaml by @dwisiswant0,@lu4nx,@Myst7ic - http/osint/mail-archive.yaml by @lu4nx - http/technologies/wordpress/plugins/gdpr-cookie-compliance.yaml by @ricardomaia - file/keys/postman-api-key.yaml by @DhiyaneshDK - headless/technologies/sap-spartacus.yaml by @TechbrunchFR ## New Contributors * @lum8rjack made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7110 * @barthy-koeln made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7164 * @mlec1 made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/6967 * @ViCrack made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7182 * @j3ssie made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7188 * @chucklesb made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7195 * @david-bla made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7203 * @avisscr made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7172 **Full Changelog**: https://github.com/projectdiscovery/nuclei-templates/compare/v9.4.3...v9.4.4