Starstruk Logo MarkStarstruk

v9.6.0

projectdiscovery/nuclei-templatesv9.6.0Jul 28, 2023by ehsandeep

AI Summary

Added templates for critical vulnerabilities in management platforms and CMS, including Metabase, Cloudpanel, and XWiki.

Key Highlights

  • Added Ivanti EPMM Authentication Bypass (CVE-2023-35078)
  • Added Metabase PreAuth RCE (CVE-2023-38646)
  • Added Cloudpanel RCE (CVE-2023-35885)
  • Added XWiki Platform RCE (CVE-2023-37462)

New Features

  • 18 new templates added
  • Management platform vulnerability coverage
  • Panel detection for CasaOS and MobileIron Sentry

Full Release Notes

## What's Changed

* Added CVE-2023-35078 (**Ivanti EPMM - Authentication Bypass**) by @parthmalhotra @ehsandeep in https://github.com/projectdiscovery/nuclei-templates/pull/7785
* Added CVE-2023-38646 (**Metabase PreAuth RCE**) by @iamnoooob @rootxharsh  in https://github.com/projectdiscovery/nuclei-templates/pull/7777
* Added CVE-2023-37265, CVE-2023-37266 (**CasaOS Authentication Bypass**) by @DhiyaneshGeek in https://github.com/projectdiscovery/nuclei-templates/pull/7766
* Added CVE-2023-35885 (**Cloudpanel 2 - Remote Code Execution**) by @DhiyaneshGeek in https://github.com/projectdiscovery/nuclei-templates/pull/7771
* Added CVE-2023-37462 (**XWiki Platform - Remote Code Execution**) by @parthmalhotra in https://github.com/projectdiscovery/nuclei-templates/pull/7738
* Added CVE-2023-38205 by @DhiyaneshGeek in https://github.com/projectdiscovery/nuclei-templates/pull/7727
* Added CVE-2023-23161 by @ctflearner in https://github.com/projectdiscovery/nuclei-templates/pull/7742
* Added CVE-2023-3836 by @HuTa0kj in https://github.com/projectdiscovery/nuclei-templates/pull/7768
* Added CVE-2023-3765 by @DhiyaneshGeek in https://github.com/projectdiscovery/nuclei-templates/pull/7732
* Added CVE-2023-2178 by @ritikchaddha in https://github.com/projectdiscovery/nuclei-templates/pull/7760
* Added CVE-2022-23102 by @ctflearner in https://github.com/projectdiscovery/nuclei-templates/pull/7449
* Added CVE-2021-44139 by @DhiyaneshGeek in https://github.com/projectdiscovery/nuclei-templates/pull/7759
* Added CVE-2021-27670 by @ritikchaddha in https://github.com/projectdiscovery/nuclei-templates/pull/7761
* Added CVE-2018-20608 by @ritikchaddha in https://github.com/projectdiscovery/nuclei-templates/pull/7765
* Added CVE-2012-4032 by @ctflearner in https://github.com/projectdiscovery/nuclei-templates/pull/7435
* Added elasticsearch-default-login by @DhiyaneshGeek in https://github.com/projectdiscovery/nuclei-templates/pull/7754
* Added jupyter-notebook-rce by @HuTa0kj in https://github.com/projectdiscovery/nuclei-templates/pull/7716
* Added skype-blind-ssrf by @DhiyaneshGeek in https://github.com/projectdiscovery/nuclei-templates/pull/7726
* Added springboot-detect by @MillerMedia in https://github.com/projectdiscovery/nuclei-templates/pull/7659
* Added tongda-online-user-login by @HuTa0kj in https://github.com/projectdiscovery/nuclei-templates/pull/7715
* Alibaba Anyproxy fetchBody File Path Traversal by @DhiyaneshGeek in https://github.com/projectdiscovery/nuclei-templates/pull/7779
* Added NginxWebUI ≤ 3.5.0 runCmd - Remote Command Execution by @DhiyaneshGeek in https://github.com/projectdiscovery/nuclei-templates/pull/7778
* Added booked-export-csv by @DhiyaneshGeek in https://github.com/projectdiscovery/nuclei-templates/pull/7755
* Added casaos-detect by @ehsandeep in https://github.com/projectdiscovery/nuclei-templates/pull/7747
* Added casaos-panel by @DhiyaneshGeek in https://github.com/projectdiscovery/nuclei-templates/pull/7733
* Added cisco-smart-software-manager-on-prem by @Zinkuth in https://github.com/projectdiscovery/nuclei-templates/pull/7776
* Added MobileIron Sentry Panel detection by @ehsandeep in https://github.com/projectdiscovery/nuclei-templates/pull/7772

## New Contributors
* @yaabdala made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7722
* @HuTa0kj made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7715
* @professorabhay made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7697
* @Zinkuth made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7776

**Full Changelog**: https://github.com/projectdiscovery/nuclei-templates/compare/v9.5.8...v9.5.9