v9.6.2

projectdiscovery/nuclei-templatesv9.6.2Aug 24, 2023by princechaddha

AI Summary

Focused on critical authentication bypasses and command injection vulnerabilities in networking and VPN hardware, as well as enterprise software like Harbor.

Key Highlights

Added critical Ivanti Sentry Authentication Bypass (CVE-2023-38035)
Added critical RaspAP Command Injection (CVE-2022-39986)
Added critical ThinVNC Authentication Bypass (CVE-2019-17662)
Added Harbor Unauthorized Access (CVE-2022-46463)

New Features

60 new templates added
15 new CVEs added
Networking hardware vulnerability coverage

Full Release Notes

🔥 Highlight of this release:

[CVE-2023-38035] **Ivanti Sentry - Authentication Bypass** (@dhiyaneshdk,@iamnoooob,@rootxharsh) [critical] 🔥
[CVE-2022-47615] **LearnPress Plugin < 4.2.0 - Local File Inclusion** (@dhiyaneshdk) [critical] 🔥
[CVE-2022-46463] **Harbor <=2.5.3 - Unauthorized Access** (@arm!tage) [high] 🔥
[CVE-2022-39986] **RaspAP 2.8.7 - Unauthenticated Command Injection** (@dhiyaneshdk) [critical] 🔥
[CVE-2019-17662] **ThinVNC 1.0b1 - Authentication Bypass** (@dhiyaneshdk) [critical] 🔥

## What's Changed

### New Templates Added : `60`
### New CVEs Added: `15`
### First-time contributions: `7`
----
- http/cves/2023/CVE-2023-39141.yaml by @DhiyaneshDk
- http/cves/2023/CVE-2023-38035.yaml by @DhiyaneshDk,@iamnoooob,@rootxharsh 🔥
- http/cves/2023/CVE-2023-4173.yaml by @momika233
- http/cves/2023/CVE-2023-3936.yaml by @luisfelipe146
- http/cves/2022/CVE-2022-47615.yaml by @DhiyaneshDK 🔥
- http/cves/2022/CVE-2022-46463.yaml by @Arm!tage 🔥
- http/cves/2022/CVE-2022-39986.yaml by @DhiyaneshDK 🔥
- http/cves/2022/CVE-2022-1756.yaml by harsh
- http/cves/2021/CVE-2021-41460.yaml by @SleepingBag945
- http/cves/2021/CVE-2021-25065.yaml by harsh
- http/cves/2021/CVE-2021-24956.yaml by @ritikchaddha
- http/cves/2021/CVE-2021-24409.yaml by harsh
- http/cves/2019/CVE-2019-17662.yaml by @DhiyaneshDK 🔥
- http/cves/2019/CVE-2019-1898.yaml by @SleepingBag945
- http/cves/2015/CVE-2015-9323.yaml by Harsh
- http/cnvd/2023/CNVD-2023-08743.yaml by @SleepingBag945
- http/vulnerabilities/74cms/74cms-weixin-sqli.yaml by @SleepingBag945
- http/vulnerabilities/finereport/fine-report-v9-file-upload.yaml by @SleepingBag945
- http/vulnerabilities/jinhe/jinhe-oa-c6-lfi.yaml by @SleepingBag945
- http/vulnerabilities/other/apache-druid-log4j.yaml by @SleepingBag945
- http/vulnerabilities/other/aspcms-commentlist-sqli.yaml by @SleepingBag945
- http/vulnerabilities/other/caimore-gateway-rce.yaml by @momika233
- http/vulnerabilities/other/flir-ax8-rce.yaml by @momika233
- http/vulnerabilities/other/h3c-cvm-arbitrary-file-upload.yaml by @SleepingBag945
- http/vulnerabilities/other/hanta-rce.yaml by @momika233
- http/vulnerabilities/other/hikvision-isecure-center-rce.yaml by @SleepingBag945
- http/vulnerabilities/other/hongfan-ioffice-lfi.yaml by @SleepingBag945
- http/vulnerabilities/other/hongfan-ioffice-rce.yaml by @SleepingBag945
- http/vulnerabilities/other/hongfan-ioffice-sqli.yaml by @SleepingBag945
- http/vulnerabilities/other/landray-oa-erp-data-rce.yaml by @SleepingBag945
- http/vulnerabilities/other/maltrail-rce.yaml by @pussycat0x
- http/vulnerabilities/other/nacos-auth-bypass.yaml by @taielab,@pikpikcu,@SleepingBag945
- http/vulnerabilities/ruijie/ruijie-excu-shell.yaml by @momika233
- http/vulnerabilities/wordpress/wp-real-estate-xss.yaml by harsh
- http/misconfiguration/apache/apache-couchdb-unauth.yaml by @SleepingBag945
- http/misconfiguration/chatgpt-web-unauth.yaml by @SleepingBag945
- http/misconfiguration/feiyuxing-info-leak.yaml by @SleepingBag945
- http/misconfiguration/hikivision-env.yaml by @SleepingBag945
- http/misconfiguration/request-baskets-exposure.yaml by @DhiyaneshDk
- http/misconfiguration/unauth-redis-insight.yaml by @ggranjus
- http/default-logins/apache/kylin-default-login.yaml by @SleepingBag945
- http/default-logins/caimore/caimore-default-login.yaml by @pussycat0x
- http/default-logins/easyreport/easyreport-default-login.yaml by @SleepingBag945
- http/default-logins/feiyuxing/feiyuxing-default-login.yaml by @SleepingBag945
- http/default-logins/nacos/nacos-default-login.yaml by @SleepingBag945
- http/exposures/files/core-dump.yaml by @kazet
- http/exposed-panels/dell-bmc-panel-detect.yaml by @megamansec
- http/exposed-panels/ibm-openadmin-panel.yaml by @DhiyaneshDK
- http/exposed-panels/kasm-login-panel.yaml by @lum8rjack
- http/exposed-panels/maltrail-panel.yaml by @ritikchaddha
- http/exposed-panels/metasploit-panel.yaml by @lu4nx
- http/exposed-panels/navicat-server-panel.yaml by @ritikchaddha
- http/miscellaneous/defaced-website-detect.yaml by @ggranjus
- http/technologies/besu-server-detect.yaml by @Nullfuzz
- http/technologies/erigon-server-detect.yaml by @Nullfuzz
- http/technologies/geth-server-detect.yaml by @Nullfuzz
- http/technologies/nethermind-server-detect.yaml by @Nullfuzz
- network/jarm/c2/havoc-c2-jarm.yaml by @pussycat0x
- ssl/c2/havoc-c2.yaml by @pussycat0x
- http/osint/vampr.yaml by @millermedia

## New Contributors
* @Lucky-Pulse made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7935
* @iamxhunt3r made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7943
* @Yoyoda75 made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7950
* @pphuahua made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7941
* @adrlsx made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8009
* @tstromberg made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8058
* @luisfelipe146 made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8064

**Full Changelog**: https://github.com/projectdiscovery/nuclei-templates/compare/v9.6.1...v9.6.2