Starstruk Logo MarkStarstruk

v9.6.3

projectdiscovery/nuclei-templatesv9.6.3Sep 11, 2023by princechaddha

AI Summary

Released templates for critical vulnerabilities in network devices and CMS, including Cacti, Ivanti, and Cisco VPNs.

Key Highlights

  • Added critical Cacti SQL Injection (CVE-2023-39361)
  • Added critical Ivanti Avalanche RCE (CVE-2023-32563)
  • Added critical Cisco VPN File Upload (CVE-2023-20073)
  • Added critical Jorani RCE (CVE-2023-26469)

New Features

  • 54 new templates added
  • 21 new CVEs added
  • Network device vulnerability coverage

Full Release Notes

🔥 Highlight of this release:

:white_check_mark: [CVE-2023-39361] Cacti 1.2.24 - SQL Injection (@ritikchaddha) [critical] :fire:
:white_check_mark: [CVE-2023-36844] Juniper Devices - Remote Code Execution (@princechaddha,@ritikchaddha) [medium] :fire:
:white_check_mark: [CVE-2023-34124] SonicWall GMS and Analytics Web Services - Shell Injection (@iamnoooob,@rootxharsh,@pdresearch) [critical] :fire:
:white_check_mark: [CVE-2023-32563] Ivanti Avalanche - Remote Code Execution (@princechaddha) [critical] :fire:
:white_check_mark: [CVE-2023-26469] Jorani 1.0.0 - Remote Code Execution (@pussycat0x) [critical] :fire:
:white_check_mark: [CVE-2023-20073] Cisco VPN Routers - Unauthenticated Arbitrary File Upload (@princechaddha,@ritikchaddha) [critical] :fire:
:white_check_mark: [CVE-2023-4634] Media Library Assistant < 3.09 - Remote Code Execution/Local File Inclusion (@pepitoh,@ritikchaddha) [critical] :fire:

## What's Changed

### New Templates Added: `54`
### New CVEs Added: `21`
### First-time contributions: `6`

---------

- http/cves/2023/CVE-2023-39600.yaml by Imjust0
- http/cves/2023/CVE-2023-39598.yaml by Imjust0
- http/cves/2023/CVE-2023-39361.yaml by @ritikchaddha 🔥
- http/cves/2023/CVE-2023-38433.yaml by @AdnaneKhan
- http/cves/2023/CVE-2023-36844.yaml by @princechaddha, @ritikchaddha 🔥
- http/cves/2023/CVE-2023-34192.yaml by @ritikchaddha🔥
- http/cves/2023/CVE-2023-34124.yaml by @iamnoooob, @rootxharsh, @pdresearch 🔥
- http/cves/2023/CVE-2023-32563.yaml by @princechaddha 🔥
- http/cves/2023/CVE-2023-30150.yaml by @mastercho
- http/cves/2023/CVE-2023-27034.yaml by @MaStErChO
- http/cves/2023/CVE-2023-2648.yaml by @ritikchaddha
- http/cves/2023/CVE-2023-26469.yaml by @pussycat0x 🔥
- http/cves/2023/CVE-2023-20073.yaml by @princechaddha, @ritikchaddha 🔥
- http/cves/2023/CVE-2023-4634.yaml by @Pepitoh,@ritikchaddha 🔥
- http/cves/2022/CVE-2022-22897.yaml by @mastercho
- http/cves/2021/CVE-2021-46107.yaml by @ritikchaddha
- http/cves/2020/CVE-2020-11798.yaml by @ritikchaddha
- http/cves/2020/CVE-2020-10220.yaml by @ritikchaddha
- http/cves/2018/CVE-2018-17153.yaml by @DhiyaneshDk
- http/cves/2018/CVE-2018-15917.yaml by @ritikchaddha
- http/cves/2016/CVE-2016-10108.yaml by @DhiyaneshDk
- http/cnvd/2021/CNVD-2021-32799.yaml by @SleepingBag945
- http/vulnerabilities/hikvision/hikvision-fastjson-rce.yaml by @SleepingBag945
- http/vulnerabilities/hikvision/hikvision-ivms-file-upload-bypass.yaml by @SleepingBag945
- http/vulnerabilities/jorani/jorani-benjamin-xss.yaml by @ritikchaddha
- http/vulnerabilities/other/huatian-oa8000-sqli.yaml by @SleepingBag945
- http/vulnerabilities/other/kingdee-erp-rce.yaml by @SleepingBag945
- http/vulnerabilities/other/landray-oa-datajson-rce.yaml by @SleepingBag945
- http/vulnerabilities/prestashop/prestashop-apmarketplace-sqli.yaml by @mastercho
- http/vulnerabilities/weaver/eoffice/weaver-eoffice-file-upload.yaml by @princechaddha
- http/misconfiguration/ecology-info-leak.yaml by @qianbenhyu
- http/misconfiguration/mingyu-xmlrpc-sock-adduser.yaml by @SleepingBag945
- http/misconfiguration/missing-sri.yaml by @lucky0x0d,@PulseSecurity.co.nz
- http/misconfiguration/nacos/nacos-create-user.yaml by @SleepingBag945
- http/misconfiguration/php-debugbar-exposure.yaml by @ritikchaddha,@pdteam
- http/exposures/apis/seafile-api.yaml by @righettod
- http/exposures/files/bun-lock.yaml by noraj
- http/takeovers/lemlist-takeover.yaml by kresec
- ssl/c2/mythic-c2-ssl.yaml by @johnk3r
- http/exposed-panels/aspcms-backend-panel.yaml by @SleepingBag945
- http/exposed-panels/dxplanning-panel.yaml by @righettod
- http/exposed-panels/greenbone-panel.yaml by @pbuff07
- http/exposed-panels/jorani-panel.yaml by @DhiyaneshDK
- http/exposed-panels/snapcomms-panel.yaml by @righettod
- http/miscellaneous/external-service-interaction.yaml by @andreluna
- http/miscellaneous/rdap-whois.yaml by @ricardomaia
- http/osint/gist.yaml by @philippedelteil
- http/technologies/burp-collaborator-detect.yaml by @lum8rjack
- http/technologies/honeypot-detect.yaml by @j4vaovo
- http/technologies/wordpress/plugins/pinterest-for-woocommerce.yaml by @ricardomaia
- http/technologies/wordpress/plugins/wp-reviews-plugin-for-google.yaml by @ricardomaia
- http/technologies/wordpress/plugins/wp-seopress.yaml by @ricardomaia
- http/token-spray/api-notolytix.yaml by @0xPugazh
- workflows/kev-workflow.yaml by @king-alexander

## New Contributors
* @king-alexander made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8063
* @neriberto made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8105
* @andreluna made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8134
* @Laronax made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8156
* @AdnaneKhan made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8170
* @muthumohanprasath made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8180

**Full Changelog**: https://github.com/projectdiscovery/nuclei-templates/compare/v9.6.2...v9.6.3