v9.6.5
projectdiscovery/nuclei-templatesv9.6.5Oct 11, 2023by princechaddha
AI Summary
Focused on critical remote code execution and authentication bypass vulnerabilities in major enterprise platforms like JetBrains TeamCity, Sitecore, and Microsoft SharePoint.
Key Highlights
- Added critical JetBrains TeamCity RCE (CVE-2023-42793)
- Added critical Sitecore RCE (CVE-2023-35813)
- Added critical Microsoft SharePoint Authentication Bypass (CVE-2023-29357)
- Added critical Atlassian Confluence Privilege Escalation (CVE-2023-22515)
New Features
- 75 new templates added
- 25 new CVEs added
- Enterprise platform vulnerability coverage
Full Release Notes
š„ Highlight of this release: ā [CVE-2023-43261] Milesight Routers - Information Disclosure (@gy741) [high] š„ ā [CVE-2023-42793] JetBrains TeamCity < 2023.05.4 - Remote Code Execution (@iamnoooob,@rootxharsh,@pdresearch) [critical] š„ ā [CVE-2023-42442] JumpServer > 3.6.4 - Information Disclosure (@xianke) [high] š„ ā [CVE-2023-36845] Juniper J-Web - Remote Code Execution (@yaser_s) [medium] š„ ā [CVE-2023-35813] Sitecore - Remote Code Execution (@dhiyaneshdk,@iamnoooob) [critical] š„ ā [CVE-2023-29357] Microsoft SharePoint - Authentication Bypass (@pdteam) [critical] š„ ā [CVE-2023-22515] Atlassian Confluence - Privilege Escalation (@s1r1us,@iamnoooob,@rootxharsh,@pdresearch) [critical] š„ ā [CVE-2023-5074] D-Link D-View 8 v2.0.1.28 - Authentication Bypass (@dhiyaneshdk) [critical] š„ -------- ## What's Changed ### New Templates Added : `75` ### New CVEs Added: `25` ### First-time contributions: `12` - http/cves/2023/CVE-2023-43261.yaml by @gy741 š„ - http/cves/2023/CVE-2023-42793.yaml by @iamnoooob,@rootxharsh,@pdresearch š„ - http/cves/2023/CVE-2023-42442.yaml by @xianke š„ - http/cves/2023/CVE-2023-41642.yaml by @ritikchaddha - http/cves/2023/CVE-2023-38501.yaml by @ctflearner - http/cves/2023/CVE-2023-37474.yaml by @shankar acharya,@theamanrawat - http/cves/2023/CVE-2023-36845.yaml by @yaser_s š„ - http/cves/2023/CVE-2023-35813.yaml by @DhiyaneshDk,@iamnoooob š„ - http/cves/2023/CVE-2023-34259.yaml by @gy741 - http/cves/2023/CVE-2023-33831.yaml by @gy741 - http/cves/2023/CVE-2023-33405.yaml by @Shankar Acharya - http/cves/2023/CVE-2023-31465.yaml by @ritikchaddha - http/cves/2023/CVE-2023-30625.yaml by @gy741 - http/cves/2023/CVE-2023-30013.yaml by @gy741 - http/cves/2023/CVE-2023-29357.yaml by @pdteam š„ - http/cves/2023/CVE-2023-22515.yaml by @s1r1us,@iamnoooob,@rootxharsh,@pdresearch š„ - http/cves/2023/CVE-2023-22432.yaml by @DhiyaneshDK - http/cves/2023/CVE-2023-5074.yaml by @DhiyaneshDK š„ - http/cves/2023/CVE-2023-4568.yaml by @DhiyaneshDK - http/cves/2023/CVE-2023-2766.yaml by @DhiyaneshDK - http/cves/2023/CVE-2023-2479.yaml by @zn9988 - http/cves/2023/CVE-2023-2224.yaml by @luisfelipe146 - http/cves/2022/CVE-2022-48197.yaml by @ctflearner - http/cves/2022/CVE-2022-25568.yaml by @DhiyaneshDK - http/cves/2014/CVE-2014-9180.yaml by @Shankar Acharya - http/default-logins/xploitspy/xploitspy-default-login.yaml by @andreluna - http/exposed-panels/audiobookshelf-panel.yaml by @ritikchaddha - http/exposed-panels/bitwarden-vault-panel.yaml by @ritikchaddha - http/exposed-panels/dashy-panel.yaml by @ritikchaddha - http/exposed-panels/filebrowser-login-panel.yaml by @ritikchaddha - http/exposed-panels/jellyseerr-login-panel.yaml by @ritikchaddha - http/exposed-panels/klr300n-panel.yaml by @andreluna - http/exposed-panels/portainer-panel.yaml by @ritikchaddha - http/exposed-panels/qBittorrent-panel.yaml by @ritikchaddha - http/exposed-panels/ws_ftp-server-web-transfer.yaml by @johnk3r - http/exposures/configs/mercurial-hgignore.yaml by @DhiyaneshDK - http/exposures/configs/phpcs-config.yaml by @DhiyaneshDK - http/exposures/configs/phpsys-info.yaml by @fpatrik - http/exposures/configs/protractor-config.yaml by @DhiyaneshDK - http/exposures/configs/psalm-config.yaml by @DhiyaneshDK - http/exposures/configs/rakefile-disclosure.yaml by @DhiyaneshDK - http/exposures/files/viminfo-disclosure.yaml by @DhiyaneshDK - http/exposures/logs/milesight-system-log.yaml by @ritikchaddha - http/exposures/tokens/jotform/jotform-api-key.yaml by @Shankar Acharya - http/iot/kyocera-printer-panel.yaml by @gy741 - http/misconfiguration/filebrowser-unauth.yaml by @ritikchaddha - http/misconfiguration/installer/akeeba-installer.yaml by @DhiyaneshDK - http/misconfiguration/installer/alma-installer.yaml by @DhiyaneshDK - http/misconfiguration/installer/bitrix24-installer.yaml by @DhiyaneshDK - http/misconfiguration/installer/clipbucket-installer.yaml by @DhiyaneshDk - http/misconfiguration/installer/dolphin-installer.yaml by @DhiyaneshDk - http/misconfiguration/installer/gibbon-installer.yaml by @DhiyaneshDK - http/misconfiguration/installer/klr300n-installer.yaml by @andreluna - http/misconfiguration/installer/mantisbt-installer.yaml by @DhiyaneshDK - http/misconfiguration/installer/ojs-installer.yaml by @DhiyaneshDK - http/misconfiguration/installer/shopware-installer.yaml by @DhiyaneshDk - http/misconfiguration/installer/spa-cart-installer.yaml by @pussycat0x - http/misconfiguration/installer/vironeer-installer.yaml by @DhiyaneshDk - http/misconfiguration/installer/zabbix-installer.yaml by @DhiyaneshDK - http/misconfiguration/installer/zencart-installer.yaml by @DhiyaneshDk - http/misconfiguration/unauth-celery-flower.yaml by @DhiyaneshDK - http/misconfiguration/vercel-source-exposure.yaml by @hlop - http/technologies/blazor-webassembly-detect.yaml by @righettod - http/technologies/default-amazon-cognito.yaml by @pussycat0x - http/technologies/devexpress-detect.yaml by @CravateRouge - http/vulnerabilities/apache/shiro/shiro-deserialization-detection.yaml by @hotpot,@j4vaovo - http/vulnerabilities/copyparty-xss.yaml by @theamanrawat - http/vulnerabilities/sangfor/sangfor-ngaf-lfi.yaml by @DhiyaneshDk - http/vulnerabilities/wordpress/wp-yoast-user-enumeration.yaml by @FLX - http/vulnerabilities/yonyou/yonyou-u8-sqli.yaml by @xianke - network/detection/bgp-detect.yaml by @danfaizer - network/detection/exim-detect.yaml by @ricardomaia - network/detection/ws_ftp-ssh-detect.yaml by @johnk3r - ssl/wildcard-tls.yaml by @lucky0x0d - file/android/google-storage-bucket.yaml by @Thabisocn ## New Contributors * @5hank4r made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8086 * @fmunozs made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8240 * @fapami made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8246 * @zn9988 made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8216 * @joaonevess made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8274 * @danfaizer made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8287 * @sttlr made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8227 * @Thabisocn made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8289 * @jainiresh made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8286 * @CravateRouge made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8217 * @Osb0rn3 made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8322 * @thehlopster made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8252 **Full Changelog**: https://github.com/projectdiscovery/nuclei-templates/compare/v9.6.4...v9.6.5