v9.6.8

projectdiscovery/nuclei-templatesv9.6.8Oct 29, 2023by ehsandeep

AI Summary

Added 79 new templates featuring 33 critical CVEs. Major focus on recent high-severity vulnerabilities like F5 BIG-IP and Citrix Bleed, plus a large batch of Log4j RCE templates for various enterprise software.

Key Highlights

  • Added critical RCE templates for F5 BIG-IP (CVE-2023-46747)
  • Added Citrix Bleed template (CVE-2023-4966)
  • Added RCE templates for NextGen Mirth Connect and Viessmann
  • Added numerous Log4j RCE templates for Cisco, FortiPortal, and other vendors

New Features

  • 79 new templates added
  • 33 new CVEs added
  • Log4j RCE detection for multiple platforms

Full Release Notes

🔥 **Release Highlights** 🔥 

- CVE-2023-46747 (**F5 BIG-IP - Unauthenticated RCE via AJP Smuggling**)
- CVE-2023-37679 (**NextGen Mirth Connect - Remote Code Execution**)
- CVE-2023-45852 (**Viessmann Vitogate 300 - Remote Code Execution**)
- CVE-2023-4966 (**Citrix Bleed - Leaking Session Tokens**)

-------

## What's Changed

### New Templates Added: **79** (CVE: **33**)

- **http/cves/2023/CVE-2023-46747.yaml** by @iamnoooob,@rootxharsh,@pdresearch
- **http/cves/2023/CVE-2023-45852.yaml** by @iamnoooob,@rootxharsh,@pdresearch
- **http/cves/2023/CVE-2023-37679.yaml** by @iamnoooob,@rootxharsh,@pdresearch
- **http/cves/2023/CVE-2023-4966.yaml** by @DhiyaneshDK
- http/cves/2022/CVE-2022-36553.yaml by @HuTa0
- http/cves/2017/CVE-2017-18566.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18565.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18564.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18562.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18558.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18557.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18556.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18542.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18537.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18532.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18530.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18529.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18528.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18527.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18518.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18517.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18516.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18505.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18502.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18501.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18500.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18496.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18494.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18493.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18492.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18491.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18490.yaml by @luisfelipe146
- http/cves/2017/CVE-2017-18487.yaml by @luisfelipe146
- http/misconfiguration/tiny-file-manager-unauth.yaml by @ritikchaddha,@HuTa0
- http/misconfiguration/unauth-opache-control-panel.yaml by @pussycat0x
- http/vulnerabilities/backdoor/cisco-implant-detect.yaml by @DhiyaneshDK,@rxerium
- http/vulnerabilities/cisco/cisco-broadworks-log4j-rce.yaml by @shaikhyaser
- http/vulnerabilities/cisco/cisco-webex-log4j-rce.yaml by @shaikhyaser
- http/vulnerabilities/other/citrix-xenapp-log4j-rce.yaml by @shaikhyaser
- http/vulnerabilities/other/f-secure-policymanager-log4j-rce.yaml by @shaikhyaser
- http/vulnerabilities/other/flexnet-log4j-rce.yaml by @shaikhyaser
- http/vulnerabilities/other/fortiportal-log4j-rce.yaml by @shaikhyaser
- http/vulnerabilities/other/jitsi-meet-log4j-rce.yaml by @shaikhyaser
- http/vulnerabilities/other/livebos-file-read.yaml by @yusakie
- http/vulnerabilities/other/logstash-log4j-rce.yaml by @shaikhyaser
- http/vulnerabilities/other/manage-engine-dc-log4j-rce.yaml by @shaikhyaser
- http/vulnerabilities/other/okta-log4j-rce.yaml by @shaikhyaser
- http/vulnerabilities/other/openshift-log4j-rce.yaml by @shaikhyaser
- http/vulnerabilities/other/papercut-log4j-rce.yaml by @shaikhyaser
- http/vulnerabilities/other/pega-log4j-rce.yaml by @shaikhyaser
- http/vulnerabilities/other/sonicwall-nsm-log4j-rce.yaml by @shaikhyaser
- http/vulnerabilities/other/splunk-enterprise-log4j-rce.yaml by @shaikhyaser
- http/vulnerabilities/other/symantec-sepm-log4j-rce.yaml by @shaikhyaser
- http/vulnerabilities/wordpress/blog-designer-pack-rce.yaml by @iamnoooob,@rootxharsh,@pdresearch
- http/vulnerabilities/wordpress/wp-kadence-blocks-rce.yaml by @theamanrawat
- http/exposed-panels/authelia-panel.yaml by @rxerium
- http/exposed-panels/automatisch-panel.yaml by @rxerium
- http/exposed-panels/changedetection-panel.yaml by @rxerium
- http/exposed-panels/chronos-panel.yaml by @righettod
- http/exposed-panels/homebridge-panel.yaml by @rxerium
- http/exposed-panels/immich-panel.yaml by @rxerium
- http/exposed-panels/memos-panel.yaml by @rxerium
- http/exposed-panels/opentouch-multimediaservices-panel.yaml by @righettod
- http/exposed-panels/rcdevs-webadm-panel.yaml by @righettod
- http/exposed-panels/regify-panel.yaml by @righettod
- http/exposed-panels/scribble-diffusion-panel.yaml by @rxerium
- http/exposed-panels/security-onion-panel.yaml by @rxerium
- http/exposed-panels/solarwinds-arm-panel.yaml by @bhutch
- http/exposed-panels/speedtest-panel.yaml by @rxerium
- http/exposed-panels/tautulli-panel.yaml by @rxerium
- http/exposed-panels/vinchin-panel.yaml by @pussycat0x
- http/exposed-panels/webtitan-cloud-panel.yaml by @ritikchaddha
- http/technologies/atlassian-connect-descriptor.yaml by @pussycat0x
- http/technologies/mappproxy-detect.yaml by @philippedelteil
- http/technologies/orbit-telephone-detect.yaml by @HeeresS
- http/token-spray/api-onyphe.yaml by @0xpugazh
- headless/technologies/js-libraries-detect.yaml by @adamparsons,@cbadke,@ChetGan,@ErikOwen,@jacalynli
- javascript/detection/oracle-tns-listner.yaml by @pussycat0x
- javascript/enumeration/smb-enum.yaml by @pussycat0x

## New Contributors
* @shaikhyaser made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8419
* @rxerium made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8427

**Full Changelog**: https://github.com/projectdiscovery/nuclei-templates/compare/v9.6.7...v9.6.8