Starstruk Logo MarkStarstruk

v9.7.2

projectdiscovery/nuclei-templatesv9.7.2Dec 22, 2023by princechaddha

AI Summary

Adds 61 templates and 25 CVEs, focusing on CVE additions and installer misconfigurations for various CMSs.

Key Highlights

  • Added 25 CVEs (2018-2023).
  • Added installer misconfiguration templates for various CMSs.
  • Added 8 first-time contributors.
  • Added exposed panels for DataEase, Tailon, and Vue PACS.

New Features

  • 25 new CVE templates.
  • Installer misconfiguration detection.
  • Exposed panels for DataEase, Tailon, etc.

Full Release Notes

### 🔥 Release Highlights 🔥

- javascript/cves/2023/CVE-2023-46604.yaml by @Ice3man,@Mzack9999,@pdresearch 🔥
- code/cves/2023/CVE-2023-49105.yaml by @ChristianPoeschl,@FlorianDewald,@usdAG 🔥
- http/cves/2021/CVE-2021-29200.yaml by @your3cho 🔥
- http/cves/2023/CVE-2023-26035.yaml by @Unblvr1,@whotwagner 🔥
- http/cves/2023/CVE-2023-3368.yaml by @dwisiswant0 🔥
- http/cves/2023/CVE-2023-41265.yaml by @AdamCrosser 🔥
- http/cves/2023/CVE-2023-43177.yaml by @iamnoooob,@rootxharsh,@pdresearch 🔥
- http/cves/2023/CVE-2023-49070.yaml by @your3cho 🔥
- http/cves/2023/CVE-2023-6553.yaml by @FLX 🔥

### What's Changed
#### New Templates Added: `61` | CVEs Added: `25` | First-time contributions: `8`

- javascript/cves/2023/CVE-2023-46604.yaml by @Ice3man,@Mzack9999,@pdresearch 🔥
- code/cves/2023/CVE-2023-49105.yaml by @ChristianPoeschl,@FlorianDewald,@usdAG 🔥
- headless/cves/2018/CVE-2018-25031.yaml by @DhiyaneshDK
- http/cves/2018/CVE-2018-8823.yaml by @MaStErChO
- http/cves/2021/CVE-2021-29200.yaml by @your3cho 🔥
- http/cves/2021/CVE-2021-44910.yaml by @lbb
- http/cves/2022/CVE-2022-0087.yaml by @ShivanshKhari
- http/cves/2023/CVE-2023-22232.yaml by @1337kro
- http/cves/2023/CVE-2023-26035.yaml by @Unblvr1,@whotwagner 🔥
- http/cves/2023/CVE-2023-30534.yaml by @k0pak4
- http/cves/2023/CVE-2023-3368.yaml by @dwisiswant0 🔥
- http/cves/2023/CVE-2023-36144.yaml by @gy741
- http/cves/2023/CVE-2023-39002.yaml by @Herry
- http/cves/2023/CVE-2023-41265.yaml by @AdamCrosser 🔥
- http/cves/2023/CVE-2023-41266.yaml by @AdamCrosser 🔥
- http/cves/2023/CVE-2023-43177.yaml by @iamnoooob,@rootxharsh,@pdresearch 🔥
- http/cves/2023/CVE-2023-46359.yaml by @mlec
- http/cves/2023/CVE-2023-49070.yaml by @your3cho 🔥
- http/cves/2023/CVE-2023-5556.yaml by @shankaracharya
- http/cves/2023/CVE-2023-6018.yaml by @byt3bl33d3r
- http/cves/2023/CVE-2023-6020.yaml by @byt3bl33d3r
- http/cves/2023/CVE-2023-6021.yaml by @byt3bl33d3r
- http/cves/2023/CVE-2023-6038.yaml by @danmcinerney,@byt3bl33d3r
- http/cves/2023/CVE-2023-6380.yaml by @MiguelSegoviaGil
- http/cves/2023/CVE-2023-6553.yaml by @FLX 🔥
- http/default-logins/dataease/dataease-default-login.yaml by @DhiyaneshDK
- http/default-logins/splunk/splunk-default-login.yaml by @pussycat0x
- http/exposed-panels/dataease-panel.yaml by @DhiyaneshDK
- http/exposed-panels/reportico-admin-panel.yaml by @geeknik
- http/exposed-panels/tailon-panel.yaml by @ritikchaddha
- http/exposed-panels/vue-pacs-panel.yaml by @righettod
- http/exposed-panels/woodwing-panel.yaml by @pdteam
- http/exposures/configs/dompdf-config.yaml by @kazet
- http/misconfiguration/aws/cdn-cache-poisoning.yaml by @0xcharan
- http/misconfiguration/h2o/h2o-arbitary-file-read.yaml by @danmcinerney,@byt3bl33d3r
- http/misconfiguration/h2o/h2o-dashboard.yaml by @byt3bl33d3r
- http/misconfiguration/installer/businesso-installer.yaml by @ritikchaddha
- http/misconfiguration/installer/chamilo-installer.yaml by @DhiyaneshDk
- http/misconfiguration/installer/espocrm-installer.yaml by @DhiyaneshDk
- http/misconfiguration/installer/knowledgetree-installer.yaml by @ritikchaddha
- http/misconfiguration/installer/phpgedview-installer.yaml by @ritikchaddha
- http/misconfiguration/installer/wowcms-installer.yaml by @ritikchaddha
- http/misconfiguration/mixed-active-content.yaml by @Liwermor
- http/misconfiguration/mixed-passive-content.yaml by @Liwermor
- http/misconfiguration/secnet-info-leak.yaml by @DhiyaneshDk
- http/misconfiguration/woodwing-git.yaml by @pdteam
- http/misconfiguration/woodwing-phpinfo.yaml by @pdteam
- http/technologies/bamboo-detect.yaml by @bhutch
- http/technologies/element-web-detect.yaml by @davidegirardi
- http/technologies/iparapheur-detect.yaml by @righettod
- http/technologies/matrix-homeserver-detect.yaml by @davidegirardi
- http/vulnerabilities/dahua/dahua-wpms-lfi.yaml by @DhiyaneshDk
- http/vulnerabilities/dahua/dahua-wpms-rce.yaml by @DhiyaneshDK
- http/vulnerabilities/ecstatic/node-ecstatic-internal-path.yaml by @DhiyaneshDK
- http/vulnerabilities/ecstatic/node-ecstatic-listing.yaml by @DhiyaneshDK
- http/vulnerabilities/huawei/huawei-authhttp-lfi.yaml by @DhiyaneshDk
- http/vulnerabilities/jinhe/jinhe-jc6-sqli.yaml by @Ky9oss
- http/vulnerabilities/other/sslvpn-client-rce.yaml by @DhiyaneshDK
- http/vulnerabilities/other/yibao-sqli.yaml by @DhiyaneshDK
- http/vulnerabilities/other/yunanbao-rce.yaml by @DhiyaneshDK
- http/vulnerabilities/vbulletin/vbulletin-ajaxreg-sqli.yaml by @MaStErChO

## New Contributors
* @davidegirardi made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8721
* @jfbes made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8726
* @invisiblethreat made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8719
* @your3ch0 made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8774
* @knavesec made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8784
* @RegularITCat made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8806
* @chrisusdag made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8835
* @Liwermor made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/8838

**Full Changelog**: https://github.com/projectdiscovery/nuclei-templates/compare/v9.7.1...v9.7.2