v9.7.7

projectdiscovery/nuclei-templatesv9.7.7Mar 6, 2024by princechaddha

AI Summary

Adds 82 new templates and 21 CVEs, with a focus on expanding coverage for IBM technologies and adding various exposed panels and misconfigurations.

Key Highlights

  • Added 21 new CVEs (mix of 2023 and 2024).
  • Expanded coverage for IBM technologies (Decision Server, ODM, HMC).
  • Added 8 first-time contributors.
  • Added exposed panels for IBM and other technologies.

New Features

  • IBM technology detection templates (Decision Server, ODM).
  • 21 new CVE templates.
  • Exposed panels for IBM and other technologies.
  • Token exposure templates for various services.

Full Release Notes

### 🔥 Release Highlights 🔥

- http/cves/2024/CVE-2024-1071.yaml by @DhiyaneshDK,@iamnooob 🔥
- http/cves/2024/CVE-2024-1709.yaml by @johnk3r 🔥
- http/cves/2024/CVE-2024-23334.yaml by @DhiyaneshDk 🔥
- http/cves/2024/CVE-2024-25600.yaml by @christbowel 🔥
- http/cves/2024/CVE-2024-27198.yaml by @DhiyaneshDk 🔥
- http/cves/2024/CVE-2024-27199.yaml by @DhiyaneshDk 🔥
- http/cves/2024/CVE-2024-27497.yaml by @DhiyaneshDk 🔥
- http/cves/2023/CVE-2023-38203.yaml by @yiran 🔥
- http/cves/2023/CVE-2023-42344.yaml by @0xr2r 🔥
- http/cves/2023/CVE-2023-48777.yaml by @DhiyaneshDK 🔥

### What's Changed
#### New Templates Added: `82` | CVEs Added: `21` | First-time contributions: `8`

- http/cves/2024/CVE-2024-0305.yaml by @BMCel
- http/cves/2024/CVE-2024-0713.yaml by @DhiyaneshDK
- http/cves/2024/CVE-2024-1021.yaml by @BMCel
- http/cves/2024/CVE-2024-1071.yaml by @DhiyaneshDK,@iamnooob 🔥
- http/cves/2024/CVE-2024-1208.yaml by @ritikchaddha
- http/cves/2024/CVE-2024-1209.yaml by @ritikchaddha
- http/cves/2024/CVE-2024-1210.yaml by @ritikchaddha
- http/cves/2024/CVE-2024-1709.yaml by @johnk3r 🔥
- http/cves/2024/CVE-2024-22319.yaml by @DhiyaneshDK
- http/cves/2024/CVE-2024-22320.yaml by @DhiyaneshDK
- http/cves/2024/CVE-2024-23334.yaml by @DhiyaneshDk 🔥
- http/cves/2024/CVE-2024-25600.yaml by @christbowel 🔥
- http/cves/2024/CVE-2024-27198.yaml by @DhiyaneshDk 🔥
- http/cves/2024/CVE-2024-27199.yaml by @DhiyaneshDk 🔥
- http/cves/2024/CVE-2024-27497.yaml by @DhiyaneshDk 🔥
- http/cves/2023/CVE-2023-38203.yaml by @yiran 🔥
- http/cves/2023/CVE-2023-42344.yaml by @0xr2r 🔥
- http/cves/2023/CVE-2023-45671.yaml by @ritikchaddha
- http/cves/2023/CVE-2023-48777.yaml by @DhiyaneshDK 🔥
- http/cves/2023/CVE-2023-6895.yaml by @archer
- http/cnvd/2023/CNVD-2023-96945.yaml by @DhiyaneshDk
- http/cves/2015/CVE-2015-1635.yaml by @Phillipo
- http/vulnerabilities/chanjet-tplus/chanjet-tplus-unauth-update.yaml by @0xr2r
- http/vulnerabilities/dahua/dahua-bitmap-fileupload.yaml by @DhiyaneshDK
- http/vulnerabilities/joomla/joomla-easyshop-lfi.yaml by @ritikchaddha
- http/vulnerabilities/other/lucee-unset-credentials.yaml by @jpg0mez
- http/vulnerabilities/yonyou/yonyou-ufida-nc-lfi.yaml by @DhiyaneshDk
- http/misconfiguration/cloudflare-rocketloader-htmli.yaml by @j3ssie
- http/misconfiguration/installer/connectwise-setup.yaml by @DhiyaneshDk
- http/default-logins/ibm/ibm-dcbc-default-login.yaml by @DhiyaneshDK
- http/default-logins/ibm/ibm-dcec-default-login.yaml by @DhiyaneshDK
- http/default-logins/ibm/ibm-dsc-default-login.yaml by @DhiyaneshDK
- http/default-logins/ibm/ibm-hmc-default-login.yaml by @R3S OST
- http/default-logins/ibm/imm-default-login.yaml by @jpg0mez
- http/default-logins/lucee/lucee-default-login.yaml by @jpg0mez
- http/exposed-panels/c2/meduza-stealer.yaml by @dwisiswant0
- http/exposed-panels/cisco-unity-panel.yaml by @HeeresS
- http/exposed-panels/connectwise-panel.yaml by @johnk3r
- http/exposed-panels/fortinet/fortiauthenticator-detect.yaml by @johnk3r
- http/exposed-panels/ibm/ibm-dcec-panel.yaml by @DhiyaneshDK
- http/exposed-panels/ibm/ibm-decision-server-console.yaml by @DhiyaneshDK
- http/exposed-panels/ibm/ibm-odm-panel.yaml by @DhiyaneshDK
- http/exposed-panels/koel-panel.yaml by @rxerium
- http/exposed-panels/kopano-webapp-panel.yaml by @righettod
- http/exposed-panels/linshare-panel.yaml by @righettod
- http/exposed-panels/openvas-panel.yaml by @rxerium
- http/exposed-panels/opinio-panel.yaml by @righettod
- http/exposed-panels/redmine-panel.yaml by @righettod
- http/exposed-panels/rocketchat-panel.yaml by @righettod
- http/exposed-panels/webtransfer-client-panel.yaml by @righettod
- http/exposures/configs/sphinxsearch-config.yaml by @gtrrnr
- http/exposures/tokens/dependency/dependency-track-api.yaml by @DhiyaneshDK
- http/exposures/tokens/docker/docker-hub-pat.yaml by @DhiyaneshDK
- http/exposures/tokens/doppler/doppler-audit-token.yaml by @DhiyaneshDK
- http/exposures/tokens/doppler/doppler-cli-token.yaml by @DhiyaneshDK
- http/exposures/tokens/doppler/doppler-scim-token.yaml by @DhiyaneshDK
- http/exposures/tokens/doppler/doppler-service-account-token.yaml by @DhiyaneshDK
- http/exposures/tokens/doppler/doppler-service-token.yaml by @DhiyaneshDK
- http/exposures/tokens/dropbox/dropbox-access-token.yaml by @DhiyaneshDK
- http/exposures/tokens/huggingface/huggingface-user-access-token.yaml by @DhiyaneshDK
- http/exposures/tokens/linkedin/linkedin-client-id.yaml by @DhiyaneshDK
- http/exposures/tokens/linkedin/linkedin-secret-key.yaml by @DhiyaneshDK
- http/exposures/tokens/newrelic/newrelic-api-service-key.yaml by @DhiyaneshDK
- http/exposures/tokens/newrelic/newrelic-license-key-non.yaml by @DhiyaneshDK
- http/exposures/tokens/newrelic/newrelic-license-key.yaml by @DhiyaneshDK
- http/exposures/tokens/odbc/odbc-connection-string.yaml by @DhiyaneshDK
- http/exposures/tokens/okta/okta-api-token.yaml by @DhiyaneshDK
- http/exposures/tokens/particle/particle-access-token.yaml by @DhiyaneshDK
- http/exposures/tokens/react/react-app-password.yaml by @DhiyaneshDK
- http/exposures/tokens/react/react-app-username.yaml by @DhiyaneshDK
- http/exposures/tokens/salesforce/salesforce-access-token.yaml by @DhiyaneshDK
- http/exposures/tokens/thingsboard/thingsboard-access-token.yaml by @DhiyaneshDK
- http/exposures/tokens/truenas/truenas-api-key.yaml by @DhiyaneshDK
- http/exposures/tokens/twitter/twitter-client-id.yaml by @DhiyaneshDK
- http/exposures/tokens/twitter/twitter-secret-key.yaml by @DhiyaneshDK
- http/exposures/tokens/wireguard/wireguard-preshared-key.yaml by @DhiyaneshDK
- http/exposures/tokens/wireguard/wireguard-private-key.yaml by @DhiyaneshDK
- http/miscellaneous/maxforwards-headers-detect.yaml by @righettod
- http/technologies/ibm/ibm-decision-runner.yaml by @DhiyaneshDK
- http/technologies/ibm/ibm-decision-server-runtime.yaml by @DhiyaneshDK
- http/technologies/ibm/ibm-odm-detect.yaml by @DhiyaneshDK
- http/technologies/pexip-detect.yaml by @righettod

## New Contributors
* @Christbowel made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9181
* @bmcxxx made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9225
* @zyrnj made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9235
* @g33gs made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9211
* @NeckBeardPrince made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9255
* @JPG0mez made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9271
* @trolldbois made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9289
* @Michal-Mikolas made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9282

**Full Changelog**: https://github.com/projectdiscovery/nuclei-templates/compare/v9.7.6...v9.7.7