nuclei-templates Releases

A comprehensive update focused on Windows Security Hardening and Auditing, adding 110 templates for misconfigurations in password policies, encryption, certificates, and remote access. Also includes critical CVEs for ZoneMinder, WP Query Console, and Sitecore.

Dec 4, 2024

Adds 74 new templates covering Symfony Profiler, OpenAPI Generator, D-Link NAS, GitHub Enterprise SAML, Ivanti Cloud Services, and Apache Solr. Includes significant bug fixes for false positives and negatives.

Nov 18, 2024

Introduces 116 templates for AWS services including EFS, Inspector2, GuardDuty, and RDS. Also adds critical CVEs for Vendure, Apache Solr, ZoneMinder, Veeam, Rocket.Chat, CyberPower, and Time Clock.

Nov 1, 2024

Adds 68 templates covering GitLab SAML Bypass, TI WooCommerce Wishlist, BerqWP, WebMvc.fn, Lobe Chat, Palo Alto Expedition, Riello Netman, Gradio, Chuanhu Chat, Chaosblade, and OPNsense.

Oct 14, 2024

Adds 86 templates covering CUPS, Navidrome, Camaleon CMS, Zimbra, Apache OFBiz, LiteSpeed Cache, Apache HTTP Server, Apache DolphinScheduler, PyTorch TorchServe, Dragonfly2, and Apache Tomcat CGIServlet.

Sep 30, 2024

Minimal release notes: "This includes the extended context size to 8192 so should provide 5 mins conversations on moshi-mlx."

Sep 22, 2024

Sep 20, 2024

A major release focused on Azure Config Review, adding 253 templates for Azure Cloud services (VMs, App Services, SQL Databases, Key Vault, Storage). Also includes critical CVEs for SolarWinds, Zabbix, Cisco, SPIP, and AVTECH.

Sep 12, 2024

Adds 59 templates covering Moodle, Apache StreamPipes, Traccar, Ivanti vTM, WhatsUp Gold, and GiveWP. Includes fixes for typos and multiple false positives.

Sep 2, 2024

A significant update focusing on critical vulnerabilities in various software including Apache CloudStack, Devika, 1Panel, and Apache OFBiz. The release also includes templates for Calibre Remote Code Execution and TVT DVR Information Disclosure.

Aug 16, 2024

Focused on critical vulnerabilities in ServiceNow (Input Validation and Template Injection), FOG Project, and Progress WhatsUp Gold. Includes improvements to detection accuracy and bug fixes for false positives.

Jul 26, 2024

This release adds JSON support for the KV driver and introduces feature flags for temporary users. It also includes a significant backend refactoring and a large number of translation updates for various languages.

Jul 23, 2024

A maintenance release primarily focused on translation updates and bug fixes. It also introduces the JSON support for the KV driver and provides documentation for getting started with My Websites.

Jul 11, 2024

Highlights include critical Remote Code Execution vulnerabilities in Ollama, GeoServer, and Adobe Commerce & Magento (CosmicSting). Also covers Zyxel NAS backdoor and Kafka UI command injection.

Jul 10, 2024

A major feature release introducing a comprehensive sharing system with new endpoints and services, group management capabilities, and a full implementation of git commands within the shell environment.

Jul 8, 2024

A major feature release introducing Kubernetes cluster security templates. Also covers Apache OFBiz, XWiki, Zyxel, and Ivanti vulnerabilities, alongside extensive malware hash detection templates.

Jun 25, 2024

A short release focused on a single critical vulnerability (PHP CGI Argument Injection) and a favicon hash update for Lorex devices.

Jun 9, 2024

Focuses on critical vulnerabilities in Apache HugeGraph-Server, Check Point Quantum Gateway, Atlassian Confluence, and Progress Telerik Report Server.

Jun 7, 2024

Highlights include Github Enterprise Authenticated RCE, SpiderFlow RCE, and Sonatype Nexus Local File Inclusion. Also covers various CMS and router vulnerabilities.

May 23, 2024

Focused on adding many CVEs from 2015-2024, including Citrix, Prestashart, TitanNit, and VBulletin. Also adds various panel detections and misconfigurations.

May 10, 2024