nuclei-templates Releases

Focused on critical authentication bypasses and command injection vulnerabilities in networking and VPN hardware, as well as enterprise software like Harbor.

Aug 24, 2023

A significant release dedicated to malware detection, adding 198 file-based templates to identify various malware strains. Also included several CVEs and misconfigurations.

Aug 13, 2023

Added templates for critical vulnerabilities in management platforms and CMS, including Metabase, Cloudpanel, and XWiki.

Jul 28, 2023

Adds a collection of JARM-based Command and Control (C2) server detection templates and numerous CVE and token exposure templates.

Jul 18, 2023

Introduces multiple CVE templates and specific vulnerability checks for authentication bypasses and panel exposures.

Jul 12, 2023

Focuses on critical SQL Injection and Cross-Site Scripting vulnerabilities, specifically targeting MOVEit Transfer.

Jul 9, 2023

Adds critical RCE and XSS vulnerabilities, along with a large number of token exposure templates.

Jul 8, 2023

Adds 51 new templates covering RCEs in Hikvision and KKFileView, as well as Node.js vulnerabilities.

Jul 2, 2023

Includes critical RCEs in MOVEit, RocketMQ, CouchDB, and VMware vRealize, plus C2 detection.

Jun 21, 2023

Introduces credential stuffing templates for cloud and self-hosted services alongside various CVEs.

Jun 5, 2023

Adds critical vulnerabilities including WordPress Elementor password reset and Oracle WebLogic RCE.

Jun 1, 2023

This release focuses on dependency updates and CI improvements to fix build issues, including upgrading core libraries like Tokio, OpenSSL, and H2.

May 26, 2023

Major refactoring of the directory structure, addition of metadata auto-generation, and updates to Log4j templates.

May 11, 2023

Adds 55 templates including various CVEs and misconfigurations.

Apr 24, 2023

Released with 78 new templates, including CVEs from 2013 to 2023, misconfigurations, exposed panels, and technology detections.

Apr 9, 2023

Added 69 new templates focusing on CVEs, specific vulnerabilities like Gitea RCE and Splash SSRF, and various file keys.

Mar 27, 2023

Released with 65 new templates and a fix for CVE-2022-45362, focusing on token exposure, PHP vulnerabilities, and misconfigurations.

Mar 18, 2023

Added 61 new templates including CVEs, misconfigurations, and exposed panels for various enterprise applications.

Mar 10, 2023

A major update adding 656 new templates, featuring a massive expansion of OSINT templates alongside CVEs and misconfigurations.

Feb 27, 2023

Feb 17, 2023