nuclei-templates

74cms-sqli.yaml

…

acme-xss.yaml

Update Severity

2021-09-20 12:11:56 +07:00

asanhamayesh-lfi.yaml

Update and rename asanhamayesh-cms-lfi.yaml to vulnerabilities/other/asanhamayesh-lfi.yaml

2021-12-18 14:28:39 +05:30

aspnuke-openredirect.yaml

…

bems-api-lfi.yaml

Update and rename longjing-technology-bems-api-lfi.yaml to bems-api-lfi.yaml

2021-08-03 19:55:25 +05:30

beward-ipcamera-disclosure.yaml

Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string

2021-08-19 16:59:12 +03:00

bitrix-open-redirect.yaml

misc update

2021-10-14 19:31:57 +05:30

blue-ocean-excellence-lfi.yaml

…

buffalo-config-injection.yaml

Satisfying the linter (all errors and warnings)

2021-08-19 17:44:46 +03:00

bullwark-momentum-lfi.yaml

more metadata update

2021-10-22 23:24:21 +05:30

cacti-weathermap-file-write.yaml

Coverage for all templates using tags

2021-09-09 19:08:13 +05:30

caucho-resin-info-disclosure.yaml

Coverage for all templates using tags

2021-09-09 19:08:13 +05:30

chamilo-lms-sqli.yaml

…

chamilo-lms-xss.yaml

…

ckan-dom-based-xss.yaml

…

clockwatch-enterprise-rce.yaml

…

coldfusion-debug-xss.yaml

Description

2021-08-02 14:30:22 +03:00

commax-biometric-auth-bypass.yaml

Better description

2021-10-14 16:27:26 +03:00

commax-credentials-disclosure.yaml

Update and rename commax-cctv-rtsp-credentials-disclosure.yaml to commax-credentials-disclosure.yaml

2021-09-25 11:32:31 +05:30

comtrend-password-exposure.yaml

Add description

2021-10-17 15:50:52 +03:00

concrete-xss.yaml

Satisfying the linter (all errors and warnings)

2021-08-19 17:44:46 +03:00

core-chuangtian-cloud-rce.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

couchdb-adminparty.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

cs-cart-unauthenticated-lfi.yaml

Add description

2021-10-19 12:56:40 +03:00

dedecms-carbuyaction-fileinclude.yaml

Add description

2021-10-14 16:28:41 +03:00

dedecms-membergroup-sqli.yaml

Add description

2021-10-14 15:55:59 +03:00

dedecms-openredirect.yaml

…

dicoogle-pacs-lfi.yaml

Update and rename dicoogle-pacs-lfi.yaml to vulnerabilities/other/dicoogle-pacs-lfi.yaml

2021-12-24 19:23:04 +05:30

discourse-xss.yaml

…

dlink-850L-info-leak.yaml

Satisfying the linter (all errors and warnings)

2021-08-19 17:44:46 +03:00

duomicms-sql-injection.yaml

…

ecology-filedownload-directory-traversal.yaml

…

ecology-springframework-directory-traversal.yaml

…

ecshop-sqli.yaml

Add description

2021-11-23 12:09:00 +02:00

eibiz-lfi.yaml

Update and rename eibiz-server-3-8-0-lfi.yaml to vulnerabilities/other/eibiz-lfi.yaml

2021-11-18 21:52:30 +05:30

empirecms-xss.yaml

…

erp-nc-directory-traversal.yaml

…

etouch-v2-sqli.yaml

Fixed mistakes/typos in the templates.

2021-08-19 15:30:14 +03:00

ewebs-arbitrary-file-reading.yaml

Add description

2021-10-17 15:52:26 +03:00

eyelock-nano-lfd.yaml

Updates across many templates for clarity, spelling, and grammar.

2021-09-05 17:13:45 -04:00

eyou-email-rce.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

fanruanoa2012-disclosure.yaml

…

fatpipe-auth-bypass.yaml

Update and rename fatpipe-networks-warp-auth-bypass.yaml to fatpipe-auth-bypass.yaml

2021-09-30 17:18:21 +05:30

fatpipe-backdoor.yaml

Better description

2021-10-14 16:31:27 +03:00

feifeicms-lfr.yaml

Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string

2021-08-18 14:44:27 +03:00

finereport-path-traversal.yaml

…

flir-path-traversal.yaml

matcher update to handle edge cases

2021-07-25 03:05:55 +05:30

geovision-geowebserver-lfi.yaml

Previous reference is no longer available

2021-10-14 16:05:47 +03:00

geovision-geowebserver-xss.yaml

Add description

2021-10-14 16:32:34 +03:00

global-domains-lfi.yaml

Update and rename global-domains-lfi.yaml to vulnerabilities/other/global-domains-lfi.yaml

2021-12-18 14:43:28 +05:30

global-domains-xss.yaml

Create global-domains-xss.yaml

2021-12-18 14:51:08 +05:30

gloo-unauth.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

groupoffice-lfi.yaml

Update groupoffice-lfi.yaml

2021-12-18 14:32:09 +05:30

gsoap-lfi.yaml

Update gsoap-lfi.yaml

2021-09-06 17:34:51 +05:30

h3c-imc-rce.yaml

Fixed h3c-imc-rce.yaml (#3401 )

2021-12-23 20:23:42 +05:30

hashicorp-consul-rce.yaml

oob tags update

2021-10-19 02:10:26 +05:30

hasura-graphql-psql-exec.yaml

Add description

2021-10-14 16:34:15 +03:00

hasura-graphql-ssrf.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

hiboss-rce.yaml

Description

2021-10-14 16:35:40 +03:00

hjtcloud-arbitrary-file-read.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

hjtcloud-rest-arbitrary-file-read.yaml

…

homeautomation-v3-openredirect.yaml

Add description

2021-10-17 15:54:19 +03:00

hrsale-unauthenticated-lfi.yaml

Rename hrsale-unauthenticated-lfi.yaml to vulnerabilities/other/hrsale-unauthenticated-lfi.yaml

2021-11-13 23:37:32 +05:30

huawei-hg659-lfi.yaml

Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string

2021-08-18 14:44:27 +03:00

huawei-router-auth-bypass.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

huijietong-cloud-fileread.yaml

matcher update to handle edge cases

2021-07-25 03:05:55 +05:30

icewarp-webclient-rce.yaml

…

interlib-fileread.yaml

matcher update to handle edge cases

2021-07-25 03:05:55 +05:30

jeewms-lfi.yaml

Removing extra space from raw HTTP request

2021-12-22 13:33:51 +01:00

jfrog-unauth-build-exposed.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

joomla-com-fabrik-lfi.yaml

…

kafdrop-xss.yaml

…

karel-ip-phone-lfi.yaml

lint fix

2021-10-14 19:50:43 +05:30

kevinlab-bems-backdoor.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

kevinlab-bems-sqli.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

kevinlab-hems-backdoor.yaml

Updates across many templates for clarity, spelling, and grammar.

2021-09-05 17:13:45 -04:00

keycloak-xss.yaml

Update keycloak-xss.yaml

2021-10-09 08:46:17 +05:30

landray-oa-fileread.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

lotuscms-rce.yaml

…

lucee-xss.yaml

Add description

2021-10-19 13:17:58 +03:00

luftguitar-arbitrary-file-upload.yaml

Add description

2021-10-19 13:03:41 +03:00

maccmsv10-backdoor.yaml

Add description

2021-10-26 15:22:21 +03:00

magicflow-lfi.yaml

Add description

2021-10-19 13:10:34 +03:00

maian-cart-preauth-rce.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

mcafee-epo-rce.yaml

Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates into pr/2481

2021-09-03 14:55:30 +05:30

metinfo-lfi.yaml

Add description

2021-10-26 15:27:16 +03:00

microstrategy-ssrf.yaml

Update microstrategy-ssrf.yaml

2021-10-17 07:46:32 +05:30

mida-eframework-xss.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

minimouse-lfi.yaml

Add description

2021-10-19 13:10:29 +03:00

mirai-unknown-rce.yaml

oob tags update

2021-10-19 02:10:26 +05:30

mpsec-lfi.yaml

matcher update to handle edge cases

2021-07-25 03:05:55 +05:30

ms-exchange-server-reflected-xss.yaml

Satisfying the linter (all errors and warnings)

2021-08-19 17:44:46 +03:00

myucms-lfr.yaml

matcher update to handle edge cases

2021-07-25 03:05:55 +05:30

natshell-path-traversal.yaml

…

natshell-rce.yaml

…

netgear-router-auth-bypass.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

netgear-router-exposure.yaml

Vendor writes it as "NETGEAR"

2021-08-29 09:39:06 +03:00

netgear-wnap320-rce.yaml

oob tags update

2021-10-19 02:10:26 +05:30

netis-info-leak.yaml

Add description

2021-10-13 11:56:10 +03:00

nginx-merge-slashes-path-traversal.yaml

Add description

2021-10-13 12:00:39 +03:00

nginx-module-vts-xss.yaml

…

ns-asg-file-read.yaml

matcher update to handle edge cases

2021-07-25 03:05:55 +05:30

nuuo-file-inclusion.yaml

fixed invalid template syntax

2021-10-30 16:47:35 +05:30

nuuo-nvrmini2-rce.yaml

Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string

2021-08-18 14:44:27 +03:00

oa-tongda-path-traversal.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

oa-v9-uploads-file.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

odoo-cms-redirect.yaml

…

oliver-library-lfi.yaml

Update and rename oliver-library-server-lfi.yaml to oliver-library-lfi.yaml

2021-12-18 14:23:57 +05:30

opensis-lfi.yaml

Improve description

2021-10-13 12:01:33 +03:00

opensns-rce.yaml

Add description

2021-10-26 15:27:57 +03:00

openvpn-hhi.yaml

Add description

2021-10-19 13:17:58 +03:00

optilink-ont1gew-gpon-rce.yaml

oob tags update

2021-10-19 02:10:26 +05:30

pacsone-server-lfi.yaml

Update and rename pacsone-server-6-6-2-lfi.yaml to vulnerabilities/other/pacsone-server-lfi.yaml

2021-12-21 17:32:19 +05:30

parentlink-xss.yaml

…

pdf-signer-ssti-to-rce.yaml

misc fixes

2021-10-07 05:23:20 +05:30

php-timeclock-xss.yaml

…

php-zerodium-backdoor-rce.yaml

Add description

2021-10-27 14:05:11 +03:00

phpwiki-lfi.yaml

Add description

2021-10-21 08:51:56 +03:00

pmb-directory-traversal.yaml

Make description more clear

2021-10-21 08:55:02 +03:00

pmb-local-file-disclosure.yaml

Coverage for all templates using tags

2021-09-09 19:08:13 +05:30

powercreator-cms-rce.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

processmaker-lfi.yaml

Add description

2021-10-24 12:38:06 +03:00

qcubed-xss.yaml

Add description

2021-10-21 14:13:53 +03:00

qi-anxin-netkang-next-generation-firewall-rce.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

qihang-media-disclosure.yaml

Update and rename qihang-media-web-credentials-disclosure.yaml to qihang-media-disclosure.yaml

2021-10-01 16:26:25 +05:30

qihang-media-lfi.yaml

Improve description

2021-10-21 14:15:52 +03:00

rce-shellshock-user-agent.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

rconfig-rce.yaml

Add description

2021-10-27 14:06:15 +03:00

resin-cnnvd-200705-315.yaml

Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string

2021-08-18 14:44:27 +03:00

resin-inputfile-fileread.yaml

Add reference

2021-08-09 16:10:10 +03:00

resin-viewfile-lfr.yaml

Removed pipe (|) character from references, because the structure requires it to be a string slice, not a string

2021-08-18 14:44:27 +03:00

rockmongo-xss.yaml

Add description

2021-10-26 15:22:21 +03:00

ruijie-eg-rce.yaml

Non-broken link

2021-10-25 09:57:47 +03:00

ruijie-networks-lfi.yaml

Add description

2021-10-26 15:22:21 +03:00

ruijie-networks-rce.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

sangfor-edr-auth-bypass.yaml

Add description

2021-10-21 14:21:38 +03:00

sangfor-edr-rce.yaml

Add description

2021-10-27 13:52:34 +03:00

sap-redirect.yaml

Add description

2021-10-25 09:58:59 +03:00

sar2html-rce.yaml

oob tags update

2021-10-19 02:10:26 +05:30

seacms-rce.yaml

Add description

2021-10-26 15:29:20 +03:00

seowon-router-rce.yaml

misc updates

2021-11-13 23:01:53 +05:30

servicenow-helpdesk-credential.yaml

Added ServiceNow Helpdesk Credential Exposure (#3371 )

2021-12-19 23:42:01 +05:30

showdoc-file-upload-rce.yaml

removed extra headers not required for template

2021-09-08 17:47:19 +05:30

sick-beard-xss.yaml

metadata update

2021-10-22 23:23:25 +05:30

sl-studio-lfi.yaml

Update sl-studio-lfi.yaml

2021-12-29 09:20:13 +05:30

solar-log-authbypass.yaml

Fix description

2021-10-26 12:45:16 +03:00

sonicwall-sslvpn-shellshock.yaml

Add description

2021-10-26 15:28:43 +03:00

spark-webui-unauth.yaml

fixed invalid template syntax

2021-10-30 16:47:35 +05:30

symantec-messaging-gateway.yaml

…

tamronos-rce.yaml

matcher update to handle edge cases

2021-07-25 03:05:55 +05:30

thinkific-redirect.yaml

Update thinkific-redirect.yaml

2021-08-24 14:56:21 +07:00

thruk-xss.yaml

Update thruk-xss.yaml

2021-12-09 21:58:15 +05:30

tikiwiki-reflected-xss.yaml

Update tikiwiki-reflected-xss.yaml

2021-08-02 21:44:48 +05:30

tpshop-directory-traversal.yaml

…

turbocrm-xss.yaml

Add description

2021-10-27 14:04:00 +03:00

twig-php-ssti.yaml

Added skip-variables-check for SSTI template

2021-11-09 22:16:37 +05:30

ueditor-file-upload.yaml

Add description

2021-10-25 12:58:22 +03:00

unauth-hoteldruid-panel.yaml

add description

2021-10-25 10:01:03 +03:00

unauth-spark-api.yaml

Add description

2021-10-25 12:55:23 +03:00

unifi-network-log4j-rce.yaml

Added UniFi Network Log4j JNDI RCE (#3402 )

2021-12-23 08:57:03 +05:30

vanguard-post-xss.yaml

Update vanguard-post-xss.yaml

2021-11-05 21:36:53 +05:30

viewlinc-crlf-injection.yaml

Add description

2021-10-25 12:57:40 +03:00

visual-tools-dvr-rce.yaml

oob tags update

2021-10-19 02:10:26 +05:30

vpms-auth-bypass.yaml

Add description

2021-10-25 12:56:03 +03:00

watchguard-credentials-disclosure.yaml

Update and rename watchguard-fireware-ad-helper-component-credentials-disclosure.yaml to watchguard-credentials-disclosure.yaml

2021-12-09 21:05:13 +05:30

webui-rce.yaml

Add description

2021-10-25 12:54:49 +03:00

wems-manager-xss.yaml

Add description

2021-10-25 12:59:08 +03:00

WooYun-2015-148227.yaml

Add description

2021-10-27 14:03:22 +03:00

wooyun-path-traversal.yaml

Satisfying the linter (all errors and warnings)

2021-08-19 17:44:46 +03:00

wuzhicms-sqli.yaml

…

xdcms-sqli.yaml

…

yapi-rce.yaml

Add description

2021-10-26 15:26:10 +03:00

yarn-resourcemanager-rce.yaml

Add description

2021-10-26 15:25:34 +03:00

zcms-v3-sqli.yaml

…

zhiyuan-file-upload.yaml

Product name is 'OA'

2021-10-25 10:07:28 +03:00

zhiyuan-oa-info-leak.yaml

…

zhiyuan-oa-session-leak.yaml

Add description

2021-10-26 15:24:26 +03:00

zimbra-preauth-ssrf.yaml

Add description

2021-10-26 15:23:43 +03:00

zms-auth-bypass.yaml

Add description

2021-10-26 15:23:43 +03:00