v9.8.0 – Catch ‘Em All: Network Vulnerabilities : A Deep Dive Into The Latest Nuclei Templates Release

We’re thrilled to share that with the launch of Nuclei Templates version 9.8.0, we’ve broadened our scope in network security checks.

Our template library now boasts over 8,000 entries, encompassing more than 7,202 templates for web applications.

This collection includes 2,200 web-related CVEs and features more than 850 templates aimed at identifying web vulnerabilities.

With the help of active community contributions, we have been adding all the latest web CVEs and vulnerabilities in the wild.

While we continue to do so, we are focused on expanding our template offerings to include network vulnerabilities, providing the most comprehensive scanning.

With this release, we’re inviting contributors to aid us in enriching our network vulnerability detection, facilitated by the new JS protocol.

This makes it simpler to incorporate network checks through the newly introduced JS modules. For guidance on crafting JS templates, check out our documentation here.

Next, we are aiming to expand coverage of LDAP and Kerberos related checks. We are looking forward to getting more contributions from the community

What’s Changed

New Templates Added: 85 | CVEs Added: 8 | First-time contributions: 5

• http/cves/2023/CVE-2023-49785.yaml by @high 
• http/cves/2023/CVE-2023-5830.yaml by @mbb5546
• http/cves/2023/CVE-2023-5914.yaml by @dhiyaneshdk
• http/cves/2023/CVE-2023-6114.yaml by @dhiyaneshdk
• http/cves/2023/CVE-2023-6567.yaml by @iamnoooob,@rootxharsh,@pdresearch 
• http/cves/2024/CVE-2024-1212.yaml by @dhiyaneshdk 
• http/cves/2024/CVE-2024-1698.yaml by @dhiyaneshdk
• http/cves/2024/CVE-2024-27954.yaml by @iamnoooob,@rootxharsh,@pdresearch 
• javascript/audit/mysql/mysql-load-file.yaml by @pussycat0x
• javascript/enumeration/mysql/mysql-default-login.yaml by @dhiyaneshdk,@pussycat0x,@ritikchaddha
• javascript/enumeration/mysql/mysql-info.yaml by @pussycat0x
• javascript/enumeration/mysql/mysql-show-databases.yaml by @dhiyaneshdk
• javascript/enumeration/mysql/mysql-show-variables.yaml by @dhiyaneshdk
• javascript/enumeration/mysql/mysql-user-enum.yaml by @pussycat0x
• javascript/enumeration/pop3/pop3-capabilities-enum.yaml by @pussycat0x
• javascript/enumeration/redis/redis-info.yaml by @dhiyaneshdk
• javascript/enumeration/redis/redis-require-auth.yaml by @dhiyaneshdk

For more information click here.