v9.8.0 – Catch ‘Em All: Network Vulnerabilities : A Deep Dive Into The Latest Nuclei Templates Release

We’re thrilled to share that with the launch of Nuclei Templates version 9.8.0, we’ve broadened our scope in network security checks.

Our template library now boasts over 8,000 entries, encompassing more than 7,202 templates for web applications.

This collection includes 2,200 web-related CVEs and features more than 850 templates aimed at identifying web vulnerabilities.

With the help of active community contributions, we have been adding all the latest web CVEs and vulnerabilities in the wild.

While we continue to do so, we are focused on expanding our template offerings to include network vulnerabilities, providing the most comprehensive scanning.

With this release, we’re inviting contributors to aid us in enriching our network vulnerability detection, facilitated by the new JS protocol.

This makes it simpler to incorporate network checks through the newly introduced JS modules. For guidance on crafting JS templates, check out our documentation here.

Next, we are aiming to expand coverage of LDAP and Kerberos related checks. We are looking forward to getting more contributions from the community

What’s Changed

New Templates Added: `85` | CVEs Added: `8` | First-time contributions: `5`

http/cves/2023/CVE-2023-49785.yaml by @high
http/cves/2023/CVE-2023-5830.yaml by @mbb5546
http/cves/2023/CVE-2023-5914.yaml by @dhiyaneshdk
http/cves/2023/CVE-2023-6114.yaml by @dhiyaneshdk
http/cves/2023/CVE-2023-6567.yaml by @iamnoooob,@rootxharsh,@pdresearch
http/cves/2024/CVE-2024-1212.yaml by @dhiyaneshdk
http/cves/2024/CVE-2024-1698.yaml by @dhiyaneshdk
http/cves/2024/CVE-2024-27954.yaml by @iamnoooob,@rootxharsh,@pdresearch
javascript/audit/mysql/mysql-load-file.yaml by @pussycat0x
javascript/enumeration/mysql/mysql-default-login.yaml by @dhiyaneshdk,@pussycat0x,@ritikchaddha
javascript/enumeration/mysql/mysql-info.yaml by @pussycat0x
javascript/enumeration/mysql/mysql-show-databases.yaml by @dhiyaneshdk
javascript/enumeration/mysql/mysql-show-variables.yaml by @dhiyaneshdk
javascript/enumeration/mysql/mysql-user-enum.yaml by @pussycat0x
javascript/enumeration/pop3/pop3-capabilities-enum.yaml by @pussycat0x
javascript/enumeration/redis/redis-info.yaml by @dhiyaneshdk
javascript/enumeration/redis/redis-require-auth.yaml by @dhiyaneshdk

For more information click here.

Varshini

Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.