Merge branch 'main' into secrets-manager-aws

Author: princechaddha

.github/workflows/tests.yml

@@ -32,6 +32,9 @@ jobs:
     needs: lint
     runs-on: ubuntu-latest
     if: github.repository == 'projectdiscovery/nuclei-templates'
+    permissions:
+      issues: write
+      pull-requests: write
     env:
       HONEYPOT_URL: 'http://honey.scanme.sh'
     steps:

.new-additions

@@ -1,30 +1,32 @@
-http/cves/2015/CVE-2015-8562.yaml
-http/cves/2018/CVE-2018-7192.yaml
-http/cves/2018/CVE-2018-7193.yaml
-http/cves/2018/CVE-2018-7196.yaml
-http/cves/2021/CVE-2021-45811.yaml
-http/cves/2023/CVE-2023-1315.yaml
-http/cves/2023/CVE-2023-1317.yaml
-http/cves/2023/CVE-2023-1318.yaml
-http/cves/2024/CVE-2024-32735.yaml
-http/cves/2024/CVE-2024-32736.yaml
-http/cves/2024/CVE-2024-32737.yaml
-http/cves/2024/CVE-2024-32738.yaml
-http/cves/2024/CVE-2024-32739.yaml
-http/cves/2024/CVE-2024-39713.yaml
-http/cves/2024/CVE-2024-43360.yaml
-http/cves/2024/CVE-2024-44349.yaml
-http/cves/2024/CVE-2024-45488.yaml
-http/cves/2024/CVE-2024-5910.yaml
-http/exposed-panels/paloalto-expedition-panel.yaml
-http/exposed-panels/traccar-panel.yaml
-http/exposed-panels/txadmin-panel.yaml
-http/exposed-panels/veritas-netbackup-panel.yaml
-http/exposed-panels/vmware-aria-panel.yaml
-http/misconfiguration/root-path-disclosure.yaml
-http/technologies/accellion-detect.yaml
-http/technologies/mirth-connect-detect.yaml
-http/technologies/oracle-fusion-detect.yaml
+cloud/aws/cloudformation/stack-notification-disabled.yaml
+cloud/aws/cloudformation/stack-policy-not-inuse.yaml
+cloud/aws/cloudformation/stack-termination-disabled.yaml
+cloud/aws/cloudfront/cloudfront-compress-object.yaml
+cloud/aws/cloudfront/cloudfront-custom-certificates.yaml
+cloud/aws/cloudfront/cloudfront-geo-restriction.yaml
+cloud/aws/cloudfront/cloudfront-insecure-protocol.yaml
+cloud/aws/cloudfront/cloudfront-integrated-waf.yaml
+cloud/aws/cloudfront/cloudfront-logging-disabled.yaml
+cloud/aws/cloudfront/cloudfront-origin-shield.yaml
+cloud/aws/cloudfront/cloudfront-security-policy.yaml
+cloud/aws/cloudfront/cloudfront-traffic-unencrypted.yaml
+cloud/aws/cloudfront/cloudfront-viewer-policy.yaml
+code/cves/2014/CVE-2014-0160.yaml
+file/logs/aspnet-framework-exceptions.yaml
+file/logs/nodejs-framework-exceptions.yaml
+http/cves/2019/CVE-2019-1003000.yaml
+http/cves/2024/CVE-2024-48360.yaml
+http/cves/2024/CVE-2024-4841.yaml
+http/cves/2024/CVE-2024-6049.yaml
+http/cves/2024/CVE-2024-6420.yaml
+http/exposed-panels/cyberpanel-panel.yaml
+http/exposed-panels/nexpose-panel.yaml
+http/exposed-panels/quivr-panel.yaml
+http/iot/ip-webcam.yaml
+http/miscellaneous/azure-blob-core-detect.yaml
+http/technologies/hubble-detect.yaml
+http/technologies/localai-detect.yaml
+http/technologies/pghero-detect.yaml
 http/technologies/wordpress/plugins/burst-statistics.yaml
-http/vulnerabilities/yonyou/yonyou-u8-crm-tb-sqli.yaml
-passive/cves/2024/CVE-2024-40711.yaml
+http/technologies/wordpress/plugins/flexmls-detect.yaml
+http/vulnerabilities/backdoor/lottie-backdoor.yaml

README.md

@@ -42,18 +42,18 @@ An overview of the nuclei template project, including statistics on unique tags,
 
 |    TAG    | COUNT |    AUTHOR     | COUNT | DIRECTORY  | COUNT | SEVERITY | COUNT | TYPE | COUNT |
 |-----------|-------|---------------|-------|------------|-------|----------|-------|------|-------|
-| cve       |  2773 | dhiyaneshdk   |  1420 | http       |  8042 | info     |  3887 | file |   402 |
-| panel     |  1212 | daffainfo     |   866 | file       |   402 | high     |  2039 | dns  |    25 |
-| wordpress |  1046 | dwisiswant0   |   802 | cloud      |   325 | medium   |  1742 |      |       |
-| exposure  |   997 | princechaddha |   498 | workflows  |   192 | critical |  1158 |      |       |
-| xss       |   956 | ritikchaddha  |   455 | network    |   137 | low      |   280 |      |       |
-| wp-plugin |   915 | pussycat0x    |   452 | code       |    84 | unknown  |    43 |      |       |
+| cve       |  2824 | dhiyaneshdk   |  1456 | http       |  8128 | info     |  3910 | file |   402 |
+| panel     |  1225 | daffainfo     |   866 | file       |   402 | high     |  2069 | dns  |    25 |
+| wordpress |  1057 | dwisiswant0   |   802 | cloud      |   353 | medium   |  1784 |      |       |
+| exposure  |   999 | princechaddha |   498 | workflows  |   192 | critical |  1175 |      |       |
+| xss       |   975 | ritikchaddha  |   479 | network    |   137 | low      |   284 |      |       |
+| wp-plugin |   920 | pussycat0x    |   452 | code       |    84 | unknown  |    43 |      |       |
 | osint     |   807 | pikpikcu      |   353 | javascript |    65 |          |       |      |       |
-| tech      |   729 | pdteam        |   302 | ssl        |    30 |          |       |      |       |
-| lfi       |   713 | ricardomaia   |   243 | dast       |    25 |          |       |      |       |
-| misconfig |   713 | geeknik       |   231 | dns        |    22 |          |       |      |       |
+| tech      |   736 | pdteam        |   302 | ssl        |    30 |          |       |      |       |
+| misconfig |   718 | ricardomaia   |   243 | dast       |    26 |          |       |      |       |
+| lfi       |   716 | geeknik       |   231 | dns        |    22 |          |       |      |       |
 
-**723 directories, 9654 files**.
+**736 directories, 9771 files**.
 
 </td>
 </tr>