nuclei-templates/.new-additions

277 lines
15 KiB
Plaintext
Raw Normal View History

2024-09-12 05:20:20 +00:00
cloud/azure/accesscontrol/azure-custom-admin-role-unrestricted.yaml
cloud/azure/accesscontrol/azure-custom-owner-role-unrestricted.yaml
cloud/azure/accesscontrol/azure-iam-role-resource-lock-unassigned.yaml
cloud/azure/activedirectory/azure-entra-id-guest-users-unmonitored.yaml
cloud/azure/activedirectory/azure-mfa-not-enabled-privileged-users.yaml
cloud/azure/activitylog/azure-db-mysql-delete-unalerted.yaml
cloud/azure/activitylog/azure-delete-lb-alert-unconfigured.yaml
cloud/azure/activitylog/azure-key-vault-delete-unalerted.yaml
cloud/azure/activitylog/azure-keyvault-update-unalerted.yaml
cloud/azure/activitylog/azure-lb-create-update-missing.yaml
cloud/azure/activitylog/azure-mysql-db-update-unalerted.yaml
cloud/azure/activitylog/azure-nsg-create-update-unalerted.yaml
cloud/azure/activitylog/azure-nsg-delete-unalerted.yaml
cloud/azure/activitylog/azure-nsg-rule-delete-unalerted.yaml
cloud/azure/activitylog/azure-nsg-rule-update-unalerted.yaml
cloud/azure/activitylog/azure-policy-assignment-create-alert-missing.yaml
cloud/azure/activitylog/azure-policy-assignment-delete-unalerted.yaml
cloud/azure/activitylog/azure-postgresql-db-delete-unalerted.yaml
cloud/azure/activitylog/azure-postgresql-db-update-unalerted.yaml
cloud/azure/activitylog/azure-public-ip-delete-unalerted.yaml
cloud/azure/activitylog/azure-public-ip-update-unalerted.yaml
cloud/azure/activitylog/azure-security-policy-update-unalerted.yaml
cloud/azure/activitylog/azure-security-solution-delete-unalerted.yaml
cloud/azure/activitylog/azure-security-solutions-update-unalerted.yaml
cloud/azure/activitylog/azure-sql-database-rename-unalerted.yaml
cloud/azure/activitylog/azure-sql-db-update-unalerted.yaml
cloud/azure/activitylog/azure-sql-delete-db-unalerted.yaml
cloud/azure/activitylog/azure-sql-fw-rule-unalerted.yaml
cloud/azure/activitylog/azure-storage-account-delete-unalerted.yaml
cloud/azure/activitylog/azure-storage-account-update-unalerted.yaml
cloud/azure/activitylog/azure-vm-create-update-unalerted.yaml
cloud/azure/activitylog/azure-vm-deallocate-unalerted.yaml
cloud/azure/activitylog/azure-vm-delete-unalerted.yaml
cloud/azure/activitylog/azure-vm-poweroff-unalerted.yaml
cloud/azure/aiservices/azure-openai-cmk-not-enabled.yaml
cloud/azure/aiservices/azure-openai-managed-identity-not-used.yaml
cloud/azure/aiservices/azure-openai-private-endpoints-unconfigured.yaml
cloud/azure/aiservices/azure-openai-public-access-disabled.yaml
cloud/azure/aks/azure-aks-api-unrestricted.yaml
cloud/azure/aks/azure-aks-api-version-not-latest.yaml
cloud/azure/aks/azure-aks-cni-not-configured.yaml
cloud/azure/aks/azure-aks-entra-id-unintegrated.yaml
cloud/azure/aks/azure-aks-kubernetes-version-outdated.yaml
cloud/azure/aks/azure-aks-managed-identity-unassigned.yaml
cloud/azure/aks/azure-aks-network-contrib-unassigned.yaml
cloud/azure/aks/azure-aks-not-user-assigned.yaml
cloud/azure/aks/azure-aks-rbac-unconfigured.yaml
cloud/azure/aks/azure-aks-use-private-kv.yaml
cloud/azure/apimanagement/azure-apim-http2-not-enabled.yaml
cloud/azure/apimanagement/azure-apim-https-enforcement-missing.yaml
cloud/azure/apimanagement/azure-apim-nv-plaintext-exposure.yaml
cloud/azure/apimanagement/azure-apim-public-access-disabled.yaml
cloud/azure/apimanagement/azure-apim-resource-logs-not-configured.yaml
cloud/azure/apimanagement/azure-apim-system-assigned-identity-unconfigured.yaml
cloud/azure/apimanagement/azure-apim-tls-config-weak.yaml
cloud/azure/apimanagement/azure-apim-user-assigned-id-not-used.yaml
cloud/azure/appservice/azure-appservice-always-on-disabled.yaml
cloud/azure/appservice/azure-appservice-auth-disabled.yaml
cloud/azure/appservice/azure-appservice-backup-not-enabled.yaml
cloud/azure/appservice/azure-appservice-backup-retention-missing.yaml
cloud/azure/appservice/azure-appservice-client-cert-disabled.yaml
cloud/azure/appservice/azure-appservice-entra-id-missing.yaml
cloud/azure/appservice/azure-appservice-ftp-deployment-disabled.yaml
cloud/azure/appservice/azure-appservice-ftps-only-not-enabled.yaml
cloud/azure/appservice/azure-appservice-http2-not-enabled.yaml
cloud/azure/appservice/azure-appservice-https-only-not-enforced.yaml
cloud/azure/appservice/azure-appservice-insights-not-enabled.yaml
cloud/azure/appservice/azure-appservice-remote-debugging-enabled.yaml
cloud/azure/appservice/azure-appservice-tls-latest-version-missing.yaml
cloud/azure/azure-env.yaml
cloud/azure/cosmosdb/azure-cosmosdb-auto-failover-missing.yaml
cloud/azure/cosmosdb/azure-cosmosdb-default-network-access-unrestricted.yaml
cloud/azure/functions/azure-functionapp-access-keys-missing.yaml
cloud/azure/functions/azure-functionapp-admin-privileges.yaml
cloud/azure/functions/azure-functionapp-appinsights-missing.yaml
cloud/azure/functions/azure-functionapp-public-exposure.yaml
cloud/azure/functions/azure-functionapp-system-assigned-missing.yaml
cloud/azure/functions/azure-functionapp-user-assigned-id-missing.yaml
cloud/azure/functions/azure-functionapp-vnet-integration-missing.yaml
cloud/azure/keyvault/azure-app-tier-cmk-untagged.yaml
cloud/azure/keyvault/azure-database-tier-cmk-absent.yaml
cloud/azure/keyvault/azure-keyvault-audit-not-enabled.yaml
cloud/azure/keyvault/azure-keyvault-cert-keytype-unapproved.yaml
cloud/azure/keyvault/azure-keyvault-cert-transparency-missing.yaml
cloud/azure/keyvault/azure-keyvault-certificate-insufficient-autorenew.yaml
cloud/azure/keyvault/azure-keyvault-network-unrestricted.yaml
cloud/azure/keyvault/azure-keyvault-recoverability-unconfigured.yaml
cloud/azure/keyvault/azure-keyvault-ssl-autorenewal-missing.yaml
cloud/azure/keyvault/azure-keyvault-trusted-ms-unrestricted.yaml
cloud/azure/locks/azure-keyvault-resource-lock-check.yaml
cloud/azure/monitor/azure-diag-logs-not-enabled.yaml
cloud/azure/monitor/azure-diagnostic-categories-misconfigured.yaml
cloud/azure/monitor/azure-log-profile-all-activities.yaml
cloud/azure/monitor/azure-monitor-diagnostic-unrestricted.yaml
cloud/azure/network/azure-network-watcher.yaml
cloud/azure/network/azure-nic-ip-forwarding-check.yaml
cloud/azure/network/azure-nsg-cifs-unrestricted.yaml
cloud/azure/network/azure-nsg-dns-unrestricted.yaml
cloud/azure/network/azure-nsg-ftp-unrestricted.yaml
cloud/azure/network/azure-nsg-http-unrestricted.yaml
cloud/azure/network/azure-nsg-https-unrestricted.yaml
cloud/azure/network/azure-nsg-icmp-unrestricted.yaml
cloud/azure/network/azure-nsg-mongodb-unrestricted.yaml
cloud/azure/network/azure-nsg-mssql-unrestricted.yaml
cloud/azure/network/azure-nsg-mysql-unrestricted.yaml
cloud/azure/network/azure-nsg-netbios-unrestricted.yaml
cloud/azure/network/azure-nsg-oracle-db-unrestricted.yaml
cloud/azure/network/azure-nsg-postgresql-unrestricted.yaml
cloud/azure/network/azure-nsg-rdp-unrestricted.yaml
cloud/azure/network/azure-nsg-rpc-unrestricted.yaml
cloud/azure/network/azure-nsg-smtp-unrestricted.yaml
cloud/azure/network/azure-nsg-ssh-unrestricted.yaml
cloud/azure/network/azure-nsg-telnet-unrestricted.yaml
cloud/azure/network/azure-nsg-udp-unrestricted.yaml
cloud/azure/network/azure-nsg-unrestricted-port-range.yaml
cloud/azure/network/azure-vnet-ddos-protection.yaml
cloud/azure/postgresql/azure-postgres-allow-azure-services-disabled.yaml
cloud/azure/postgresql/azure-postgres-connection-throttling-disabled.yaml
cloud/azure/postgresql/azure-postgres-double-encryption-disabled.yaml
cloud/azure/postgresql/azure-postgres-log-checkpoints-disabled.yaml
cloud/azure/postgresql/azure-postgres-log-connections-disabled.yaml
cloud/azure/postgresql/azure-postgres-log-disconnections-disabled.yaml
cloud/azure/postgresql/azure-postgres-log-duration-disabled.yaml
cloud/azure/postgresql/azure-postgresql-geo-backup-disabled.yaml
cloud/azure/postgresql/azure-postgresql-ssl-enforcement.yaml
cloud/azure/postgresql/azure-postgresql-storage-autogrow-disabled.yaml
cloud/azure/redis/azure-redis-nonssl-port-disabled.yaml
cloud/azure/redis/azure-redis-tls-version-outdated.yaml
cloud/azure/search/azure-search-service-managed-identity-disabled.yaml
cloud/azure/securitycenter/azure-defender-auto-provisioning-disabled.yaml
cloud/azure/servicebus/azure-servicebus-public-access-disabled.yaml
cloud/azure/servicebus/azure-servicebus-tls-version-outdated.yaml
cloud/azure/sql/azure-sql-auditing-disabled.yaml
cloud/azure/sql/azure-sql-failover-not-enabled.yaml
cloud/azure/sql/azure-sql-mi-tde-cmk-not-enabled.yaml
cloud/azure/sql/azure-sql-mi-tls-version-outdated.yaml
cloud/azure/sql/azure-sql-tde-cmk-not-used.yaml
cloud/azure/sql/azure-sql-tde-not-enabled.yaml
cloud/azure/sql/azure-sql-va-emails-unconfigured.yaml
cloud/azure/storageaccounts/azure-blob-anonymous-access-disabled.yaml
cloud/azure/storageaccounts/azure-blob-immutable-not-enabled.yaml
cloud/azure/storageaccounts/azure-blob-lifecycle-not-enabled.yaml
cloud/azure/storageaccounts/azure-blob-service-logging-disabled.yaml
cloud/azure/storageaccounts/azure-blob-soft-delete-disabled.yaml
cloud/azure/storageaccounts/azure-storage-blob-public-access.yaml
cloud/azure/storageaccounts/azure-storage-byok-not-used.yaml
cloud/azure/storageaccounts/azure-storage-cmk-not-used.yaml
cloud/azure/storageaccounts/azure-storage-cross-tenant-replication-disabled.yaml
cloud/azure/storageaccounts/azure-storage-encryption-missing.yaml
cloud/azure/storageaccounts/azure-storage-min-tls-version.yaml
cloud/azure/storageaccounts/azure-storage-network-unrestricted.yaml
cloud/azure/storageaccounts/azure-storage-overly-permissive-sap.yaml
cloud/azure/storageaccounts/azure-storage-private-endpoint-unconfigured.yaml
cloud/azure/storageaccounts/azure-storage-public-access.yaml
cloud/azure/storageaccounts/azure-storage-queue-logging-disabled.yaml
cloud/azure/storageaccounts/azure-storage-secure-transfer.yaml
cloud/azure/storageaccounts/azure-storage-static-website-review.yaml
cloud/azure/storageaccounts/azure-storage-table-logging-disabled.yaml
cloud/azure/storageaccounts/azure-storage-trusted-access-disabled.yaml
cloud/azure/subscriptions/azure-budget-alerts-missing.yaml
cloud/azure/subscriptions/azure-policy-not-allowed-types-unassigned.yaml
cloud/azure/synapse/azure-synapse-sqlpool-tde-disabled.yaml
cloud/azure/tags/azure-vm-tags-schema-noncompliant.yaml
cloud/azure/virtualmachines/azure-app-tier-vm-disk-unencrypted.yaml
cloud/azure/virtualmachines/azure-disk-encryption-unattached-volumes.yaml
cloud/azure/virtualmachines/azure-lb-unused.yaml
cloud/azure/virtualmachines/azure-vm-accelerated-networking-disabled.yaml
cloud/azure/virtualmachines/azure-vm-accelerated-networking-not-enabled.yaml
cloud/azure/virtualmachines/azure-vm-boot-diagnostics-not-enabled.yaml
cloud/azure/virtualmachines/azure-vm-boot-disk-unencrypted.yaml
cloud/azure/virtualmachines/azure-vm-byok-disk-volumes-not-enabled.yaml
cloud/azure/virtualmachines/azure-vm-endpoint-protection-missing.yaml
cloud/azure/virtualmachines/azure-vm-entra-id-unenabled.yaml
cloud/azure/virtualmachines/azure-vm-guest-diagnostics-unenabled.yaml
cloud/azure/virtualmachines/azure-vm-jit-access-not-enabled.yaml
cloud/azure/virtualmachines/azure-vm-managed-identity-unassigned.yaml
cloud/azure/virtualmachines/azure-vm-performance-diagnostics-unenabled.yaml
cloud/azure/virtualmachines/azure-vm-ssh-auth-type.yaml
cloud/azure/virtualmachines/azure-vm-standard-ssd-required.yaml
cloud/azure/virtualmachines/azure-vm-trusted-launch-disabled.yaml
cloud/azure/virtualmachines/azure-vm-unapproved-image.yaml
cloud/azure/virtualmachines/azure-vm-unmanaged-disk-volumes.yaml
cloud/azure/virtualmachines/azure-vm-web-tier-disk-unencrypted.yaml
cloud/azure/virtualmachines/azure-vmss-auto-os-upgrade-missing.yaml
cloud/azure/virtualmachines/azure-vmss-auto-repairs-disabled.yaml
cloud/azure/virtualmachines/azure-vmss-empty-unattached.yaml
cloud/azure/virtualmachines/azure-vmss-health-monitoring-missing.yaml
cloud/azure/virtualmachines/azure-vmss-load-balancer-unassociated.yaml
cloud/azure/virtualmachines/azure-vmss-public-ip-disabled.yaml
cloud/azure/virtualmachines/azure-vmss-termination-notif-disabled.yaml
cloud/azure/virtualmachines/azure-vmss-zone-redundancy-missing.yaml
2024-09-05 06:22:56 +00:00
code/cves/2024/CVE-2024-22120.yaml
2024-09-06 06:45:06 +00:00
headless/cves/2024/CVE-2024-29882.yaml
2024-09-06 12:18:35 +00:00
headless/vulnerabilities/retool/retool-dom-xss.yaml
2024-09-10 06:20:58 +00:00
http/cves/2000/CVE-2000-0760.yaml
2024-09-09 18:32:49 +00:00
http/cves/2007/CVE-2007-2449.yaml
2024-09-06 12:07:21 +00:00
http/cves/2014/CVE-2014-4577.yaml
2024-09-06 12:12:28 +00:00
http/cves/2014/CVE-2014-4941.yaml
2024-09-06 12:13:37 +00:00
http/cves/2014/CVE-2014-5181.yaml
2024-09-06 12:09:05 +00:00
http/cves/2014/CVE-2014-5187.yaml
2024-09-19 06:11:03 +00:00
http/cves/2022/CVE-2022-24637.yaml
2024-09-05 04:34:27 +00:00
http/cves/2023/CVE-2023-22621.yaml
2024-09-17 03:05:55 +00:00
http/cves/2023/CVE-2023-3188.yaml
2024-09-02 18:02:19 +00:00
http/cves/2023/CVE-2023-34105.yaml
2024-09-04 08:04:32 +00:00
http/cves/2023/CVE-2023-35155.yaml
2024-09-12 06:23:11 +00:00
http/cves/2023/CVE-2023-38992.yaml
2024-09-17 03:17:06 +00:00
http/cves/2023/CVE-2023-39024.yaml
2024-09-06 15:13:01 +00:00
http/cves/2023/CVE-2023-41597.yaml
2024-09-05 06:19:26 +00:00
http/cves/2023/CVE-2023-41621.yaml
2024-09-19 03:40:06 +00:00
http/cves/2023/CVE-2023-43654.yaml
2024-09-02 17:59:02 +00:00
http/cves/2023/CVE-2023-47684.yaml
2024-09-19 04:03:31 +00:00
http/cves/2023/CVE-2023-6275.yaml
2024-09-05 04:58:01 +00:00
http/cves/2023/CVE-2023-6329.yaml
2024-09-04 15:33:42 +00:00
http/cves/2024/CVE-2024-20419.yaml
2024-09-06 06:45:06 +00:00
http/cves/2024/CVE-2024-20439.yaml
2024-09-05 19:35:31 +00:00
http/cves/2024/CVE-2024-20440.yaml
2024-09-12 06:18:41 +00:00
http/cves/2024/CVE-2024-23167.yaml
2024-09-19 06:09:37 +00:00
http/cves/2024/CVE-2024-28397.yaml
2024-09-05 04:45:13 +00:00
http/cves/2024/CVE-2024-28987.yaml
2024-09-05 06:29:42 +00:00
http/cves/2024/CVE-2024-29889.yaml
2024-09-17 03:28:32 +00:00
http/cves/2024/CVE-2024-3673.yaml
2024-09-08 18:59:46 +00:00
http/cves/2024/CVE-2024-38472.yaml
2024-09-10 10:45:11 +00:00
http/cves/2024/CVE-2024-41667.yaml
2024-09-05 06:33:05 +00:00
http/cves/2024/CVE-2024-41955.yaml
2024-09-10 09:47:41 +00:00
http/cves/2024/CVE-2024-44849.yaml
2024-09-06 12:26:08 +00:00
http/cves/2024/CVE-2024-45195.yaml
2024-09-08 19:28:26 +00:00
http/cves/2024/CVE-2024-45388.yaml
2024-09-19 07:09:14 +00:00
http/cves/2024/CVE-2024-45507.yaml
2024-09-19 03:29:05 +00:00
http/cves/2024/CVE-2024-45622.yaml
2024-09-08 18:37:53 +00:00
http/cves/2024/CVE-2024-6159.yaml
2024-09-05 06:30:55 +00:00
http/cves/2024/CVE-2024-6586.yaml
2024-09-08 19:29:08 +00:00
http/cves/2024/CVE-2024-6846.yaml
2024-09-08 18:59:46 +00:00
http/cves/2024/CVE-2024-6924.yaml
2024-09-08 18:41:51 +00:00
http/cves/2024/CVE-2024-6926.yaml
2024-09-10 10:58:16 +00:00
http/cves/2024/CVE-2024-6928.yaml
2024-09-06 12:17:08 +00:00
http/cves/2024/CVE-2024-7029.yaml
2024-09-08 19:30:25 +00:00
http/cves/2024/CVE-2024-7786.yaml
2024-09-19 03:31:30 +00:00
http/cves/2024/CVE-2024-8503.yaml
2024-09-10 10:17:32 +00:00
http/cves/2024/CVE-2024-8517.yaml
2024-09-17 03:10:23 +00:00
http/cves/2024/CVE-2024-8752.yaml
2024-09-05 04:54:05 +00:00
http/default-logins/apache/apache-hertzbeat-default-login.yaml
2024-09-17 03:03:13 +00:00
http/default-logins/bonita/bonita-default-login.yaml
2024-09-17 03:12:31 +00:00
http/default-logins/nginx/nginx-proxy-manager-default-login.yaml
2024-09-10 10:04:58 +00:00
http/exposed-panels/authentik-panel.yaml
2024-09-17 02:59:47 +00:00
http/exposed-panels/bonita-portal-panel.yaml
2024-09-10 06:20:50 +00:00
http/exposed-panels/ibm/ibm-api-connect-panel.yaml
2024-09-10 09:53:25 +00:00
http/exposed-panels/kemp-loadmaster-panel.yaml
2024-09-19 03:31:24 +00:00
http/exposed-panels/open-web-analytics-panel.yaml
2024-09-10 06:17:03 +00:00
http/exposures/configs/apache-jspwiki-ip-userenum.yaml
2024-09-10 11:03:54 +00:00
http/misconfiguration/directory-listing-no-host-header.yaml
2024-09-05 06:22:23 +00:00
http/misconfiguration/installer/emlog-installer.yaml
2024-09-19 03:30:34 +00:00
http/misconfiguration/installer/open-web-analytics-installer.yaml
2024-09-05 04:29:06 +00:00
http/misconfiguration/installer/strapi-admin-installer.yaml
2024-09-06 15:13:19 +00:00
http/misconfiguration/nginx/nginx-api-traversal.yaml
2024-09-05 07:03:15 +00:00
http/misconfiguration/repetier-unauth.yaml
2024-09-10 06:17:03 +00:00
http/technologies/apache/apache-jspwiki-detect.yaml
2024-09-17 03:10:07 +00:00
http/technologies/domibus-detect.yaml
2024-09-10 11:10:07 +00:00
http/technologies/ibm/ibm-api-connect-developer-portal-detect.yaml
2024-09-19 04:01:30 +00:00
http/technologies/torchserve-detect.yaml
2024-09-10 11:10:54 +00:00
http/technologies/wordpress/plugins/give.yaml
http/technologies/wordpress/plugins/inpost-for-woocommerce.yaml
http/technologies/wordpress/plugins/woo-inpost.yaml
2024-09-13 17:19:31 +00:00
http/technologies/wordpress/plugins/wp-mail-logging.yaml
2024-09-05 06:13:36 +00:00
http/technologies/writebook-detect.yaml
2024-09-05 04:54:05 +00:00
http/vulnerabilities/finereport/finereport-sqli-rce.yaml
2024-09-10 06:19:48 +00:00
http/vulnerabilities/imo/imo-file-download.yaml
2024-09-10 06:20:50 +00:00
http/vulnerabilities/imo/imo-rce.yaml
2024-09-02 17:51:54 +00:00
http/vulnerabilities/other/fastbee-arbitrary-file-read.yaml
2024-09-10 06:20:50 +00:00
http/vulnerabilities/other/fumasoft-sqli.yaml
2024-09-12 08:53:58 +00:00
http/vulnerabilities/other/fumengyun-sqli.yaml
2024-09-17 03:12:41 +00:00
http/vulnerabilities/other/motic-dsm-arbitrary-file-read.yaml
2024-09-10 17:32:44 +00:00
http/vulnerabilities/other/nsfocus-auth-bypass.yaml
2024-09-10 18:08:22 +00:00
http/vulnerabilities/other/nsfocus-lfi.yaml
2024-09-10 17:31:16 +00:00
http/vulnerabilities/other/webp-server-lfi.yaml
2024-09-05 04:41:06 +00:00
http/vulnerabilities/projectsend-auth-bypass.yaml
2024-09-10 18:08:22 +00:00
http/vulnerabilities/yonyou/yonyou-ufida-nc-cloud-sqli.yaml