CVE-2023-23138

ruby-rail-properties CVE-2023-23138 This is a short view of ruby on rails properties misconfiguration sometimes developers forgot to disable this endpoint /rails/info/properties if this endpoint was enabled on the host, that's mean an attacker can see part/all of the following information:...

zeroqlik-detect

Description A Nuclei template to detect ZeroQlik CVE-2023-41265 and CVE-2023-41266...

CVE-2022-27925

CVE-2022-27925 CVE-2022-27925 nuclei template...

CVE-2024-24919

CVE-2024-24919 nuclei template of CVE-2024-24919 This template will help detect the described vulnerability by checking if the system leaks the contents of the /etc/shadow file...

POC_CVE-2024-4322

CVE-2024-4322: LoLLMS WebUI PoC & Nuclei Validation Lab This repository provides Dockerized local labs for reproducing CVE-2024-4322 , a path traversal vulnerability in LoLLMS WebUI v9.6, and for validating that the associated Nuclei template does not match LoLLMS WebUI v9.8. Use this lab only...

Nuclei-Template-Exploit-F5-BIG-IP-iControl-REST-Auth-Bypass-RCE-Command-Parameter

Nuclei Template Exploit F5 BIG-IP iControl REST Auth Bypass RCE | Command Parameter CVE-2022-1388 is an authentication bypass vulnerability in the REST component of BIG-IP’s iControl API that was assigned a CVSSv3 score of 9.8. The iControl REST API is used for the management and configuration of...

CVE-2026-22812

CVE-2026-22812 CVE-2026-22812 - OpenCode Unauthenticated RCE Nuclei template for scan. burp suite request POST /session HTTP/1.1 Host: target.com User-Agent: Mozilla/5.0 X11; Linux x8664 Content-Type: application/json Content-Length: 2 POST /session/"id"/shell HTTP/1.1 Host: target.com User-Agent...

CVE-2022-41352

CVE-2022-41352 PoC How does this detection method work? As stated on the advisories an issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0, the template looks at the following versions: - "8.8.15" - "9.0" How do I run this script? 1. Download Nuclei from here 2. Copy the template to...

CVE-2020-9496

CVE-2020-9496 Set-up Vulnerable Environment ▶ wget http://archive.apache.org/dist/ofbiz/apache-ofbiz-17.12.01.zip ▶ unzip apache-ofbiz-17.12.01.zip ▶ cd apache-ofbiz-17.12.01 ▶ sh gradle/init-gradle-wrapper.sh ▶ ./gradlew cleanAll loadDefault ▶ ./gradlew "ofbiz --load-data...

CVE-2022-24086

CVE-2022-24682 PoC How does this detection method work? As stated on the advisories versions 8.8.x before 8.8.15 patch 30 update 1 are vulnerable to attacks, the template looks at the following versions: - "8.8" - "8.8.6" - "8.8.7" - "8.8.8" - "8.8.9" - "8.8.10" - "8.8.11" - "8.8.12" - "8.8.15" H...

react2shell-PoC

React2Shell Nuclei template for detecting React2Shell CVE-2025-55182 and CVE-2025-66478...

CVE-2024-32030-Nuclei-Template

CVE-2024-32030 Nuclei Template Description This repository contains a Nuclei template for detecting the CVE-2024-32030 vulnerability. This vulnerability allows for remote code execution via JMX Metrics Collection JNDI Resolution. Vulnerability Details ID: CVE-2024-32030 Name: JMX Metrics Collecti...

CVE-2023-22527

CVE-2023-22527 - RCE Remote Code Execution Vulnerability In Confluence Data Center and Confluence Server PoC Detect nuclei -v -t /path/to/template.yam; -u http://ip:port/ Exploit python3 CVE-2023-22527.py -u ip:port -lh listen-host -lp listen-port...

CVE-2024-4577

Nuclei Template for CVE-2024-4577 This Nuclei template serves as a Proof of Concept PoC for CVE-2024-4577, a PHP CGI Argument Injection vulnerability. Example Command nuclei -t CVE-2024-4577.yaml -u https://example.com...

CVE-2025-30208-template

CVE-2025-30208-template CVE-2025-30208 vite file read nuclei template Query HUNTER : http://product.name="Vite" FOFA : body="/@vite/client" SHODAN ：http.html:"/@vite/client" Run Nuclei Template nuclei -l target.txt -t CVE-2025-30208.yaml...

CVE-2024-24919

CVE-2024-24919 Nuclei Template to discover CVE-2024-24919. A path traversal vulnerability in CheckPoint SSLVPN. BTW. Great article, that was my inspiration to write this simple template at 2:00 AM. Resource: https://labs.watchtowr.com/check-point-wrong-check-point-cve-2024-24919/...

CVE-2024-38856-EXP

CVE-2024-38856-EXP bash CVE-2024-23692.sh Nuclei nuclei -list target.txt -t CVE-2024-23692.yaml -o CVE-2024-23692-result.txt or nuclei -id CVE-2024-23692 -o CVE-2024-23692-result.txt...

CVE-2023-37979

CVE-2023-37979 Exploit CVE ID| CVSS Score| Discovered| Affected Plugin| Vendor| Vulnerability Type ---|---|---|---|---|--- CVE-2023-37979| | 27/07/2023| WordPress Plugin| Ninja-forms| Reflected XSS 🐍 Python Script This Python script exploits the reflected Cross-Site Scripting XSS vulnerability...

rxerium-templates

A curated collection of 144+ Nuclei templates focusing on zero-day and actively exploited vulnerabilities in the wild with a few miscellaneous templates. Templates use passive detection techniques version/date matching and are organized by year for easy navigation. ⚠️ Note: Date matching may be...

CVE-2025-31324-NUCLEI

CVE-2025-31324-NUCLEI Nuclei template for cve-2025-31324 SAP Usage: nuclei -u https://victima.com -t cve-2025-31324-validation.yaml Múltiples objetivos Usage: nuclei -l targets.txt -t cve-2025-31324-validation.yaml...