Pull requests: projectdiscovery/nuclei-templates
Pull requests list
Create CVE-2025-51683.yaml - mJobTime <= 15.7.2 - Unauthenticated Blind SQL Injection to RCE
Done
Ready to merge
#17042
opened Sep 1, 2026 by
Akokonunes
Contributor
Loading…
2 tasks
fix: CVE-2026-4257 nested payload variable not resolved on nuclei v3.11.1
#17039
opened Aug 31, 2026 by
Dishant4081
Contributor
Loading…
Add CVE-2026-19092 - Tutor LMS < 4.0.6 - Unauthenticated Arbitrary PHP Function Invocation
Done
Ready to merge
#17038
opened Aug 31, 2026 by
Aryu-RU
Contributor
Loading…
2 tasks done
CVE-2026-41679 - Paperclip - Remote Code Execution
Done
Ready to merge
#17037
opened Aug 31, 2026 by
theamanrawat
Contributor
Loading…
2 tasks
Create CVE-2026-8467.yaml - Phoenix Storybook - Unauthenticated RCE via WebSocket
Done
Ready to merge
#17035
opened Aug 31, 2026 by
Akokonunes
Contributor
Loading…
2 tasks
fix(CVE-2025-29927): add missing matchers-condition to the bypass request
#17034
opened Aug 31, 2026 by
Aryu-RU
Contributor
Loading…
2 tasks done
Fix hp-printer-default-login matching any 200 response as a hit
#17032
opened Aug 30, 2026 by
munzzyy
Contributor
Loading…
Add Siemens SIMATIC S7 Series PLC detection template
Done
Ready to merge
#17031
opened Aug 30, 2026 by
SergioCc13
Loading…
add: Qdrant unauthenticated telemetry exposure
#17020
opened Aug 28, 2026 by
DevamShah
Contributor
Loading…
TOTVS Fluig <= 1.7.0 - Arbitrary File Read / Directory Traversal (CVE-2020-29134)
#17017
opened Aug 27, 2026 by
Ls4ss
Loading…
Add exposure templates for Terraform state, Terraform CLI credentials, and Serverless Framework config
#17016
opened Aug 26, 2026 by
ChrisJr404
Contributor
Loading…
2 tasks done
Add CVE-2026-56705 - Adminer < 5.4.3 Unauthenticated RCE via MSSQL PDO DSN Injection
#17008
opened Aug 25, 2026 by
Boreas37
Contributor
Loading…
fix(CVE-2024-51483): refactor changedetection.io LFI to non-destructive settings & watch cleanup
#17007
opened Aug 25, 2026 by
Tito0015
Loading…
6 tasks done
fix(CVE-2020-11991): correct endpoint path and XML declaration
#17004
opened Aug 25, 2026 by
diedromeo
Contributor
Loading…
Add CVE-2026-26216 for remote code execution in Crawl4AI
#17000
opened Aug 25, 2026 by
Dishant4081
Contributor
Loading…
Add CVE-2025-68273 Signal K Server info disclosure detection
#16997
opened Aug 24, 2026 by
ChrisJr404
Contributor
Loading…
Add CVE-2024-42327 - Zabbix user.get SQL injection version detection
#16980
opened Aug 24, 2026 by
ChrisJr404
Contributor
Loading…
Add OIDC unsigned (alg none) ID token supported template
#16944
opened Aug 20, 2026 by
rocky55ayush
Loading…
ProTip!
Mix and match filters to narrow down what you’re looking for.