git log --author=686f6c61 -- nuclei-templates

Contributions to nuclei-templates

visit ↗

• ossnuclei-templates[PR][code]

  Template request to detect CVE-2026-26335 (CVSS 9.8) in Calero VeraSMART (pre-2022 R1). Shared ASP.NET cryptographic keys across installations allow forging malicious ViewState and achieving unauthenticated remote code execution via deserialization.

• ossnuclei-templates[PR][code]

  The regex `root:.*?:[0-9]*:[0-9]*:` matched minified JavaScript content like `PEAM_root:config:123:456:`. Fixed to `root:[^:]*:\d+:\d+:` to restrict to non-colon characters and require at least one digit in UID/GID.

• ossnuclei-templates[PR][code]

  Template to detect CVE-2025-34291 in Langflow AI (≤1.6.9). Misconfigured CORS reflects any origin with credentials allowed, chained with RCE via /api/v1/validate/code.