Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Nuclei Templates - April 2026

projectdiscovery.io | vulnerability | #ai-security | #bug-bounty | #rce | #red-team | #cve | #nuclei | #vulnerability-detection | #projectdiscovery | #templates | #kev

Summary

Nuclei Templates v10.4.2 and v10.4.3 ship 226 new templates covering 123 CVEs—about 10 actively exploited KEV entries—and push deeper into AI/LLM attack surface with 27 first-time contributors joining.
Published
Collected

original ↗

Related coverage

vulnerability · projectdiscovery.io
Nuclei Templates Monthly - May 2025
Nuclei Templates v10.2.1/v10.2.2 add 106 templates covering 57 CVEs, including 10 KEVs like Ivanti EPMM RCE and Versa Concerto auth bypass. A template bounty program and real-time update bot launched.
research · github.com
[CVE-2024-6100] CyberKimi Benchmarks: Autonomous Exploitation Traces & Evidence
Provides verifiable, transparent evidence of advanced LLMs performing complex, multi-step binary and browser exploitation autonomously under strict ASLR and memory randomization defenses.
vulnerability · projectdiscovery.io
Open by design, trusted by enterprises: how we keep Nuclei templates reliable at scale
Community-driven Nuclei templates stay enterprise-grade: each YAML template is lab-reproduced, checklist-hardened, and double-reviewed, proving exploitability instead of guessing from versions.
vulnerability · projectdiscovery.io
From Detection to Validation: Fixing Broken Vulnerability Workflows
Version scanning lies by omission: only ~6% of CVEs are exploited. Nuclei validates exploitability at runtime with matchers, extractors, and multi-step flows, as the 2025 CrushFTP cases illustrate.
vulnerability · projectdiscovery.io
The Coverage Lie: Why Current Vulnerability Scanners Fail to Stop Breaches
Legacy scanners fail from untrusted version-based guesses, not coverage gaps: only ~6% of CVEs are exploited, yet weaponization is fast. Runtime validation plus KEV focus yields actionable results.
vulnerability · projectdiscovery.io
How Paddle Strengthened Its Security Posture with ProjectDiscovery
Paddle consolidated scattered Nuclei and Subfinder scans onto ProjectDiscovery, centralizing attack surface visibility, cutting discovery from days to hours, and supporting PCI DSS and SOC 2 audits.
back