Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Nuclei Templates Monthly - May 2025

projectdiscovery.io | vulnerability | #bug-bounty | #rce | #cve | #nuclei | #projectdiscovery | #ivanti | #templates | #kev | #versa-concerto

Summary

Nuclei Templates v10.2.1/v10.2.2 add 106 templates covering 57 CVEs, including 10 KEVs like Ivanti EPMM RCE and Versa Concerto auth bypass. A template bounty program and real-time update bot launched.
Published
Collected

original ↗

Related coverage

vulnerability · projectdiscovery.io
Nuclei Templates - April 2026
Nuclei Templates v10.4.2 and v10.4.3 ship 226 new templates covering 123 CVEs—about 10 actively exploited KEV entries—and push deeper into AI/LLM attack surface with 27 first-time contributors joining.
vulnerability · projectdiscovery.io
Open by design, trusted by enterprises: how we keep Nuclei templates reliable at scale
Community-driven Nuclei templates stay enterprise-grade: each YAML template is lab-reproduced, checklist-hardened, and double-reviewed, proving exploitability instead of guessing from versions.
vulnerability · projectdiscovery.io
The Coverage Lie: Why Current Vulnerability Scanners Fail to Stop Breaches
Legacy scanners fail from untrusted version-based guesses, not coverage gaps: only ~6% of CVEs are exploited, yet weaponization is fast. Runtime validation plus KEV focus yields actionable results.
vulnerability · projectdiscovery.io
From Detection to Validation: Fixing Broken Vulnerability Workflows
Version scanning lies by omission: only ~6% of CVEs are exploited. Nuclei validates exploitability at runtime with matchers, extractors, and multi-step flows, as the 2025 CrushFTP cases illustrate.
High · vulnerability · github.com
WordPress Core Unauthenticated Path Traversal to LFI & RCE PoC (CVE-2026-87902)
While remote code execution depends on runtime prerequisites like PEAR, the unauthenticated LFI primitive resides directly in WordPress Core and affects all major branches from 4.7.0 through 7.1.1.
blog · projectdiscovery.io
Getting Started with ProjectDiscovery in Linux and Windows
A step-by-step guide to installing ProjectDiscovery tools like Nuclei, Subfinder, and Katana on Linux and Windows, covering Go installation, PATH configuration, and fixing common CLI errors.
back