diff --git a/.github/workflows/site.yml b/.github/workflows/site.yml
index c8bf8212c12..415cf069062 100644
--- a/.github/workflows/site.yml
+++ b/.github/workflows/site.yml
@@ -7,6 +7,7 @@ on:
   workflow_run:
     workflows:
       - Sync CVE PoCs
+      - Sync Nuclei Templates
       - Hot CVEs List
       - Audit PoC Links
     types:
diff --git a/.github/workflows/sync_nuclei.yml b/.github/workflows/sync_nuclei.yml
new file mode 100644
index 00000000000..d5b3593ac32
--- /dev/null
+++ b/.github/workflows/sync_nuclei.yml
@@ -0,0 +1,50 @@
+name: Sync Nuclei Templates
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: '25 4 * * *'
+
+permissions:
+  contents: write
+
+concurrency:
+  group: repository-updates
+  cancel-in-progress: false
+
+jobs:
+  ScheduledRun:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+
+      - name: Set up Python
+        uses: actions/setup-python@v7
+        with:
+          python-version: '3.13'
+
+      - name: Pull templates and fold them into the index
+        run: python3 scripts/sync_nuclei.py
+
+      - name: Check for changes and commit
+        run: |
+          git config user.name 'CVE-BOT'
+          git config user.email 'cve@codepwn.win'
+          git add -- nuclei.json '[12][0-9][0-9][0-9]'
+          if git diff --cached --quiet; then
+            echo "No changes to commit"
+            exit 0
+          fi
+
+          git commit -m "Sync nuclei templates $(date -u +'%Y-%m-%d') :robot:"
+
+          for attempt in 1 2 3; do
+            if git push origin HEAD:main; then
+              exit 0
+            fi
+            echo "Push rejected; replaying onto the current main (attempt $attempt)"
+            git fetch --unshallow origin main 2>/dev/null || git fetch origin main
+            git rebase FETCH_HEAD
+          done
+          exit 1
diff --git a/.gitignore b/.gitignore
index ca0b268616c..81f591ac0d6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,6 +4,7 @@ docs/CVE_list.json
 docs/kev.json
 docs/repo_meta.json
 docs/trending_poc.json
+docs/nuclei.json
 docs/api/v1/cve/
 __pycache__/
 
diff --git a/2000/CVE-2000-0114.md b/2000/CVE-2000-0114.md
index 20f5e1e3cb8..f3db14aef9e 100644
--- a/2000/CVE-2000-0114.md
+++ b/2000/CVE-2000-0114.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/Cappricio-Securities/CVE-2000-0114
 - https://github.com/adhamelhansye/CVE-2000-0114
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2000/CVE-2000-0114.yaml
diff --git a/2000/CVE-2000-0760.md b/2000/CVE-2000-0760.md
index 0a4b37f3c76..5ca17b244b1 100644
--- a/2000/CVE-2000-0760.md
+++ b/2000/CVE-2000-0760.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2000/CVE-2000-0760.yaml
diff --git a/2001/CVE-2001-0537.md b/2001/CVE-2001-0537.md
index 84f9539da0d..eab8282a6c5 100644
--- a/2001/CVE-2001-0537.md
+++ b/2001/CVE-2001-0537.md
@@ -15,3 +15,5 @@ HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2001/CVE-2001-0537.yaml
diff --git a/2001/CVE-2001-1473.md b/2001/CVE-2001-1473.md
index bb2ccd0ffd0..3dfe701d3f9 100644
--- a/2001/CVE-2001-1473.md
+++ b/2001/CVE-2001-1473.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2001/CVE-2001-1473.yaml
diff --git a/2002/CVE-2002-1131.md b/2002/CVE-2002-1131.md
index 6fb558d5143..5cb6ae21bf3 100644
--- a/2002/CVE-2002-1131.md
+++ b/2002/CVE-2002-1131.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2002/CVE-2002-1131.yaml
diff --git a/2004/CVE-2004-0519.md b/2004/CVE-2004-0519.md
index 9df062af846..07f49876847 100644
--- a/2004/CVE-2004-0519.md
+++ b/2004/CVE-2004-0519.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2004/CVE-2004-0519.yaml
diff --git a/2004/CVE-2004-1602.md b/2004/CVE-2004-1602.md
index 2e12174cb21..a34924ca955 100644
--- a/2004/CVE-2004-1602.md
+++ b/2004/CVE-2004-1602.md
@@ -15,3 +15,5 @@ ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of tim
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2004/CVE-2004-1602.yaml
diff --git a/2004/CVE-2004-1641.md b/2004/CVE-2004-1641.md
index 549518d55bf..98ab27d92b6 100644
--- a/2004/CVE-2004-1641.md
+++ b/2004/CVE-2004-1641.md
@@ -15,3 +15,5 @@ Heap-based buffer overflow in Titan FTP 3.21 and earlier allows remote attackers
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2004/CVE-2004-1641.yaml
diff --git a/2004/CVE-2004-1965.md b/2004/CVE-2004-1965.md
index 59cf5ca9246..9cc0f73a909 100644
--- a/2004/CVE-2004-1965.md
+++ b/2004/CVE-2004-1965.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2004/CVE-2004-1965.yaml
diff --git a/2004/CVE-2004-2687.md b/2004/CVE-2004-2687.md
index 880d83a8f55..57ae6454c0d 100644
--- a/2004/CVE-2004-2687.md
+++ b/2004/CVE-2004-2687.md
@@ -30,3 +30,5 @@ No PoCs from references.
 - https://github.com/n3ov4n1sh/distccd_rce_CVE-2004-2687
 - https://github.com/n3rdh4x0r/distccd_rce_CVE-2004-2687
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2004/CVE-2004-2687.yaml
diff --git a/2005/CVE-2005-2428.md b/2005/CVE-2005-2428.md
index a2e8d486438..2373d0b1dcf 100644
--- a/2005/CVE-2005-2428.md
+++ b/2005/CVE-2005-2428.md
@@ -15,3 +15,5 @@ Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, sto
 #### Github
 - https://github.com/schwankner/CVE-2005-2428-IBM-Lotus-Domino-R8-Password-Hash-Extraction-Exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2005/CVE-2005-2428.yaml
diff --git a/2005/CVE-2005-3344.md b/2005/CVE-2005-3344.md
index ab2528409dc..ef358962d18 100644
--- a/2005/CVE-2005-3344.md
+++ b/2005/CVE-2005-3344.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2005/CVE-2005-3344.yaml
diff --git a/2005/CVE-2005-3634.md b/2005/CVE-2005-3634.md
index 2131cb375dd..24b704b0467 100644
--- a/2005/CVE-2005-3634.md
+++ b/2005/CVE-2005-3634.md
@@ -16,3 +16,5 @@ frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2005/CVE-2005-3634.yaml
diff --git a/2005/CVE-2005-4385.md b/2005/CVE-2005-4385.md
index 742d67510c2..fb106ac1f48 100644
--- a/2005/CVE-2005-4385.md
+++ b/2005/CVE-2005-4385.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2005/CVE-2005-4385.yaml
diff --git a/2006/CVE-2006-1681.md b/2006/CVE-2006-1681.md
index cf94aa997a5..d6075611659 100644
--- a/2006/CVE-2006-1681.md
+++ b/2006/CVE-2006-1681.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2006/CVE-2006-1681.yaml
diff --git a/2006/CVE-2006-2842.md b/2006/CVE-2006-2842.md
index 51b108df67d..45ecb26ffa9 100644
--- a/2006/CVE-2006-2842.md
+++ b/2006/CVE-2006-2842.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/karthi-the-hacker/CVE-2006-2842
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2006/CVE-2006-2842.yaml
diff --git a/2006/CVE-2006-3392.md b/2006/CVE-2006-3392.md
index 001374d4c94..a7ddf37a439 100644
--- a/2006/CVE-2006-3392.md
+++ b/2006/CVE-2006-3392.md
@@ -23,3 +23,5 @@ No PoCs from references.
 - https://github.com/kernel-cyber/CVE-2006-3392
 - https://github.com/windsormoreira/CVE-2006-3392
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2006/CVE-2006-3392.yaml
diff --git a/2006/CVE-2006-6565.md b/2006/CVE-2006-6565.md
index 97c04224c35..dfc2cc1ce1a 100644
--- a/2006/CVE-2006-6565.md
+++ b/2006/CVE-2006-6565.md
@@ -15,3 +15,5 @@ FileZilla Server before 0.9.22 allows remote attackers to cause a denial of serv
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2006/CVE-2006-6565.yaml
diff --git a/2007/CVE-2007-0885.md b/2007/CVE-2007-0885.md
index 6037415a6b8..0a724b413f6 100644
--- a/2007/CVE-2007-0885.md
+++ b/2007/CVE-2007-0885.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-0885.yaml
diff --git a/2007/CVE-2007-2449.md b/2007/CVE-2007-2449.md
index 74011299204..09f02e3d7bc 100644
--- a/2007/CVE-2007-2449.md
+++ b/2007/CVE-2007-2449.md
@@ -15,3 +15,5 @@ Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-2449.yaml
diff --git a/2007/CVE-2007-3010.md b/2007/CVE-2007-3010.md
index 71abd0bab42..a0f4b725504 100644
--- a/2007/CVE-2007-3010.md
+++ b/2007/CVE-2007-3010.md
@@ -16,3 +16,5 @@ masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communic
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-3010.yaml
diff --git a/2007/CVE-2007-4504.md b/2007/CVE-2007-4504.md
index 094a3088947..81a8156d3b8 100644
--- a/2007/CVE-2007-4504.md
+++ b/2007/CVE-2007-4504.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in index.php in the RSfiles component (com_rsf
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-4504.yaml
diff --git a/2007/CVE-2007-4556.md b/2007/CVE-2007-4556.md
index d279836580c..68ef8270402 100644
--- a/2007/CVE-2007-4556.md
+++ b/2007/CVE-2007-4556.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-4556.yaml
diff --git a/2007/CVE-2007-5728.md b/2007/CVE-2007-5728.md
index 8b6b2d6e0f7..59aae223b4f 100644
--- a/2007/CVE-2007-5728.md
+++ b/2007/CVE-2007-5728.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-5728.yaml
diff --git a/2008/CVE-2008-0702.md b/2008/CVE-2008-0702.md
index a610ffa919f..0c8b255a417 100644
--- a/2008/CVE-2008-0702.md
+++ b/2008/CVE-2008-0702.md
@@ -16,3 +16,5 @@ Multiple heap-based buffer overflows in Titan FTP Server 6.03 and 6.0.5.549 allo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2008/CVE-2008-0702.yaml
diff --git a/2008/CVE-2008-1059.md b/2008/CVE-2008-1059.md
index bf4a9861bb3..07d0e795c15 100644
--- a/2008/CVE-2008-1059.md
+++ b/2008/CVE-2008-1059.md
@@ -16,3 +16,5 @@ PHP remote file inclusion vulnerability in modules/syntax_highlight.php in the S
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-1059.yaml
diff --git a/2008/CVE-2008-1061.md b/2008/CVE-2008-1061.md
index ae31135fa34..241434bddcc 100644
--- a/2008/CVE-2008-1061.md
+++ b/2008/CVE-2008-1061.md
@@ -16,3 +16,5 @@ Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-1061.yaml
diff --git a/2008/CVE-2008-1547.md b/2008/CVE-2008-1547.md
index 84b92e3a8a2..548dacffedf 100644
--- a/2008/CVE-2008-1547.md
+++ b/2008/CVE-2008-1547.md
@@ -15,3 +15,5 @@ Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Ac
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-1547.yaml
diff --git a/2008/CVE-2008-2398.md b/2008/CVE-2008-2398.md
index f901ad74579..5f107499d11 100644
--- a/2008/CVE-2008-2398.md
+++ b/2008/CVE-2008-2398.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-2398.yaml
diff --git a/2008/CVE-2008-2650.md b/2008/CVE-2008-2650.md
index 6ddfc543679..50851e6539e 100644
--- a/2008/CVE-2008-2650.md
+++ b/2008/CVE-2008-2650.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in cmsimple/cms.php in CMSimple 3.1, when regi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-2650.yaml
diff --git a/2008/CVE-2008-4668.md b/2008/CVE-2008-4668.md
index af3a8bf3418..e3be24f4c4b 100644
--- a/2008/CVE-2008-4668.md
+++ b/2008/CVE-2008-4668.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Image Browser (com_imagebrowser) 0.1.5
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-4668.yaml
diff --git a/2008/CVE-2008-4764.md b/2008/CVE-2008-4764.md
index fecade27223..75ae14bbdab 100644
--- a/2008/CVE-2008-4764.md
+++ b/2008/CVE-2008-4764.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the eXtplorer module (com_extplorer) 2.0.0
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-4764.yaml
diff --git a/2008/CVE-2008-5281.md b/2008/CVE-2008-5281.md
index 53ccbf6a925..ca11cf015d6 100644
--- a/2008/CVE-2008-5281.md
+++ b/2008/CVE-2008-5281.md
@@ -15,3 +15,5 @@ Heap-based buffer overflow in Titan FTP Server 6.05 build 550 allows remote atta
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2008/CVE-2008-5281.yaml
diff --git a/2008/CVE-2008-5587.md b/2008/CVE-2008-5587.md
index 18be29ce4c1..d9f24309807 100644
--- a/2008/CVE-2008-5587.md
+++ b/2008/CVE-2008-5587.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in libraries/lib.inc.php in phpPgAdmin 4.2.1 a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-5587.yaml
diff --git a/2008/CVE-2008-6080.md b/2008/CVE-2008-6080.md
index a827be00d57..4909b0f64a4 100644
--- a/2008/CVE-2008-6080.md
+++ b/2008/CVE-2008-6080.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in download.php in the ionFiles (com_ionfiles)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6080.yaml
diff --git a/2008/CVE-2008-6172.md b/2008/CVE-2008-6172.md
index e2eb04c7fa8..314c9aa21f4 100644
--- a/2008/CVE-2008-6172.md
+++ b/2008/CVE-2008-6172.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in captcha/captcha_image.php in the RWCards (c
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6172.yaml
diff --git a/2008/CVE-2008-6222.md b/2008/CVE-2008-6222.md
index e6f82fc40a7..9ab326a8649 100644
--- a/2008/CVE-2008-6222.md
+++ b/2008/CVE-2008-6222.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Pro Desk Support Center (com_pro_desk)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6222.yaml
diff --git a/2008/CVE-2008-6465.md b/2008/CVE-2008-6465.md
index 339f70a03d1..8b0de5391f6 100644
--- a/2008/CVE-2008-6465.md
+++ b/2008/CVE-2008-6465.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6465.yaml
diff --git a/2008/CVE-2008-6668.md b/2008/CVE-2008-6668.md
index 77775a2dbf1..5e917d29b8b 100644
--- a/2008/CVE-2008-6668.md
+++ b/2008/CVE-2008-6668.md
@@ -15,3 +15,5 @@ Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6668.yaml
diff --git a/2008/CVE-2008-6982.md b/2008/CVE-2008-6982.md
index 2f124792c3d..d6eb7ba99df 100644
--- a/2008/CVE-2008-6982.md
+++ b/2008/CVE-2008-6982.md
@@ -16,3 +16,5 @@ Cross-site scripting (XSS) vulnerability in index.php in devalcms 1.4a allows re
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6982.yaml
diff --git a/2008/CVE-2008-7269.md b/2008/CVE-2008-7269.md
index 04469b66215..e8c0c29b08c 100644
--- a/2008/CVE-2008-7269.md
+++ b/2008/CVE-2008-7269.md
@@ -15,3 +15,5 @@ Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted re
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-7269.yaml
diff --git a/2009/CVE-2009-0347.md b/2009/CVE-2009-0347.md
index 9845fc6cc4f..8349ce9c828 100644
--- a/2009/CVE-2009-0347.md
+++ b/2009/CVE-2009-0347.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Cappricio-Securities/CVE-2009-0347
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-0347.yaml
diff --git a/2009/CVE-2009-0545.md b/2009/CVE-2009-0545.md
index ab9bafe0ee5..df29fe83684 100644
--- a/2009/CVE-2009-0545.md
+++ b/2009/CVE-2009-0545.md
@@ -16,3 +16,5 @@ cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-0545.yaml
diff --git a/2009/CVE-2009-0932.md b/2009/CVE-2009-0932.md
index 9c9e3b5b857..75574f0e6c5 100644
--- a/2009/CVE-2009-0932.md
+++ b/2009/CVE-2009-0932.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in framework/Image/Image.php in Horde before 3
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-0932.yaml
diff --git a/2009/CVE-2009-1151.md b/2009/CVE-2009-1151.md
index 645d9e73794..d042a96cbef 100644
--- a/2009/CVE-2009-1151.md
+++ b/2009/CVE-2009-1151.md
@@ -20,3 +20,5 @@ Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.1
 - https://github.com/e-Thug/PhpMyAdmin
 - https://github.com/pagvac/pocs
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-1151.yaml
diff --git a/2009/CVE-2009-1496.md b/2009/CVE-2009-1496.md
index c99faaeb5c2..46351ed4f76 100644
--- a/2009/CVE-2009-1496.md
+++ b/2009/CVE-2009-1496.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Cmi Marketplace (com_cmimarketplace) co
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-1496.yaml
diff --git a/2009/CVE-2009-1558.md b/2009/CVE-2009-1558.md
index 40c457e067a..7534747e260 100644
--- a/2009/CVE-2009-1558.md
+++ b/2009/CVE-2009-1558.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-1558.yaml
diff --git a/2009/CVE-2009-1872.md b/2009/CVE-2009-1872.md
index 0d10a965d27..87c243bdff0 100644
--- a/2009/CVE-2009-1872.md
+++ b/2009/CVE-2009-1872.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-1872.yaml
diff --git a/2009/CVE-2009-2015.md b/2009/CVE-2009-2015.md
index 75776f47c52..201902ac385 100644
--- a/2009/CVE-2009-2015.md
+++ b/2009/CVE-2009-2015.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in includes/file_includer.php in the Ideal Moo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-2015.yaml
diff --git a/2009/CVE-2009-2100.md b/2009/CVE-2009-2100.md
index bbdd385ad7b..df9a4899dcb 100644
--- a/2009/CVE-2009-2100.md
+++ b/2009/CVE-2009-2100.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the JoomlaPraise Projectfork (com_projectfo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-2100.yaml
diff --git a/2009/CVE-2009-3053.md b/2009/CVE-2009-3053.md
index d6ece3a510b..294a88a2b0f 100644
--- a/2009/CVE-2009-3053.md
+++ b/2009/CVE-2009-3053.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-3053.yaml
diff --git a/2009/CVE-2009-3318.md b/2009/CVE-2009-3318.md
index dde54016d02..4d9ae5d3457 100644
--- a/2009/CVE-2009-3318.md
+++ b/2009/CVE-2009-3318.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-3318.yaml
diff --git a/2009/CVE-2009-4202.md b/2009/CVE-2009-4202.md
index 7d93e9c5527..ab9160f099a 100644
--- a/2009/CVE-2009-4202.md
+++ b/2009/CVE-2009-4202.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-4202.yaml
diff --git a/2009/CVE-2009-4223.md b/2009/CVE-2009-4223.md
index f4568644dcc..c6dbf60daed 100644
--- a/2009/CVE-2009-4223.md
+++ b/2009/CVE-2009-4223.md
@@ -15,3 +15,5 @@ PHP remote file inclusion vulnerability in adm/krgourl.php in KR-Web 1.1b2 and e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-4223.yaml
diff --git a/2009/CVE-2009-4679.md b/2009/CVE-2009-4679.md
index 6665ed0add3..9535b447e77 100644
--- a/2009/CVE-2009-4679.md
+++ b/2009/CVE-2009-4679.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-4679.yaml
diff --git a/2009/CVE-2009-5020.md b/2009/CVE-2009-5020.md
index d1538d1c3f6..b32fada16c4 100644
--- a/2009/CVE-2009-5020.md
+++ b/2009/CVE-2009-5020.md
@@ -15,3 +15,5 @@ Open redirect vulnerability in awredir.pl in AWStats before 6.95 allows remote a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-5020.yaml
diff --git a/2009/CVE-2009-5114.md b/2009/CVE-2009-5114.md
index be2a985b223..e5532688b64 100644
--- a/2009/CVE-2009-5114.md
+++ b/2009/CVE-2009-5114.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-5114.yaml
diff --git a/2010/CVE-2010-0157.md b/2010/CVE-2010-0157.md
index cedf7943840..d8a3a79e8f9 100644
--- a/2010/CVE-2010-0157.md
+++ b/2010/CVE-2010-0157.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Bible Study (com_biblestudy) component
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0157.yaml
diff --git a/2010/CVE-2010-0219.md b/2010/CVE-2010-0219.md
index 79a83bc7be9..4dd0e4d1914 100644
--- a/2010/CVE-2010-0219.md
+++ b/2010/CVE-2010-0219.md
@@ -16,3 +16,5 @@ Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2,
 #### Github
 - https://github.com/veritas-rt/CVE-2010-0219
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0219.yaml
diff --git a/2010/CVE-2010-0467.md b/2010/CVE-2010-0467.md
index fb810dfcb5b..2debb6aa182 100644
--- a/2010/CVE-2010-0467.md
+++ b/2010/CVE-2010-0467.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) compone
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0467.yaml
diff --git a/2010/CVE-2010-0696.md b/2010/CVE-2010-0696.md
index 3609214b90d..f563c3bd54d 100644
--- a/2010/CVE-2010-0696.md
+++ b/2010/CVE-2010-0696.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0696.yaml
diff --git a/2010/CVE-2010-0759.md b/2010/CVE-2010-0759.md
index ce3dadf95cc..9427293b5f0 100644
--- a/2010/CVE-2010-0759.md
+++ b/2010/CVE-2010-0759.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/hi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0759.yaml
diff --git a/2010/CVE-2010-0942.md b/2010/CVE-2010-0942.md
index e1c4e8797b8..bb9ed6b205f 100644
--- a/2010/CVE-2010-0942.md
+++ b/2010/CVE-2010-0942.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the jVideoDirect (com_jvideodirect) compone
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0942.yaml
diff --git a/2010/CVE-2010-0943.md b/2010/CVE-2010-0943.md
index cc3e942486f..1a3946b738c 100644
--- a/2010/CVE-2010-0943.md
+++ b/2010/CVE-2010-0943.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the JA Showcase (com_jashowcase) component
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0943.yaml
diff --git a/2010/CVE-2010-0944.md b/2010/CVE-2010-0944.md
index 9055f013d61..4d9e2404cc8 100644
--- a/2010/CVE-2010-0944.md
+++ b/2010/CVE-2010-0944.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the JCollection (com_jcollection) component
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0944.yaml
diff --git a/2010/CVE-2010-0972.md b/2010/CVE-2010-0972.md
index 73149086050..17ba4be8209 100644
--- a/2010/CVE-2010-0972.md
+++ b/2010/CVE-2010-0972.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0972.yaml
diff --git a/2010/CVE-2010-0982.md b/2010/CVE-2010-0982.md
index 4e908d03c1c..1c7a1c0b38b 100644
--- a/2010/CVE-2010-0982.md
+++ b/2010/CVE-2010-0982.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the CARTwebERP (com_cartweberp) component 1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0982.yaml
diff --git a/2010/CVE-2010-0985.md b/2010/CVE-2010-0985.md
index d7371ed3469..14e717bf259 100644
--- a/2010/CVE-2010-0985.md
+++ b/2010/CVE-2010-0985.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0985.yaml
diff --git a/2010/CVE-2010-1056.md b/2010/CVE-2010-1056.md
index 9be64b9e3fb..3188a99e5fb 100644
--- a/2010/CVE-2010-1056.md
+++ b/2010/CVE-2010-1056.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the RokDownloads (com_rokdownloads) compone
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1056.yaml
diff --git a/2010/CVE-2010-1081.md b/2010/CVE-2010-1081.md
index c941a05ecec..2e7752de4db 100644
--- a/2010/CVE-2010-1081.md
+++ b/2010/CVE-2010-1081.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Community Polls (com_communitypolls) co
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1081.yaml
diff --git a/2010/CVE-2010-1217.md b/2010/CVE-2010-1217.md
index 599e56ac369..73e4b0f11d4 100644
--- a/2010/CVE-2010-1217.md
+++ b/2010/CVE-2010-1217.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the JE Form Creator (com_jeformcr) componen
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1217.yaml
diff --git a/2010/CVE-2010-1219.md b/2010/CVE-2010-1219.md
index e8b631fce6b..1a65e04f4f1 100644
--- a/2010/CVE-2010-1219.md
+++ b/2010/CVE-2010-1219.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1219.yaml
diff --git a/2010/CVE-2010-1302.md b/2010/CVE-2010-1302.md
index f386d095e29..c978ffa0ae4 100644
--- a/2010/CVE-2010-1302.md
+++ b/2010/CVE-2010-1302.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (c
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1302.yaml
diff --git a/2010/CVE-2010-1304.md b/2010/CVE-2010-1304.md
index 888faea59c6..17986694cff 100644
--- a/2010/CVE-2010-1304.md
+++ b/2010/CVE-2010-1304.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1304.yaml
diff --git a/2010/CVE-2010-1305.md b/2010/CVE-2010-1305.md
index 001fc740bee..7aec8a1a518 100644
--- a/2010/CVE-2010-1305.md
+++ b/2010/CVE-2010-1305.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in jinventory.php in the JInventory (com_jinve
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1305.yaml
diff --git a/2010/CVE-2010-1306.md b/2010/CVE-2010-1306.md
index 7a3be3e335d..1d962b581f6 100644
--- a/2010/CVE-2010-1306.md
+++ b/2010/CVE-2010-1306.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1306.yaml
diff --git a/2010/CVE-2010-1307.md b/2010/CVE-2010-1307.md
index 38edbe5a082..d9c9f33872c 100644
--- a/2010/CVE-2010-1307.md
+++ b/2010/CVE-2010-1307.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Magic Updater (com_joomlaupdater) compo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1307.yaml
diff --git a/2010/CVE-2010-1308.md b/2010/CVE-2010-1308.md
index 2cacd9de7d7..60cd4afd2f5 100644
--- a/2010/CVE-2010-1308.md
+++ b/2010/CVE-2010-1308.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the SVMap (com_svmap) component 1.1.1 for J
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1308.yaml
diff --git a/2010/CVE-2010-1312.md b/2010/CVE-2010-1312.md
index 04d543d46b2..a28f347e4e1 100644
--- a/2010/CVE-2010-1312.md
+++ b/2010/CVE-2010-1312.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the iJoomla News Portal (com_news_portal) c
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1312.yaml
diff --git a/2010/CVE-2010-1313.md b/2010/CVE-2010-1313.md
index 332eaa3a343..d3bc6c6291a 100644
--- a/2010/CVE-2010-1313.md
+++ b/2010/CVE-2010-1313.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Seber Cart (com_sebercart) component 1.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1313.yaml
diff --git a/2010/CVE-2010-1314.md b/2010/CVE-2010-1314.md
index c4b2d4caf7d..82b93855c3a 100644
--- a/2010/CVE-2010-1314.md
+++ b/2010/CVE-2010-1314.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Highslide JS (com_hsconfig) component 1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1314.yaml
diff --git a/2010/CVE-2010-1315.md b/2010/CVE-2010-1315.md
index d961e8d148b..396d6d3628a 100644
--- a/2010/CVE-2010-1315.md
+++ b/2010/CVE-2010-1315.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in weberpcustomer.php in the webERPcustomer (c
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1315.yaml
diff --git a/2010/CVE-2010-1340.md b/2010/CVE-2010-1340.md
index a70fd025a5e..bc7e8afd6d2 100644
--- a/2010/CVE-2010-1340.md
+++ b/2010/CVE-2010-1340.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in jresearch.php in the J!Research (com_jresea
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1340.yaml
diff --git a/2010/CVE-2010-1345.md b/2010/CVE-2010-1345.md
index ded30860675..d58e5221d3f 100644
--- a/2010/CVE-2010-1345.md
+++ b/2010/CVE-2010-1345.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) com
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1345.yaml
diff --git a/2010/CVE-2010-1352.md b/2010/CVE-2010-1352.md
index 4489e6e57ad..8979d4e0707 100644
--- a/2010/CVE-2010-1352.md
+++ b/2010/CVE-2010-1352.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the JOOFORGE Jutebox (com_jukebox) componen
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1352.yaml
diff --git a/2010/CVE-2010-1353.md b/2010/CVE-2010-1353.md
index d204675e99a..18a06058969 100644
--- a/2010/CVE-2010-1353.md
+++ b/2010/CVE-2010-1353.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the LoginBox Pro (com_loginbox) component f
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1353.yaml
diff --git a/2010/CVE-2010-1354.md b/2010/CVE-2010-1354.md
index 08f5bd90a56..733a0a30daa 100644
--- a/2010/CVE-2010-1354.md
+++ b/2010/CVE-2010-1354.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the VJDEO (com_vjdeo) component 1.0 and 1.0
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1354.yaml
diff --git a/2010/CVE-2010-1429.md b/2010/CVE-2010-1429.md
index 7d42e41b701..f75fef71cbb 100644
--- a/2010/CVE-2010-1429.md
+++ b/2010/CVE-2010-1429.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/JameelNabbo/Jboss4.2XPOC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1429.yaml
diff --git a/2010/CVE-2010-1461.md b/2010/CVE-2010-1461.md
index 7f30a4efe7c..1b42a2b29d3 100644
--- a/2010/CVE-2010-1461.md
+++ b/2010/CVE-2010-1461.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Photo Battle (com_photobattle) componen
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1461.yaml
diff --git a/2010/CVE-2010-1469.md b/2010/CVE-2010-1469.md
index c15f1da75ac..6f9b0419ff1 100644
--- a/2010/CVE-2010-1469.md
+++ b/2010/CVE-2010-1469.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Ternaria Informatica JProject Manager (
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1469.yaml
diff --git a/2010/CVE-2010-1470.md b/2010/CVE-2010-1470.md
index 6622644ea4e..4bc901199f2 100644
--- a/2010/CVE-2010-1470.md
+++ b/2010/CVE-2010-1470.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Web TV (com_webtv) component 1.0 for Jo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1470.yaml
diff --git a/2010/CVE-2010-1471.md b/2010/CVE-2010-1471.md
index 24d236496da..dfcf5f3507d 100644
--- a/2010/CVE-2010-1471.md
+++ b/2010/CVE-2010-1471.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the AddressBook (com_addressbook) component
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1471.yaml
diff --git a/2010/CVE-2010-1472.md b/2010/CVE-2010-1472.md
index 1d466d057c0..696c7380b81 100644
--- a/2010/CVE-2010-1472.md
+++ b/2010/CVE-2010-1472.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Daily Horoscope (com_horoscope) compone
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1472.yaml
diff --git a/2010/CVE-2010-1473.md b/2010/CVE-2010-1473.md
index 848b662ac80..e7895b68aee 100644
--- a/2010/CVE-2010-1473.md
+++ b/2010/CVE-2010-1473.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Advertising (com_advertising) component
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1473.yaml
diff --git a/2010/CVE-2010-1474.md b/2010/CVE-2010-1474.md
index 0a432e0e95e..171aea50088 100644
--- a/2010/CVE-2010-1474.md
+++ b/2010/CVE-2010-1474.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Sweety Keeper (com_sweetykeeper) compon
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1474.yaml
diff --git a/2010/CVE-2010-1475.md b/2010/CVE-2010-1475.md
index e407f2c60ff..f9f9abc67b4 100644
--- a/2010/CVE-2010-1475.md
+++ b/2010/CVE-2010-1475.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Preventive & Reservation (com_preventiv
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1475.yaml
diff --git a/2010/CVE-2010-1476.md b/2010/CVE-2010-1476.md
index 65188d4b34b..7835c9772d1 100644
--- a/2010/CVE-2010-1476.md
+++ b/2010/CVE-2010-1476.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the AlphaUserPoints (com_alphauserpoints) c
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1476.yaml
diff --git a/2010/CVE-2010-1478.md b/2010/CVE-2010-1478.md
index 372a2898b9c..e8cc1b47b11 100644
--- a/2010/CVE-2010-1478.md
+++ b/2010/CVE-2010-1478.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jf
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1478.yaml
diff --git a/2010/CVE-2010-1491.md b/2010/CVE-2010-1491.md
index e72776ed56b..f9c973d87ba 100644
--- a/2010/CVE-2010-1491.md
+++ b/2010/CVE-2010-1491.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the MMS Blog (com_mmsblog) component 2.3.0
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1491.yaml
diff --git a/2010/CVE-2010-1494.md b/2010/CVE-2010-1494.md
index 9eb80df88ab..0c63dc85084 100644
--- a/2010/CVE-2010-1494.md
+++ b/2010/CVE-2010-1494.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 f
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1494.yaml
diff --git a/2010/CVE-2010-1495.md b/2010/CVE-2010-1495.md
index f387d440231..82ad6ef993b 100644
--- a/2010/CVE-2010-1495.md
+++ b/2010/CVE-2010-1495.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Matamko (com_matamko) component 1.01 fo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1495.yaml
diff --git a/2010/CVE-2010-1531.md b/2010/CVE-2010-1531.md
index 6dc89727bcb..16fa941fd2d 100644
--- a/2010/CVE-2010-1531.md
+++ b/2010/CVE-2010-1531.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the redSHOP (com_redshop) component 1.0.x f
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1531.yaml
diff --git a/2010/CVE-2010-1532.md b/2010/CVE-2010-1532.md
index 83635965a34..9400954bbf4 100644
--- a/2010/CVE-2010-1532.md
+++ b/2010/CVE-2010-1532.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1532.yaml
diff --git a/2010/CVE-2010-1533.md b/2010/CVE-2010-1533.md
index 19dab399cbb..734e7bd26a3 100644
--- a/2010/CVE-2010-1533.md
+++ b/2010/CVE-2010-1533.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the TweetLA (com_tweetla) component 1.0.1 f
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1533.yaml
diff --git a/2010/CVE-2010-1534.md b/2010/CVE-2010-1534.md
index 7c027715a59..7e04e8a4453 100644
--- a/2010/CVE-2010-1534.md
+++ b/2010/CVE-2010-1534.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Shoutbox Pro (com_shoutbox) component f
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1534.yaml
diff --git a/2010/CVE-2010-1535.md b/2010/CVE-2010-1535.md
index 8fc7718b086..0ae15552835 100644
--- a/2010/CVE-2010-1535.md
+++ b/2010/CVE-2010-1535.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the TRAVELbook (com_travelbook) component 1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1535.yaml
diff --git a/2010/CVE-2010-1540.md b/2010/CVE-2010-1540.md
index cb6a8ed4c7e..f3fb5cc167b 100644
--- a/2010/CVE-2010-1540.md
+++ b/2010/CVE-2010-1540.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1540.yaml
diff --git a/2010/CVE-2010-1586.md b/2010/CVE-2010-1586.md
index 47305245184..28ab95df8a8 100644
--- a/2010/CVE-2010-1586.md
+++ b/2010/CVE-2010-1586.md
@@ -15,3 +15,5 @@ Open redirect vulnerability in red2301.html in HP System Management Homepage (SM
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1586.yaml
diff --git a/2010/CVE-2010-1601.md b/2010/CVE-2010-1601.md
index eeb2ed6672b..718301f0a3c 100644
--- a/2010/CVE-2010-1601.md
+++ b/2010/CVE-2010-1601.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the JA Comment (com_jacomment) component fo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1601.yaml
diff --git a/2010/CVE-2010-1602.md b/2010/CVE-2010-1602.md
index 980af893ff7..d00fb9bf31e 100644
--- a/2010/CVE-2010-1602.md
+++ b/2010/CVE-2010-1602.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) componen
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1602.yaml
diff --git a/2010/CVE-2010-1603.md b/2010/CVE-2010-1603.md
index a8f3fe748e9..72ecaba9455 100644
--- a/2010/CVE-2010-1603.md
+++ b/2010/CVE-2010-1603.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1603.yaml
diff --git a/2010/CVE-2010-1607.md b/2010/CVE-2010-1607.md
index 3230cf50dcb..97791c4614e 100644
--- a/2010/CVE-2010-1607.md
+++ b/2010/CVE-2010-1607.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interf
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1607.yaml
diff --git a/2010/CVE-2010-1653.md b/2010/CVE-2010-1653.md
index 42e743466ba..29fbe0f8145 100644
--- a/2010/CVE-2010-1653.md
+++ b/2010/CVE-2010-1653.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in graphics.php in the Graphics (com_graphics)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1653.yaml
diff --git a/2010/CVE-2010-1657.md b/2010/CVE-2010-1657.md
index 782be7fddec..fd77254aba3 100644
--- a/2010/CVE-2010-1657.md
+++ b/2010/CVE-2010-1657.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1657.yaml
diff --git a/2010/CVE-2010-1658.md b/2010/CVE-2010-1658.md
index 6685a6201f5..c9c0ea9c1a3 100644
--- a/2010/CVE-2010-1658.md
+++ b/2010/CVE-2010-1658.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboar
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1658.yaml
diff --git a/2010/CVE-2010-1659.md b/2010/CVE-2010-1659.md
index 15bd7aa3bd7..f635004c14c 100644
--- a/2010/CVE-2010-1659.md
+++ b/2010/CVE-2010-1659.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Ultimate Portfolio (com_ultimateportfol
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1659.yaml
diff --git a/2010/CVE-2010-1714.md b/2010/CVE-2010-1714.md
index cdc1d911785..9ab3107bd01 100644
--- a/2010/CVE-2010-1714.md
+++ b/2010/CVE-2010-1714.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Arcade Games (com_arcadegames) componen
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1714.yaml
diff --git a/2010/CVE-2010-1715.md b/2010/CVE-2010-1715.md
index 87145754e52..260c495a106 100644
--- a/2010/CVE-2010-1715.md
+++ b/2010/CVE-2010-1715.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Online Examination (aka Online Exam or
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1715.yaml
diff --git a/2010/CVE-2010-1717.md b/2010/CVE-2010-1717.md
index a4ffdfa08ec..f6ecf90e8d3 100644
--- a/2010/CVE-2010-1717.md
+++ b/2010/CVE-2010-1717.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the iF surfALERT (com_if_surfalert) compone
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1717.yaml
diff --git a/2010/CVE-2010-1718.md b/2010/CVE-2010-1718.md
index 59d3731dbd2..43f6ed48c45 100644
--- a/2010/CVE-2010-1718.md
+++ b/2010/CVE-2010-1718.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in archeryscores.php in the Archery Scores (co
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1718.yaml
diff --git a/2010/CVE-2010-1719.md b/2010/CVE-2010-1719.md
index 8de76b3cac5..33e2b04bd3f 100644
--- a/2010/CVE-2010-1719.md
+++ b/2010/CVE-2010-1719.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the MT Fire Eagle (com_mtfireeagle) compone
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1719.yaml
diff --git a/2010/CVE-2010-1722.md b/2010/CVE-2010-1722.md
index f2ba1072397..98adcfc4e1b 100644
--- a/2010/CVE-2010-1722.md
+++ b/2010/CVE-2010-1722.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Online Market (com_market) component 2.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1722.yaml
diff --git a/2010/CVE-2010-1723.md b/2010/CVE-2010-1723.md
index f6f3c629618..976acd63832 100644
--- a/2010/CVE-2010-1723.md
+++ b/2010/CVE-2010-1723.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map (com
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1723.yaml
diff --git a/2010/CVE-2010-1858.md b/2010/CVE-2010-1858.md
index 054bfadfab5..d740c409898 100644
--- a/2010/CVE-2010-1858.md
+++ b/2010/CVE-2010-1858.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the SMEStorage (com_smestorage) component b
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1858.yaml
diff --git a/2010/CVE-2010-1870.md b/2010/CVE-2010-1870.md
index d88f68c5095..62f10e84701 100644
--- a/2010/CVE-2010-1870.md
+++ b/2010/CVE-2010-1870.md
@@ -19,3 +19,5 @@ The OGNL extensive expression evaluation capability in XWork in Struts 2.0.0 thr
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1870.yaml
diff --git a/2010/CVE-2010-1875.md b/2010/CVE-2010-1875.md
index 763fcdea3f3..ce4219f1e9f 100644
--- a/2010/CVE-2010-1875.md
+++ b/2010/CVE-2010-1875.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1875.yaml
diff --git a/2010/CVE-2010-1878.md b/2010/CVE-2010-1878.md
index 26374036fbb..bb423c18188 100644
--- a/2010/CVE-2010-1878.md
+++ b/2010/CVE-2010-1878.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the OrgChart (com_orgchart) component 1.0.0
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1878.yaml
diff --git a/2010/CVE-2010-1952.md b/2010/CVE-2010-1952.md
index f7b484024c7..23181f7b4c3 100644
--- a/2010/CVE-2010-1952.md
+++ b/2010/CVE-2010-1952.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the BeeHeard (com_beeheard) and BeeHeard Li
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1952.yaml
diff --git a/2010/CVE-2010-1953.md b/2010/CVE-2010-1953.md
index c99945f9d4f..32f62f3fcab 100644
--- a/2010/CVE-2010-1953.md
+++ b/2010/CVE-2010-1953.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the iNetLanka Multiple Map (com_multimap) c
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1953.yaml
diff --git a/2010/CVE-2010-1954.md b/2010/CVE-2010-1954.md
index a41d1f57d91..919481c4eb1 100644
--- a/2010/CVE-2010-1954.md
+++ b/2010/CVE-2010-1954.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the iNetLanka Multiple root (com_multiroot)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1954.yaml
diff --git a/2010/CVE-2010-1955.md b/2010/CVE-2010-1955.md
index 10f39ee7393..2bf4a3093af 100644
--- a/2010/CVE-2010-1955.md
+++ b/2010/CVE-2010-1955.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Deluxe Blog Factory (com_blogfactory) c
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1955.yaml
diff --git a/2010/CVE-2010-1956.md b/2010/CVE-2010-1956.md
index 17e2ac06e90..d8b68f7b59b 100644
--- a/2010/CVE-2010-1956.md
+++ b/2010/CVE-2010-1956.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Gadget Factory (com_gadgetfactory) comp
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1956.yaml
diff --git a/2010/CVE-2010-1957.md b/2010/CVE-2010-1957.md
index 933b833ce01..fc4839bd122 100644
--- a/2010/CVE-2010-1957.md
+++ b/2010/CVE-2010-1957.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Love Factory (com_lovefactory) componen
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1957.yaml
diff --git a/2010/CVE-2010-1977.md b/2010/CVE-2010-1977.md
index 2acaca46378..22f145ab166 100644
--- a/2010/CVE-2010-1977.md
+++ b/2010/CVE-2010-1977.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the J!WHMCS Integrator (com_jwhmcs) compone
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1977.yaml
diff --git a/2010/CVE-2010-1979.md b/2010/CVE-2010-1979.md
index e6a900396d0..8f5ff70aabf 100644
--- a/2010/CVE-2010-1979.md
+++ b/2010/CVE-2010-1979.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Affiliate Datafeeds (com_datafeeds) com
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1979.yaml
diff --git a/2010/CVE-2010-1980.md b/2010/CVE-2010-1980.md
index f41e0314039..44d40340187 100644
--- a/2010/CVE-2010-1980.md
+++ b/2010/CVE-2010-1980.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in joomlaflickr.php in the Joomla Flickr (com_
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1980.yaml
diff --git a/2010/CVE-2010-1981.md b/2010/CVE-2010-1981.md
index 31240df7b01..2095b7b747c 100644
--- a/2010/CVE-2010-1981.md
+++ b/2010/CVE-2010-1981.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Fabrik (com_fabrik) component 2.0 for J
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1981.yaml
diff --git a/2010/CVE-2010-1982.md b/2010/CVE-2010-1982.md
index d816ff17e84..f52740b2210 100644
--- a/2010/CVE-2010-1982.md
+++ b/2010/CVE-2010-1982.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the JA Voice (com_javoice) component 2.0 fo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1982.yaml
diff --git a/2010/CVE-2010-1983.md b/2010/CVE-2010-1983.md
index 4cf76aed9b3..d2db4b44107 100644
--- a/2010/CVE-2010-1983.md
+++ b/2010/CVE-2010-1983.md
@@ -17,3 +17,5 @@ Directory traversal vulnerability in the redTWITTER (com_redtwitter) component 1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1983.yaml
diff --git a/2010/CVE-2010-20103.md b/2010/CVE-2010-20103.md
index c9cad1a3dc0..2cec7df15f8 100644
--- a/2010/CVE-2010-20103.md
+++ b/2010/CVE-2010-20103.md
@@ -17,3 +17,5 @@ A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2010/CVE-2010-20103.yaml
diff --git a/2010/CVE-2010-2018.md b/2010/CVE-2010-2018.md
index 9c6a6f8d510..7ad440c87b6 100644
--- a/2010/CVE-2010-2018.md
+++ b/2010/CVE-2010-2018.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in downlot.php in Lokomedia CMS 1.4.1 and 2.0
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2018.yaml
diff --git a/2010/CVE-2010-2033.md b/2010/CVE-2010-2033.md
index d5616294e57..ef2ddc744c4 100644
--- a/2010/CVE-2010-2033.md
+++ b/2010/CVE-2010-2033.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Percha Multicategory Article (com_perch
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2033.yaml
diff --git a/2010/CVE-2010-2034.md b/2010/CVE-2010-2034.md
index eec4d5270d3..e3d2640713a 100644
--- a/2010/CVE-2010-2034.md
+++ b/2010/CVE-2010-2034.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Percha Image Attach (com_perchaimageatt
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2034.yaml
diff --git a/2010/CVE-2010-2035.md b/2010/CVE-2010-2035.md
index be8bf59036e..a1462c4aa3f 100644
--- a/2010/CVE-2010-2035.md
+++ b/2010/CVE-2010-2035.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Percha Gallery (com_perchagallery) comp
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2035.yaml
diff --git a/2010/CVE-2010-2036.md b/2010/CVE-2010-2036.md
index 3ea77ae2939..0dea6283f68 100644
--- a/2010/CVE-2010-2036.md
+++ b/2010/CVE-2010-2036.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Percha Fields Attach (com_perchafieldsa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2036.yaml
diff --git a/2010/CVE-2010-2037.md b/2010/CVE-2010-2037.md
index 40c6499e4c5..d21579269d3 100644
--- a/2010/CVE-2010-2037.md
+++ b/2010/CVE-2010-2037.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Percha Downloads Attach (com_perchadown
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2037.yaml
diff --git a/2010/CVE-2010-2045.md b/2010/CVE-2010-2045.md
index e1febe1f3ca..73712b9185c 100644
--- a/2010/CVE-2010-2045.md
+++ b/2010/CVE-2010-2045.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Dione Form Wizard (aka FDione or com_di
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2045.yaml
diff --git a/2010/CVE-2010-2050.md b/2010/CVE-2010-2050.md
index ea612c62021..6d59bf44f27 100644
--- a/2010/CVE-2010-2050.md
+++ b/2010/CVE-2010-2050.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Moron Solutions MS Comment (com_mscomme
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2050.yaml
diff --git a/2010/CVE-2010-2122.md b/2010/CVE-2010-2122.md
index 02fe22dc598..d2521dc837c 100644
--- a/2010/CVE-2010-2122.md
+++ b/2010/CVE-2010-2122.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the SimpleDownload (com_simpledownload) com
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2122.yaml
diff --git a/2010/CVE-2010-2128.md b/2010/CVE-2010-2128.md
index 8af744a1f1a..df32524c80f 100644
--- a/2010/CVE-2010-2128.md
+++ b/2010/CVE-2010-2128.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2128.yaml
diff --git a/2010/CVE-2010-2259.md b/2010/CVE-2010-2259.md
index 90c26b5b989..bdb3028eb41 100644
--- a/2010/CVE-2010-2259.md
+++ b/2010/CVE-2010-2259.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the BF Survey (com_bfsurvey) component for
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2259.yaml
diff --git a/2010/CVE-2010-2307.md b/2010/CVE-2010-2307.md
index f4ff5026e5a..eb36ccd6f73 100644
--- a/2010/CVE-2010-2307.md
+++ b/2010/CVE-2010-2307.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2307.yaml
diff --git a/2010/CVE-2010-2507.md b/2010/CVE-2010-2507.md
index 4c662e0b4a5..ce2e968ce5c 100644
--- a/2010/CVE-2010-2507.md
+++ b/2010/CVE-2010-2507.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Picasa2Gallery (com_picasa2gallery) com
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2507.yaml
diff --git a/2010/CVE-2010-2680.md b/2010/CVE-2010-2680.md
index f2f2e70e8f2..69454557472 100644
--- a/2010/CVE-2010-2680.md
+++ b/2010/CVE-2010-2680.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the JExtensions JE Section/Property Finder
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2680.yaml
diff --git a/2010/CVE-2010-2682.md b/2010/CVE-2010-2682.md
index 2e40e0a1cdd..982d4818078 100644
--- a/2010/CVE-2010-2682.md
+++ b/2010/CVE-2010-2682.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Realtyna Translator (com_realtyna) comp
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2682.yaml
diff --git a/2010/CVE-2010-2857.md b/2010/CVE-2010-2857.md
index 095a6f03651..07f7e468858 100644
--- a/2010/CVE-2010-2857.md
+++ b/2010/CVE-2010-2857.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the Music Manager component for Joomla! all
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2857.yaml
diff --git a/2010/CVE-2010-2861.md b/2010/CVE-2010-2861.md
index 52894091075..f5adf533262 100644
--- a/2010/CVE-2010-2861.md
+++ b/2010/CVE-2010-2861.md
@@ -17,3 +17,5 @@ Multiple directory traversal vulnerabilities in the administrator console in Ado
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2861.yaml
diff --git a/2010/CVE-2010-2918.md b/2010/CVE-2010-2918.md
index 02fd9420ce6..e6c9bc043f1 100644
--- a/2010/CVE-2010-2918.md
+++ b/2010/CVE-2010-2918.md
@@ -15,3 +15,5 @@ PHP remote file inclusion vulnerability in core/include/myMailer.class.php in th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2918.yaml
diff --git a/2010/CVE-2010-2920.md b/2010/CVE-2010-2920.md
index 528d224db8c..1a72b6f8b9e 100644
--- a/2010/CVE-2010-2920.md
+++ b/2010/CVE-2010-2920.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Foobla Suggestions (com_foobla_suggesti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2920.yaml
diff --git a/2010/CVE-2010-3203.md b/2010/CVE-2010-3203.md
index 44ed5dcc4fb..d3b958b7750 100644
--- a/2010/CVE-2010-3203.md
+++ b/2010/CVE-2010-3203.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-3203.yaml
diff --git a/2010/CVE-2010-3426.md b/2010/CVE-2010-3426.md
index ef3d7c53b18..de808103e5e 100644
--- a/2010/CVE-2010-3426.md
+++ b/2010/CVE-2010-3426.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) compo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-3426.yaml
diff --git a/2010/CVE-2010-3867.md b/2010/CVE-2010-3867.md
index edcfc77f2e9..762024fc0d9 100644
--- a/2010/CVE-2010-3867.md
+++ b/2010/CVE-2010-3867.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2010/CVE-2010-3867.yaml
diff --git a/2010/CVE-2010-4231.md b/2010/CVE-2010-4231.md
index c5f1dcc39df..122613b7af0 100644
--- a/2010/CVE-2010-4231.md
+++ b/2010/CVE-2010-4231.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/K3ysTr0K3R/CVE-2010-4231-EXPLOIT
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4231.yaml
diff --git a/2010/CVE-2010-4239.md b/2010/CVE-2010-4239.md
index 44ba267069a..f23beea940a 100644
--- a/2010/CVE-2010-4239.md
+++ b/2010/CVE-2010-4239.md
@@ -15,3 +15,5 @@ Tiki Wiki CMS Groupware 5.2 has Local File Inclusion
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4239.yaml
diff --git a/2010/CVE-2010-4282.md b/2010/CVE-2010-4282.md
index bbefabd500f..fe9b4f4be3e 100644
--- a/2010/CVE-2010-4282.md
+++ b/2010/CVE-2010-4282.md
@@ -17,3 +17,5 @@ Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow r
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4282.yaml
diff --git a/2010/CVE-2010-4617.md b/2010/CVE-2010-4617.md
index 747db357857..c24dd246d6b 100644
--- a/2010/CVE-2010-4617.md
+++ b/2010/CVE-2010-4617.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4617.yaml
diff --git a/2010/CVE-2010-4719.md b/2010/CVE-2010-4719.md
index 895974f19a8..77eef39cf54 100644
--- a/2010/CVE-2010-4719.md
+++ b/2010/CVE-2010-4719.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4719.yaml
diff --git a/2010/CVE-2010-4769.md b/2010/CVE-2010-4769.md
index 65dc20f7c09..e03186354b0 100644
--- a/2010/CVE-2010-4769.md
+++ b/2010/CVE-2010-4769.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4769.yaml
diff --git a/2010/CVE-2010-4977.md b/2010/CVE-2010-4977.md
index 58a30c968e2..35a02394433 100644
--- a/2010/CVE-2010-4977.md
+++ b/2010/CVE-2010-4977.md
@@ -15,3 +15,5 @@ SQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4977.yaml
diff --git a/2010/CVE-2010-5028.md b/2010/CVE-2010-5028.md
index a353314fef3..aea20161dce 100644
--- a/2010/CVE-2010-5028.md
+++ b/2010/CVE-2010-5028.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-5028.yaml
diff --git a/2010/CVE-2010-5278.md b/2010/CVE-2010-5278.md
index 97d48bc158f..b14c91b595d 100644
--- a/2010/CVE-2010-5278.md
+++ b/2010/CVE-2010-5278.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in manager/controllers/default/resource/tvs.ph
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-5278.yaml
diff --git a/2010/CVE-2010-5286.md b/2010/CVE-2010-5286.md
index d196c37a71d..1afd4efeaff 100644
--- a/2010/CVE-2010-5286.md
+++ b/2010/CVE-2010-5286.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in Jstore (com_jstore) component for Joomla! a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-5286.yaml
diff --git a/2011/CVE-2011-0049.md b/2011/CVE-2011-0049.md
index 04cfbcb1df6..19b9609ab1b 100644
--- a/2011/CVE-2011-0049.md
+++ b/2011/CVE-2011-0049.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the _list_file_get function in lib/Majordom
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-0049.yaml
diff --git a/2011/CVE-2011-0762.md b/2011/CVE-2011-0762.md
index 97d4cbf2538..bc0d55c2c29 100644
--- a/2011/CVE-2011-0762.md
+++ b/2011/CVE-2011-0762.md
@@ -17,3 +17,5 @@ The vsf_filename_passes_filter function in ls.c in vsftpd before 2.3.3 allows re
 #### Github
 - https://github.com/s3mPr1linux/CVE-2011-0762
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2011/CVE-2011-0762.yaml
diff --git a/2011/CVE-2011-1669.md b/2011/CVE-2011-1669.md
index b2bbec83abe..e9ff8e6f3bd 100644
--- a/2011/CVE-2011-1669.md
+++ b/2011/CVE-2011-1669.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in wp-download.php in the WP Custom Pages modu
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-1669.yaml
diff --git a/2011/CVE-2011-2523.md b/2011/CVE-2011-2523.md
index 85bdc2d551d..b2ba2876e1f 100644
--- a/2011/CVE-2011-2523.md
+++ b/2011/CVE-2011-2523.md
@@ -81,3 +81,5 @@ vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which
 - https://github.com/thanawut2903/Port-21-tcp-vsftpd-2.3.4-exploit
 - https://github.com/vaishnavucv/CVE-2011-2523
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2011/CVE-2011-2523.yaml
diff --git a/2011/CVE-2011-2744.md b/2011/CVE-2011-2744.md
index 8cdec654d94..85dae15f933 100644
--- a/2011/CVE-2011-2744.md
+++ b/2011/CVE-2011-2744.md
@@ -17,3 +17,5 @@ Directory traversal vulnerability in Chyrp 2.1 and earlier allows remote attacke
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-2744.yaml
diff --git a/2011/CVE-2011-2780.md b/2011/CVE-2011-2780.md
index 71415617ceb..ec814524249 100644
--- a/2011/CVE-2011-2780.md
+++ b/2011/CVE-2011-2780.md
@@ -17,3 +17,5 @@ Directory traversal vulnerability in includes/lib/gz.php in Chyrp 2.0 and earlie
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-2780.yaml
diff --git a/2011/CVE-2011-3315.md b/2011/CVE-2011-3315.md
index 9aca4ca30f7..1a75e4fee3d 100644
--- a/2011/CVE-2011-3315.md
+++ b/2011/CVE-2011-3315.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-3315.yaml
diff --git a/2011/CVE-2011-4336.md b/2011/CVE-2011-4336.md
index 7fabb58d182..158f686a075 100644
--- a/2011/CVE-2011-4336.md
+++ b/2011/CVE-2011-4336.md
@@ -15,3 +15,5 @@ Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4336.yaml
diff --git a/2011/CVE-2011-4618.md b/2011/CVE-2011-4618.md
index 7cf7073beff..c1945d06185 100644
--- a/2011/CVE-2011-4618.md
+++ b/2011/CVE-2011-4618.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4618.yaml
diff --git a/2011/CVE-2011-4624.md b/2011/CVE-2011-4624.md
index 4404d611f43..03c52a444eb 100644
--- a/2011/CVE-2011-4624.md
+++ b/2011/CVE-2011-4624.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4624.yaml
diff --git a/2011/CVE-2011-4640.md b/2011/CVE-2011-4640.md
index 4799fff708a..b7efc3ca5ab 100644
--- a/2011/CVE-2011-4640.md
+++ b/2011/CVE-2011-4640.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4640.yaml
diff --git a/2011/CVE-2011-4804.md b/2011/CVE-2011-4804.md
index f660421d615..93c60586dbb 100644
--- a/2011/CVE-2011-4804.md
+++ b/2011/CVE-2011-4804.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4804.yaml
diff --git a/2011/CVE-2011-4926.md b/2011/CVE-2011-4926.md
index 782d0fb8261..74669c36ce5 100644
--- a/2011/CVE-2011-4926.md
+++ b/2011/CVE-2011-4926.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4926.yaml
diff --git a/2011/CVE-2011-5106.md b/2011/CVE-2011-5106.md
index b61a5679e8f..1307c8a420e 100644
--- a/2011/CVE-2011-5106.md
+++ b/2011/CVE-2011-5106.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5106.yaml
diff --git a/2011/CVE-2011-5107.md b/2011/CVE-2011-5107.md
index 9072fa650b5..e79ed6e4557 100644
--- a/2011/CVE-2011-5107.md
+++ b/2011/CVE-2011-5107.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5107.yaml
diff --git a/2011/CVE-2011-5179.md b/2011/CVE-2011-5179.md
index c7a6be693c2..0cca390a0c7 100644
--- a/2011/CVE-2011-5179.md
+++ b/2011/CVE-2011-5179.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5179.yaml
diff --git a/2011/CVE-2011-5181.md b/2011/CVE-2011-5181.md
index 82562b91fdc..9c0b53fb6b0 100644
--- a/2011/CVE-2011-5181.md
+++ b/2011/CVE-2011-5181.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5181.yaml
diff --git a/2011/CVE-2011-5252.md b/2011/CVE-2011-5252.md
index 3a4f3eb7481..f77396d6870 100644
--- a/2011/CVE-2011-5252.md
+++ b/2011/CVE-2011-5252.md
@@ -15,3 +15,5 @@ Open redirect vulnerability in Users/Account/LogOff in Orchard 1.0.x before 1.0.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5252.yaml
diff --git a/2011/CVE-2011-5265.md b/2011/CVE-2011-5265.md
index 7543c133e21..9f46ac3d918 100644
--- a/2011/CVE-2011-5265.md
+++ b/2011/CVE-2011-5265.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5265.yaml
diff --git a/2012/CVE-2012-0392.md b/2012/CVE-2012-0392.md
index 4ee70cfc76b..3968b405603 100644
--- a/2012/CVE-2012-0392.md
+++ b/2012/CVE-2012-0392.md
@@ -15,3 +15,5 @@ The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0392.yaml
diff --git a/2012/CVE-2012-0394.md b/2012/CVE-2012-0394.md
index f2fa5aedb7f..cc8291f2bec 100644
--- a/2012/CVE-2012-0394.md
+++ b/2012/CVE-2012-0394.md
@@ -16,3 +16,5 @@ The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when develop
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0394.yaml
diff --git a/2012/CVE-2012-0896.md b/2012/CVE-2012-0896.md
index aa06013980e..d6560efc599 100644
--- a/2012/CVE-2012-0896.md
+++ b/2012/CVE-2012-0896.md
@@ -16,3 +16,5 @@ Absolute path traversal vulnerability in download.php in the Count Per Day modul
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0896.yaml
diff --git a/2012/CVE-2012-0901.md b/2012/CVE-2012-0901.md
index d79c0cd4abe..c8a52f073e6 100644
--- a/2012/CVE-2012-0901.md
+++ b/2012/CVE-2012-0901.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0901.yaml
diff --git a/2012/CVE-2012-0981.md b/2012/CVE-2012-0981.md
index c6b4e0a379d..d53f6452d40 100644
--- a/2012/CVE-2012-0981.md
+++ b/2012/CVE-2012-0981.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0981.yaml
diff --git a/2012/CVE-2012-0991.md b/2012/CVE-2012-0991.md
index bb8f6abd388..e0e356a7084 100644
--- a/2012/CVE-2012-0991.md
+++ b/2012/CVE-2012-0991.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0991.yaml
diff --git a/2012/CVE-2012-0996.md b/2012/CVE-2012-0996.md
index b832e9d1c64..a7b63382e96 100644
--- a/2012/CVE-2012-0996.md
+++ b/2012/CVE-2012-0996.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0996.yaml
diff --git a/2012/CVE-2012-10018.md b/2012/CVE-2012-10018.md
index ebee2698b1b..220c4cb81ae 100644
--- a/2012/CVE-2012-10018.md
+++ b/2012/CVE-2012-10018.md
@@ -18,3 +18,5 @@ The Mapplic and Mapplic Lite plugins for WordPress are vulnerable to Server-Side
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-10018.yaml
diff --git a/2012/CVE-2012-1226.md b/2012/CVE-2012-1226.md
index 40c4e94e31f..a6d46751aa0 100644
--- a/2012/CVE-2012-1226.md
+++ b/2012/CVE-2012-1226.md
@@ -17,3 +17,5 @@ Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow r
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-1226.yaml
diff --git a/2012/CVE-2012-1823.md b/2012/CVE-2012-1823.md
index 6a44a3fe04b..ba08a348df1 100644
--- a/2012/CVE-2012-1823.md
+++ b/2012/CVE-2012-1823.md
@@ -23,3 +23,5 @@ No PoCs from references.
 - https://github.com/infodox/exploits
 - https://github.com/zomasec/CVE-2024-4577
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-1823.yaml
diff --git a/2012/CVE-2012-1835.md b/2012/CVE-2012-1835.md
index 4dde4713b25..25c83bda6b4 100644
--- a/2012/CVE-2012-1835.md
+++ b/2012/CVE-2012-1835.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-1835.yaml
diff --git a/2012/CVE-2012-2122.md b/2012/CVE-2012-2122.md
index 44dc3a7e632..50924a9c7bc 100644
--- a/2012/CVE-2012-2122.md
+++ b/2012/CVE-2012-2122.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/yunkihong-dev/Vulhub
 - https://github.com/zhangkaibin0921/CVE-2012-2122
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2012/CVE-2012-2122.yaml
diff --git a/2012/CVE-2012-2371.md b/2012/CVE-2012-2371.md
index 56ad88b4cdb..27b8cdd6f05 100644
--- a/2012/CVE-2012-2371.md
+++ b/2012/CVE-2012-2371.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in index.php in the WP-FaceThumb plugin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-2371.yaml
diff --git a/2012/CVE-2012-3153.md b/2012/CVE-2012-3153.md
index 3cfcb511a39..6f53557aba1 100644
--- a/2012/CVE-2012-3153.md
+++ b/2012/CVE-2012-3153.md
@@ -16,3 +16,5 @@ Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fu
 #### Github
 - https://github.com/Mekanismen/pwnacle-fusion
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-3153.yaml
diff --git a/2012/CVE-2012-4032.md b/2012/CVE-2012-4032.md
index ee2bd7dfd51..cefa0baaeaa 100644
--- a/2012/CVE-2012-4032.md
+++ b/2012/CVE-2012-4032.md
@@ -15,3 +15,5 @@ Open redirect vulnerability in the login page in WebsitePanel before 1.2.2.1 all
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4032.yaml
diff --git a/2012/CVE-2012-4242.md b/2012/CVE-2012-4242.md
index 3e1d5bce40e..3df6453bb06 100644
--- a/2012/CVE-2012-4242.md
+++ b/2012/CVE-2012-4242.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4242.yaml
diff --git a/2012/CVE-2012-4253.md b/2012/CVE-2012-4253.md
index 89791d3a85f..9e04b07256a 100644
--- a/2012/CVE-2012-4253.md
+++ b/2012/CVE-2012-4253.md
@@ -15,3 +15,5 @@ Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4253.yaml
diff --git a/2012/CVE-2012-4273.md b/2012/CVE-2012-4273.md
index 1ece730e9d2..dc1e7637b35 100644
--- a/2012/CVE-2012-4273.md
+++ b/2012/CVE-2012-4273.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4273.yaml
diff --git a/2012/CVE-2012-4547.md b/2012/CVE-2012-4547.md
index e9243175854..41469b35f29 100644
--- a/2012/CVE-2012-4547.md
+++ b/2012/CVE-2012-4547.md
@@ -15,3 +15,5 @@ Unspecified vulnerability in awredir.pl in AWStats before 7.1 has unknown impact
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4547.yaml
diff --git a/2012/CVE-2012-4768.md b/2012/CVE-2012-4768.md
index bcc3a27e44a..d194d49d731 100644
--- a/2012/CVE-2012-4768.md
+++ b/2012/CVE-2012-4768.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in the Download Monitor plugin before 3
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4768.yaml
diff --git a/2012/CVE-2012-4878.md b/2012/CVE-2012-4878.md
index ed471b05fb5..4286ce73740 100644
--- a/2012/CVE-2012-4878.md
+++ b/2012/CVE-2012-4878.md
@@ -16,3 +16,5 @@ Absolute path traversal vulnerability in controlcenter.php in FlatnuX CMS 2011 0
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4878.yaml
diff --git a/2012/CVE-2012-4889.md b/2012/CVE-2012-4889.md
index 04ffea9e893..0cefcb4979c 100644
--- a/2012/CVE-2012-4889.md
+++ b/2012/CVE-2012-4889.md
@@ -16,3 +16,5 @@ Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine Firewall Ana
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4889.yaml
diff --git a/2012/CVE-2012-4940.md b/2012/CVE-2012-4940.md
index 922c60e7bdf..7d43b9d4362 100644
--- a/2012/CVE-2012-4940.md
+++ b/2012/CVE-2012-4940.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4940.yaml
diff --git a/2012/CVE-2012-4982.md b/2012/CVE-2012-4982.md
index 96eb0a41278..0f213220e68 100644
--- a/2012/CVE-2012-4982.md
+++ b/2012/CVE-2012-4982.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4982.yaml
diff --git a/2012/CVE-2012-5321.md b/2012/CVE-2012-5321.md
index 7f39a123298..82c49c382df 100644
--- a/2012/CVE-2012-5321.md
+++ b/2012/CVE-2012-5321.md
@@ -15,3 +15,5 @@ tiki-featured_link.php in TikiWiki CMS/Groupware 8.3 allows remote attackers to
 #### Github
 - https://github.com/Cappricio-Securities/CVE-2012-5321
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-5321.yaml
diff --git a/2012/CVE-2012-5913.md b/2012/CVE-2012-5913.md
index 58c376c02dc..7b1cc9e8223 100644
--- a/2012/CVE-2012-5913.md
+++ b/2012/CVE-2012-5913.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in wp-integrator.php in the WordPress I
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-5913.yaml
diff --git a/2012/CVE-2012-6499.md b/2012/CVE-2012-6499.md
index 8b9f9e53785..1506d54d2e5 100644
--- a/2012/CVE-2012-6499.md
+++ b/2012/CVE-2012-6499.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-6499.yaml
diff --git a/2013/CVE-2013-1965.md b/2013/CVE-2013-1965.md
index 80758bf542b..a1ee0d4dca4 100644
--- a/2013/CVE-2013-1965.md
+++ b/2013/CVE-2013-1965.md
@@ -15,3 +15,5 @@ Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.
 #### Github
 - https://github.com/cinno/CVE-2013-1965
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-1965.yaml
diff --git a/2013/CVE-2013-2248.md b/2013/CVE-2013-2248.md
index aaaef967b29..3efc2e0ce3a 100644
--- a/2013/CVE-2013-2248.md
+++ b/2013/CVE-2013-2248.md
@@ -17,3 +17,5 @@ Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 all
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-2248.yaml
diff --git a/2013/CVE-2013-2251.md b/2013/CVE-2013-2251.md
index e05fc29f3cc..cd348d8ef17 100644
--- a/2013/CVE-2013-2251.md
+++ b/2013/CVE-2013-2251.md
@@ -23,3 +23,5 @@ Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary
 - https://github.com/felixsta/hack_tips
 - https://github.com/nth347/CVE-2013-2251
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-2251.yaml
diff --git a/2013/CVE-2013-2287.md b/2013/CVE-2013-2287.md
index 0bcd89e5198..c0d694553dd 100644
--- a/2013/CVE-2013-2287.md
+++ b/2013/CVE-2013-2287.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-2287.yaml
diff --git a/2013/CVE-2013-2621.md b/2013/CVE-2013-2621.md
index 8fad234f639..ad32c231f1c 100644
--- a/2013/CVE-2013-2621.md
+++ b/2013/CVE-2013-2621.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-2621.yaml
diff --git a/2013/CVE-2013-3526.md b/2013/CVE-2013-3526.md
index 1705b6c35d2..18fe8fd3483 100644
--- a/2013/CVE-2013-3526.md
+++ b/2013/CVE-2013-3526.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in js/ta_loaded.js.php in the Traffic A
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-3526.yaml
diff --git a/2013/CVE-2013-3827.md b/2013/CVE-2013-3827.md
index 381b740083c..005672051ea 100644
--- a/2013/CVE-2013-3827.md
+++ b/2013/CVE-2013-3827.md
@@ -15,3 +15,5 @@ Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Fus
 #### Github
 - https://github.com/thistehneisen/CVE-2013-3827
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-3827.yaml
diff --git a/2013/CVE-2013-4117.md b/2013/CVE-2013-4117.md
index 33bc82a59d2..a93fa3e10fb 100644
--- a/2013/CVE-2013-4117.md
+++ b/2013/CVE-2013-4117.md
@@ -16,3 +16,5 @@ Cross-site scripting (XSS) vulnerability in includes/CatGridPost.php in the Cate
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-4117.yaml
diff --git a/2013/CVE-2013-4625.md b/2013/CVE-2013-4625.md
index d0eb2eda2e6..bf468a88d55 100644
--- a/2013/CVE-2013-4625.md
+++ b/2013/CVE-2013-4625.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in files/installer.cleanup.php in the D
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-4625.yaml
diff --git a/2013/CVE-2013-4982.md b/2013/CVE-2013-4982.md
index 7774d12741c..5ff15f73a8c 100644
--- a/2013/CVE-2013-4982.md
+++ b/2013/CVE-2013-4982.md
@@ -16,3 +16,5 @@ AVTECH AVN801 DVR has a security bypass via the administration login captcha
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-4982.yaml
diff --git a/2013/CVE-2013-5528.md b/2013/CVE-2013-5528.md
index 28df80dc0dd..f247402c3c4 100644
--- a/2013/CVE-2013-5528.md
+++ b/2013/CVE-2013-5528.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Tomcat administrative web interface in
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-5528.yaml
diff --git a/2013/CVE-2013-5979.md b/2013/CVE-2013-5979.md
index ec4c6836529..3500d59972c 100644
--- a/2013/CVE-2013-5979.md
+++ b/2013/CVE-2013-5979.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in Spring Signage Xibo 1.2.x before 1.2.3 and
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-5979.yaml
diff --git a/2013/CVE-2013-6281.md b/2013/CVE-2013-6281.md
index 710b6a757cc..94ae293c1b1 100644
--- a/2013/CVE-2013-6281.md
+++ b/2013/CVE-2013-6281.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spre
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-6281.yaml
diff --git a/2013/CVE-2013-7091.md b/2013/CVE-2013-7091.md
index f945966b68b..0243fb326ea 100644
--- a/2013/CVE-2013-7091.md
+++ b/2013/CVE-2013-7091.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKe
 #### Github
 - https://github.com/fnmsd/zimbra_poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-7091.yaml
diff --git a/2013/CVE-2013-7240.md b/2013/CVE-2013-7240.md
index 09c8d1f8ac7..cec1c4429fa 100644
--- a/2013/CVE-2013-7240.md
+++ b/2013/CVE-2013-7240.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in download-file.php in the Advanced Dewplayer
 #### Github
 - https://github.com/JNado/CST312-WordPressExploits
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-7240.yaml
diff --git a/2013/CVE-2013-7285.md b/2013/CVE-2013-7285.md
index a0f1365c30f..f2c26fd5351 100644
--- a/2013/CVE-2013-7285.md
+++ b/2013/CVE-2013-7285.md
@@ -16,3 +16,5 @@ Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework h
 #### Github
 - https://github.com/shoucheng3/x-stream__xstream_CVE-2013-7285_1-4-6
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-7285.yaml
diff --git a/2014/CVE-2014-0160.md b/2014/CVE-2014-0160.md
index 1c854560158..d393bccba8b 100644
--- a/2014/CVE-2014-0160.md
+++ b/2014/CVE-2014-0160.md
@@ -74,3 +74,5 @@ The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not p
 - https://github.com/undacmic/heartbleed-proof-of-concept
 - https://github.com/yashfren/CVE-2014-0160-HeartBleed
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2014/CVE-2014-0160.yaml
diff --git a/2014/CVE-2014-10037.md b/2014/CVE-2014-10037.md
index a3ec2da2dd2..128744c9c27 100644
--- a/2014/CVE-2014-10037.md
+++ b/2014/CVE-2014-10037.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-10037.yaml
diff --git a/2014/CVE-2014-1203.md b/2014/CVE-2014-1203.md
index c996ca9acd3..c1a304c9005 100644
--- a/2014/CVE-2014-1203.md
+++ b/2014/CVE-2014-1203.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-1203.yaml
diff --git a/2014/CVE-2014-2321.md b/2014/CVE-2014-2321.md
index d534f728cf9..8daf316e1ad 100644
--- a/2014/CVE-2014-2321.md
+++ b/2014/CVE-2014-2321.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2321.yaml
diff --git a/2014/CVE-2014-2323.md b/2014/CVE-2014-2323.md
index 34dc128c49d..e513bfeb73c 100644
--- a/2014/CVE-2014-2323.md
+++ b/2014/CVE-2014-2323.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2323.yaml
diff --git a/2014/CVE-2014-2383.md b/2014/CVE-2014-2383.md
index 97eeb3e959f..d8f4b87a517 100644
--- a/2014/CVE-2014-2383.md
+++ b/2014/CVE-2014-2383.md
@@ -15,3 +15,5 @@ dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows con
 #### Github
 - https://github.com/Relativ3Pa1n/CVE-2014-2383-LFI-to-RCE-Escalation
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2383.yaml
diff --git a/2014/CVE-2014-2908.md b/2014/CVE-2014-2908.md
index f4844346fab..f10c0e56b7d 100644
--- a/2014/CVE-2014-2908.md
+++ b/2014/CVE-2014-2908.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in the integrated web server on Siemens
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2908.yaml
diff --git a/2014/CVE-2014-2962.md b/2014/CVE-2014-2962.md
index dcc1faa6ec1..77d79cb75f8 100644
--- a/2014/CVE-2014-2962.md
+++ b/2014/CVE-2014-2962.md
@@ -16,3 +16,5 @@ Absolute path traversal vulnerability in the webproc cgi module on the Belkin N1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2962.yaml
diff --git a/2014/CVE-2014-3120.md b/2014/CVE-2014-3120.md
index 086ddbd31c0..b2c95233d48 100644
--- a/2014/CVE-2014-3120.md
+++ b/2014/CVE-2014-3120.md
@@ -21,3 +21,5 @@ The default configuration in Elasticsearch before 1.2 enables dynamic scripting,
 - https://github.com/pi-2r/Elasticsearch-ExpLoit
 - https://github.com/xpgdgit/CVE-2014-3120
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-3120.yaml
diff --git a/2014/CVE-2014-3206.md b/2014/CVE-2014-3206.md
index 1539baf7b88..452b02c9c8b 100644
--- a/2014/CVE-2014-3206.md
+++ b/2014/CVE-2014-3206.md
@@ -15,3 +15,5 @@ Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the
 #### Github
 - https://github.com/laccart/CVE-2014-3206
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-3206.yaml
diff --git a/2014/CVE-2014-3704.md b/2014/CVE-2014-3704.md
index 9393184758d..a38c4086808 100644
--- a/2014/CVE-2014-3704.md
+++ b/2014/CVE-2014-3704.md
@@ -26,3 +26,5 @@ The expandArguments function in the database abstraction API in Drupal core 7.x
 - https://github.com/happynote3966/CVE-2014-3704
 - https://github.com/joaomorenorf/CVE-2014-3704
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-3704.yaml
diff --git a/2014/CVE-2014-3744.md b/2014/CVE-2014-3744.md
index 949d5fe3ba8..474c0b775ce 100644
--- a/2014/CVE-2014-3744.md
+++ b/2014/CVE-2014-3744.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-3744.yaml
diff --git a/2014/CVE-2014-4210.md b/2014/CVE-2014-4210.md
index fee41cb4922..f114a222d06 100644
--- a/2014/CVE-2014-4210.md
+++ b/2014/CVE-2014-4210.md
@@ -19,3 +19,5 @@ Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusi
 - https://github.com/ZorvithonLeo/Exploit-CVE-2014-4210-
 - https://github.com/unmanarc/CVE-2014-4210-SSRF-PORTSCANNER-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4210.yaml
diff --git a/2014/CVE-2014-4513.md b/2014/CVE-2014-4513.md
index 3895ef267e0..f30ce969448 100644
--- a/2014/CVE-2014-4513.md
+++ b/2014/CVE-2014-4513.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4513.yaml
diff --git a/2014/CVE-2014-4535.md b/2014/CVE-2014-4535.md
index d20a376a275..765a21dd43b 100644
--- a/2014/CVE-2014-4535.md
+++ b/2014/CVE-2014-4535.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4535.yaml
diff --git a/2014/CVE-2014-4536.md b/2014/CVE-2014-4536.md
index 92237db82e6..df33796ded9 100644
--- a/2014/CVE-2014-4536.md
+++ b/2014/CVE-2014-4536.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4536.yaml
diff --git a/2014/CVE-2014-4539.md b/2014/CVE-2014-4539.md
index 153c2346d59..34a8fd76abc 100644
--- a/2014/CVE-2014-4539.md
+++ b/2014/CVE-2014-4539.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4539.yaml
diff --git a/2014/CVE-2014-4544.md b/2014/CVE-2014-4544.md
index bb3038542ba..6cfd104e3fe 100644
--- a/2014/CVE-2014-4544.md
+++ b/2014/CVE-2014-4544.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4544.yaml
diff --git a/2014/CVE-2014-4550.md b/2014/CVE-2014-4550.md
index 1fd9cfe4d0f..0a9ce3ca905 100644
--- a/2014/CVE-2014-4550.md
+++ b/2014/CVE-2014-4550.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4550.yaml
diff --git a/2014/CVE-2014-4558.md b/2014/CVE-2014-4558.md
index 8f45b73891a..5dd92843a65 100644
--- a/2014/CVE-2014-4558.md
+++ b/2014/CVE-2014-4558.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in test-plugin.php in the Swipe Checkou
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4558.yaml
diff --git a/2014/CVE-2014-4561.md b/2014/CVE-2014-4561.md
index be09c4bb7b4..6bcaf2fe865 100644
--- a/2014/CVE-2014-4561.md
+++ b/2014/CVE-2014-4561.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4561.yaml
diff --git a/2014/CVE-2014-4577.md b/2014/CVE-2014-4577.md
index ef59dd1e0a4..1a63884ecfc 100644
--- a/2014/CVE-2014-4577.md
+++ b/2014/CVE-2014-4577.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4577.yaml
diff --git a/2014/CVE-2014-4592.md b/2014/CVE-2014-4592.md
index eed92687386..3635bdedd14 100644
--- a/2014/CVE-2014-4592.md
+++ b/2014/CVE-2014-4592.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4592.yaml
diff --git a/2014/CVE-2014-4940.md b/2014/CVE-2014-4940.md
index bbffc65d2a5..283d2548ef4 100644
--- a/2014/CVE-2014-4940.md
+++ b/2014/CVE-2014-4940.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4940.yaml
diff --git a/2014/CVE-2014-4941.md b/2014/CVE-2014-4941.md
index 8b0be2a8b69..2ae24b7a944 100644
--- a/2014/CVE-2014-4941.md
+++ b/2014/CVE-2014-4941.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4941.yaml
diff --git a/2014/CVE-2014-4942.md b/2014/CVE-2014-4942.md
index 7419b3feec0..25d7aebd042 100644
--- a/2014/CVE-2014-4942.md
+++ b/2014/CVE-2014-4942.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4942.yaml
diff --git a/2014/CVE-2014-5111.md b/2014/CVE-2014-5111.md
index f92ae7ba886..d7765b877eb 100644
--- a/2014/CVE-2014-5111.md
+++ b/2014/CVE-2014-5111.md
@@ -15,3 +15,5 @@ Multiple directory traversal vulnerabilities in Fonality trixbox allow remote at
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-5111.yaml
diff --git a/2014/CVE-2014-5181.md b/2014/CVE-2014-5181.md
index 340363abac3..bcdd75817ac 100644
--- a/2014/CVE-2014-5181.md
+++ b/2014/CVE-2014-5181.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-5181.yaml
diff --git a/2014/CVE-2014-5187.md b/2014/CVE-2014-5187.md
index 9da1bd46896..1eafd95908f 100644
--- a/2014/CVE-2014-5187.md
+++ b/2014/CVE-2014-5187.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-5187.yaml
diff --git a/2014/CVE-2014-5258.md b/2014/CVE-2014-5258.md
index 5b30564620c..c5b5926753d 100644
--- a/2014/CVE-2014-5258.md
+++ b/2014/CVE-2014-5258.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-5258.yaml
diff --git a/2014/CVE-2014-5368.md b/2014/CVE-2014-5368.md
index 054d66ecf30..1c03b243735 100644
--- a/2014/CVE-2014-5368.md
+++ b/2014/CVE-2014-5368.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the file_get_contents function in downloadf
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-5368.yaml
diff --git a/2014/CVE-2014-6271.md b/2014/CVE-2014-6271.md
index 7283360b497..184d27c03ac 100644
--- a/2014/CVE-2014-6271.md
+++ b/2014/CVE-2014-6271.md
@@ -112,3 +112,5 @@ GNU Bash through 4.3 processes trailing strings after function definitions in th
 - https://github.com/yanicklandry/bashfix
 - https://github.com/zalalov/CVE-2014-6271
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-6271.yaml
diff --git a/2014/CVE-2014-6287.md b/2014/CVE-2014-6287.md
index a39aca9d633..9a8410b11ea 100644
--- a/2014/CVE-2014-6287.md
+++ b/2014/CVE-2014-6287.md
@@ -33,3 +33,5 @@ The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks H
 - https://github.com/wizardy0ga/THM-Steel_Mountain-CVE-2014-6287
 - https://github.com/zhsh9/CVE-2014-6287
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-6287.yaml
diff --git a/2014/CVE-2014-6308.md b/2014/CVE-2014-6308.md
index 8c7fbfd444c..b808f5dd59c 100644
--- a/2014/CVE-2014-6308.md
+++ b/2014/CVE-2014-6308.md
@@ -17,3 +17,5 @@ Directory traversal vulnerability in OSClass before 3.4.2 allows remote attacker
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-6308.yaml
diff --git a/2014/CVE-2014-8676.md b/2014/CVE-2014-8676.md
index 442749b7261..8851aea7dbe 100644
--- a/2014/CVE-2014-8676.md
+++ b/2014/CVE-2014-8676.md
@@ -17,3 +17,5 @@ Directory traversal vulnerability in the file_get_contents function in SOPlannin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-8676.yaml
diff --git a/2014/CVE-2014-8682.md b/2014/CVE-2014-8682.md
index fdaa18c0ff7..d567bfbd09c 100644
--- a/2014/CVE-2014-8682.md
+++ b/2014/CVE-2014-8682.md
@@ -17,3 +17,5 @@ Multiple SQL injection vulnerabilities in Gogs (aka Go Git Service) 0.3.1-9 thro
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-8682.yaml
diff --git a/2014/CVE-2014-8739.md b/2014/CVE-2014-8739.md
index 5b3303e203e..12a1d96ff20 100644
--- a/2014/CVE-2014-8739.md
+++ b/2014/CVE-2014-8739.md
@@ -16,3 +16,5 @@ Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQ
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-8739.yaml
diff --git a/2014/CVE-2014-8799.md b/2014/CVE-2014-8799.md
index 96e992ada05..efd1e6c7156 100644
--- a/2014/CVE-2014-8799.md
+++ b/2014/CVE-2014-8799.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in the dp_img_resize function in php/dp-functi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-8799.yaml
diff --git a/2014/CVE-2014-9094.md b/2014/CVE-2014-9094.md
index 937f8056251..436ef34f520 100644
--- a/2014/CVE-2014-9094.md
+++ b/2014/CVE-2014-9094.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9094.yaml
diff --git a/2014/CVE-2014-9119.md b/2014/CVE-2014-9119.md
index 63fb0b0e522..fdfa52dbdd7 100644
--- a/2014/CVE-2014-9119.md
+++ b/2014/CVE-2014-9119.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in download.php in the DB Backup plugin 4.5 an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9119.yaml
diff --git a/2014/CVE-2014-9180.md b/2014/CVE-2014-9180.md
index 70efa6a2877..86391c399c6 100644
--- a/2014/CVE-2014-9180.md
+++ b/2014/CVE-2014-9180.md
@@ -15,3 +15,5 @@ Open redirect vulnerability in go.php in Eleanor CMS allows remote attackers to
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9180.yaml
diff --git a/2014/CVE-2014-9444.md b/2014/CVE-2014-9444.md
index f4dc1c69ac8..d34eb75d76e 100644
--- a/2014/CVE-2014-9444.md
+++ b/2014/CVE-2014-9444.md
@@ -16,3 +16,5 @@ Cross-site scripting (XSS) vulnerability in the Frontend Uploader plugin 0.9.2 f
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9444.yaml
diff --git a/2014/CVE-2014-9606.md b/2014/CVE-2014-9606.md
index 8c62c4a6297..1a24fb968f4 100644
--- a/2014/CVE-2014-9606.md
+++ b/2014/CVE-2014-9606.md
@@ -15,3 +15,5 @@ Multiple cross-site scripting (XSS) vulnerabilities in Netsweeper before 3.1.10,
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9606.yaml
diff --git a/2014/CVE-2014-9607.md b/2014/CVE-2014-9607.md
index 79e80ff2dd2..e10d9687982 100644
--- a/2014/CVE-2014-9607.md
+++ b/2014/CVE-2014-9607.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in remotereporter/load_logfiles.php in
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9607.yaml
diff --git a/2014/CVE-2014-9608.md b/2014/CVE-2014-9608.md
index 81618c9b6a1..f510c06e34d 100644
--- a/2014/CVE-2014-9608.md
+++ b/2014/CVE-2014-9608.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in webadmin/policy/group_table_ajax.php
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9608.yaml
diff --git a/2014/CVE-2014-9609.md b/2014/CVE-2014-9609.md
index 2a774015395..97211bf779d 100644
--- a/2014/CVE-2014-9609.md
+++ b/2014/CVE-2014-9609.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in webadmin/reporter/view_server_log.php in Ne
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9609.yaml
diff --git a/2014/CVE-2014-9614.md b/2014/CVE-2014-9614.md
index e61cc41ad47..2358c8ac423 100644
--- a/2014/CVE-2014-9614.md
+++ b/2014/CVE-2014-9614.md
@@ -15,3 +15,5 @@ The Web Panel in Netsweeper before 4.0.5 has a default password of branding for
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9614.yaml
diff --git a/2014/CVE-2014-9615.md b/2014/CVE-2014-9615.md
index c5cf3f87811..97616c9e5f1 100644
--- a/2014/CVE-2014-9615.md
+++ b/2014/CVE-2014-9615.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in Netsweeper 4.0.4 allows remote attac
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9615.yaml
diff --git a/2014/CVE-2014-9617.md b/2014/CVE-2014-9617.md
index 1d511a35b6b..18f1cc7a03d 100644
--- a/2014/CVE-2014-9617.md
+++ b/2014/CVE-2014-9617.md
@@ -15,3 +15,5 @@ Open redirect vulnerability in remotereporter/load_logfiles.php in Netsweeper be
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9617.yaml
diff --git a/2014/CVE-2014-9618.md b/2014/CVE-2014-9618.md
index c1e4b21bd19..8de24c7c90b 100644
--- a/2014/CVE-2014-9618.md
+++ b/2014/CVE-2014-9618.md
@@ -16,3 +16,5 @@ The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9,
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9618.yaml
diff --git a/2014/CVE-2014-9735.md b/2014/CVE-2014-9735.md
index 159c0b4db31..cd2724f4ed5 100644
--- a/2014/CVE-2014-9735.md
+++ b/2014/CVE-2014-9735.md
@@ -17,3 +17,5 @@ The ThemePunch Slider Revolution (revslider) plugin before 3.0.96 for WordPress
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9735.yaml
diff --git a/2015/CVE-2015-0554.md b/2015/CVE-2015-0554.md
index 5a3d5d364d1..b73a4aea7c2 100644
--- a/2015/CVE-2015-0554.md
+++ b/2015/CVE-2015-0554.md
@@ -15,3 +15,5 @@ The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware P
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-0554.yaml
diff --git a/2015/CVE-2015-1000005.md b/2015/CVE-2015-1000005.md
index 59352cf9537..072b977afc0 100644
--- a/2015/CVE-2015-1000005.md
+++ b/2015/CVE-2015-1000005.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1000005.yaml
diff --git a/2015/CVE-2015-1000010.md b/2015/CVE-2015-1000010.md
index f79ab5d982c..a8d602a37c4 100644
--- a/2015/CVE-2015-1000010.md
+++ b/2015/CVE-2015-1000010.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1000010.yaml
diff --git a/2015/CVE-2015-1000012.md b/2015/CVE-2015-1000012.md
index 120753514d9..cfd66cac60c 100644
--- a/2015/CVE-2015-1000012.md
+++ b/2015/CVE-2015-1000012.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1000012.yaml
diff --git a/2015/CVE-2015-10141.md b/2015/CVE-2015-10141.md
index 493e418a93d..fa6a25df69b 100644
--- a/2015/CVE-2015-10141.md
+++ b/2015/CVE-2015-10141.md
@@ -18,3 +18,5 @@ An unauthenticated OS command injection vulnerability exists within Xdebug versi
 - https://github.com/D3Ext/CVE-2015-10141
 - https://github.com/n0m4d22/PoC-CVE-2015-10141-Xdebug
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-10141.yaml
diff --git a/2015/CVE-2015-1419.md b/2015/CVE-2015-1419.md
index b6312bffccd..0fbe37a6b04 100644
--- a/2015/CVE-2015-1419.md
+++ b/2015/CVE-2015-1419.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2015/CVE-2015-1419.yaml
diff --git a/2015/CVE-2015-1427.md b/2015/CVE-2015-1427.md
index c4d00571caa..e8be66ca40c 100644
--- a/2015/CVE-2015-1427.md
+++ b/2015/CVE-2015-1427.md
@@ -29,3 +29,5 @@ The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3
 - https://github.com/t0kx/exploit-CVE-2015-1427
 - https://github.com/xpgdgit/CVE-2015-1427
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1427.yaml
diff --git a/2015/CVE-2015-1503.md b/2015/CVE-2015-1503.md
index 87728bce84b..85d99574fc0 100644
--- a/2015/CVE-2015-1503.md
+++ b/2015/CVE-2015-1503.md
@@ -16,3 +16,5 @@ Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1503.yaml
diff --git a/2015/CVE-2015-1579.md b/2015/CVE-2015-1579.md
index d177941fdb0..d6b7fdab489 100644
--- a/2015/CVE-2015-1579.md
+++ b/2015/CVE-2015-1579.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress
 - https://github.com/paralelo14/CVE-2015-1579
 - https://github.com/paralelo14/WordPressMassExploiter
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1579.yaml
diff --git a/2015/CVE-2015-1635.md b/2015/CVE-2015-1635.md
index 06277332a10..920420ee4b7 100644
--- a/2015/CVE-2015-1635.md
+++ b/2015/CVE-2015-1635.md
@@ -50,3 +50,5 @@ HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Wind
 - https://github.com/neu5ron/cve_2015-1635
 - https://github.com/w01ke/CVE-2015-1635-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1635.yaml
diff --git a/2015/CVE-2015-1880.md b/2015/CVE-2015-1880.md
index bcc1b00634e..90607e80361 100644
--- a/2015/CVE-2015-1880.md
+++ b/2015/CVE-2015-1880.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1880.yaml
diff --git a/2015/CVE-2015-20067.md b/2015/CVE-2015-20067.md
index b50023b23e8..9054098b4f9 100644
--- a/2015/CVE-2015-20067.md
+++ b/2015/CVE-2015-20067.md
@@ -16,3 +16,5 @@ The WP Attachment Export WordPress plugin before 0.2.4 does not have proper acce
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-20067.yaml
diff --git a/2015/CVE-2015-2067.md b/2015/CVE-2015-2067.md
index 3d258c72a76..6990683f5e3 100644
--- a/2015/CVE-2015-2067.md
+++ b/2015/CVE-2015-2067.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in web/ajax_pluginconf.php in the MAGMI (aka M
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2067.yaml
diff --git a/2015/CVE-2015-2068.md b/2015/CVE-2015-2068.md
index a6aeff61f03..708d26008d4 100644
--- a/2015/CVE-2015-2068.md
+++ b/2015/CVE-2015-2068.md
@@ -15,3 +15,5 @@ Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Ma
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2068.yaml
diff --git a/2015/CVE-2015-2080.md b/2015/CVE-2015-2080.md
index 4f61a41b097..5c4d3a2eb7e 100644
--- a/2015/CVE-2015-2080.md
+++ b/2015/CVE-2015-2080.md
@@ -17,3 +17,5 @@ The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remot
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2080.yaml
diff --git a/2015/CVE-2015-2166.md b/2015/CVE-2015-2166.md
index 61963ceab40..9b59350502a 100644
--- a/2015/CVE-2015-2166.md
+++ b/2015/CVE-2015-2166.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobi
 #### Github
 - https://github.com/K3ysTr0K3R/CVE-2015-2166-EXPLOIT
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2166.yaml
diff --git a/2015/CVE-2015-2196.md b/2015/CVE-2015-2196.md
index acff5f14fdc..77ef3dd68de 100644
--- a/2015/CVE-2015-2196.md
+++ b/2015/CVE-2015-2196.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2196.yaml
diff --git a/2015/CVE-2015-2755.md b/2015/CVE-2015-2755.md
index 78b098b7406..fca5451aeda 100644
--- a/2015/CVE-2015-2755.md
+++ b/2015/CVE-2015-2755.md
@@ -16,3 +16,5 @@ Multiple cross-site request forgery (CSRF) vulnerabilities in the AB Google Map
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2755.yaml
diff --git a/2015/CVE-2015-2794.md b/2015/CVE-2015-2794.md
index 7355d06f802..597ba6bf4b2 100644
--- a/2015/CVE-2015-2794.md
+++ b/2015/CVE-2015-2794.md
@@ -16,3 +16,5 @@ The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers
 #### Github
 - https://github.com/styx00/DNN_CVE-2015-2794
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2794.yaml
diff --git a/2015/CVE-2015-2807.md b/2015/CVE-2015-2807.md
index 11b951c76e6..d9807dbd21f 100644
--- a/2015/CVE-2015-2807.md
+++ b/2015/CVE-2015-2807.md
@@ -18,3 +18,5 @@ Cross-site scripting (XSS) vulnerability in js/window.php in the Navis DocumentC
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2807.yaml
diff --git a/2015/CVE-2015-2863.md b/2015/CVE-2015-2863.md
index 35751051d6b..2ef8bb01d22 100644
--- a/2015/CVE-2015-2863.md
+++ b/2015/CVE-2015-2863.md
@@ -15,3 +15,5 @@ Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x bef
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2863.yaml
diff --git a/2015/CVE-2015-2996.md b/2015/CVE-2015-2996.md
index 6490cf4a5fe..7c589dc12b9 100644
--- a/2015/CVE-2015-2996.md
+++ b/2015/CVE-2015-2996.md
@@ -16,3 +16,5 @@ Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 all
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2996.yaml
diff --git a/2015/CVE-2015-3035.md b/2015/CVE-2015-3035.md
index 844e2990955..eca163728b9 100644
--- a/2015/CVE-2015-3035.md
+++ b/2015/CVE-2015-3035.md
@@ -17,3 +17,5 @@ Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware befor
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-3035.yaml
diff --git a/2015/CVE-2015-3224.md b/2015/CVE-2015-3224.md
index efb72ee4b91..4d39340c3b3 100644
--- a/2015/CVE-2015-3224.md
+++ b/2015/CVE-2015-3224.md
@@ -20,3 +20,5 @@ No PoCs from references.
 - https://github.com/redirected/tricks
 - https://github.com/xda3m00n/CVE-2015-3224-
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-3224.yaml
diff --git a/2015/CVE-2015-3306.md b/2015/CVE-2015-3306.md
index 3776e553c02..170f77c2a62 100644
--- a/2015/CVE-2015-3306.md
+++ b/2015/CVE-2015-3306.md
@@ -36,3 +36,5 @@ The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write t
 - https://github.com/shk0x/cpx_proftpd
 - https://github.com/t0kx/exploit-CVE-2015-3306
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2015/CVE-2015-3306.yaml
diff --git a/2015/CVE-2015-3337.md b/2015/CVE-2015-3337.md
index a4895c9857b..318be0e60e3 100644
--- a/2015/CVE-2015-3337.md
+++ b/2015/CVE-2015-3337.md
@@ -17,3 +17,5 @@ Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before
 #### Github
 - https://github.com/jas502n/CVE-2015-3337
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-3337.yaml
diff --git a/2015/CVE-2015-3648.md b/2015/CVE-2015-3648.md
index ee60ce23a3d..4bfbc2b12ef 100644
--- a/2015/CVE-2015-3648.md
+++ b/2015/CVE-2015-3648.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in pages/setup.php in Montala Limited Resource
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-3648.yaml
diff --git a/2015/CVE-2015-3897.md b/2015/CVE-2015-3897.md
index f09037435b1..47904ab6baf 100644
--- a/2015/CVE-2015-3897.md
+++ b/2015/CVE-2015-3897.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remot
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-3897.yaml
diff --git a/2015/CVE-2015-4050.md b/2015/CVE-2015-4050.md
index 76aaace2128..888150e4ee5 100644
--- a/2015/CVE-2015-4050.md
+++ b/2015/CVE-2015-4050.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4050.yaml
diff --git a/2015/CVE-2015-4062.md b/2015/CVE-2015-4062.md
index 9d959583e5d..f579c900438 100644
--- a/2015/CVE-2015-4062.md
+++ b/2015/CVE-2015-4062.md
@@ -16,3 +16,5 @@ SQL injection vulnerability in includes/nsp_search.php in the NewStatPress plugi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4062.yaml
diff --git a/2015/CVE-2015-4063.md b/2015/CVE-2015-4063.md
index 037eabe7adb..50b7ec858eb 100644
--- a/2015/CVE-2015-4063.md
+++ b/2015/CVE-2015-4063.md
@@ -16,3 +16,5 @@ Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewSt
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4063.yaml
diff --git a/2015/CVE-2015-4074.md b/2015/CVE-2015-4074.md
index 9549893fdab..5b7cd603098 100644
--- a/2015/CVE-2015-4074.md
+++ b/2015/CVE-2015-4074.md
@@ -17,3 +17,5 @@ Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Jo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4074.yaml
diff --git a/2015/CVE-2015-4127.md b/2015/CVE-2015-4127.md
index cc1741f139d..1d3b51bdfee 100644
--- a/2015/CVE-2015-4127.md
+++ b/2015/CVE-2015-4127.md
@@ -16,3 +16,5 @@ Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4127.yaml
diff --git a/2015/CVE-2015-4414.md b/2015/CVE-2015-4414.md
index 38297e4deb9..0ffe1d41904 100644
--- a/2015/CVE-2015-4414.md
+++ b/2015/CVE-2015-4414.md
@@ -17,3 +17,5 @@ Directory traversal vulnerability in download_audio.php in the SE HTML5 Album Au
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4414.yaml
diff --git a/2015/CVE-2015-4455.md b/2015/CVE-2015-4455.md
index d2ea7767737..92197e71719 100644
--- a/2015/CVE-2015-4455.md
+++ b/2015/CVE-2015-4455.md
@@ -15,3 +15,5 @@ Unrestricted file upload vulnerability in includes/upload.php in the Aviary Imag
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4455.yaml
diff --git a/2015/CVE-2015-4632.md b/2015/CVE-2015-4632.md
index 8ddc94ac740..d6f3327145f 100644
--- a/2015/CVE-2015-4632.md
+++ b/2015/CVE-2015-4632.md
@@ -17,3 +17,5 @@ Multiple directory traversal vulnerabilities in Koha 3.14.x before 3.14.16, 3.16
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4632.yaml
diff --git a/2015/CVE-2015-4666.md b/2015/CVE-2015-4666.md
index 5b919b275fb..2f53550e676 100644
--- a/2015/CVE-2015-4666.md
+++ b/2015/CVE-2015-4666.md
@@ -17,3 +17,5 @@ Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4666.yaml
diff --git a/2015/CVE-2015-4668.md b/2015/CVE-2015-4668.md
index 69933e3afd0..557400c52e9 100644
--- a/2015/CVE-2015-4668.md
+++ b/2015/CVE-2015-4668.md
@@ -16,3 +16,5 @@ Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attacker
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4668.yaml
diff --git a/2015/CVE-2015-4694.md b/2015/CVE-2015-4694.md
index eafbea9331e..720f13bb955 100644
--- a/2015/CVE-2015-4694.md
+++ b/2015/CVE-2015-4694.md
@@ -18,3 +18,5 @@ Directory traversal vulnerability in download.php in the Zip Attachments plugin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4694.yaml
diff --git a/2015/CVE-2015-5354.md b/2015/CVE-2015-5354.md
index 38f72d5fddd..fe084788682 100644
--- a/2015/CVE-2015-5354.md
+++ b/2015/CVE-2015-5354.md
@@ -16,3 +16,5 @@ Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5354.yaml
diff --git a/2015/CVE-2015-5461.md b/2015/CVE-2015-5461.md
index 9469fd8221a..21466cae11e 100644
--- a/2015/CVE-2015-5461.md
+++ b/2015/CVE-2015-5461.md
@@ -17,3 +17,5 @@ Open redirect vulnerability in the Redirect function in stageshow_redirect.php i
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5461.yaml
diff --git a/2015/CVE-2015-5469.md b/2015/CVE-2015-5469.md
index 11764d8604b..118cb1a295b 100644
--- a/2015/CVE-2015-5469.md
+++ b/2015/CVE-2015-5469.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5469.yaml
diff --git a/2015/CVE-2015-5471.md b/2015/CVE-2015-5471.md
index 9fa4efc65b0..398f5dd8263 100644
--- a/2015/CVE-2015-5471.md
+++ b/2015/CVE-2015-5471.md
@@ -16,3 +16,5 @@ Absolute path traversal vulnerability in include/user/download.php in the Swim T
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5471.yaml
diff --git a/2015/CVE-2015-5531.md b/2015/CVE-2015-5531.md
index 01058998387..f319405ec2a 100644
--- a/2015/CVE-2015-5531.md
+++ b/2015/CVE-2015-5531.md
@@ -23,3 +23,5 @@ Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote at
 - https://github.com/moonwayy/hindicybersec
 - https://github.com/xpgdgit/CVE-2015-5531
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5531.yaml
diff --git a/2015/CVE-2015-5688.md b/2015/CVE-2015-5688.md
index 1a68d6f277d..23cf5b2992a 100644
--- a/2015/CVE-2015-5688.md
+++ b/2015/CVE-2015-5688.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5688.yaml
diff --git a/2015/CVE-2015-6477.md b/2015/CVE-2015-6477.md
index b164c82ec48..4f1ccbbd001 100644
--- a/2015/CVE-2015-6477.md
+++ b/2015/CVE-2015-6477.md
@@ -16,3 +16,5 @@ Multiple cross-site scripting (XSS) vulnerabilities in the Wind Farm Portal appl
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-6477.yaml
diff --git a/2015/CVE-2015-6544.md b/2015/CVE-2015-6544.md
index 6ea402fa32b..548ca131f60 100644
--- a/2015/CVE-2015-6544.md
+++ b/2015/CVE-2015-6544.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-6544.yaml
diff --git a/2015/CVE-2015-6920.md b/2015/CVE-2015-6920.md
index 62cdaeab0ba..24a06ba9fe2 100644
--- a/2015/CVE-2015-6920.md
+++ b/2015/CVE-2015-6920.md
@@ -16,3 +16,5 @@ Cross-site scripting (XSS) vulnerability in js/window.php in the sourceAFRICA pl
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-6920.yaml
diff --git a/2015/CVE-2015-7245.md b/2015/CVE-2015-7245.md
index 9a44200d46f..baf48c6b9d5 100644
--- a/2015/CVE-2015-7245.md
+++ b/2015/CVE-2015-7245.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7245.yaml
diff --git a/2015/CVE-2015-7297.md b/2015/CVE-2015-7297.md
index 55b5dfaf7fc..fa542cca7a4 100644
--- a/2015/CVE-2015-7297.md
+++ b/2015/CVE-2015-7297.md
@@ -32,3 +32,5 @@ SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers
 - https://github.com/uni-tue-kn/MalFIX
 - https://github.com/yasir27uk/maltrail
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7297.yaml
diff --git a/2015/CVE-2015-7377.md b/2015/CVE-2015-7377.md
index aa5103139cb..11242516dfb 100644
--- a/2015/CVE-2015-7377.md
+++ b/2015/CVE-2015-7377.md
@@ -16,3 +16,5 @@ Cross-site scripting (XSS) vulnerability in pie-register/pie-register.php in the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7377.yaml
diff --git a/2015/CVE-2015-7450.md b/2015/CVE-2015-7450.md
index e7ff8f8a870..899f889ab9e 100644
--- a/2015/CVE-2015-7450.md
+++ b/2015/CVE-2015-7450.md
@@ -16,3 +16,5 @@ Serialized-object interfaces in certain IBM analytics, business solutions, cogni
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7450.yaml
diff --git a/2015/CVE-2015-7501.md b/2015/CVE-2015-7501.md
index 070c90dff7b..78a3bd04030 100644
--- a/2015/CVE-2015-7501.md
+++ b/2015/CVE-2015-7501.md
@@ -20,3 +20,5 @@ Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG)
 - https://github.com/gallopsec/JBossScan
 - https://github.com/ianxtianxt/CVE-2015-7501
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7501.yaml
diff --git a/2015/CVE-2015-7780.md b/2015/CVE-2015-7780.md
index 22f1c71348e..47efe5345e1 100644
--- a/2015/CVE-2015-7780.md
+++ b/2015/CVE-2015-7780.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7780.yaml
diff --git a/2015/CVE-2015-7823.md b/2015/CVE-2015-7823.md
index c524b7334b9..003d183cf1e 100644
--- a/2015/CVE-2015-7823.md
+++ b/2015/CVE-2015-7823.md
@@ -15,3 +15,5 @@ Open redirect vulnerability in CMSPages/GetDocLink.ashx in Kentico CMS 8.2 throu
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7823.yaml
diff --git a/2015/CVE-2015-8349.md b/2015/CVE-2015-8349.md
index 09ce68d6eb7..9089354da54 100644
--- a/2015/CVE-2015-8349.md
+++ b/2015/CVE-2015-8349.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-8349.yaml
diff --git a/2015/CVE-2015-8350.md b/2015/CVE-2015-8350.md
index 0a01912a99a..d357b8558aa 100644
--- a/2015/CVE-2015-8350.md
+++ b/2015/CVE-2015-8350.md
@@ -15,3 +15,5 @@ Multiple cross-site scripting (XSS) vulnerabilities in the Calls to Action plugi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-8350.yaml
diff --git a/2015/CVE-2015-8399.md b/2015/CVE-2015-8399.md
index a6a7b9181db..5828c75474b 100644
--- a/2015/CVE-2015-8399.md
+++ b/2015/CVE-2015-8399.md
@@ -15,3 +15,5 @@ Atlassian Confluence before 5.8.17 allows remote authenticated users to read con
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-8399.yaml
diff --git a/2015/CVE-2015-8562.md b/2015/CVE-2015-8562.md
index 8a7ca2bdf34..319aa1eb79e 100644
--- a/2015/CVE-2015-8562.md
+++ b/2015/CVE-2015-8562.md
@@ -29,3 +29,5 @@ Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP o
 - https://github.com/thejackerz/scanner-exploit-joomla-CVE-2015-8562
 - https://github.com/xnorkl/Joomla_Payload
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-8562.yaml
diff --git a/2015/CVE-2015-8813.md b/2015/CVE-2015-8813.md
index 5e7965752b3..2f7535d5ff6 100644
--- a/2015/CVE-2015-8813.md
+++ b/2015/CVE-2015-8813.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-8813.yaml
diff --git a/2015/CVE-2015-9312.md b/2015/CVE-2015-9312.md
index 3cc8bf68b48..1128ad5d06b 100644
--- a/2015/CVE-2015-9312.md
+++ b/2015/CVE-2015-9312.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9312.yaml
diff --git a/2015/CVE-2015-9323.md b/2015/CVE-2015-9323.md
index b0b28b54ab4..657de70918a 100644
--- a/2015/CVE-2015-9323.md
+++ b/2015/CVE-2015-9323.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9323.yaml
diff --git a/2015/CVE-2015-9406.md b/2015/CVE-2015-9406.md
index ae99786e91f..0cba9cace07 100644
--- a/2015/CVE-2015-9406.md
+++ b/2015/CVE-2015-9406.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPr
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9406.yaml
diff --git a/2015/CVE-2015-9414.md b/2015/CVE-2015-9414.md
index 9c1319da10a..e802517a562 100644
--- a/2015/CVE-2015-9414.md
+++ b/2015/CVE-2015-9414.md
@@ -15,3 +15,5 @@ The wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9414.yaml
diff --git a/2015/CVE-2015-9415.md b/2015/CVE-2015-9415.md
index 27612a1d964..6f3e0d26b0a 100644
--- a/2015/CVE-2015-9415.md
+++ b/2015/CVE-2015-9415.md
@@ -15,3 +15,5 @@ The bj-lazy-load plugin before 1.0 for WordPress has Remote File Inclusion.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9415.yaml
diff --git a/2015/CVE-2015-9480.md b/2015/CVE-2015-9480.md
index 7703d804585..85d095599a5 100644
--- a/2015/CVE-2015-9480.md
+++ b/2015/CVE-2015-9480.md
@@ -15,3 +15,5 @@ The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l para
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9480.yaml
diff --git a/2015/CVE-2015-9499.md b/2015/CVE-2015-9499.md
index 5d1d1f18369..0fd2a4882c1 100644
--- a/2015/CVE-2015-9499.md
+++ b/2015/CVE-2015-9499.md
@@ -16,3 +16,5 @@ The Showbiz Pro plugin through 1.7.1 for WordPress has PHP code execution by upl
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9499.yaml
diff --git a/2016/CVE-2016-0957.md b/2016/CVE-2016-0957.md
index 6e90d6ba8ad..70f1e99a7f0 100644
--- a/2016/CVE-2016-0957.md
+++ b/2016/CVE-2016-0957.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-0957.yaml
diff --git a/2016/CVE-2016-1000126.md b/2016/CVE-2016-1000126.md
index 278a2002608..f0a0281d7b7 100644
--- a/2016/CVE-2016-1000126.md
+++ b/2016/CVE-2016-1000126.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000126.yaml
diff --git a/2016/CVE-2016-1000127.md b/2016/CVE-2016-1000127.md
index 145e2a81171..1dec0feb1f9 100644
--- a/2016/CVE-2016-1000127.md
+++ b/2016/CVE-2016-1000127.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000127.yaml
diff --git a/2016/CVE-2016-1000128.md b/2016/CVE-2016-1000128.md
index 50ba8f7adf9..9ca339147fc 100644
--- a/2016/CVE-2016-1000128.md
+++ b/2016/CVE-2016-1000128.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000128.yaml
diff --git a/2016/CVE-2016-1000129.md b/2016/CVE-2016-1000129.md
index 84462d830db..daa406d0a26 100644
--- a/2016/CVE-2016-1000129.md
+++ b/2016/CVE-2016-1000129.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000129.yaml
diff --git a/2016/CVE-2016-1000130.md b/2016/CVE-2016-1000130.md
index 6a54b55d533..3d91721ff5c 100644
--- a/2016/CVE-2016-1000130.md
+++ b/2016/CVE-2016-1000130.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000130.yaml
diff --git a/2016/CVE-2016-1000131.md b/2016/CVE-2016-1000131.md
index f47ce2fdb52..db4abbb99ef 100644
--- a/2016/CVE-2016-1000131.md
+++ b/2016/CVE-2016-1000131.md
@@ -15,3 +15,5 @@ Reflected XSS in wordpress plugin e-search v1.0
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000131.yaml
diff --git a/2016/CVE-2016-1000132.md b/2016/CVE-2016-1000132.md
index e9c0b0d6978..8d77d08635a 100644
--- a/2016/CVE-2016-1000132.md
+++ b/2016/CVE-2016-1000132.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000132.yaml
diff --git a/2016/CVE-2016-1000133.md b/2016/CVE-2016-1000133.md
index edaed45c6cf..fe08659b745 100644
--- a/2016/CVE-2016-1000133.md
+++ b/2016/CVE-2016-1000133.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000133.yaml
diff --git a/2016/CVE-2016-1000134.md b/2016/CVE-2016-1000134.md
index d93be9b149b..9a2408af253 100644
--- a/2016/CVE-2016-1000134.md
+++ b/2016/CVE-2016-1000134.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000134.yaml
diff --git a/2016/CVE-2016-1000135.md b/2016/CVE-2016-1000135.md
index 5af9e2b5822..e3789617b7e 100644
--- a/2016/CVE-2016-1000135.md
+++ b/2016/CVE-2016-1000135.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000135.yaml
diff --git a/2016/CVE-2016-1000136.md b/2016/CVE-2016-1000136.md
index 50b3fdf51a3..ceff0f8aeaa 100644
--- a/2016/CVE-2016-1000136.md
+++ b/2016/CVE-2016-1000136.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000136.yaml
diff --git a/2016/CVE-2016-1000137.md b/2016/CVE-2016-1000137.md
index b00e61b39d7..69556491dd7 100644
--- a/2016/CVE-2016-1000137.md
+++ b/2016/CVE-2016-1000137.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000137.yaml
diff --git a/2016/CVE-2016-1000138.md b/2016/CVE-2016-1000138.md
index b7fe9b25bb6..e08a8ffb70f 100644
--- a/2016/CVE-2016-1000138.md
+++ b/2016/CVE-2016-1000138.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000138.yaml
diff --git a/2016/CVE-2016-1000139.md b/2016/CVE-2016-1000139.md
index 9b30d05e382..262ed6e932a 100644
--- a/2016/CVE-2016-1000139.md
+++ b/2016/CVE-2016-1000139.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000139.yaml
diff --git a/2016/CVE-2016-1000140.md b/2016/CVE-2016-1000140.md
index 4a2385db307..94a8a61ecdb 100644
--- a/2016/CVE-2016-1000140.md
+++ b/2016/CVE-2016-1000140.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000140.yaml
diff --git a/2016/CVE-2016-1000141.md b/2016/CVE-2016-1000141.md
index c3b9875d3fe..1fd12942e6c 100644
--- a/2016/CVE-2016-1000141.md
+++ b/2016/CVE-2016-1000141.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000141.yaml
diff --git a/2016/CVE-2016-1000142.md b/2016/CVE-2016-1000142.md
index 02775f51055..6ce1a0607b9 100644
--- a/2016/CVE-2016-1000142.md
+++ b/2016/CVE-2016-1000142.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000142.yaml
diff --git a/2016/CVE-2016-1000143.md b/2016/CVE-2016-1000143.md
index 53bdfc2aaa6..4fbad7d6046 100644
--- a/2016/CVE-2016-1000143.md
+++ b/2016/CVE-2016-1000143.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000143.yaml
diff --git a/2016/CVE-2016-1000146.md b/2016/CVE-2016-1000146.md
index 53e69b9184c..d54fb27586d 100644
--- a/2016/CVE-2016-1000146.md
+++ b/2016/CVE-2016-1000146.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000146.yaml
diff --git a/2016/CVE-2016-1000148.md b/2016/CVE-2016-1000148.md
index 3aeba71cb31..e047e03c02e 100644
--- a/2016/CVE-2016-1000148.md
+++ b/2016/CVE-2016-1000148.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000148.yaml
diff --git a/2016/CVE-2016-1000149.md b/2016/CVE-2016-1000149.md
index ff9fee329c2..baeeaef0837 100644
--- a/2016/CVE-2016-1000149.md
+++ b/2016/CVE-2016-1000149.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000149.yaml
diff --git a/2016/CVE-2016-1000152.md b/2016/CVE-2016-1000152.md
index 580d3fb69e1..f979897a8d6 100644
--- a/2016/CVE-2016-1000152.md
+++ b/2016/CVE-2016-1000152.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000152.yaml
diff --git a/2016/CVE-2016-1000153.md b/2016/CVE-2016-1000153.md
index 7900bd77ae9..d236f48b161 100644
--- a/2016/CVE-2016-1000153.md
+++ b/2016/CVE-2016-1000153.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000153.yaml
diff --git a/2016/CVE-2016-1000154.md b/2016/CVE-2016-1000154.md
index d80209afadb..cd388ad066a 100644
--- a/2016/CVE-2016-1000154.md
+++ b/2016/CVE-2016-1000154.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000154.yaml
diff --git a/2016/CVE-2016-1000155.md b/2016/CVE-2016-1000155.md
index 14ca12370cf..9c98d209d39 100644
--- a/2016/CVE-2016-1000155.md
+++ b/2016/CVE-2016-1000155.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000155.yaml
diff --git a/2016/CVE-2016-10033.md b/2016/CVE-2016-10033.md
index 87eeab14c6a..ec7751e484c 100644
--- a/2016/CVE-2016-10033.md
+++ b/2016/CVE-2016-10033.md
@@ -169,3 +169,5 @@ The mailSend function in the isMail transport in PHPMailer before 5.2.18 might a
 - https://github.com/zeeshanbhattined/exploit-CVE-2016-10033
 - https://github.com/zhangqiyi55/phpemail
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10033.yaml
diff --git a/2016/CVE-2016-10108.md b/2016/CVE-2016-10108.md
index d95f502f413..db42a36da12 100644
--- a/2016/CVE-2016-10108.md
+++ b/2016/CVE-2016-10108.md
@@ -15,3 +15,5 @@ Unauthenticated Remote Command injection as root occurs in the Western Digital M
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10108.yaml
diff --git a/2016/CVE-2016-10134.md b/2016/CVE-2016-10134.md
index 9580f0aaea9..1735a30d149 100644
--- a/2016/CVE-2016-10134.md
+++ b/2016/CVE-2016-10134.md
@@ -15,3 +15,5 @@ SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10134.yaml
diff --git a/2016/CVE-2016-10367.md b/2016/CVE-2016-10367.md
index fecfdc3552f..a56fc466614 100644
--- a/2016/CVE-2016-10367.md
+++ b/2016/CVE-2016-10367.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10367.yaml
diff --git a/2016/CVE-2016-10368.md b/2016/CVE-2016-10368.md
index 74027a3cb4b..cc135e433e7 100644
--- a/2016/CVE-2016-10368.md
+++ b/2016/CVE-2016-10368.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10368.yaml
diff --git a/2016/CVE-2016-10924.md b/2016/CVE-2016-10924.md
index 44cfbb30aec..d73ab826f42 100644
--- a/2016/CVE-2016-10924.md
+++ b/2016/CVE-2016-10924.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/LGenAgul/Wordpress-ebook-CVE-2016-10924
 - https://github.com/rvizx/CVE-2016-10924
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10924.yaml
diff --git a/2016/CVE-2016-10940.md b/2016/CVE-2016-10940.md
index f33da6ca550..ca714b1a467 100644
--- a/2016/CVE-2016-10940.md
+++ b/2016/CVE-2016-10940.md
@@ -15,3 +15,5 @@ The zm-gallery plugin 1.0 for WordPress has SQL injection via the order paramete
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10940.yaml
diff --git a/2016/CVE-2016-10956.md b/2016/CVE-2016-10956.md
index b2ab957c512..69185490606 100644
--- a/2016/CVE-2016-10956.md
+++ b/2016/CVE-2016-10956.md
@@ -17,3 +17,5 @@ The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_sen
 - https://github.com/Hackhoven/wp-mail-masta-exploit
 - https://github.com/p0dalirius/CVE-2016-10956-mail-masta
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10956.yaml
diff --git a/2016/CVE-2016-10960.md b/2016/CVE-2016-10960.md
index a4aa15244a5..cd71731da0b 100644
--- a/2016/CVE-2016-10960.md
+++ b/2016/CVE-2016-10960.md
@@ -15,3 +15,5 @@ The wsecure plugin before 2.4 for WordPress has remote code execution via shell
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10960.yaml
diff --git a/2016/CVE-2016-10972.md b/2016/CVE-2016-10972.md
index 0d4d2ca4ab7..33e4628b7b4 100644
--- a/2016/CVE-2016-10972.md
+++ b/2016/CVE-2016-10972.md
@@ -16,3 +16,5 @@ The newspaper theme before 6.7.2 for WordPress has a lack of options access cont
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10972.yaml
diff --git a/2016/CVE-2016-10973.md b/2016/CVE-2016-10973.md
index 0b6b923f31e..fc130b250bf 100644
--- a/2016/CVE-2016-10973.md
+++ b/2016/CVE-2016-10973.md
@@ -15,3 +15,5 @@ The Brafton plugin before 3.4.8 for WordPress has XSS via the wp-admin/admin.php
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10973.yaml
diff --git a/2016/CVE-2016-10976.md b/2016/CVE-2016-10976.md
index 766238a4c3b..6398fd32b18 100644
--- a/2016/CVE-2016-10976.md
+++ b/2016/CVE-2016-10976.md
@@ -15,3 +15,5 @@ The safe-editor plugin before 1.2 for WordPress has no se_save authentication, w
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10976.yaml
diff --git a/2016/CVE-2016-10993.md b/2016/CVE-2016-10993.md
index ae3ca323c6b..79f144524d7 100644
--- a/2016/CVE-2016-10993.md
+++ b/2016/CVE-2016-10993.md
@@ -17,3 +17,5 @@ The ScoreMe theme through 2016-04-01 for WordPress has XSS via the s parameter.
 - https://github.com/0xc4t/CVE-2016-10993
 - https://github.com/0xkucing/CVE-2016-10993
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10993.yaml
diff --git a/2016/CVE-2016-15041.md b/2016/CVE-2016-15041.md
index 8e52e7e47a6..9881e00395c 100644
--- a/2016/CVE-2016-15041.md
+++ b/2016/CVE-2016-15041.md
@@ -16,3 +16,5 @@ The MainWP Dashboard – The Private WordPress Manager for Multiple Website Main
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-15041.yaml
diff --git a/2016/CVE-2016-15042.md b/2016/CVE-2016-15042.md
index 4bbf4c082da..c6a72b74eed 100644
--- a/2016/CVE-2016-15042.md
+++ b/2016/CVE-2016-15042.md
@@ -18,3 +18,5 @@ The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (version
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-15042.yaml
diff --git a/2016/CVE-2016-15043.md b/2016/CVE-2016-15043.md
index c00cf52dafc..ce07f0efc64 100644
--- a/2016/CVE-2016-15043.md
+++ b/2016/CVE-2016-15043.md
@@ -17,3 +17,5 @@ The WP Mobile Detector plugin for WordPress is vulnerable to arbitrary file uplo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-15043.yaml
diff --git a/2016/CVE-2016-1555.md b/2016/CVE-2016-1555.md
index b7ed5718651..c26d426fc4f 100644
--- a/2016/CVE-2016-1555.md
+++ b/2016/CVE-2016-1555.md
@@ -18,3 +18,5 @@
 #### Github
 - https://github.com/ide0x90/cve-2016-1555
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1555.yaml
diff --git a/2016/CVE-2016-2004.md b/2016/CVE-2016-2004.md
index b73b4f4a57d..f9241f7e071 100644
--- a/2016/CVE-2016-2004.md
+++ b/2016/CVE-2016-2004.md
@@ -20,3 +20,5 @@ HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow r
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2016/CVE-2016-2004.yaml
diff --git a/2016/CVE-2016-2389.md b/2016/CVE-2016-2389.md
index 0747548df0f..91b672bd416 100644
--- a/2016/CVE-2016-2389.md
+++ b/2016/CVE-2016-2389.md
@@ -18,3 +18,5 @@ Directory traversal vulnerability in the GetFileList function in the SAP Manufac
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-2389.yaml
diff --git a/2016/CVE-2016-3081.md b/2016/CVE-2016-3081.md
index 37cbd90e84b..969f08511e0 100644
--- a/2016/CVE-2016-3081.md
+++ b/2016/CVE-2016-3081.md
@@ -19,3 +19,5 @@ Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when
 #### Github
 - https://github.com/nikamajinkya/Sn1p3r
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-3081.yaml
diff --git a/2016/CVE-2016-3088.md b/2016/CVE-2016-3088.md
index 21d60df2a37..f175062de3c 100644
--- a/2016/CVE-2016-3088.md
+++ b/2016/CVE-2016-3088.md
@@ -23,3 +23,5 @@ The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remot
 - https://github.com/vonderchild/CVE-2016-3088
 - https://github.com/xbfding/XiaoBai_exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-3088.yaml
diff --git a/2016/CVE-2016-3510.md b/2016/CVE-2016-3510.md
index bad29090be6..fd1392fc402 100644
--- a/2016/CVE-2016-3510.md
+++ b/2016/CVE-2016-3510.md
@@ -17,3 +17,5 @@ Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusi
 #### Github
 - https://github.com/BabyTeam1024/CVE-2016-3510
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2016/CVE-2016-3510.yaml
diff --git a/2016/CVE-2016-3978.md b/2016/CVE-2016-3978.md
index 327591b3d3f..5822004a5e8 100644
--- a/2016/CVE-2016-3978.md
+++ b/2016/CVE-2016-3978.md
@@ -15,3 +15,5 @@ The Web User Interface (WebUI) in FortiOS 5.0.x before 5.0.13, 5.2.x before 5.2.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-3978.yaml
diff --git a/2016/CVE-2016-4437.md b/2016/CVE-2016-4437.md
index f0beabd74d5..309e37845d3 100644
--- a/2016/CVE-2016-4437.md
+++ b/2016/CVE-2016-4437.md
@@ -21,3 +21,5 @@ Apache Shiro before 1.2.5, when a cipher key has not been configured for the "re
 - https://github.com/pizza-power/CVE-2016-4437
 - https://github.com/xk-mt/CVE-2016-4437
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-4437.yaml
diff --git a/2016/CVE-2016-4975.md b/2016/CVE-2016-4975.md
index deff75374dd..bdce117c3c4 100644
--- a/2016/CVE-2016-4975.md
+++ b/2016/CVE-2016-4975.md
@@ -16,3 +16,5 @@ Possible CRLF injection allowing HTTP response splitting attacks for sites which
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-4975.yaml
diff --git a/2016/CVE-2016-4977.md b/2016/CVE-2016-4977.md
index f6855b7a453..8bf094b18aa 100644
--- a/2016/CVE-2016-4977.md
+++ b/2016/CVE-2016-4977.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/N0b1e6/CVE-2016-4977-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-4977.yaml
diff --git a/2016/CVE-2016-5649.md b/2016/CVE-2016-5649.md
index c439e80a908..dadab718a62 100644
--- a/2016/CVE-2016-5649.md
+++ b/2016/CVE-2016-5649.md
@@ -18,3 +18,5 @@ A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, versio
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-5649.yaml
diff --git a/2016/CVE-2016-5674.md b/2016/CVE-2016-5674.md
index ded745ca9da..0775aee2718 100644
--- a/2016/CVE-2016-5674.md
+++ b/2016/CVE-2016-5674.md
@@ -16,3 +16,5 @@ __debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRs
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-5674.yaml
diff --git a/2016/CVE-2016-6195.md b/2016/CVE-2016-6195.md
index a233451952b..39a5102c23f 100644
--- a/2016/CVE-2016-6195.md
+++ b/2016/CVE-2016-6195.md
@@ -17,3 +17,5 @@ SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin
 - https://github.com/TooLaidBack/vbchecker
 - https://github.com/datagoboom/vbully
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-6195.yaml
diff --git a/2016/CVE-2016-6277.md b/2016/CVE-2016-6277.md
index 9c306707482..cc57551b378 100644
--- a/2016/CVE-2016-6277.md
+++ b/2016/CVE-2016-6277.md
@@ -18,3 +18,5 @@ NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.
 #### Github
 - https://github.com/philipcv/netgear-r7000_command_injection_exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-6277.yaml
diff --git a/2016/CVE-2016-6601.md b/2016/CVE-2016-6601.md
index 20f10aad7c6..4bd45a376c0 100644
--- a/2016/CVE-2016-6601.md
+++ b/2016/CVE-2016-6601.md
@@ -18,3 +18,5 @@ Directory traversal vulnerability in the file download functionality in ZOHO Web
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-6601.yaml
diff --git a/2016/CVE-2016-7552.md b/2016/CVE-2016-7552.md
index 93da15c68fd..5c7293a5c4f 100644
--- a/2016/CVE-2016-7552.md
+++ b/2016/CVE-2016-7552.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-7552.yaml
diff --git a/2016/CVE-2016-7834.md b/2016/CVE-2016-7834.md
index f50ad5148d0..4880a5ea0be 100644
--- a/2016/CVE-2016-7834.md
+++ b/2016/CVE-2016-7834.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-7834.yaml
diff --git a/2016/CVE-2016-7981.md b/2016/CVE-2016-7981.md
index ee01880228e..810aa8c9963 100644
--- a/2016/CVE-2016-7981.md
+++ b/2016/CVE-2016-7981.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in valider_xml.php in SPIP 3.1.2 and ea
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-7981.yaml
diff --git a/2016/CVE-2016-8527.md b/2016/CVE-2016-8527.md
index 4ba0aa405bf..52a76ae8ebc 100644
--- a/2016/CVE-2016-8527.md
+++ b/2016/CVE-2016-8527.md
@@ -15,3 +15,5 @@ Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-8527.yaml
diff --git a/2016/CVE-2016-8706.md b/2016/CVE-2016-8706.md
index b5449a857c5..3254432efd3 100644
--- a/2016/CVE-2016-8706.md
+++ b/2016/CVE-2016-8706.md
@@ -15,3 +15,5 @@ An integer overflow in process_bin_sasl_auth function in Memcached, which is res
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2016/CVE-2016-8706.yaml
diff --git a/2016/CVE-2016-8735.md b/2016/CVE-2016-8735.md
index 66a556f212c..1bbe0dbc17c 100644
--- a/2016/CVE-2016-8735.md
+++ b/2016/CVE-2016-8735.md
@@ -28,3 +28,5 @@ Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7
 - https://github.com/qashqao/jexboss
 - https://github.com/syadg123/exboss
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2016/CVE-2016-8735.yaml
diff --git a/2016/CVE-2016-9299.md b/2016/CVE-2016-9299.md
index 7293849572b..05ccba532d1 100644
--- a/2016/CVE-2016-9299.md
+++ b/2016/CVE-2016-9299.md
@@ -18,3 +18,5 @@ The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote a
 #### Github
 - https://github.com/r00t4dm/Jenkins-CVE-2016-9299
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2016/CVE-2016-9299.yaml
diff --git a/2017/CVE-2017-0929.md b/2017/CVE-2017-0929.md
index 2430d88b55a..d6157342d74 100644
--- a/2017/CVE-2017-0929.md
+++ b/2017/CVE-2017-0929.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-0929.yaml
diff --git a/2017/CVE-2017-1000028.md b/2017/CVE-2017-1000028.md
index f892dd162e4..17406921764 100644
--- a/2017/CVE-2017-1000028.md
+++ b/2017/CVE-2017-1000028.md
@@ -17,3 +17,5 @@ Oracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authentic
 #### Github
 - https://github.com/NeonNOXX/CVE-2017-1000028
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000028.yaml
diff --git a/2017/CVE-2017-1000029.md b/2017/CVE-2017-1000029.md
index 9b35e02e2ef..e643d334023 100644
--- a/2017/CVE-2017-1000029.md
+++ b/2017/CVE-2017-1000029.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000029.yaml
diff --git a/2017/CVE-2017-1000163.md b/2017/CVE-2017-1000163.md
index 72cc89b9747..0d611ffc6ab 100644
--- a/2017/CVE-2017-1000163.md
+++ b/2017/CVE-2017-1000163.md
@@ -15,3 +15,5 @@ The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0,
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000163.yaml
diff --git a/2017/CVE-2017-1000170.md b/2017/CVE-2017-1000170.md
index 010428105b2..3415d7d4a23 100644
--- a/2017/CVE-2017-1000170.md
+++ b/2017/CVE-2017-1000170.md
@@ -16,3 +16,5 @@ jqueryFileTree 2.1.5 and older Directory Traversal
 #### Github
 - https://github.com/Nickguitar/Jquery-File-Tree-1.6.6-Path-Traversal
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000170.yaml
diff --git a/2017/CVE-2017-1000353.md b/2017/CVE-2017-1000353.md
index 4a1ed9a6271..0975596be8e 100644
--- a/2017/CVE-2017-1000353.md
+++ b/2017/CVE-2017-1000353.md
@@ -20,3 +20,5 @@ Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerab
 - https://github.com/r00t4dm/Jenkins-CVE-2017-1000353
 - https://github.com/vulhub/CVE-2017-1000353
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2017/CVE-2017-1000353.yaml
diff --git a/2017/CVE-2017-1000486.md b/2017/CVE-2017-1000486.md
index ba4d107fb12..56f0ef8a2b3 100644
--- a/2017/CVE-2017-1000486.md
+++ b/2017/CVE-2017-1000486.md
@@ -24,3 +24,5 @@ Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in rem
 - https://github.com/oppsec/pwnfaces
 - https://github.com/pimps/CVE-2017-1000486
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000486.yaml
diff --git a/2017/CVE-2017-10075.md b/2017/CVE-2017-10075.md
index c41054150e7..c4301628c11 100644
--- a/2017/CVE-2017-10075.md
+++ b/2017/CVE-2017-10075.md
@@ -17,3 +17,5 @@ Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middlew
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-10075.yaml
diff --git a/2017/CVE-2017-10271.md b/2017/CVE-2017-10271.md
index eedb387a165..279e8bda142 100644
--- a/2017/CVE-2017-10271.md
+++ b/2017/CVE-2017-10271.md
@@ -43,3 +43,5 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar
 - https://github.com/skytina/CNVD-C-2019-48814-COMMON
 - https://github.com/testwc/CVE-2017-10271
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-10271.yaml
diff --git a/2017/CVE-2017-10974.md b/2017/CVE-2017-10974.md
index e4c55488fde..87e5feb16ca 100644
--- a/2017/CVE-2017-10974.md
+++ b/2017/CVE-2017-10974.md
@@ -16,3 +16,5 @@ Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Trave
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-10974.yaml
diff --git a/2017/CVE-2017-11107.md b/2017/CVE-2017-11107.md
index ff62c2eb2a1..33daf3f7daf 100644
--- a/2017/CVE-2017-11107.md
+++ b/2017/CVE-2017-11107.md
@@ -15,3 +15,5 @@ phpLDAPadmin through 1.2.3 has XSS in htdocs/entry_chooser.php via the form, ele
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11107.yaml
diff --git a/2017/CVE-2017-11165.md b/2017/CVE-2017-11165.md
index b67e40c61ae..cdd0ba4f461 100644
--- a/2017/CVE-2017-11165.md
+++ b/2017/CVE-2017-11165.md
@@ -16,3 +16,5 @@ dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credenti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11165.yaml
diff --git a/2017/CVE-2017-11444.md b/2017/CVE-2017-11444.md
index fab44e63c0d..7ececd62e51 100644
--- a/2017/CVE-2017-11444.md
+++ b/2017/CVE-2017-11444.md
@@ -15,3 +15,5 @@ Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11444.yaml
diff --git a/2017/CVE-2017-11512.md b/2017/CVE-2017-11512.md
index ca63c9adba0..02fa8c7a785 100644
--- a/2017/CVE-2017-11512.md
+++ b/2017/CVE-2017-11512.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11512.yaml
diff --git a/2017/CVE-2017-11586.md b/2017/CVE-2017-11586.md
index 40cf3d94b83..06a62175e24 100644
--- a/2017/CVE-2017-11586.md
+++ b/2017/CVE-2017-11586.md
@@ -15,3 +15,5 @@ dayrui FineCms 5.0.9 has URL Redirector Abuse via the url parameter in a sync ac
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11586.yaml
diff --git a/2017/CVE-2017-11610.md b/2017/CVE-2017-11610.md
index b39d9799584..177261f6c0b 100644
--- a/2017/CVE-2017-11610.md
+++ b/2017/CVE-2017-11610.md
@@ -17,3 +17,5 @@ The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before
 - https://github.com/savior-only/javafx_tools
 - https://github.com/yaunsky/CVE-2017-11610
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11610.yaml
diff --git a/2017/CVE-2017-11629.md b/2017/CVE-2017-11629.md
index 365a2353eba..5b882453c40 100644
--- a/2017/CVE-2017-11629.md
+++ b/2017/CVE-2017-11629.md
@@ -15,3 +15,5 @@ dayrui FineCms through 5.0.10 has Cross Site Scripting (XSS) in controllers/api.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11629.yaml
diff --git a/2017/CVE-2017-12138.md b/2017/CVE-2017-12138.md
index 3388297a248..4b0d85d2491 100644
--- a/2017/CVE-2017-12138.md
+++ b/2017/CVE-2017-12138.md
@@ -15,3 +15,5 @@ XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/prof
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12138.yaml
diff --git a/2017/CVE-2017-12149.md b/2017/CVE-2017-12149.md
index c495daaf62a..e6d7bcddea3 100644
--- a/2017/CVE-2017-12149.md
+++ b/2017/CVE-2017-12149.md
@@ -29,3 +29,5 @@ In Jboss Application Server as shipped with Red Hat Enterprise Application Platf
 - https://github.com/yunxu1/jboss-_CVE-2017-12149
 - https://github.com/zesnd/cve-2017-12149
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12149.yaml
diff --git a/2017/CVE-2017-12542.md b/2017/CVE-2017-12542.md
index 6f3e66bb14d..4cf69a39295 100644
--- a/2017/CVE-2017-12542.md
+++ b/2017/CVE-2017-12542.md
@@ -16,3 +16,5 @@ A authentication bypass and execution of code vulnerability in HPE Integrated Li
 - https://github.com/afkfr0mkeyb0ard/CustomKaliSetup
 - https://github.com/skelsec/CVE-2017-12542
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12542.yaml
diff --git a/2017/CVE-2017-12544.md b/2017/CVE-2017-12544.md
index 5aef19e2bed..63a42f63fcf 100644
--- a/2017/CVE-2017-12544.md
+++ b/2017/CVE-2017-12544.md
@@ -15,3 +15,5 @@ A cross-site scripting vulnerability in HPE System Management Homepage for Windo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12544.yaml
diff --git a/2017/CVE-2017-12583.md b/2017/CVE-2017-12583.md
index 909f19b637f..dbab85740e9 100644
--- a/2017/CVE-2017-12583.md
+++ b/2017/CVE-2017-12583.md
@@ -15,3 +15,5 @@ DokuWiki through 2017-02-19b has XSS in the at parameter (aka the DATE_AT variab
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12583.yaml
diff --git a/2017/CVE-2017-12611.md b/2017/CVE-2017-12611.md
index 36803b66a8a..40d2dae1d00 100644
--- a/2017/CVE-2017-12611.md
+++ b/2017/CVE-2017-12611.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/tcetin704/CVE-2017-12611
 - https://github.com/zeynepsilao/CVE-2017-12611_Exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12611.yaml
diff --git a/2017/CVE-2017-12615.md b/2017/CVE-2017-12615.md
index 0bf39cd9128..bb0b17751fd 100644
--- a/2017/CVE-2017-12615.md
+++ b/2017/CVE-2017-12615.md
@@ -33,3 +33,5 @@ When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.
 - https://github.com/xiaokp7/Tomcat_PUT_GUI_EXP
 - https://github.com/zi0Black/POC-CVE-2017-12615-or-CVE-2017-12717
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12615.yaml
diff --git a/2017/CVE-2017-12617.md b/2017/CVE-2017-12617.md
index 1a0baed0367..f8162dd0fab 100644
--- a/2017/CVE-2017-12617.md
+++ b/2017/CVE-2017-12617.md
@@ -38,3 +38,5 @@ When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC
 - https://github.com/ygouzerh/CVE-2017-12617
 - https://github.com/zi0Black/POC-CVE-2017-12615-or-CVE-2017-12717
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12617.yaml
diff --git a/2017/CVE-2017-12629.md b/2017/CVE-2017-12629.md
index 5adda988d3e..1d55cd286ea 100644
--- a/2017/CVE-2017-12629.md
+++ b/2017/CVE-2017-12629.md
@@ -18,3 +18,5 @@ Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before
 - https://github.com/captain-woof/cve-2017-12629
 - https://github.com/tdwyer/PoC_CVE-2017-3164_CVE-2017-1262
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12629.yaml
diff --git a/2017/CVE-2017-12635.md b/2017/CVE-2017-12635.md
index 523b66c35cd..50b437b947d 100644
--- a/2017/CVE-2017-12635.md
+++ b/2017/CVE-2017-12635.md
@@ -20,3 +20,5 @@ Due to differences in the Erlang-based JSON parser and JavaScript-based JSON par
 - https://github.com/assalielmehdi/CVE-2017-12635
 - https://github.com/cyberharsh/Apache-couchdb-CVE-2017-12635
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12635.yaml
diff --git a/2017/CVE-2017-12637.md b/2017/CVE-2017-12637.md
index 11c832fe22a..002b5ab8cf7 100644
--- a/2017/CVE-2017-12637.md
+++ b/2017/CVE-2017-12637.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/abrewer251/CVE-2017-12637_SAP-NetWeaver-URL-Traversal
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12637.yaml
diff --git a/2017/CVE-2017-12794.md b/2017/CVE-2017-12794.md
index 2dee36cfb12..f97c8b94e65 100644
--- a/2017/CVE-2017-12794.md
+++ b/2017/CVE-2017-12794.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12794.yaml
diff --git a/2017/CVE-2017-14135.md b/2017/CVE-2017-14135.md
index 57182e6d6c7..6ad9220f8ab 100644
--- a/2017/CVE-2017-14135.md
+++ b/2017/CVE-2017-14135.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14135.yaml
diff --git a/2017/CVE-2017-14186.md b/2017/CVE-2017-14186.md
index 9da2d2bb88b..0c5da3dd248 100644
--- a/2017/CVE-2017-14186.md
+++ b/2017/CVE-2017-14186.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14186.yaml
diff --git a/2017/CVE-2017-14524.md b/2017/CVE-2017-14524.md
index 8f90f0c52c0..c1211471f21 100644
--- a/2017/CVE-2017-14524.md
+++ b/2017/CVE-2017-14524.md
@@ -15,3 +15,5 @@ Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14524.yaml
diff --git a/2017/CVE-2017-14535.md b/2017/CVE-2017-14535.md
index 4e43d8ed6a6..983253454e4 100644
--- a/2017/CVE-2017-14535.md
+++ b/2017/CVE-2017-14535.md
@@ -16,3 +16,5 @@ trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang pa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14535.yaml
diff --git a/2017/CVE-2017-14537.md b/2017/CVE-2017-14537.md
index 54348d11a90..37ff695edfe 100644
--- a/2017/CVE-2017-14537.md
+++ b/2017/CVE-2017-14537.md
@@ -17,3 +17,5 @@ trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/i
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14537.yaml
diff --git a/2017/CVE-2017-14622.md b/2017/CVE-2017-14622.md
index 91e4860c507..5e89725b5df 100644
--- a/2017/CVE-2017-14622.md
+++ b/2017/CVE-2017-14622.md
@@ -15,3 +15,5 @@ Multiple cross-site scripting (XSS) vulnerabilities in the 2kb Amazon Affiliates
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14622.yaml
diff --git a/2017/CVE-2017-14651.md b/2017/CVE-2017-14651.md
index 54ce98c18d2..679f0691f95 100644
--- a/2017/CVE-2017-14651.md
+++ b/2017/CVE-2017-14651.md
@@ -15,3 +15,5 @@ WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajax
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14651.yaml
diff --git a/2017/CVE-2017-14725.md b/2017/CVE-2017-14725.md
index edca61f2290..d2ebf371c67 100644
--- a/2017/CVE-2017-14725.md
+++ b/2017/CVE-2017-14725.md
@@ -15,3 +15,5 @@ Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14725.yaml
diff --git a/2017/CVE-2017-14849.md b/2017/CVE-2017-14849.md
index a50cc1b054d..5401b55921c 100644
--- a/2017/CVE-2017-14849.md
+++ b/2017/CVE-2017-14849.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/anthager/TDA602-DIT101-NodeExploit
 - https://github.com/snyk-labs/container-breaking-in-goof
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14849.yaml
diff --git a/2017/CVE-2017-14942.md b/2017/CVE-2017-14942.md
index 3f6c4f35644..ed3416d94d9 100644
--- a/2017/CVE-2017-14942.md
+++ b/2017/CVE-2017-14942.md
@@ -15,3 +15,5 @@ Intelbras WRN 150 devices allow remote attackers to read the configuration file,
 #### Github
 - https://github.com/dumitory-dev/CVE-2020-35391-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14942.yaml
diff --git a/2017/CVE-2017-15287.md b/2017/CVE-2017-15287.md
index 55ff7739f7e..6b97232b4d4 100644
--- a/2017/CVE-2017-15287.md
+++ b/2017/CVE-2017-15287.md
@@ -15,3 +15,5 @@ There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox device
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-15287.yaml
diff --git a/2017/CVE-2017-15363.md b/2017/CVE-2017-15363.md
index d3bbde6266d..b0168c6970f 100644
--- a/2017/CVE-2017-15363.md
+++ b/2017/CVE-2017-15363.md
@@ -15,3 +15,5 @@ Directory traversal vulnerability in public/examples/resources/getsource.php in
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-15363.yaml
diff --git a/2017/CVE-2017-15647.md b/2017/CVE-2017-15647.md
index 6553ad44a84..ee9b27f38e3 100644
--- a/2017/CVE-2017-15647.md
+++ b/2017/CVE-2017-15647.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-15647.yaml
diff --git a/2017/CVE-2017-15715.md b/2017/CVE-2017-15715.md
index 53251ef35e0..bf4a314db60 100644
--- a/2017/CVE-2017-15715.md
+++ b/2017/CVE-2017-15715.md
@@ -15,3 +15,5 @@ In Apache httpd 2.4.0 to 2.4.29, the expression specified in <FilesMatch> could
 #### Github
 - https://github.com/whisp1830/CVE-2017-15715
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-15715.yaml
diff --git a/2017/CVE-2017-15944.md b/2017/CVE-2017-15944.md
index 92b090c07ac..a6402341527 100644
--- a/2017/CVE-2017-15944.md
+++ b/2017/CVE-2017-15944.md
@@ -19,3 +19,5 @@ Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.1
 - https://github.com/xxnbyy/CVE-2017-15944-POC
 - https://github.com/yukar1z0e/CVE-2017-15944
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-15944.yaml
diff --git a/2017/CVE-2017-16806.md b/2017/CVE-2017-16806.md
index f33fd73b48c..8deba5b99fd 100644
--- a/2017/CVE-2017-16806.md
+++ b/2017/CVE-2017-16806.md
@@ -15,3 +15,5 @@ The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius bef
 #### Github
 - https://github.com/rickoooooo/ulteriusExploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-16806.yaml
diff --git a/2017/CVE-2017-16877.md b/2017/CVE-2017-16877.md
index cff9d43aff8..ae4a289c9c8 100644
--- a/2017/CVE-2017-16877.md
+++ b/2017/CVE-2017-16877.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/ossf-cve-benchmark/CVE-2017-16877
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-16877.yaml
diff --git a/2017/CVE-2017-16894.md b/2017/CVE-2017-16894.md
index 39f746f7d9a..1ffe97ed095 100644
--- a/2017/CVE-2017-16894.md
+++ b/2017/CVE-2017-16894.md
@@ -15,3 +15,5 @@ In Laravel framework through 5.5.21, remote attackers can obtain sensitive infor
 #### Github
 - https://github.com/v4p0r/rooon-fiuuu
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-16894.yaml
diff --git a/2017/CVE-2017-17043.md b/2017/CVE-2017-17043.md
index fd551e66ee7..20f4028eeb5 100644
--- a/2017/CVE-2017-17043.md
+++ b/2017/CVE-2017-17043.md
@@ -16,3 +16,5 @@ The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS beca
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17043.yaml
diff --git a/2017/CVE-2017-17059.md b/2017/CVE-2017-17059.md
index 804b1b9d024..9dee754962d 100644
--- a/2017/CVE-2017-17059.md
+++ b/2017/CVE-2017-17059.md
@@ -16,3 +16,5 @@ XSS exists in the amtyThumb amty-thumb-recent-post (aka amtyThumb posts or wp-th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17059.yaml
diff --git a/2017/CVE-2017-17092.md b/2017/CVE-2017-17092.md
index e3cbbf0ab0b..09c7bc499d8 100644
--- a/2017/CVE-2017-17092.md
+++ b/2017/CVE-2017-17092.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/bogdanovist2061/Project-7---WordPress-Pentesting
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17092.yaml
diff --git a/2017/CVE-2017-17451.md b/2017/CVE-2017-17451.md
index 1dffb2fc58f..05c31ea1bf1 100644
--- a/2017/CVE-2017-17451.md
+++ b/2017/CVE-2017-17451.md
@@ -16,3 +16,5 @@ The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe han
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17451.yaml
diff --git a/2017/CVE-2017-17562.md b/2017/CVE-2017-17562.md
index a493cbbb677..d364df63471 100644
--- a/2017/CVE-2017-17562.md
+++ b/2017/CVE-2017-17562.md
@@ -26,3 +26,5 @@ Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled an
 - https://github.com/joaomagfreitas/bash-CVE-2017-17562
 - https://github.com/nu11pointer/goahead-rce-exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17562.yaml
diff --git a/2017/CVE-2017-17731.md b/2017/CVE-2017-17731.md
index 8b929379a60..7dcf51fce8b 100644
--- a/2017/CVE-2017-17731.md
+++ b/2017/CVE-2017-17731.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17731.yaml
diff --git a/2017/CVE-2017-17736.md b/2017/CVE-2017-17736.md
index 9c1e4b07b36..ee3d6bb4e68 100644
--- a/2017/CVE-2017-17736.md
+++ b/2017/CVE-2017-17736.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17736.yaml
diff --git a/2017/CVE-2017-17762.md b/2017/CVE-2017-17762.md
index 31e67b97f5e..fadf8921f22 100644
--- a/2017/CVE-2017-17762.md
+++ b/2017/CVE-2017-17762.md
@@ -15,3 +15,5 @@ XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allow
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17762.yaml
diff --git a/2017/CVE-2017-18024.md b/2017/CVE-2017-18024.md
index 8b9e8337962..83224e80568 100644
--- a/2017/CVE-2017-18024.md
+++ b/2017/CVE-2017-18024.md
@@ -15,3 +15,5 @@ AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as de
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18024.yaml
diff --git a/2017/CVE-2017-18349.md b/2017/CVE-2017-18349.md
index 89a72270227..7fb0bc57f3a 100644
--- a/2017/CVE-2017-18349.md
+++ b/2017/CVE-2017-18349.md
@@ -15,3 +15,5 @@ parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0
 #### Github
 - https://github.com/h0cksr/Fastjson--CVE-2017-18349-
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18349.yaml
diff --git a/2017/CVE-2017-18362.md b/2017/CVE-2017-18362.md
index c5ade35debd..56ccf039f29 100644
--- a/2017/CVE-2017-18362.md
+++ b/2017/CVE-2017-18362.md
@@ -16,3 +16,5 @@ ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18362.yaml
diff --git a/2017/CVE-2017-18487.md b/2017/CVE-2017-18487.md
index 79c9521df1f..5b2352aa1fd 100644
--- a/2017/CVE-2017-18487.md
+++ b/2017/CVE-2017-18487.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18487.yaml
diff --git a/2017/CVE-2017-18490.md b/2017/CVE-2017-18490.md
index da7bad07c20..94fe2be7e56 100644
--- a/2017/CVE-2017-18490.md
+++ b/2017/CVE-2017-18490.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18490.yaml
diff --git a/2017/CVE-2017-18491.md b/2017/CVE-2017-18491.md
index e3a795e28ab..049390d5318 100644
--- a/2017/CVE-2017-18491.md
+++ b/2017/CVE-2017-18491.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18491.yaml
diff --git a/2017/CVE-2017-18492.md b/2017/CVE-2017-18492.md
index b701074c3ff..c0e68c4f2f0 100644
--- a/2017/CVE-2017-18492.md
+++ b/2017/CVE-2017-18492.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18492.yaml
diff --git a/2017/CVE-2017-18493.md b/2017/CVE-2017-18493.md
index 4d555643fec..c2eca866f61 100644
--- a/2017/CVE-2017-18493.md
+++ b/2017/CVE-2017-18493.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18493.yaml
diff --git a/2017/CVE-2017-18494.md b/2017/CVE-2017-18494.md
index 77acaf79865..9312122c50e 100644
--- a/2017/CVE-2017-18494.md
+++ b/2017/CVE-2017-18494.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18494.yaml
diff --git a/2017/CVE-2017-18496.md b/2017/CVE-2017-18496.md
index 5cdfb27452f..75e0e8217d5 100644
--- a/2017/CVE-2017-18496.md
+++ b/2017/CVE-2017-18496.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18496.yaml
diff --git a/2017/CVE-2017-18500.md b/2017/CVE-2017-18500.md
index 9a5e8edef59..98455c75f11 100644
--- a/2017/CVE-2017-18500.md
+++ b/2017/CVE-2017-18500.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18500.yaml
diff --git a/2017/CVE-2017-18501.md b/2017/CVE-2017-18501.md
index 19ccd182957..7a56cff7982 100644
--- a/2017/CVE-2017-18501.md
+++ b/2017/CVE-2017-18501.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18501.yaml
diff --git a/2017/CVE-2017-18502.md b/2017/CVE-2017-18502.md
index 6f8b9b2419d..75d138f5431 100644
--- a/2017/CVE-2017-18502.md
+++ b/2017/CVE-2017-18502.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18502.yaml
diff --git a/2017/CVE-2017-18505.md b/2017/CVE-2017-18505.md
index dd495ab69cd..0b951934ce9 100644
--- a/2017/CVE-2017-18505.md
+++ b/2017/CVE-2017-18505.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18505.yaml
diff --git a/2017/CVE-2017-18516.md b/2017/CVE-2017-18516.md
index b81f15ab547..4085f0ab043 100644
--- a/2017/CVE-2017-18516.md
+++ b/2017/CVE-2017-18516.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18516.yaml
diff --git a/2017/CVE-2017-18517.md b/2017/CVE-2017-18517.md
index 98118fa86e6..73897a3f2bd 100644
--- a/2017/CVE-2017-18517.md
+++ b/2017/CVE-2017-18517.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18517.yaml
diff --git a/2017/CVE-2017-18518.md b/2017/CVE-2017-18518.md
index 969dea1c976..10dca1f4643 100644
--- a/2017/CVE-2017-18518.md
+++ b/2017/CVE-2017-18518.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18518.yaml
diff --git a/2017/CVE-2017-18527.md b/2017/CVE-2017-18527.md
index 428b6de9e1a..f0b98ef6db8 100644
--- a/2017/CVE-2017-18527.md
+++ b/2017/CVE-2017-18527.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18527.yaml
diff --git a/2017/CVE-2017-18528.md b/2017/CVE-2017-18528.md
index 638e174f6c5..dda4fff3c9a 100644
--- a/2017/CVE-2017-18528.md
+++ b/2017/CVE-2017-18528.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18528.yaml
diff --git a/2017/CVE-2017-18529.md b/2017/CVE-2017-18529.md
index 61df92e80fb..f0be284a433 100644
--- a/2017/CVE-2017-18529.md
+++ b/2017/CVE-2017-18529.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18529.yaml
diff --git a/2017/CVE-2017-18530.md b/2017/CVE-2017-18530.md
index af7250ac391..1fa12d8d1c3 100644
--- a/2017/CVE-2017-18530.md
+++ b/2017/CVE-2017-18530.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18530.yaml
diff --git a/2017/CVE-2017-18532.md b/2017/CVE-2017-18532.md
index 6ad122a2720..ce8be60f7cd 100644
--- a/2017/CVE-2017-18532.md
+++ b/2017/CVE-2017-18532.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18532.yaml
diff --git a/2017/CVE-2017-18536.md b/2017/CVE-2017-18536.md
index 33426538b6f..d21c8912be8 100644
--- a/2017/CVE-2017-18536.md
+++ b/2017/CVE-2017-18536.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18536.yaml
diff --git a/2017/CVE-2017-18537.md b/2017/CVE-2017-18537.md
index 37333d93261..a133b7e813b 100644
--- a/2017/CVE-2017-18537.md
+++ b/2017/CVE-2017-18537.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18537.yaml
diff --git a/2017/CVE-2017-18542.md b/2017/CVE-2017-18542.md
index 1f53e6d13d0..f09fc4f4438 100644
--- a/2017/CVE-2017-18542.md
+++ b/2017/CVE-2017-18542.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18542.yaml
diff --git a/2017/CVE-2017-18556.md b/2017/CVE-2017-18556.md
index 4835559c4b3..2ee27e06123 100644
--- a/2017/CVE-2017-18556.md
+++ b/2017/CVE-2017-18556.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18556.yaml
diff --git a/2017/CVE-2017-18557.md b/2017/CVE-2017-18557.md
index cc3a6cb00fc..f8e1afa734a 100644
--- a/2017/CVE-2017-18557.md
+++ b/2017/CVE-2017-18557.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18557.yaml
diff --git a/2017/CVE-2017-18558.md b/2017/CVE-2017-18558.md
index 5f78e45dd21..86103b580a4 100644
--- a/2017/CVE-2017-18558.md
+++ b/2017/CVE-2017-18558.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18558.yaml
diff --git a/2017/CVE-2017-18562.md b/2017/CVE-2017-18562.md
index 958f2a9998d..70d6ad7615b 100644
--- a/2017/CVE-2017-18562.md
+++ b/2017/CVE-2017-18562.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18562.yaml
diff --git a/2017/CVE-2017-18564.md b/2017/CVE-2017-18564.md
index 1923671264b..f0838293962 100644
--- a/2017/CVE-2017-18564.md
+++ b/2017/CVE-2017-18564.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18564.yaml
diff --git a/2017/CVE-2017-18565.md b/2017/CVE-2017-18565.md
index 924d567fdd7..ab4adbd332f 100644
--- a/2017/CVE-2017-18565.md
+++ b/2017/CVE-2017-18565.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18565.yaml
diff --git a/2017/CVE-2017-18566.md b/2017/CVE-2017-18566.md
index 2d0fc59b156..2ecfb7bfef1 100644
--- a/2017/CVE-2017-18566.md
+++ b/2017/CVE-2017-18566.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18566.yaml
diff --git a/2017/CVE-2017-18580.md b/2017/CVE-2017-18580.md
index b3be7c62c9f..cb245f56105 100644
--- a/2017/CVE-2017-18580.md
+++ b/2017/CVE-2017-18580.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18580.yaml
diff --git a/2017/CVE-2017-18590.md b/2017/CVE-2017-18590.md
index 6013f7f4f63..b4910d47438 100644
--- a/2017/CVE-2017-18590.md
+++ b/2017/CVE-2017-18590.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18590.yaml
diff --git a/2017/CVE-2017-18598.md b/2017/CVE-2017-18598.md
index 8e17cacbddd..1d33f7fd3dd 100644
--- a/2017/CVE-2017-18598.md
+++ b/2017/CVE-2017-18598.md
@@ -15,3 +15,5 @@ The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18598.yaml
diff --git a/2017/CVE-2017-18638.md b/2017/CVE-2017-18638.md
index 022b8db8bc5..90ae39cc00e 100644
--- a/2017/CVE-2017-18638.md
+++ b/2017/CVE-2017-18638.md
@@ -16,3 +16,5 @@ send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18638.yaml
diff --git a/2017/CVE-2017-20192.md b/2017/CVE-2017-20192.md
index 678fbad5d4a..82fc9354f6c 100644
--- a/2017/CVE-2017-20192.md
+++ b/2017/CVE-2017-20192.md
@@ -16,3 +16,5 @@ The Formidable Form Builder plugin for WordPress is vulnerable to Stored Cross-S
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-20192.yaml
diff --git a/2017/CVE-2017-20194.md b/2017/CVE-2017-20194.md
index cd68e66d5de..e3fb87689f4 100644
--- a/2017/CVE-2017-20194.md
+++ b/2017/CVE-2017-20194.md
@@ -16,3 +16,5 @@ The Formidable Form Builder plugin for WordPress is vulnerable to Sensitive Data
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-20194.yaml
diff --git a/2017/CVE-2017-3131.md b/2017/CVE-2017-3131.md
index c326e4985c6..9f84fac43d4 100644
--- a/2017/CVE-2017-3131.md
+++ b/2017/CVE-2017-3131.md
@@ -16,3 +16,5 @@ A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-3131.yaml
diff --git a/2017/CVE-2017-3132.md b/2017/CVE-2017-3132.md
index 5c28eaf868c..76afb16a000 100644
--- a/2017/CVE-2017-3132.md
+++ b/2017/CVE-2017-3132.md
@@ -16,3 +16,5 @@ A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earl
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-3132.yaml
diff --git a/2017/CVE-2017-3133.md b/2017/CVE-2017-3133.md
index 812ee38ee4b..67a05a65dec 100644
--- a/2017/CVE-2017-3133.md
+++ b/2017/CVE-2017-3133.md
@@ -16,3 +16,5 @@ A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earl
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-3133.yaml
diff --git a/2017/CVE-2017-3506.md b/2017/CVE-2017-3506.md
index 4ec2da9243a..b967baa9194 100644
--- a/2017/CVE-2017-3506.md
+++ b/2017/CVE-2017-3506.md
@@ -29,3 +29,5 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar
 - https://github.com/pimps/CVE-2019-2725
 - https://github.com/sahabrifki/erpscan
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-3506.yaml
diff --git a/2017/CVE-2017-3528.md b/2017/CVE-2017-3528.md
index d4070aed0f6..f0b174c328b 100644
--- a/2017/CVE-2017-3528.md
+++ b/2017/CVE-2017-3528.md
@@ -20,3 +20,5 @@ Vulnerability in the Oracle Applications Framework component of Oracle E-Busines
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-3528.yaml
diff --git a/2017/CVE-2017-3881.md b/2017/CVE-2017-3881.md
index 3754f90c0c8..fe345a81ef2 100644
--- a/2017/CVE-2017-3881.md
+++ b/2017/CVE-2017-3881.md
@@ -24,3 +24,5 @@ A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code i
 - https://github.com/mzakyz666/PoC-CVE-2017-3881
 - https://github.com/xairy/easy-linux-pwn
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2017/CVE-2017-3881.yaml
diff --git a/2017/CVE-2017-4011.md b/2017/CVE-2017-4011.md
index 2e4397b8134..d2184cdc82f 100644
--- a/2017/CVE-2017-4011.md
+++ b/2017/CVE-2017-4011.md
@@ -15,3 +15,5 @@ Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Net
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-4011.yaml
diff --git a/2017/CVE-2017-5521.md b/2017/CVE-2017-5521.md
index 86a33878ecf..6de8a98d09e 100644
--- a/2017/CVE-2017-5521.md
+++ b/2017/CVE-2017-5521.md
@@ -16,3 +16,5 @@ An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5521.yaml
diff --git a/2017/CVE-2017-5631.md b/2017/CVE-2017-5631.md
index 97710472f86..dce58825884 100644
--- a/2017/CVE-2017-5631.md
+++ b/2017/CVE-2017-5631.md
@@ -15,3 +15,5 @@ An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is pr
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5631.yaml
diff --git a/2017/CVE-2017-5638.md b/2017/CVE-2017-5638.md
index 6e9817930c3..84556305165 100644
--- a/2017/CVE-2017-5638.md
+++ b/2017/CVE-2017-5638.md
@@ -127,3 +127,5 @@ The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x be
 - https://github.com/xsscx/cve-2017-5638
 - https://github.com/zacharie410/Exploiting-Web-Apps
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5638.yaml
diff --git a/2017/CVE-2017-5645.md b/2017/CVE-2017-5645.md
index d9b553b1100..e9d6fa87729 100644
--- a/2017/CVE-2017-5645.md
+++ b/2017/CVE-2017-5645.md
@@ -30,3 +30,5 @@ In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket
 #### Github
 - https://github.com/pimps/CVE-2017-5645
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2017/CVE-2017-5645.yaml
diff --git a/2017/CVE-2017-5689.md b/2017/CVE-2017-5689.md
index 64427d2cd95..141a1cb2f32 100644
--- a/2017/CVE-2017-5689.md
+++ b/2017/CVE-2017-5689.md
@@ -20,3 +20,5 @@ An unprivileged network attacker could gain system privileges to provisioned Int
 - https://github.com/baonq-me/cve2017-5689
 - https://github.com/embedi/amt_auth_bypass_poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5689.yaml
diff --git a/2017/CVE-2017-5868.md b/2017/CVE-2017-5868.md
index 1e835858eed..3eaeb2b85c7 100644
--- a/2017/CVE-2017-5868.md
+++ b/2017/CVE-2017-5868.md
@@ -16,3 +16,5 @@ CRLF injection vulnerability in the web interface in OpenVPN Access Server 2.1.4
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5868.yaml
diff --git a/2017/CVE-2017-5871.md b/2017/CVE-2017-5871.md
index 9e04ce7197b..71c53f165d8 100644
--- a/2017/CVE-2017-5871.md
+++ b/2017/CVE-2017-5871.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/1337rokudenashi/CVE-2017-5871
 - https://github.com/1337rokudenashi/Odoo-leq-8.0-20160726-and-9.0-Open-Redirect
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5871.yaml
diff --git a/2017/CVE-2017-5982.md b/2017/CVE-2017-5982.md
index 4e1e8e2300f..df474649c6c 100644
--- a/2017/CVE-2017-5982.md
+++ b/2017/CVE-2017-5982.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows re
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5982.yaml
diff --git a/2017/CVE-2017-5983.md b/2017/CVE-2017-5983.md
index f5cbf8da854..35e8495b0c4 100644
--- a/2017/CVE-2017-5983.md
+++ b/2017/CVE-2017-5983.md
@@ -16,3 +16,5 @@ The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improper
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5983.yaml
diff --git a/2017/CVE-2017-6090.md b/2017/CVE-2017-6090.md
index f47f479b9f7..7b9eba2787e 100644
--- a/2017/CVE-2017-6090.md
+++ b/2017/CVE-2017-6090.md
@@ -16,3 +16,5 @@ Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.
 #### Github
 - https://github.com/jlk/exploit-CVE-2017-6090
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-6090.yaml
diff --git a/2017/CVE-2017-7269.md b/2017/CVE-2017-7269.md
index 235f5e433db..63467348a33 100644
--- a/2017/CVE-2017-7269.md
+++ b/2017/CVE-2017-7269.md
@@ -45,3 +45,5 @@ Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in In
 - https://github.com/zcgonvh/cve-2017-7269
 - https://github.com/zcgonvh/cve-2017-7269-tool
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7269.yaml
diff --git a/2017/CVE-2017-7391.md b/2017/CVE-2017-7391.md
index 60a04fbf09a..836e9ace202 100644
--- a/2017/CVE-2017-7391.md
+++ b/2017/CVE-2017-7391.md
@@ -15,3 +15,5 @@ A Cross-Site Scripting (XSS) was discovered in 'Magmi 0.7.22'. The vulnerability
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7391.yaml
diff --git a/2017/CVE-2017-7504.md b/2017/CVE-2017-7504.md
index a0f30573378..1dfc9c0c759 100644
--- a/2017/CVE-2017-7504.md
+++ b/2017/CVE-2017-7504.md
@@ -22,3 +22,5 @@ No PoCs from references.
 - https://github.com/ozkanbilge/Java-Reverse-Shell
 - https://github.com/wudidwo/CVE-2017-7504-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7504.yaml
diff --git a/2017/CVE-2017-7615.md b/2017/CVE-2017-7615.md
index ff21e1089ff..781256df797 100644
--- a/2017/CVE-2017-7615.md
+++ b/2017/CVE-2017-7615.md
@@ -17,3 +17,5 @@ MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7615.yaml
diff --git a/2017/CVE-2017-7921.md b/2017/CVE-2017-7921.md
index 954bdb31385..6ebe5fadd40 100644
--- a/2017/CVE-2017-7921.md
+++ b/2017/CVE-2017-7921.md
@@ -30,3 +30,5 @@ No PoCs from references.
 - https://github.com/krypton612/hikivision
 - https://github.com/p4tq/hikvision_CVE-2017-7921_auth_bypass_config_decryptor
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7921.yaml
diff --git a/2017/CVE-2017-7925.md b/2017/CVE-2017-7925.md
index 1f81d89a609..13f358e8590 100644
--- a/2017/CVE-2017-7925.md
+++ b/2017/CVE-2017-7925.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7925.yaml
diff --git a/2017/CVE-2017-8046.md b/2017/CVE-2017-8046.md
index 56a53940b60..efdea76cb63 100644
--- a/2017/CVE-2017-8046.md
+++ b/2017/CVE-2017-8046.md
@@ -21,3 +21,5 @@ Malicious PATCH requests submitted to servers using Spring Data REST versions pr
 - https://github.com/m3ssap0/spring-break_cve-2017-8046
 - https://github.com/sj/spring-data-rest-CVE-2017-8046
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-8046.yaml
diff --git a/2017/CVE-2017-8225.md b/2017/CVE-2017-8225.md
index 8d3f386c7df..7d08e7703f0 100644
--- a/2017/CVE-2017-8225.md
+++ b/2017/CVE-2017-8225.md
@@ -17,3 +17,5 @@ On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing cr
 - https://github.com/K3ysTr0K3R/CVE-2017-8225-EXPLOIT
 - https://github.com/kienquoc102/CVE-2017-8225
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-8225.yaml
diff --git a/2017/CVE-2017-8229.md b/2017/CVE-2017-8229.md
index 7bf8041785c..24face39cdc 100644
--- a/2017/CVE-2017-8229.md
+++ b/2017/CVE-2017-8229.md
@@ -15,3 +15,5 @@ Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices allow an unauthenticated atta
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-8229.yaml
diff --git a/2017/CVE-2017-8917.md b/2017/CVE-2017-8917.md
index 4422e936a00..92fc5a56531 100644
--- a/2017/CVE-2017-8917.md
+++ b/2017/CVE-2017-8917.md
@@ -27,3 +27,5 @@ SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to ex
 - https://github.com/stefanlucas/Exploit-Joomla
 - https://github.com/teranpeterson/Joomblah
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-8917.yaml
diff --git a/2017/CVE-2017-9140.md b/2017/CVE-2017-9140.md
index 32b8fe3dffe..1f06ac65f34 100644
--- a/2017/CVE-2017-9140.md
+++ b/2017/CVE-2017-9140.md
@@ -16,3 +16,5 @@ Cross-site scripting (XSS) vulnerability in Telerik.ReportViewer.WebForms.dll in
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9140.yaml
diff --git a/2017/CVE-2017-9288.md b/2017/CVE-2017-9288.md
index 482abd60b3d..88f6b67292a 100644
--- a/2017/CVE-2017-9288.md
+++ b/2017/CVE-2017-9288.md
@@ -16,3 +16,5 @@ The Raygun4WP plugin 1.8.0 for WordPress is vulnerable to a reflected XSS in sen
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9288.yaml
diff --git a/2017/CVE-2017-9506.md b/2017/CVE-2017-9506.md
index 2ae17f48d7f..8f21f84cd2c 100644
--- a/2017/CVE-2017-9506.md
+++ b/2017/CVE-2017-9506.md
@@ -15,3 +15,5 @@ The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before versi
 #### Github
 - https://github.com/labsbots/CVE-2017-9506
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9506.yaml
diff --git a/2017/CVE-2017-9791.md b/2017/CVE-2017-9791.md
index 779d624154c..7e3633155b4 100644
--- a/2017/CVE-2017-9791.md
+++ b/2017/CVE-2017-9791.md
@@ -20,3 +20,5 @@ The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code exe
 - https://github.com/dragoneeg/Struts2-048
 - https://github.com/xfer0/CVE-2017-9791
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9791.yaml
diff --git a/2017/CVE-2017-9805.md b/2017/CVE-2017-9805.md
index b7753aaa4c1..352110192f5 100644
--- a/2017/CVE-2017-9805.md
+++ b/2017/CVE-2017-9805.md
@@ -36,3 +36,5 @@ The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x bef
 - https://github.com/wifido/CVE-2017-9805-Exploit
 - https://github.com/z3bd/CVE-2017-9805
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9805.yaml
diff --git a/2017/CVE-2017-9822.md b/2017/CVE-2017-9822.md
index 00a355afc2e..0f6a2a26054 100644
--- a/2017/CVE-2017-9822.md
+++ b/2017/CVE-2017-9822.md
@@ -18,3 +18,5 @@ DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2
 - https://github.com/murataydemir/CVE-2017-9822
 - https://github.com/svdwi/OSWE-Labs-Poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9822.yaml
diff --git a/2017/CVE-2017-9833.md b/2017/CVE-2017-9833.md
index 6edb736d06b..f35c00b0577 100644
--- a/2017/CVE-2017-9833.md
+++ b/2017/CVE-2017-9833.md
@@ -16,3 +16,5 @@
 #### Github
 - https://github.com/anldori/CVE-2017-9833
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9833.yaml
diff --git a/2017/CVE-2017-9841.md b/2017/CVE-2017-9841.md
index d9f433e74b3..6c799a28357 100644
--- a/2017/CVE-2017-9841.md
+++ b/2017/CVE-2017-9841.md
@@ -32,3 +32,5 @@ Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows rem
 - https://github.com/moonwayy/hindicybersec
 - https://github.com/p1ckzi/CVE-2017-9841
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9841.yaml
diff --git a/2018/CVE-2018-0127.md b/2018/CVE-2018-0127.md
index 86da9e4cb5e..ad6bab3a9df 100644
--- a/2018/CVE-2018-0127.md
+++ b/2018/CVE-2018-0127.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-0127.yaml
diff --git a/2018/CVE-2018-0171.md b/2018/CVE-2018-0171.md
index c7a98a6a569..66c0ef1c1e9 100644
--- a/2018/CVE-2018-0171.md
+++ b/2018/CVE-2018-0171.md
@@ -17,3 +17,5 @@ A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS
 - https://github.com/AlrikRr/Cisco-Smart-Exploit
 - https://github.com/shalekesan/CiscoSmartInstallExploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2018/CVE-2018-0171.yaml
diff --git a/2018/CVE-2018-0296.md b/2018/CVE-2018-0296.md
index fedec9ac60f..944588cc2fe 100644
--- a/2018/CVE-2018-0296.md
+++ b/2018/CVE-2018-0296.md
@@ -21,3 +21,5 @@ A vulnerability in the web interface of the Cisco Adaptive Security Appliance (A
 - https://github.com/qiantu88/CVE-2018-0296
 - https://github.com/yassineaboukir/CVE-2018-0296
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-0296.yaml
diff --git a/2018/CVE-2018-1000129.md b/2018/CVE-2018-1000129.md
index 081c6487f6d..445ba1e19da 100644
--- a/2018/CVE-2018-1000129.md
+++ b/2018/CVE-2018-1000129.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/shoucheng3/rhuss__jolokia_CVE-2018-1000129_1-4-0
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000129.yaml
diff --git a/2018/CVE-2018-1000130.md b/2018/CVE-2018-1000130.md
index 3e3c7870010..5b2178984e6 100644
--- a/2018/CVE-2018-1000130.md
+++ b/2018/CVE-2018-1000130.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000130.yaml
diff --git a/2018/CVE-2018-1000226.md b/2018/CVE-2018-1000226.md
index 7a19b65c149..e5ac6810e64 100644
--- a/2018/CVE-2018-1000226.md
+++ b/2018/CVE-2018-1000226.md
@@ -15,3 +15,5 @@ Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspec
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000226.yaml
diff --git a/2018/CVE-2018-1000533.md b/2018/CVE-2018-1000533.md
index 279c34f9ab4..1a5cd5edcb9 100644
--- a/2018/CVE-2018-1000533.md
+++ b/2018/CVE-2018-1000533.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000533.yaml
diff --git a/2018/CVE-2018-1000600.md b/2018/CVE-2018-1000600.md
index 2a47909ade6..1e281881f04 100644
--- a/2018/CVE-2018-1000600.md
+++ b/2018/CVE-2018-1000600.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000600.yaml
diff --git a/2018/CVE-2018-1000671.md b/2018/CVE-2018-1000671.md
index a68fe1aba39..f1ae87bf11c 100644
--- a/2018/CVE-2018-1000671.md
+++ b/2018/CVE-2018-1000671.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000671.yaml
diff --git a/2018/CVE-2018-1000856.md b/2018/CVE-2018-1000856.md
index f188eff1689..c688368875a 100644
--- a/2018/CVE-2018-1000856.md
+++ b/2018/CVE-2018-1000856.md
@@ -15,3 +15,5 @@ DomainMOD version 4.09.03 and above. Also verified in the latest version 4.11.01
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000856.yaml
diff --git a/2018/CVE-2018-1000861.md b/2018/CVE-2018-1000861.md
index c2f2d9a7b3b..5e4b3caa38f 100644
--- a/2018/CVE-2018-1000861.md
+++ b/2018/CVE-2018-1000861.md
@@ -18,3 +18,5 @@ A code execution vulnerability exists in the Stapler web framework used by Jenki
 - https://github.com/orangetw/awesome-jenkins-rce-2019
 - https://github.com/smokeintheshell/CVE-2018-1000861
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000861.yaml
diff --git a/2018/CVE-2018-10088.md b/2018/CVE-2018-10088.md
index 27be81dbb4d..a33451ec8db 100644
--- a/2018/CVE-2018-10088.md
+++ b/2018/CVE-2018-10088.md
@@ -16,3 +16,5 @@ Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vec
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10088.yaml
diff --git a/2018/CVE-2018-10093.md b/2018/CVE-2018-10093.md
index f47c0b17c4f..b76e35f1a13 100644
--- a/2018/CVE-2018-10093.md
+++ b/2018/CVE-2018-10093.md
@@ -16,3 +16,5 @@ AudioCodes IP phone 420HD devices using firmware version 2.2.12.126 allow Remote
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10093.yaml
diff --git a/2018/CVE-2018-10095.md b/2018/CVE-2018-10095.md
index 23b76cbda76..c7d3eb28992 100644
--- a/2018/CVE-2018-10095.md
+++ b/2018/CVE-2018-10095.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10095.yaml
diff --git a/2018/CVE-2018-10141.md b/2018/CVE-2018-10141.md
index a532e81a46e..a06c260df03 100644
--- a/2018/CVE-2018-10141.md
+++ b/2018/CVE-2018-10141.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10141.yaml
diff --git a/2018/CVE-2018-10201.md b/2018/CVE-2018-10201.md
index 06790e921ae..8e9ffef45a1 100644
--- a/2018/CVE-2018-10201.md
+++ b/2018/CVE-2018-10201.md
@@ -16,3 +16,5 @@ An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10201.yaml
diff --git a/2018/CVE-2018-10230.md b/2018/CVE-2018-10230.md
index 0906f7b0c4d..523fd839833 100644
--- a/2018/CVE-2018-10230.md
+++ b/2018/CVE-2018-10230.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10230.yaml
diff --git a/2018/CVE-2018-10383.md b/2018/CVE-2018-10383.md
index 3fde3fd6bd5..a2972111c1e 100644
--- a/2018/CVE-2018-10383.md
+++ b/2018/CVE-2018-10383.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10383.yaml
diff --git a/2018/CVE-2018-10562.md b/2018/CVE-2018-10562.md
index 84fef3a68be..eb430203d28 100644
--- a/2018/CVE-2018-10562.md
+++ b/2018/CVE-2018-10562.md
@@ -19,3 +19,5 @@ An issue was discovered on Dasan GPON home routers. Command Injection can occur
 - https://github.com/Choudai/GPON-LOADER
 - https://github.com/c0ld1/GPON_RCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10562.yaml
diff --git a/2018/CVE-2018-10736.md b/2018/CVE-2018-10736.md
index 72a5d3f820a..33a7d0b4baf 100644
--- a/2018/CVE-2018-10736.md
+++ b/2018/CVE-2018-10736.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10736.yaml
diff --git a/2018/CVE-2018-10737.md b/2018/CVE-2018-10737.md
index 393850457b1..9379a0363f0 100644
--- a/2018/CVE-2018-10737.md
+++ b/2018/CVE-2018-10737.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10737.yaml
diff --git a/2018/CVE-2018-10738.md b/2018/CVE-2018-10738.md
index 308eb205859..63e37dd00d6 100644
--- a/2018/CVE-2018-10738.md
+++ b/2018/CVE-2018-10738.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10738.yaml
diff --git a/2018/CVE-2018-10822.md b/2018/CVE-2018-10822.md
index cd98f31f0cc..c75ee063469 100644
--- a/2018/CVE-2018-10822.md
+++ b/2018/CVE-2018-10822.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in the web interface on D-Link DWR-116 through
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10822.yaml
diff --git a/2018/CVE-2018-10823.md b/2018/CVE-2018-10823.md
index 6aec0f463d6..da80b36c96b 100644
--- a/2018/CVE-2018-10823.md
+++ b/2018/CVE-2018-10823.md
@@ -16,3 +16,5 @@ An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DW
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10823.yaml
diff --git a/2018/CVE-2018-10956.md b/2018/CVE-2018-10956.md
index db4af3800cd..991562d9cb3 100644
--- a/2018/CVE-2018-10956.md
+++ b/2018/CVE-2018-10956.md
@@ -16,3 +16,5 @@ IPConfigure Orchid Core VMS 2.0.5 allows Directory Traversal.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10956.yaml
diff --git a/2018/CVE-2018-11133.md b/2018/CVE-2018-11133.md
index 3893272585e..47a248bee5e 100644
--- a/2018/CVE-2018-11133.md
+++ b/2018/CVE-2018-11133.md
@@ -15,3 +15,5 @@ The 'fmt' parameter of the '/common/run_cross_report.php' script in the the Ques
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11133.yaml
diff --git a/2018/CVE-2018-11138.md b/2018/CVE-2018-11138.md
index 94a202180bf..79d2b96ede6 100644
--- a/2018/CVE-2018-11138.md
+++ b/2018/CVE-2018-11138.md
@@ -17,3 +17,5 @@ The '/common/download_agent_installer.php' script in the Quest KACE System Manag
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11138.yaml
diff --git a/2018/CVE-2018-11222.md b/2018/CVE-2018-11222.md
index 96e48277c46..a606ac6ab93 100644
--- a/2018/CVE-2018-11222.md
+++ b/2018/CVE-2018-11222.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11222.yaml
diff --git a/2018/CVE-2018-11227.md b/2018/CVE-2018-11227.md
index 591ce639e29..df5ed67b6bf 100644
--- a/2018/CVE-2018-11227.md
+++ b/2018/CVE-2018-11227.md
@@ -16,3 +16,5 @@ Monstra CMS 3.0.4 and earlier has XSS via index.php.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11227.yaml
diff --git a/2018/CVE-2018-11231.md b/2018/CVE-2018-11231.md
index 64143880fed..131cd5b4c4a 100644
--- a/2018/CVE-2018-11231.md
+++ b/2018/CVE-2018-11231.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11231.yaml
diff --git a/2018/CVE-2018-11409.md b/2018/CVE-2018-11409.md
index f6ec704ffb9..4745640c1a9 100644
--- a/2018/CVE-2018-11409.md
+++ b/2018/CVE-2018-11409.md
@@ -15,3 +15,5 @@ Splunk through 7.0.1 allows information disclosure by appending __raw/services/s
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11409.yaml
diff --git a/2018/CVE-2018-11473.md b/2018/CVE-2018-11473.md
index 1fa38445531..3cf7e86a903 100644
--- a/2018/CVE-2018-11473.md
+++ b/2018/CVE-2018-11473.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11473.yaml
diff --git a/2018/CVE-2018-11511.md b/2018/CVE-2018-11511.md
index e78bc55ea7b..692848e1f52 100644
--- a/2018/CVE-2018-11511.md
+++ b/2018/CVE-2018-11511.md
@@ -16,3 +16,5 @@ The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11511.yaml
diff --git a/2018/CVE-2018-11686.md b/2018/CVE-2018-11686.md
index d8704fffe3c..6b262d6b7be 100644
--- a/2018/CVE-2018-11686.md
+++ b/2018/CVE-2018-11686.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/mpgn/CVE-2018-11686
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11686.yaml
diff --git a/2018/CVE-2018-11709.md b/2018/CVE-2018-11709.md
index f633b7d4435..c97ca10cce6 100644
--- a/2018/CVE-2018-11709.md
+++ b/2018/CVE-2018-11709.md
@@ -15,3 +15,5 @@ wpforo_get_request_uri in wpf-includes/functions.php in the wpForo Forum plugin
 #### Github
 - https://github.com/Michael-Meade/snackhack2
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11709.yaml
diff --git a/2018/CVE-2018-11759.md b/2018/CVE-2018-11759.md
index 47dcf8893a3..742ac1c90b8 100644
--- a/2018/CVE-2018-11759.md
+++ b/2018/CVE-2018-11759.md
@@ -17,3 +17,5 @@ The Apache Web Server (httpd) specific code that normalised the requested path b
 - https://github.com/immunIT/CVE-2018-11759
 - https://github.com/julioliraup/Identificador-CVE-2018-11759
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11759.yaml
diff --git a/2018/CVE-2018-11776.md b/2018/CVE-2018-11776.md
index d500bf24ab5..0b7d4d76b14 100644
--- a/2018/CVE-2018-11776.md
+++ b/2018/CVE-2018-11776.md
@@ -53,3 +53,5 @@ Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remo
 - https://github.com/tuxotron/cve-2018-11776-docker
 - https://github.com/xfox64x/CVE-2018-11776
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11776.yaml
diff --git a/2018/CVE-2018-11784.md b/2018/CVE-2018-11784.md
index 03c0a1d957d..06f0a708652 100644
--- a/2018/CVE-2018-11784.md
+++ b/2018/CVE-2018-11784.md
@@ -24,3 +24,5 @@ When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to
 #### Github
 - https://github.com/Cappricio-Securities/CVE-2018-11784
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11784.yaml
diff --git a/2018/CVE-2018-12031.md b/2018/CVE-2018-12031.md
index 30d845f4b01..0bbcf37dbda 100644
--- a/2018/CVE-2018-12031.md
+++ b/2018/CVE-2018-12031.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/EmreOvunc/Eaton-Intelligent-Power-Manager-Local-File-Inclusion
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12031.yaml
diff --git a/2018/CVE-2018-12054.md b/2018/CVE-2018-12054.md
index a435bf5c536..26402e3bb77 100644
--- a/2018/CVE-2018-12054.md
+++ b/2018/CVE-2018-12054.md
@@ -16,3 +16,5 @@ Arbitrary File Read exists in PHP Scripts Mall Schools Alert Management Script v
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12054.yaml
diff --git a/2018/CVE-2018-1207.md b/2018/CVE-2018-1207.md
index 2188ab70301..5a03e3d055a 100644
--- a/2018/CVE-2018-1207.md
+++ b/2018/CVE-2018-1207.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/mgargiullo/cve-2018-1207
 - https://github.com/miorin002/H-I_AIO
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1207.yaml
diff --git a/2018/CVE-2018-12095.md b/2018/CVE-2018-12095.md
index 1acfa779577..d2ec5984d33 100644
--- a/2018/CVE-2018-12095.md
+++ b/2018/CVE-2018-12095.md
@@ -16,3 +16,5 @@ A Reflected Cross-Site Scripting web vulnerability has been discovered in the OE
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12095.yaml
diff --git a/2018/CVE-2018-1217.md b/2018/CVE-2018-1217.md
index ac67a52b2dd..2a0a83809a4 100644
--- a/2018/CVE-2018-1217.md
+++ b/2018/CVE-2018-1217.md
@@ -16,3 +16,5 @@ Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1217.yaml
diff --git a/2018/CVE-2018-12296.md b/2018/CVE-2018-12296.md
index 8c92867c923..ebcd3d0a4ed 100644
--- a/2018/CVE-2018-12296.md
+++ b/2018/CVE-2018-12296.md
@@ -15,3 +15,5 @@ Insufficient access control in /api/external/7.0/system.System.get_infos in Seag
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12296.yaml
diff --git a/2018/CVE-2018-12300.md b/2018/CVE-2018-12300.md
index 83cef4e0f7a..957fdff8760 100644
--- a/2018/CVE-2018-12300.md
+++ b/2018/CVE-2018-12300.md
@@ -15,3 +15,5 @@ Arbitrary Redirect in echo-server.html in Seagate NAS OS version 4.3.15.1 allows
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12300.yaml
diff --git a/2018/CVE-2018-12613.md b/2018/CVE-2018-12613.md
index 0917552b888..49d6c7f9a5e 100644
--- a/2018/CVE-2018-12613.md
+++ b/2018/CVE-2018-12613.md
@@ -21,3 +21,5 @@ An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker c
 - https://github.com/ivanitlearning/CVE-2018-12613
 - https://github.com/johnkiguru1337/N-Days
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12613.yaml
diff --git a/2018/CVE-2018-12634.md b/2018/CVE-2018-12634.md
index 1dde17477e2..3dc9b967f57 100644
--- a/2018/CVE-2018-12634.md
+++ b/2018/CVE-2018-12634.md
@@ -16,3 +16,5 @@ CirCarLife Scada before 4.3 allows remote attackers to obtain sensitive informat
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12634.yaml
diff --git a/2018/CVE-2018-12675.md b/2018/CVE-2018-12675.md
index 75906eecbce..fdd96e80d5e 100644
--- a/2018/CVE-2018-12675.md
+++ b/2018/CVE-2018-12675.md
@@ -15,3 +15,5 @@ The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12675.yaml
diff --git a/2018/CVE-2018-1271.md b/2018/CVE-2018-1271.md
index 9ebb3818b4c..063cce5b14a 100644
--- a/2018/CVE-2018-1271.md
+++ b/2018/CVE-2018-1271.md
@@ -20,3 +20,5 @@ Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1271.yaml
diff --git a/2018/CVE-2018-1273.md b/2018/CVE-2018-1273.md
index e471c9ea423..eb3ee5ab6cd 100644
--- a/2018/CVE-2018-1273.md
+++ b/2018/CVE-2018-1273.md
@@ -21,3 +21,5 @@ Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older
 - https://github.com/wearearima/poc-cve-2018-1273
 - https://github.com/webr0ck/poc-cve-2018-1273
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1273.yaml
diff --git a/2018/CVE-2018-12909.md b/2018/CVE-2018-12909.md
index e70cb7d3f21..d0240a664bd 100644
--- a/2018/CVE-2018-12909.md
+++ b/2018/CVE-2018-12909.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12909.yaml
diff --git a/2018/CVE-2018-12998.md b/2018/CVE-2018-12998.md
index 7c23a5bf0ec..fb53c9ff117 100644
--- a/2018/CVE-2018-12998.md
+++ b/2018/CVE-2018-12998.md
@@ -17,3 +17,5 @@ A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Netflo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12998.yaml
diff --git a/2018/CVE-2018-13317.md b/2018/CVE-2018-13317.md
index d50ba88543d..3418e5d6bfc 100644
--- a/2018/CVE-2018-13317.md
+++ b/2018/CVE-2018-13317.md
@@ -15,3 +15,5 @@ Password disclosure in password.htm in TOTOLINK A3002RU version 1.0.8 allows att
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-13317.yaml
diff --git a/2018/CVE-2018-1335.md b/2018/CVE-2018-1335.md
index 403a746c2ba..31b4a336d16 100644
--- a/2018/CVE-2018-1335.md
+++ b/2018/CVE-2018-1335.md
@@ -20,3 +20,5 @@ From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted head
 - https://github.com/canumay/cve-2018-1335
 - https://github.com/siramk/CVE-2018-1335
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1335.yaml
diff --git a/2018/CVE-2018-13379.md b/2018/CVE-2018-13379.md
index da8e6635c25..7e74380b30e 100644
--- a/2018/CVE-2018-13379.md
+++ b/2018/CVE-2018-13379.md
@@ -26,3 +26,5 @@ An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"
 - https://github.com/pwn3z/CVE-2018-13379-FortinetVPN
 - https://github.com/yukar1z0e/CVE-2018-13379
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-13379.yaml
diff --git a/2018/CVE-2018-13380.md b/2018/CVE-2018-13380.md
index b81fd6e0775..c31e6775ac5 100644
--- a/2018/CVE-2018-13380.md
+++ b/2018/CVE-2018-13380.md
@@ -16,3 +16,5 @@ A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-13380.yaml
diff --git a/2018/CVE-2018-13980.md b/2018/CVE-2018-13980.md
index 5d349ff108b..0afd451b04c 100644
--- a/2018/CVE-2018-13980.md
+++ b/2018/CVE-2018-13980.md
@@ -16,3 +16,5 @@ The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vu
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-13980.yaml
diff --git a/2018/CVE-2018-14013.md b/2018/CVE-2018-14013.md
index c2ca1278848..a6a67ff4e6b 100644
--- a/2018/CVE-2018-14013.md
+++ b/2018/CVE-2018-14013.md
@@ -17,3 +17,5 @@ Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJ
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14013.yaml
diff --git a/2018/CVE-2018-14064.md b/2018/CVE-2018-14064.md
index a0b4feb9b3a..d5e12396df7 100644
--- a/2018/CVE-2018-14064.md
+++ b/2018/CVE-2018-14064.md
@@ -17,3 +17,5 @@ The uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices allows Direct
 #### Github
 - https://github.com/s1kr10s/ExploitVelotiSmart
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14064.yaml
diff --git a/2018/CVE-2018-14474.md b/2018/CVE-2018-14474.md
index 300d74c736a..efdc6586bda 100644
--- a/2018/CVE-2018-14474.md
+++ b/2018/CVE-2018-14474.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14474.yaml
diff --git a/2018/CVE-2018-14574.md b/2018/CVE-2018-14574.md
index 5d304f69fd1..b271880b904 100644
--- a/2018/CVE-2018-14574.md
+++ b/2018/CVE-2018-14574.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14574.yaml
diff --git a/2018/CVE-2018-14728.md b/2018/CVE-2018-14728.md
index 2074796cd5e..500bfc21cf7 100644
--- a/2018/CVE-2018-14728.md
+++ b/2018/CVE-2018-14728.md
@@ -16,3 +16,5 @@ upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14728.yaml
diff --git a/2018/CVE-2018-14912.md b/2018/CVE-2018-14912.md
index d0e6324ade8..a1b4a12641d 100644
--- a/2018/CVE-2018-14912.md
+++ b/2018/CVE-2018-14912.md
@@ -15,3 +15,5 @@ cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14912.yaml
diff --git a/2018/CVE-2018-14916.md b/2018/CVE-2018-14916.md
index bd335dd6151..50f055f8a73 100644
--- a/2018/CVE-2018-14916.md
+++ b/2018/CVE-2018-14916.md
@@ -17,3 +17,5 @@ LOYTEC LGATE-902 6.3.2 devices allow Arbitrary file deletion.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14916.yaml
diff --git a/2018/CVE-2018-14918.md b/2018/CVE-2018-14918.md
index 17d440c5b7a..a607b404227 100644
--- a/2018/CVE-2018-14918.md
+++ b/2018/CVE-2018-14918.md
@@ -17,3 +17,5 @@ LOYTEC LGATE-902 6.3.2 devices allow Directory Traversal.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14918.yaml
diff --git a/2018/CVE-2018-14931.md b/2018/CVE-2018-14931.md
index 3c04a08a8e8..705b5e49eb8 100644
--- a/2018/CVE-2018-14931.md
+++ b/2018/CVE-2018-14931.md
@@ -15,3 +15,5 @@ An issue was discovered in the Core and Portal modules in Polaris FT Intellect C
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14931.yaml
diff --git a/2018/CVE-2018-14933.md b/2018/CVE-2018-14933.md
index b7bc81ac992..e183aed92fe 100644
--- a/2018/CVE-2018-14933.md
+++ b/2018/CVE-2018-14933.md
@@ -17,3 +17,5 @@ upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via s
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14933.yaml
diff --git a/2018/CVE-2018-15138.md b/2018/CVE-2018-15138.md
index 0b1197b3ce3..fe9dc451aee 100644
--- a/2018/CVE-2018-15138.md
+++ b/2018/CVE-2018-15138.md
@@ -15,3 +15,5 @@ Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filen
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15138.yaml
diff --git a/2018/CVE-2018-15517.md b/2018/CVE-2018-15517.md
index 43aa80f1085..b52b5bc8bf2 100644
--- a/2018/CVE-2018-15517.md
+++ b/2018/CVE-2018-15517.md
@@ -16,3 +16,5 @@ The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15517.yaml
diff --git a/2018/CVE-2018-15535.md b/2018/CVE-2018-15535.md
index e675a303366..4e70ec33086 100644
--- a/2018/CVE-2018-15535.md
+++ b/2018/CVE-2018-15535.md
@@ -15,3 +15,5 @@
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15535.yaml
diff --git a/2018/CVE-2018-15745.md b/2018/CVE-2018-15745.md
index 529b7ec5e82..3f0c1ae3267 100644
--- a/2018/CVE-2018-15745.md
+++ b/2018/CVE-2018-15745.md
@@ -17,3 +17,5 @@ Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal
 #### Github
 - https://github.com/Jasurbek-Masimov/CVE-2018-15745
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15745.yaml
diff --git a/2018/CVE-2018-15811.md b/2018/CVE-2018-15811.md
index 68377a13477..81697de984f 100644
--- a/2018/CVE-2018-15811.md
+++ b/2018/CVE-2018-15811.md
@@ -16,3 +16,5 @@ DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to prote
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15811.yaml
diff --git a/2018/CVE-2018-15917.md b/2018/CVE-2018-15917.md
index 60849cbc897..232c0308f0c 100644
--- a/2018/CVE-2018-15917.md
+++ b/2018/CVE-2018-15917.md
@@ -16,3 +16,5 @@ Persistent cross-site scripting (XSS) issues in Jorani 0.6.5 allow remote attack
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15917.yaml
diff --git a/2018/CVE-2018-15961.md b/2018/CVE-2018-15961.md
index 6c337cb3749..20f04346cd5 100644
--- a/2018/CVE-2018-15961.md
+++ b/2018/CVE-2018-15961.md
@@ -23,3 +23,5 @@ Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlie
 - https://github.com/vah13/CVE-2018-15961
 - https://github.com/xbufu/CVE-2018-15961
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15961.yaml
diff --git a/2018/CVE-2018-16059.md b/2018/CVE-2018-16059.md
index 5b3577d3234..789a92e13b3 100644
--- a/2018/CVE-2018-16059.md
+++ b/2018/CVE-2018-16059.md
@@ -16,3 +16,5 @@ Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16059.yaml
diff --git a/2018/CVE-2018-16133.md b/2018/CVE-2018-16133.md
index 29dc773366b..4815a8c6afd 100644
--- a/2018/CVE-2018-16133.md
+++ b/2018/CVE-2018-16133.md
@@ -16,3 +16,5 @@ Cybrotech CyBroHttpServer 1.0.3 allows Directory Traversal via a ../ in the URI.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16133.yaml
diff --git a/2018/CVE-2018-16139.md b/2018/CVE-2018-16139.md
index 133f549e541..adbf2c8eb63 100644
--- a/2018/CVE-2018-16139.md
+++ b/2018/CVE-2018-16139.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16139.yaml
diff --git a/2018/CVE-2018-16159.md b/2018/CVE-2018-16159.md
index c937e3aada3..a2f789eecfe 100644
--- a/2018/CVE-2018-16159.md
+++ b/2018/CVE-2018-16159.md
@@ -16,3 +16,5 @@ The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16159.yaml
diff --git a/2018/CVE-2018-16167.md b/2018/CVE-2018-16167.md
index a42dc9f890d..447cdb4305a 100644
--- a/2018/CVE-2018-16167.md
+++ b/2018/CVE-2018-16167.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/dnr6419/CVE-2018-16167
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16167.yaml
diff --git a/2018/CVE-2018-16283.md b/2018/CVE-2018-16283.md
index 2faefda228c..3345a31724b 100644
--- a/2018/CVE-2018-16283.md
+++ b/2018/CVE-2018-16283.md
@@ -18,3 +18,5 @@ The Wechat Broadcast plugin 1.2.0 and earlier for WordPress allows Directory Tra
 - https://github.com/cved-sources/cve-2018-16283
 - https://github.com/deguru22/wp-plugins-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16283.yaml
diff --git a/2018/CVE-2018-16288.md b/2018/CVE-2018-16288.md
index 102599d7d9f..2cc102a25bd 100644
--- a/2018/CVE-2018-16288.md
+++ b/2018/CVE-2018-16288.md
@@ -15,3 +15,5 @@ LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/up
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16288.yaml
diff --git a/2018/CVE-2018-16299.md b/2018/CVE-2018-16299.md
index 26ba0c6e4da..0cfb3088ef1 100644
--- a/2018/CVE-2018-16299.md
+++ b/2018/CVE-2018-16299.md
@@ -17,3 +17,5 @@ The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16299.yaml
diff --git a/2018/CVE-2018-16363.md b/2018/CVE-2018-16363.md
index c52a90fb452..237cb026a4b 100644
--- a/2018/CVE-2018-16363.md
+++ b/2018/CVE-2018-16363.md
@@ -16,3 +16,5 @@ The mndpsingh287 File Manager plugin V2.9 for WordPress has XSS via the lang par
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16363.yaml
diff --git a/2018/CVE-2018-16668.md b/2018/CVE-2018-16668.md
index d32c1f47fb2..823cd0b0be7 100644
--- a/2018/CVE-2018-16668.md
+++ b/2018/CVE-2018-16668.md
@@ -16,3 +16,5 @@ An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is internal i
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16668.yaml
diff --git a/2018/CVE-2018-16670.md b/2018/CVE-2018-16670.md
index 8076ab35c24..c86f6e71f2e 100644
--- a/2018/CVE-2018-16670.md
+++ b/2018/CVE-2018-16670.md
@@ -16,3 +16,5 @@ An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is PLC status
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16670.yaml
diff --git a/2018/CVE-2018-16671.md b/2018/CVE-2018-16671.md
index 67b2cb42b07..29b1d87323e 100644
--- a/2018/CVE-2018-16671.md
+++ b/2018/CVE-2018-16671.md
@@ -16,3 +16,5 @@ An issue was discovered in CIRCONTROL CirCarLife before 4.3. There is system sof
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16671.yaml
diff --git a/2018/CVE-2018-16716.md b/2018/CVE-2018-16716.md
index 35402160483..78a3bf25df8 100644
--- a/2018/CVE-2018-16716.md
+++ b/2018/CVE-2018-16716.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16716.yaml
diff --git a/2018/CVE-2018-16761.md b/2018/CVE-2018-16761.md
index 2a1f8daf827..d77cab48983 100644
--- a/2018/CVE-2018-16761.md
+++ b/2018/CVE-2018-16761.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16761.yaml
diff --git a/2018/CVE-2018-16763.md b/2018/CVE-2018-16763.md
index 8de41bb36bb..9c68efa35ea 100644
--- a/2018/CVE-2018-16763.md
+++ b/2018/CVE-2018-16763.md
@@ -58,3 +58,5 @@ FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter
 - https://github.com/shoamshilo/Fuel-CMS-Remote-Code-Execution-1.4--RCE--
 - https://github.com/wizardy0ga/THM-Vulnerability_Capstone-CVE-2018-16763
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16763.yaml
diff --git a/2018/CVE-2018-16836.md b/2018/CVE-2018-16836.md
index fd545083c0d..e99c771a36d 100644
--- a/2018/CVE-2018-16836.md
+++ b/2018/CVE-2018-16836.md
@@ -15,3 +15,5 @@ Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme c
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16836.yaml
diff --git a/2018/CVE-2018-16979.md b/2018/CVE-2018-16979.md
index 19d87152624..0d9135639d2 100644
--- a/2018/CVE-2018-16979.md
+++ b/2018/CVE-2018-16979.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16979.yaml
diff --git a/2018/CVE-2018-17082.md b/2018/CVE-2018-17082.md
index 6cdb1eff6d6..f189e370c8c 100644
--- a/2018/CVE-2018-17082.md
+++ b/2018/CVE-2018-17082.md
@@ -16,3 +16,5 @@ The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17082.yaml
diff --git a/2018/CVE-2018-17153.md b/2018/CVE-2018-17153.md
index 219a185fa4c..5d60e72a375 100644
--- a/2018/CVE-2018-17153.md
+++ b/2018/CVE-2018-17153.md
@@ -16,3 +16,5 @@ It was discovered that the Western Digital My Cloud device before 2.30.196 is af
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17153.yaml
diff --git a/2018/CVE-2018-17173.md b/2018/CVE-2018-17173.md
index 8ef7f6547bf..0899434922a 100644
--- a/2018/CVE-2018-17173.md
+++ b/2018/CVE-2018-17173.md
@@ -17,3 +17,5 @@ LG SuperSign CMS allows remote attackers to execute arbitrary code via the sourc
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17173.yaml
diff --git a/2018/CVE-2018-17207.md b/2018/CVE-2018-17207.md
index 8dab8134538..f8b9405a044 100644
--- a/2018/CVE-2018-17207.md
+++ b/2018/CVE-2018-17207.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/cved-sources/cve-2018-17207
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17207.yaml
diff --git a/2018/CVE-2018-17246.md b/2018/CVE-2018-17246.md
index b042a9487b8..00d097d1a86 100644
--- a/2018/CVE-2018-17246.md
+++ b/2018/CVE-2018-17246.md
@@ -15,3 +15,5 @@ Kibana versions before 6.4.3 and 5.6.13 contain an arbitrary file inclusion flaw
 #### Github
 - https://github.com/mpgn/CVE-2018-17246
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17246.yaml
diff --git a/2018/CVE-2018-17254.md b/2018/CVE-2018-17254.md
index 7057098e6b6..2c5a59ef7c9 100644
--- a/2018/CVE-2018-17254.md
+++ b/2018/CVE-2018-17254.md
@@ -17,3 +17,5 @@ The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelin
 - https://github.com/MataKucing-OFC/CVE-2018-17254
 - https://github.com/Nickguitar/Joomla-JCK-Editor-6.4.4-SQL-Injection
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17254.yaml
diff --git a/2018/CVE-2018-17283.md b/2018/CVE-2018-17283.md
index d49e0377ebd..c1fbafd40f7 100644
--- a/2018/CVE-2018-17283.md
+++ b/2018/CVE-2018-17283.md
@@ -15,3 +15,5 @@ Zoho ManageEngine OpManager before 12.3 Build 123196 does not require authentica
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17283.yaml
diff --git a/2018/CVE-2018-17422.md b/2018/CVE-2018-17422.md
index d6a82180aa3..c0d5d702a0d 100644
--- a/2018/CVE-2018-17422.md
+++ b/2018/CVE-2018-17422.md
@@ -15,3 +15,5 @@ dotCMS before 5.0.2 has open redirects via the html/common/forward_js.jsp FORWAR
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17422.yaml
diff --git a/2018/CVE-2018-17431.md b/2018/CVE-2018-17431.md
index 127de56a43e..f64b7902aff 100644
--- a/2018/CVE-2018-17431.md
+++ b/2018/CVE-2018-17431.md
@@ -17,3 +17,5 @@ Web Console in Comodo UTM Firewall before 2.7.0 allows remote attackers to execu
 - https://github.com/Fadavvi/CVE-2018-17431-PoC
 - https://github.com/sanan2004/CVE-2018-17431-Comodo
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17431.yaml
diff --git a/2018/CVE-2018-18069.md b/2018/CVE-2018-18069.md
index c7f58de2fb1..9c89c367d39 100644
--- a/2018/CVE-2018-18069.md
+++ b/2018/CVE-2018-18069.md
@@ -15,3 +15,5 @@ process_forms in the WPML (aka sitepress-multilingual-cms) plugin through 3.6.3
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18069.yaml
diff --git a/2018/CVE-2018-18264.md b/2018/CVE-2018-18264.md
index adce7da4296..dee351ce921 100644
--- a/2018/CVE-2018-18264.md
+++ b/2018/CVE-2018-18264.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18264.yaml
diff --git a/2018/CVE-2018-18323.md b/2018/CVE-2018-18323.md
index b7007950b43..0e1c3297443 100644
--- a/2018/CVE-2018-18323.md
+++ b/2018/CVE-2018-18323.md
@@ -16,3 +16,5 @@ CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusio
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18323.yaml
diff --git a/2018/CVE-2018-18325.md b/2018/CVE-2018-18325.md
index e69ef9cb066..dbb07011ef9 100644
--- a/2018/CVE-2018-18325.md
+++ b/2018/CVE-2018-18325.md
@@ -16,3 +16,5 @@ DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to prote
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18325.yaml
diff --git a/2018/CVE-2018-18570.md b/2018/CVE-2018-18570.md
index 7ae97bd589a..c05f74f112b 100644
--- a/2018/CVE-2018-18570.md
+++ b/2018/CVE-2018-18570.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18570.yaml
diff --git a/2018/CVE-2018-18608.md b/2018/CVE-2018-18608.md
index 4324e4da6a1..5d021f67158 100644
--- a/2018/CVE-2018-18608.md
+++ b/2018/CVE-2018-18608.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18608.yaml
diff --git a/2018/CVE-2018-18775.md b/2018/CVE-2018-18775.md
index 8fc8da1635d..77fdd75cb47 100644
--- a/2018/CVE-2018-18775.md
+++ b/2018/CVE-2018-18775.md
@@ -16,3 +16,5 @@ Microstrategy Web, version 7, does not sufficiently encode user-controlled input
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18775.yaml
diff --git a/2018/CVE-2018-18777.md b/2018/CVE-2018-18777.md
index 5394493fdf7..7f130e20a69 100644
--- a/2018/CVE-2018-18777.md
+++ b/2018/CVE-2018-18777.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18777.yaml
diff --git a/2018/CVE-2018-18778.md b/2018/CVE-2018-18778.md
index d16f88f0b1a..476e8131000 100644
--- a/2018/CVE-2018-18778.md
+++ b/2018/CVE-2018-18778.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/cyberharsh/Mini_httpd-CVE-2018-18778
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18778.yaml
diff --git a/2018/CVE-2018-18809.md b/2018/CVE-2018-18809.md
index 93e9bad6a8d..d9dbd9e98c4 100644
--- a/2018/CVE-2018-18809.md
+++ b/2018/CVE-2018-18809.md
@@ -33,3 +33,5 @@ The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports L
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18809.yaml
diff --git a/2018/CVE-2018-18925.md b/2018/CVE-2018-18925.md
index 15569dcc861..52057314a60 100644
--- a/2018/CVE-2018-18925.md
+++ b/2018/CVE-2018-18925.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/j4k0m/CVE-2018-18925
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18925.yaml
diff --git a/2018/CVE-2018-19127.md b/2018/CVE-2018-19127.md
index 1985a89aa3f..0dd31f997fd 100644
--- a/2018/CVE-2018-19127.md
+++ b/2018/CVE-2018-19127.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/ab1gale/phpcms-2008-CVE-2018-19127
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19127.yaml
diff --git a/2018/CVE-2018-19136.md b/2018/CVE-2018-19136.md
index d46ac27d957..370b8f8ae6e 100644
--- a/2018/CVE-2018-19136.md
+++ b/2018/CVE-2018-19136.md
@@ -15,3 +15,5 @@ DomainMOD through 4.11.01 has XSS via the assets/edit/registrar-account.php raid
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19136.yaml
diff --git a/2018/CVE-2018-19137.md b/2018/CVE-2018-19137.md
index a01849974c8..5d4f7fcdad8 100644
--- a/2018/CVE-2018-19137.md
+++ b/2018/CVE-2018-19137.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19137.yaml
diff --git a/2018/CVE-2018-19207.md b/2018/CVE-2018-19207.md
index 0191719a3d6..3e90098ae55 100644
--- a/2018/CVE-2018-19207.md
+++ b/2018/CVE-2018-19207.md
@@ -19,3 +19,5 @@ The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for
 - https://github.com/cved-sources/cve-2018-19207
 - https://github.com/deguru22/wp-plugins-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19207.yaml
diff --git a/2018/CVE-2018-19276.md b/2018/CVE-2018-19276.md
index ec539c74cf3..fecde211678 100644
--- a/2018/CVE-2018-19276.md
+++ b/2018/CVE-2018-19276.md
@@ -18,3 +18,5 @@ OpenMRS before 2.24.0 is affected by an Insecure Object Deserialization vulnerab
 #### Github
 - https://github.com/mpgn/CVE-2018-19276
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19276.yaml
diff --git a/2018/CVE-2018-19287.md b/2018/CVE-2018-19287.md
index 396cdf7f257..a1a916f53f2 100644
--- a/2018/CVE-2018-19287.md
+++ b/2018/CVE-2018-19287.md
@@ -15,3 +15,5 @@ XSS in the Ninja Forms plugin before 3.3.18 for WordPress allows Remote Attacker
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19287.yaml
diff --git a/2018/CVE-2018-19326.md b/2018/CVE-2018-19326.md
index 6cb41ca42c6..7e4450763b6 100644
--- a/2018/CVE-2018-19326.md
+++ b/2018/CVE-2018-19326.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19326.yaml
diff --git a/2018/CVE-2018-19365.md b/2018/CVE-2018-19365.md
index ff5f1c8e0cb..b8e2b001d57 100644
--- a/2018/CVE-2018-19365.md
+++ b/2018/CVE-2018-19365.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19365.yaml
diff --git a/2018/CVE-2018-19386.md b/2018/CVE-2018-19386.md
index a5a7aa786a5..87d1070d279 100644
--- a/2018/CVE-2018-19386.md
+++ b/2018/CVE-2018-19386.md
@@ -15,3 +15,5 @@ SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflec
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19386.yaml
diff --git a/2018/CVE-2018-19410.md b/2018/CVE-2018-19410.md
index 7194a3e2b65..2c5bf5480b0 100644
--- a/2018/CVE-2018-19410.md
+++ b/2018/CVE-2018-19410.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/himash/CVE-2018-19410-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19410.yaml
diff --git a/2018/CVE-2018-19439.md b/2018/CVE-2018-19439.md
index 846f03d23aa..81701b32512 100644
--- a/2018/CVE-2018-19439.md
+++ b/2018/CVE-2018-19439.md
@@ -16,3 +16,5 @@ XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 200
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19439.yaml
diff --git a/2018/CVE-2018-19458.md b/2018/CVE-2018-19458.md
index b8e7648b067..c8d87059400 100644
--- a/2018/CVE-2018-19458.md
+++ b/2018/CVE-2018-19458.md
@@ -16,3 +16,5 @@ In PHP Proxy 3.0.3, any user can read files from the server without authenticati
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19458.yaml
diff --git a/2018/CVE-2018-19518.md b/2018/CVE-2018-19518.md
index 03c602e3431..3ae0eff295e 100644
--- a/2018/CVE-2018-19518.md
+++ b/2018/CVE-2018-19518.md
@@ -22,3 +22,5 @@ University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in P
 - https://github.com/ensimag-security/CVE-2018-19518
 - https://github.com/houqe/EXP_CVE-2018-19518
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2018/CVE-2018-19518.yaml
diff --git a/2018/CVE-2018-19749.md b/2018/CVE-2018-19749.md
index d84394f5a6d..6279ac78afd 100644
--- a/2018/CVE-2018-19749.md
+++ b/2018/CVE-2018-19749.md
@@ -16,3 +16,5 @@ DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner nam
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19749.yaml
diff --git a/2018/CVE-2018-19751.md b/2018/CVE-2018-19751.md
index 3026cee9f41..c7026050b36 100644
--- a/2018/CVE-2018-19751.md
+++ b/2018/CVE-2018-19751.md
@@ -16,3 +16,5 @@ DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field f
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19751.yaml
diff --git a/2018/CVE-2018-19752.md b/2018/CVE-2018-19752.md
index 29fb363565b..8693e7480b4 100644
--- a/2018/CVE-2018-19752.md
+++ b/2018/CVE-2018-19752.md
@@ -16,3 +16,5 @@ DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field f
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19752.yaml
diff --git a/2018/CVE-2018-19753.md b/2018/CVE-2018-19753.md
index 6fee2803475..22639ef6884 100644
--- a/2018/CVE-2018-19753.md
+++ b/2018/CVE-2018-19753.md
@@ -16,3 +16,5 @@ Tarantella Enterprise before 3.11 allows Directory Traversal.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19753.yaml
diff --git a/2018/CVE-2018-19877.md b/2018/CVE-2018-19877.md
index 24be69507e8..5b23ae9493d 100644
--- a/2018/CVE-2018-19877.md
+++ b/2018/CVE-2018-19877.md
@@ -15,3 +15,5 @@ login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login Button Refer
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19877.yaml
diff --git a/2018/CVE-2018-19892.md b/2018/CVE-2018-19892.md
index 4072b489f01..777a7e89516 100644
--- a/2018/CVE-2018-19892.md
+++ b/2018/CVE-2018-19892.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19892.yaml
diff --git a/2018/CVE-2018-19914.md b/2018/CVE-2018-19914.md
index da5c3f3afeb..daec747dda8 100644
--- a/2018/CVE-2018-19914.md
+++ b/2018/CVE-2018-19914.md
@@ -16,3 +16,5 @@ DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or not
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19914.yaml
diff --git a/2018/CVE-2018-19915.md b/2018/CVE-2018-19915.md
index b8ebd399ba7..949a3d327f5 100644
--- a/2018/CVE-2018-19915.md
+++ b/2018/CVE-2018-19915.md
@@ -16,3 +16,5 @@ DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19915.yaml
diff --git a/2018/CVE-2018-20009.md b/2018/CVE-2018-20009.md
index 5c1cc793e1e..002157b5c83 100644
--- a/2018/CVE-2018-20009.md
+++ b/2018/CVE-2018-20009.md
@@ -16,3 +16,5 @@ DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20009.yaml
diff --git a/2018/CVE-2018-20010.md b/2018/CVE-2018-20010.md
index 5ae403b8e8b..4a97caf2f66 100644
--- a/2018/CVE-2018-20010.md
+++ b/2018/CVE-2018-20010.md
@@ -16,3 +16,5 @@ DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username f
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20010.yaml
diff --git a/2018/CVE-2018-20011.md b/2018/CVE-2018-20011.md
index e3e7c26b7e1..6ef73afb4e4 100644
--- a/2018/CVE-2018-20011.md
+++ b/2018/CVE-2018-20011.md
@@ -16,3 +16,5 @@ DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stake
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20011.yaml
diff --git a/2018/CVE-2018-20062.md b/2018/CVE-2018-20062.md
index 00a6108bd5a..a6fdc470c14 100644
--- a/2018/CVE-2018-20062.md
+++ b/2018/CVE-2018-20062.md
@@ -17,3 +17,5 @@ An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows r
 #### Github
 - https://github.com/yilin1203/CVE-2018-20062
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20062.yaml
diff --git a/2018/CVE-2018-20462.md b/2018/CVE-2018-20462.md
index 5571ab3b20b..f5def4d6552 100644
--- a/2018/CVE-2018-20462.md
+++ b/2018/CVE-2018-20462.md
@@ -15,3 +15,5 @@ An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. A cross-site
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20462.yaml
diff --git a/2018/CVE-2018-20463.md b/2018/CVE-2018-20463.md
index 985be7e2e4d..d3ac7b32516 100644
--- a/2018/CVE-2018-20463.md
+++ b/2018/CVE-2018-20463.md
@@ -15,3 +15,5 @@ An issue was discovered in the JSmol2WP plugin 1.07 for WordPress. There is an a
 #### Github
 - https://github.com/Henry4E36/CVE-2018-20463
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20463.yaml
diff --git a/2018/CVE-2018-20470.md b/2018/CVE-2018-20470.md
index 54709b4834f..80d7cdf19a2 100644
--- a/2018/CVE-2018-20470.md
+++ b/2018/CVE-2018-20470.md
@@ -16,3 +16,5 @@ An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory tr
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20470.yaml
diff --git a/2018/CVE-2018-20526.md b/2018/CVE-2018-20526.md
index 98d8df5c644..1256aac997f 100644
--- a/2018/CVE-2018-20526.md
+++ b/2018/CVE-2018-20526.md
@@ -16,3 +16,5 @@ Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20526.yaml
diff --git a/2018/CVE-2018-20608.md b/2018/CVE-2018-20608.md
index dcdb804d73b..79c5f46c878 100644
--- a/2018/CVE-2018-20608.md
+++ b/2018/CVE-2018-20608.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20608.yaml
diff --git a/2018/CVE-2018-20824.md b/2018/CVE-2018-20824.md
index b4e0b3519a4..63a30a7b8aa 100644
--- a/2018/CVE-2018-20824.md
+++ b/2018/CVE-2018-20824.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20824.yaml
diff --git a/2018/CVE-2018-20985.md b/2018/CVE-2018-20985.md
index 47ee5399b4a..c7dfc222de5 100644
--- a/2018/CVE-2018-20985.md
+++ b/2018/CVE-2018-20985.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20985.yaml
diff --git a/2018/CVE-2018-2392.md b/2018/CVE-2018-2392.md
index 106688dae2e..4786b6f3b7a 100644
--- a/2018/CVE-2018-2392.md
+++ b/2018/CVE-2018-2392.md
@@ -19,3 +19,5 @@ Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45,
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-2392.yaml
diff --git a/2018/CVE-2018-25031.md b/2018/CVE-2018-25031.md
index 78337e2cf58..ffdffd851fa 100644
--- a/2018/CVE-2018-25031.md
+++ b/2018/CVE-2018-25031.md
@@ -29,3 +29,5 @@ Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing a
 - https://github.com/rafaelcintralopes/SwaggerUI-CVE-2018-25031
 - https://github.com/rasinfosec/CVE-2018-25031
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2018/CVE-2018-25031.yaml
diff --git a/2018/CVE-2018-25114.md b/2018/CVE-2018-25114.md
index 8318cf26797..75af5d4f187 100644
--- a/2018/CVE-2018-25114.md
+++ b/2018/CVE-2018-25114.md
@@ -17,3 +17,5 @@ A remote code execution vulnerability exists within osCommerce Online Merchant v
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-25114.yaml
diff --git a/2018/CVE-2018-2628.md b/2018/CVE-2018-2628.md
index 9dfe72d0ded..97943bd70f7 100644
--- a/2018/CVE-2018-2628.md
+++ b/2018/CVE-2018-2628.md
@@ -54,3 +54,5 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar
 - https://github.com/welove88888/k8
 - https://github.com/wrysunny/cve-2018-2628
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2018/CVE-2018-2628.yaml
diff --git a/2018/CVE-2018-2791.md b/2018/CVE-2018-2791.md
index 17f40c6a665..68ef3b39c22 100644
--- a/2018/CVE-2018-2791.md
+++ b/2018/CVE-2018-2791.md
@@ -18,3 +18,5 @@ Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middlewar
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-2791.yaml
diff --git a/2018/CVE-2018-2893.md b/2018/CVE-2018-2893.md
index 23a0513443c..36abd579bee 100644
--- a/2018/CVE-2018-2893.md
+++ b/2018/CVE-2018-2893.md
@@ -28,3 +28,5 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar
 - https://github.com/shengqi158/CVE-2018-2628
 - https://github.com/sry309/CVE-2018-2893
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2018/CVE-2018-2893.yaml
diff --git a/2018/CVE-2018-2894.md b/2018/CVE-2018-2894.md
index 3b53e5a18ae..54d77fdad30 100644
--- a/2018/CVE-2018-2894.md
+++ b/2018/CVE-2018-2894.md
@@ -19,3 +19,5 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar
 - https://github.com/LandGrey/CVE-2018-2894
 - https://github.com/jas502n/CVE-2018-2894
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-2894.yaml
diff --git a/2018/CVE-2018-3167.md b/2018/CVE-2018-3167.md
index 02e4cc5f254..d6cb79df42c 100644
--- a/2018/CVE-2018-3167.md
+++ b/2018/CVE-2018-3167.md
@@ -20,3 +20,5 @@ Vulnerability in the Application Management Pack for Oracle E-Business Suite com
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-3167.yaml
diff --git a/2018/CVE-2018-3238.md b/2018/CVE-2018-3238.md
index a3d04f71dd8..4c8de80a3f8 100644
--- a/2018/CVE-2018-3238.md
+++ b/2018/CVE-2018-3238.md
@@ -15,3 +15,5 @@ Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middlewar
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-3238.yaml
diff --git a/2018/CVE-2018-3714.md b/2018/CVE-2018-3714.md
index 3acfe5a025b..b575aaf62e4 100644
--- a/2018/CVE-2018-3714.md
+++ b/2018/CVE-2018-3714.md
@@ -15,3 +15,5 @@ node-srv node module suffers from a Path Traversal vulnerability due to lack of
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-3714.yaml
diff --git a/2018/CVE-2018-3760.md b/2018/CVE-2018-3760.md
index b590f693a15..c49ab8dcbf5 100644
--- a/2018/CVE-2018-3760.md
+++ b/2018/CVE-2018-3760.md
@@ -17,3 +17,5 @@ There is an information leak vulnerability in Sprockets. Versions Affected: 4.0.
 - https://github.com/mpgn/CVE-2018-3760
 - https://github.com/wudidwo/CVE-2018-3760-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-3760.yaml
diff --git a/2018/CVE-2018-3810.md b/2018/CVE-2018-3810.md
index 3c115b0a1e5..6a623ec54f6 100644
--- a/2018/CVE-2018-3810.md
+++ b/2018/CVE-2018-3810.md
@@ -19,3 +19,5 @@ Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plu
 - https://github.com/lucad93/CVE-2018-3810
 - https://github.com/nth347/CVE-2018-3810_exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-3810.yaml
diff --git a/2018/CVE-2018-5230.md b/2018/CVE-2018-5230.md
index 6e22c445b75..502a8eb1288 100644
--- a/2018/CVE-2018-5230.md
+++ b/2018/CVE-2018-5230.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-5230.yaml
diff --git a/2018/CVE-2018-5233.md b/2018/CVE-2018-5233.md
index 083a596624f..a066fae0eae 100644
--- a/2018/CVE-2018-5233.md
+++ b/2018/CVE-2018-5233.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in system/src/Grav/Common/Twig/Twig.php
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-5233.yaml
diff --git a/2018/CVE-2018-5316.md b/2018/CVE-2018-5316.md
index dea0e3f99cb..cf971c292e6 100644
--- a/2018/CVE-2018-5316.md
+++ b/2018/CVE-2018-5316.md
@@ -15,3 +15,5 @@ The "SagePay Server Gateway for WooCommerce" plugin before 1.0.9 for WordPress h
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-5316.yaml
diff --git a/2018/CVE-2018-5715.md b/2018/CVE-2018-5715.md
index 20b1ca1d8d0..7b14c1f21ef 100644
--- a/2018/CVE-2018-5715.md
+++ b/2018/CVE-2018-5715.md
@@ -15,3 +15,5 @@ phprint.php in SugarCRM 3.5.1 has XSS via a parameter name in the query string (
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-5715.yaml
diff --git a/2018/CVE-2018-6008.md b/2018/CVE-2018-6008.md
index 996feef2d69..536f0f1be88 100644
--- a/2018/CVE-2018-6008.md
+++ b/2018/CVE-2018-6008.md
@@ -16,3 +16,5 @@ Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6008.yaml
diff --git a/2018/CVE-2018-6184.md b/2018/CVE-2018-6184.md
index 119b8da78c9..dc004fd63e6 100644
--- a/2018/CVE-2018-6184.md
+++ b/2018/CVE-2018-6184.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/ossf-cve-benchmark/CVE-2018-6184
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6184.yaml
diff --git a/2018/CVE-2018-6200.md b/2018/CVE-2018-6200.md
index f0944b9ccd1..312bbc3051a 100644
--- a/2018/CVE-2018-6200.md
+++ b/2018/CVE-2018-6200.md
@@ -15,3 +15,5 @@ vBulletin 3.x.x and 4.2.x through 4.2.5 has an open redirect via the redirector.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6200.yaml
diff --git a/2018/CVE-2018-6530.md b/2018/CVE-2018-6530.md
index 65f99cc83b7..c1a1be51c2d 100644
--- a/2018/CVE-2018-6530.md
+++ b/2018/CVE-2018-6530.md
@@ -16,3 +16,5 @@ OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Lin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6530.yaml
diff --git a/2018/CVE-2018-6605.md b/2018/CVE-2018-6605.md
index 36ce1bd62b0..0aef764947d 100644
--- a/2018/CVE-2018-6605.md
+++ b/2018/CVE-2018-6605.md
@@ -15,3 +15,5 @@ SQL Injection exists in the Zh BaiduMap 3.0.0.1 component for Joomla! via the id
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6605.yaml
diff --git a/2018/CVE-2018-6882.md b/2018/CVE-2018-6882.md
index 1cdf9bb54b8..564509ee358 100644
--- a/2018/CVE-2018-6882.md
+++ b/2018/CVE-2018-6882.md
@@ -16,3 +16,5 @@ Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkH
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6882.yaml
diff --git a/2018/CVE-2018-6910.md b/2018/CVE-2018-6910.md
index 4c4d5a1433d..2df3dcdd1bf 100644
--- a/2018/CVE-2018-6910.md
+++ b/2018/CVE-2018-6910.md
@@ -15,3 +15,5 @@ DedeCMS 5.7 allows remote attackers to discover the full path via a direct reque
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6910.yaml
diff --git a/2018/CVE-2018-6961.md b/2018/CVE-2018-6961.md
index 12d373ac577..88c23f01bf7 100644
--- a/2018/CVE-2018-6961.md
+++ b/2018/CVE-2018-6961.md
@@ -17,3 +17,5 @@ VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command in
 - https://github.com/bokanrb/CVE-2018-6961
 - https://github.com/r3dxpl0it/CVE-2018-6961
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6961.yaml
diff --git a/2018/CVE-2018-7192.md b/2018/CVE-2018-7192.md
index 81c9722c25d..540067865ee 100644
--- a/2018/CVE-2018-7192.md
+++ b/2018/CVE-2018-7192.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in /ajax.php/form/help-topic in Enhance
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7192.yaml
diff --git a/2018/CVE-2018-7193.md b/2018/CVE-2018-7193.md
index fe2474b4f09..ae070d9c7e6 100644
--- a/2018/CVE-2018-7193.md
+++ b/2018/CVE-2018-7193.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in /scp/directory.php in Enhancesoft os
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7193.yaml
diff --git a/2018/CVE-2018-7196.md b/2018/CVE-2018-7196.md
index 99260ecfa28..84989640aa8 100644
--- a/2018/CVE-2018-7196.md
+++ b/2018/CVE-2018-7196.md
@@ -15,3 +15,5 @@ Cross-site scripting (XSS) vulnerability in /scp/index.php in Enhancesoft osTick
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7196.yaml
diff --git a/2018/CVE-2018-7251.md b/2018/CVE-2018-7251.md
index 1cf0e1e76dd..1899c70b852 100644
--- a/2018/CVE-2018-7251.md
+++ b/2018/CVE-2018-7251.md
@@ -16,3 +16,5 @@ An issue was discovered in config/error.php in Anchor 0.12.3. The error log is e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7251.yaml
diff --git a/2018/CVE-2018-7282.md b/2018/CVE-2018-7282.md
index be019830ddb..8ca391010f2 100644
--- a/2018/CVE-2018-7282.md
+++ b/2018/CVE-2018-7282.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7282.yaml
diff --git a/2018/CVE-2018-7314.md b/2018/CVE-2018-7314.md
index 186d424927e..b70d475229e 100644
--- a/2018/CVE-2018-7314.md
+++ b/2018/CVE-2018-7314.md
@@ -15,3 +15,5 @@ SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the ses
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7314.yaml
diff --git a/2018/CVE-2018-7422.md b/2018/CVE-2018-7422.md
index 34453619751..0ec00575052 100644
--- a/2018/CVE-2018-7422.md
+++ b/2018/CVE-2018-7422.md
@@ -18,3 +18,5 @@ A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for
 - https://github.com/0x00-0x00/CVE-2018-7422
 - https://github.com/ndr-repo/CVE-2018-7422
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7422.yaml
diff --git a/2018/CVE-2018-7467.md b/2018/CVE-2018-7467.md
index 01b6dde6f17..8f7dd3cf2af 100644
--- a/2018/CVE-2018-7467.md
+++ b/2018/CVE-2018-7467.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7467.yaml
diff --git a/2018/CVE-2018-7490.md b/2018/CVE-2018-7490.md
index ff8f0e17d5c..0118f4905a9 100644
--- a/2018/CVE-2018-7490.md
+++ b/2018/CVE-2018-7490.md
@@ -15,3 +15,5 @@ uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-doc
 #### Github
 - https://github.com/qinzhu111/uWSGI-CVE-2018-7490-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7490.yaml
diff --git a/2018/CVE-2018-7600.md b/2018/CVE-2018-7600.md
index 9ff81fd78ec..d98396c07e4 100644
--- a/2018/CVE-2018-7600.md
+++ b/2018/CVE-2018-7600.md
@@ -74,3 +74,5 @@ Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1
 - https://github.com/ynsmroztas/drupalhunter
 - https://github.com/zhzyker/CVE-2018-7600-Drupal-POC-EXP
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7600.yaml
diff --git a/2018/CVE-2018-7602.md b/2018/CVE-2018-7602.md
index d3b3534d03b..fde69ba7278 100644
--- a/2018/CVE-2018-7602.md
+++ b/2018/CVE-2018-7602.md
@@ -24,3 +24,5 @@ A remote code execution vulnerability exists within multiple subsystems of Drupa
 - https://github.com/pimps/CVE-2018-7600
 - https://github.com/rithchard/Drupalgeddon3
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7602.yaml
diff --git a/2018/CVE-2018-7653.md b/2018/CVE-2018-7653.md
index bf23f075f91..bc41d6a73f2 100644
--- a/2018/CVE-2018-7653.md
+++ b/2018/CVE-2018-7653.md
@@ -16,3 +16,5 @@ In YzmCMS 3.6, index.php has XSS via the a, c, or m parameter.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7653.yaml
diff --git a/2018/CVE-2018-7662.md b/2018/CVE-2018-7662.md
index 6f51a6b8e8b..43157d7e921 100644
--- a/2018/CVE-2018-7662.md
+++ b/2018/CVE-2018-7662.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7662.yaml
diff --git a/2018/CVE-2018-7700.md b/2018/CVE-2018-7700.md
index f63f6ef0b20..568f9e339f2 100644
--- a/2018/CVE-2018-7700.md
+++ b/2018/CVE-2018-7700.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7700.yaml
diff --git a/2018/CVE-2018-7719.md b/2018/CVE-2018-7719.md
index 2e9813fd8f1..521ea1d3821 100644
--- a/2018/CVE-2018-7719.md
+++ b/2018/CVE-2018-7719.md
@@ -15,3 +15,5 @@ Acrolinx Server before 5.2.5 on Windows allows Directory Traversal.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7719.yaml
diff --git a/2018/CVE-2018-7765.md b/2018/CVE-2018-7765.md
index 0349e24a7c9..c7bc4feed3f 100644
--- a/2018/CVE-2018-7765.md
+++ b/2018/CVE-2018-7765.md
@@ -15,3 +15,5 @@ The vulnerability exists within processing of track_import_export.php in Schneid
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7765.yaml
diff --git a/2018/CVE-2018-7841.md b/2018/CVE-2018-7841.md
index ccfc2220020..35b7e548fad 100644
--- a/2018/CVE-2018-7841.md
+++ b/2018/CVE-2018-7841.md
@@ -17,3 +17,5 @@ A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software versi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7841.yaml
diff --git a/2018/CVE-2018-8006.md b/2018/CVE-2018-8006.md
index b60038eceb2..2a9bbc70514 100644
--- a/2018/CVE-2018-8006.md
+++ b/2018/CVE-2018-8006.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8006.yaml
diff --git a/2018/CVE-2018-8011.md b/2018/CVE-2018-8011.md
index 688bf643709..a096331b1da 100644
--- a/2018/CVE-2018-8011.md
+++ b/2018/CVE-2018-8011.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2018/CVE-2018-8011.yaml
diff --git a/2018/CVE-2018-8024.md b/2018/CVE-2018-8024.md
index 62f1b1a6b3f..dcd6a79c01c 100644
--- a/2018/CVE-2018-8024.md
+++ b/2018/CVE-2018-8024.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8024.yaml
diff --git a/2018/CVE-2018-8033.md b/2018/CVE-2018-8033.md
index f8b0cd1a137..0a0477dbf41 100644
--- a/2018/CVE-2018-8033.md
+++ b/2018/CVE-2018-8033.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/Cappricio-Securities/CVE-2018-8033
 - https://github.com/jamieparfet/Apache-OFBiz-XXE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8033.yaml
diff --git a/2018/CVE-2018-8715.md b/2018/CVE-2018-8715.md
index 5417828c09e..754a1d7a060 100644
--- a/2018/CVE-2018-8715.md
+++ b/2018/CVE-2018-8715.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8715.yaml
diff --git a/2018/CVE-2018-8719.md b/2018/CVE-2018-8719.md
index 1039fa0674f..4e767817678 100644
--- a/2018/CVE-2018-8719.md
+++ b/2018/CVE-2018-8719.md
@@ -15,3 +15,5 @@ An issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8719.yaml
diff --git a/2018/CVE-2018-8727.md b/2018/CVE-2018-8727.md
index 14210841de8..8ef4ce6b61c 100644
--- a/2018/CVE-2018-8727.md
+++ b/2018/CVE-2018-8727.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8727.yaml
diff --git a/2018/CVE-2018-8770.md b/2018/CVE-2018-8770.md
index e79183af96f..d24e0117ce2 100644
--- a/2018/CVE-2018-8770.md
+++ b/2018/CVE-2018-8770.md
@@ -15,3 +15,5 @@ Physical path Leakage exists in Western Bridge Cobub Razor 0.8.0 via generate.ph
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8770.yaml
diff --git a/2018/CVE-2018-8823.md b/2018/CVE-2018-8823.md
index 57e5f8c060d..8fbe43a7580 100644
--- a/2018/CVE-2018-8823.md
+++ b/2018/CVE-2018-8823.md
@@ -15,3 +15,5 @@ modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vert
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8823.yaml
diff --git a/2018/CVE-2018-9118.md b/2018/CVE-2018-9118.md
index a95bf1d04e1..e851b3c3db0 100644
--- a/2018/CVE-2018-9118.md
+++ b/2018/CVE-2018-9118.md
@@ -16,3 +16,5 @@ exports/download.php in the 99 Robots WP Background Takeover Advertisements plug
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-9118.yaml
diff --git a/2018/CVE-2018-9161.md b/2018/CVE-2018-9161.md
index 18e59b9d2db..8891f785564 100644
--- a/2018/CVE-2018-9161.md
+++ b/2018/CVE-2018-9161.md
@@ -16,3 +16,5 @@ Prisma Industriale Checkweigher PrismaWEB 1.21 allows remote attackers to discov
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-9161.yaml
diff --git a/2018/CVE-2018-9205.md b/2018/CVE-2018-9205.md
index 08631e27485..8f7db5b0321 100644
--- a/2018/CVE-2018-9205.md
+++ b/2018/CVE-2018-9205.md
@@ -15,3 +15,5 @@ Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't v
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-9205.yaml
diff --git a/2018/CVE-2018-9206.md b/2018/CVE-2018-9206.md
index 1e8afda347e..52e44e31828 100644
--- a/2018/CVE-2018-9206.md
+++ b/2018/CVE-2018-9206.md
@@ -22,3 +22,5 @@ Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Uploa
 - https://github.com/liemkaka/CVE-2018-9206
 - https://github.com/mi-hood/CVE-2018-9206
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-9206.yaml
diff --git a/2018/CVE-2018-9845.md b/2018/CVE-2018-9845.md
index 09ae7ad8c53..b6c92191e9a 100644
--- a/2018/CVE-2018-9845.md
+++ b/2018/CVE-2018-9845.md
@@ -15,3 +15,5 @@ Etherpad Lite before 1.6.4 is exploitable for admin access.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-9845.yaml
diff --git a/2018/CVE-2018-9995.md b/2018/CVE-2018-9995.md
index c4beb4e993a..00bb8b8275c 100644
--- a/2018/CVE-2018-9995.md
+++ b/2018/CVE-2018-9995.md
@@ -41,3 +41,5 @@ TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in
 - https://github.com/tausifzaman/cctv-hack
 - https://github.com/thaipc2021/camera
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-9995.yaml
diff --git a/2019/CVE-2019-0192.md b/2019/CVE-2019-0192.md
index bd172869d64..b459142b967 100644
--- a/2019/CVE-2019-0192.md
+++ b/2019/CVE-2019-0192.md
@@ -17,3 +17,5 @@ In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows
 - https://github.com/Rapidsafeguard/Solr-RCE-CVE-2019-0192
 - https://github.com/mpgn/CVE-2019-0192
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-0192.yaml
diff --git a/2019/CVE-2019-0193.md b/2019/CVE-2019-0193.md
index 37361ee1068..1c75d50c3ad 100644
--- a/2019/CVE-2019-0193.md
+++ b/2019/CVE-2019-0193.md
@@ -21,3 +21,5 @@ No PoCs from references.
 - https://github.com/scxiaotan1/Docker
 - https://github.com/xConsoIe/CVE-2019-0193
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-0193.yaml
diff --git a/2019/CVE-2019-0221.md b/2019/CVE-2019-0221.md
index c5aabc3016c..ad5ec23743e 100644
--- a/2019/CVE-2019-0221.md
+++ b/2019/CVE-2019-0221.md
@@ -20,3 +20,5 @@ The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-0221.yaml
diff --git a/2019/CVE-2019-0230.md b/2019/CVE-2019-0230.md
index 3a1e0a98f8b..163b87d8f4a 100644
--- a/2019/CVE-2019-0230.md
+++ b/2019/CVE-2019-0230.md
@@ -29,3 +29,5 @@ Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on r
 - https://github.com/s1kr10s/Apache-Struts-v4
 - https://github.com/techgyu/WHS
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-0230.yaml
diff --git a/2019/CVE-2019-0232.md b/2019/CVE-2019-0232.md
index 6c1c6cf0f46..42d4318c847 100644
--- a/2019/CVE-2019-0232.md
+++ b/2019/CVE-2019-0232.md
@@ -35,3 +35,5 @@ When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in
 - https://github.com/x3m1Sec/CVE-2019-0232_tomcat_cgi_exploit
 - https://github.com/xsxtw/CVE-2019-0232
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-0232.yaml
diff --git a/2019/CVE-2019-0604.md b/2019/CVE-2019-0604.md
index 519bb5a205f..01c4f8394a3 100644
--- a/2019/CVE-2019-0604.md
+++ b/2019/CVE-2019-0604.md
@@ -33,3 +33,5 @@ No PoCs from references.
 - https://github.com/linhlhq/CVE-2019-0604
 - https://github.com/m5050/CVE-2019-0604
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2019/CVE-2019-0604.yaml
diff --git a/2019/CVE-2019-1003000.md b/2019/CVE-2019-1003000.md
index 4310cf12092..f6a77e0de72 100644
--- a/2019/CVE-2019-1003000.md
+++ b/2019/CVE-2019-1003000.md
@@ -19,3 +19,5 @@ A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier
 - https://github.com/purple-WL/Jenkins_CVE-2019-1003000
 - https://github.com/slowmistio/CVE-2019-1003000-and-CVE-2018-1999002-Pre-Auth-RCE-Jenkins
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1003000.yaml
diff --git a/2019/CVE-2019-1003030.md b/2019/CVE-2019-1003030.md
index 245f0157f8c..1db4752b64c 100644
--- a/2019/CVE-2019-1003030.md
+++ b/2019/CVE-2019-1003030.md
@@ -17,3 +17,5 @@ A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 an
 - https://github.com/Cashiuus/jenkins-checkscript-rce
 - https://github.com/overgrowncarrot1/CVE-2019-1003030
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1003030.yaml
diff --git a/2019/CVE-2019-10068.md b/2019/CVE-2019-10068.md
index abdb9fd2871..197c1cb6b96 100644
--- a/2019/CVE-2019-10068.md
+++ b/2019/CVE-2019-10068.md
@@ -17,3 +17,5 @@ An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48,
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10068.yaml
diff --git a/2019/CVE-2019-10092.md b/2019/CVE-2019-10092.md
index a8cdca5b4a8..c227522305c 100644
--- a/2019/CVE-2019-10092.md
+++ b/2019/CVE-2019-10092.md
@@ -20,3 +20,5 @@ In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was rep
 - https://github.com/mbadanoiu/CVE-2019-10092
 - https://github.com/motikan2010/CVE-2019-10092_Docker
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10092.yaml
diff --git a/2019/CVE-2019-10098.md b/2019/CVE-2019-10098.md
index cafac04a605..91ea0fb7e20 100644
--- a/2019/CVE-2019-10098.md
+++ b/2019/CVE-2019-10098.md
@@ -18,3 +18,5 @@ In Apache HTTP server 2.4.0 to 2.4.39, Redirects configured with mod_rewrite tha
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10098.yaml
diff --git a/2019/CVE-2019-1010287.md b/2019/CVE-2019-1010287.md
index eeceabd3557..8de2bc54531 100644
--- a/2019/CVE-2019-1010287.md
+++ b/2019/CVE-2019-1010287.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1010287.yaml
diff --git a/2019/CVE-2019-1010290.md b/2019/CVE-2019-1010290.md
index d41fc15a8a9..c31c19f34f6 100644
--- a/2019/CVE-2019-1010290.md
+++ b/2019/CVE-2019-1010290.md
@@ -15,3 +15,5 @@ Babel: Multilingual site Babel All is affected by: Open Redirection. The impact
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1010290.yaml
diff --git a/2019/CVE-2019-10232.md b/2019/CVE-2019-10232.md
index 2d0082eb107..1bd60311754 100644
--- a/2019/CVE-2019-10232.md
+++ b/2019/CVE-2019-10232.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10232.yaml
diff --git a/2019/CVE-2019-10405.md b/2019/CVE-2019-10405.md
index 90add065f1c..29ece4f647b 100644
--- a/2019/CVE-2019-10405.md
+++ b/2019/CVE-2019-10405.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10405.yaml
diff --git a/2019/CVE-2019-10475.md b/2019/CVE-2019-10475.md
index a15bc2deeb3..15ed381b706 100644
--- a/2019/CVE-2019-10475.md
+++ b/2019/CVE-2019-10475.md
@@ -15,3 +15,5 @@ A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin a
 #### Github
 - https://github.com/vesche/CVE-2019-10475
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10475.yaml
diff --git a/2019/CVE-2019-10647.md b/2019/CVE-2019-10647.md
index dda8d878f72..1a129d3abd1 100644
--- a/2019/CVE-2019-10647.md
+++ b/2019/CVE-2019-10647.md
@@ -15,3 +15,5 @@ ZZZCMS zzzphp v1.6.3 allows remote attackers to execute arbitrary PHP code via a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2019-10647.yaml
diff --git a/2019/CVE-2019-10692.md b/2019/CVE-2019-10692.md
index 347a4741b64..99d2c347553 100644
--- a/2019/CVE-2019-10692.md
+++ b/2019/CVE-2019-10692.md
@@ -15,3 +15,5 @@ In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10692.yaml
diff --git a/2019/CVE-2019-10717.md b/2019/CVE-2019-10717.md
index 48e4275c522..31777a7cea3 100644
--- a/2019/CVE-2019-10717.md
+++ b/2019/CVE-2019-10717.md
@@ -15,3 +15,5 @@ BlogEngine.NET 3.3.7.0 allows /api/filemanager Directory Traversal via the path
 #### Github
 - https://github.com/ArtemCyberLab/Project-Exfilibur-Quest
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10717.yaml
diff --git a/2019/CVE-2019-10758.md b/2019/CVE-2019-10758.md
index f4f20fe73f0..03018f82d63 100644
--- a/2019/CVE-2019-10758.md
+++ b/2019/CVE-2019-10758.md
@@ -18,3 +18,5 @@ mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints
 - https://github.com/masahiro331/CVE-2019-10758
 - https://github.com/ossf-cve-benchmark/CVE-2019-10758
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10758.yaml
diff --git a/2019/CVE-2019-11013.md b/2019/CVE-2019-11013.md
index 453e4331d3a..d679f424987 100644
--- a/2019/CVE-2019-11013.md
+++ b/2019/CVE-2019-11013.md
@@ -15,3 +15,5 @@ Nimble Streamer 3.0.2-2 through 3.5.4-9 has a ../ directory traversal vulnerabil
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11013.yaml
diff --git a/2019/CVE-2019-11043.md b/2019/CVE-2019-11043.md
index fd1a561a601..a7ec1a8e2ce 100644
--- a/2019/CVE-2019-11043.md
+++ b/2019/CVE-2019-11043.md
@@ -43,3 +43,5 @@ In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in
 - https://github.com/tinker-li/CVE-2019-11043
 - https://github.com/ypereirareis/docker-CVE-2019-11043
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11043.yaml
diff --git a/2019/CVE-2019-11248.md b/2019/CVE-2019-11248.md
index c9e336403da..f6f35cf1507 100644
--- a/2019/CVE-2019-11248.md
+++ b/2019/CVE-2019-11248.md
@@ -27,3 +27,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11248.yaml
diff --git a/2019/CVE-2019-11253.md b/2019/CVE-2019-11253.md
index 4e1a47d02f8..a6fa1fa99e3 100644
--- a/2019/CVE-2019-11253.md
+++ b/2019/CVE-2019-11253.md
@@ -30,3 +30,5 @@ Improper input validation in the Kubernetes API server in versions v1.0-1.12 and
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11253.yaml
diff --git a/2019/CVE-2019-11370.md b/2019/CVE-2019-11370.md
index c8e06ad1685..ff9c84d5cfc 100644
--- a/2019/CVE-2019-11370.md
+++ b/2019/CVE-2019-11370.md
@@ -15,3 +15,5 @@ Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11370.yaml
diff --git a/2019/CVE-2019-11507.md b/2019/CVE-2019-11507.md
index 0c8652a0c0c..c26dda6fe7b 100644
--- a/2019/CVE-2019-11507.md
+++ b/2019/CVE-2019-11507.md
@@ -17,3 +17,5 @@ In Pulse Secure Pulse Connect Secure (PCS) 8.3.x before 8.3R7.1 and 9.0.x before
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11507.yaml
diff --git a/2019/CVE-2019-11510.md b/2019/CVE-2019-11510.md
index a831050c06c..9395b642f8c 100644
--- a/2019/CVE-2019-11510.md
+++ b/2019/CVE-2019-11510.md
@@ -31,3 +31,5 @@ In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7
 - https://github.com/pwn3z/CVE-2019-11510-PulseVPN
 - https://github.com/tanm-sys/secure-ssl-vpn-exploit-kit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11510.yaml
diff --git a/2019/CVE-2019-11580.md b/2019/CVE-2019-11580.md
index d7fa5f97bcf..38da88687d5 100644
--- a/2019/CVE-2019-11580.md
+++ b/2019/CVE-2019-11580.md
@@ -22,3 +22,5 @@ Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin inco
 - https://github.com/jas502n/CVE-2019-11580
 - https://github.com/shelld3v/CVE-2019-11580
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11580.yaml
diff --git a/2019/CVE-2019-11581.md b/2019/CVE-2019-11581.md
index e4644596084..afa8b6c0827 100644
--- a/2019/CVE-2019-11581.md
+++ b/2019/CVE-2019-11581.md
@@ -23,3 +23,5 @@ No PoCs from references.
 - https://github.com/jas502n/CVE-2019-11581
 - https://github.com/kobs0N/CVE-2019-11581
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11581.yaml
diff --git a/2019/CVE-2019-11869.md b/2019/CVE-2019-11869.md
index 75fb29a142d..29f02b71267 100644
--- a/2019/CVE-2019-11869.md
+++ b/2019/CVE-2019-11869.md
@@ -17,3 +17,5 @@ The Yuzo Related Posts plugin 5.12.94 for WordPress has XSS because it mistakenl
 #### Github
 - https://github.com/gitrecon1455/CVE-2019-11869
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11869.yaml
diff --git a/2019/CVE-2019-11886.md b/2019/CVE-2019-11886.md
index 1afa2967adf..7c968f82ee2 100644
--- a/2019/CVE-2019-11886.md
+++ b/2019/CVE-2019-11886.md
@@ -17,3 +17,5 @@ The WaspThemes Visual CSS Style Editor (aka yellow-pencil-visual-theme-customize
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11886.yaml
diff --git a/2019/CVE-2019-12276.md b/2019/CVE-2019-12276.md
index 9f35deeed96..33e62cb8673 100644
--- a/2019/CVE-2019-12276.md
+++ b/2019/CVE-2019-12276.md
@@ -15,3 +15,5 @@ A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEn
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12276.yaml
diff --git a/2019/CVE-2019-12314.md b/2019/CVE-2019-12314.md
index c96ea4c8dec..0d1a7f81ac5 100644
--- a/2019/CVE-2019-12314.md
+++ b/2019/CVE-2019-12314.md
@@ -16,3 +16,5 @@ Deltek Maconomy 2.2.5 is prone to local file inclusion via absolute path travers
 #### Github
 - https://github.com/ras313/CVE-2019-12314
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12314.yaml
diff --git a/2019/CVE-2019-12461.md b/2019/CVE-2019-12461.md
index 6e04351a777..1be325364e9 100644
--- a/2019/CVE-2019-12461.md
+++ b/2019/CVE-2019-12461.md
@@ -16,3 +16,5 @@ Web Port 1.19.1 allows XSS via the /log type parameter.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12461.yaml
diff --git a/2019/CVE-2019-12581.md b/2019/CVE-2019-12581.md
index d9e062d1fd4..69a43c30666 100644
--- a/2019/CVE-2019-12581.md
+++ b/2019/CVE-2019-12581.md
@@ -15,3 +15,5 @@ A reflective Cross-site scripting (XSS) vulnerability in the free_time_failed.cg
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12581.yaml
diff --git a/2019/CVE-2019-12583.md b/2019/CVE-2019-12583.md
index c9f0abe5e4b..c8d6e059630 100644
--- a/2019/CVE-2019-12583.md
+++ b/2019/CVE-2019-12583.md
@@ -15,3 +15,5 @@ Missing Access Control in the "Free Time" component of several Zyxel UAG, USG, a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12583.yaml
diff --git a/2019/CVE-2019-12593.md b/2019/CVE-2019-12593.md
index 4a84e778a3a..fbecae76738 100644
--- a/2019/CVE-2019-12593.md
+++ b/2019/CVE-2019-12593.md
@@ -16,3 +16,5 @@ IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerabil
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12593.yaml
diff --git a/2019/CVE-2019-12725.md b/2019/CVE-2019-12725.md
index e397b15074a..8ab9ea990ce 100644
--- a/2019/CVE-2019-12725.md
+++ b/2019/CVE-2019-12725.md
@@ -23,3 +23,5 @@ Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifical
 - https://github.com/raylax/rayx
 - https://github.com/t0mmy4/CVE-2019-12725-modified-exp
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12725.yaml
diff --git a/2019/CVE-2019-12935.md b/2019/CVE-2019-12935.md
index 751c8220478..93c2d343ce7 100644
--- a/2019/CVE-2019-12935.md
+++ b/2019/CVE-2019-12935.md
@@ -15,3 +15,5 @@ Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backe
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12935.yaml
diff --git a/2019/CVE-2019-12962.md b/2019/CVE-2019-12962.md
index d4c1896f71e..8a0094e8991 100644
--- a/2019/CVE-2019-12962.md
+++ b/2019/CVE-2019-12962.md
@@ -15,3 +15,5 @@ LiveZilla Server before 8.0.1.1 is vulnerable to XSS in mobile/index.php via the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12962.yaml
diff --git a/2019/CVE-2019-12985.md b/2019/CVE-2019-12985.md
index 6c9852e8bb7..bc3a4aabe23 100644
--- a/2019/CVE-2019-12985.md
+++ b/2019/CVE-2019-12985.md
@@ -15,3 +15,5 @@ Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 hav
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12985.yaml
diff --git a/2019/CVE-2019-12986.md b/2019/CVE-2019-12986.md
index c03ea4860fe..e282e9afe2b 100644
--- a/2019/CVE-2019-12986.md
+++ b/2019/CVE-2019-12986.md
@@ -15,3 +15,5 @@ Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 hav
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12986.yaml
diff --git a/2019/CVE-2019-12987.md b/2019/CVE-2019-12987.md
index 41f921ebe07..95e0028945b 100644
--- a/2019/CVE-2019-12987.md
+++ b/2019/CVE-2019-12987.md
@@ -15,3 +15,5 @@ Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 hav
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12987.yaml
diff --git a/2019/CVE-2019-12988.md b/2019/CVE-2019-12988.md
index fdcb828a6b2..c6ce03da500 100644
--- a/2019/CVE-2019-12988.md
+++ b/2019/CVE-2019-12988.md
@@ -15,3 +15,5 @@ Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 hav
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12988.yaml
diff --git a/2019/CVE-2019-12989.md b/2019/CVE-2019-12989.md
index 172754d4343..2cd6788a879 100644
--- a/2019/CVE-2019-12989.md
+++ b/2019/CVE-2019-12989.md
@@ -17,3 +17,5 @@ Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 all
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12989.yaml
diff --git a/2019/CVE-2019-12990.md b/2019/CVE-2019-12990.md
index e804ceab94e..5c61c421f74 100644
--- a/2019/CVE-2019-12990.md
+++ b/2019/CVE-2019-12990.md
@@ -15,3 +15,5 @@ Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 all
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12990.yaml
diff --git a/2019/CVE-2019-13101.md b/2019/CVE-2019-13101.md
index e07782fd501..670c3b89c3f 100644
--- a/2019/CVE-2019-13101.md
+++ b/2019/CVE-2019-13101.md
@@ -15,3 +15,5 @@ An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. w
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-13101.yaml
diff --git a/2019/CVE-2019-13372.md b/2019/CVE-2019-13372.md
index d23795efb45..2ce8ee9be4c 100644
--- a/2019/CVE-2019-13372.md
+++ b/2019/CVE-2019-13372.md
@@ -19,3 +19,5 @@
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-13372.yaml
diff --git a/2019/CVE-2019-13392.md b/2019/CVE-2019-13392.md
index 6c3e9d64dca..d8f8498f395 100644
--- a/2019/CVE-2019-13392.md
+++ b/2019/CVE-2019-13392.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-13392.yaml
diff --git a/2019/CVE-2019-13396.md b/2019/CVE-2019-13396.md
index 1866f7e9126..50e5d3eebfa 100644
--- a/2019/CVE-2019-13396.md
+++ b/2019/CVE-2019-13396.md
@@ -16,3 +16,5 @@ FlightPath 4.x and 5.0-x allows directory traversal and Local File Inclusion thr
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-13396.yaml
diff --git a/2019/CVE-2019-13462.md b/2019/CVE-2019-13462.md
index 7a7e02447f8..0d1a8ad99b9 100644
--- a/2019/CVE-2019-13462.md
+++ b/2019/CVE-2019-13462.md
@@ -15,3 +15,5 @@ Lansweeper before 7.1.117.4 allows unauthenticated SQL injection.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-13462.yaml
diff --git a/2019/CVE-2019-13608.md b/2019/CVE-2019-13608.md
index ed4a2d63e5a..9b6734eae1b 100644
--- a/2019/CVE-2019-13608.md
+++ b/2019/CVE-2019-13608.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-13608.yaml
diff --git a/2019/CVE-2019-14205.md b/2019/CVE-2019-14205.md
index d1a3639a8b7..3e0d0eb4efb 100644
--- a/2019/CVE-2019-14205.md
+++ b/2019/CVE-2019-14205.md
@@ -17,3 +17,5 @@ A Local File Inclusion vulnerability in the Nevma Adaptive Images plugin before
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14205.yaml
diff --git a/2019/CVE-2019-14206.md b/2019/CVE-2019-14206.md
index f5967ae796d..e9f7c8a06ed 100644
--- a/2019/CVE-2019-14206.md
+++ b/2019/CVE-2019-14206.md
@@ -17,3 +17,5 @@ An Arbitrary File Deletion vulnerability in the Nevma Adaptive Images plugin bef
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14206.yaml
diff --git a/2019/CVE-2019-14223.md b/2019/CVE-2019-14223.md
index 72d4b27150d..3afab330fb2 100644
--- a/2019/CVE-2019-14223.md
+++ b/2019/CVE-2019-14223.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/mbadanoiu/CVE-2019-14223
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14223.yaml
diff --git a/2019/CVE-2019-14251.md b/2019/CVE-2019-14251.md
index 609611a592e..c6b68be81ea 100644
--- a/2019/CVE-2019-14251.md
+++ b/2019/CVE-2019-14251.md
@@ -15,3 +15,5 @@ An issue was discovered in T24 in TEMENOS Channels R15.01. The login page presen
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14251.yaml
diff --git a/2019/CVE-2019-14287.md b/2019/CVE-2019-14287.md
index fb49928991b..9132f33653a 100644
--- a/2019/CVE-2019-14287.md
+++ b/2019/CVE-2019-14287.md
@@ -49,3 +49,5 @@ In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can
 - https://github.com/shallvhack/Sudo-Security-Bypass-CVE-2019-14287
 - https://github.com/thinuri99/Sudo-Security-Bypass-Vulnerability-CVE-2019-14287-
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2019/CVE-2019-14287.yaml
diff --git a/2019/CVE-2019-14312.md b/2019/CVE-2019-14312.md
index 28754dc4384..e279151908c 100644
--- a/2019/CVE-2019-14312.md
+++ b/2019/CVE-2019-14312.md
@@ -15,3 +15,5 @@ Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14312.yaml
diff --git a/2019/CVE-2019-14322.md b/2019/CVE-2019-14322.md
index 3577b049f44..cf5cd8a8118 100644
--- a/2019/CVE-2019-14322.md
+++ b/2019/CVE-2019-14322.md
@@ -17,3 +17,5 @@ In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (
 - https://github.com/faisalfs10x/http-vuln-cve2019-14322.nse
 - https://github.com/sergiovks/CVE-2019-14322
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14322.yaml
diff --git a/2019/CVE-2019-14470.md b/2019/CVE-2019-14470.md
index 2ba837e0ddf..a52f60afd29 100644
--- a/2019/CVE-2019-14470.md
+++ b/2019/CVE-2019-14470.md
@@ -17,3 +17,5 @@ cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro pl
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14470.yaml
diff --git a/2019/CVE-2019-14530.md b/2019/CVE-2019-14530.md
index 8d89005f23b..506fe4a929c 100644
--- a/2019/CVE-2019-14530.md
+++ b/2019/CVE-2019-14530.md
@@ -18,3 +18,5 @@ An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via
 - https://github.com/sec-it/exploit-CVE-2018-15139
 - https://github.com/sec-it/exploit-CVE-2019-14530
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14530.yaml
diff --git a/2019/CVE-2019-14696.md b/2019/CVE-2019-14696.md
index 614ab5220eb..0a772f03442 100644
--- a/2019/CVE-2019-14696.md
+++ b/2019/CVE-2019-14696.md
@@ -15,3 +15,5 @@ Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=s
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14696.yaml
diff --git a/2019/CVE-2019-14750.md b/2019/CVE-2019-14750.md
index 3ac8ada39e7..b891ea02b78 100644
--- a/2019/CVE-2019-14750.md
+++ b/2019/CVE-2019-14750.md
@@ -16,3 +16,5 @@ An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stor
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14750.yaml
diff --git a/2019/CVE-2019-14789.md b/2019/CVE-2019-14789.md
index b55a0b5ae80..a61524ec718 100644
--- a/2019/CVE-2019-14789.md
+++ b/2019/CVE-2019-14789.md
@@ -15,3 +15,5 @@ The Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14789.yaml
diff --git a/2019/CVE-2019-14793.md b/2019/CVE-2019-14793.md
index b249d1c107f..6b2212815e2 100644
--- a/2019/CVE-2019-14793.md
+++ b/2019/CVE-2019-14793.md
@@ -15,3 +15,5 @@ The Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, w
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14793.yaml
diff --git a/2019/CVE-2019-14950.md b/2019/CVE-2019-14950.md
index 0a10e2a7a15..c310066ca72 100644
--- a/2019/CVE-2019-14950.md
+++ b/2019/CVE-2019-14950.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14950.yaml
diff --git a/2019/CVE-2019-14974.md b/2019/CVE-2019-14974.md
index ab9919f4880..7fee5186fae 100644
--- a/2019/CVE-2019-14974.md
+++ b/2019/CVE-2019-14974.md
@@ -15,3 +15,5 @@ SugarCRM Enterprise 9.0.0 allows mobile/error-not-supported-platform.html?deskto
 #### Github
 - https://github.com/conan-sudo/CVE-2019-14974-bypass
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14974.yaml
diff --git a/2019/CVE-2019-15043.md b/2019/CVE-2019-15043.md
index 6c1a169504e..cd9ab3b5137 100644
--- a/2019/CVE-2019-15043.md
+++ b/2019/CVE-2019-15043.md
@@ -15,3 +15,5 @@ In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthentic
 #### Github
 - https://github.com/h0ffayyy/CVE-2019-15043
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15043.yaml
diff --git a/2019/CVE-2019-15107.md b/2019/CVE-2019-15107.md
index 3f9725a399f..0369024f60d 100644
--- a/2019/CVE-2019-15107.md
+++ b/2019/CVE-2019-15107.md
@@ -61,3 +61,5 @@ An issue was discovered in Webmin <=1.920. The parameter old in password_change.
 - https://github.com/wenruoya/CVE-2019-15107
 - https://github.com/whokilleddb/CVE-2019-15107
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15107.yaml
diff --git a/2019/CVE-2019-15501.md b/2019/CVE-2019-15501.md
index 445cc509c73..4977989f011 100644
--- a/2019/CVE-2019-15501.md
+++ b/2019/CVE-2019-15501.md
@@ -16,3 +16,5 @@ Reflected cross site scripting (XSS) in L-Soft LISTSERV before 16.5-2018a exists
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15501.yaml
diff --git a/2019/CVE-2019-15642.md b/2019/CVE-2019-15642.md
index db83c312168..8386f63f2a9 100644
--- a/2019/CVE-2019-15642.md
+++ b/2019/CVE-2019-15642.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/jas502n/CVE-2019-15642
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15642.yaml
diff --git a/2019/CVE-2019-15713.md b/2019/CVE-2019-15713.md
index 3482bddb93c..72cb184afaa 100644
--- a/2019/CVE-2019-15713.md
+++ b/2019/CVE-2019-15713.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15713.yaml
diff --git a/2019/CVE-2019-15774.md b/2019/CVE-2019-15774.md
index 6219e9b6728..21f61561f4d 100644
--- a/2019/CVE-2019-15774.md
+++ b/2019/CVE-2019-15774.md
@@ -16,3 +16,5 @@ The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that al
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15774.yaml
diff --git a/2019/CVE-2019-15811.md b/2019/CVE-2019-15811.md
index 97b190e3985..a8f08ebc616 100644
--- a/2019/CVE-2019-15811.md
+++ b/2019/CVE-2019-15811.md
@@ -15,3 +15,5 @@ In DomainMOD through 4.13, the parameter daterange in the file reporting/domains
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15811.yaml
diff --git a/2019/CVE-2019-15823.md b/2019/CVE-2019-15823.md
index f6fb7ef4ca7..e7bbe159fe2 100644
--- a/2019/CVE-2019-15823.md
+++ b/2019/CVE-2019-15823.md
@@ -15,3 +15,5 @@ The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15823.yaml
diff --git a/2019/CVE-2019-15829.md b/2019/CVE-2019-15829.md
index f12ededcdce..f351fe351c7 100644
--- a/2019/CVE-2019-15829.md
+++ b/2019/CVE-2019-15829.md
@@ -15,3 +15,5 @@ The photoblocks-grid-gallery plugin before 1.1.33 for WordPress has wp-admin/adm
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15829.yaml
diff --git a/2019/CVE-2019-15858.md b/2019/CVE-2019-15858.md
index 887537e4871..36a0dc22b28 100644
--- a/2019/CVE-2019-15858.md
+++ b/2019/CVE-2019-15858.md
@@ -17,3 +17,5 @@ admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before
 - https://github.com/ismail0x01/CVE-2019
 - https://github.com/orangmuda/CVE-2019-15858
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15858.yaml
diff --git a/2019/CVE-2019-15859.md b/2019/CVE-2019-15859.md
index 3f458112441..170a4405324 100644
--- a/2019/CVE-2019-15859.md
+++ b/2019/CVE-2019-15859.md
@@ -15,3 +15,5 @@ Password disclosure in the web interface on socomec DIRIS A-40 devices before 48
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15859.yaml
diff --git a/2019/CVE-2019-15889.md b/2019/CVE-2019-15889.md
index 57712b24fa4..8c24b8ad9e8 100644
--- a/2019/CVE-2019-15889.md
+++ b/2019/CVE-2019-15889.md
@@ -19,3 +19,5 @@ The download-manager plugin before 2.9.94 for WordPress has XSS via the category
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15889.yaml
diff --git a/2019/CVE-2019-16057.md b/2019/CVE-2019-16057.md
index 4e8df6812e1..87a737a09c3 100644
--- a/2019/CVE-2019-16057.md
+++ b/2019/CVE-2019-16057.md
@@ -16,3 +16,5 @@ The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to rem
 #### Github
 - https://github.com/michealkeines/CVE-Information-Extractor
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16057.yaml
diff --git a/2019/CVE-2019-16072.md b/2019/CVE-2019-16072.md
index 7d31dfea00b..371e5fcdb09 100644
--- a/2019/CVE-2019-16072.md
+++ b/2019/CVE-2019-16072.md
@@ -15,3 +15,5 @@ An OS command injection vulnerability in the discover_and_manage CGI script in N
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16072.yaml
diff --git a/2019/CVE-2019-16097.md b/2019/CVE-2019-16097.md
index 4a765849a1c..84ea003374c 100644
--- a/2019/CVE-2019-16097.md
+++ b/2019/CVE-2019-16097.md
@@ -19,3 +19,5 @@ core/api/user.go in Harbor 1.7.0 through 1.8.2 allows non-admin users to create
 - https://github.com/luckybool1020/CVE-2019-16097
 - https://github.com/rockmelodies/CVE-2019-16097-batch
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16097.yaml
diff --git a/2019/CVE-2019-16123.md b/2019/CVE-2019-16123.md
index 8facd02d376..49429cfda8d 100644
--- a/2019/CVE-2019-16123.md
+++ b/2019/CVE-2019-16123.md
@@ -15,3 +15,5 @@ In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16123.yaml
diff --git a/2019/CVE-2019-16278.md b/2019/CVE-2019-16278.md
index 88e51e8880a..c95aa71e1c4 100644
--- a/2019/CVE-2019-16278.md
+++ b/2019/CVE-2019-16278.md
@@ -42,3 +42,5 @@ Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6
 - https://github.com/n3rdh4x0r/CVE-2019-16278
 - https://github.com/theRealFr13nd/CVE-2019-16278-Nostromo_1.9.6-RCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16278.yaml
diff --git a/2019/CVE-2019-16313.md b/2019/CVE-2019-16313.md
index 91193cb26a2..bb586690256 100644
--- a/2019/CVE-2019-16313.md
+++ b/2019/CVE-2019-16313.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16313.yaml
diff --git a/2019/CVE-2019-16332.md b/2019/CVE-2019-16332.md
index 71d6b382c8b..f32d60863b9 100644
--- a/2019/CVE-2019-16332.md
+++ b/2019/CVE-2019-16332.md
@@ -16,3 +16,5 @@ In the api-bearer-auth plugin before 20190907 for WordPress, the server paramete
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16332.yaml
diff --git a/2019/CVE-2019-16469.md b/2019/CVE-2019-16469.md
index 534bb63eac3..7ddc9e273dc 100644
--- a/2019/CVE-2019-16469.md
+++ b/2019/CVE-2019-16469.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16469.yaml
diff --git a/2019/CVE-2019-16525.md b/2019/CVE-2019-16525.md
index c0397c90b67..21f5ded3b8e 100644
--- a/2019/CVE-2019-16525.md
+++ b/2019/CVE-2019-16525.md
@@ -16,3 +16,5 @@ An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16525.yaml
diff --git a/2019/CVE-2019-1653.md b/2019/CVE-2019-1653.md
index 72edae5927c..f84180a85b5 100644
--- a/2019/CVE-2019-1653.md
+++ b/2019/CVE-2019-1653.md
@@ -34,3 +34,5 @@ A vulnerability in the web-based management interface of Cisco Small Business RV
 - https://github.com/k8gege/CiscoExploit
 - https://github.com/shaheemirza/CiscoSpill
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1653.yaml
diff --git a/2019/CVE-2019-16662.md b/2019/CVE-2019-16662.md
index 9bf08243946..c0cadd54b2b 100644
--- a/2019/CVE-2019-16662.md
+++ b/2019/CVE-2019-16662.md
@@ -18,3 +18,5 @@ An issue was discovered in rConfig 3.9.2. An attacker can directly execute syste
 - https://github.com/fab1ano/rconfig-cves
 - https://github.com/mhaskar/CVE-2019-16662
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16662.yaml
diff --git a/2019/CVE-2019-16759.md b/2019/CVE-2019-16759.md
index d3d2899350a..2df24c4157d 100644
--- a/2019/CVE-2019-16759.md
+++ b/2019/CVE-2019-16759.md
@@ -38,3 +38,5 @@ vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig
 - https://github.com/r00tpgp/http-vuln-CVE-2019-16759
 - https://github.com/sunian19/CVE-2019-16759
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16759.yaml
diff --git a/2019/CVE-2019-16920.md b/2019/CVE-2019-16920.md
index 3a0aee9ee93..9a23a3ce72c 100644
--- a/2019/CVE-2019-16920.md
+++ b/2019/CVE-2019-16920.md
@@ -17,3 +17,5 @@ Unauthenticated remote code execution occurs in D-Link products such as DIR-655C
 #### Github
 - https://github.com/eniac888/CVE-2019-16920-MassPwn3r
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16920.yaml
diff --git a/2019/CVE-2019-16931.md b/2019/CVE-2019-16931.md
index a505aafb65c..c888b225676 100644
--- a/2019/CVE-2019-16931.md
+++ b/2019/CVE-2019-16931.md
@@ -15,3 +15,5 @@ A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16931.yaml
diff --git a/2019/CVE-2019-16932.md b/2019/CVE-2019-16932.md
index a7995ba45d3..57a7f4b79c1 100644
--- a/2019/CVE-2019-16932.md
+++ b/2019/CVE-2019-16932.md
@@ -15,3 +15,5 @@ A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for Word
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16932.yaml
diff --git a/2019/CVE-2019-16996.md b/2019/CVE-2019-16996.md
index ad5e35bf79d..f8d68820ff0 100644
--- a/2019/CVE-2019-16996.md
+++ b/2019/CVE-2019-16996.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16996.yaml
diff --git a/2019/CVE-2019-16997.md b/2019/CVE-2019-16997.md
index 10155f8e219..440272e932f 100644
--- a/2019/CVE-2019-16997.md
+++ b/2019/CVE-2019-16997.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16997.yaml
diff --git a/2019/CVE-2019-17228.md b/2019/CVE-2019-17228.md
index c0dc1bc46a2..5f46913af1f 100644
--- a/2019/CVE-2019-17228.md
+++ b/2019/CVE-2019-17228.md
@@ -15,3 +15,5 @@ includes/options.php in the motors-car-dealership-classified-listings (aka Motor
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17228.yaml
diff --git a/2019/CVE-2019-17230.md b/2019/CVE-2019-17230.md
index feede6fcb78..bd3f54c7616 100644
--- a/2019/CVE-2019-17230.md
+++ b/2019/CVE-2019-17230.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17230.yaml
diff --git a/2019/CVE-2019-17231.md b/2019/CVE-2019-17231.md
index adbf2571092..782d299a177 100644
--- a/2019/CVE-2019-17231.md
+++ b/2019/CVE-2019-17231.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17231.yaml
diff --git a/2019/CVE-2019-17232.md b/2019/CVE-2019-17232.md
index 8db6e5ddea0..e7af0609f7a 100644
--- a/2019/CVE-2019-17232.md
+++ b/2019/CVE-2019-17232.md
@@ -15,3 +15,5 @@ Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for Wor
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17232.yaml
diff --git a/2019/CVE-2019-17233.md b/2019/CVE-2019-17233.md
index 0871ad7246f..82270f565e3 100644
--- a/2019/CVE-2019-17233.md
+++ b/2019/CVE-2019-17233.md
@@ -15,3 +15,5 @@ Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for Wor
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17233.yaml
diff --git a/2019/CVE-2019-17270.md b/2019/CVE-2019-17270.md
index b184d85b7be..d6fd57856f8 100644
--- a/2019/CVE-2019-17270.md
+++ b/2019/CVE-2019-17270.md
@@ -16,3 +16,5 @@ Yachtcontrol through 2019-10-06: It's possible to perform direct Operating Syste
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17270.yaml
diff --git a/2019/CVE-2019-17382.md b/2019/CVE-2019-17382.md
index 67f85b01097..2daec0cf107 100644
--- a/2019/CVE-2019-17382.md
+++ b/2019/CVE-2019-17382.md
@@ -15,3 +15,5 @@ An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zab
 #### Github
 - https://github.com/K3ysTr0K3R/CVE-2019-17382-EXPLOIT
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17382.yaml
diff --git a/2019/CVE-2019-17418.md b/2019/CVE-2019-17418.md
index 07918c90c8b..1af3629206d 100644
--- a/2019/CVE-2019-17418.md
+++ b/2019/CVE-2019-17418.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17418.yaml
diff --git a/2019/CVE-2019-17444.md b/2019/CVE-2019-17444.md
index 0872ea9004f..fc21a543638 100644
--- a/2019/CVE-2019-17444.md
+++ b/2019/CVE-2019-17444.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17444.yaml
diff --git a/2019/CVE-2019-17503.md b/2019/CVE-2019-17503.md
index 0b1635cc2e4..5d162bcdac5 100644
--- a/2019/CVE-2019-17503.md
+++ b/2019/CVE-2019-17503.md
@@ -15,3 +15,5 @@ An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17503.yaml
diff --git a/2019/CVE-2019-17506.md b/2019/CVE-2019-17506.md
index bd24c687929..ebcbe10d053 100644
--- a/2019/CVE-2019-17506.md
+++ b/2019/CVE-2019-17506.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17506.yaml
diff --git a/2019/CVE-2019-17538.md b/2019/CVE-2019-17538.md
index dbfb8ccf964..ac932e49293 100644
--- a/2019/CVE-2019-17538.md
+++ b/2019/CVE-2019-17538.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17538.yaml
diff --git a/2019/CVE-2019-17558.md b/2019/CVE-2019-17558.md
index ea18d8ad0b0..b2f8dc21e9f 100644
--- a/2019/CVE-2019-17558.md
+++ b/2019/CVE-2019-17558.md
@@ -19,3 +19,5 @@ Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution
 - https://github.com/thelostworldFree/CVE-2019-17558_Solr_Vul_Tool
 - https://github.com/xkyrage/Exploit_CVE-2019-17558-RCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17558.yaml
diff --git a/2019/CVE-2019-17564.md b/2019/CVE-2019-17564.md
index 92512d44c34..ea8d4f8a794 100644
--- a/2019/CVE-2019-17564.md
+++ b/2019/CVE-2019-17564.md
@@ -22,3 +22,5 @@ No PoCs from references.
 - https://github.com/fairyming/CVE-2019-17564
 - https://github.com/r00t4dm/CVE-2019-17564
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17564.yaml
diff --git a/2019/CVE-2019-17574.md b/2019/CVE-2019-17574.md
index 61ff6d6efcf..ca06d6ce0ff 100644
--- a/2019/CVE-2019-17574.md
+++ b/2019/CVE-2019-17574.md
@@ -15,3 +15,5 @@ An issue was discovered in the Popup Maker plugin before 1.8.13 for WordPress. A
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17574.yaml
diff --git a/2019/CVE-2019-17662.md b/2019/CVE-2019-17662.md
index 6c243df5508..d84752fca10 100644
--- a/2019/CVE-2019-17662.md
+++ b/2019/CVE-2019-17662.md
@@ -25,3 +25,5 @@ ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise
 - https://github.com/thomas-osgood/CVE-2019-17662
 - https://github.com/whokilleddb/CVE-2019-17662
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17662.yaml
diff --git a/2019/CVE-2019-17671.md b/2019/CVE-2019-17671.md
index ca774a9a99d..68d9c683255 100644
--- a/2019/CVE-2019-17671.md
+++ b/2019/CVE-2019-17671.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/rhbb/CVE-2019-17671
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17671.yaml
diff --git a/2019/CVE-2019-1821.md b/2019/CVE-2019-1821.md
index 678eff243f8..f801d3470ef 100644
--- a/2019/CVE-2019-1821.md
+++ b/2019/CVE-2019-1821.md
@@ -15,3 +15,5 @@ A vulnerability in the web-based management interface of Cisco Prime Infrastruct
 #### Github
 - https://github.com/k8gege/CiscoExploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1821.yaml
diff --git a/2019/CVE-2019-18217.md b/2019/CVE-2019-18217.md
index 1e3dedf6c59..4bb8751ccde 100644
--- a/2019/CVE-2019-18217.md
+++ b/2019/CVE-2019-18217.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2019/CVE-2019-18217.yaml
diff --git a/2019/CVE-2019-18371.md b/2019/CVE-2019-18371.md
index a7b294d259b..1e596393ea8 100644
--- a/2019/CVE-2019-18371.md
+++ b/2019/CVE-2019-18371.md
@@ -16,3 +16,5 @@ An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The
 - https://github.com/UltramanGaia/POC-EXP
 - https://github.com/UltramanGaia/Xiaomi_Mi_WiFi_R3G_Vulnerability_POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-18371.yaml
diff --git a/2019/CVE-2019-18393.md b/2019/CVE-2019-18393.md
index aba145ddc62..eadd69bcdb5 100644
--- a/2019/CVE-2019-18393.md
+++ b/2019/CVE-2019-18393.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-18393.yaml
diff --git a/2019/CVE-2019-18394.md b/2019/CVE-2019-18394.md
index 49a344e8cb1..02ebdab9a8d 100644
--- a/2019/CVE-2019-18394.md
+++ b/2019/CVE-2019-18394.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-18394.yaml
diff --git a/2019/CVE-2019-18665.md b/2019/CVE-2019-18665.md
index 4357508809e..80d3bcb5685 100644
--- a/2019/CVE-2019-18665.md
+++ b/2019/CVE-2019-18665.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-18665.yaml
diff --git a/2019/CVE-2019-18818.md b/2019/CVE-2019-18818.md
index 8c44f4c349a..e1320276333 100644
--- a/2019/CVE-2019-18818.md
+++ b/2019/CVE-2019-18818.md
@@ -25,3 +25,5 @@ strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-
 - https://github.com/ossf-cve-benchmark/CVE-2019-18818
 - https://github.com/rasyidfox/CVE-2019-18818
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-18818.yaml
diff --git a/2019/CVE-2019-18922.md b/2019/CVE-2019-18922.md
index b05dc3d9727..21f580b94da 100644
--- a/2019/CVE-2019-18922.md
+++ b/2019/CVE-2019-18922.md
@@ -15,3 +15,5 @@ A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 unti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-18922.yaml
diff --git a/2019/CVE-2019-18952.md b/2019/CVE-2019-18952.md
index 1ad440f67ff..3cb6744a41a 100644
--- a/2019/CVE-2019-18952.md
+++ b/2019/CVE-2019-18952.md
@@ -15,3 +15,5 @@ SibSoft Xfilesharing through 2.5.1 allows cgi-bin/up.cgi arbitrary file upload.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-18952.yaml
diff --git a/2019/CVE-2019-18957.md b/2019/CVE-2019-18957.md
index 4722de0c26f..7cdd915c08d 100644
--- a/2019/CVE-2019-18957.md
+++ b/2019/CVE-2019-18957.md
@@ -15,3 +15,5 @@ Microstrategy Library in MicroStrategy before 2019 before 11.1.3 has reflected X
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-18957.yaml
diff --git a/2019/CVE-2019-1898.md b/2019/CVE-2019-1898.md
index 42ab338c9e5..6e794118f36 100644
--- a/2019/CVE-2019-1898.md
+++ b/2019/CVE-2019-1898.md
@@ -15,3 +15,5 @@ A vulnerability in the web-based management interface of Cisco RV110W, RV130W, a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1898.yaml
diff --git a/2019/CVE-2019-19134.md b/2019/CVE-2019-19134.md
index d6772533aaa..4498d6e5962 100644
--- a/2019/CVE-2019-19134.md
+++ b/2019/CVE-2019-19134.md
@@ -15,3 +15,5 @@ The Hero Maps Premium plugin 2.2.1 and prior for WordPress is prone to unauthent
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19134.yaml
diff --git a/2019/CVE-2019-19368.md b/2019/CVE-2019-19368.md
index 50803b0fdfb..616aec00bd4 100644
--- a/2019/CVE-2019-19368.md
+++ b/2019/CVE-2019-19368.md
@@ -15,3 +15,5 @@ A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19368.yaml
diff --git a/2019/CVE-2019-19411.md b/2019/CVE-2019-19411.md
index e115de1d165..8db52f2b410 100644
--- a/2019/CVE-2019-19411.md
+++ b/2019/CVE-2019-19411.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19411.yaml
diff --git a/2019/CVE-2019-19781.md b/2019/CVE-2019-19781.md
index 3b0b72e68ec..ec22e462219 100644
--- a/2019/CVE-2019-19781.md
+++ b/2019/CVE-2019-19781.md
@@ -55,3 +55,5 @@ An issue was discovered in Citrix Application Delivery Controller (ADC) and Gate
 - https://github.com/yukar1z0e/CVE-2019-19781
 - https://github.com/zerobytesecure/CVE-2019-19781
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19781.yaml
diff --git a/2019/CVE-2019-19822.md b/2019/CVE-2019-19822.md
index 33d683dfaf1..f716421130e 100644
--- a/2019/CVE-2019-19822.md
+++ b/2019/CVE-2019-19822.md
@@ -17,3 +17,5 @@ A certain router administration interface (that includes Realtek APMIB 0.11f for
 #### Github
 - https://github.com/lkkula/totoroot
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19822.yaml
diff --git a/2019/CVE-2019-19823.md b/2019/CVE-2019-19823.md
index d5369ec3ff5..f736646dea2 100644
--- a/2019/CVE-2019-19823.md
+++ b/2019/CVE-2019-19823.md
@@ -17,3 +17,5 @@ A certain router administration interface (that includes Realtek APMIB 0.11f for
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19823.yaml
diff --git a/2019/CVE-2019-19824.md b/2019/CVE-2019-19824.md
index d09b6118dc6..f7d692e361f 100644
--- a/2019/CVE-2019-19824.md
+++ b/2019/CVE-2019-19824.md
@@ -19,3 +19,5 @@ On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may exe
 #### Github
 - https://github.com/lkkula/totoroot
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19824.yaml
diff --git a/2019/CVE-2019-19825.md b/2019/CVE-2019-19825.md
index 0f2161e8f67..9a8206565fa 100644
--- a/2019/CVE-2019-19825.md
+++ b/2019/CVE-2019-19825.md
@@ -17,3 +17,5 @@ On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19825.yaml
diff --git a/2019/CVE-2019-19908.md b/2019/CVE-2019-19908.md
index c6b46e3b06a..8baf80fe608 100644
--- a/2019/CVE-2019-19908.md
+++ b/2019/CVE-2019-19908.md
@@ -15,3 +15,5 @@ phpMyChat-Plus 1.98 is vulnerable to reflected XSS via JavaScript injection into
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19908.yaml
diff --git a/2019/CVE-2019-19985.md b/2019/CVE-2019-19985.md
index aaad14127d9..7be901c4630 100644
--- a/2019/CVE-2019-19985.md
+++ b/2019/CVE-2019-19985.md
@@ -16,3 +16,5 @@ The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19985.yaml
diff --git a/2019/CVE-2019-20085.md b/2019/CVE-2019-20085.md
index 2dd5de52f11..021e9e56d78 100644
--- a/2019/CVE-2019-20085.md
+++ b/2019/CVE-2019-20085.md
@@ -20,3 +20,5 @@ TVT NVMS-1000 devices allow GET /.. Directory Traversal
 - https://github.com/AruN4Sa7/Manual-Exploitation-Development-For-TVT-NVMS-1000-suffers-from-a-directory-traversal-vulnerabilit
 - https://github.com/Z3R0-0x30/CVE-2019-20085
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20085.yaml
diff --git a/2019/CVE-2019-20141.md b/2019/CVE-2019-20141.md
index 8ae43eb3746..225df9f3900 100644
--- a/2019/CVE-2019-20141.md
+++ b/2019/CVE-2019-20141.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20141.yaml
diff --git a/2019/CVE-2019-20183.md b/2019/CVE-2019-20183.md
index 031d29c0750..e0a92db9e59 100644
--- a/2019/CVE-2019-20183.md
+++ b/2019/CVE-2019-20183.md
@@ -16,3 +16,5 @@ uploadimage.php in Employee Records System 1.0 allows upload and execution of ar
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20183.yaml
diff --git a/2019/CVE-2019-20210.md b/2019/CVE-2019-20210.md
index 51a41108793..b9877ee8274 100644
--- a/2019/CVE-2019-20210.md
+++ b/2019/CVE-2019-20210.md
@@ -21,3 +21,5 @@ The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20210.yaml
diff --git a/2019/CVE-2019-20224.md b/2019/CVE-2019-20224.md
index 04ac0cd148a..675169e0365 100644
--- a/2019/CVE-2019-20224.md
+++ b/2019/CVE-2019-20224.md
@@ -15,3 +15,5 @@ netflow_get_stats in functions_netflow.php in Pandora FMS 7.0NG allows remote au
 #### Github
 - https://github.com/mhaskar/CVE-2019-20224
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20224.yaml
diff --git a/2019/CVE-2019-20504.md b/2019/CVE-2019-20504.md
index ccf96d1dee4..2073efb72e7 100644
--- a/2019/CVE-2019-20504.md
+++ b/2019/CVE-2019-20504.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20504.yaml
diff --git a/2019/CVE-2019-20933.md b/2019/CVE-2019-20933.md
index cd321e18164..2bfaf8f4eba 100644
--- a/2019/CVE-2019-20933.md
+++ b/2019/CVE-2019-20933.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/Hydragyrum/CVE-2019-20933
 - https://github.com/LorenzoTullini/InfluxDB-Exploit-CVE-2019-20933
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20933.yaml
diff --git a/2019/CVE-2019-25141.md b/2019/CVE-2019-25141.md
index 41f447f8ab7..19a246db6f1 100644
--- a/2019/CVE-2019-25141.md
+++ b/2019/CVE-2019-25141.md
@@ -15,3 +15,5 @@ The Easy WP SMTP plugin for WordPress is vulnerable to authorization bypass in v
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-25141.yaml
diff --git a/2019/CVE-2019-25152.md b/2019/CVE-2019-25152.md
index 40db069f7d0..51b1cad2b9c 100644
--- a/2019/CVE-2019-25152.md
+++ b/2019/CVE-2019-25152.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-25152.yaml
diff --git a/2019/CVE-2019-25213.md b/2019/CVE-2019-25213.md
index 79b0fb4a5df..891a6fd0c5b 100644
--- a/2019/CVE-2019-25213.md
+++ b/2019/CVE-2019-25213.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-25213.yaml
diff --git a/2019/CVE-2019-2578.md b/2019/CVE-2019-2578.md
index 81a597bccb6..7352b6ecf92 100644
--- a/2019/CVE-2019-2578.md
+++ b/2019/CVE-2019-2578.md
@@ -15,3 +15,5 @@ Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middlewar
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2578.yaml
diff --git a/2019/CVE-2019-2579.md b/2019/CVE-2019-2579.md
index 387a28e489c..286d3e1f023 100644
--- a/2019/CVE-2019-2579.md
+++ b/2019/CVE-2019-2579.md
@@ -15,3 +15,5 @@ Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middlewar
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2579.yaml
diff --git a/2019/CVE-2019-2588.md b/2019/CVE-2019-2588.md
index 0d62ea3339e..6d069d8a7e8 100644
--- a/2019/CVE-2019-2588.md
+++ b/2019/CVE-2019-2588.md
@@ -17,3 +17,5 @@ Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle F
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2588.yaml
diff --git a/2019/CVE-2019-2616.md b/2019/CVE-2019-2616.md
index 7d2d2433a6c..d33e3bde459 100644
--- a/2019/CVE-2019-2616.md
+++ b/2019/CVE-2019-2616.md
@@ -18,3 +18,5 @@ Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle F
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2616.yaml
diff --git a/2019/CVE-2019-2725.md b/2019/CVE-2019-2725.md
index 95638736822..3487280b0d8 100644
--- a/2019/CVE-2019-2725.md
+++ b/2019/CVE-2019-2725.md
@@ -35,3 +35,5 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar
 - https://github.com/welove88888/CVE-2019-2725
 - https://github.com/zhusx110/cve-2019-2725
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2725.yaml
diff --git a/2019/CVE-2019-2729.md b/2019/CVE-2019-2729.md
index 4473bc955a9..9a9bf1a2ffc 100644
--- a/2019/CVE-2019-2729.md
+++ b/2019/CVE-2019-2729.md
@@ -28,3 +28,5 @@ Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middlewar
 - https://github.com/ruthlezs/CVE-2019-2729-Exploit
 - https://github.com/waffl3ss/CVE-2019-2729
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2729.yaml
diff --git a/2019/CVE-2019-2767.md b/2019/CVE-2019-2767.md
index 41db36fe0b4..b5719c34ba5 100644
--- a/2019/CVE-2019-2767.md
+++ b/2019/CVE-2019-2767.md
@@ -17,3 +17,5 @@ Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle F
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2767.yaml
diff --git a/2019/CVE-2019-3396.md b/2019/CVE-2019-3396.md
index f8f3f5f0a5a..51b28ef9ebf 100644
--- a/2019/CVE-2019-3396.md
+++ b/2019/CVE-2019-3396.md
@@ -43,3 +43,5 @@ The Widget Connector macro in Atlassian Confluence Server before version 6.6.12
 - https://github.com/xiaoshuier/CVE-2019-3396
 - https://github.com/yuehanked/cve-2019-3396
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3396.yaml
diff --git a/2019/CVE-2019-3398.md b/2019/CVE-2019-3398.md
index 889318713a5..550d2454ae6 100644
--- a/2019/CVE-2019-3398.md
+++ b/2019/CVE-2019-3398.md
@@ -24,3 +24,5 @@ Confluence Server and Data Center had a path traversal vulnerability in the down
 - https://github.com/132231g/CVE-2019-3398
 - https://github.com/superevr/cve-2019-3398
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3398.yaml
diff --git a/2019/CVE-2019-3401.md b/2019/CVE-2019-3401.md
index ddd4646fa83..3591819def5 100644
--- a/2019/CVE-2019-3401.md
+++ b/2019/CVE-2019-3401.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3401.yaml
diff --git a/2019/CVE-2019-3402.md b/2019/CVE-2019-3402.md
index 1a68ed8ee64..a6d0242ca3a 100644
--- a/2019/CVE-2019-3402.md
+++ b/2019/CVE-2019-3402.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3402.yaml
diff --git a/2019/CVE-2019-3403.md b/2019/CVE-2019-3403.md
index ea3bc7862f7..a7f6c239316 100644
--- a/2019/CVE-2019-3403.md
+++ b/2019/CVE-2019-3403.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 - https://github.com/davidmckennirey/CVE-2019-3403
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3403.yaml
diff --git a/2019/CVE-2019-3799.md b/2019/CVE-2019-3799.md
index 87061a7a8a6..7cc929e1f87 100644
--- a/2019/CVE-2019-3799.md
+++ b/2019/CVE-2019-3799.md
@@ -17,3 +17,5 @@ Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.
 #### Github
 - https://github.com/mpgn/CVE-2019-3799
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3799.yaml
diff --git a/2019/CVE-2019-3911.md b/2019/CVE-2019-3911.md
index 73e56d426b5..8592be80f75 100644
--- a/2019/CVE-2019-3911.md
+++ b/2019/CVE-2019-3911.md
@@ -15,3 +15,5 @@ Reflected cross-site scripting (XSS) vulnerability in LabKey Server Community Ed
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3911.yaml
diff --git a/2019/CVE-2019-3912.md b/2019/CVE-2019-3912.md
index bbd3481db2b..659455ed2ab 100644
--- a/2019/CVE-2019-3912.md
+++ b/2019/CVE-2019-3912.md
@@ -15,3 +15,5 @@ An open redirect vulnerability in LabKey Server Community Edition before 18.3.0-
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3912.yaml
diff --git a/2019/CVE-2019-3929.md b/2019/CVE-2019-3929.md
index aefa86fb8e5..eef63973dda 100644
--- a/2019/CVE-2019-3929.md
+++ b/2019/CVE-2019-3929.md
@@ -29,3 +29,5 @@ The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco we
 #### Github
 - https://github.com/xfox64x/CVE-2019-3929
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3929.yaml
diff --git a/2019/CVE-2019-4716.md b/2019/CVE-2019-4716.md
index 708e5a4ab0d..e6af482ea3a 100644
--- a/2019/CVE-2019-4716.md
+++ b/2019/CVE-2019-4716.md
@@ -18,3 +18,5 @@ IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration over
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-4716.yaml
diff --git a/2019/CVE-2019-5127.md b/2019/CVE-2019-5127.md
index 415d376573a..ff59fa2ade5 100644
--- a/2019/CVE-2019-5127.md
+++ b/2019/CVE-2019-5127.md
@@ -15,3 +15,5 @@ A command injection have been found in YouPHPTube Encoder. A successful attack c
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-5127.yaml
diff --git a/2019/CVE-2019-5128.md b/2019/CVE-2019-5128.md
index 34b0a9ebd83..2c096907401 100644
--- a/2019/CVE-2019-5128.md
+++ b/2019/CVE-2019-5128.md
@@ -15,3 +15,5 @@ A command injection have been found in YouPHPTube Encoder. A successful attack c
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-5128.yaml
diff --git a/2019/CVE-2019-5129.md b/2019/CVE-2019-5129.md
index a4f4162b725..c6bf5855630 100644
--- a/2019/CVE-2019-5129.md
+++ b/2019/CVE-2019-5129.md
@@ -15,3 +15,5 @@ A command injection have been found in YouPHPTube Encoder. A successful attack c
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-5129.yaml
diff --git a/2019/CVE-2019-5418.md b/2019/CVE-2019-5418.md
index a90fe2b13e8..a26ff40cbba 100644
--- a/2019/CVE-2019-5418.md
+++ b/2019/CVE-2019-5418.md
@@ -27,3 +27,5 @@ There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6
 - https://github.com/random-robbie/CVE-2019-5418
 - https://github.com/ztgrace/CVE-2019-5418-Rails3
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-5418.yaml
diff --git a/2019/CVE-2019-5434.md b/2019/CVE-2019-5434.md
index cbd9b9c9754..1fc8bbce937 100644
--- a/2019/CVE-2019-5434.md
+++ b/2019/CVE-2019-5434.md
@@ -15,3 +15,5 @@ An attacker could send a specifically crafted payload to the XML-RPC invocation
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-5434.yaml
diff --git a/2019/CVE-2019-5544.md b/2019/CVE-2019-5544.md
index a5f4ab4e0b9..68e7824f6b1 100644
--- a/2019/CVE-2019-5544.md
+++ b/2019/CVE-2019-5544.md
@@ -16,3 +16,5 @@ OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite iss
 #### Github
 - https://github.com/HynekPetrak/CVE-2019-5544_CVE-2020-3992
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2019/CVE-2019-5544.yaml
diff --git a/2019/CVE-2019-5591.md b/2019/CVE-2019-5591.md
index 469177cfc16..2bee4780dec 100644
--- a/2019/CVE-2019-5591.md
+++ b/2019/CVE-2019-5591.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-5591.yaml
diff --git a/2019/CVE-2019-6112.md b/2019/CVE-2019-6112.md
index 330ac96fcd2..1be6c3a8bee 100644
--- a/2019/CVE-2019-6112.md
+++ b/2019/CVE-2019-6112.md
@@ -15,3 +15,5 @@ A Cross-site scripting (XSS) vulnerability in /inc/class-search.php in the Sell
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6112.yaml
diff --git a/2019/CVE-2019-6340.md b/2019/CVE-2019-6340.md
index 0f83d078cde..6eb0f11329f 100644
--- a/2019/CVE-2019-6340.md
+++ b/2019/CVE-2019-6340.md
@@ -32,3 +32,5 @@ Some field types do not properly sanitize data from non-form sources in Drupal 8
 - https://github.com/reanzai/Reanzai-Penetration-Testing-tool
 - https://github.com/starling021/M3M0
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6340.yaml
diff --git a/2019/CVE-2019-6443.md b/2019/CVE-2019-6443.md
index 2f369aa75ff..9ed64345874 100644
--- a/2019/CVE-2019-6443.md
+++ b/2019/CVE-2019-6443.md
@@ -16,3 +16,5 @@ An issue was discovered in NTPsec before 1.1.3. Because of a bug in ctl_getitem,
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2019/CVE-2019-6443.yaml
diff --git a/2019/CVE-2019-6703.md b/2019/CVE-2019-6703.md
index df6866e2df9..05ea314b868 100644
--- a/2019/CVE-2019-6703.md
+++ b/2019/CVE-2019-6703.md
@@ -15,3 +15,5 @@ Incorrect access control in migla_ajax_functions.php in the Calmar Webmedia Tota
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6703.yaml
diff --git a/2019/CVE-2019-6715.md b/2019/CVE-2019-6715.md
index 32a89f19568..92b711e41be 100644
--- a/2019/CVE-2019-6715.md
+++ b/2019/CVE-2019-6715.md
@@ -16,3 +16,5 @@ pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remot
 #### Github
 - https://github.com/random-robbie/cve-2019-6715
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6715.yaml
diff --git a/2019/CVE-2019-6793.md b/2019/CVE-2019-6793.md
index 86c3389e2cc..4ac9b0c7318 100644
--- a/2019/CVE-2019-6793.md
+++ b/2019/CVE-2019-6793.md
@@ -15,3 +15,5 @@ An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x befor
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6793.yaml
diff --git a/2019/CVE-2019-6799.md b/2019/CVE-2019-6799.md
index 039779f4837..a6c634654cb 100644
--- a/2019/CVE-2019-6799.md
+++ b/2019/CVE-2019-6799.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6799.yaml
diff --git a/2019/CVE-2019-6802.md b/2019/CVE-2019-6802.md
index e6f4f9419b9..d63eb8e9965 100644
--- a/2019/CVE-2019-6802.md
+++ b/2019/CVE-2019-6802.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6802.yaml
diff --git a/2019/CVE-2019-7139.md b/2019/CVE-2019-7139.md
index 1acb576bbc0..3ad6a58ad04 100644
--- a/2019/CVE-2019-7139.md
+++ b/2019/CVE-2019-7139.md
@@ -21,3 +21,5 @@ No PoCs from references.
 #### Github
 - https://github.com/adhammedhat111/Magento-CVE-2019-7139-SQLi-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7139.yaml
diff --git a/2019/CVE-2019-7192.md b/2019/CVE-2019-7192.md
index 9888566204f..57106c8146f 100644
--- a/2019/CVE-2019-7192.md
+++ b/2019/CVE-2019-7192.md
@@ -16,3 +16,5 @@ This improper access control vulnerability allows remote attackers to gain unaut
 #### Github
 - https://github.com/th3gundy/CVE-2019-7192_QNAP_Exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7192.yaml
diff --git a/2019/CVE-2019-7194.md b/2019/CVE-2019-7194.md
index 6522b36057d..bf9fff74f8c 100644
--- a/2019/CVE-2019-7194.md
+++ b/2019/CVE-2019-7194.md
@@ -16,3 +16,5 @@ This external control of file name or path vulnerability allows remote attackers
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7194.yaml
diff --git a/2019/CVE-2019-7195.md b/2019/CVE-2019-7195.md
index 27b49a52a35..968e779a298 100644
--- a/2019/CVE-2019-7195.md
+++ b/2019/CVE-2019-7195.md
@@ -16,3 +16,5 @@ This external control of file name or path vulnerability allows remote attackers
 #### Github
 - https://github.com/th3gundy/CVE-2019-7192_QNAP_Exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7195.yaml
diff --git a/2019/CVE-2019-7219.md b/2019/CVE-2019-7219.md
index cd6fd4f2abc..7c784d09973 100644
--- a/2019/CVE-2019-7219.md
+++ b/2019/CVE-2019-7219.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/verifysecurity/CVE-2019-7219
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7219.yaml
diff --git a/2019/CVE-2019-7238.md b/2019/CVE-2019-7238.md
index 2ecd2e5c28e..dc9c1970326 100644
--- a/2019/CVE-2019-7238.md
+++ b/2019/CVE-2019-7238.md
@@ -22,3 +22,5 @@ No PoCs from references.
 - https://github.com/verctor/nexus_rce_CVE-2019-7238
 - https://github.com/zhangchi991022/Comprehensive-experiment-of-infomation-security
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7238.yaml
diff --git a/2019/CVE-2019-7254.md b/2019/CVE-2019-7254.md
index 3ab2b516ebe..3addffd43dd 100644
--- a/2019/CVE-2019-7254.md
+++ b/2019/CVE-2019-7254.md
@@ -15,3 +15,5 @@ Linear eMerge E3-Series devices allow File Inclusion.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7254.yaml
diff --git a/2019/CVE-2019-7255.md b/2019/CVE-2019-7255.md
index 120bd4dfb13..8677b98b943 100644
--- a/2019/CVE-2019-7255.md
+++ b/2019/CVE-2019-7255.md
@@ -15,3 +15,5 @@ Linear eMerge E3-Series devices allow XSS.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7255.yaml
diff --git a/2019/CVE-2019-7256.md b/2019/CVE-2019-7256.md
index 024be75d2ea..28d25f8b551 100644
--- a/2019/CVE-2019-7256.md
+++ b/2019/CVE-2019-7256.md
@@ -20,3 +20,5 @@ Linear eMerge E3-Series devices allow Command Injections.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7256.yaml
diff --git a/2019/CVE-2019-7275.md b/2019/CVE-2019-7275.md
index 2c9acba941a..5248167d0fe 100644
--- a/2019/CVE-2019-7275.md
+++ b/2019/CVE-2019-7275.md
@@ -15,3 +15,5 @@ Optergy Proton/Enterprise devices allow Open Redirect.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7275.yaml
diff --git a/2019/CVE-2019-7276.md b/2019/CVE-2019-7276.md
index 291c2aee75e..104ebaae31f 100644
--- a/2019/CVE-2019-7276.md
+++ b/2019/CVE-2019-7276.md
@@ -16,3 +16,5 @@ Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7276.yaml
diff --git a/2019/CVE-2019-7315.md b/2019/CVE-2019-7315.md
index ab5345680c9..ed980ea7cc4 100644
--- a/2019/CVE-2019-7315.md
+++ b/2019/CVE-2019-7315.md
@@ -15,3 +15,5 @@ Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7315.yaml
diff --git a/2019/CVE-2019-7481.md b/2019/CVE-2019-7481.md
index ef99361d07b..b55edd9d6ae 100644
--- a/2019/CVE-2019-7481.md
+++ b/2019/CVE-2019-7481.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7481.yaml
diff --git a/2019/CVE-2019-7543.md b/2019/CVE-2019-7543.md
index 1e0fedbcace..7f3d3901cd5 100644
--- a/2019/CVE-2019-7543.md
+++ b/2019/CVE-2019-7543.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7543.yaml
diff --git a/2019/CVE-2019-7609.md b/2019/CVE-2019-7609.md
index b66b66a7974..249445649fa 100644
--- a/2019/CVE-2019-7609.md
+++ b/2019/CVE-2019-7609.md
@@ -26,3 +26,5 @@ Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw
 - https://github.com/rhbb/CVE-2019-7609
 - https://github.com/wolf1892/CVE-2019-7609
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7609.yaml
diff --git a/2019/CVE-2019-8086.md b/2019/CVE-2019-8086.md
index 6ce438f8fd6..88096e4b76f 100644
--- a/2019/CVE-2019-8086.md
+++ b/2019/CVE-2019-8086.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8086.yaml
diff --git a/2019/CVE-2019-8390.md b/2019/CVE-2019-8390.md
index 770302badca..b5aaeb8fede 100644
--- a/2019/CVE-2019-8390.md
+++ b/2019/CVE-2019-8390.md
@@ -16,3 +16,5 @@ qdPM 9.1 suffers from Cross-site Scripting (XSS) in the search[keywords] paramet
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8390.yaml
diff --git a/2019/CVE-2019-8442.md b/2019/CVE-2019-8442.md
index eb3e61d9c1e..2630333d7b3 100644
--- a/2019/CVE-2019-8442.md
+++ b/2019/CVE-2019-8442.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8442.yaml
diff --git a/2019/CVE-2019-8446.md b/2019/CVE-2019-8446.md
index c29415b1622..8e50fb1f7d7 100644
--- a/2019/CVE-2019-8446.md
+++ b/2019/CVE-2019-8446.md
@@ -15,3 +15,5 @@ The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows rem
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8446.yaml
diff --git a/2019/CVE-2019-8449.md b/2019/CVE-2019-8449.md
index 5b025c4b375..630980547cc 100644
--- a/2019/CVE-2019-8449.md
+++ b/2019/CVE-2019-8449.md
@@ -17,3 +17,5 @@ The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allow
 - https://github.com/mufeedvh/CVE-2019-8449
 - https://github.com/r0lh/CVE-2019-8449
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8449.yaml
diff --git a/2019/CVE-2019-8451.md b/2019/CVE-2019-8451.md
index d894403ebda..c758b4fd037 100644
--- a/2019/CVE-2019-8451.md
+++ b/2019/CVE-2019-8451.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/ianxtianxt/CVE-2019-8451
 - https://github.com/jas502n/CVE-2019-8451
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8451.yaml
diff --git a/2019/CVE-2019-8903.md b/2019/CVE-2019-8903.md
index fa1b0fdbdb1..2104f9d7457 100644
--- a/2019/CVE-2019-8903.md
+++ b/2019/CVE-2019-8903.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/ossf-cve-benchmark/CVE-2019-8903
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8903.yaml
diff --git a/2019/CVE-2019-8937.md b/2019/CVE-2019-8937.md
index b128f06514f..8baa58a4813 100644
--- a/2019/CVE-2019-8937.md
+++ b/2019/CVE-2019-8937.md
@@ -16,3 +16,5 @@ HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mese_fine, origine, and
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8937.yaml
diff --git a/2019/CVE-2019-8943.md b/2019/CVE-2019-8943.md
index a4b3b6cf262..cfff1f38c44 100644
--- a/2019/CVE-2019-8943.md
+++ b/2019/CVE-2019-8943.md
@@ -22,3 +22,5 @@ WordPress through 5.0.3 allows Path Traversal in wp_crop_image(). An attacker (w
 - https://github.com/ret2x-tools/poc-wordpress-5.0.0
 - https://github.com/v0lck3r/CVE-2019-8943
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8943.yaml
diff --git a/2019/CVE-2019-8982.md b/2019/CVE-2019-8982.md
index 67481371da8..fd25e8b57ee 100644
--- a/2019/CVE-2019-8982.md
+++ b/2019/CVE-2019-8982.md
@@ -15,3 +15,5 @@ com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the s
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8982.yaml
diff --git a/2019/CVE-2019-9041.md b/2019/CVE-2019-9041.md
index a155af67859..abfa986ca1c 100644
--- a/2019/CVE-2019-9041.md
+++ b/2019/CVE-2019-9041.md
@@ -15,3 +15,5 @@ An issue was discovered in ZZZCMS zzzphp V1.6.1. In the inc/zzz_template.php fil
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9041.yaml
diff --git a/2019/CVE-2019-9082.md b/2019/CVE-2019-9082.md
index 00cf21af941..a9511505f43 100644
--- a/2019/CVE-2019-9082.md
+++ b/2019/CVE-2019-9082.md
@@ -18,3 +18,5 @@ ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, all
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9082.yaml
diff --git a/2019/CVE-2019-9193.md b/2019/CVE-2019-9193.md
index 734dcc90bf5..229d9e32034 100644
--- a/2019/CVE-2019-9193.md
+++ b/2019/CVE-2019-9193.md
@@ -23,3 +23,5 @@ In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows super
 - https://github.com/jhnhnck/CVE-2019-9193
 - https://github.com/paulotrindadec/CVE-2019-9193
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2019/CVE-2019-9193.yaml
diff --git a/2019/CVE-2019-9194.md b/2019/CVE-2019-9194.md
index 2cf8224778a..79f47635db8 100644
--- a/2019/CVE-2019-9194.md
+++ b/2019/CVE-2019-9194.md
@@ -17,3 +17,5 @@ elFinder before 2.1.48 has a command injection vulnerability in the PHP connecto
 - https://github.com/cved-sources/cve-2019-9194
 - https://github.com/hadrian3689/elFinder_2.1.47_php_connector_rce
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9194.yaml
diff --git a/2019/CVE-2019-9618.md b/2019/CVE-2019-9618.md
index 78258300fee..738cd75d647 100644
--- a/2019/CVE-2019-9618.md
+++ b/2019/CVE-2019-9618.md
@@ -16,3 +16,5 @@ The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9618.yaml
diff --git a/2019/CVE-2019-9621.md b/2019/CVE-2019-9621.md
index bf4784f5277..57b5ecfe4b8 100644
--- a/2019/CVE-2019-9621.md
+++ b/2019/CVE-2019-9621.md
@@ -20,3 +20,5 @@ Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, an
 - https://github.com/k8gege/ZimbraExploit
 - https://github.com/nth347/Zimbra-RCE-exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9621.yaml
diff --git a/2019/CVE-2019-9632.md b/2019/CVE-2019-9632.md
index ebbd66f87fc..c76a3591224 100644
--- a/2019/CVE-2019-9632.md
+++ b/2019/CVE-2019-9632.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9632.yaml
diff --git a/2019/CVE-2019-9670.md b/2019/CVE-2019-9670.md
index c9a673beb62..11e44249b62 100644
--- a/2019/CVE-2019-9670.md
+++ b/2019/CVE-2019-9670.md
@@ -21,3 +21,5 @@ mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10
 - https://github.com/raylax/rayx
 - https://github.com/rek7/Zimbra-RCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9670.yaml
diff --git a/2019/CVE-2019-9726.md b/2019/CVE-2019-9726.md
index 427074912e9..a13ebd8254d 100644
--- a/2019/CVE-2019-9726.md
+++ b/2019/CVE-2019-9726.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9726.yaml
diff --git a/2019/CVE-2019-9733.md b/2019/CVE-2019-9733.md
index 9c779c671bf..7058f32b436 100644
--- a/2019/CVE-2019-9733.md
+++ b/2019/CVE-2019-9733.md
@@ -15,3 +15,5 @@ An issue was discovered in JFrog Artifactory 6.7.3. By default, the access-admin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9733.yaml
diff --git a/2019/CVE-2019-9757.md b/2019/CVE-2019-9757.md
index 47c5a7632dd..6d34e4c4d2e 100644
--- a/2019/CVE-2019-9757.md
+++ b/2019/CVE-2019-9757.md
@@ -16,3 +16,5 @@ An issue was discovered in LabKey Server 19.1.0. Sending an SVG containing an XX
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9757.yaml
diff --git a/2019/CVE-2019-9762.md b/2019/CVE-2019-9762.md
index 38550af0e8c..2bc80f8e8a2 100644
--- a/2019/CVE-2019-9762.md
+++ b/2019/CVE-2019-9762.md
@@ -15,3 +15,5 @@ A SQL Injection was discovered in PHPSHE 1.7 in include/plugin/payment/alipay/pa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9762.yaml
diff --git a/2019/CVE-2019-9874.md b/2019/CVE-2019-9874.md
index 813d220cae6..c383900bc18 100644
--- a/2019/CVE-2019-9874.md
+++ b/2019/CVE-2019-9874.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9874.yaml
diff --git a/2019/CVE-2019-9879.md b/2019/CVE-2019-9879.md
index 398dca535d8..573c57bbb4d 100644
--- a/2019/CVE-2019-9879.md
+++ b/2019/CVE-2019-9879.md
@@ -17,3 +17,5 @@ The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a n
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9879.yaml
diff --git a/2019/CVE-2019-9880.md b/2019/CVE-2019-9880.md
index e3c069eec5a..9954e115871 100644
--- a/2019/CVE-2019-9880.md
+++ b/2019/CVE-2019-9880.md
@@ -17,3 +17,5 @@ An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9880.yaml
diff --git a/2019/CVE-2019-9881.md b/2019/CVE-2019-9881.md
index 765e734ce3d..faf95583668 100644
--- a/2019/CVE-2019-9881.md
+++ b/2019/CVE-2019-9881.md
@@ -17,3 +17,5 @@ The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows un
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9881.yaml
diff --git a/2019/CVE-2019-9912.md b/2019/CVE-2019-9912.md
index ceecddf9813..158a6a031f6 100644
--- a/2019/CVE-2019-9912.md
+++ b/2019/CVE-2019-9912.md
@@ -16,3 +16,5 @@ The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9912.yaml
diff --git a/2019/CVE-2019-9915.md b/2019/CVE-2019-9915.md
index 58f9b78845f..e5b667c99f0 100644
--- a/2019/CVE-2019-9915.md
+++ b/2019/CVE-2019-9915.md
@@ -15,3 +15,5 @@ GetSimpleCMS 3.3.13 has an Open Redirect via the admin/index.php redirect parame
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9915.yaml
diff --git a/2019/CVE-2019-9922.md b/2019/CVE-2019-9922.md
index a4e4608c3b3..5e471e5ac6a 100644
--- a/2019/CVE-2019-9922.md
+++ b/2019/CVE-2019-9922.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9922.yaml
diff --git a/2019/CVE-2019-9955.md b/2019/CVE-2019-9955.md
index cb9397b4c35..442b20f1c3c 100644
--- a/2019/CVE-2019-9955.md
+++ b/2019/CVE-2019-9955.md
@@ -16,3 +16,5 @@ On Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, US
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9955.yaml
diff --git a/2019/CVE-2019-9978.md b/2019/CVE-2019-9978.md
index f862c67eb75..77f16673ec1 100644
--- a/2019/CVE-2019-9978.md
+++ b/2019/CVE-2019-9978.md
@@ -33,3 +33,5 @@ The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-a
 - https://github.com/hash3liZer/CVE-2019-9978
 - https://github.com/mpgn/CVE-2019-9978
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9978.yaml
diff --git a/2020/CVE-2020-0618.md b/2020/CVE-2020-0618.md
index 8c936c51fa3..2ee3b2aabc1 100644
--- a/2020/CVE-2020-0618.md
+++ b/2020/CVE-2020-0618.md
@@ -27,3 +27,5 @@ A remote code execution vulnerability exists in Microsoft SQL Server Reporting S
 - https://github.com/itstarsec/CVE-2020-0618
 - https://github.com/wortell/cve-2020-0618
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-0618.yaml
diff --git a/2020/CVE-2020-0646.md b/2020/CVE-2020-0646.md
index 02e828bb2b5..f8d27609225 100644
--- a/2020/CVE-2020-0646.md
+++ b/2020/CVE-2020-0646.md
@@ -86,3 +86,5 @@ A remote code execution vulnerability exists when the Microsoft .NET Framework f
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2020/CVE-2020-0646.yaml
diff --git a/2020/CVE-2020-0796.md b/2020/CVE-2020-0796.md
index 98628772b3a..35b4071728a 100644
--- a/2020/CVE-2020-0796.md
+++ b/2020/CVE-2020-0796.md
@@ -114,3 +114,5 @@ A remote code execution vulnerability exists in the way that the Microsoft Serve
 - https://github.com/zathizh/cve-796-mit
 - https://github.com/zerodayblitz/NetSuite-network-exploitation-tool
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-0796.yaml
diff --git a/2020/CVE-2020-10148.md b/2020/CVE-2020-10148.md
index 5feebccd96e..37d2b7267c3 100644
--- a/2020/CVE-2020-10148.md
+++ b/2020/CVE-2020-10148.md
@@ -22,3 +22,5 @@ No PoCs from references.
 - https://github.com/B1anda0/CVE-2020-10148
 - https://github.com/rdoix/CVE-2020-10148-Solarwinds-Orion
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10148.yaml
diff --git a/2020/CVE-2020-10189.md b/2020/CVE-2020-10189.md
index 39843391e7f..41f7fd4d4c7 100644
--- a/2020/CVE-2020-10189.md
+++ b/2020/CVE-2020-10189.md
@@ -19,3 +19,5 @@ Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution b
 #### Github
 - https://github.com/zavke/CVE-2020-10189-ManageEngine
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10189.yaml
diff --git a/2020/CVE-2020-10199.md b/2020/CVE-2020-10199.md
index 2142fdbe936..f78916b10eb 100644
--- a/2020/CVE-2020-10199.md
+++ b/2020/CVE-2020-10199.md
@@ -24,3 +24,5 @@ Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).
 - https://github.com/wsfengfan/CVE-2020-10199-10204
 - https://github.com/zhzyker/CVE-2020-10199_POC-EXP
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10199.yaml
diff --git a/2020/CVE-2020-10204.md b/2020/CVE-2020-10204.md
index d03ad96cf6a..9062dd94b52 100644
--- a/2020/CVE-2020-10204.md
+++ b/2020/CVE-2020-10204.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/wsfengfan/CVE-2020-10199-10204
 - https://github.com/zhzyker/CVE-2020-10204
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10204.yaml
diff --git a/2020/CVE-2020-10220.md b/2020/CVE-2020-10220.md
index dbd6c181d05..afe5a15db80 100644
--- a/2020/CVE-2020-10220.md
+++ b/2020/CVE-2020-10220.md
@@ -19,3 +19,5 @@ An issue was discovered in rConfig through 3.9.4. The web interface is prone to
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10220.yaml
diff --git a/2020/CVE-2020-10221.md b/2020/CVE-2020-10221.md
index 1bfbf61c3d1..f43ab3fbbac 100644
--- a/2020/CVE-2020-10221.md
+++ b/2020/CVE-2020-10221.md
@@ -16,3 +16,5 @@ lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attac
 #### Github
 - https://github.com/EnginDemirbilek/PublicExploits
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10221.yaml
diff --git a/2020/CVE-2020-10257.md b/2020/CVE-2020-10257.md
index 0517a324dcd..1b398911354 100644
--- a/2020/CVE-2020-10257.md
+++ b/2020/CVE-2020-10257.md
@@ -15,3 +15,5 @@ The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10257.yaml
diff --git a/2020/CVE-2020-10532.md b/2020/CVE-2020-10532.md
index bdf55f49c33..b72593c329e 100644
--- a/2020/CVE-2020-10532.md
+++ b/2020/CVE-2020-10532.md
@@ -15,3 +15,5 @@ The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10532.yaml
diff --git a/2020/CVE-2020-10546.md b/2020/CVE-2020-10546.md
index c43519cf64a..5653619527e 100644
--- a/2020/CVE-2020-10546.md
+++ b/2020/CVE-2020-10546.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10546.yaml
diff --git a/2020/CVE-2020-10547.md b/2020/CVE-2020-10547.md
index 1a3b7fda039..e0aacf2c37c 100644
--- a/2020/CVE-2020-10547.md
+++ b/2020/CVE-2020-10547.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10547.yaml
diff --git a/2020/CVE-2020-10548.md b/2020/CVE-2020-10548.md
index a09d3c2952c..bef1cffd7e8 100644
--- a/2020/CVE-2020-10548.md
+++ b/2020/CVE-2020-10548.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10548.yaml
diff --git a/2020/CVE-2020-10549.md b/2020/CVE-2020-10549.md
index 35d7e5ab07d..78a599ac9d9 100644
--- a/2020/CVE-2020-10549.md
+++ b/2020/CVE-2020-10549.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10549.yaml
diff --git a/2020/CVE-2020-10770.md b/2020/CVE-2020-10770.md
index aa61e082e28..1a8768b1ff0 100644
--- a/2020/CVE-2020-10770.md
+++ b/2020/CVE-2020-10770.md
@@ -16,3 +16,5 @@ A flaw was found in Keycloak before 13.0.0, where it is possible to force the se
 - https://github.com/ColdFusionX/Keycloak-12.0.1-CVE-2020-10770
 - https://github.com/ramshazar/keycloak-blind-ssrf-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10770.yaml
diff --git a/2020/CVE-2020-10973.md b/2020/CVE-2020-10973.md
index 00125b21580..ef5a4c8c573 100644
--- a/2020/CVE-2020-10973.md
+++ b/2020/CVE-2020-10973.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10973.yaml
diff --git a/2020/CVE-2020-10987.md b/2020/CVE-2020-10987.md
index 576f2be0b79..31c45044ab7 100644
--- a/2020/CVE-2020-10987.md
+++ b/2020/CVE-2020-10987.md
@@ -16,3 +16,5 @@ The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10987.yaml
diff --git a/2020/CVE-2020-11034.md b/2020/CVE-2020-11034.md
index f96ff54e4c0..9d28f17707f 100644
--- a/2020/CVE-2020-11034.md
+++ b/2020/CVE-2020-11034.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11034.yaml
diff --git a/2020/CVE-2020-11110.md b/2020/CVE-2020-11110.md
index ac669e92de6..9e2b2791b6b 100644
--- a/2020/CVE-2020-11110.md
+++ b/2020/CVE-2020-11110.md
@@ -15,3 +15,5 @@ Grafana through 6.7.1 allows stored XSS due to insufficient input protection in
 #### Github
 - https://github.com/AVE-Stoik/CVE-2020-11110-Proof-of-Concept
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11110.yaml
diff --git a/2020/CVE-2020-11441.md b/2020/CVE-2020-11441.md
index ab6bcfde566..13f3eefc656 100644
--- a/2020/CVE-2020-11441.md
+++ b/2020/CVE-2020-11441.md
@@ -15,3 +15,5 @@ phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A in
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11441.yaml
diff --git a/2020/CVE-2020-11450.md b/2020/CVE-2020-11450.md
index ac6404037d6..d5962639f32 100644
--- a/2020/CVE-2020-11450.md
+++ b/2020/CVE-2020-11450.md
@@ -15,3 +15,5 @@ Microstrategy Web 10.4 exposes the JVM configuration, CPU architecture, installa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11450.yaml
diff --git a/2020/CVE-2020-11455.md b/2020/CVE-2020-11455.md
index cf74db0d9e8..039e6f84860 100644
--- a/2020/CVE-2020-11455.md
+++ b/2020/CVE-2020-11455.md
@@ -16,3 +16,5 @@ LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in appli
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11455.yaml
diff --git a/2020/CVE-2020-11514.md b/2020/CVE-2020-11514.md
index b78dcf08d8d..dd843c9e606 100644
--- a/2020/CVE-2020-11514.md
+++ b/2020/CVE-2020-11514.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11514.yaml
diff --git a/2020/CVE-2020-11515.md b/2020/CVE-2020-11515.md
index 478688ef7cd..21e6cecfabe 100644
--- a/2020/CVE-2020-11515.md
+++ b/2020/CVE-2020-11515.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11515.yaml
diff --git a/2020/CVE-2020-11529.md b/2020/CVE-2020-11529.md
index 3678d0a2f16..1b8dcc350ce 100644
--- a/2020/CVE-2020-11529.md
+++ b/2020/CVE-2020-11529.md
@@ -15,3 +15,5 @@ Common/Grav.php in Grav before 1.7 has an Open Redirect. This is partially fixed
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11529.yaml
diff --git a/2020/CVE-2020-11530.md b/2020/CVE-2020-11530.md
index 54d5cbf0d89..1a9385575de 100644
--- a/2020/CVE-2020-11530.md
+++ b/2020/CVE-2020-11530.md
@@ -16,3 +16,5 @@ A blind SQL injection vulnerability is present in Chop Slider 3, a WordPress plu
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11530.yaml
diff --git a/2020/CVE-2020-11546.md b/2020/CVE-2020-11546.md
index 5ec204ab83c..a7916b3b6b7 100644
--- a/2020/CVE-2020-11546.md
+++ b/2020/CVE-2020-11546.md
@@ -16,3 +16,5 @@ SuperWebMailer 7.21.0.01526 is susceptible to a remote code execution vulnerabil
 - https://github.com/Official-BlackHat13/CVE-2020-11546
 - https://github.com/damit5/CVE-2020-11546
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11546.yaml
diff --git a/2020/CVE-2020-11547.md b/2020/CVE-2020-11547.md
index 78cc33a853a..eaf3269cca1 100644
--- a/2020/CVE-2020-11547.md
+++ b/2020/CVE-2020-11547.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11547.yaml
diff --git a/2020/CVE-2020-11710.md b/2020/CVE-2020-11710.md
index 28e93636937..56c2e470ac8 100644
--- a/2020/CVE-2020-11710.md
+++ b/2020/CVE-2020-11710.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/1135/Kong_exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11710.yaml
diff --git a/2020/CVE-2020-11732.md b/2020/CVE-2020-11732.md
index 0d035840b57..ed78943a62e 100644
--- a/2020/CVE-2020-11732.md
+++ b/2020/CVE-2020-11732.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11732.yaml
diff --git a/2020/CVE-2020-11738.md b/2020/CVE-2020-11738.md
index d10b0450d85..86273b2a17c 100644
--- a/2020/CVE-2020-11738.md
+++ b/2020/CVE-2020-11738.md
@@ -17,3 +17,5 @@ The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11738.yaml
diff --git a/2020/CVE-2020-11798.md b/2020/CVE-2020-11798.md
index 83218d0dd2f..46edf0a720c 100644
--- a/2020/CVE-2020-11798.md
+++ b/2020/CVE-2020-11798.md
@@ -15,3 +15,5 @@ A Directory Traversal vulnerability in the web conference component of Mitel MiC
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11798.yaml
diff --git a/2020/CVE-2020-11853.md b/2020/CVE-2020-11853.md
index bfca9779836..1c3f5322a07 100644
--- a/2020/CVE-2020-11853.md
+++ b/2020/CVE-2020-11853.md
@@ -42,3 +42,5 @@ Arbitrary code execution vulnerability affecting multiple Micro Focus products.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11853.yaml
diff --git a/2020/CVE-2020-11854.md b/2020/CVE-2020-11854.md
index 22dc3e4fcb9..0a64c21aa08 100644
--- a/2020/CVE-2020-11854.md
+++ b/2020/CVE-2020-11854.md
@@ -35,3 +35,5 @@ Arbitrary code execution vlnerability in Operation bridge Manager, Application P
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11854.yaml
diff --git a/2020/CVE-2020-11930.md b/2020/CVE-2020-11930.md
index 33a3d10e954..c6b5c2670e3 100644
--- a/2020/CVE-2020-11930.md
+++ b/2020/CVE-2020-11930.md
@@ -15,3 +15,5 @@ The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafte
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11930.yaml
diff --git a/2020/CVE-2020-11975.md b/2020/CVE-2020-11975.md
index c24952440b3..565716d7373 100644
--- a/2020/CVE-2020-11975.md
+++ b/2020/CVE-2020-11975.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/1135/unomi_exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11975.yaml
diff --git a/2020/CVE-2020-11978.md b/2020/CVE-2020-11978.md
index 60c2ed6775c..68d7d164b65 100644
--- a/2020/CVE-2020-11978.md
+++ b/2020/CVE-2020-11978.md
@@ -18,3 +18,5 @@ An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/c
 - https://github.com/navyaks55/Vulnerability_Exploitation
 - https://github.com/pberba/CVE-2020-11978
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11978.yaml
diff --git a/2020/CVE-2020-11981.md b/2020/CVE-2020-11981.md
index 7e08d4270d5..bbc759d3a01 100644
--- a/2020/CVE-2020-11981.md
+++ b/2020/CVE-2020-11981.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/navyaks55/Vulnerability_Exploitation
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-11981.yaml
diff --git a/2020/CVE-2020-11984.md b/2020/CVE-2020-11984.md
index 8ac388b09de..26e36d07b0c 100644
--- a/2020/CVE-2020-11984.md
+++ b/2020/CVE-2020-11984.md
@@ -17,3 +17,5 @@ Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible
 #### Github
 - https://github.com/masahiro331/CVE-2020-11984
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11984.yaml
diff --git a/2020/CVE-2020-11991.md b/2020/CVE-2020-11991.md
index bf7b5a05233..a40246c9d5a 100644
--- a/2020/CVE-2020-11991.md
+++ b/2020/CVE-2020-11991.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11991.yaml
diff --git a/2020/CVE-2020-12054.md b/2020/CVE-2020-12054.md
index a7fd905344e..bb694e3def9 100644
--- a/2020/CVE-2020-12054.md
+++ b/2020/CVE-2020-12054.md
@@ -16,3 +16,5 @@ The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12054.yaml
diff --git a/2020/CVE-2020-12116.md b/2020/CVE-2020-12116.md
index 260f26845c0..fe8c37aec57 100644
--- a/2020/CVE-2020-12116.md
+++ b/2020/CVE-2020-12116.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/BeetleChunks/CVE-2020-12116
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12116.yaml
diff --git a/2020/CVE-2020-12124.md b/2020/CVE-2020-12124.md
index d1600ef8475..7ed4d4ea8f6 100644
--- a/2020/CVE-2020-12124.md
+++ b/2020/CVE-2020-12124.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/Scorpion-Security-Labs/CVE-2020-12124
 - https://github.com/db44k/CVE-2020-12124
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12124.yaml
diff --git a/2020/CVE-2020-12127.md b/2020/CVE-2020-12127.md
index cf439870c8a..49b9b1618d4 100644
--- a/2020/CVE-2020-12127.md
+++ b/2020/CVE-2020-12127.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12127.yaml
diff --git a/2020/CVE-2020-12256.md b/2020/CVE-2020-12256.md
index ebc1c2d511e..97d62b8f394 100644
--- a/2020/CVE-2020-12256.md
+++ b/2020/CVE-2020-12256.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12256.yaml
diff --git a/2020/CVE-2020-12259.md b/2020/CVE-2020-12259.md
index 429249f855e..f7a57967021 100644
--- a/2020/CVE-2020-12259.md
+++ b/2020/CVE-2020-12259.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12259.yaml
diff --git a/2020/CVE-2020-12262.md b/2020/CVE-2020-12262.md
index dd9573d3ef3..56e7de690f3 100644
--- a/2020/CVE-2020-12262.md
+++ b/2020/CVE-2020-12262.md
@@ -16,3 +16,5 @@ Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 dev
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12262.yaml
diff --git a/2020/CVE-2020-12447.md b/2020/CVE-2020-12447.md
index 3a142c7bf32..b23c7956e2b 100644
--- a/2020/CVE-2020-12447.md
+++ b/2020/CVE-2020-12447.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12447.yaml
diff --git a/2020/CVE-2020-12478.md b/2020/CVE-2020-12478.md
index 485a3fda1b9..3c85a6fd72b 100644
--- a/2020/CVE-2020-12478.md
+++ b/2020/CVE-2020-12478.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12478.yaml
diff --git a/2020/CVE-2020-12641.md b/2020/CVE-2020-12641.md
index 50be0b98924..6cdb7d77461 100644
--- a/2020/CVE-2020-12641.md
+++ b/2020/CVE-2020-12641.md
@@ -18,3 +18,5 @@ rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute ar
 - https://github.com/mbadanoiu/CVE-2020-12641
 - https://github.com/mbadanoiu/MAL-004
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12641.yaml
diff --git a/2020/CVE-2020-12720.md b/2020/CVE-2020-12720.md
index c9326c1ed2e..2fc41455e35 100644
--- a/2020/CVE-2020-12720.md
+++ b/2020/CVE-2020-12720.md
@@ -17,3 +17,5 @@ vBulletin before 5.5.6pl1, 5.6.0 before 5.6.0pl1, and 5.6.1 before 5.6.1pl1 has
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12720.yaml
diff --git a/2020/CVE-2020-12800.md b/2020/CVE-2020-12800.md
index e73d9c55e61..43d245d4ab6 100644
--- a/2020/CVE-2020-12800.md
+++ b/2020/CVE-2020-12800.md
@@ -17,3 +17,5 @@ The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for
 - https://github.com/amartinsec/CVE-2020-12800
 - https://github.com/zero-script1/LoL-Binary
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12800.yaml
diff --git a/2020/CVE-2020-12832.md b/2020/CVE-2020-12832.md
index 1c42709b439..0a45b46a7a1 100644
--- a/2020/CVE-2020-12832.md
+++ b/2020/CVE-2020-12832.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12832.yaml
diff --git a/2020/CVE-2020-13117.md b/2020/CVE-2020-13117.md
index b2b8241e698..a69024e5539 100644
--- a/2020/CVE-2020-13117.md
+++ b/2020/CVE-2020-13117.md
@@ -16,3 +16,5 @@ Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthen
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13117.yaml
diff --git a/2020/CVE-2020-13121.md b/2020/CVE-2020-13121.md
index 71b253832cf..102c9931e30 100644
--- a/2020/CVE-2020-13121.md
+++ b/2020/CVE-2020-13121.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13121.yaml
diff --git a/2020/CVE-2020-13125.md b/2020/CVE-2020-13125.md
index e337f5bc438..ce872130f69 100644
--- a/2020/CVE-2020-13125.md
+++ b/2020/CVE-2020-13125.md
@@ -16,3 +16,5 @@ An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.2
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13125.yaml
diff --git a/2020/CVE-2020-13158.md b/2020/CVE-2020-13158.md
index 6d3ab17da61..63254dd2a0c 100644
--- a/2020/CVE-2020-13158.md
+++ b/2020/CVE-2020-13158.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/InfoSec4Fun/CVE-2020-13158
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13158.yaml
diff --git a/2020/CVE-2020-13167.md b/2020/CVE-2020-13167.md
index 9389edeac06..af7fd0a1787 100644
--- a/2020/CVE-2020-13167.md
+++ b/2020/CVE-2020-13167.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13167.yaml
diff --git a/2020/CVE-2020-13258.md b/2020/CVE-2020-13258.md
index f74bb6b95ad..f1cd151f4b1 100644
--- a/2020/CVE-2020-13258.md
+++ b/2020/CVE-2020-13258.md
@@ -15,3 +15,5 @@ Contentful through 2020-05-21 for Python allows reflected XSS, as demonstrated b
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13258.yaml
diff --git a/2020/CVE-2020-13379.md b/2020/CVE-2020-13379.md
index a220473b034..32a5fbc2777 100644
--- a/2020/CVE-2020-13379.md
+++ b/2020/CVE-2020-13379.md
@@ -18,3 +18,5 @@ The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access C
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13379.yaml
diff --git a/2020/CVE-2020-13405.md b/2020/CVE-2020-13405.md
index 1315901d855..e0c49947869 100644
--- a/2020/CVE-2020-13405.md
+++ b/2020/CVE-2020-13405.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/mrnazu/CVE-2020-13405
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13405.yaml
diff --git a/2020/CVE-2020-13483.md b/2020/CVE-2020-13483.md
index 94fd56cd162..e3c8b54be8e 100644
--- a/2020/CVE-2020-13483.md
+++ b/2020/CVE-2020-13483.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13483.yaml
diff --git a/2020/CVE-2020-13640.md b/2020/CVE-2020-13640.md
index 379069770b4..48817cd4f30 100644
--- a/2020/CVE-2020-13640.md
+++ b/2020/CVE-2020-13640.md
@@ -15,3 +15,5 @@ A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for Word
 #### Github
 - https://github.com/asterite3/CVE-2020-13640
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13640.yaml
diff --git a/2020/CVE-2020-13700.md b/2020/CVE-2020-13700.md
index caf3fa9ce5c..dddb4dbc099 100644
--- a/2020/CVE-2020-13700.md
+++ b/2020/CVE-2020-13700.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13700.yaml
diff --git a/2020/CVE-2020-13820.md b/2020/CVE-2020-13820.md
index 48183e97fa5..42ba613f5e9 100644
--- a/2020/CVE-2020-13820.md
+++ b/2020/CVE-2020-13820.md
@@ -16,3 +16,5 @@ Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a pa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13820.yaml
diff --git a/2020/CVE-2020-13851.md b/2020/CVE-2020-13851.md
index 9525b3fd8a4..5de81a6d127 100644
--- a/2020/CVE-2020-13851.md
+++ b/2020/CVE-2020-13851.md
@@ -17,3 +17,5 @@ Artica Pandora FMS 7.44 allows remote command execution via the events feature.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13851.yaml
diff --git a/2020/CVE-2020-13886.md b/2020/CVE-2020-13886.md
index efa4b09b30a..66459b2f523 100644
--- a/2020/CVE-2020-13886.md
+++ b/2020/CVE-2020-13886.md
@@ -17,3 +17,5 @@ Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22
 #### Github
 - https://github.com/Ls4ss/CVE-2020-13886
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13886.yaml
diff --git a/2020/CVE-2020-13927.md b/2020/CVE-2020-13927.md
index 70bab3e381d..fcdd36bc8c1 100644
--- a/2020/CVE-2020-13927.md
+++ b/2020/CVE-2020-13927.md
@@ -18,3 +18,5 @@ The previous default setting for Airflow's Experimental API was to allow all API
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13927.yaml
diff --git a/2020/CVE-2020-13935.md b/2020/CVE-2020-13935.md
index 03f7b914525..1179c1f713e 100644
--- a/2020/CVE-2020-13935.md
+++ b/2020/CVE-2020-13935.md
@@ -24,3 +24,5 @@ The payload length in a WebSocket frame was not correctly validated in Apache To
 - https://github.com/RedTeamPentesting/CVE-2020-13935
 - https://github.com/aabbcc19191/CVE-2020-13935
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2020/CVE-2020-13935.yaml
diff --git a/2020/CVE-2020-13937.md b/2020/CVE-2020-13937.md
index 5d9fc6c1d89..88566d4dcbb 100644
--- a/2020/CVE-2020-13937.md
+++ b/2020/CVE-2020-13937.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/kailing0220/CVE-2020-13937
 - https://github.com/yaunsky/CVE-2020-13937
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13937.yaml
diff --git a/2020/CVE-2020-13942.md b/2020/CVE-2020-13942.md
index 73b31e2bded..dee8655f21e 100644
--- a/2020/CVE-2020-13942.md
+++ b/2020/CVE-2020-13942.md
@@ -24,3 +24,5 @@ No PoCs from references.
 - https://github.com/shifa123/CVE-2020-13942-POC-
 - https://github.com/yaunsky/Unomi-CVE-2020-13942
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13942.yaml
diff --git a/2020/CVE-2020-13945.md b/2020/CVE-2020-13945.md
index c21cb25d131..f255c3afd83 100644
--- a/2020/CVE-2020-13945.md
+++ b/2020/CVE-2020-13945.md
@@ -19,3 +19,5 @@ In Apache APISIX, the user enabled the Admin API and deleted the Admin API acces
 - https://github.com/K3ysTr0K3R/CVE-2020-13945-EXPLOIT
 - https://github.com/samurai411/toolbox
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13945.yaml
diff --git a/2020/CVE-2020-14092.md b/2020/CVE-2020-14092.md
index b8e7c62e4aa..143c57e5623 100644
--- a/2020/CVE-2020-14092.md
+++ b/2020/CVE-2020-14092.md
@@ -15,3 +15,5 @@ The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress al
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14092.yaml
diff --git a/2020/CVE-2020-14144.md b/2020/CVE-2020-14144.md
index 734d1582cb9..ebf9ef1bc34 100644
--- a/2020/CVE-2020-14144.md
+++ b/2020/CVE-2020-14144.md
@@ -16,3 +16,5 @@ The git hook feature in Gitea 1.1.0 through 1.12.5 might allow for authenticated
 #### Github
 - https://github.com/p0dalirius/CVE-2020-14144-GiTea-git-hooks-rce
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14144.yaml
diff --git a/2020/CVE-2020-14179.md b/2020/CVE-2020-14179.md
index 8c6eb9573e0..2ddeade78bf 100644
--- a/2020/CVE-2020-14179.md
+++ b/2020/CVE-2020-14179.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/hackerhackrat/R-poc
 - https://github.com/mrnazu/CVE-2020-14179
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14179.yaml
diff --git a/2020/CVE-2020-14181.md b/2020/CVE-2020-14181.md
index 09b6f23d63e..02b842e5150 100644
--- a/2020/CVE-2020-14181.md
+++ b/2020/CVE-2020-14181.md
@@ -19,3 +19,5 @@ Affected versions of Atlassian Jira Server and Data Center allow an unauthentica
 - https://github.com/bk-rao/CVE-2020-14181
 - https://github.com/hackerhackrat/R-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14181.yaml
diff --git a/2020/CVE-2020-14408.md b/2020/CVE-2020-14408.md
index 92bcd9d4686..30f3b644dbb 100644
--- a/2020/CVE-2020-14408.md
+++ b/2020/CVE-2020-14408.md
@@ -15,3 +15,5 @@ An issue was discovered in Agentejo Cockpit 0.10.2. Insufficient sanitization of
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14408.yaml
diff --git a/2020/CVE-2020-14413.md b/2020/CVE-2020-14413.md
index e32be2ec04c..5e38c380083 100644
--- a/2020/CVE-2020-14413.md
+++ b/2020/CVE-2020-14413.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14413.yaml
diff --git a/2020/CVE-2020-14644.md b/2020/CVE-2020-14644.md
index 7de3c73bbd0..b3ea5920f63 100644
--- a/2020/CVE-2020-14644.md
+++ b/2020/CVE-2020-14644.md
@@ -21,3 +21,5 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware
 - https://github.com/lucy9x/WLExploit
 - https://github.com/potats0/cve_2020_14644
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2020/CVE-2020-14644.yaml
diff --git a/2020/CVE-2020-14750.md b/2020/CVE-2020-14750.md
index 5ddf6b1c908..d8be085f7c8 100644
--- a/2020/CVE-2020-14750.md
+++ b/2020/CVE-2020-14750.md
@@ -22,3 +22,5 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware
 - https://github.com/pit-lock/hacking
 - https://github.com/pprietosanchez/CVE-2020-14750
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14750.yaml
diff --git a/2020/CVE-2020-14864.md b/2020/CVE-2020-14864.md
index f83d14db93c..bba43bf4f12 100644
--- a/2020/CVE-2020-14864.md
+++ b/2020/CVE-2020-14864.md
@@ -19,3 +19,5 @@ Vulnerability in the Oracle Business Intelligence Enterprise Edition product of
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14864.yaml
diff --git a/2020/CVE-2020-14882.md b/2020/CVE-2020-14882.md
index 392cdc28674..14a0a0c6f69 100644
--- a/2020/CVE-2020-14882.md
+++ b/2020/CVE-2020-14882.md
@@ -58,3 +58,5 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware
 - https://github.com/xfiftyone/CVE-2020-14882
 - https://github.com/zesnd/CVE-2020-14882-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14882.yaml
diff --git a/2020/CVE-2020-14883.md b/2020/CVE-2020-14883.md
index f5ab0eb85f7..c7f42e3e351 100644
--- a/2020/CVE-2020-14883.md
+++ b/2020/CVE-2020-14883.md
@@ -24,3 +24,5 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware
 - https://github.com/fan1029/CVE-2020-14883EXP
 - https://github.com/murataydemir/CVE-2020-14883
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14883.yaml
diff --git a/2020/CVE-2020-15050.md b/2020/CVE-2020-15050.md
index 40a80c0ecb9..b6f6e78e6a3 100644
--- a/2020/CVE-2020-15050.md
+++ b/2020/CVE-2020-15050.md
@@ -15,3 +15,5 @@ An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15050.yaml
diff --git a/2020/CVE-2020-15081.md b/2020/CVE-2020-15081.md
index 36dc3998f78..bf998e62624 100644
--- a/2020/CVE-2020-15081.md
+++ b/2020/CVE-2020-15081.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15081.yaml
diff --git a/2020/CVE-2020-15129.md b/2020/CVE-2020-15129.md
index 61511ea9352..f7251589bb7 100644
--- a/2020/CVE-2020-15129.md
+++ b/2020/CVE-2020-15129.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15129.yaml
diff --git a/2020/CVE-2020-15148.md b/2020/CVE-2020-15148.md
index 763c3c1feeb..7b20c5c4cd4 100644
--- a/2020/CVE-2020-15148.md
+++ b/2020/CVE-2020-15148.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/0xkami/cve-2020-15148
 - https://github.com/Maskhe/CVE-2020-15148-bypasses
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15148.yaml
diff --git a/2020/CVE-2020-15227.md b/2020/CVE-2020-15227.md
index cadf775550a..0864de5ddd2 100644
--- a/2020/CVE-2020-15227.md
+++ b/2020/CVE-2020-15227.md
@@ -22,3 +22,5 @@ No PoCs from references.
 - https://github.com/filipsedivy/CVE-2020-15227
 - https://github.com/hu4wufu/CVE-2020-15227
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15227.yaml
diff --git a/2020/CVE-2020-15415.md b/2020/CVE-2020-15415.md
index 097509e94e5..a35c396e54d 100644
--- a/2020/CVE-2020-15415.md
+++ b/2020/CVE-2020-15415.md
@@ -17,3 +17,5 @@ On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mai
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15415.yaml
diff --git a/2020/CVE-2020-15500.md b/2020/CVE-2020-15500.md
index 85fe8413f34..c4ecd5d2b3b 100644
--- a/2020/CVE-2020-15500.md
+++ b/2020/CVE-2020-15500.md
@@ -15,3 +15,5 @@ An issue was discovered in server.js in TileServer GL through 3.0.0. The content
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15500.yaml
diff --git a/2020/CVE-2020-15505.md b/2020/CVE-2020-15505.md
index f20117e9182..0be9b337c70 100644
--- a/2020/CVE-2020-15505.md
+++ b/2020/CVE-2020-15505.md
@@ -17,3 +17,5 @@ A remote code execution vulnerability in MobileIron Core & Connector versions 10
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15505.yaml
diff --git a/2020/CVE-2020-15568.md b/2020/CVE-2020-15568.md
index a0019773ac3..12f3d97448c 100644
--- a/2020/CVE-2020-15568.md
+++ b/2020/CVE-2020-15568.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/divinepwner/TerraMaster-TOS-CVE-2020-15568
 - https://github.com/n0bugz/CVE-2020-15568
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15568.yaml
diff --git a/2020/CVE-2020-15718.md b/2020/CVE-2020-15718.md
index b2b310c8930..528dabffb2f 100644
--- a/2020/CVE-2020-15718.md
+++ b/2020/CVE-2020-15718.md
@@ -15,3 +15,5 @@ RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-sup
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15718.yaml
diff --git a/2020/CVE-2020-15867.md b/2020/CVE-2020-15867.md
index 4554a1a68b6..b07a43bf5c9 100644
--- a/2020/CVE-2020-15867.md
+++ b/2020/CVE-2020-15867.md
@@ -15,3 +15,5 @@ The git hook feature in Gogs 0.5.5 through 0.12.2 allows for authenticated remot
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15867.yaml
diff --git a/2020/CVE-2020-15895.md b/2020/CVE-2020-15895.md
index e0220e299ba..5b84ad38c30 100644
--- a/2020/CVE-2020-15895.md
+++ b/2020/CVE-2020-15895.md
@@ -15,3 +15,5 @@ An XSS issue was discovered on D-Link DIR-816L devices 2.x before 1.10b04Beta02.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15895.yaml
diff --git a/2020/CVE-2020-15906.md b/2020/CVE-2020-15906.md
index e1926c0d2e1..9202a4ed4f5 100644
--- a/2020/CVE-2020-15906.md
+++ b/2020/CVE-2020-15906.md
@@ -15,3 +15,5 @@ tiki-login.php in Tiki before 21.2 sets the admin password to a blank value afte
 #### Github
 - https://github.com/S1lkys/CVE-2020-15906
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15906.yaml
diff --git a/2020/CVE-2020-15920.md b/2020/CVE-2020-15920.md
index 2832bcea675..1bcd1b8d46a 100644
--- a/2020/CVE-2020-15920.md
+++ b/2020/CVE-2020-15920.md
@@ -17,3 +17,5 @@ There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15920.yaml
diff --git a/2020/CVE-2020-16139.md b/2020/CVE-2020-16139.md
index 9a33ec2cb80..2dd8f3d1fec 100644
--- a/2020/CVE-2020-16139.md
+++ b/2020/CVE-2020-16139.md
@@ -17,3 +17,5 @@ A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through
 - https://github.com/Fans0n-Fan/Cisco-7937G-All-In-One-Exploiter
 - https://github.com/blacklanternsecurity/Cisco-7937G-PoCs
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-16139.yaml
diff --git a/2020/CVE-2020-16248.md b/2020/CVE-2020-16248.md
index 0f0acec0f48..407148be3f5 100644
--- a/2020/CVE-2020-16248.md
+++ b/2020/CVE-2020-16248.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-16248.yaml
diff --git a/2020/CVE-2020-16846.md b/2020/CVE-2020-16846.md
index 3a6aac859de..b0e8bb046a5 100644
--- a/2020/CVE-2020-16846.md
+++ b/2020/CVE-2020-16846.md
@@ -17,3 +17,5 @@ An issue was discovered in SaltStack Salt through 3002. Sending crafted web requ
 #### Github
 - https://github.com/zomy22/CVE-2020-16846-Saltstack-Salt-API
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-16846.yaml
diff --git a/2020/CVE-2020-16952.md b/2020/CVE-2020-16952.md
index bb4dcd5c23d..58b47a87257 100644
--- a/2020/CVE-2020-16952.md
+++ b/2020/CVE-2020-16952.md
@@ -18,3 +18,5 @@
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-16952.yaml
diff --git a/2020/CVE-2020-17362.md b/2020/CVE-2020-17362.md
index 82941fbd4f7..09177983715 100644
--- a/2020/CVE-2020-17362.md
+++ b/2020/CVE-2020-17362.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17362.yaml
diff --git a/2020/CVE-2020-17453.md b/2020/CVE-2020-17453.md
index d9f1be856a9..206bcdf9cc7 100644
--- a/2020/CVE-2020-17453.md
+++ b/2020/CVE-2020-17453.md
@@ -16,3 +16,5 @@ WSO2 Management Console through 5.10 allows XSS via the carbon/admin/login.jsp m
 - https://github.com/karthi-the-hacker/CVE-2020-17453
 - https://github.com/ydycjz6j/CVE-2020-17453-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17453.yaml
diff --git a/2020/CVE-2020-17456.md b/2020/CVE-2020-17456.md
index cad59921f5a..8e23ba0ac3c 100644
--- a/2020/CVE-2020-17456.md
+++ b/2020/CVE-2020-17456.md
@@ -19,3 +19,5 @@ SEOWON INTECH SLC-130 And SLR-120S devices allow Remote Code Execution via the i
 - https://github.com/Al1ex/CVE-2020-17456
 - https://github.com/maj0rmil4d/Seowon-SlC-130-And-SLR-120S-Exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17456.yaml
diff --git a/2020/CVE-2020-17463.md b/2020/CVE-2020-17463.md
index 97b070ef5f8..2d3f756bd97 100644
--- a/2020/CVE-2020-17463.md
+++ b/2020/CVE-2020-17463.md
@@ -16,3 +16,5 @@ FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /perm
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17463.yaml
diff --git a/2020/CVE-2020-17496.md b/2020/CVE-2020-17496.md
index 56d9d52dab0..e105eae530f 100644
--- a/2020/CVE-2020-17496.md
+++ b/2020/CVE-2020-17496.md
@@ -17,3 +17,5 @@ vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWid
 #### Github
 - https://github.com/ctlyz123/CVE-2020-17496
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17496.yaml
diff --git a/2020/CVE-2020-17505.md b/2020/CVE-2020-17505.md
index 6f4518cd2e2..f93202a0af0 100644
--- a/2020/CVE-2020-17505.md
+++ b/2020/CVE-2020-17505.md
@@ -15,3 +15,5 @@ Artica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject c
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17505.yaml
diff --git a/2020/CVE-2020-17506.md b/2020/CVE-2020-17506.md
index a32b8e4cf99..eaf92ea6d99 100644
--- a/2020/CVE-2020-17506.md
+++ b/2020/CVE-2020-17506.md
@@ -16,3 +16,5 @@ Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detect
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17506.yaml
diff --git a/2020/CVE-2020-17518.md b/2020/CVE-2020-17518.md
index 69372f28257..6674a94f4c5 100644
--- a/2020/CVE-2020-17518.md
+++ b/2020/CVE-2020-17518.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/murataydemir/CVE-2020-17518
 - https://github.com/rakjong/Flink-CVE-2020-17518-getshell
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17518.yaml
diff --git a/2020/CVE-2020-17519.md b/2020/CVE-2020-17519.md
index 75357dccd00..61abff484d2 100644
--- a/2020/CVE-2020-17519.md
+++ b/2020/CVE-2020-17519.md
@@ -28,3 +28,5 @@ A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as
 - https://github.com/yaunsky/CVE-2020-17519-Apache-Flink
 - https://github.com/zhangweijie11/CVE-2020-17519
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17519.yaml
diff --git a/2020/CVE-2020-17526.md b/2020/CVE-2020-17526.md
index 541b211789f..b1e46059aad 100644
--- a/2020/CVE-2020-17526.md
+++ b/2020/CVE-2020-17526.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17526.yaml
diff --git a/2020/CVE-2020-17530.md b/2020/CVE-2020-17530.md
index dc5c6fdf7e5..0d4c1fa3b0e 100644
--- a/2020/CVE-2020-17530.md
+++ b/2020/CVE-2020-17530.md
@@ -40,3 +40,5 @@ Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may
 - https://github.com/wuzuowei/CVE-2020-17530
 - https://github.com/z92g/CVE-2021-31805
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17530.yaml
diff --git a/2020/CVE-2020-18268.md b/2020/CVE-2020-18268.md
index e0e547fde78..b0906c07b8f 100644
--- a/2020/CVE-2020-18268.md
+++ b/2020/CVE-2020-18268.md
@@ -15,3 +15,5 @@ Open Redirect in Z-BlogPHP v1.5.2 and earlier allows remote attackers to obtain
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-18268.yaml
diff --git a/2020/CVE-2020-19282.md b/2020/CVE-2020-19282.md
index 47979844ab0..050c299daa9 100644
--- a/2020/CVE-2020-19282.md
+++ b/2020/CVE-2020-19282.md
@@ -15,3 +15,5 @@ A reflected cross-site scripting (XSS) vulnerability in Jeesns 1.4.2 allows atta
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19282.yaml
diff --git a/2020/CVE-2020-19283.md b/2020/CVE-2020-19283.md
index 2ce94c82004..4bdc8b1549d 100644
--- a/2020/CVE-2020-19283.md
+++ b/2020/CVE-2020-19283.md
@@ -15,3 +15,5 @@ A reflected cross-site scripting (XSS) vulnerability in the /newVersion componen
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19283.yaml
diff --git a/2020/CVE-2020-19295.md b/2020/CVE-2020-19295.md
index e7c15355851..03c3760bbdd 100644
--- a/2020/CVE-2020-19295.md
+++ b/2020/CVE-2020-19295.md
@@ -15,3 +15,5 @@ A reflected cross-site scripting (XSS) vulnerability in the /weibo/topic compone
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19295.yaml
diff --git a/2020/CVE-2020-19360.md b/2020/CVE-2020-19360.md
index 28a01b6af5b..0430c9a0600 100644
--- a/2020/CVE-2020-19360.md
+++ b/2020/CVE-2020-19360.md
@@ -16,3 +16,5 @@ Local file inclusion in FHEM 6.0 allows in fhem/FileLog_logWrapper file paramete
 - https://github.com/a1665454764/CVE-2020-19360
 - https://github.com/zzzz966/CVE-2020-19360
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19360.yaml
diff --git a/2020/CVE-2020-19363.md b/2020/CVE-2020-19363.md
index 1ddbcce752c..601a0abf17f 100644
--- a/2020/CVE-2020-19363.md
+++ b/2020/CVE-2020-19363.md
@@ -15,3 +15,5 @@ Vtiger CRM v7.2.0 allows an attacker to display hidden files, list directories b
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19363.yaml
diff --git a/2020/CVE-2020-1938.md b/2020/CVE-2020-1938.md
index f09a4b4976a..9095aea2a2a 100644
--- a/2020/CVE-2020-1938.md
+++ b/2020/CVE-2020-1938.md
@@ -53,3 +53,5 @@ When using the Apache JServ Protocol (AJP), care must be taken when trusting inc
 - https://github.com/wukong-bin/PeiQi-LandGrey-ClassHound
 - https://github.com/xindongzhuaizhuai/CVE-2020-1938
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-1938.yaml
diff --git a/2020/CVE-2020-1943.md b/2020/CVE-2020-1943.md
index f8d2c123c46..f7d6200ad35 100644
--- a/2020/CVE-2020-1943.md
+++ b/2020/CVE-2020-1943.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-1943.yaml
diff --git a/2020/CVE-2020-1956.md b/2020/CVE-2020-1956.md
index 66d680a9db4..a74b1616b9e 100644
--- a/2020/CVE-2020-1956.md
+++ b/2020/CVE-2020-1956.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 - https://github.com/b510/CVE-2020-1956
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-1956.yaml
diff --git a/2020/CVE-2020-19625.md b/2020/CVE-2020-19625.md
index e065f09c92d..16feae4c56d 100644
--- a/2020/CVE-2020-19625.md
+++ b/2020/CVE-2020-19625.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19625.yaml
diff --git a/2020/CVE-2020-20285.md b/2020/CVE-2020-20285.md
index d955f208f7c..7c2d9d74783 100644
--- a/2020/CVE-2020-20285.md
+++ b/2020/CVE-2020-20285.md
@@ -15,3 +15,5 @@ There is a XSS in the user login page in zzcms 2019. Users can inject js code by
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20285.yaml
diff --git a/2020/CVE-2020-20300.md b/2020/CVE-2020-20300.md
index c9e14e342ff..de0f7740429 100644
--- a/2020/CVE-2020-20300.md
+++ b/2020/CVE-2020-20300.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20300.yaml
diff --git a/2020/CVE-2020-2036.md b/2020/CVE-2020-2036.md
index e3d8f1c9736..bebcb767134 100644
--- a/2020/CVE-2020-2036.md
+++ b/2020/CVE-2020-2036.md
@@ -17,3 +17,5 @@ A reflected cross-site scripting (XSS) vulnerability exists in the PAN-OS manage
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2036.yaml
diff --git a/2020/CVE-2020-20627.md b/2020/CVE-2020-20627.md
index 8d8656eb6e2..0fea5ac408c 100644
--- a/2020/CVE-2020-20627.md
+++ b/2020/CVE-2020-20627.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20627.yaml
diff --git a/2020/CVE-2020-2096.md b/2020/CVE-2020-2096.md
index 027c184a242..d10c4bb7a70 100644
--- a/2020/CVE-2020-2096.md
+++ b/2020/CVE-2020-2096.md
@@ -16,3 +16,5 @@ Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2096.yaml
diff --git a/2020/CVE-2020-20982.md b/2020/CVE-2020-20982.md
index 67fc790ab6b..a25b8441a89 100644
--- a/2020/CVE-2020-20982.md
+++ b/2020/CVE-2020-20982.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20982.yaml
diff --git a/2020/CVE-2020-20988.md b/2020/CVE-2020-20988.md
index 3254b96f01f..edd19abd612 100644
--- a/2020/CVE-2020-20988.md
+++ b/2020/CVE-2020-20988.md
@@ -15,3 +15,5 @@ A cross site scripting (XSS) vulnerability in the /domains/cost-by-owner.php com
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20988.yaml
diff --git a/2020/CVE-2020-2103.md b/2020/CVE-2020-2103.md
index d13ab656aa3..5d2dc00f94f 100644
--- a/2020/CVE-2020-2103.md
+++ b/2020/CVE-2020-2103.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2103.yaml
diff --git a/2020/CVE-2020-21224.md b/2020/CVE-2020-21224.md
index 84bb84380f1..49dc85cb93e 100644
--- a/2020/CVE-2020-21224.md
+++ b/2020/CVE-2020-21224.md
@@ -15,3 +15,5 @@ A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-21224.yaml
diff --git a/2020/CVE-2020-2140.md b/2020/CVE-2020-2140.md
index be51fadc55f..6580bf93be3 100644
--- a/2020/CVE-2020-2140.md
+++ b/2020/CVE-2020-2140.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2140.yaml
diff --git a/2020/CVE-2020-21998.md b/2020/CVE-2020-21998.md
index dc8dd52be1d..7878d105dea 100644
--- a/2020/CVE-2020-21998.md
+++ b/2020/CVE-2020-21998.md
@@ -15,3 +15,5 @@ In HomeAutomation 3.3.2 input passed via the 'redirect' GET parameter in 'api.ph
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-21998.yaml
diff --git a/2020/CVE-2020-22165.md b/2020/CVE-2020-22165.md
index 7b02cd102f6..f800fdde9bf 100644
--- a/2020/CVE-2020-22165.md
+++ b/2020/CVE-2020-22165.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22165.yaml
diff --git a/2020/CVE-2020-22208.md b/2020/CVE-2020-22208.md
index ad8ad5539ea..81394724d3d 100644
--- a/2020/CVE-2020-22208.md
+++ b/2020/CVE-2020-22208.md
@@ -15,3 +15,5 @@ SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajax_street.php.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22208.yaml
diff --git a/2020/CVE-2020-22209.md b/2020/CVE-2020-22209.md
index 33412f95a43..e8971baf23e 100644
--- a/2020/CVE-2020-22209.md
+++ b/2020/CVE-2020-22209.md
@@ -15,3 +15,5 @@ SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajax_common.php.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22209.yaml
diff --git a/2020/CVE-2020-22210.md b/2020/CVE-2020-22210.md
index 0116358affe..251645b0f4a 100644
--- a/2020/CVE-2020-22210.md
+++ b/2020/CVE-2020-22210.md
@@ -15,3 +15,5 @@ SQL Injection in 74cms 3.2.0 via the x parameter to ajax_officebuilding.php.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22210.yaml
diff --git a/2020/CVE-2020-22211.md b/2020/CVE-2020-22211.md
index d5eb251b209..8d60fefc5a8 100644
--- a/2020/CVE-2020-22211.md
+++ b/2020/CVE-2020-22211.md
@@ -15,3 +15,5 @@ SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajax_street.php.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22211.yaml
diff --git a/2020/CVE-2020-22840.md b/2020/CVE-2020-22840.md
index 84452248101..0206e8e4c38 100644
--- a/2020/CVE-2020-22840.md
+++ b/2020/CVE-2020-22840.md
@@ -16,3 +16,5 @@ Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22840.yaml
diff --git a/2020/CVE-2020-23015.md b/2020/CVE-2020-23015.md
index 6f058c7cfdc..a9f4c97f3c5 100644
--- a/2020/CVE-2020-23015.md
+++ b/2020/CVE-2020-23015.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23015.yaml
diff --git a/2020/CVE-2020-23517.md b/2020/CVE-2020-23517.md
index ad0a57ac3bf..f5febfc5e58 100644
--- a/2020/CVE-2020-23517.md
+++ b/2020/CVE-2020-23517.md
@@ -15,3 +15,5 @@ Cross Site Scripting (XSS) vulnerability in Aryanic HighMail (High CMS) versions
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23517.yaml
diff --git a/2020/CVE-2020-23575.md b/2020/CVE-2020-23575.md
index 8a548489541..302545d5a06 100644
--- a/2020/CVE-2020-23575.md
+++ b/2020/CVE-2020-23575.md
@@ -15,3 +15,5 @@ A directory traversal vulnerability exists in Kyocera Printer d-COPIA253MF plus.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23575.yaml
diff --git a/2020/CVE-2020-23697.md b/2020/CVE-2020-23697.md
index 2ed40cb98f8..b27bcf257ac 100644
--- a/2020/CVE-2020-23697.md
+++ b/2020/CVE-2020-23697.md
@@ -15,3 +15,5 @@ Cross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the page feature in a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23697.yaml
diff --git a/2020/CVE-2020-23814.md b/2020/CVE-2020-23814.md
index b04779127a4..5c7eb612849 100644
--- a/2020/CVE-2020-23814.md
+++ b/2020/CVE-2020-23814.md
@@ -15,3 +15,5 @@ Multiple cross-site scripting (XSS) vulnerabilities in xxl-job v2.2.0 allow remo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23814.yaml
diff --git a/2020/CVE-2020-23972.md b/2020/CVE-2020-23972.md
index 99dbad86cc2..5fc9029a941 100644
--- a/2020/CVE-2020-23972.md
+++ b/2020/CVE-2020-23972.md
@@ -16,3 +16,5 @@ In Joomla Component GMapFP Version J3.5 and J3.5free, an attacker can access the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23972.yaml
diff --git a/2020/CVE-2020-24148.md b/2020/CVE-2020-24148.md
index 84d0d0ab8a0..4525186d740 100644
--- a/2020/CVE-2020-24148.md
+++ b/2020/CVE-2020-24148.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/dwisiswant0/CVE-2020-24148
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24148.yaml
diff --git a/2020/CVE-2020-24186.md b/2020/CVE-2020-24186.md
index e59629280d6..327970d9f49 100644
--- a/2020/CVE-2020-24186.md
+++ b/2020/CVE-2020-24186.md
@@ -24,3 +24,5 @@ A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0
 - https://github.com/meicookies/CVE-2020-24186
 - https://github.com/substing/CVE-2020-24186_reverse_shell_upload
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24186.yaml
diff --git a/2020/CVE-2020-24223.md b/2020/CVE-2020-24223.md
index d6dff12aa44..f1a421e868f 100644
--- a/2020/CVE-2020-24223.md
+++ b/2020/CVE-2020-24223.md
@@ -17,3 +17,5 @@ Mara CMS 7.5 allows cross-site scripting (XSS) in contact.php via the theme or p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24223.yaml
diff --git a/2020/CVE-2020-24285.md b/2020/CVE-2020-24285.md
index d255c6a62a2..f0a2120ba9f 100644
--- a/2020/CVE-2020-24285.md
+++ b/2020/CVE-2020-24285.md
@@ -15,3 +15,5 @@ INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain se
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24285.yaml
diff --git a/2020/CVE-2020-24312.md b/2020/CVE-2020-24312.md
index 8c5830850c7..cf3d12d60aa 100644
--- a/2020/CVE-2020-24312.md
+++ b/2020/CVE-2020-24312.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24312.yaml
diff --git a/2020/CVE-2020-24391.md b/2020/CVE-2020-24391.md
index cbff96dcf67..2694ef6d85e 100644
--- a/2020/CVE-2020-24391.md
+++ b/2020/CVE-2020-24391.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24391.yaml
diff --git a/2020/CVE-2020-24550.md b/2020/CVE-2020-24550.md
index 55c4f9d78b3..a3128f77478 100644
--- a/2020/CVE-2020-24550.md
+++ b/2020/CVE-2020-24550.md
@@ -15,3 +15,5 @@ An Open Redirect vulnerability in EpiServer Find before 13.2.7 allows an attacke
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24550.yaml
diff --git a/2020/CVE-2020-24571.md b/2020/CVE-2020-24571.md
index 618daec2402..cb0637cbd13 100644
--- a/2020/CVE-2020-24571.md
+++ b/2020/CVE-2020-24571.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24571.yaml
diff --git a/2020/CVE-2020-24579.md b/2020/CVE-2020-24579.md
index 9812c2c2cb3..34d096ce972 100644
--- a/2020/CVE-2020-24579.md
+++ b/2020/CVE-2020-24579.md
@@ -15,3 +15,5 @@ An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24579.yaml
diff --git a/2020/CVE-2020-24589.md b/2020/CVE-2020-24589.md
index 1018eec9dae..170932332ae 100644
--- a/2020/CVE-2020-24589.md
+++ b/2020/CVE-2020-24589.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24589.yaml
diff --git a/2020/CVE-2020-24701.md b/2020/CVE-2020-24701.md
index 57c9aa4c183..335dfc02416 100644
--- a/2020/CVE-2020-24701.md
+++ b/2020/CVE-2020-24701.md
@@ -17,3 +17,5 @@ OX App Suite through 7.10.4 allows XSS via the app loading mechanism (the PATH_I
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24701.yaml
diff --git a/2020/CVE-2020-24881.md b/2020/CVE-2020-24881.md
index 6697a2e6a36..fec1ae4d9b4 100644
--- a/2020/CVE-2020-24881.md
+++ b/2020/CVE-2020-24881.md
@@ -16,3 +16,5 @@ SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file
 #### Github
 - https://github.com/harshtech123/cve-2020-24881
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24881.yaml
diff --git a/2020/CVE-2020-24902.md b/2020/CVE-2020-24902.md
index 6730443780b..af7f199b62b 100644
--- a/2020/CVE-2020-24902.md
+++ b/2020/CVE-2020-24902.md
@@ -15,3 +15,5 @@ Quixplorer <=2.4.1 is vulnerable to reflected cross-site scripting (XSS) caused
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24902.yaml
diff --git a/2020/CVE-2020-24903.md b/2020/CVE-2020-24903.md
index 728b1dcae43..52c1c538ad5 100644
--- a/2020/CVE-2020-24903.md
+++ b/2020/CVE-2020-24903.md
@@ -15,3 +15,5 @@ Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting (XSS
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24903.yaml
diff --git a/2020/CVE-2020-24912.md b/2020/CVE-2020-24912.md
index 3d9f2e70f88..8425409ff1a 100644
--- a/2020/CVE-2020-24912.md
+++ b/2020/CVE-2020-24912.md
@@ -16,3 +16,5 @@ A reflected cross-site scripting (XSS) vulnerability in qcubed (all versions inc
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24912.yaml
diff --git a/2020/CVE-2020-24949.md b/2020/CVE-2020-24949.md
index 9edfd096208..93eb2dec072 100644
--- a/2020/CVE-2020-24949.md
+++ b/2020/CVE-2020-24949.md
@@ -15,3 +15,5 @@ Privilege escalation in PHP-Fusion 9.03.50 downloads/downloads.php allows an aut
 #### Github
 - https://github.com/r90tpass/CVE-2020-24949
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24949.yaml
diff --git a/2020/CVE-2020-25078.md b/2020/CVE-2020-25078.md
index a3dd7f56561..d8849279c94 100644
--- a/2020/CVE-2020-25078.md
+++ b/2020/CVE-2020-25078.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/antx-code/pocx
 - https://github.com/chinaYozz/CVE-2020-25078
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25078.yaml
diff --git a/2020/CVE-2020-25200.md b/2020/CVE-2020-25200.md
index 8e6a84902a3..cfc17283c51 100644
--- a/2020/CVE-2020-25200.md
+++ b/2020/CVE-2020-25200.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/lukaszstu/pritunl-CVE-2020-25200
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25200.yaml
diff --git a/2020/CVE-2020-25213.md b/2020/CVE-2020-25213.md
index 6cf256bb31c..3c0e8b1d81b 100644
--- a/2020/CVE-2020-25213.md
+++ b/2020/CVE-2020-25213.md
@@ -29,3 +29,5 @@ The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote
 - https://github.com/piruprohacking/CVE-2020-25213
 - https://github.com/w4fz5uck5/wp-file-manager-0day
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25213.yaml
diff --git a/2020/CVE-2020-25223.md b/2020/CVE-2020-25223.md
index 2d3a8a78e27..7bdc55a2c12 100644
--- a/2020/CVE-2020-25223.md
+++ b/2020/CVE-2020-25223.md
@@ -20,3 +20,5 @@ A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM be
 - https://github.com/maguireja/CVE-2020-25223
 - https://github.com/twentybel0w/CVE-2020-25223
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25223.yaml
diff --git a/2020/CVE-2020-25495.md b/2020/CVE-2020-25495.md
index 7ba03d67c50..cab92e62b08 100644
--- a/2020/CVE-2020-25495.md
+++ b/2020/CVE-2020-25495.md
@@ -16,3 +16,5 @@ A reflected Cross-site scripting (XSS) vulnerability in Xinuo (formerly SCO) Ope
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25495.yaml
diff --git a/2020/CVE-2020-25506.md b/2020/CVE-2020-25506.md
index a5ee71d386c..11a220cb784 100644
--- a/2020/CVE-2020-25506.md
+++ b/2020/CVE-2020-25506.md
@@ -17,3 +17,5 @@ D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the s
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25506.yaml
diff --git a/2020/CVE-2020-2551.md b/2020/CVE-2020-2551.md
index ff39d9254fa..f3295567967 100644
--- a/2020/CVE-2020-2551.md
+++ b/2020/CVE-2020-2551.md
@@ -32,3 +32,5 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware
 - https://github.com/wukong-bin/weblogicpoc
 - https://github.com/zzwlpx/weblogicPoc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2551.yaml
diff --git a/2020/CVE-2020-25540.md b/2020/CVE-2020-25540.md
index 154ca2297e2..e47a5b74175 100644
--- a/2020/CVE-2020-25540.md
+++ b/2020/CVE-2020-25540.md
@@ -19,3 +19,5 @@ ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorize
 - https://github.com/lowkey0808/cve-2020-25540
 - https://github.com/simonlee-hello/CVE-2020-25540
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25540.yaml
diff --git a/2020/CVE-2020-25780.md b/2020/CVE-2020-25780.md
index 8e408dacc0c..a3e0cd6df5d 100644
--- a/2020/CVE-2020-25780.md
+++ b/2020/CVE-2020-25780.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25780.yaml
diff --git a/2020/CVE-2020-25864.md b/2020/CVE-2020-25864.md
index 1fcf5707fd6..e4b3dd5db56 100644
--- a/2020/CVE-2020-25864.md
+++ b/2020/CVE-2020-25864.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25864.yaml
diff --git a/2020/CVE-2020-26073.md b/2020/CVE-2020-26073.md
index 662a7383b30..3bb75753b84 100644
--- a/2020/CVE-2020-26073.md
+++ b/2020/CVE-2020-26073.md
@@ -51,7 +51,8 @@
 
 ### Description
 
-A vulnerability in the application data endpoints of Cisco&nbsp;SD-WAN vManage Software could allow an unauthenticated, remote attacker to gain access to sensitive information.
The vulnerability is due to improper validation of directory traversal character sequences within requests to application programmatic interfaces (APIs). An attacker could exploit this vulnerability by sending malicious requests to an API within the affected application. A successful exploit could allow the attacker to conduct directory traversal attacks and gain access to sensitive information including credentials or user tokens.Cisco&nbsp;has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
+A vulnerability in the application data endpoints of Cisco&nbsp;SD-WAN vManage Software could allow an unauthenticated, remote attacker to gain access to sensitive information.
+The vulnerability is due to improper validation of directory traversal character sequences within requests to application programmatic interfaces (APIs). An attacker could exploit this vulnerability by sending malicious requests to an API within the affected application. A successful exploit could allow the attacker to conduct directory traversal attacks and gain access to sensitive information including credentials or user tokens.Cisco&nbsp;has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
 
 ### POC
 
@@ -61,3 +62,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26073.yaml
diff --git a/2020/CVE-2020-26153.md b/2020/CVE-2020-26153.md
index 98dcf044fb6..edd86630555 100644
--- a/2020/CVE-2020-26153.md
+++ b/2020/CVE-2020-26153.md
@@ -15,3 +15,5 @@ A cross-site scripting (XSS) vulnerability in wp-content/plugins/event-espresso-
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26153.yaml
diff --git a/2020/CVE-2020-26214.md b/2020/CVE-2020-26214.md
index 9eb3cce33ba..a76f542fb7a 100644
--- a/2020/CVE-2020-26214.md
+++ b/2020/CVE-2020-26214.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26214.yaml
diff --git a/2020/CVE-2020-26217.md b/2020/CVE-2020-26217.md
index 91a24d80d58..0cb73f767b5 100644
--- a/2020/CVE-2020-26217.md
+++ b/2020/CVE-2020-26217.md
@@ -25,3 +25,5 @@ XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnera
 - https://github.com/novysodope/CVE-2020-26217-XStream-RCE-POC
 - https://github.com/shoucheng3/x-stream__xstream_CVE-2020-26217_1-4-14-java7
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26217.yaml
diff --git a/2020/CVE-2020-26248.md b/2020/CVE-2020-26248.md
index 7b666bab30f..ddc9f5a76fc 100644
--- a/2020/CVE-2020-26248.md
+++ b/2020/CVE-2020-26248.md
@@ -15,3 +15,5 @@ In the PrestaShop module "productcomments" before version 4.2.1, an attacker can
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26248.yaml
diff --git a/2020/CVE-2020-26258.md b/2020/CVE-2020-26258.md
index 66ff0d0dc1b..6ea9854c408 100644
--- a/2020/CVE-2020-26258.md
+++ b/2020/CVE-2020-26258.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/cuijiung/xstream-CVE-2020-26258
 - https://github.com/jas502n/CVE-2020-26259
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26258.yaml
diff --git a/2020/CVE-2020-26413.md b/2020/CVE-2020-26413.md
index a7156b997c9..8565f06de8e 100644
--- a/2020/CVE-2020-26413.md
+++ b/2020/CVE-2020-26413.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Kento-Sec/GitLab-Graphql-CVE-2020-26413
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26413.yaml
diff --git a/2020/CVE-2020-26836.md b/2020/CVE-2020-26836.md
index 692ad150a10..23d9d0bebe1 100644
--- a/2020/CVE-2020-26836.md
+++ b/2020/CVE-2020-26836.md
@@ -15,3 +15,5 @@ SAP Solution Manager (Trace Analysis), version - 720, allows for misuse of a par
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26836.yaml
diff --git a/2020/CVE-2020-26876.md b/2020/CVE-2020-26876.md
index 738ccfbefb2..aae396fdc74 100644
--- a/2020/CVE-2020-26876.md
+++ b/2020/CVE-2020-26876.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26876.yaml
diff --git a/2020/CVE-2020-26879.md b/2020/CVE-2020-26879.md
index 32eecf3485e..ba785591ac1 100644
--- a/2020/CVE-2020-26879.md
+++ b/2020/CVE-2020-26879.md
@@ -18,3 +18,5 @@ Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into valid
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26879.yaml
diff --git a/2020/CVE-2020-26919.md b/2020/CVE-2020-26919.md
index e88cfffe613..0bd85d93d66 100644
--- a/2020/CVE-2020-26919.md
+++ b/2020/CVE-2020-26919.md
@@ -16,3 +16,5 @@ NETGEAR JGS516PE devices before 2.6.0.43 are affected by lack of access control
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26919.yaml
diff --git a/2020/CVE-2020-26935.md b/2020/CVE-2020-26935.md
index 4232c5bc45c..fb0f073826a 100644
--- a/2020/CVE-2020-26935.md
+++ b/2020/CVE-2020-26935.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26935.yaml
diff --git a/2020/CVE-2020-26948.md b/2020/CVE-2020-26948.md
index 1e5878ac521..cc9633d6841 100644
--- a/2020/CVE-2020-26948.md
+++ b/2020/CVE-2020-26948.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26948.yaml
diff --git a/2020/CVE-2020-27191.md b/2020/CVE-2020-27191.md
index 9cc02d4df9d..58380e5e854 100644
--- a/2020/CVE-2020-27191.md
+++ b/2020/CVE-2020-27191.md
@@ -15,3 +15,5 @@ LionWiki before 3.2.12 allows an unauthenticated user to read files as the web s
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27191.yaml
diff --git a/2020/CVE-2020-2733.md b/2020/CVE-2020-2733.md
index 859f6796388..c80f5bf2ed8 100644
--- a/2020/CVE-2020-2733.md
+++ b/2020/CVE-2020-2733.md
@@ -15,3 +15,5 @@ Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards
 #### Github
 - https://github.com/anmolksachan/CVE-2020-2733
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2733.yaml
diff --git a/2020/CVE-2020-27361.md b/2020/CVE-2020-27361.md
index 857e1515cb0..9075bb4b795 100644
--- a/2020/CVE-2020-27361.md
+++ b/2020/CVE-2020-27361.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27361.yaml
diff --git a/2020/CVE-2020-27467.md b/2020/CVE-2020-27467.md
index 3073f045176..e2284f65c65 100644
--- a/2020/CVE-2020-27467.md
+++ b/2020/CVE-2020-27467.md
@@ -15,3 +15,5 @@ A Directory Traversal vulnerability exits in Processwire CMS before 2.7.1 via th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27467.yaml
diff --git a/2020/CVE-2020-27481.md b/2020/CVE-2020-27481.md
index 2a909572311..de22e0f8d34 100644
--- a/2020/CVE-2020-27481.md
+++ b/2020/CVE-2020-27481.md
@@ -15,3 +15,5 @@ An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27481.yaml
diff --git a/2020/CVE-2020-27615.md b/2020/CVE-2020-27615.md
index 2550b0a9bfc..fad1d717337 100644
--- a/2020/CVE-2020-27615.md
+++ b/2020/CVE-2020-27615.md
@@ -17,3 +17,5 @@ The Loginizer plugin before 1.6.4 for WordPress allows SQL injection (with resul
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27615.yaml
diff --git a/2020/CVE-2020-27735.md b/2020/CVE-2020-27735.md
index d9f6b021d79..06e94e4ce20 100644
--- a/2020/CVE-2020-27735.md
+++ b/2020/CVE-2020-27735.md
@@ -15,3 +15,5 @@ An XSS issue was discovered in Wing FTP 6.4.4. An arbitrary IFRAME element can b
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27735.yaml
diff --git a/2020/CVE-2020-27838.md b/2020/CVE-2020-27838.md
index 58b2bb1d740..0890b284989 100644
--- a/2020/CVE-2020-27838.md
+++ b/2020/CVE-2020-27838.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Cappricio-Securities/CVE-2020-27838
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27838.yaml
diff --git a/2020/CVE-2020-27866.md b/2020/CVE-2020-27866.md
index e42f2b2699a..c4a58efb1ab 100644
--- a/2020/CVE-2020-27866.md
+++ b/2020/CVE-2020-27866.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27866.yaml
diff --git a/2020/CVE-2020-27982.md b/2020/CVE-2020-27982.md
index dfcedcd51e2..22bfde10a94 100644
--- a/2020/CVE-2020-27982.md
+++ b/2020/CVE-2020-27982.md
@@ -16,3 +16,5 @@ IceWarp 11.4.5.0 allows XSS via the language parameter.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27982.yaml
diff --git a/2020/CVE-2020-27986.md b/2020/CVE-2020-27986.md
index 3ebbac837b2..7f6ba3b8ca3 100644
--- a/2020/CVE-2020-27986.md
+++ b/2020/CVE-2020-27986.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27986.yaml
diff --git a/2020/CVE-2020-28185.md b/2020/CVE-2020-28185.md
index 7f4e3f3c835..7b04506179c 100644
--- a/2020/CVE-2020-28185.md
+++ b/2020/CVE-2020-28185.md
@@ -15,3 +15,5 @@ User Enumeration vulnerability in TerraMaster TOS <= 4.2.06 allows remote unauth
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28185.yaml
diff --git a/2020/CVE-2020-28188.md b/2020/CVE-2020-28188.md
index e1ecf137abf..ed48c3117ca 100644
--- a/2020/CVE-2020-28188.md
+++ b/2020/CVE-2020-28188.md
@@ -16,3 +16,5 @@ Remote Command Execution (RCE) vulnerability in TerraMaster TOS <= 4.2.06 allow
 #### Github
 - https://github.com/Dark-Clown-Security/RCE_TOS
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28188.yaml
diff --git a/2020/CVE-2020-28208.md b/2020/CVE-2020-28208.md
index 35053d97a16..615318de7f0 100644
--- a/2020/CVE-2020-28208.md
+++ b/2020/CVE-2020-28208.md
@@ -22,3 +22,5 @@ An email address enumeration vulnerability exists in the password reset function
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28208.yaml
diff --git a/2020/CVE-2020-28351.md b/2020/CVE-2020-28351.md
index cccf41a8489..5e586299227 100644
--- a/2020/CVE-2020-28351.md
+++ b/2020/CVE-2020-28351.md
@@ -15,3 +15,5 @@ The conferencing component on Mitel ShoreTel 19.46.1802.0 devices could allow an
 #### Github
 - https://github.com/dievus/CVE-2020-28351
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28351.yaml
diff --git a/2020/CVE-2020-28429.md b/2020/CVE-2020-28429.md
index 3f05408a9aa..d4d1a2f3870 100644
--- a/2020/CVE-2020-28429.md
+++ b/2020/CVE-2020-28429.md
@@ -15,3 +15,5 @@ All versions of package geojson2kml are vulnerable to Command Injection via the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28429.yaml
diff --git a/2020/CVE-2020-28653.md b/2020/CVE-2020-28653.md
index 1b97e27e8ad..bd35a7bd080 100644
--- a/2020/CVE-2020-28653.md
+++ b/2020/CVE-2020-28653.md
@@ -17,3 +17,5 @@ Zoho ManageEngine OpManager Stable build before 125203 (and Released build befor
 - https://github.com/mr-r3bot/ManageEngine-CVE-2020-28653
 - https://github.com/tuo4n8/CVE-2020-28653
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28653.yaml
diff --git a/2020/CVE-2020-2883.md b/2020/CVE-2020-2883.md
index 77f1bfb1fd5..7f6e489b37a 100644
--- a/2020/CVE-2020-2883.md
+++ b/2020/CVE-2020-2883.md
@@ -32,3 +32,5 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware
 - https://github.com/wukong-bin/weblogicpoc
 - https://github.com/zzwlpx/weblogicPoc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2020/CVE-2020-2883.yaml
diff --git a/2020/CVE-2020-28871.md b/2020/CVE-2020-28871.md
index 8f8813eb6a5..dc9b6266dae 100644
--- a/2020/CVE-2020-28871.md
+++ b/2020/CVE-2020-28871.md
@@ -18,3 +18,5 @@ Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28871.yaml
diff --git a/2020/CVE-2020-28976.md b/2020/CVE-2020-28976.md
index b8fbb822f1e..15db0431030 100644
--- a/2020/CVE-2020-28976.md
+++ b/2020/CVE-2020-28976.md
@@ -15,3 +15,5 @@ The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It all
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28976.yaml
diff --git a/2020/CVE-2020-29047.md b/2020/CVE-2020-29047.md
index bb289a214e6..2998d1107d0 100644
--- a/2020/CVE-2020-29047.md
+++ b/2020/CVE-2020-29047.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29047.yaml
diff --git a/2020/CVE-2020-29164.md b/2020/CVE-2020-29164.md
index 2a230d68e49..d03bfea6493 100644
--- a/2020/CVE-2020-29164.md
+++ b/2020/CVE-2020-29164.md
@@ -15,3 +15,5 @@ PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site sc
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29164.yaml
diff --git a/2020/CVE-2020-29214.md b/2020/CVE-2020-29214.md
index 6dd2269380a..508a7778f06 100644
--- a/2020/CVE-2020-29214.md
+++ b/2020/CVE-2020-29214.md
@@ -15,3 +15,5 @@ SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allow
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29214.yaml
diff --git a/2020/CVE-2020-29227.md b/2020/CVE-2020-29227.md
index 1799a279a7c..192d41a24f1 100644
--- a/2020/CVE-2020-29227.md
+++ b/2020/CVE-2020-29227.md
@@ -15,3 +15,5 @@ An issue was discovered in Car Rental Management System 1.0. An unauthenticated
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29227.yaml
diff --git a/2020/CVE-2020-29279.md b/2020/CVE-2020-29279.md
index 6900c514ec5..6df7fa22a6c 100644
--- a/2020/CVE-2020-29279.md
+++ b/2020/CVE-2020-29279.md
@@ -15,3 +15,5 @@ PHP remote file inclusion in the assign_resume_tpl method in Application/Common/
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29279.yaml
diff --git a/2020/CVE-2020-29390.md b/2020/CVE-2020-29390.md
index 67442f75e99..6bc5b0fce47 100644
--- a/2020/CVE-2020-29390.md
+++ b/2020/CVE-2020-29390.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29390.yaml
diff --git a/2020/CVE-2020-29395.md b/2020/CVE-2020-29395.md
index b7efdfacd2d..fb4003fdae9 100644
--- a/2020/CVE-2020-29395.md
+++ b/2020/CVE-2020-29395.md
@@ -15,3 +15,5 @@ The EventON plugin through 3.0.5 for WordPress allows addons/?q= XSS via the sea
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29395.yaml
diff --git a/2020/CVE-2020-29453.md b/2020/CVE-2020-29453.md
index 110ca3c9439..2444d02554d 100644
--- a/2020/CVE-2020-29453.md
+++ b/2020/CVE-2020-29453.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29453.yaml
diff --git a/2020/CVE-2020-29583.md b/2020/CVE-2020-29583.md
index 9465f1b1bed..69ba8873fe8 100644
--- a/2020/CVE-2020-29583.md
+++ b/2020/CVE-2020-29583.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29583.yaml
diff --git a/2020/CVE-2020-29597.md b/2020/CVE-2020-29597.md
index 56fb7ed7e84..feefd06ea36 100644
--- a/2020/CVE-2020-29597.md
+++ b/2020/CVE-2020-29597.md
@@ -15,3 +15,5 @@ IncomCMS 2.0 has a modules/uploader/showcase/script.php insecure file upload vul
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29597.yaml
diff --git a/2020/CVE-2020-3187.md b/2020/CVE-2020-3187.md
index 99100bc56d1..3aec88d9d74 100644
--- a/2020/CVE-2020-3187.md
+++ b/2020/CVE-2020-3187.md
@@ -19,3 +19,5 @@ A vulnerability in the web services interface of Cisco Adaptive Security Applian
 - https://github.com/sujaygr8/CVE-2020-3187
 - https://github.com/sunyyer/CVE-2020-3187-Scanlist
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-3187.yaml
diff --git a/2020/CVE-2020-3452.md b/2020/CVE-2020-3452.md
index 4be69b7caac..7f29d314203 100644
--- a/2020/CVE-2020-3452.md
+++ b/2020/CVE-2020-3452.md
@@ -37,3 +37,5 @@ A vulnerability in the web services interface of Cisco Adaptive Security Applian
 - https://github.com/paran0id34/CVE-2020-3452
 - https://github.com/sujaygr8/CVE-2020-3452
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-3452.yaml
diff --git a/2020/CVE-2020-35131.md b/2020/CVE-2020-35131.md
index 6eba9c2a861..10b76127d36 100644
--- a/2020/CVE-2020-35131.md
+++ b/2020/CVE-2020-35131.md
@@ -15,3 +15,5 @@ Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Re
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35131.yaml
diff --git a/2020/CVE-2020-35234.md b/2020/CVE-2020-35234.md
index 4ffe72a3f27..e2ed831af45 100644
--- a/2020/CVE-2020-35234.md
+++ b/2020/CVE-2020-35234.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35234.yaml
diff --git a/2020/CVE-2020-35338.md b/2020/CVE-2020-35338.md
index 9e2e04d15e2..88fe309d27b 100644
--- a/2020/CVE-2020-35338.md
+++ b/2020/CVE-2020-35338.md
@@ -15,3 +15,5 @@ The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35338.yaml
diff --git a/2020/CVE-2020-35359.md b/2020/CVE-2020-35359.md
index db5dc536f7b..e769a0c1757 100644
--- a/2020/CVE-2020-35359.md
+++ b/2020/CVE-2020-35359.md
@@ -15,3 +15,5 @@ Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by mak
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-35359.yaml
diff --git a/2020/CVE-2020-35476.md b/2020/CVE-2020-35476.md
index 7896ad382b5..d1adc985d0c 100644
--- a/2020/CVE-2020-35476.md
+++ b/2020/CVE-2020-35476.md
@@ -16,3 +16,5 @@ A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via comma
 #### Github
 - https://github.com/glowbase/CVE-2020-35476
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35476.yaml
diff --git a/2020/CVE-2020-35580.md b/2020/CVE-2020-35580.md
index 5ec3f998e1f..f3958cb698e 100644
--- a/2020/CVE-2020-35580.md
+++ b/2020/CVE-2020-35580.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35580.yaml
diff --git a/2020/CVE-2020-35598.md b/2020/CVE-2020-35598.md
index 418ad469439..5ebef5b754a 100644
--- a/2020/CVE-2020-35598.md
+++ b/2020/CVE-2020-35598.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35598.yaml
diff --git a/2020/CVE-2020-35713.md b/2020/CVE-2020-35713.md
index a096b624a74..734319e6366 100644
--- a/2020/CVE-2020-35713.md
+++ b/2020/CVE-2020-35713.md
@@ -16,3 +16,5 @@ Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execu
 #### Github
 - https://github.com/Al1ex/CVE-2020-35713
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35713.yaml
diff --git a/2020/CVE-2020-35729.md b/2020/CVE-2020-35729.md
index 82d03a211f3..65b3ebd0db0 100644
--- a/2020/CVE-2020-35729.md
+++ b/2020/CVE-2020-35729.md
@@ -17,3 +17,5 @@ KLog Server 2.4.1 allows OS command injection via shell metacharacters in the ac
 #### Github
 - https://github.com/Al1ex/CVE-2020-35729
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35729.yaml
diff --git a/2020/CVE-2020-35736.md b/2020/CVE-2020-35736.md
index dc0328bee5d..0fdd28ece53 100644
--- a/2020/CVE-2020-35736.md
+++ b/2020/CVE-2020-35736.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35736.yaml
diff --git a/2020/CVE-2020-35749.md b/2020/CVE-2020-35749.md
index 4e1ad7b4558..f22296bfe2e 100644
--- a/2020/CVE-2020-35749.md
+++ b/2020/CVE-2020-35749.md
@@ -16,3 +16,5 @@ Directory traversal vulnerability in class-simple_job_board_resume_download_hand
 #### Github
 - https://github.com/M4xSec/Wordpress-CVE-2020-35749
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35749.yaml
diff --git a/2020/CVE-2020-35774.md b/2020/CVE-2020-35774.md
index b966c009f16..367fed6965a 100644
--- a/2020/CVE-2020-35774.md
+++ b/2020/CVE-2020-35774.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35774.yaml
diff --git a/2020/CVE-2020-3580.md b/2020/CVE-2020-3580.md
index b0d22f82571..ce737a4ad53 100644
--- a/2020/CVE-2020-3580.md
+++ b/2020/CVE-2020-3580.md
@@ -19,3 +19,5 @@ No PoCs from references.
 - https://github.com/catatonicprime/CVE-2020-3580
 - https://github.com/cruxN3T/CVE-2020-3580
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-3580.yaml
diff --git a/2020/CVE-2020-35846.md b/2020/CVE-2020-35846.md
index 7e11137b381..1990d5aaedc 100644
--- a/2020/CVE-2020-35846.md
+++ b/2020/CVE-2020-35846.md
@@ -17,3 +17,5 @@ Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.ph
 - https://github.com/JohnHammond/CVE-2020-35846
 - https://github.com/w33vils/CVE-2020-35847_CVE-2020-35848
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35846.yaml
diff --git a/2020/CVE-2020-35847.md b/2020/CVE-2020-35847.md
index 093389b7bd7..968126a9523 100644
--- a/2020/CVE-2020-35847.md
+++ b/2020/CVE-2020-35847.md
@@ -16,3 +16,5 @@ Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.ph
 #### Github
 - https://github.com/w33vils/CVE-2020-35847_CVE-2020-35848
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35847.yaml
diff --git a/2020/CVE-2020-35848.md b/2020/CVE-2020-35848.md
index e57c1a60ccb..4a5d2c777a7 100644
--- a/2020/CVE-2020-35848.md
+++ b/2020/CVE-2020-35848.md
@@ -16,3 +16,5 @@ Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.ph
 - https://github.com/sabbu143s/CVE_2020_35848
 - https://github.com/w33vils/CVE-2020-35847_CVE-2020-35848
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35848.yaml
diff --git a/2020/CVE-2020-35951.md b/2020/CVE-2020-35951.md
index 0400a433d85..c4af439ebba 100644
--- a/2020/CVE-2020-35951.md
+++ b/2020/CVE-2020-35951.md
@@ -16,3 +16,5 @@ An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for Wo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35951.yaml
diff --git a/2020/CVE-2020-36112.md b/2020/CVE-2020-36112.md
index 030954d551e..4e7c599ba27 100644
--- a/2020/CVE-2020-36112.md
+++ b/2020/CVE-2020-36112.md
@@ -15,3 +15,5 @@ CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36112.yaml
diff --git a/2020/CVE-2020-36155.md b/2020/CVE-2020-36155.md
index 988e8a03b58..a57e9ebe4f2 100644
--- a/2020/CVE-2020-36155.md
+++ b/2020/CVE-2020-36155.md
@@ -15,3 +15,5 @@ An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPres
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36155.yaml
diff --git a/2020/CVE-2020-36289.md b/2020/CVE-2020-36289.md
index 04e7f5d3e00..905ec7c48dc 100644
--- a/2020/CVE-2020-36289.md
+++ b/2020/CVE-2020-36289.md
@@ -19,3 +19,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36289.yaml
diff --git a/2020/CVE-2020-36333.md b/2020/CVE-2020-36333.md
index 31906a173c6..5ec2906d5a0 100644
--- a/2020/CVE-2020-36333.md
+++ b/2020/CVE-2020-36333.md
@@ -15,3 +15,5 @@ themegrill-demo-importer before 1.6.2 does not require authentication for wiping
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36333.yaml
diff --git a/2020/CVE-2020-36365.md b/2020/CVE-2020-36365.md
index 47363c9e310..a2d0df55316 100644
--- a/2020/CVE-2020-36365.md
+++ b/2020/CVE-2020-36365.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36365.yaml
diff --git a/2020/CVE-2020-36510.md b/2020/CVE-2020-36510.md
index 09bad9498e2..cfa355dbab0 100644
--- a/2020/CVE-2020-36510.md
+++ b/2020/CVE-2020-36510.md
@@ -15,3 +15,5 @@ The 15Zine WordPress theme before 3.3.0 does not sanitise and escape the cbi par
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36510.yaml
diff --git a/2020/CVE-2020-36705.md b/2020/CVE-2020-36705.md
index 432f5df507d..92951471afd 100644
--- a/2020/CVE-2020-36705.md
+++ b/2020/CVE-2020-36705.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36705.yaml
diff --git a/2020/CVE-2020-36708.md b/2020/CVE-2020-36708.md
index 170ad1c2f88..dd151a95710 100644
--- a/2020/CVE-2020-36708.md
+++ b/2020/CVE-2020-36708.md
@@ -30,3 +30,5 @@ No PoCs from references.
 #### Github
 - https://github.com/b1g-b33f/CVE-2020-36708
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36708.yaml
diff --git a/2020/CVE-2020-36719.md b/2020/CVE-2020-36719.md
index 0b3cf46a0ef..a6ef7c0d1cb 100644
--- a/2020/CVE-2020-36719.md
+++ b/2020/CVE-2020-36719.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36719.yaml
diff --git a/2020/CVE-2020-36723.md b/2020/CVE-2020-36723.md
index 102a1f117e4..7626e3d00e6 100644
--- a/2020/CVE-2020-36723.md
+++ b/2020/CVE-2020-36723.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36723.yaml
diff --git a/2020/CVE-2020-36728.md b/2020/CVE-2020-36728.md
index 119372d745d..233d44685aa 100644
--- a/2020/CVE-2020-36728.md
+++ b/2020/CVE-2020-36728.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36728.yaml
diff --git a/2020/CVE-2020-36731.md b/2020/CVE-2020-36731.md
index 5f5b7d4b39a..c7732cab935 100644
--- a/2020/CVE-2020-36731.md
+++ b/2020/CVE-2020-36731.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36731.yaml
diff --git a/2020/CVE-2020-36836.md b/2020/CVE-2020-36836.md
index b30710e1c32..1db274db5a1 100644
--- a/2020/CVE-2020-36836.md
+++ b/2020/CVE-2020-36836.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36836.yaml
diff --git a/2020/CVE-2020-3952.md b/2020/CVE-2020-3952.md
index 3f620d24d41..7f461b60f90 100644
--- a/2020/CVE-2020-3952.md
+++ b/2020/CVE-2020-3952.md
@@ -22,3 +22,5 @@ Under certain conditions, vmdir that ships with VMware vCenter Server, as part o
 - https://github.com/vikerup/Get-vSphereVersion
 - https://github.com/viksafe/Get-vSphereVersion
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-3952.yaml
diff --git a/2020/CVE-2020-4427.md b/2020/CVE-2020-4427.md
index 3dedc9e3111..d8fd9f5b9b9 100644
--- a/2020/CVE-2020-4427.md
+++ b/2020/CVE-2020-4427.md
@@ -21,3 +21,5 @@ IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-4427.yaml
diff --git a/2020/CVE-2020-4429.md b/2020/CVE-2020-4429.md
index 9d54b4335ac..1771677fa1a 100644
--- a/2020/CVE-2020-4429.md
+++ b/2020/CVE-2020-4429.md
@@ -20,3 +20,5 @@ IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a de
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2020/CVE-2020-4429.yaml
diff --git a/2020/CVE-2020-4463.md b/2020/CVE-2020-4463.md
index 64dac11f897..0c3556f8763 100644
--- a/2020/CVE-2020-4463.md
+++ b/2020/CVE-2020-4463.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Ibonok/CVE-2020-4463
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-4463.yaml
diff --git a/2020/CVE-2020-5191.md b/2020/CVE-2020-5191.md
index 9f922eb7e15..6df5bdfca0c 100644
--- a/2020/CVE-2020-5191.md
+++ b/2020/CVE-2020-5191.md
@@ -15,3 +15,5 @@ PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple Persiste
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5191.yaml
diff --git a/2020/CVE-2020-5192.md b/2020/CVE-2020-5192.md
index ade7efa472a..285afb3af7d 100644
--- a/2020/CVE-2020-5192.md
+++ b/2020/CVE-2020-5192.md
@@ -15,3 +15,5 @@ PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple SQL inje
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5192.yaml
diff --git a/2020/CVE-2020-5284.md b/2020/CVE-2020-5284.md
index ab63add0e7c..c4a4c522ec9 100644
--- a/2020/CVE-2020-5284.md
+++ b/2020/CVE-2020-5284.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5284.yaml
diff --git a/2020/CVE-2020-5307.md b/2020/CVE-2020-5307.md
index f4da55013a9..370964d71cd 100644
--- a/2020/CVE-2020-5307.md
+++ b/2020/CVE-2020-5307.md
@@ -15,3 +15,5 @@ PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to SQL injection,
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5307.yaml
diff --git a/2020/CVE-2020-5405.md b/2020/CVE-2020-5405.md
index f164e2e996c..46378d15ec9 100644
--- a/2020/CVE-2020-5405.md
+++ b/2020/CVE-2020-5405.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/shoucheng3/spring-cloud__spring-cloud-config_CVE-2020-5405_2-1-6-RELEASE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5405.yaml
diff --git a/2020/CVE-2020-5410.md b/2020/CVE-2020-5410.md
index 9e0032b21b0..236ef696f73 100644
--- a/2020/CVE-2020-5410.md
+++ b/2020/CVE-2020-5410.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 - https://github.com/shoucheng3/spring-cloud__spring-cloud-config_CVE-2020-5410_2-1-8-RELEASE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5410.yaml
diff --git a/2020/CVE-2020-5412.md b/2020/CVE-2020-5412.md
index 5ce43133fc9..c6e34bceb4a 100644
--- a/2020/CVE-2020-5412.md
+++ b/2020/CVE-2020-5412.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5412.yaml
diff --git a/2020/CVE-2020-5722.md b/2020/CVE-2020-5722.md
index a084832d157..75f13b630de 100644
--- a/2020/CVE-2020-5722.md
+++ b/2020/CVE-2020-5722.md
@@ -18,3 +18,5 @@ The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthe
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5722.yaml
diff --git a/2020/CVE-2020-5766.md b/2020/CVE-2020-5766.md
index 57ae8ee4ac2..3a7a773ea28 100644
--- a/2020/CVE-2020-5766.md
+++ b/2020/CVE-2020-5766.md
@@ -15,3 +15,5 @@ Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5766.yaml
diff --git a/2020/CVE-2020-5775.md b/2020/CVE-2020-5775.md
index 6b617f75b76..e16b5641788 100644
--- a/2020/CVE-2020-5775.md
+++ b/2020/CVE-2020-5775.md
@@ -15,3 +15,5 @@ Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5775.yaml
diff --git a/2020/CVE-2020-5776.md b/2020/CVE-2020-5776.md
index 6c9753b04df..61d3eaec273 100644
--- a/2020/CVE-2020-5776.md
+++ b/2020/CVE-2020-5776.md
@@ -15,3 +15,5 @@ Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5776.yaml
diff --git a/2020/CVE-2020-5777.md b/2020/CVE-2020-5777.md
index 2347369b312..d83314d872b 100644
--- a/2020/CVE-2020-5777.md
+++ b/2020/CVE-2020-5777.md
@@ -15,3 +15,5 @@ MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5777.yaml
diff --git a/2020/CVE-2020-5847.md b/2020/CVE-2020-5847.md
index 00d7f4f2c36..92fcd5b8ac8 100644
--- a/2020/CVE-2020-5847.md
+++ b/2020/CVE-2020-5847.md
@@ -17,3 +17,5 @@ Unraid through 6.8.0 allows Remote Code Execution.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5847.yaml
diff --git a/2020/CVE-2020-5902.md b/2020/CVE-2020-5902.md
index afcfa3d0dce..6b271fbddc2 100644
--- a/2020/CVE-2020-5902.md
+++ b/2020/CVE-2020-5902.md
@@ -67,3 +67,5 @@ In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.
 - https://github.com/z3n70/CVE-2020-5902
 - https://github.com/zhzyker/CVE-2020-5902
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5902.yaml
diff --git a/2020/CVE-2020-6171.md b/2020/CVE-2020-6171.md
index 67f820f275d..d62622c656a 100644
--- a/2020/CVE-2020-6171.md
+++ b/2020/CVE-2020-6171.md
@@ -15,3 +15,5 @@ A cross-site scripting (XSS) vulnerability in the index page of the CLink Office
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6171.yaml
diff --git a/2020/CVE-2020-6207.md b/2020/CVE-2020-6207.md
index c5ce9480b29..4be287d63c2 100644
--- a/2020/CVE-2020-6207.md
+++ b/2020/CVE-2020-6207.md
@@ -19,3 +19,5 @@ SAP Solution Manager (User Experience Monitoring), version- 7.2, due to Missing
 #### Github
 - https://github.com/chipik/SAP_EEM_CVE-2020-6207
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6207.yaml
diff --git a/2020/CVE-2020-6287.md b/2020/CVE-2020-6287.md
index 13efd8b8bd3..0eb6db5a56a 100644
--- a/2020/CVE-2020-6287.md
+++ b/2020/CVE-2020-6287.md
@@ -25,3 +25,5 @@ SAP NetWeaver AS JAVA (LM Configuration Wizard), versions - 7.30, 7.31, 7.40, 7.
 - https://github.com/qmakake/SAP_CVE-2020-6287_find_mandate
 - https://github.com/ynsmroztas/CVE-2020-6287-Sap-Add-User
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6287.yaml
diff --git a/2020/CVE-2020-6308.md b/2020/CVE-2020-6308.md
index 90e9e96a6f6..54023d463c0 100644
--- a/2020/CVE-2020-6308.md
+++ b/2020/CVE-2020-6308.md
@@ -19,3 +19,5 @@ No PoCs from references.
 - https://github.com/TheMMMdev/CVE-2020-6308
 - https://github.com/freeFV/CVE-2020-6308-mass-exploiter
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6308.yaml
diff --git a/2020/CVE-2020-6637.md b/2020/CVE-2020-6637.md
index 8c0d9f2f644..4ee4e003fde 100644
--- a/2020/CVE-2020-6637.md
+++ b/2020/CVE-2020-6637.md
@@ -15,3 +15,5 @@ openSIS Community Edition version 7.3 is vulnerable to SQL injection via the USE
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6637.yaml
diff --git a/2020/CVE-2020-6950.md b/2020/CVE-2020-6950.md
index e0b11175ae9..20257a1b175 100644
--- a/2020/CVE-2020-6950.md
+++ b/2020/CVE-2020-6950.md
@@ -17,3 +17,5 @@ Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read ar
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6950.yaml
diff --git a/2020/CVE-2020-7107.md b/2020/CVE-2020-7107.md
index 7f5e5588c1d..3404c6cfdf8 100644
--- a/2020/CVE-2020-7107.md
+++ b/2020/CVE-2020-7107.md
@@ -15,3 +15,5 @@ The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via Display_FAQ t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7107.yaml
diff --git a/2020/CVE-2020-7136.md b/2020/CVE-2020-7136.md
index 338127fd688..cd2559f215d 100644
--- a/2020/CVE-2020-7136.md
+++ b/2020/CVE-2020-7136.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7136.yaml
diff --git a/2020/CVE-2020-7209.md b/2020/CVE-2020-7209.md
index 606f6528b8b..66860a77a4a 100644
--- a/2020/CVE-2020-7209.md
+++ b/2020/CVE-2020-7209.md
@@ -16,3 +16,5 @@ LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is re
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7209.yaml
diff --git a/2020/CVE-2020-7247.md b/2020/CVE-2020-7247.md
index 4ff86195828..04a89fdb3d0 100644
--- a/2020/CVE-2020-7247.md
+++ b/2020/CVE-2020-7247.md
@@ -32,3 +32,5 @@ smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and oth
 - https://github.com/r0lh/CVE-2020-7247
 - https://github.com/superzerosec/cve-2020-7247
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2020/CVE-2020-7247.yaml
diff --git a/2020/CVE-2020-7318.md b/2020/CVE-2020-7318.md
index 0f67328cf13..8a3d4808ca6 100644
--- a/2020/CVE-2020-7318.md
+++ b/2020/CVE-2020-7318.md
@@ -15,3 +15,5 @@ Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7318.yaml
diff --git a/2020/CVE-2020-7796.md b/2020/CVE-2020-7796.md
index 3efff90dff6..01f8a9237a9 100644
--- a/2020/CVE-2020-7796.md
+++ b/2020/CVE-2020-7796.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7796.yaml
diff --git a/2020/CVE-2020-7943.md b/2020/CVE-2020-7943.md
index 9cdb1957f61..60f82483efd 100644
--- a/2020/CVE-2020-7943.md
+++ b/2020/CVE-2020-7943.md
@@ -27,3 +27,5 @@ Puppet Server and PuppetDB provide useful performance and debugging information
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7943.yaml
diff --git a/2020/CVE-2020-7961.md b/2020/CVE-2020-7961.md
index cc9da264eea..573c043bf28 100644
--- a/2020/CVE-2020-7961.md
+++ b/2020/CVE-2020-7961.md
@@ -26,3 +26,5 @@ Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows
 - https://github.com/pashayogi/CVE-2020-7961-Mass
 - https://github.com/thelostworldFree/CVE-2020-7961-payloads
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7961.yaml
diff --git a/2020/CVE-2020-7980.md b/2020/CVE-2020-7980.md
index 5518a6efa54..80d6aee7fe0 100644
--- a/2020/CVE-2020-7980.md
+++ b/2020/CVE-2020-7980.md
@@ -17,3 +17,5 @@ Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS command
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7980.yaml
diff --git a/2020/CVE-2020-8115.md b/2020/CVE-2020-8115.md
index 83b85d95ea0..7fc3f8344ee 100644
--- a/2020/CVE-2020-8115.md
+++ b/2020/CVE-2020-8115.md
@@ -15,3 +15,5 @@ A reflected XSS vulnerability has been discovered in the publicly accessible afr
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8115.yaml
diff --git a/2020/CVE-2020-8163.md b/2020/CVE-2020-8163.md
index 16235e124ae..bcb04756b47 100644
--- a/2020/CVE-2020-8163.md
+++ b/2020/CVE-2020-8163.md
@@ -21,3 +21,5 @@ The is a code injection vulnerability in versions of Rails prior to 5.0.1 that w
 - https://github.com/lucasallan/CVE-2020-8163
 - https://github.com/novanazizr/Rails-5.0.1---RCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8163.yaml
diff --git a/2020/CVE-2020-8191.md b/2020/CVE-2020-8191.md
index 57312ccfc59..797b0066d05 100644
--- a/2020/CVE-2020-8191.md
+++ b/2020/CVE-2020-8191.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8191.yaml
diff --git a/2020/CVE-2020-8193.md b/2020/CVE-2020-8193.md
index 70fb45ea976..5bc571bf7b4 100644
--- a/2020/CVE-2020-8193.md
+++ b/2020/CVE-2020-8193.md
@@ -18,3 +18,5 @@ Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58
 - https://github.com/ctlyz123/CVE-2020-8193
 - https://github.com/jas502n/CVE-2020-8193
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8193.yaml
diff --git a/2020/CVE-2020-8194.md b/2020/CVE-2020-8194.md
index 13774282bc6..bbcf9b639c5 100644
--- a/2020/CVE-2020-8194.md
+++ b/2020/CVE-2020-8194.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8194.yaml
diff --git a/2020/CVE-2020-8209.md b/2020/CVE-2020-8209.md
index a92fbeda9e0..b4e5b927898 100644
--- a/2020/CVE-2020-8209.md
+++ b/2020/CVE-2020-8209.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/B1anda0/CVE-2020-8209
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8209.yaml
diff --git a/2020/CVE-2020-8497.md b/2020/CVE-2020-8497.md
index ea6740fb81b..081050ef402 100644
--- a/2020/CVE-2020-8497.md
+++ b/2020/CVE-2020-8497.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8497.yaml
diff --git a/2020/CVE-2020-8512.md b/2020/CVE-2020-8512.md
index ffb2db5178e..dcf00965657 100644
--- a/2020/CVE-2020-8512.md
+++ b/2020/CVE-2020-8512.md
@@ -17,3 +17,5 @@ In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8512.yaml
diff --git a/2020/CVE-2020-8515.md b/2020/CVE-2020-8515.md
index e52065c0e2c..1bd0dedeb97 100644
--- a/2020/CVE-2020-8515.md
+++ b/2020/CVE-2020-8515.md
@@ -18,3 +18,5 @@ DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.
 - https://github.com/darrenmartyn/CVE-2020-8515
 - https://github.com/imjdl/CVE-2020-8515-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8515.yaml
diff --git a/2020/CVE-2020-8615.md b/2020/CVE-2020-8615.md
index 72b91e66cd6..0ff0d62d82e 100644
--- a/2020/CVE-2020-8615.md
+++ b/2020/CVE-2020-8615.md
@@ -16,3 +16,5 @@ A CSRF vulnerability in the Tutor LMS plugin before 1.5.3 for WordPress can resu
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8615.yaml
diff --git a/2020/CVE-2020-8641.md b/2020/CVE-2020-8641.md
index 5c940358ac1..1305ff13a8e 100644
--- a/2020/CVE-2020-8641.md
+++ b/2020/CVE-2020-8641.md
@@ -15,3 +15,5 @@ Lotus Core CMS 1.0.1 allows authenticated Local File Inclusion of .php files via
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8641.yaml
diff --git a/2020/CVE-2020-8644.md b/2020/CVE-2020-8644.md
index 89d924f19f9..67f3cb57533 100644
--- a/2020/CVE-2020-8644.md
+++ b/2020/CVE-2020-8644.md
@@ -17,3 +17,5 @@ PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.
 #### Github
 - https://github.com/H3rm1tR3b0rn/CVE-2020-8644-PlaySMS-1.4
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8644.yaml
diff --git a/2020/CVE-2020-8654.md b/2020/CVE-2020-8654.md
index c7355fedd43..22fde2b7e82 100644
--- a/2020/CVE-2020-8654.md
+++ b/2020/CVE-2020-8654.md
@@ -16,3 +16,5 @@ An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with suf
 #### Github
 - https://github.com/h4knet/eonrce
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8654.yaml
diff --git a/2020/CVE-2020-8656.md b/2020/CVE-2020-8656.md
index beab9cbd31b..3d6dda8f4e1 100644
--- a/2020/CVE-2020-8656.md
+++ b/2020/CVE-2020-8656.md
@@ -16,3 +16,5 @@ An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is pro
 #### Github
 - https://github.com/h4knet/eonrce
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8656.yaml
diff --git a/2020/CVE-2020-8657.md b/2020/CVE-2020-8657.md
index 047c4dc90b4..cf6b2618adc 100644
--- a/2020/CVE-2020-8657.md
+++ b/2020/CVE-2020-8657.md
@@ -16,3 +16,5 @@ An issue was discovered in EyesOfNetwork 5.3. The installation uses the same API
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8657.yaml
diff --git a/2020/CVE-2020-8771.md b/2020/CVE-2020-8771.md
index b43495c6c19..578ad596316 100644
--- a/2020/CVE-2020-8771.md
+++ b/2020/CVE-2020-8771.md
@@ -15,3 +15,5 @@ The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypas
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8771.yaml
diff --git a/2020/CVE-2020-8772.md b/2020/CVE-2020-8772.md
index 76b24780489..33b0c3a4adf 100644
--- a/2020/CVE-2020-8772.md
+++ b/2020/CVE-2020-8772.md
@@ -15,3 +15,5 @@ The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authoriz
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8772.yaml
diff --git a/2020/CVE-2020-8813.md b/2020/CVE-2020-8813.md
index c5cdd84d362..d46641f4ff1 100644
--- a/2020/CVE-2020-8813.md
+++ b/2020/CVE-2020-8813.md
@@ -24,3 +24,5 @@ graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary O
 - https://github.com/mhaskar/CVE-2020-8813
 - https://github.com/p0dalirius/CVE-2020-8813-Cacti-RCE-in-graph_realtime
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8813.yaml
diff --git a/2020/CVE-2020-8982.md b/2020/CVE-2020-8982.md
index a738680d827..528d5206d70 100644
--- a/2020/CVE-2020-8982.md
+++ b/2020/CVE-2020-8982.md
@@ -15,3 +15,5 @@ An unauthenticated arbitrary file read issue exists in all versions of Citrix Sh
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8982.yaml
diff --git a/2020/CVE-2020-9036.md b/2020/CVE-2020-9036.md
index 10c0c82b452..f5836e13867 100644
--- a/2020/CVE-2020-9036.md
+++ b/2020/CVE-2020-9036.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9036.yaml
diff --git a/2020/CVE-2020-9043.md b/2020/CVE-2020-9043.md
index 6c3a3d4cee4..f527402e415 100644
--- a/2020/CVE-2020-9043.md
+++ b/2020/CVE-2020-9043.md
@@ -15,3 +15,5 @@ The wpCentral plugin before 1.5.1 for WordPress allows disclosure of the connect
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9043.yaml
diff --git a/2020/CVE-2020-9047.md b/2020/CVE-2020-9047.md
index 6b36983afd8..120de107149 100644
--- a/2020/CVE-2020-9047.md
+++ b/2020/CVE-2020-9047.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/norrismw/CVE-2020-9047
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9047.yaml
diff --git a/2020/CVE-2020-9054.md b/2020/CVE-2020-9054.md
index b7e51659085..aa67b11bd26 100644
--- a/2020/CVE-2020-9054.md
+++ b/2020/CVE-2020-9054.md
@@ -38,3 +38,5 @@ Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5
 #### Github
 - https://github.com/darrenmartyn/CVE-2020-9054
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9054.yaml
diff --git a/2020/CVE-2020-9274.md b/2020/CVE-2020-9274.md
index 2e6772cde41..b9ba16eb807 100644
--- a/2020/CVE-2020-9274.md
+++ b/2020/CVE-2020-9274.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-9274.yaml
diff --git a/2020/CVE-2020-9314.md b/2020/CVE-2020-9314.md
index 4277db393c9..d0d1b22384c 100644
--- a/2020/CVE-2020-9314.md
+++ b/2020/CVE-2020-9314.md
@@ -15,3 +15,5 @@
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9314.yaml
diff --git a/2020/CVE-2020-9315.md b/2020/CVE-2020-9315.md
index d2fe53cc469..93268940d50 100644
--- a/2020/CVE-2020-9315.md
+++ b/2020/CVE-2020-9315.md
@@ -15,3 +15,5 @@
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9315.yaml
diff --git a/2020/CVE-2020-9344.md b/2020/CVE-2020-9344.md
index 5cc7f69e925..6ebd44af01a 100644
--- a/2020/CVE-2020-9344.md
+++ b/2020/CVE-2020-9344.md
@@ -16,3 +16,5 @@ Subversion ALM for the enterprise before 8.8.2 allows reflected XSS at multiple
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9344.yaml
diff --git a/2020/CVE-2020-9376.md b/2020/CVE-2020-9376.md
index f9263cf2f0c..27dc652ce8e 100644
--- a/2020/CVE-2020-9376.md
+++ b/2020/CVE-2020-9376.md
@@ -15,3 +15,5 @@ D-Link DIR-610 devices allow Information Disclosure via SERVICES=DEVICE.ACCOUNT%
 #### Github
 - https://github.com/renatoalencar/dlink-dir610-exploits
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9376.yaml
diff --git a/2020/CVE-2020-9402.md b/2020/CVE-2020-9402.md
index 67ea3460339..b0b743e6a9f 100644
--- a/2020/CVE-2020-9402.md
+++ b/2020/CVE-2020-9402.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2020/CVE-2020-9402.yaml
diff --git a/2020/CVE-2020-9425.md b/2020/CVE-2020-9425.md
index 6137885a881..4e9244d7681 100644
--- a/2020/CVE-2020-9425.md
+++ b/2020/CVE-2020-9425.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9425.yaml
diff --git a/2020/CVE-2020-9480.md b/2020/CVE-2020-9480.md
index 8e8c5d9aa97..00ab3d98f5c 100644
--- a/2020/CVE-2020-9480.md
+++ b/2020/CVE-2020-9480.md
@@ -15,3 +15,5 @@ In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be
 #### Github
 - https://github.com/XiaoShaYu617/CVE-2020-9480
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9480.yaml
diff --git a/2020/CVE-2020-9483.md b/2020/CVE-2020-9483.md
index 8b594feed3f..c5e52620649 100644
--- a/2020/CVE-2020-9483.md
+++ b/2020/CVE-2020-9483.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Neko-chanQwQ/CVE-2020-9483
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9483.yaml
diff --git a/2020/CVE-2020-9484.md b/2020/CVE-2020-9484.md
index 62151957f29..584a96c073f 100644
--- a/2020/CVE-2020-9484.md
+++ b/2020/CVE-2020-9484.md
@@ -41,3 +41,5 @@ When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.
 - https://github.com/savsch/PoC_CVE-2020-9484
 - https://github.com/seanachao/CVE-2020-9484
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9484.yaml
diff --git a/2020/CVE-2020-9496.md b/2020/CVE-2020-9496.md
index 3ab8a2ce054..8dd55f74d9d 100644
--- a/2020/CVE-2020-9496.md
+++ b/2020/CVE-2020-9496.md
@@ -25,3 +25,5 @@ XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scriptin
 - https://github.com/g33xter/CVE-2020-9496
 - https://github.com/s4dbrd/CVE-2020-9496
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9496.yaml
diff --git a/2020/CVE-2020-9547.md b/2020/CVE-2020-9547.md
index 8c910f0da54..afb1c5d26f8 100644
--- a/2020/CVE-2020-9547.md
+++ b/2020/CVE-2020-9547.md
@@ -21,3 +21,5 @@ FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee
 - https://github.com/endor-shruti/vuln-spring-boot
 - https://github.com/fairyming/CVE-2020-9547
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9547.yaml
diff --git a/2020/CVE-2020-9548.md b/2020/CVE-2020-9548.md
index a7615c79d7b..e275f39d68d 100644
--- a/2020/CVE-2020-9548.md
+++ b/2020/CVE-2020-9548.md
@@ -20,3 +20,5 @@ FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction betwee
 #### Github
 - https://github.com/fairyming/CVE-2020-9548
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9548.yaml
diff --git a/2020/CVE-2020-9757.md b/2020/CVE-2020-9757.md
index fbf93141113..0c75c726093 100644
--- a/2020/CVE-2020-9757.md
+++ b/2020/CVE-2020-9757.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9757.yaml
diff --git a/2021/CVE-2021-1472.md b/2021/CVE-2021-1472.md
index 1e52d6bc62b..0d4b8252461 100644
--- a/2021/CVE-2021-1472.md
+++ b/2021/CVE-2021-1472.md
@@ -15,3 +15,5 @@ Multiple vulnerabilities exist in the web-based management interface of Cisco Sm
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-1472.yaml
diff --git a/2021/CVE-2021-1497.md b/2021/CVE-2021-1497.md
index bcbbdfd2488..069d7a07f93 100644
--- a/2021/CVE-2021-1497.md
+++ b/2021/CVE-2021-1497.md
@@ -16,3 +16,5 @@ Multiple vulnerabilities in the web-based management interface of Cisco HyperFle
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-1497.yaml
diff --git a/2021/CVE-2021-1498.md b/2021/CVE-2021-1498.md
index 6b09df0696f..01118070129 100644
--- a/2021/CVE-2021-1498.md
+++ b/2021/CVE-2021-1498.md
@@ -16,3 +16,5 @@ Multiple vulnerabilities in the web-based management interface of Cisco HyperFle
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-1498.yaml
diff --git a/2021/CVE-2021-1499.md b/2021/CVE-2021-1499.md
index e771ed696cd..18fcd2e94ec 100644
--- a/2021/CVE-2021-1499.md
+++ b/2021/CVE-2021-1499.md
@@ -15,3 +15,5 @@ A vulnerability in the web-based management interface of Cisco HyperFlex HX Data
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-1499.yaml
diff --git a/2021/CVE-2021-20021.md b/2021/CVE-2021-20021.md
index d478a3604bd..200218a61a3 100644
--- a/2021/CVE-2021-20021.md
+++ b/2021/CVE-2021-20021.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/SUPRAAA-1337/CVE-2021-20021
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20021.yaml
diff --git a/2021/CVE-2021-20031.md b/2021/CVE-2021-20031.md
index 45022501b3d..785ef33ffbf 100644
--- a/2021/CVE-2021-20031.md
+++ b/2021/CVE-2021-20031.md
@@ -22,3 +22,5 @@ A Host Header Redirection vulnerability in SonicOS potentially allows a remote a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20031.yaml
diff --git a/2021/CVE-2021-20038.md b/2021/CVE-2021-20038.md
index 7f66bb1c691..041d6348ca6 100644
--- a/2021/CVE-2021-20038.md
+++ b/2021/CVE-2021-20038.md
@@ -19,3 +19,5 @@ No PoCs from references.
 - https://github.com/jbaines-r7/badblood
 - https://github.com/vesperp/CVE-2021-20038-SonicWall-RCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20038.yaml
diff --git a/2021/CVE-2021-20086.md b/2021/CVE-2021-20086.md
index 6c2fa5450c4..bf56af14f4c 100644
--- a/2021/CVE-2021-20086.md
+++ b/2021/CVE-2021-20086.md
@@ -15,3 +15,5 @@ Improperly Controlled Modification of Object Prototype Attributes ('Prototype Po
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20086.yaml
diff --git a/2021/CVE-2021-20090.md b/2021/CVE-2021-20090.md
index cf1607f9818..84abce7e50d 100644
--- a/2021/CVE-2021-20090.md
+++ b/2021/CVE-2021-20090.md
@@ -17,3 +17,5 @@ A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 fi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20090.yaml
diff --git a/2021/CVE-2021-20091.md b/2021/CVE-2021-20091.md
index 2d0ee6ead89..1fb29c3ea09 100644
--- a/2021/CVE-2021-20091.md
+++ b/2021/CVE-2021-20091.md
@@ -15,3 +15,5 @@ The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-253
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20091.yaml
diff --git a/2021/CVE-2021-20092.md b/2021/CVE-2021-20092.md
index 3be6e766e41..57650fab042 100644
--- a/2021/CVE-2021-20092.md
+++ b/2021/CVE-2021-20092.md
@@ -15,3 +15,5 @@ The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-253
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20092.yaml
diff --git a/2021/CVE-2021-20114.md b/2021/CVE-2021-20114.md
index dc92a11438e..7ec0d923573 100644
--- a/2021/CVE-2021-20114.md
+++ b/2021/CVE-2021-20114.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20114.yaml
diff --git a/2021/CVE-2021-20123.md b/2021/CVE-2021-20123.md
index c8a32f9e29b..b79900070e4 100644
--- a/2021/CVE-2021-20123.md
+++ b/2021/CVE-2021-20123.md
@@ -17,3 +17,5 @@ A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20123.yaml
diff --git a/2021/CVE-2021-20124.md b/2021/CVE-2021-20124.md
index bbf45b44ed8..97a31a6d2fb 100644
--- a/2021/CVE-2021-20124.md
+++ b/2021/CVE-2021-20124.md
@@ -17,3 +17,5 @@ A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20124.yaml
diff --git a/2021/CVE-2021-20137.md b/2021/CVE-2021-20137.md
index c96f98d5ccf..f93bafaed84 100644
--- a/2021/CVE-2021-20137.md
+++ b/2021/CVE-2021-20137.md
@@ -15,3 +15,5 @@ A reflected cross-site scripting vulnerability exists in the url parameter of th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20137.yaml
diff --git a/2021/CVE-2021-20150.md b/2021/CVE-2021-20150.md
index 966e8782598..4bf6b0122ba 100644
--- a/2021/CVE-2021-20150.md
+++ b/2021/CVE-2021-20150.md
@@ -15,3 +15,5 @@ Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20150.yaml
diff --git a/2021/CVE-2021-20158.md b/2021/CVE-2021-20158.md
index 6a0f1db8ac6..bf1a8867b99 100644
--- a/2021/CVE-2021-20158.md
+++ b/2021/CVE-2021-20158.md
@@ -15,3 +15,5 @@ Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vul
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20158.yaml
diff --git a/2021/CVE-2021-20167.md b/2021/CVE-2021-20167.md
index 86c31d61a0c..fb941c93f50 100644
--- a/2021/CVE-2021-20167.md
+++ b/2021/CVE-2021-20167.md
@@ -15,3 +15,5 @@ Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. The r
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20167.yaml
diff --git a/2021/CVE-2021-20323.md b/2021/CVE-2021-20323.md
index 617238d6458..e0cd5d4179a 100644
--- a/2021/CVE-2021-20323.md
+++ b/2021/CVE-2021-20323.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/cscpwn0sec/CVE-2021-20323
 - https://github.com/ndmalc/CVE-2021-20323
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20323.yaml
diff --git a/2021/CVE-2021-20617.md b/2021/CVE-2021-20617.md
index 7760cf74580..052cb75b68a 100644
--- a/2021/CVE-2021-20617.md
+++ b/2021/CVE-2021-20617.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20617.yaml
diff --git a/2021/CVE-2021-20792.md b/2021/CVE-2021-20792.md
index 45a3d5b5afd..8bdd80d62f4 100644
--- a/2021/CVE-2021-20792.md
+++ b/2021/CVE-2021-20792.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20792.yaml
diff --git a/2021/CVE-2021-20837.md b/2021/CVE-2021-20837.md
index 7648ce23ce8..1011f87ba7a 100644
--- a/2021/CVE-2021-20837.md
+++ b/2021/CVE-2021-20837.md
@@ -21,3 +21,5 @@ Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 an
 - https://github.com/ghost-nemesis/cve-2021-20837-poc
 - https://github.com/orangmuda/CVE-2021-20837
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20837.yaml
diff --git a/2021/CVE-2021-21087.md b/2021/CVE-2021-21087.md
index 6961ceb35d5..b590384218a 100644
--- a/2021/CVE-2021-21087.md
+++ b/2021/CVE-2021-21087.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21087.yaml
diff --git a/2021/CVE-2021-21234.md b/2021/CVE-2021-21234.md
index db9c8b8a384..d028f750148 100644
--- a/2021/CVE-2021-21234.md
+++ b/2021/CVE-2021-21234.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/PwCNO-CTO/CVE-2021-21234
 - https://github.com/xiaojiangxl/CVE-2021-21234
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21234.yaml
diff --git a/2021/CVE-2021-21287.md b/2021/CVE-2021-21287.md
index 28dda54ee2b..a1de7935bf3 100644
--- a/2021/CVE-2021-21287.md
+++ b/2021/CVE-2021-21287.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21287.yaml
diff --git a/2021/CVE-2021-21307.md b/2021/CVE-2021-21307.md
index 1024197f0a8..623d702cef7 100644
--- a/2021/CVE-2021-21307.md
+++ b/2021/CVE-2021-21307.md
@@ -18,3 +18,5 @@ Lucee Server is a dynamic, Java based (JSR-223), tag and scripting language used
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21307.yaml
diff --git a/2021/CVE-2021-21311.md b/2021/CVE-2021-21311.md
index aa11e0f19fe..25aa17cb480 100644
--- a/2021/CVE-2021-21311.md
+++ b/2021/CVE-2021-21311.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/omoknooni/CVE-2021-21311
 - https://github.com/tung6192/llm-security-hackathon
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21311.yaml
diff --git a/2021/CVE-2021-21315.md b/2021/CVE-2021-21315.md
index 98dadcc5bd7..83da79a6e83 100644
--- a/2021/CVE-2021-21315.md
+++ b/2021/CVE-2021-21315.md
@@ -22,3 +22,5 @@ No PoCs from references.
 - https://github.com/thelostvoice/inept-us-military
 - https://github.com/xMohamed0/CVE-2021-21315-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21315.yaml
diff --git a/2021/CVE-2021-21345.md b/2021/CVE-2021-21345.md
index 2cda9d5b557..240de51d73a 100644
--- a/2021/CVE-2021-21345.md
+++ b/2021/CVE-2021-21345.md
@@ -19,3 +19,5 @@ XStream is a Java library to serialize objects to XML and back again. In XStream
 #### Github
 - https://github.com/shoucheng3/x-stream__xstream_CVE-2021-21345_1-4-15
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21345.yaml
diff --git a/2021/CVE-2021-2135.md b/2021/CVE-2021-2135.md
index e794e455f32..a38a79f72dd 100644
--- a/2021/CVE-2021-2135.md
+++ b/2021/CVE-2021-2135.md
@@ -17,3 +17,5 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-2135.yaml
diff --git a/2021/CVE-2021-21351.md b/2021/CVE-2021-21351.md
index 609e321375c..68251dd1ae6 100644
--- a/2021/CVE-2021-21351.md
+++ b/2021/CVE-2021-21351.md
@@ -18,3 +18,5 @@ XStream is a Java library to serialize objects to XML and back again. In XStream
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21351.yaml
diff --git a/2021/CVE-2021-21389.md b/2021/CVE-2021-21389.md
index 276b8390afa..34c2a70f01c 100644
--- a/2021/CVE-2021-21389.md
+++ b/2021/CVE-2021-21389.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/liaboveall/SecureGuard-WAF
 - https://github.com/mynameSumin/CVE-2021-21389
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21389.yaml
diff --git a/2021/CVE-2021-21402.md b/2021/CVE-2021-21402.md
index 18e251bcc77..88fa942db27 100644
--- a/2021/CVE-2021-21402.md
+++ b/2021/CVE-2021-21402.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/jiaocoll/CVE-2021-21402-Jellyfin
 - https://github.com/somatrasss/CVE-2021-21402
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21402.yaml
diff --git a/2021/CVE-2021-21479.md b/2021/CVE-2021-21479.md
index bda183d37fc..409314f79c3 100644
--- a/2021/CVE-2021-21479.md
+++ b/2021/CVE-2021-21479.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21479.yaml
diff --git a/2021/CVE-2021-21745.md b/2021/CVE-2021-21745.md
index a955bc9c916..272ebdae7cf 100644
--- a/2021/CVE-2021-21745.md
+++ b/2021/CVE-2021-21745.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21745.yaml
diff --git a/2021/CVE-2021-21799.md b/2021/CVE-2021-21799.md
index ab616e3fcd1..73be32527c2 100644
--- a/2021/CVE-2021-21799.md
+++ b/2021/CVE-2021-21799.md
@@ -15,3 +15,5 @@ Cross-site scripting vulnerabilities exist in the telnet_form.php script functio
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21799.yaml
diff --git a/2021/CVE-2021-21800.md b/2021/CVE-2021-21800.md
index 3b5bc6457c7..873078067f3 100644
--- a/2021/CVE-2021-21800.md
+++ b/2021/CVE-2021-21800.md
@@ -15,3 +15,5 @@ Cross-site scripting vulnerabilities exist in the ssh_form.php script functional
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21800.yaml
diff --git a/2021/CVE-2021-21801.md b/2021/CVE-2021-21801.md
index 5409441537e..f7fdd4a3f8e 100644
--- a/2021/CVE-2021-21801.md
+++ b/2021/CVE-2021-21801.md
@@ -15,3 +15,5 @@ This vulnerability is present in device_graph_page.php script, which is a part o
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21801.yaml
diff --git a/2021/CVE-2021-21802.md b/2021/CVE-2021-21802.md
index ae648238619..337653bb24b 100644
--- a/2021/CVE-2021-21802.md
+++ b/2021/CVE-2021-21802.md
@@ -15,3 +15,5 @@ This vulnerability is present in device_graph_page.php script, which is a part o
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21802.yaml
diff --git a/2021/CVE-2021-21803.md b/2021/CVE-2021-21803.md
index cf89f84c3a1..5cab9069f21 100644
--- a/2021/CVE-2021-21803.md
+++ b/2021/CVE-2021-21803.md
@@ -15,3 +15,5 @@ This vulnerability is present in device_graph_page.php script, which is a part o
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21803.yaml
diff --git a/2021/CVE-2021-21805.md b/2021/CVE-2021-21805.md
index dbe08b607a3..fa26c223174 100644
--- a/2021/CVE-2021-21805.md
+++ b/2021/CVE-2021-21805.md
@@ -15,3 +15,5 @@ An OS Command Injection vulnerability exists in the ping.php script functionalit
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21805.yaml
diff --git a/2021/CVE-2021-21816.md b/2021/CVE-2021-21816.md
index 7df7719532f..eea0107f4a0 100644
--- a/2021/CVE-2021-21816.md
+++ b/2021/CVE-2021-21816.md
@@ -15,3 +15,5 @@ An information disclosure vulnerability exists in the Syslog functionality of D-
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21816.yaml
diff --git a/2021/CVE-2021-21881.md b/2021/CVE-2021-21881.md
index f2681c35a80..47053004b4b 100644
--- a/2021/CVE-2021-21881.md
+++ b/2021/CVE-2021-21881.md
@@ -15,3 +15,5 @@ An OS command injection vulnerability exists in the Web Manager Wireless Network
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21881.yaml
diff --git a/2021/CVE-2021-21972.md b/2021/CVE-2021-21972.md
index ab774f40dc8..6776311fa58 100644
--- a/2021/CVE-2021-21972.md
+++ b/2021/CVE-2021-21972.md
@@ -53,3 +53,5 @@ The vSphere Client (HTML5) contains a remote code execution vulnerability in a v
 - https://github.com/yaunsky/CVE-2021-21972
 - https://github.com/zidanfanshao/vcenter_tools
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21972.yaml
diff --git a/2021/CVE-2021-21973.md b/2021/CVE-2021-21973.md
index 1ed55a55977..5022afe57b4 100644
--- a/2021/CVE-2021-21973.md
+++ b/2021/CVE-2021-21973.md
@@ -21,3 +21,5 @@ No PoCs from references.
 #### Github
 - https://github.com/freakanonymous/CVE-2021-21973-Automateme
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21973.yaml
diff --git a/2021/CVE-2021-21975.md b/2021/CVE-2021-21975.md
index 7446bff847a..e068f14db93 100644
--- a/2021/CVE-2021-21975.md
+++ b/2021/CVE-2021-21975.md
@@ -23,3 +23,5 @@ Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975)
 - https://github.com/murataydemir/CVE-2021-21975
 - https://github.com/rabidwh0re/REALITY_SMASHER
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21975.yaml
diff --git a/2021/CVE-2021-21978.md b/2021/CVE-2021-21978.md
index 5611dfd339f..58d11e640bb 100644
--- a/2021/CVE-2021-21978.md
+++ b/2021/CVE-2021-21978.md
@@ -17,3 +17,5 @@ VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code exe
 - https://github.com/me1ons/CVE-2021-21978
 - https://github.com/skytina/CVE-2021-21978
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21978.yaml
diff --git a/2021/CVE-2021-21985.md b/2021/CVE-2021-21985.md
index 43f44d50991..3dcd6ff4622 100644
--- a/2021/CVE-2021-21985.md
+++ b/2021/CVE-2021-21985.md
@@ -26,3 +26,5 @@ The vSphere Client (HTML5) contains a remote code execution vulnerability due to
 - https://github.com/xnianq/cve-2021-21985_exp
 - https://github.com/zidanfanshao/vcenter_tools
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21985.yaml
diff --git a/2021/CVE-2021-22005.md b/2021/CVE-2021-22005.md
index 3b004b14153..75493cfe41d 100644
--- a/2021/CVE-2021-22005.md
+++ b/2021/CVE-2021-22005.md
@@ -35,3 +35,5 @@ The vCenter Server contains an arbitrary file upload vulnerability in the Analyt
 - https://github.com/viksafe/Get-vSphereVersion
 - https://github.com/zidanfanshao/vcenter_tools
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22005.yaml
diff --git a/2021/CVE-2021-22017.md b/2021/CVE-2021-22017.md
index 0884869e777..491ba60fbea 100644
--- a/2021/CVE-2021-22017.md
+++ b/2021/CVE-2021-22017.md
@@ -16,3 +16,5 @@ Rhttproxy as used in vCenter Server contains a vulnerability due to improper imp
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22017.yaml
diff --git a/2021/CVE-2021-22053.md b/2021/CVE-2021-22053.md
index 0e958ee6548..580de5ea510 100644
--- a/2021/CVE-2021-22053.md
+++ b/2021/CVE-2021-22053.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Vulnmachines/CVE-2021-22053
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22053.yaml
diff --git a/2021/CVE-2021-22054.md b/2021/CVE-2021-22054.md
index b0218964d15..145d9fa8abf 100644
--- a/2021/CVE-2021-22054.md
+++ b/2021/CVE-2021-22054.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/MKSx/CVE-2021-22054
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22054.yaml
diff --git a/2021/CVE-2021-22122.md b/2021/CVE-2021-22122.md
index 21002cd17a4..71fd8981962 100644
--- a/2021/CVE-2021-22122.md
+++ b/2021/CVE-2021-22122.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22122.yaml
diff --git a/2021/CVE-2021-22145.md b/2021/CVE-2021-22145.md
index 1f868daecfa..75682e97e41 100644
--- a/2021/CVE-2021-22145.md
+++ b/2021/CVE-2021-22145.md
@@ -16,3 +16,5 @@ A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13
 #### Github
 - https://github.com/niceeeeeeee/CVE-2021-22145-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22145.yaml
diff --git a/2021/CVE-2021-22175.md b/2021/CVE-2021-22175.md
index 130e83400e7..6f4e748de87 100644
--- a/2021/CVE-2021-22175.md
+++ b/2021/CVE-2021-22175.md
@@ -18,3 +18,5 @@ When requests to the internal network for webhooks are enabled, a server-side re
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22175.yaml
diff --git a/2021/CVE-2021-22205.md b/2021/CVE-2021-22205.md
index eaf7c843fe4..82d0f1bd263 100644
--- a/2021/CVE-2021-22205.md
+++ b/2021/CVE-2021-22205.md
@@ -49,3 +49,5 @@ An issue has been discovered in GitLab CE/EE affecting all versions starting fro
 - https://github.com/w0x68y/Gitlab-CVE-2021-22205
 - https://github.com/whwlsfb/CVE-2021-22205
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22205.yaml
diff --git a/2021/CVE-2021-22214.md b/2021/CVE-2021-22214.md
index 062faeaff57..e65314282e0 100644
--- a/2021/CVE-2021-22214.md
+++ b/2021/CVE-2021-22214.md
@@ -21,3 +21,5 @@ When requests to the internal network for webhooks are enabled, a server-side re
 - https://github.com/antx-code/CVE-2021-22214
 - https://github.com/kh4sh3i/GitLab-SSRF-CVE-2021-22214
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22214.yaml
diff --git a/2021/CVE-2021-22502.md b/2021/CVE-2021-22502.md
index 50931d26af0..a9443fc5a6f 100644
--- a/2021/CVE-2021-22502.md
+++ b/2021/CVE-2021-22502.md
@@ -16,3 +16,5 @@ Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OB
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22502.yaml
diff --git a/2021/CVE-2021-22873.md b/2021/CVE-2021-22873.md
index 9c0ea03efe0..cb330d974f5 100644
--- a/2021/CVE-2021-22873.md
+++ b/2021/CVE-2021-22873.md
@@ -15,3 +15,5 @@ Revive Adserver before 5.1.0 is vulnerable to open redirects via the `dest`, `oa
 #### Github
 - https://github.com/K3ysTr0K3R/CVE-2021-22873-EXPLOIT
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22873.yaml
diff --git a/2021/CVE-2021-22881.md b/2021/CVE-2021-22881.md
index 3399a46bf6e..cccf34f5e99 100644
--- a/2021/CVE-2021-22881.md
+++ b/2021/CVE-2021-22881.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22881.yaml
diff --git a/2021/CVE-2021-22911.md b/2021/CVE-2021-22911.md
index 0de2c6865b2..c4d793d3f27 100644
--- a/2021/CVE-2021-22911.md
+++ b/2021/CVE-2021-22911.md
@@ -23,3 +23,5 @@ A improper input sanitization vulnerability exists in Rocket.Chat server 3.11, 3
 - https://github.com/overgrowncarrot1/CVE-2021-22911
 - https://github.com/yoohhuu/Rocket-Chat-3.12.1-PoC-CVE-2021-22911-
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22911.yaml
diff --git a/2021/CVE-2021-22986.md b/2021/CVE-2021-22986.md
index b0a181906bc..d908dff87ce 100644
--- a/2021/CVE-2021-22986.md
+++ b/2021/CVE-2021-22986.md
@@ -32,3 +32,5 @@ On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before
 - https://github.com/west9b/F5-BIG-IP-POC
 - https://github.com/yaunsky/CVE-202122986-EXP
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22986.yaml
diff --git a/2021/CVE-2021-23241.md b/2021/CVE-2021-23241.md
index b99ae8a3452..106bd5096ff 100644
--- a/2021/CVE-2021-23241.md
+++ b/2021/CVE-2021-23241.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-23241.yaml
diff --git a/2021/CVE-2021-23337.md b/2021/CVE-2021-23337.md
index 66c2965ba92..4400ad0b382 100644
--- a/2021/CVE-2021-23337.md
+++ b/2021/CVE-2021-23337.md
@@ -24,3 +24,5 @@ Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the tem
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-23337.yaml
diff --git a/2021/CVE-2021-23394.md b/2021/CVE-2021-23394.md
index abc5eafe1e3..ea4885c476e 100644
--- a/2021/CVE-2021-23394.md
+++ b/2021/CVE-2021-23394.md
@@ -18,3 +18,5 @@ The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execu
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-23394.yaml
diff --git a/2021/CVE-2021-24139.md b/2021/CVE-2021-24139.md
index 5599ae64e14..0e0f25c2a25 100644
--- a/2021/CVE-2021-24139.md
+++ b/2021/CVE-2021-24139.md
@@ -15,3 +15,5 @@ Unvalidated input in the Photo Gallery (10Web Photo Gallery) WordPress plugin, v
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24139.yaml
diff --git a/2021/CVE-2021-24145.md b/2021/CVE-2021-24145.md
index af688ab1165..b3b23c4f547 100644
--- a/2021/CVE-2021-24145.md
+++ b/2021/CVE-2021-24145.md
@@ -17,3 +17,5 @@ Arbitrary file upload in the Modern Events Calendar Lite WordPress plugin, versi
 #### Github
 - https://github.com/dnr6419/CVE-2021-24145
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24145.yaml
diff --git a/2021/CVE-2021-24146.md b/2021/CVE-2021-24146.md
index ee98462ba3a..9b2d0e34cd0 100644
--- a/2021/CVE-2021-24146.md
+++ b/2021/CVE-2021-24146.md
@@ -16,3 +16,5 @@ Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24146.yaml
diff --git a/2021/CVE-2021-24150.md b/2021/CVE-2021-24150.md
index 8752d225494..8a93bd1c25e 100644
--- a/2021/CVE-2021-24150.md
+++ b/2021/CVE-2021-24150.md
@@ -15,3 +15,5 @@ The LikeBtn WordPress Like Button Rating ♥ LikeBtn WordPress plugin before 2.6
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24150.yaml
diff --git a/2021/CVE-2021-24155.md b/2021/CVE-2021-24155.md
index e9fffefe480..65d90ef1a59 100644
--- a/2021/CVE-2021-24155.md
+++ b/2021/CVE-2021-24155.md
@@ -17,3 +17,5 @@ The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before
 #### Github
 - https://github.com/0dayNinja/CVE-2021-24155.rb
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24155.yaml
diff --git a/2021/CVE-2021-24165.md b/2021/CVE-2021-24165.md
index 73ba8974a8c..09f5ac4b81f 100644
--- a/2021/CVE-2021-24165.md
+++ b/2021/CVE-2021-24165.md
@@ -15,3 +15,5 @@ In the Ninja Forms Contact Form WordPress plugin before 3.4.34, the wp_ajax_nf_o
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24165.yaml
diff --git a/2021/CVE-2021-24169.md b/2021/CVE-2021-24169.md
index 7bf13333130..a9846754ea0 100644
--- a/2021/CVE-2021-24169.md
+++ b/2021/CVE-2021-24169.md
@@ -16,3 +16,5 @@ This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps y
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24169.yaml
diff --git a/2021/CVE-2021-24170.md b/2021/CVE-2021-24170.md
index c508d891103..4538104c6c4 100644
--- a/2021/CVE-2021-24170.md
+++ b/2021/CVE-2021-24170.md
@@ -15,3 +15,5 @@ The REST API endpoint get_users in the User Profile Picture WordPress plugin bef
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24170.yaml
diff --git a/2021/CVE-2021-24175.md b/2021/CVE-2021-24175.md
index 10d62f124f7..18ddb7b9cf0 100644
--- a/2021/CVE-2021-24175.md
+++ b/2021/CVE-2021-24175.md
@@ -16,3 +16,5 @@ The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.7 was bei
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24175.yaml
diff --git a/2021/CVE-2021-24176.md b/2021/CVE-2021-24176.md
index a59e4f732a9..7a48ab77469 100644
--- a/2021/CVE-2021-24176.md
+++ b/2021/CVE-2021-24176.md
@@ -16,3 +16,5 @@ The JH 404 Logger WordPress plugin through 1.1 doesn't sanitise the referer and
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24176.yaml
diff --git a/2021/CVE-2021-24210.md b/2021/CVE-2021-24210.md
index c9d5669d092..2c3f80fda78 100644
--- a/2021/CVE-2021-24210.md
+++ b/2021/CVE-2021-24210.md
@@ -15,3 +15,5 @@ There is an open redirect in the PhastPress WordPress plugin before 1.111 that a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24210.yaml
diff --git a/2021/CVE-2021-24212.md b/2021/CVE-2021-24212.md
index d3585df91ae..f0370251682 100644
--- a/2021/CVE-2021-24212.md
+++ b/2021/CVE-2021-24212.md
@@ -15,3 +15,5 @@ The WooCommerce Help Scout WordPress plugin before 2.9.1 (https://woocommerce.co
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24212.yaml
diff --git a/2021/CVE-2021-24213.md b/2021/CVE-2021-24213.md
index 608ac7ae190..06d62d8d30f 100644
--- a/2021/CVE-2021-24213.md
+++ b/2021/CVE-2021-24213.md
@@ -17,3 +17,5 @@ The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24213.yaml
diff --git a/2021/CVE-2021-24214.md b/2021/CVE-2021-24214.md
index 5463b25c11b..fc2ed33c523 100644
--- a/2021/CVE-2021-24214.md
+++ b/2021/CVE-2021-24214.md
@@ -16,3 +16,5 @@ The OpenID Connect Generic Client WordPress plugin 3.8.0 and 3.8.1 did not sanit
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24214.yaml
diff --git a/2021/CVE-2021-24215.md b/2021/CVE-2021-24215.md
index a3a96a99227..1b936beeb8b 100644
--- a/2021/CVE-2021-24215.md
+++ b/2021/CVE-2021-24215.md
@@ -15,3 +15,5 @@ An Improper Access Control vulnerability was discovered in the Controlled Admin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24215.yaml
diff --git a/2021/CVE-2021-24219.md b/2021/CVE-2021-24219.md
index a303e9c67c1..829515b7974 100644
--- a/2021/CVE-2021-24219.md
+++ b/2021/CVE-2021-24219.md
@@ -46,3 +46,5 @@ The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24219.yaml
diff --git a/2021/CVE-2021-24220.md b/2021/CVE-2021-24220.md
index a7d753cf1cd..9c06c01058a 100644
--- a/2021/CVE-2021-24220.md
+++ b/2021/CVE-2021-24220.md
@@ -25,3 +25,5 @@ Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24220.yaml
diff --git a/2021/CVE-2021-24226.md b/2021/CVE-2021-24226.md
index d55576b6166..240192fead1 100644
--- a/2021/CVE-2021-24226.md
+++ b/2021/CVE-2021-24226.md
@@ -16,3 +16,5 @@ In the AccessAlly WordPress plugin before 3.5.7, the file "resource/frontend/pro
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24226.yaml
diff --git a/2021/CVE-2021-24227.md b/2021/CVE-2021-24227.md
index ac32c049763..50a97a7e7d2 100644
--- a/2021/CVE-2021-24227.md
+++ b/2021/CVE-2021-24227.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24227.yaml
diff --git a/2021/CVE-2021-24235.md b/2021/CVE-2021-24235.md
index a0a23e0dea8..b3314c0c312 100644
--- a/2021/CVE-2021-24235.md
+++ b/2021/CVE-2021-24235.md
@@ -15,3 +15,5 @@ The Goto WordPress theme before 2.0 does not sanitise the keywords and start_dat
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24235.yaml
diff --git a/2021/CVE-2021-24236.md b/2021/CVE-2021-24236.md
index dbb36908292..147c4cd4b6a 100644
--- a/2021/CVE-2021-24236.md
+++ b/2021/CVE-2021-24236.md
@@ -15,3 +15,5 @@ The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in co
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24236.yaml
diff --git a/2021/CVE-2021-24237.md b/2021/CVE-2021-24237.md
index bf99c5a68ed..7cd91a65642 100644
--- a/2021/CVE-2021-24237.md
+++ b/2021/CVE-2021-24237.md
@@ -17,3 +17,5 @@ The Realteo WordPress plugin before 1.2.4, used by the Findeo Theme, did not pro
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24237.yaml
diff --git a/2021/CVE-2021-24239.md b/2021/CVE-2021-24239.md
index 3a01aa87bdb..9a3c213536b 100644
--- a/2021/CVE-2021-24239.md
+++ b/2021/CVE-2021-24239.md
@@ -15,3 +15,5 @@ The Pie Register – User Registration Forms. Invitation based registrations, Cu
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24239.yaml
diff --git a/2021/CVE-2021-24245.md b/2021/CVE-2021-24245.md
index a88e68cd8ac..33808c8a654 100644
--- a/2021/CVE-2021-24245.md
+++ b/2021/CVE-2021-24245.md
@@ -16,3 +16,5 @@ The Stop Spammers WordPress plugin before 2021.9 did not escape user input when
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24245.yaml
diff --git a/2021/CVE-2021-24274.md b/2021/CVE-2021-24274.md
index 64af89acfe0..e51772423bf 100644
--- a/2021/CVE-2021-24274.md
+++ b/2021/CVE-2021-24274.md
@@ -16,3 +16,5 @@ The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24274.yaml
diff --git a/2021/CVE-2021-24275.md b/2021/CVE-2021-24275.md
index 9bdfe31ee29..0b44a0dc57c 100644
--- a/2021/CVE-2021-24275.md
+++ b/2021/CVE-2021-24275.md
@@ -16,3 +16,5 @@ The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24275.yaml
diff --git a/2021/CVE-2021-24276.md b/2021/CVE-2021-24276.md
index 7671a8bd47b..3f778e6f5ac 100644
--- a/2021/CVE-2021-24276.md
+++ b/2021/CVE-2021-24276.md
@@ -16,3 +16,5 @@ The Contact Form by Supsystic WordPress plugin before 1.7.15 did not sanitise th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24276.yaml
diff --git a/2021/CVE-2021-24278.md b/2021/CVE-2021-24278.md
index fa35865423a..1b7d05f1980 100644
--- a/2021/CVE-2021-24278.md
+++ b/2021/CVE-2021-24278.md
@@ -15,3 +15,5 @@ In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthentic
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24278.yaml
diff --git a/2021/CVE-2021-24284.md b/2021/CVE-2021-24284.md
index 7b926191962..366f36838fc 100644
--- a/2021/CVE-2021-24284.md
+++ b/2021/CVE-2021-24284.md
@@ -16,3 +16,5 @@ The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticat
 #### Github
 - https://github.com/InMyMine7/SharkXploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24284.yaml
diff --git a/2021/CVE-2021-24285.md b/2021/CVE-2021-24285.md
index 2a587174dee..6578d2a7881 100644
--- a/2021/CVE-2021-24285.md
+++ b/2021/CVE-2021-24285.md
@@ -15,3 +15,5 @@ The request_list_request AJAX call of the Car Seller - Auto Classifieds Script W
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24285.yaml
diff --git a/2021/CVE-2021-24286.md b/2021/CVE-2021-24286.md
index 9f0c0894696..19dd83467c1 100644
--- a/2021/CVE-2021-24286.md
+++ b/2021/CVE-2021-24286.md
@@ -16,3 +16,5 @@ The settings page of the Redirect 404 to parent WordPress plugin before 1.3.1 di
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24286.yaml
diff --git a/2021/CVE-2021-24287.md b/2021/CVE-2021-24287.md
index 9df23aabbf6..41060b8fc29 100644
--- a/2021/CVE-2021-24287.md
+++ b/2021/CVE-2021-24287.md
@@ -16,3 +16,5 @@ The settings page of the Select All Categories and Taxonomies, Change Checkbox t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24287.yaml
diff --git a/2021/CVE-2021-24288.md b/2021/CVE-2021-24288.md
index ee82fe8a336..22f7d227f67 100644
--- a/2021/CVE-2021-24288.md
+++ b/2021/CVE-2021-24288.md
@@ -15,3 +15,5 @@ When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanit
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24288.yaml
diff --git a/2021/CVE-2021-24291.md b/2021/CVE-2021-24291.md
index 84511aaa6f0..32a5016ea48 100644
--- a/2021/CVE-2021-24291.md
+++ b/2021/CVE-2021-24291.md
@@ -16,3 +16,5 @@ The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin be
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24291.yaml
diff --git a/2021/CVE-2021-24295.md b/2021/CVE-2021-24295.md
index 64cc14d5d37..ff03ac9ff00 100644
--- a/2021/CVE-2021-24295.md
+++ b/2021/CVE-2021-24295.md
@@ -15,3 +15,5 @@ It was possible to exploit an Unauthenticated Time-Based Blind SQL Injection vul
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24295.yaml
diff --git a/2021/CVE-2021-24298.md b/2021/CVE-2021-24298.md
index 9a411169317..d35f75df2ad 100644
--- a/2021/CVE-2021-24298.md
+++ b/2021/CVE-2021-24298.md
@@ -16,3 +16,5 @@ The method and share GET parameters of the Giveaway pages were not sanitised, va
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24298.yaml
diff --git a/2021/CVE-2021-24300.md b/2021/CVE-2021-24300.md
index ead297c1c74..e209c5aea6d 100644
--- a/2021/CVE-2021-24300.md
+++ b/2021/CVE-2021-24300.md
@@ -15,3 +15,5 @@ The slider import search feature of the PickPlugins Product Slider for WooCommer
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24300.yaml
diff --git a/2021/CVE-2021-24316.md b/2021/CVE-2021-24316.md
index ae8cfdff1f1..7336ffd4ae4 100644
--- a/2021/CVE-2021-24316.md
+++ b/2021/CVE-2021-24316.md
@@ -16,3 +16,5 @@ The search feature of the Mediumish WordPress theme through 1.0.47 does not prop
 #### Github
 - https://github.com/ZephrFish/AutoHoneyPoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24316.yaml
diff --git a/2021/CVE-2021-24320.md b/2021/CVE-2021-24320.md
index a818f20548f..59986c4f419 100644
--- a/2021/CVE-2021-24320.md
+++ b/2021/CVE-2021-24320.md
@@ -16,3 +16,5 @@ The Bello - Directory & Listing WordPress theme before 1.6.0 did not properly sa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24320.yaml
diff --git a/2021/CVE-2021-24335.md b/2021/CVE-2021-24335.md
index 47906a9a29c..b82e97e5818 100644
--- a/2021/CVE-2021-24335.md
+++ b/2021/CVE-2021-24335.md
@@ -15,3 +15,5 @@ The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not prope
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24335.yaml
diff --git a/2021/CVE-2021-24340.md b/2021/CVE-2021-24340.md
index 8df5f6707b4..7e0946a9a97 100644
--- a/2021/CVE-2021-24340.md
+++ b/2021/CVE-2021-24340.md
@@ -15,3 +15,5 @@ The WP Statistics WordPress plugin before 13.0.8 relied on using the WordPress e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24340.yaml
diff --git a/2021/CVE-2021-24342.md b/2021/CVE-2021-24342.md
index 9bb32cf4eea..da304a17893 100644
--- a/2021/CVE-2021-24342.md
+++ b/2021/CVE-2021-24342.md
@@ -15,3 +15,5 @@ The JNews WordPress theme before 8.0.6 did not sanitise the cat_id parameter in
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24342.yaml
diff --git a/2021/CVE-2021-24347.md b/2021/CVE-2021-24347.md
index 63a90131b07..25cab460507 100644
--- a/2021/CVE-2021-24347.md
+++ b/2021/CVE-2021-24347.md
@@ -17,3 +17,5 @@ The SP Project & Document Manager WordPress plugin before 4.22 allows users to u
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24347.yaml
diff --git a/2021/CVE-2021-24351.md b/2021/CVE-2021-24351.md
index ada83c19e74..e4634d568c8 100644
--- a/2021/CVE-2021-24351.md
+++ b/2021/CVE-2021-24351.md
@@ -15,3 +15,5 @@ The theplus_more_post AJAX action of The Plus Addons for Elementor Page Builder
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24351.yaml
diff --git a/2021/CVE-2021-24358.md b/2021/CVE-2021-24358.md
index a1d5c4b81ad..88b0dab9605 100644
--- a/2021/CVE-2021-24358.md
+++ b/2021/CVE-2021-24358.md
@@ -15,3 +15,5 @@ The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.10 did no
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24358.yaml
diff --git a/2021/CVE-2021-24364.md b/2021/CVE-2021-24364.md
index f8bbb9f9447..eb1626f178e 100644
--- a/2021/CVE-2021-24364.md
+++ b/2021/CVE-2021-24364.md
@@ -15,3 +15,5 @@ The Jannah WordPress theme before 5.4.4 did not properly sanitize the options JS
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24364.yaml
diff --git a/2021/CVE-2021-24370.md b/2021/CVE-2021-24370.md
index b94db8be2b0..543981350d8 100644
--- a/2021/CVE-2021-24370.md
+++ b/2021/CVE-2021-24370.md
@@ -18,3 +18,5 @@ The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24370.yaml
diff --git a/2021/CVE-2021-24387.md b/2021/CVE-2021-24387.md
index ec4398d980a..745762818d5 100644
--- a/2021/CVE-2021-24387.md
+++ b/2021/CVE-2021-24387.md
@@ -15,3 +15,5 @@ The WP Pro Real Estate 7 WordPress theme before 3.1.1 did not properly sanitise
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24387.yaml
diff --git a/2021/CVE-2021-24389.md b/2021/CVE-2021-24389.md
index 202284e2dce..f1a6a14be3b 100644
--- a/2021/CVE-2021-24389.md
+++ b/2021/CVE-2021-24389.md
@@ -16,3 +16,5 @@ The WP Foodbakery WordPress plugin before 2.2, used in the FoodBakery WordPress
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24389.yaml
diff --git a/2021/CVE-2021-24406.md b/2021/CVE-2021-24406.md
index 3b95859297c..9185380915d 100644
--- a/2021/CVE-2021-24406.md
+++ b/2021/CVE-2021-24406.md
@@ -15,3 +15,5 @@ The wpForo Forum WordPress plugin before 1.9.7 did not validate the redirect_to
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24406.yaml
diff --git a/2021/CVE-2021-24407.md b/2021/CVE-2021-24407.md
index 73e9d162076..2c7c533fe29 100644
--- a/2021/CVE-2021-24407.md
+++ b/2021/CVE-2021-24407.md
@@ -15,3 +15,5 @@ The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' PO
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24407.yaml
diff --git a/2021/CVE-2021-24409.md b/2021/CVE-2021-24409.md
index 209cabfc005..a00838d7c63 100644
--- a/2021/CVE-2021-24409.md
+++ b/2021/CVE-2021-24409.md
@@ -15,3 +15,5 @@ The Prismatic WordPress plugin before 2.8 does not escape the 'tab' GET paramete
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24409.yaml
diff --git a/2021/CVE-2021-24435.md b/2021/CVE-2021-24435.md
index 34ec85ec41c..a10c8cfcca3 100644
--- a/2021/CVE-2021-24435.md
+++ b/2021/CVE-2021-24435.md
@@ -15,3 +15,5 @@ The iframe-font-preview.php file of the titan-framework does not properly escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24435.yaml
diff --git a/2021/CVE-2021-24436.md b/2021/CVE-2021-24436.md
index 50b8043bb68..1c926639af6 100644
--- a/2021/CVE-2021-24436.md
+++ b/2021/CVE-2021-24436.md
@@ -15,3 +15,5 @@ The W3 Total Cache WordPress plugin before 2.1.4 was vulnerable to a reflected C
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24436.yaml
diff --git a/2021/CVE-2021-24442.md b/2021/CVE-2021-24442.md
index 2650979dcc6..d16e8518699 100644
--- a/2021/CVE-2021-24442.md
+++ b/2021/CVE-2021-24442.md
@@ -15,3 +15,5 @@ The Poll, Survey, Questionnaire and Voting system WordPress plugin before 1.5.3
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24442.yaml
diff --git a/2021/CVE-2021-24452.md b/2021/CVE-2021-24452.md
index b6ba0dd652d..bf922829236 100644
--- a/2021/CVE-2021-24452.md
+++ b/2021/CVE-2021-24452.md
@@ -15,3 +15,5 @@ The W3 Total Cache WordPress plugin before 2.1.5 was affected by a reflected Cro
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24452.yaml
diff --git a/2021/CVE-2021-24472.md b/2021/CVE-2021-24472.md
index 98c2c994597..142907a3805 100644
--- a/2021/CVE-2021-24472.md
+++ b/2021/CVE-2021-24472.md
@@ -17,3 +17,5 @@ The OnAir2 WordPress theme before 3.9.9.2 and QT KenthaRadio WordPress plugin be
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24472.yaml
diff --git a/2021/CVE-2021-24488.md b/2021/CVE-2021-24488.md
index 2e65100529f..47741e64025 100644
--- a/2021/CVE-2021-24488.md
+++ b/2021/CVE-2021-24488.md
@@ -15,3 +15,5 @@ The slider import search feature and tab parameter of the Post Grid WordPress pl
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24488.yaml
diff --git a/2021/CVE-2021-24495.md b/2021/CVE-2021-24495.md
index 611d4639069..659bafae78b 100644
--- a/2021/CVE-2021-24495.md
+++ b/2021/CVE-2021-24495.md
@@ -15,3 +15,5 @@ The Marmoset Viewer WordPress plugin before 1.9.3 does not property sanitize, va
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24495.yaml
diff --git a/2021/CVE-2021-24498.md b/2021/CVE-2021-24498.md
index 3c16328f0ae..901650133bd 100644
--- a/2021/CVE-2021-24498.md
+++ b/2021/CVE-2021-24498.md
@@ -15,3 +15,5 @@ The Calendar Event Multi View WordPress plugin before 1.4.01 does not sanitise o
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24498.yaml
diff --git a/2021/CVE-2021-24499.md b/2021/CVE-2021-24499.md
index 1b3c3e48b6a..ccf7d4ab97a 100644
--- a/2021/CVE-2021-24499.md
+++ b/2021/CVE-2021-24499.md
@@ -21,3 +21,5 @@ The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_
 - https://github.com/j4k0m/CVE-2021-24499
 - https://github.com/jytmX/CVE-2021-24499
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24499.yaml
diff --git a/2021/CVE-2021-24510.md b/2021/CVE-2021-24510.md
index b2bba2ff44f..aa2651058ed 100644
--- a/2021/CVE-2021-24510.md
+++ b/2021/CVE-2021-24510.md
@@ -15,3 +15,5 @@ The MF Gig Calendar WordPress plugin before 1.2 does not sanitise and escape the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24510.yaml
diff --git a/2021/CVE-2021-24522.md b/2021/CVE-2021-24522.md
index 725e29f4adf..77112f606ed 100644
--- a/2021/CVE-2021-24522.md
+++ b/2021/CVE-2021-24522.md
@@ -15,3 +15,5 @@ The User Registration, User Profile, Login & Membership – ProfilePress (Former
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24522.yaml
diff --git a/2021/CVE-2021-24527.md b/2021/CVE-2021-24527.md
index 9f88b045586..784bce75f90 100644
--- a/2021/CVE-2021-24527.md
+++ b/2021/CVE-2021-24527.md
@@ -15,3 +15,5 @@ The User Registration & User Profile – Profile Builder WordPress plugin before
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24527.yaml
diff --git a/2021/CVE-2021-24554.md b/2021/CVE-2021-24554.md
index 686979e0cfb..502ac4c646d 100644
--- a/2021/CVE-2021-24554.md
+++ b/2021/CVE-2021-24554.md
@@ -16,3 +16,5 @@ The Paytm – Donation Plugin WordPress plugin through 1.3.2 does not sanitise,
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24554.yaml
diff --git a/2021/CVE-2021-24627.md b/2021/CVE-2021-24627.md
index 7b2213bf1d4..0b1784dc606 100644
--- a/2021/CVE-2021-24627.md
+++ b/2021/CVE-2021-24627.md
@@ -16,3 +16,5 @@ The G Auto-Hyperlink WordPress plugin through 1.0.1 does not sanitise or escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24627.yaml
diff --git a/2021/CVE-2021-24644.md b/2021/CVE-2021-24644.md
index 2f1f445c380..1102d397ea7 100644
--- a/2021/CVE-2021-24644.md
+++ b/2021/CVE-2021-24644.md
@@ -15,3 +15,5 @@ The Images to WebP WordPress plugin before 1.9 does not validate or sanitise the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24644.yaml
diff --git a/2021/CVE-2021-24647.md b/2021/CVE-2021-24647.md
index 540910fc38b..0c027ef2f7d 100644
--- a/2021/CVE-2021-24647.md
+++ b/2021/CVE-2021-24647.md
@@ -15,3 +15,5 @@ The Registration Forms – User profile, Content Restriction, Spam Protection, P
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2021-24647
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24647.yaml
diff --git a/2021/CVE-2021-24657.md b/2021/CVE-2021-24657.md
index e160ac12f64..cc704d90615 100644
--- a/2021/CVE-2021-24657.md
+++ b/2021/CVE-2021-24657.md
@@ -15,3 +15,5 @@ The Limit Login Attempts WordPress plugin before 4.0.50 does not escape the IP a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24657.yaml
diff --git a/2021/CVE-2021-24666.md b/2021/CVE-2021-24666.md
index 3b33f83fe25..88f8db38a48 100644
--- a/2021/CVE-2021-24666.md
+++ b/2021/CVE-2021-24666.md
@@ -15,3 +15,5 @@ The Podlove Podcast Publisher WordPress plugin before 3.5.6 contains a 'Social &
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24666.yaml
diff --git a/2021/CVE-2021-24681.md b/2021/CVE-2021-24681.md
index 28f58e8dded..a8580f07fe0 100644
--- a/2021/CVE-2021-24681.md
+++ b/2021/CVE-2021-24681.md
@@ -15,3 +15,5 @@ The Duplicate Page WordPress plugin through 4.4.2 does not sanitise or escape th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24681.yaml
diff --git a/2021/CVE-2021-24731.md b/2021/CVE-2021-24731.md
index d6ce5db01db..ef03b74256e 100644
--- a/2021/CVE-2021-24731.md
+++ b/2021/CVE-2021-24731.md
@@ -15,3 +15,5 @@ The Registration Forms – User profile, Content Restriction, Spam Protection, P
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24731.yaml
diff --git a/2021/CVE-2021-24746.md b/2021/CVE-2021-24746.md
index e2ffab93b5a..70b808229a7 100644
--- a/2021/CVE-2021-24746.md
+++ b/2021/CVE-2021-24746.md
@@ -15,3 +15,5 @@ The Social Sharing Plugin WordPress plugin before 3.3.40 does not escape the vie
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24746.yaml
diff --git a/2021/CVE-2021-24750.md b/2021/CVE-2021-24750.md
index eec98a4a5c8..ad284491c5d 100644
--- a/2021/CVE-2021-24750.md
+++ b/2021/CVE-2021-24750.md
@@ -16,3 +16,5 @@ The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does n
 #### Github
 - https://github.com/fimtow/CVE-2021-24750
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24750.yaml
diff --git a/2021/CVE-2021-24762.md b/2021/CVE-2021-24762.md
index 149eabbf229..9faa6156cbf 100644
--- a/2021/CVE-2021-24762.md
+++ b/2021/CVE-2021-24762.md
@@ -16,3 +16,5 @@ The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24762.yaml
diff --git a/2021/CVE-2021-24786.md b/2021/CVE-2021-24786.md
index 1cf717a54bd..cdf546e6281 100644
--- a/2021/CVE-2021-24786.md
+++ b/2021/CVE-2021-24786.md
@@ -15,3 +15,5 @@ The Download Monitor WordPress plugin before 4.4.5 does not properly validate an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24786.yaml
diff --git a/2021/CVE-2021-24791.md b/2021/CVE-2021-24791.md
index 05da9d6e8f0..d5cce973625 100644
--- a/2021/CVE-2021-24791.md
+++ b/2021/CVE-2021-24791.md
@@ -15,3 +15,5 @@ The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24791.yaml
diff --git a/2021/CVE-2021-24827.md b/2021/CVE-2021-24827.md
index c1dedf5a119..120853ed74b 100644
--- a/2021/CVE-2021-24827.md
+++ b/2021/CVE-2021-24827.md
@@ -15,3 +15,5 @@ The Asgaros Forum WordPress plugin before 1.15.13 does not validate and escape u
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24827.yaml
diff --git a/2021/CVE-2021-24838.md b/2021/CVE-2021-24838.md
index 34603de3d8d..0a8e5dc0fb9 100644
--- a/2021/CVE-2021-24838.md
+++ b/2021/CVE-2021-24838.md
@@ -15,3 +15,5 @@ The AnyComment WordPress plugin before 0.3.5 has an API endpoint which passes us
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24838.yaml
diff --git a/2021/CVE-2021-24849.md b/2021/CVE-2021-24849.md
index e963448615c..4f52675d5cd 100644
--- a/2021/CVE-2021-24849.md
+++ b/2021/CVE-2021-24849.md
@@ -15,3 +15,5 @@ The wcfm_ajax_controller AJAX action of the WCFM Marketplace WordPress plugin be
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24849.yaml
diff --git a/2021/CVE-2021-24862.md b/2021/CVE-2021-24862.md
index ae70a1c8b33..c758ef4a503 100644
--- a/2021/CVE-2021-24862.md
+++ b/2021/CVE-2021-24862.md
@@ -16,3 +16,5 @@ The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24862.yaml
diff --git a/2021/CVE-2021-24875.md b/2021/CVE-2021-24875.md
index 6e798ded8bb..520f1035d3c 100644
--- a/2021/CVE-2021-24875.md
+++ b/2021/CVE-2021-24875.md
@@ -15,3 +15,5 @@ The eCommerce Product Catalog Plugin for WordPress plugin before 3.0.39 does not
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24875.yaml
diff --git a/2021/CVE-2021-24876.md b/2021/CVE-2021-24876.md
index a8884b8f239..626a3b504b5 100644
--- a/2021/CVE-2021-24876.md
+++ b/2021/CVE-2021-24876.md
@@ -15,3 +15,5 @@ The Registrations for the Events Calendar WordPress plugin before 2.7.5 does not
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24876.yaml
diff --git a/2021/CVE-2021-24878.md b/2021/CVE-2021-24878.md
index 742452e95b7..75a0d30c05f 100644
--- a/2021/CVE-2021-24878.md
+++ b/2021/CVE-2021-24878.md
@@ -15,3 +15,5 @@ The SupportCandy WordPress plugin before 2.2.7 does not sanitise and escape the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24878.yaml
diff --git a/2021/CVE-2021-24891.md b/2021/CVE-2021-24891.md
index c3d7870aca6..03aced5e68b 100644
--- a/2021/CVE-2021-24891.md
+++ b/2021/CVE-2021-24891.md
@@ -15,3 +15,5 @@ The Elementor Website Builder WordPress plugin before 3.4.8 does not sanitise or
 #### Github
 - https://github.com/hackmelocal/CVE-2021-24891-Simulation
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24891.yaml
diff --git a/2021/CVE-2021-24910.md b/2021/CVE-2021-24910.md
index 8999c4d6eb9..17c992d41c6 100644
--- a/2021/CVE-2021-24910.md
+++ b/2021/CVE-2021-24910.md
@@ -15,3 +15,5 @@ The Transposh WordPress Translation WordPress plugin before 1.0.8 does not sanit
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24910.yaml
diff --git a/2021/CVE-2021-24915.md b/2021/CVE-2021-24915.md
index 1e1a8fcbbf9..02183225161 100644
--- a/2021/CVE-2021-24915.md
+++ b/2021/CVE-2021-24915.md
@@ -16,3 +16,5 @@ The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability ch
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24915.yaml
diff --git a/2021/CVE-2021-24916.md b/2021/CVE-2021-24916.md
index e5ec6942b93..9dcd306c2b5 100644
--- a/2021/CVE-2021-24916.md
+++ b/2021/CVE-2021-24916.md
@@ -15,3 +15,5 @@ The Qubely WordPress plugin before 1.8.6 allows unauthenticated user to send arb
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24916.yaml
diff --git a/2021/CVE-2021-24917.md b/2021/CVE-2021-24917.md
index 32a64f308f3..5bedae27a77 100644
--- a/2021/CVE-2021-24917.md
+++ b/2021/CVE-2021-24917.md
@@ -17,3 +17,5 @@ The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get t
 - https://github.com/buildwithlian/CVE-2021-24917
 - https://github.com/dikalasenjadatang/CVE-2021-24917
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24917.yaml
diff --git a/2021/CVE-2021-24926.md b/2021/CVE-2021-24926.md
index 857bd558500..4fbd2e39b3c 100644
--- a/2021/CVE-2021-24926.md
+++ b/2021/CVE-2021-24926.md
@@ -15,3 +15,5 @@ The Domain Check WordPress plugin before 1.0.17 does not sanitise and escape the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24926.yaml
diff --git a/2021/CVE-2021-24931.md b/2021/CVE-2021-24931.md
index 56f64480dbf..49fd0c353f6 100644
--- a/2021/CVE-2021-24931.md
+++ b/2021/CVE-2021-24931.md
@@ -16,3 +16,5 @@ The Secure Copy Content Protection and Content Locking WordPress plugin before 2
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24931.yaml
diff --git a/2021/CVE-2021-24934.md b/2021/CVE-2021-24934.md
index 5414a7d428a..d32e6db8cac 100644
--- a/2021/CVE-2021-24934.md
+++ b/2021/CVE-2021-24934.md
@@ -15,3 +15,5 @@ The Visual CSS Style Editor WordPress plugin before 7.5.4 does not sanitise and
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24934.yaml
diff --git a/2021/CVE-2021-24940.md b/2021/CVE-2021-24940.md
index f55e407a751..e9b9d4a7962 100644
--- a/2021/CVE-2021-24940.md
+++ b/2021/CVE-2021-24940.md
@@ -15,3 +15,5 @@ The Persian Woocommerce WordPress plugin through 5.8.0 does not escape the s par
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24940.yaml
diff --git a/2021/CVE-2021-24943.md b/2021/CVE-2021-24943.md
index cb84a8884e2..ae8daf505d5 100644
--- a/2021/CVE-2021-24943.md
+++ b/2021/CVE-2021-24943.md
@@ -15,3 +15,5 @@ The Registrations for the Events Calendar WordPress plugin before 2.7.6 does not
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24943.yaml
diff --git a/2021/CVE-2021-24946.md b/2021/CVE-2021-24946.md
index f68d5e22ba2..c3c6f940ff4 100644
--- a/2021/CVE-2021-24946.md
+++ b/2021/CVE-2021-24946.md
@@ -16,3 +16,5 @@ The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24946.yaml
diff --git a/2021/CVE-2021-24947.md b/2021/CVE-2021-24947.md
index 364f1b1cb55..0fdad933819 100644
--- a/2021/CVE-2021-24947.md
+++ b/2021/CVE-2021-24947.md
@@ -15,3 +15,5 @@ The RVM WordPress plugin before 6.4.2 does not have proper authorisation, CSRF c
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24947.yaml
diff --git a/2021/CVE-2021-24956.md b/2021/CVE-2021-24956.md
index b1adcf369bc..5bf516efc65 100644
--- a/2021/CVE-2021-24956.md
+++ b/2021/CVE-2021-24956.md
@@ -15,3 +15,5 @@ The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.8.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24956.yaml
diff --git a/2021/CVE-2021-24970.md b/2021/CVE-2021-24970.md
index e479331b25d..413a1e937e5 100644
--- a/2021/CVE-2021-24970.md
+++ b/2021/CVE-2021-24970.md
@@ -15,3 +15,5 @@ The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24970.yaml
diff --git a/2021/CVE-2021-24979.md b/2021/CVE-2021-24979.md
index ee4d82c0d92..cbfa8f00e13 100644
--- a/2021/CVE-2021-24979.md
+++ b/2021/CVE-2021-24979.md
@@ -15,3 +15,5 @@ The Paid Memberships Pro WordPress plugin before 2.6.6 does not escape the s par
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24979.yaml
diff --git a/2021/CVE-2021-24987.md b/2021/CVE-2021-24987.md
index a21bafd5226..d29cc5ab4cf 100644
--- a/2021/CVE-2021-24987.md
+++ b/2021/CVE-2021-24987.md
@@ -15,3 +15,5 @@ The Social Share, Social Login and Social Comments Plugin WordPress plugin befor
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24987.yaml
diff --git a/2021/CVE-2021-24991.md b/2021/CVE-2021-24991.md
index faea595cce1..4fc066f8297 100644
--- a/2021/CVE-2021-24991.md
+++ b/2021/CVE-2021-24991.md
@@ -15,3 +15,5 @@ The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24991.yaml
diff --git a/2021/CVE-2021-24997.md b/2021/CVE-2021-24997.md
index b8369ad3bab..931e509b83c 100644
--- a/2021/CVE-2021-24997.md
+++ b/2021/CVE-2021-24997.md
@@ -15,3 +15,5 @@ The WP Guppy WordPress plugin before 1.3 does not have any authorisation in some
 #### Github
 - https://github.com/Keyvanhardani/WP-Guppy-A-live-chat-WP-JSON-API-Sensitive-Information-Disclosure
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24997.yaml
diff --git a/2021/CVE-2021-25003.md b/2021/CVE-2021-25003.md
index 4d88171fbeb..88c6ce71e6d 100644
--- a/2021/CVE-2021-25003.md
+++ b/2021/CVE-2021-25003.md
@@ -15,3 +15,5 @@ The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which co
 #### Github
 - https://github.com/biulove0x/CVE-2021-25003
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25003.yaml
diff --git a/2021/CVE-2021-25008.md b/2021/CVE-2021-25008.md
index b9b2abf7820..afdc62bab45 100644
--- a/2021/CVE-2021-25008.md
+++ b/2021/CVE-2021-25008.md
@@ -15,3 +15,5 @@ The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-sa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25008.yaml
diff --git a/2021/CVE-2021-25016.md b/2021/CVE-2021-25016.md
index 5b5f93cf2b1..7cf33cd3022 100644
--- a/2021/CVE-2021-25016.md
+++ b/2021/CVE-2021-25016.md
@@ -17,3 +17,5 @@ The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25016.yaml
diff --git a/2021/CVE-2021-25028.md b/2021/CVE-2021-25028.md
index a4f16f256ba..81c69f594cb 100644
--- a/2021/CVE-2021-25028.md
+++ b/2021/CVE-2021-25028.md
@@ -15,3 +15,5 @@ The Event Tickets WordPress plugin before 5.2.2 does not validate the tribe_tick
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25028.yaml
diff --git a/2021/CVE-2021-25032.md b/2021/CVE-2021-25032.md
index b6088fd1b39..fa0b179e8fe 100644
--- a/2021/CVE-2021-25032.md
+++ b/2021/CVE-2021-25032.md
@@ -18,3 +18,5 @@ The PublishPress Capabilities WordPress plugin before 2.3.1, PublishPress Capabi
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2021-25032
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25032.yaml
diff --git a/2021/CVE-2021-25033.md b/2021/CVE-2021-25033.md
index a0d6c486d5b..3fb3bacf2c8 100644
--- a/2021/CVE-2021-25033.md
+++ b/2021/CVE-2021-25033.md
@@ -15,3 +15,5 @@ The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25033.yaml
diff --git a/2021/CVE-2021-25052.md b/2021/CVE-2021-25052.md
index 04180db7688..5c5d3168992 100644
--- a/2021/CVE-2021-25052.md
+++ b/2021/CVE-2021-25052.md
@@ -15,3 +15,5 @@ The Button Generator WordPress plugin before 2.3.3 within the wow-company admin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25052.yaml
diff --git a/2021/CVE-2021-25055.md b/2021/CVE-2021-25055.md
index ba4c689ab86..964c60a923b 100644
--- a/2021/CVE-2021-25055.md
+++ b/2021/CVE-2021-25055.md
@@ -15,3 +15,5 @@ The FeedWordPress plugin before 2022.0123 is affected by a Reflected Cross-Site
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25055.yaml
diff --git a/2021/CVE-2021-25063.md b/2021/CVE-2021-25063.md
index a0d55cd323a..f722708053f 100644
--- a/2021/CVE-2021-25063.md
+++ b/2021/CVE-2021-25063.md
@@ -15,3 +15,5 @@ The Skins for Contact Form 7 WordPress plugin before 2.5.1 does not sanitise and
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25063.yaml
diff --git a/2021/CVE-2021-25065.md b/2021/CVE-2021-25065.md
index c3347f7cf3c..097caa38ed7 100644
--- a/2021/CVE-2021-25065.md
+++ b/2021/CVE-2021-25065.md
@@ -15,3 +15,5 @@ The Smash Balloon Social Post Feed WordPress plugin before 4.1.1 was affected by
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25065.yaml
diff --git a/2021/CVE-2021-25067.md b/2021/CVE-2021-25067.md
index 2e4fce4a4ad..95951e33573 100644
--- a/2021/CVE-2021-25067.md
+++ b/2021/CVE-2021-25067.md
@@ -15,3 +15,5 @@ The Landing Page Builder WordPress plugin before 1.4.9.6 was affected by a refle
 #### Github
 - https://github.com/kazet/wpgarlic
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25067.yaml
diff --git a/2021/CVE-2021-25074.md b/2021/CVE-2021-25074.md
index 033d7902d82..fba6e7118c5 100644
--- a/2021/CVE-2021-25074.md
+++ b/2021/CVE-2021-25074.md
@@ -15,3 +15,5 @@ The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (pass
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25074.yaml
diff --git a/2021/CVE-2021-25075.md b/2021/CVE-2021-25075.md
index 6b2ab7a5cc5..e615268032c 100644
--- a/2021/CVE-2021-25075.md
+++ b/2021/CVE-2021-25075.md
@@ -15,3 +15,5 @@ The Duplicate Page or Post WordPress plugin before 1.5.1 does not have any autho
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25075.yaml
diff --git a/2021/CVE-2021-25078.md b/2021/CVE-2021-25078.md
index 0fb4813fd90..e21f23520d1 100644
--- a/2021/CVE-2021-25078.md
+++ b/2021/CVE-2021-25078.md
@@ -15,3 +15,5 @@ The Affiliates Manager WordPress plugin before 2.9.0 does not validate, sanitise
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25078.yaml
diff --git a/2021/CVE-2021-25079.md b/2021/CVE-2021-25079.md
index 80c20550754..d0540e0f6af 100644
--- a/2021/CVE-2021-25079.md
+++ b/2021/CVE-2021-25079.md
@@ -15,3 +15,5 @@ The Contact Form Entries WordPress plugin before 1.2.4 does not sanitise and esc
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25079.yaml
diff --git a/2021/CVE-2021-25082.md b/2021/CVE-2021-25082.md
index 8d50437c1ab..10cb4b9b67f 100644
--- a/2021/CVE-2021-25082.md
+++ b/2021/CVE-2021-25082.md
@@ -15,3 +15,5 @@ The Popup Builder WordPress plugin before 4.0.7 does not validate and sanitise t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25082.yaml
diff --git a/2021/CVE-2021-25085.md b/2021/CVE-2021-25085.md
index d4a0ae9c9c3..89548fdaddf 100644
--- a/2021/CVE-2021-25085.md
+++ b/2021/CVE-2021-25085.md
@@ -15,3 +15,5 @@ The WOOF WordPress plugin before 1.2.6.3 does not sanitise and escape the woof_r
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25085.yaml
diff --git a/2021/CVE-2021-25094.md b/2021/CVE-2021-25094.md
index f379d023485..7c8bbf416d8 100644
--- a/2021/CVE-2021-25094.md
+++ b/2021/CVE-2021-25094.md
@@ -20,3 +20,5 @@ The Tatsu WordPress plugin before 3.3.12 add_custom_font action can be used with
 - https://github.com/darkpills/CVE-2021-25094-tatsu-preauth-rce
 - https://github.com/xdx57/CVE-2021-25094
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25094.yaml
diff --git a/2021/CVE-2021-25099.md b/2021/CVE-2021-25099.md
index c35cf133ca7..a17962c7ae1 100644
--- a/2021/CVE-2021-25099.md
+++ b/2021/CVE-2021-25099.md
@@ -15,3 +15,5 @@ The GiveWP WordPress plugin before 2.17.3 does not sanitise and escape the form_
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25099.yaml
diff --git a/2021/CVE-2021-25104.md b/2021/CVE-2021-25104.md
index fdfb364b850..3e39048c5d7 100644
--- a/2021/CVE-2021-25104.md
+++ b/2021/CVE-2021-25104.md
@@ -15,3 +15,5 @@ The Ocean Extra WordPress plugin before 1.9.5 does not escape generated links wh
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25104.yaml
diff --git a/2021/CVE-2021-25111.md b/2021/CVE-2021-25111.md
index f96278d21ac..ff0505c3c33 100644
--- a/2021/CVE-2021-25111.md
+++ b/2021/CVE-2021-25111.md
@@ -15,3 +15,5 @@ The English WordPress Admin WordPress plugin before 1.5.2 does not validate the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25111.yaml
diff --git a/2021/CVE-2021-25112.md b/2021/CVE-2021-25112.md
index 9c763d9b384..cb2b09708dd 100644
--- a/2021/CVE-2021-25112.md
+++ b/2021/CVE-2021-25112.md
@@ -15,3 +15,5 @@ The WHMCS Bridge WordPress plugin before 6.4b does not sanitise and escape the e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25112.yaml
diff --git a/2021/CVE-2021-25114.md b/2021/CVE-2021-25114.md
index 08a6073dd69..78b366d1ebf 100644
--- a/2021/CVE-2021-25114.md
+++ b/2021/CVE-2021-25114.md
@@ -15,3 +15,5 @@ The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the disco
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25114.yaml
diff --git a/2021/CVE-2021-25118.md b/2021/CVE-2021-25118.md
index 4ceabb7c603..53ca8f2e393 100644
--- a/2021/CVE-2021-25118.md
+++ b/2021/CVE-2021-25118.md
@@ -16,3 +16,5 @@ The Yoast SEO WordPress plugin (from versions 16.7 until 17.2) discloses the ful
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25118.yaml
diff --git a/2021/CVE-2021-25120.md b/2021/CVE-2021-25120.md
index 933d4c5358a..b5d551fbf7c 100644
--- a/2021/CVE-2021-25120.md
+++ b/2021/CVE-2021-25120.md
@@ -16,3 +16,5 @@ The Easy Social Feed Free and Pro WordPress plugins before 6.2.7 do not sanitise
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25120.yaml
diff --git a/2021/CVE-2021-25161.md b/2021/CVE-2021-25161.md
index 1f30780c1a3..350f70146a2 100644
--- a/2021/CVE-2021-25161.md
+++ b/2021/CVE-2021-25161.md
@@ -20,3 +20,5 @@ A remote cross-site scripting (xss) vulnerability was discovered in some Aruba I
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25161.yaml
diff --git a/2021/CVE-2021-25281.md b/2021/CVE-2021-25281.md
index d5fafb56b97..73987561476 100644
--- a/2021/CVE-2021-25281.md
+++ b/2021/CVE-2021-25281.md
@@ -16,3 +16,5 @@ An issue was discovered in through SaltStack Salt before 3002.5. salt-api does n
 #### Github
 - https://github.com/Immersive-Labs-Sec/CVE-2021-25281
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25281.yaml
diff --git a/2021/CVE-2021-25296.md b/2021/CVE-2021-25296.md
index 6913a1fe322..53ffdbe7910 100644
--- a/2021/CVE-2021-25296.md
+++ b/2021/CVE-2021-25296.md
@@ -19,3 +19,5 @@ Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerabilit
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25296.yaml
diff --git a/2021/CVE-2021-25297.md b/2021/CVE-2021-25297.md
index e1927b94a86..eb8e4a09b8e 100644
--- a/2021/CVE-2021-25297.md
+++ b/2021/CVE-2021-25297.md
@@ -19,3 +19,5 @@ Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerabilit
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25297.yaml
diff --git a/2021/CVE-2021-25298.md b/2021/CVE-2021-25298.md
index 45ea1954e5a..0114770927a 100644
--- a/2021/CVE-2021-25298.md
+++ b/2021/CVE-2021-25298.md
@@ -19,3 +19,5 @@ Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerabilit
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25298.yaml
diff --git a/2021/CVE-2021-25299.md b/2021/CVE-2021-25299.md
index d329c85727a..a333f9c4b1e 100644
--- a/2021/CVE-2021-25299.md
+++ b/2021/CVE-2021-25299.md
@@ -16,3 +16,5 @@ Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulner
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25299.yaml
diff --git a/2021/CVE-2021-25646.md b/2021/CVE-2021-25646.md
index 03a659d8eb0..032358807b9 100644
--- a/2021/CVE-2021-25646.md
+++ b/2021/CVE-2021-25646.md
@@ -28,3 +28,5 @@ Apache Druid includes the ability to execute user-provided JavaScript code embed
 - https://github.com/tiemio/RCE-PoC-CVE-2021-25646
 - https://github.com/yaunsky/cve-2021-25646
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25646.yaml
diff --git a/2021/CVE-2021-25864.md b/2021/CVE-2021-25864.md
index 3be163717f4..536644e0af0 100644
--- a/2021/CVE-2021-25864.md
+++ b/2021/CVE-2021-25864.md
@@ -15,3 +15,5 @@ node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traver
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25864.yaml
diff --git a/2021/CVE-2021-25899.md b/2021/CVE-2021-25899.md
index f9fc719b2f3..3df14768ba0 100644
--- a/2021/CVE-2021-25899.md
+++ b/2021/CVE-2021-25899.md
@@ -15,3 +15,5 @@ An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. An u
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25899.yaml
diff --git a/2021/CVE-2021-26084.md b/2021/CVE-2021-26084.md
index 0f672757f85..c8ead935a03 100644
--- a/2021/CVE-2021-26084.md
+++ b/2021/CVE-2021-26084.md
@@ -59,3 +59,5 @@ In affected versions of Confluence Server and Data Center, an OGNL injection vul
 - https://github.com/wdjcy/CVE-2021-26084
 - https://github.com/wolf1892/confluence-rce-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26084.yaml
diff --git a/2021/CVE-2021-26085.md b/2021/CVE-2021-26085.md
index c2fb3419fdc..feb31b7361b 100644
--- a/2021/CVE-2021-26085.md
+++ b/2021/CVE-2021-26085.md
@@ -19,3 +19,5 @@ Affected versions of Atlassian Confluence Server allow remote attackers to view
 - https://github.com/ColdFusionX/CVE-2021-26085
 - https://github.com/zeroc00I/CVE-2021-26085
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26085.yaml
diff --git a/2021/CVE-2021-26086.md b/2021/CVE-2021-26086.md
index 1bb22f4677e..b2c3f092528 100644
--- a/2021/CVE-2021-26086.md
+++ b/2021/CVE-2021-26086.md
@@ -21,3 +21,5 @@ Affected versions of Atlassian Jira Server and Data Center allow remote attacker
 - https://github.com/ColdFusionX/CVE-2021-26086
 - https://github.com/Jeromeyoung/CVE-2021-26086
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26086.yaml
diff --git a/2021/CVE-2021-26247.md b/2021/CVE-2021-26247.md
index 6090807764a..c36229e1ba4 100644
--- a/2021/CVE-2021-26247.md
+++ b/2021/CVE-2021-26247.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26247.yaml
diff --git a/2021/CVE-2021-26294.md b/2021/CVE-2021-26294.md
index d1de861948d..af33da2a9d1 100644
--- a/2021/CVE-2021-26294.md
+++ b/2021/CVE-2021-26294.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26294.yaml
diff --git a/2021/CVE-2021-26295.md b/2021/CVE-2021-26295.md
index 06b19d639fc..439afc569c4 100644
--- a/2021/CVE-2021-26295.md
+++ b/2021/CVE-2021-26295.md
@@ -21,3 +21,5 @@ Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated at
 - https://github.com/rakjong/CVE-2021-26295-Apache-OFBiz
 - https://github.com/yumusb/CVE-2021-26295
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26295.yaml
diff --git a/2021/CVE-2021-26475.md b/2021/CVE-2021-26475.md
index 46a1c7877cb..7019fc543c1 100644
--- a/2021/CVE-2021-26475.md
+++ b/2021/CVE-2021-26475.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26475.yaml
diff --git a/2021/CVE-2021-26598.md b/2021/CVE-2021-26598.md
index 9ad64a0e214..eae26b69c37 100644
--- a/2021/CVE-2021-26598.md
+++ b/2021/CVE-2021-26598.md
@@ -16,3 +16,5 @@ ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26598.yaml
diff --git a/2021/CVE-2021-26599.md b/2021/CVE-2021-26599.md
index 0de83082bf0..dce5f32505f 100644
--- a/2021/CVE-2021-26599.md
+++ b/2021/CVE-2021-26599.md
@@ -15,3 +15,5 @@ ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26599.yaml
diff --git a/2021/CVE-2021-26702.md b/2021/CVE-2021-26702.md
index da29a62dd7a..bf0834cc313 100644
--- a/2021/CVE-2021-26702.md
+++ b/2021/CVE-2021-26702.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26702.yaml
diff --git a/2021/CVE-2021-26710.md b/2021/CVE-2021-26710.md
index 9e6a8b1f724..584ebf80dd8 100644
--- a/2021/CVE-2021-26710.md
+++ b/2021/CVE-2021-26710.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26710.yaml
diff --git a/2021/CVE-2021-26723.md b/2021/CVE-2021-26723.md
index 4f9432683bf..cb14bfe8d53 100644
--- a/2021/CVE-2021-26723.md
+++ b/2021/CVE-2021-26723.md
@@ -16,3 +16,5 @@ Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26723.yaml
diff --git a/2021/CVE-2021-26812.md b/2021/CVE-2021-26812.md
index d333f160d4b..b95fbb608d1 100644
--- a/2021/CVE-2021-26812.md
+++ b/2021/CVE-2021-26812.md
@@ -15,3 +15,5 @@ Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26812.yaml
diff --git a/2021/CVE-2021-26855.md b/2021/CVE-2021-26855.md
index df2037b03df..746df404f73 100644
--- a/2021/CVE-2021-26855.md
+++ b/2021/CVE-2021-26855.md
@@ -85,3 +85,5 @@ Microsoft Exchange Server Remote Code Execution Vulnerability
 - https://github.com/timb-machine-mirrors/testanull-CVE-2021-26855_read_poc.txt
 - https://github.com/yaoxiaoangry3/Flangvik
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26855.yaml
diff --git a/2021/CVE-2021-26947.md b/2021/CVE-2021-26947.md
index 6f000820452..b48b96e587b 100644
--- a/2021/CVE-2021-26947.md
+++ b/2021/CVE-2021-26947.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26947.yaml
diff --git a/2021/CVE-2021-27124.md b/2021/CVE-2021-27124.md
index f8730dfef5b..bb4baf5ae7a 100644
--- a/2021/CVE-2021-27124.md
+++ b/2021/CVE-2021-27124.md
@@ -16,3 +16,5 @@ SQL injection in the expertise parameter in search_result.php in Doctor Appointm
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27124.yaml
diff --git a/2021/CVE-2021-27132.md b/2021/CVE-2021-27132.md
index 66bfa1dc2cd..297dbdc0985 100644
--- a/2021/CVE-2021-27132.md
+++ b/2021/CVE-2021-27132.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27132.yaml
diff --git a/2021/CVE-2021-27309.md b/2021/CVE-2021-27309.md
index 1d247ec1032..660e049c678 100644
--- a/2021/CVE-2021-27309.md
+++ b/2021/CVE-2021-27309.md
@@ -15,3 +15,5 @@ Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "module" paramete
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27309.yaml
diff --git a/2021/CVE-2021-27310.md b/2021/CVE-2021-27310.md
index 49e2e030c4a..78529bb3757 100644
--- a/2021/CVE-2021-27310.md
+++ b/2021/CVE-2021-27310.md
@@ -15,3 +15,5 @@ Clansphere CMS 2011.4 allows unauthenticated reflected XSS via "language" parame
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27310.yaml
diff --git a/2021/CVE-2021-27314.md b/2021/CVE-2021-27314.md
index d741ce555f1..de8a5f41730 100644
--- a/2021/CVE-2021-27314.md
+++ b/2021/CVE-2021-27314.md
@@ -15,3 +15,5 @@ SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27314.yaml
diff --git a/2021/CVE-2021-27315.md b/2021/CVE-2021-27315.md
index 26ba6dad94a..f4507ed44c0 100644
--- a/2021/CVE-2021-27315.md
+++ b/2021/CVE-2021-27315.md
@@ -15,3 +15,5 @@ Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27315.yaml
diff --git a/2021/CVE-2021-27316.md b/2021/CVE-2021-27316.md
index 0ea30101789..743c66b7737 100644
--- a/2021/CVE-2021-27316.md
+++ b/2021/CVE-2021-27316.md
@@ -15,3 +15,5 @@ Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27316.yaml
diff --git a/2021/CVE-2021-27319.md b/2021/CVE-2021-27319.md
index b6e3062f273..74b4894f1cd 100644
--- a/2021/CVE-2021-27319.md
+++ b/2021/CVE-2021-27319.md
@@ -15,3 +15,5 @@ Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27319.yaml
diff --git a/2021/CVE-2021-27320.md b/2021/CVE-2021-27320.md
index 558beb5ee28..59a1573ba74 100644
--- a/2021/CVE-2021-27320.md
+++ b/2021/CVE-2021-27320.md
@@ -15,3 +15,5 @@ Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27320.yaml
diff --git a/2021/CVE-2021-27330.md b/2021/CVE-2021-27330.md
index 51c9f6472ec..62740dd7d42 100644
--- a/2021/CVE-2021-27330.md
+++ b/2021/CVE-2021-27330.md
@@ -16,3 +16,5 @@ Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) i
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27330.yaml
diff --git a/2021/CVE-2021-27358.md b/2021/CVE-2021-27358.md
index f70493d5585..a426369fc2d 100644
--- a/2021/CVE-2021-27358.md
+++ b/2021/CVE-2021-27358.md
@@ -16,3 +16,5 @@ The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27358.yaml
diff --git a/2021/CVE-2021-27519.md b/2021/CVE-2021-27519.md
index 5665c4ad920..fca84f62cae 100644
--- a/2021/CVE-2021-27519.md
+++ b/2021/CVE-2021-27519.md
@@ -16,3 +16,5 @@ A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27519.yaml
diff --git a/2021/CVE-2021-27520.md b/2021/CVE-2021-27520.md
index 55be88a77a3..53ef6d92c0f 100644
--- a/2021/CVE-2021-27520.md
+++ b/2021/CVE-2021-27520.md
@@ -16,3 +16,5 @@ A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27520.yaml
diff --git a/2021/CVE-2021-27561.md b/2021/CVE-2021-27561.md
index f2f71a3db75..c9d713b1dc6 100644
--- a/2021/CVE-2021-27561.md
+++ b/2021/CVE-2021-27561.md
@@ -16,3 +16,5 @@ Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27561.yaml
diff --git a/2021/CVE-2021-27651.md b/2021/CVE-2021-27651.md
index a18e18d8dbc..32a4643574b 100644
--- a/2021/CVE-2021-27651.md
+++ b/2021/CVE-2021-27651.md
@@ -20,3 +20,5 @@ No PoCs from references.
 - https://github.com/orangmuda/CVE-2021-27651
 - https://github.com/samwcyo/CVE-2021-27651-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27651.yaml
diff --git a/2021/CVE-2021-27670.md b/2021/CVE-2021-27670.md
index 756c60527f8..7bfede3d971 100644
--- a/2021/CVE-2021-27670.md
+++ b/2021/CVE-2021-27670.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27670.yaml
diff --git a/2021/CVE-2021-27850.md b/2021/CVE-2021-27850.md
index 306157f9ab2..27fad9818ca 100644
--- a/2021/CVE-2021-27850.md
+++ b/2021/CVE-2021-27850.md
@@ -22,3 +22,5 @@ No PoCs from references.
 - https://github.com/kahla-sec/CVE-2021-27850_POC
 - https://github.com/novysodope/CVE-2021-27850
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27850.yaml
diff --git a/2021/CVE-2021-27856.md b/2021/CVE-2021-27856.md
index d45e5a7d591..4c58f3bc63f 100644
--- a/2021/CVE-2021-27856.md
+++ b/2021/CVE-2021-27856.md
@@ -18,3 +18,5 @@ FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27856.yaml
diff --git a/2021/CVE-2021-27858.md b/2021/CVE-2021-27858.md
index 6e7e8469801..559f847971a 100644
--- a/2021/CVE-2021-27858.md
+++ b/2021/CVE-2021-27858.md
@@ -18,3 +18,5 @@ A missing authorization vulnerability in the web management interface of FatPipe
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27858.yaml
diff --git a/2021/CVE-2021-27877.md b/2021/CVE-2021-27877.md
index 86e3d2578f6..6ee21b1c4bc 100644
--- a/2021/CVE-2021-27877.md
+++ b/2021/CVE-2021-27877.md
@@ -16,3 +16,5 @@ An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2021/CVE-2021-27877.yaml
diff --git a/2021/CVE-2021-27905.md b/2021/CVE-2021-27905.md
index f09e629e688..1968d3e1855 100644
--- a/2021/CVE-2021-27905.md
+++ b/2021/CVE-2021-27905.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/murataydemir/CVE-2021-27905
 - https://github.com/pdelteil/CVE-2021-27905.POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27905.yaml
diff --git a/2021/CVE-2021-27909.md b/2021/CVE-2021-27909.md
index eb71c9c6950..9c2e9e8314c 100644
--- a/2021/CVE-2021-27909.md
+++ b/2021/CVE-2021-27909.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27909.yaml
diff --git a/2021/CVE-2021-27931.md b/2021/CVE-2021-27931.md
index b8271b8c49c..e205636da50 100644
--- a/2021/CVE-2021-27931.md
+++ b/2021/CVE-2021-27931.md
@@ -15,3 +15,5 @@ LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated bli
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27931.yaml
diff --git a/2021/CVE-2021-27964.md b/2021/CVE-2021-27964.md
index 0b4629587e1..0931af153dc 100644
--- a/2021/CVE-2021-27964.md
+++ b/2021/CVE-2021-27964.md
@@ -16,3 +16,5 @@ SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27964.yaml
diff --git a/2021/CVE-2021-28149.md b/2021/CVE-2021-28149.md
index e1557857af4..f7477f9352e 100644
--- a/2021/CVE-2021-28149.md
+++ b/2021/CVE-2021-28149.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28149.yaml
diff --git a/2021/CVE-2021-28150.md b/2021/CVE-2021-28150.md
index 898089979c3..e7f476cc9b3 100644
--- a/2021/CVE-2021-28150.md
+++ b/2021/CVE-2021-28150.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28150.yaml
diff --git a/2021/CVE-2021-28151.md b/2021/CVE-2021-28151.md
index 2867a75eaf9..33b4d662b31 100644
--- a/2021/CVE-2021-28151.md
+++ b/2021/CVE-2021-28151.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28151.yaml
diff --git a/2021/CVE-2021-28164.md b/2021/CVE-2021-28164.md
index 8f557ebe224..6a6701bc38a 100644
--- a/2021/CVE-2021-28164.md
+++ b/2021/CVE-2021-28164.md
@@ -20,3 +20,5 @@ In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mo
 #### Github
 - https://github.com/jammy0903/-jettyCVE-2021-28164-
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28164.yaml
diff --git a/2021/CVE-2021-28169.md b/2021/CVE-2021-28169.md
index 35801713eef..58b9921d6bf 100644
--- a/2021/CVE-2021-28169.md
+++ b/2021/CVE-2021-28169.md
@@ -17,3 +17,5 @@ For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for r
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28169.yaml
diff --git a/2021/CVE-2021-28377.md b/2021/CVE-2021-28377.md
index da75c7dd8eb..d77c78444e8 100644
--- a/2021/CVE-2021-28377.md
+++ b/2021/CVE-2021-28377.md
@@ -15,3 +15,5 @@ ChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28377.yaml
diff --git a/2021/CVE-2021-28480.md b/2021/CVE-2021-28480.md
index e713ea454e6..9d58003e776 100644
--- a/2021/CVE-2021-28480.md
+++ b/2021/CVE-2021-28480.md
@@ -22,3 +22,5 @@ No PoCs from references.
 - https://github.com/Threonic/CVE-2021-28480
 - https://github.com/ZephrFish/CVE-2021-28480_HoneyPoC3
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28480.yaml
diff --git a/2021/CVE-2021-28481.md b/2021/CVE-2021-28481.md
index 8cafaf43852..b39a3b63672 100644
--- a/2021/CVE-2021-28481.md
+++ b/2021/CVE-2021-28481.md
@@ -21,3 +21,5 @@ No PoCs from references.
 #### Github
 - https://github.com/ZephrFish/CVE-2021-28480_HoneyPoC3
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28481.yaml
diff --git a/2021/CVE-2021-28799.md b/2021/CVE-2021-28799.md
index e74df73a3ee..2e94defceec 100644
--- a/2021/CVE-2021-28799.md
+++ b/2021/CVE-2021-28799.md
@@ -19,3 +19,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28799.yaml
diff --git a/2021/CVE-2021-28918.md b/2021/CVE-2021-28918.md
index 8b4d63b15ce..eb8a631d5ba 100644
--- a/2021/CVE-2021-28918.md
+++ b/2021/CVE-2021-28918.md
@@ -16,3 +16,5 @@ Improper input validation of octal strings in netmask npm package v1.0.6 and bel
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28918.yaml
diff --git a/2021/CVE-2021-28937.md b/2021/CVE-2021-28937.md
index 6d6da0b655f..b839f0daa6f 100644
--- a/2021/CVE-2021-28937.md
+++ b/2021/CVE-2021-28937.md
@@ -15,3 +15,5 @@ The /password.html page of the Web management interface of the Acexy Wireless-N
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28937.yaml
diff --git a/2021/CVE-2021-29006.md b/2021/CVE-2021-29006.md
index 3f9a4e7f97c..2912d1e3363 100644
--- a/2021/CVE-2021-29006.md
+++ b/2021/CVE-2021-29006.md
@@ -16,3 +16,5 @@ rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authentic
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29006.yaml
diff --git a/2021/CVE-2021-29156.md b/2021/CVE-2021-29156.md
index 09da1ad27dd..429659f860f 100644
--- a/2021/CVE-2021-29156.md
+++ b/2021/CVE-2021-29156.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/5amu/CVE-2021-29156
 - https://github.com/guidepointsecurity/CVE-2021-29156
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29156.yaml
diff --git a/2021/CVE-2021-29200.md b/2021/CVE-2021-29200.md
index 81340a53a94..0477f0bb1c6 100644
--- a/2021/CVE-2021-29200.md
+++ b/2021/CVE-2021-29200.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/freeide/CVE-2021-29200
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29200.yaml
diff --git a/2021/CVE-2021-29203.md b/2021/CVE-2021-29203.md
index 4f3da01f60d..c1a6cf5805a 100644
--- a/2021/CVE-2021-29203.md
+++ b/2021/CVE-2021-29203.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29203.yaml
diff --git a/2021/CVE-2021-29441.md b/2021/CVE-2021-29441.md
index 1d3c48245b2..530624575ee 100644
--- a/2021/CVE-2021-29441.md
+++ b/2021/CVE-2021-29441.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/bysinks/CVE-2021-29441
 - https://github.com/hh-hunter/nacos-cve-2021-29441
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29441.yaml
diff --git a/2021/CVE-2021-29442.md b/2021/CVE-2021-29442.md
index 6b35a16317e..88da0a90373 100644
--- a/2021/CVE-2021-29442.md
+++ b/2021/CVE-2021-29442.md
@@ -15,3 +15,5 @@ Nacos is a platform designed for dynamic service discovery and configuration and
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29442.yaml
diff --git a/2021/CVE-2021-29484.md b/2021/CVE-2021-29484.md
index a2380ea6e49..27c90d34d4f 100644
--- a/2021/CVE-2021-29484.md
+++ b/2021/CVE-2021-29484.md
@@ -15,3 +15,5 @@ Ghost is a Node.js CMS. An unused endpoint added during the development of 4.0.0
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29484.yaml
diff --git a/2021/CVE-2021-29490.md b/2021/CVE-2021-29490.md
index 49385b7bae2..3694249de5f 100644
--- a/2021/CVE-2021-29490.md
+++ b/2021/CVE-2021-29490.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29490.yaml
diff --git a/2021/CVE-2021-29505.md b/2021/CVE-2021-29505.md
index cef69bed015..033535d6d17 100644
--- a/2021/CVE-2021-29505.md
+++ b/2021/CVE-2021-29505.md
@@ -20,3 +20,5 @@ XStream is software for serializing Java objects to XML and back again. A vulner
 - https://github.com/MyBlackManba/CVE-2021-29505
 - https://github.com/cuijiung/xstream-CVE-2021-29505
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29505.yaml
diff --git a/2021/CVE-2021-29622.md b/2021/CVE-2021-29622.md
index a1d6ab92a80..f7f1e611f80 100644
--- a/2021/CVE-2021-29622.md
+++ b/2021/CVE-2021-29622.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29622.yaml
diff --git a/2021/CVE-2021-29625.md b/2021/CVE-2021-29625.md
index e740675af74..9854a2e57d7 100644
--- a/2021/CVE-2021-29625.md
+++ b/2021/CVE-2021-29625.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29625.yaml
diff --git a/2021/CVE-2021-3002.md b/2021/CVE-2021-3002.md
index 2dd760cda3a..085b1750b64 100644
--- a/2021/CVE-2021-3002.md
+++ b/2021/CVE-2021-3002.md
@@ -16,3 +16,5 @@ Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3002.yaml
diff --git a/2021/CVE-2021-30047.md b/2021/CVE-2021-30047.md
index 6a5d5e779c6..9ff9dc716ae 100644
--- a/2021/CVE-2021-30047.md
+++ b/2021/CVE-2021-30047.md
@@ -15,3 +15,5 @@ VSFTPD 3.0.3 allows attackers to cause a denial of service due to limited number
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2021/CVE-2021-30047.yaml
diff --git a/2021/CVE-2021-30049.md b/2021/CVE-2021-30049.md
index f66448994e3..f476e9ee7b7 100644
--- a/2021/CVE-2021-30049.md
+++ b/2021/CVE-2021-30049.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30049.yaml
diff --git a/2021/CVE-2021-3007.md b/2021/CVE-2021-3007.md
index bf942634f52..531f65be48f 100644
--- a/2021/CVE-2021-3007.md
+++ b/2021/CVE-2021-3007.md
@@ -15,3 +15,5 @@ Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a dese
 #### Github
 - https://github.com/Vulnmachines/ZF3_CVE-2021-3007
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3007.yaml
diff --git a/2021/CVE-2021-30116.md b/2021/CVE-2021-30116.md
index 62516d0b048..f20636290e0 100644
--- a/2021/CVE-2021-30116.md
+++ b/2021/CVE-2021-30116.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30116.yaml
diff --git a/2021/CVE-2021-30128.md b/2021/CVE-2021-30128.md
index 8fdd73e652e..37501070f44 100644
--- a/2021/CVE-2021-30128.md
+++ b/2021/CVE-2021-30128.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/LioTree/CVE-2021-30128-EXP
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30128.yaml
diff --git a/2021/CVE-2021-30134.md b/2021/CVE-2021-30134.md
index 25c3a73f8a7..c9ed3a64340 100644
--- a/2021/CVE-2021-30134.md
+++ b/2021/CVE-2021-30134.md
@@ -15,3 +15,5 @@ php-mod/curl (a wrapper of the PHP cURL extension) before 2.3.2 allows XSS via t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30134.yaml
diff --git a/2021/CVE-2021-30151.md b/2021/CVE-2021-30151.md
index cb9d6b8b403..74058b3d7b7 100644
--- a/2021/CVE-2021-30151.md
+++ b/2021/CVE-2021-30151.md
@@ -15,3 +15,5 @@ Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30151.yaml
diff --git a/2021/CVE-2021-3017.md b/2021/CVE-2021-3017.md
index 78cf96e6a1a..444e7e4f032 100644
--- a/2021/CVE-2021-3017.md
+++ b/2021/CVE-2021-3017.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3017.yaml
diff --git a/2021/CVE-2021-30175.md b/2021/CVE-2021-30175.md
index aefc23e84fd..1a92c982d0c 100644
--- a/2021/CVE-2021-30175.md
+++ b/2021/CVE-2021-30175.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30175.yaml
diff --git a/2021/CVE-2021-3018.md b/2021/CVE-2021-3018.md
index 55918262643..1f4c29c774f 100644
--- a/2021/CVE-2021-3018.md
+++ b/2021/CVE-2021-3018.md
@@ -17,3 +17,5 @@ ipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthentica
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3018.yaml
diff --git a/2021/CVE-2021-3019.md b/2021/CVE-2021-3019.md
index 81761776c27..445991b85b9 100644
--- a/2021/CVE-2021-3019.md
+++ b/2021/CVE-2021-3019.md
@@ -21,3 +21,5 @@ No PoCs from references.
 - https://github.com/murataydemir/CVE-2021-3019
 - https://github.com/qiezi-maozi/CVE-2021-3019-Lanproxy
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3019.yaml
diff --git a/2021/CVE-2021-30203.md b/2021/CVE-2021-30203.md
index b8fecaceb21..c2d207a0fee 100644
--- a/2021/CVE-2021-30203.md
+++ b/2021/CVE-2021-30203.md
@@ -15,3 +15,5 @@ A reflected cross-site scripting (XSS) vulnerability in the zero parameter of dz
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30203.yaml
diff --git a/2021/CVE-2021-30213.md b/2021/CVE-2021-30213.md
index b5665dfb578..0d18ea6a1c6 100644
--- a/2021/CVE-2021-30213.md
+++ b/2021/CVE-2021-30213.md
@@ -15,3 +15,5 @@ Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scriptin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30213.yaml
diff --git a/2021/CVE-2021-30461.md b/2021/CVE-2021-30461.md
index 809b2a08ee8..0b04bd2c290 100644
--- a/2021/CVE-2021-30461.md
+++ b/2021/CVE-2021-30461.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/daedalus/CVE-2021-30461
 - https://github.com/puckiestyle/CVE-2021-30461
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30461.yaml
diff --git a/2021/CVE-2021-30497.md b/2021/CVE-2021-30497.md
index 0f8314187ca..961d87a21b2 100644
--- a/2021/CVE-2021-30497.md
+++ b/2021/CVE-2021-30497.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30497.yaml
diff --git a/2021/CVE-2021-3110.md b/2021/CVE-2021-3110.md
index b7e256c07b7..98443c64728 100644
--- a/2021/CVE-2021-3110.md
+++ b/2021/CVE-2021-3110.md
@@ -17,3 +17,5 @@ The store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection v
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3110.yaml
diff --git a/2021/CVE-2021-31195.md b/2021/CVE-2021-31195.md
index 71c90c70cab..b0a85f3cfd2 100644
--- a/2021/CVE-2021-31195.md
+++ b/2021/CVE-2021-31195.md
@@ -21,3 +21,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31195.yaml
diff --git a/2021/CVE-2021-3122.md b/2021/CVE-2021-3122.md
index 5ea40022951..c1038202add 100644
--- a/2021/CVE-2021-3122.md
+++ b/2021/CVE-2021-3122.md
@@ -17,3 +17,5 @@ CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the s
 - https://github.com/acquiredsecurity/CVE-2021-3122-Details
 - https://github.com/roughb8722/CVE-2021-3122-Details
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2021/CVE-2021-3122.yaml
diff --git a/2021/CVE-2021-31249.md b/2021/CVE-2021-31249.md
index b297dbcabbe..e409423033c 100644
--- a/2021/CVE-2021-31249.md
+++ b/2021/CVE-2021-31249.md
@@ -15,3 +15,5 @@ A CRLF injection vulnerability was found on BF-430, BF-431, and BF-450M TCP/IP C
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31249.yaml
diff --git a/2021/CVE-2021-31250.md b/2021/CVE-2021-31250.md
index 916d8943811..3d4d16c48a0 100644
--- a/2021/CVE-2021-31250.md
+++ b/2021/CVE-2021-31250.md
@@ -15,3 +15,5 @@ Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-45
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31250.yaml
diff --git a/2021/CVE-2021-3129.md b/2021/CVE-2021-3129.md
index fa621278b7f..ead6ea1b228 100644
--- a/2021/CVE-2021-3129.md
+++ b/2021/CVE-2021-3129.md
@@ -48,3 +48,5 @@ Ignition before 2.5.2, as used in Laravel and other products, allows unauthentic
 - https://github.com/wmasday/CVE-2021-3129
 - https://github.com/zhzyker/CVE-2021-3129
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3129.yaml
diff --git a/2021/CVE-2021-31316.md b/2021/CVE-2021-31316.md
index 3233130db25..ec54899ac1d 100644
--- a/2021/CVE-2021-31316.md
+++ b/2021/CVE-2021-31316.md
@@ -15,3 +15,5 @@ The unprivileged user portal part of CentOS Web Panel is affected by a SQL Injec
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31316.yaml
diff --git a/2021/CVE-2021-31324.md b/2021/CVE-2021-31324.md
index f9670db2914..443453dbc70 100644
--- a/2021/CVE-2021-31324.md
+++ b/2021/CVE-2021-31324.md
@@ -15,3 +15,5 @@ The unprivileged user portal part of CentOS Web Panel is affected by a Command I
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31324.yaml
diff --git a/2021/CVE-2021-3152.md b/2021/CVE-2021-3152.md
index 9d358abd796..0db9b083dfd 100644
--- a/2021/CVE-2021-3152.md
+++ b/2021/CVE-2021-3152.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3152.yaml
diff --git a/2021/CVE-2021-31537.md b/2021/CVE-2021-31537.md
index ef9fd446e7b..94813450ede 100644
--- a/2021/CVE-2021-31537.md
+++ b/2021/CVE-2021-31537.md
@@ -15,3 +15,5 @@ SIS SIS-REWE Go before 7.7 SP17 allows XSS: rewe/prod/web/index.php (affected pa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31537.yaml
diff --git a/2021/CVE-2021-3156.md b/2021/CVE-2021-3156.md
index 9a25e9b79c7..fc92e96a59b 100644
--- a/2021/CVE-2021-3156.md
+++ b/2021/CVE-2021-3156.md
@@ -122,3 +122,5 @@ Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based
 - https://github.com/yaunsky/cve-2021-3156
 - https://github.com/ymrsmns/CVE-2021-3156
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2021/CVE-2021-3156.yaml
diff --git a/2021/CVE-2021-31581.md b/2021/CVE-2021-31581.md
index 75c4571f215..7e11c0053a5 100644
--- a/2021/CVE-2021-31581.md
+++ b/2021/CVE-2021-31581.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31581.yaml
diff --git a/2021/CVE-2021-31589.md b/2021/CVE-2021-31589.md
index b956d5fe997..0f85c042707 100644
--- a/2021/CVE-2021-31589.md
+++ b/2021/CVE-2021-31589.md
@@ -16,3 +16,5 @@ A cross-site scripting (XSS) vulnerability has been reported and confirmed for B
 #### Github
 - https://github.com/karthi-the-hacker/CVE-2021-31589
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31589.yaml
diff --git a/2021/CVE-2021-31602.md b/2021/CVE-2021-31602.md
index 3ab66517e97..41ee3cf9705 100644
--- a/2021/CVE-2021-31602.md
+++ b/2021/CVE-2021-31602.md
@@ -15,3 +15,5 @@ An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Busin
 #### Github
 - https://github.com/0cool-design/PWNentaho
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31602.yaml
diff --git a/2021/CVE-2021-31682.md b/2021/CVE-2021-31682.md
index 7322126f68a..ca3055c8918 100644
--- a/2021/CVE-2021-31682.md
+++ b/2021/CVE-2021-31682.md
@@ -15,3 +15,5 @@ The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application con
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31682.yaml
diff --git a/2021/CVE-2021-31755.md b/2021/CVE-2021-31755.md
index c15f7524a23..de0ce05614c 100644
--- a/2021/CVE-2021-31755.md
+++ b/2021/CVE-2021-31755.md
@@ -16,3 +16,5 @@ An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31755.yaml
diff --git a/2021/CVE-2021-31805.md b/2021/CVE-2021-31805.md
index 077f0cd2a76..bc994699c44 100644
--- a/2021/CVE-2021-31805.md
+++ b/2021/CVE-2021-31805.md
@@ -24,3 +24,5 @@ The fix issued for CVE-2020-17530 was incomplete. So from Apache Struts 2.0.0 to
 - https://github.com/nth347/CVE-2021-31805
 - https://github.com/z92g/CVE-2021-31805
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31805.yaml
diff --git a/2021/CVE-2021-31856.md b/2021/CVE-2021-31856.md
index 9f36654a738..a017cc29676 100644
--- a/2021/CVE-2021-31856.md
+++ b/2021/CVE-2021-31856.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/ssst0n3/CVE-2021-31856
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31856.yaml
diff --git a/2021/CVE-2021-31862.md b/2021/CVE-2021-31862.md
index 6cecdcd398f..37e0681b959 100644
--- a/2021/CVE-2021-31862.md
+++ b/2021/CVE-2021-31862.md
@@ -15,3 +15,5 @@ SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any auth
 #### Github
 - https://github.com/RobertDra/CVE-2021-31862
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31862.yaml
diff --git a/2021/CVE-2021-32030.md b/2021/CVE-2021-32030.md
index 9257398bf00..894f4615fee 100644
--- a/2021/CVE-2021-32030.md
+++ b/2021/CVE-2021-32030.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32030.yaml
diff --git a/2021/CVE-2021-32172.md b/2021/CVE-2021-32172.md
index fd5d673b87f..f887ab494f9 100644
--- a/2021/CVE-2021-32172.md
+++ b/2021/CVE-2021-32172.md
@@ -16,3 +16,5 @@ Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32172.yaml
diff --git a/2021/CVE-2021-3223.md b/2021/CVE-2021-3223.md
index 162086152b4..87573b6a5fe 100644
--- a/2021/CVE-2021-3223.md
+++ b/2021/CVE-2021-3223.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3223.yaml
diff --git a/2021/CVE-2021-32305.md b/2021/CVE-2021-32305.md
index 81acbab0bff..0de2a89c638 100644
--- a/2021/CVE-2021-32305.md
+++ b/2021/CVE-2021-32305.md
@@ -15,3 +15,5 @@ WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via sh
 #### Github
 - https://github.com/FredBrave/CVE-2021-32305-websvn-2.6.0
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32305.yaml
diff --git a/2021/CVE-2021-3239.md b/2021/CVE-2021-3239.md
index ea5fb21081d..72639624c75 100644
--- a/2021/CVE-2021-3239.md
+++ b/2021/CVE-2021-3239.md
@@ -17,3 +17,5 @@ E-Learning System 1.0 suffers from an unauthenticated SQL injection vulnerabilit
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3239.yaml
diff --git a/2021/CVE-2021-32478.md b/2021/CVE-2021-32478.md
index 454c8484df2..1c740bb2a37 100644
--- a/2021/CVE-2021-32478.md
+++ b/2021/CVE-2021-32478.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32478.yaml
diff --git a/2021/CVE-2021-32618.md b/2021/CVE-2021-32618.md
index 9bfd3278f0b..90be1816660 100644
--- a/2021/CVE-2021-32618.md
+++ b/2021/CVE-2021-32618.md
@@ -15,3 +15,5 @@ The Python "Flask-Security-Too" package is used for adding security features to
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32618.yaml
diff --git a/2021/CVE-2021-32648.md b/2021/CVE-2021-32648.md
index 7a0c0561a42..26b6bda58e8 100644
--- a/2021/CVE-2021-32648.md
+++ b/2021/CVE-2021-32648.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/Immersive-Labs-Sec/CVE-2021-32648
 - https://github.com/daftspunk/CVE-2021-32648
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32648.yaml
diff --git a/2021/CVE-2021-32682.md b/2021/CVE-2021-32682.md
index b9eb448651b..1e2fbd2167c 100644
--- a/2021/CVE-2021-32682.md
+++ b/2021/CVE-2021-32682.md
@@ -17,3 +17,5 @@ elFinder is an open-source file manager for web, written in JavaScript using jQu
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32682.yaml
diff --git a/2021/CVE-2021-32789.md b/2021/CVE-2021-32789.md
index 7ae1dec8712..4ba13a51667 100644
--- a/2021/CVE-2021-32789.md
+++ b/2021/CVE-2021-32789.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/DonVorrin/CVE-2021-32789
 - https://github.com/and0x00/CVE-2021-32789
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32789.yaml
diff --git a/2021/CVE-2021-32819.md b/2021/CVE-2021-32819.md
index df9a95375cd..0f3237aea0c 100644
--- a/2021/CVE-2021-32819.md
+++ b/2021/CVE-2021-32819.md
@@ -15,3 +15,5 @@ Squirrelly is a template engine implemented in JavaScript that works out of the
 #### Github
 - https://github.com/Abady0x1/CVE-2021-32819
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32819.yaml
diff --git a/2021/CVE-2021-32820.md b/2021/CVE-2021-32820.md
index 9799fd12951..e71e796e11a 100644
--- a/2021/CVE-2021-32820.md
+++ b/2021/CVE-2021-32820.md
@@ -15,3 +15,5 @@ Express-handlebars is a Handlebars view engine for Express. Express-handlebars m
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32820.yaml
diff --git a/2021/CVE-2021-32853.md b/2021/CVE-2021-32853.md
index 39a9d3534ba..9173e917f1e 100644
--- a/2021/CVE-2021-32853.md
+++ b/2021/CVE-2021-32853.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32853.yaml
diff --git a/2021/CVE-2021-3287.md b/2021/CVE-2021-3287.md
index 7624699ba2f..37c809a02cc 100644
--- a/2021/CVE-2021-3287.md
+++ b/2021/CVE-2021-3287.md
@@ -15,3 +15,5 @@ Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code E
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3287.yaml
diff --git a/2021/CVE-2021-3293.md b/2021/CVE-2021-3293.md
index a616b6e882e..b81aecc8a8e 100644
--- a/2021/CVE-2021-3293.md
+++ b/2021/CVE-2021-3293.md
@@ -15,3 +15,5 @@ emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3293.yaml
diff --git a/2021/CVE-2021-3297.md b/2021/CVE-2021-3297.md
index fb8fdd98fb3..57b2cc3de42 100644
--- a/2021/CVE-2021-3297.md
+++ b/2021/CVE-2021-3297.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3297.yaml
diff --git a/2021/CVE-2021-33044.md b/2021/CVE-2021-33044.md
index b2edd9d3787..84c4e63e245 100644
--- a/2021/CVE-2021-33044.md
+++ b/2021/CVE-2021-33044.md
@@ -30,3 +30,5 @@ The identity authentication bypass vulnerability found in some Dahua products du
 - https://github.com/naycha/TVT-config
 - https://github.com/readloud/PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33044.yaml
diff --git a/2021/CVE-2021-33045.md b/2021/CVE-2021-33045.md
index 5161d2a0b51..200f71f4175 100644
--- a/2021/CVE-2021-33045.md
+++ b/2021/CVE-2021-33045.md
@@ -26,3 +26,5 @@ The identity authentication bypass vulnerability found in some Dahua products du
 - https://github.com/naycha/TVT-config
 - https://github.com/readloud/PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33045.yaml
diff --git a/2021/CVE-2021-33221.md b/2021/CVE-2021-33221.md
index 9a71154953d..4189a015bd7 100644
--- a/2021/CVE-2021-33221.md
+++ b/2021/CVE-2021-33221.md
@@ -16,3 +16,5 @@ An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33221.yaml
diff --git a/2021/CVE-2021-33357.md b/2021/CVE-2021-33357.md
index 70c7c1d38e9..53090cbc950 100644
--- a/2021/CVE-2021-33357.md
+++ b/2021/CVE-2021-33357.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33357.yaml
diff --git a/2021/CVE-2021-33544.md b/2021/CVE-2021-33544.md
index a5e361a80c1..161f2272ceb 100644
--- a/2021/CVE-2021-33544.md
+++ b/2021/CVE-2021-33544.md
@@ -33,3 +33,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33544.yaml
diff --git a/2021/CVE-2021-33558.md b/2021/CVE-2021-33558.md
index 5e4ee0227a2..520bfc0d542 100644
--- a/2021/CVE-2021-33558.md
+++ b/2021/CVE-2021-33558.md
@@ -16,3 +16,5 @@ Boa 0.94.13 allows remote attackers to obtain sensitive information via a miscon
 #### Github
 - https://github.com/anldori/CVE-2021-33558
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33558.yaml
diff --git a/2021/CVE-2021-33564.md b/2021/CVE-2021-33564.md
index 0628bc54942..fb5497b1571 100644
--- a/2021/CVE-2021-33564.md
+++ b/2021/CVE-2021-33564.md
@@ -16,3 +16,5 @@ An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby a
 #### Github
 - https://github.com/dorkerdevil/CVE-2021-33564
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33564.yaml
diff --git a/2021/CVE-2021-33690.md b/2021/CVE-2021-33690.md
index eb7503846f9..d76442b87fb 100644
--- a/2021/CVE-2021-33690.md
+++ b/2021/CVE-2021-33690.md
@@ -20,3 +20,5 @@ No PoCs from references.
 #### Github
 - https://github.com/redrays-io/CVE-2021-33690
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33690.yaml
diff --git a/2021/CVE-2021-3374.md b/2021/CVE-2021-3374.md
index 2fb9b6f1d9c..b54b80ce66c 100644
--- a/2021/CVE-2021-3374.md
+++ b/2021/CVE-2021-3374.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3374.yaml
diff --git a/2021/CVE-2021-33766.md b/2021/CVE-2021-33766.md
index c5bdd6f9ad4..193420e53ab 100644
--- a/2021/CVE-2021-33766.md
+++ b/2021/CVE-2021-33766.md
@@ -23,3 +23,5 @@ No PoCs from references.
 - https://github.com/bhdresh/CVE-2021-33766
 - https://github.com/demossl/CVE-2021-33766-ProxyToken
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33766.yaml
diff --git a/2021/CVE-2021-3377.md b/2021/CVE-2021-3377.md
index 83dfc533dc5..68d2dce546a 100644
--- a/2021/CVE-2021-3377.md
+++ b/2021/CVE-2021-3377.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3377.yaml
diff --git a/2021/CVE-2021-3378.md b/2021/CVE-2021-3378.md
index 806ea65f31c..9ab8fabaeb6 100644
--- a/2021/CVE-2021-3378.md
+++ b/2021/CVE-2021-3378.md
@@ -17,3 +17,5 @@ FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-T
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3378.yaml
diff --git a/2021/CVE-2021-33807.md b/2021/CVE-2021-33807.md
index 2f23edf8087..5cfef3e5b52 100644
--- a/2021/CVE-2021-33807.md
+++ b/2021/CVE-2021-33807.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33807.yaml
diff --git a/2021/CVE-2021-33829.md b/2021/CVE-2021-33829.md
index 2e4eee46392..76d97f897d4 100644
--- a/2021/CVE-2021-33829.md
+++ b/2021/CVE-2021-33829.md
@@ -15,3 +15,5 @@ A cross-site scripting (XSS) vulnerability in the HTML Data Processor in CKEdito
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33829.yaml
diff --git a/2021/CVE-2021-33851.md b/2021/CVE-2021-33851.md
index 9c20d583407..170a737a0d1 100644
--- a/2021/CVE-2021-33851.md
+++ b/2021/CVE-2021-33851.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33851.yaml
diff --git a/2021/CVE-2021-33904.md b/2021/CVE-2021-33904.md
index 67354b85091..ff2d3244c34 100644
--- a/2021/CVE-2021-33904.md
+++ b/2021/CVE-2021-33904.md
@@ -15,3 +15,5 @@ In Accela Civic Platform through 21.1, the security/hostSignon.do parameter serv
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33904.yaml
diff --git a/2021/CVE-2021-34187.md b/2021/CVE-2021-34187.md
index 4d363c3e51b..44636b5962c 100644
--- a/2021/CVE-2021-34187.md
+++ b/2021/CVE-2021-34187.md
@@ -15,3 +15,5 @@ main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34187.yaml
diff --git a/2021/CVE-2021-34370.md b/2021/CVE-2021-34370.md
index cc4f3097ea7..8e347c0a757 100644
--- a/2021/CVE-2021-34370.md
+++ b/2021/CVE-2021-34370.md
@@ -15,3 +15,5 @@ Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34370.yaml
diff --git a/2021/CVE-2021-34427.md b/2021/CVE-2021-34427.md
index 9dea5433423..1784766eb39 100644
--- a/2021/CVE-2021-34427.md
+++ b/2021/CVE-2021-34427.md
@@ -17,3 +17,5 @@ In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34427.yaml
diff --git a/2021/CVE-2021-34429.md b/2021/CVE-2021-34429.md
index b03510035bf..bdfdcfea39e 100644
--- a/2021/CVE-2021-34429.md
+++ b/2021/CVE-2021-34429.md
@@ -21,3 +21,5 @@ For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs ca
 #### Github
 - https://github.com/ColdFusionX/CVE-2021-34429
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34429.yaml
diff --git a/2021/CVE-2021-34473.md b/2021/CVE-2021-34473.md
index 497782e6908..8fe6bc65ee4 100644
--- a/2021/CVE-2021-34473.md
+++ b/2021/CVE-2021-34473.md
@@ -30,3 +30,5 @@ Microsoft Exchange Server Remote Code Execution Vulnerability
 - https://github.com/phamphuqui1998/CVE-2021-34473
 - https://github.com/swaptt/swapt-it
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34473.yaml
diff --git a/2021/CVE-2021-34621.md b/2021/CVE-2021-34621.md
index a4257f05cbe..3511f3d83b2 100644
--- a/2021/CVE-2021-34621.md
+++ b/2021/CVE-2021-34621.md
@@ -18,3 +18,5 @@ A vulnerability in the user registration component found in the ~/src/Classes/Re
 - https://github.com/RandomRobbieBF/CVE-2021-34621
 - https://github.com/navreet1425/CVE-2021-34621
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34621.yaml
diff --git a/2021/CVE-2021-34622.md b/2021/CVE-2021-34622.md
index 825bb6a686c..bf4a7134b24 100644
--- a/2021/CVE-2021-34622.md
+++ b/2021/CVE-2021-34622.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34622.yaml
diff --git a/2021/CVE-2021-34624.md b/2021/CVE-2021-34624.md
index 5cbc9c7db85..e74916220bb 100644
--- a/2021/CVE-2021-34624.md
+++ b/2021/CVE-2021-34624.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34624.yaml
diff --git a/2021/CVE-2021-34630.md b/2021/CVE-2021-34630.md
index 7b5f76a76e9..fa654379cdf 100644
--- a/2021/CVE-2021-34630.md
+++ b/2021/CVE-2021-34630.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34630.yaml
diff --git a/2021/CVE-2021-34640.md b/2021/CVE-2021-34640.md
index e74fc5e1291..a82bd36c95d 100644
--- a/2021/CVE-2021-34640.md
+++ b/2021/CVE-2021-34640.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34640.yaml
diff --git a/2021/CVE-2021-34643.md b/2021/CVE-2021-34643.md
index 4ab22189984..22a0e4ecb2a 100644
--- a/2021/CVE-2021-34643.md
+++ b/2021/CVE-2021-34643.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34643.yaml
diff --git a/2021/CVE-2021-34805.md b/2021/CVE-2021-34805.md
index 0461aa90a29..051f6ea4eb1 100644
--- a/2021/CVE-2021-34805.md
+++ b/2021/CVE-2021-34805.md
@@ -16,3 +16,5 @@ An issue was discovered in FAUST iServer before 9.0.019.019.7. For each URL requ
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34805.yaml
diff --git a/2021/CVE-2021-35042.md b/2021/CVE-2021-35042.md
index 1ffcace6efc..9025dbcce0d 100644
--- a/2021/CVE-2021-35042.md
+++ b/2021/CVE-2021-35042.md
@@ -22,3 +22,5 @@ No PoCs from references.
 - https://github.com/r4vi/CVE-2021-35042
 - https://github.com/zer0qs/CVE-2021-35042
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2021/CVE-2021-35042.yaml
diff --git a/2021/CVE-2021-35064.md b/2021/CVE-2021-35064.md
index 28915749448..cc13cb0c31c 100644
--- a/2021/CVE-2021-35064.md
+++ b/2021/CVE-2021-35064.md
@@ -15,3 +15,5 @@ KramerAV VIAWare, all tested versions, allow privilege escalation through miscon
 #### Github
 - https://github.com/Chocapikk/CVE-2021-35064
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35064.yaml
diff --git a/2021/CVE-2021-35211.md b/2021/CVE-2021-35211.md
index 885cf591be1..2e9117a879f 100644
--- a/2021/CVE-2021-35211.md
+++ b/2021/CVE-2021-35211.md
@@ -18,3 +18,5 @@ Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWin
 - https://github.com/BishopFox/CVE-2021-35211
 - https://github.com/NattiSamson/Serv-U-CVE-2021-35211
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2021/CVE-2021-35211.yaml
diff --git a/2021/CVE-2021-35250.md b/2021/CVE-2021-35250.md
index a11ad214a78..17a8bc0e580 100644
--- a/2021/CVE-2021-35250.md
+++ b/2021/CVE-2021-35250.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/rissor41/SolarWinds-CVE-2021-35250
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35250.yaml
diff --git a/2021/CVE-2021-35265.md b/2021/CVE-2021-35265.md
index 9d1c9fcb856..6d6eb4c94d3 100644
--- a/2021/CVE-2021-35265.md
+++ b/2021/CVE-2021-35265.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35265.yaml
diff --git a/2021/CVE-2021-35323.md b/2021/CVE-2021-35323.md
index 50eddad96ef..7edef9dedbc 100644
--- a/2021/CVE-2021-35323.md
+++ b/2021/CVE-2021-35323.md
@@ -16,3 +16,5 @@ Cross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the usernam
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35323.yaml
diff --git a/2021/CVE-2021-35336.md b/2021/CVE-2021-35336.md
index e421b7a9e74..10f19c71677 100644
--- a/2021/CVE-2021-35336.md
+++ b/2021/CVE-2021-35336.md
@@ -15,3 +15,5 @@ Tieline IP Audio Gateway 2.6.4.8 and below is affected by Incorrect Access Contr
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35336.yaml
diff --git a/2021/CVE-2021-35380.md b/2021/CVE-2021-35380.md
index ace71c752bf..f4d30bc51c5 100644
--- a/2021/CVE-2021-35380.md
+++ b/2021/CVE-2021-35380.md
@@ -15,3 +15,5 @@ A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (T
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35380.yaml
diff --git a/2021/CVE-2021-35394.md b/2021/CVE-2021-35394.md
index 261554a86d3..28d6ec98f9b 100644
--- a/2021/CVE-2021-35394.md
+++ b/2021/CVE-2021-35394.md
@@ -16,3 +16,5 @@ Realtek Jungle SDK version v2.x up to v3.4.14B provides a diagnostic tool called
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2021/CVE-2021-35394.yaml
diff --git a/2021/CVE-2021-35395.md b/2021/CVE-2021-35395.md
index 723c5bd7260..996f3eeb969 100644
--- a/2021/CVE-2021-35395.md
+++ b/2021/CVE-2021-35395.md
@@ -16,3 +16,5 @@ Realtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server expos
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35395.yaml
diff --git a/2021/CVE-2021-35464.md b/2021/CVE-2021-35464.md
index 3de5ab08858..2e2461ca6fd 100644
--- a/2021/CVE-2021-35464.md
+++ b/2021/CVE-2021-35464.md
@@ -18,3 +18,5 @@ ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the j
 - https://github.com/Y4er/openam-CVE-2021-35464
 - https://github.com/rood8008/CVE-2021-35464
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35464.yaml
diff --git a/2021/CVE-2021-35488.md b/2021/CVE-2021-35488.md
index ad2aaec5a52..f2e1c44f93d 100644
--- a/2021/CVE-2021-35488.md
+++ b/2021/CVE-2021-35488.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35488.yaml
diff --git a/2021/CVE-2021-35587.md b/2021/CVE-2021-35587.md
index dfd97a4cdbd..728820d9038 100644
--- a/2021/CVE-2021-35587.md
+++ b/2021/CVE-2021-35587.md
@@ -19,3 +19,5 @@ Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (
 - https://github.com/ZZ-SOCMAP/CVE-2021-35587
 - https://github.com/antx-code/CVE-2021-35587
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35587.yaml
diff --git a/2021/CVE-2021-3577.md b/2021/CVE-2021-3577.md
index 3426e010de0..04c2a235e85 100644
--- a/2021/CVE-2021-3577.md
+++ b/2021/CVE-2021-3577.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3577.yaml
diff --git a/2021/CVE-2021-36260.md b/2021/CVE-2021-36260.md
index 46d645fd74e..d9ad1fb3f30 100644
--- a/2021/CVE-2021-36260.md
+++ b/2021/CVE-2021-36260.md
@@ -32,3 +32,5 @@ A command injection vulnerability in the web server of some Hikvision product. D
 - https://github.com/s0duku/PocSelenium
 - https://github.com/tuntin9x/CheckHKRCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36260.yaml
diff --git a/2021/CVE-2021-36356.md b/2021/CVE-2021-36356.md
index f2dc696fbbd..d6ee96e16cd 100644
--- a/2021/CVE-2021-36356.md
+++ b/2021/CVE-2021-36356.md
@@ -15,3 +15,5 @@ KRAMER VIAware through August 2021 allows remote attackers to execute arbitrary
 #### Github
 - https://github.com/Chocapikk/CVE-2021-35064
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36356.yaml
diff --git a/2021/CVE-2021-36380.md b/2021/CVE-2021-36380.md
index a0a58fc355c..11b0a8aee6a 100644
--- a/2021/CVE-2021-36380.md
+++ b/2021/CVE-2021-36380.md
@@ -17,3 +17,5 @@ Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection v
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36380.yaml
diff --git a/2021/CVE-2021-36450.md b/2021/CVE-2021-36450.md
index f69e93ff2e7..161f9c143a4 100644
--- a/2021/CVE-2021-36450.md
+++ b/2021/CVE-2021-36450.md
@@ -17,3 +17,5 @@ Verint Workforce Optimization (WFO) 15.2.8.10048 allows XSS via the control/my_n
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36450.yaml
diff --git a/2021/CVE-2021-3654.md b/2021/CVE-2021-3654.md
index eda838be465..be06ccd6ec2 100644
--- a/2021/CVE-2021-3654.md
+++ b/2021/CVE-2021-3654.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3654.yaml
diff --git a/2021/CVE-2021-36580.md b/2021/CVE-2021-36580.md
index 89ea42319d4..91d264b0e03 100644
--- a/2021/CVE-2021-36580.md
+++ b/2021/CVE-2021-36580.md
@@ -16,3 +16,5 @@ Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Cas
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36580.yaml
diff --git a/2021/CVE-2021-36646.md b/2021/CVE-2021-36646.md
index 685cd3fb53e..e61f46edb96 100644
--- a/2021/CVE-2021-36646.md
+++ b/2021/CVE-2021-36646.md
@@ -15,3 +15,5 @@ A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote att
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36646.yaml
diff --git a/2021/CVE-2021-36748.md b/2021/CVE-2021-36748.md
index 8fc3c8e3bc9..72bc03729e7 100644
--- a/2021/CVE-2021-36748.md
+++ b/2021/CVE-2021-36748.md
@@ -16,3 +16,5 @@ A SQL Injection issue in the list controller of the Prestahome Blog (aka ph_simp
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36748.yaml
diff --git a/2021/CVE-2021-36749.md b/2021/CVE-2021-36749.md
index 4b3ced000d4..6d0466f4887 100644
--- a/2021/CVE-2021-36749.md
+++ b/2021/CVE-2021-36749.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/dnr6419/Druid_docker
 - https://github.com/zwlsix/apache_druid_CVE-2021-36749
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36749.yaml
diff --git a/2021/CVE-2021-36754.md b/2021/CVE-2021-36754.md
index 78579920abe..ef90cb55b75 100644
--- a/2021/CVE-2021-36754.md
+++ b/2021/CVE-2021-36754.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2021/CVE-2021-36754.yaml
diff --git a/2021/CVE-2021-36873.md b/2021/CVE-2021-36873.md
index a8b9fff432b..d40cbaff526 100644
--- a/2021/CVE-2021-36873.md
+++ b/2021/CVE-2021-36873.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36873.yaml
diff --git a/2021/CVE-2021-36888.md b/2021/CVE-2021-36888.md
index 3f4618e1698..b55c6b9123f 100644
--- a/2021/CVE-2021-36888.md
+++ b/2021/CVE-2021-36888.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36888.yaml
diff --git a/2021/CVE-2021-37216.md b/2021/CVE-2021-37216.md
index 4e0fd7f07c7..bc3a2f2014f 100644
--- a/2021/CVE-2021-37216.md
+++ b/2021/CVE-2021-37216.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37216.yaml
diff --git a/2021/CVE-2021-37291.md b/2021/CVE-2021-37291.md
index c8bd0a23bb5..89e4a70c59c 100644
--- a/2021/CVE-2021-37291.md
+++ b/2021/CVE-2021-37291.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37291.yaml
diff --git a/2021/CVE-2021-37292.md b/2021/CVE-2021-37292.md
index 2ae57784368..34f2311a685 100644
--- a/2021/CVE-2021-37292.md
+++ b/2021/CVE-2021-37292.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37292.yaml
diff --git a/2021/CVE-2021-37415.md b/2021/CVE-2021-37415.md
index ff1e799f3a9..4829a1b1dab 100644
--- a/2021/CVE-2021-37415.md
+++ b/2021/CVE-2021-37415.md
@@ -16,3 +16,5 @@ Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37415.yaml
diff --git a/2021/CVE-2021-37416.md b/2021/CVE-2021-37416.md
index f13547ec6e1..d9aa4313e30 100644
--- a/2021/CVE-2021-37416.md
+++ b/2021/CVE-2021-37416.md
@@ -15,3 +15,5 @@ Zoho ManageEngine ADSelfService Plus version 6103 and prior is vulnerable to ref
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37416.yaml
diff --git a/2021/CVE-2021-37538.md b/2021/CVE-2021-37538.md
index 786eef1e74e..3c893b710ae 100644
--- a/2021/CVE-2021-37538.md
+++ b/2021/CVE-2021-37538.md
@@ -15,3 +15,5 @@ Multiple SQL injection vulnerabilities in SmartDataSoft SmartBlog for PrestaShop
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37538.yaml
diff --git a/2021/CVE-2021-37573.md b/2021/CVE-2021-37573.md
index 9e1c7ccbe3a..3ccaeacd97f 100644
--- a/2021/CVE-2021-37573.md
+++ b/2021/CVE-2021-37573.md
@@ -17,3 +17,5 @@ A reflected cross-site scripting (XSS) vulnerability in the web server TTiny Jav
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37573.yaml
diff --git a/2021/CVE-2021-37580.md b/2021/CVE-2021-37580.md
index fdd3e61a061..c6b0d0281f2 100644
--- a/2021/CVE-2021-37580.md
+++ b/2021/CVE-2021-37580.md
@@ -21,3 +21,5 @@ No PoCs from references.
 - https://github.com/fengwenhua/CVE-2021-37580
 - https://github.com/rabbitsafe/CVE-2021-37580
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37580.yaml
diff --git a/2021/CVE-2021-37589.md b/2021/CVE-2021-37589.md
index 873fe4edf1c..e40d3750ced 100644
--- a/2021/CVE-2021-37589.md
+++ b/2021/CVE-2021-37589.md
@@ -16,3 +16,5 @@ Virtua Cobranca before 12R allows SQL Injection on the login page.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37589.yaml
diff --git a/2021/CVE-2021-37598.md b/2021/CVE-2021-37598.md
index 5773bdb7449..71256634a29 100644
--- a/2021/CVE-2021-37598.md
+++ b/2021/CVE-2021-37598.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37598.yaml
diff --git a/2021/CVE-2021-37704.md b/2021/CVE-2021-37704.md
index 0cb67c4a983..eaf316ba620 100644
--- a/2021/CVE-2021-37704.md
+++ b/2021/CVE-2021-37704.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37704.yaml
diff --git a/2021/CVE-2021-37833.md b/2021/CVE-2021-37833.md
index 63472932b33..45bedc6c4e1 100644
--- a/2021/CVE-2021-37833.md
+++ b/2021/CVE-2021-37833.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/dievus/CVE-2021-37833
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37833.yaml
diff --git a/2021/CVE-2021-38146.md b/2021/CVE-2021-38146.md
index ffeefb70bc4..00f32ff988c 100644
--- a/2021/CVE-2021-38146.md
+++ b/2021/CVE-2021-38146.md
@@ -15,3 +15,5 @@ The File Download API in Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) al
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38146.yaml
diff --git a/2021/CVE-2021-38147.md b/2021/CVE-2021-38147.md
index f603bdf7f48..0083f5f07c1 100644
--- a/2021/CVE-2021-38147.md
+++ b/2021/CVE-2021-38147.md
@@ -15,3 +15,5 @@ Wipro Holmes Orchestrator 20.4.1 (20.4.1_02_11_2020) allows remote attackers to
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38147.yaml
diff --git a/2021/CVE-2021-38156.md b/2021/CVE-2021-38156.md
index e62d6ac77e4..bed803007bd 100644
--- a/2021/CVE-2021-38156.md
+++ b/2021/CVE-2021-38156.md
@@ -15,3 +15,5 @@ In Nagios XI before 5.8.6, XSS exists in the dashboard page (/dashboards/#) when
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38156.yaml
diff --git a/2021/CVE-2021-3831.md b/2021/CVE-2021-3831.md
index c4961d5f486..ebbdf7d1abb 100644
--- a/2021/CVE-2021-3831.md
+++ b/2021/CVE-2021-3831.md
@@ -15,3 +15,5 @@ gnuboard5 is vulnerable to Improper Neutralization of Input During Web Page Gene
 #### Github
 - https://github.com/aratane/CVE-2021-3831
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3831.yaml
diff --git a/2021/CVE-2021-38314.md b/2021/CVE-2021-38314.md
index 1cec597d4d0..ec318af66c6 100644
--- a/2021/CVE-2021-38314.md
+++ b/2021/CVE-2021-38314.md
@@ -23,3 +23,5 @@ No PoCs from references.
 - https://github.com/shubhayu-64/CVE-2021-38314
 - https://github.com/twseptian/cve-2021-38314
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38314.yaml
diff --git a/2021/CVE-2021-38540.md b/2021/CVE-2021-38540.md
index 1302af778d0..3da1dba1ebb 100644
--- a/2021/CVE-2021-38540.md
+++ b/2021/CVE-2021-38540.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Captain-v-hook/PoC-for-CVE-2021-38540-
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38540.yaml
diff --git a/2021/CVE-2021-38647.md b/2021/CVE-2021-38647.md
index 887dbc79f1a..31215c0ed0b 100644
--- a/2021/CVE-2021-38647.md
+++ b/2021/CVE-2021-38647.md
@@ -39,3 +39,5 @@ Open Management Infrastructure Remote Code Execution Vulnerability
 - https://github.com/horizon3ai/CVE-2021-38647
 - https://github.com/midoxnet/CVE-2021-38647
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38647.yaml
diff --git a/2021/CVE-2021-38702.md b/2021/CVE-2021-38702.md
index 5a32b48b2eb..3b5833ede23 100644
--- a/2021/CVE-2021-38702.md
+++ b/2021/CVE-2021-38702.md
@@ -17,3 +17,5 @@ Cyberoam NetGenie C0101B1-20141120-NG11VO devices through 2021-08-14 allow tweb/
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38702.yaml
diff --git a/2021/CVE-2021-38704.md b/2021/CVE-2021-38704.md
index 655def5b0f6..4adf8d3683c 100644
--- a/2021/CVE-2021-38704.md
+++ b/2021/CVE-2021-38704.md
@@ -15,3 +15,5 @@ Multiple reflected cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38704.yaml
diff --git a/2021/CVE-2021-38751.md b/2021/CVE-2021-38751.md
index ebb3d060e29..7224e7047c0 100644
--- a/2021/CVE-2021-38751.md
+++ b/2021/CVE-2021-38751.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38751.yaml
diff --git a/2021/CVE-2021-39141.md b/2021/CVE-2021-39141.md
index 5e2b9e3cdb4..9cce0de969d 100644
--- a/2021/CVE-2021-39141.md
+++ b/2021/CVE-2021-39141.md
@@ -18,3 +18,5 @@ XStream is a simple library to serialize objects to XML and back again. In affec
 #### Github
 - https://github.com/zwjjustdoit/Xstream-1.4.17
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39141.yaml
diff --git a/2021/CVE-2021-39144.md b/2021/CVE-2021-39144.md
index b9af44759b0..24695178ce5 100644
--- a/2021/CVE-2021-39144.md
+++ b/2021/CVE-2021-39144.md
@@ -20,3 +20,5 @@ XStream is a simple library to serialize objects to XML and back again. In affec
 #### Github
 - https://github.com/zwjjustdoit/Xstream-1.4.17
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39144.yaml
diff --git a/2021/CVE-2021-39146.md b/2021/CVE-2021-39146.md
index 11693c55b80..c482550efa0 100644
--- a/2021/CVE-2021-39146.md
+++ b/2021/CVE-2021-39146.md
@@ -18,3 +18,5 @@ XStream is a simple library to serialize objects to XML and back again. In affec
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39146.yaml
diff --git a/2021/CVE-2021-39152.md b/2021/CVE-2021-39152.md
index f7bec5d4f08..a39d4fc30ab 100644
--- a/2021/CVE-2021-39152.md
+++ b/2021/CVE-2021-39152.md
@@ -18,3 +18,5 @@ XStream is a simple library to serialize objects to XML and back again. In affec
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39152.yaml
diff --git a/2021/CVE-2021-39165.md b/2021/CVE-2021-39165.md
index 74a36671554..5e6cacbc724 100644
--- a/2021/CVE-2021-39165.md
+++ b/2021/CVE-2021-39165.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/W0rty/CVE-2021-39165
 - https://github.com/manbolq/CVE-2021-39165
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39165.yaml
diff --git a/2021/CVE-2021-39211.md b/2021/CVE-2021-39211.md
index 2803d848955..ed69b74189c 100644
--- a/2021/CVE-2021-39211.md
+++ b/2021/CVE-2021-39211.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39211.yaml
diff --git a/2021/CVE-2021-39226.md b/2021/CVE-2021-39226.md
index e591e92660c..eb3860bcaa0 100644
--- a/2021/CVE-2021-39226.md
+++ b/2021/CVE-2021-39226.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39226.yaml
diff --git a/2021/CVE-2021-39312.md b/2021/CVE-2021-39312.md
index 082a080d233..d424fcc9cf3 100644
--- a/2021/CVE-2021-39312.md
+++ b/2021/CVE-2021-39312.md
@@ -15,3 +15,5 @@ The True Ranker plugin <= 2.2.2 for WordPress allows arbitrary files, including
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39312.yaml
diff --git a/2021/CVE-2021-39316.md b/2021/CVE-2021-39316.md
index 6318b0971de..2c1d07b8fb5 100644
--- a/2021/CVE-2021-39316.md
+++ b/2021/CVE-2021-39316.md
@@ -16,3 +16,5 @@ The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including se
 #### Github
 - https://github.com/UrielYochpaz/Exploit-WordPress-Plugin-DZS-Zoomsounds
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39316.yaml
diff --git a/2021/CVE-2021-39320.md b/2021/CVE-2021-39320.md
index 6c175aaa4fd..b3d3ca1955f 100644
--- a/2021/CVE-2021-39320.md
+++ b/2021/CVE-2021-39320.md
@@ -15,3 +15,5 @@ The underConstruction plugin <= 1.18 for WordPress echoes out the raw value of `
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39320.yaml
diff --git a/2021/CVE-2021-39322.md b/2021/CVE-2021-39322.md
index cd8ba388076..6dd6fd942e2 100644
--- a/2021/CVE-2021-39322.md
+++ b/2021/CVE-2021-39322.md
@@ -15,3 +15,5 @@ The Easy Social Icons plugin <= 3.0.8 for WordPress echoes out the raw value of
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39322.yaml
diff --git a/2021/CVE-2021-39327.md b/2021/CVE-2021-39327.md
index eb953a31b89..03db2329db3 100644
--- a/2021/CVE-2021-39327.md
+++ b/2021/CVE-2021-39327.md
@@ -16,3 +16,5 @@ The BulletProof Security WordPress plugin is vulnerable to sensitive information
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39327.yaml
diff --git a/2021/CVE-2021-39341.md b/2021/CVE-2021-39341.md
index 4a6ccd3d93b..ceddd5d7294 100644
--- a/2021/CVE-2021-39341.md
+++ b/2021/CVE-2021-39341.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39341.yaml
diff --git a/2021/CVE-2021-39350.md b/2021/CVE-2021-39350.md
index 243e9c09a84..38c6176ca3a 100644
--- a/2021/CVE-2021-39350.md
+++ b/2021/CVE-2021-39350.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39350.yaml
diff --git a/2021/CVE-2021-39433.md b/2021/CVE-2021-39433.md
index 934eec762b8..7c5a5349df3 100644
--- a/2021/CVE-2021-39433.md
+++ b/2021/CVE-2021-39433.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/PinkDraconian/CVE-2021-39433
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39433.yaml
diff --git a/2021/CVE-2021-39501.md b/2021/CVE-2021-39501.md
index 5822bc8ee5f..53da6337d71 100644
--- a/2021/CVE-2021-39501.md
+++ b/2021/CVE-2021-39501.md
@@ -15,3 +15,5 @@ EyouCMS 1.5.4 is vulnerable to Open Redirect. An attacker can redirect a user to
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39501.yaml
diff --git a/2021/CVE-2021-40149.md b/2021/CVE-2021-40149.md
index 8ef9d535add..6a778aee3a4 100644
--- a/2021/CVE-2021-40149.md
+++ b/2021/CVE-2021-40149.md
@@ -15,3 +15,5 @@ The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40149.yaml
diff --git a/2021/CVE-2021-40150.md b/2021/CVE-2021-40150.md
index 9b13844740d..ef0edd6edfa 100644
--- a/2021/CVE-2021-40150.md
+++ b/2021/CVE-2021-40150.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40150.yaml
diff --git a/2021/CVE-2021-40272.md b/2021/CVE-2021-40272.md
index 9a964ac62dd..d6482c8c938 100644
--- a/2021/CVE-2021-40272.md
+++ b/2021/CVE-2021-40272.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40272.yaml
diff --git a/2021/CVE-2021-40323.md b/2021/CVE-2021-40323.md
index d638f0147a4..7a7de0c8453 100644
--- a/2021/CVE-2021-40323.md
+++ b/2021/CVE-2021-40323.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40323.yaml
diff --git a/2021/CVE-2021-40438.md b/2021/CVE-2021-40438.md
index 13063e6b3f9..634c8814b5c 100644
--- a/2021/CVE-2021-40438.md
+++ b/2021/CVE-2021-40438.md
@@ -26,3 +26,5 @@ A crafted request uri-path can cause mod_proxy to forward the request to an orig
 - https://github.com/vsh00t/BB-PoC
 - https://github.com/xiaojiangxl/CVE-2021-40438
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40438.yaml
diff --git a/2021/CVE-2021-40539.md b/2021/CVE-2021-40539.md
index ec33713706b..375b054878e 100644
--- a/2021/CVE-2021-40539.md
+++ b/2021/CVE-2021-40539.md
@@ -22,3 +22,5 @@ Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to RES
 - https://github.com/synacktiv/CVE-2021-40539
 - https://github.com/yingdushenyou/infoceshi
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40539.yaml
diff --git a/2021/CVE-2021-40542.md b/2021/CVE-2021-40542.md
index ea2b6b6e395..3435c424e7b 100644
--- a/2021/CVE-2021-40542.md
+++ b/2021/CVE-2021-40542.md
@@ -15,3 +15,5 @@ Opensis-Classic Version 8.0 is affected by cross-site scripting (XSS). An unauth
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40542.yaml
diff --git a/2021/CVE-2021-40651.md b/2021/CVE-2021-40651.md
index 8acd742339e..a45201af3c3 100644
--- a/2021/CVE-2021-40651.md
+++ b/2021/CVE-2021-40651.md
@@ -17,3 +17,5 @@ OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerabilit
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40651.yaml
diff --git a/2021/CVE-2021-40655.md b/2021/CVE-2021-40655.md
index e5b8a1847ed..f4eb9c22b10 100644
--- a/2021/CVE-2021-40655.md
+++ b/2021/CVE-2021-40655.md
@@ -18,3 +18,5 @@ An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40655.yaml
diff --git a/2021/CVE-2021-40661.md b/2021/CVE-2021-40661.md
index e32f7ee884d..dd0b420737b 100644
--- a/2021/CVE-2021-40661.md
+++ b/2021/CVE-2021-40661.md
@@ -15,3 +15,5 @@ A remote, unauthenticated, directory traversal vulnerability was identified with
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40661.yaml
diff --git a/2021/CVE-2021-4073.md b/2021/CVE-2021-4073.md
index aae317b37bf..69f04458802 100644
--- a/2021/CVE-2021-4073.md
+++ b/2021/CVE-2021-4073.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4073.yaml
diff --git a/2021/CVE-2021-40822.md b/2021/CVE-2021-40822.md
index 5202c8891bc..53eb62d76a8 100644
--- a/2021/CVE-2021-40822.md
+++ b/2021/CVE-2021-40822.md
@@ -16,3 +16,5 @@ GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option fo
 #### Github
 - https://github.com/phor3nsic/CVE-2021-40822
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40822.yaml
diff --git a/2021/CVE-2021-40856.md b/2021/CVE-2021-40856.md
index c1cfc69a26b..1cb91e57056 100644
--- a/2021/CVE-2021-40856.md
+++ b/2021/CVE-2021-40856.md
@@ -17,3 +17,5 @@ Auerswald COMfortel 1400 IP and 2600 IP before 2.8G devices allow Authentication
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40856.yaml
diff --git a/2021/CVE-2021-40859.md b/2021/CVE-2021-40859.md
index 0d8220569df..2c4f9d3c089 100644
--- a/2021/CVE-2021-40859.md
+++ b/2021/CVE-2021-40859.md
@@ -17,3 +17,5 @@ Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that
 - https://github.com/419066074/CVE-2021-40859
 - https://github.com/pussycat0x/CVE-2021-40859
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40859.yaml
diff --git a/2021/CVE-2021-40868.md b/2021/CVE-2021-40868.md
index 32162f51921..97519d76af4 100644
--- a/2021/CVE-2021-40868.md
+++ b/2021/CVE-2021-40868.md
@@ -16,3 +16,5 @@ In Cloudron 6.2, the returnTo parameter on the login page is vulnerable to Refle
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40868.yaml
diff --git a/2021/CVE-2021-40870.md b/2021/CVE-2021-40870.md
index 066878fb7d3..87eb7246f8b 100644
--- a/2021/CVE-2021-40870.md
+++ b/2021/CVE-2021-40870.md
@@ -23,3 +23,5 @@ An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestr
 - https://github.com/byteofjoshua/CVE-2021-40870
 - https://github.com/orangmuda/CVE-2021-40870
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40870.yaml
diff --git a/2021/CVE-2021-40875.md b/2021/CVE-2021-40875.md
index bea1e64c857..9a3fc01febf 100644
--- a/2021/CVE-2021-40875.md
+++ b/2021/CVE-2021-40875.md
@@ -16,3 +16,5 @@ Improper Access Control in Gurock TestRail versions < 7.2.0.3014 resulted in sen
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40875.yaml
diff --git a/2021/CVE-2021-40960.md b/2021/CVE-2021-40960.md
index 356420f4f04..54ccdbee216 100644
--- a/2021/CVE-2021-40960.md
+++ b/2021/CVE-2021-40960.md
@@ -15,3 +15,5 @@ Galera WebTemplate 1.0 is affected by a directory traversal vulnerability that c
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40960.yaml
diff --git a/2021/CVE-2021-40978.md b/2021/CVE-2021-40978.md
index 145958fd7e5..f668d530017 100644
--- a/2021/CVE-2021-40978.md
+++ b/2021/CVE-2021-40978.md
@@ -16,3 +16,5 @@ The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40978.yaml
diff --git a/2021/CVE-2021-41097.md b/2021/CVE-2021-41097.md
index 2b42104d8d8..728358088c5 100644
--- a/2021/CVE-2021-41097.md
+++ b/2021/CVE-2021-41097.md
@@ -15,3 +15,5 @@ aurelia-path is part of the Aurelia platform and contains utilities for path man
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41097.yaml
diff --git a/2021/CVE-2021-41174.md b/2021/CVE-2021-41174.md
index 11389d36e95..87a6cb008b0 100644
--- a/2021/CVE-2021-41174.md
+++ b/2021/CVE-2021-41174.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/we45/nuclei-appsec-workflows
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41174.yaml
diff --git a/2021/CVE-2021-41192.md b/2021/CVE-2021-41192.md
index b4e82692031..4707bd2b43a 100644
--- a/2021/CVE-2021-41192.md
+++ b/2021/CVE-2021-41192.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41192.yaml
diff --git a/2021/CVE-2021-41266.md b/2021/CVE-2021-41266.md
index 773d36f5ab8..eb7f046b1a2 100644
--- a/2021/CVE-2021-41266.md
+++ b/2021/CVE-2021-41266.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41266.yaml
diff --git a/2021/CVE-2021-41277.md b/2021/CVE-2021-41277.md
index 0e91d061bf8..e4162b7671d 100644
--- a/2021/CVE-2021-41277.md
+++ b/2021/CVE-2021-41277.md
@@ -31,3 +31,5 @@ No PoCs from references.
 - https://github.com/z3n70/CVE-2021-41277
 - https://github.com/zer0yu/CVE-2021-41277
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41277.yaml
diff --git a/2021/CVE-2021-41282.md b/2021/CVE-2021-41282.md
index e1e50ec3958..9d4c33c2f75 100644
--- a/2021/CVE-2021-41282.md
+++ b/2021/CVE-2021-41282.md
@@ -16,3 +16,5 @@ diag_routes.php in pfSense 2.5.2 allows sed data injection. Authenticated users
 #### Github
 - https://github.com/bantahacka/pfsense_2021-41282
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41282.yaml
diff --git a/2021/CVE-2021-41291.md b/2021/CVE-2021-41291.md
index 1436e494a40..42bef3f9d23 100644
--- a/2021/CVE-2021-41291.md
+++ b/2021/CVE-2021-41291.md
@@ -21,3 +21,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41291.yaml
diff --git a/2021/CVE-2021-41293.md b/2021/CVE-2021-41293.md
index 990e36c7e63..1cdcb53e823 100644
--- a/2021/CVE-2021-41293.md
+++ b/2021/CVE-2021-41293.md
@@ -21,3 +21,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41293.yaml
diff --git a/2021/CVE-2021-41349.md b/2021/CVE-2021-41349.md
index d9e3906ebd5..1c63a5a247d 100644
--- a/2021/CVE-2021-41349.md
+++ b/2021/CVE-2021-41349.md
@@ -23,3 +23,5 @@ No PoCs from references.
 - https://github.com/0xrobiul/CVE-2021-41349
 - https://github.com/exploit-io/CVE-2021-41349
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41349.yaml
diff --git a/2021/CVE-2021-41381.md b/2021/CVE-2021-41381.md
index e6b0605dca7..945f511fe8a 100644
--- a/2021/CVE-2021-41381.md
+++ b/2021/CVE-2021-41381.md
@@ -20,3 +20,5 @@ Payara Micro Community 5.2021.6 and below allows Directory Traversal.
 #### Github
 - https://github.com/Net-hunter121/CVE-2021-41381
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41381.yaml
diff --git a/2021/CVE-2021-41419.md b/2021/CVE-2021-41419.md
index 13c2278d71a..30621c6bf04 100644
--- a/2021/CVE-2021-41419.md
+++ b/2021/CVE-2021-41419.md
@@ -15,3 +15,5 @@ QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java d
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41419.yaml
diff --git a/2021/CVE-2021-41432.md b/2021/CVE-2021-41432.md
index bd08e6d8448..e027b990df8 100644
--- a/2021/CVE-2021-41432.md
+++ b/2021/CVE-2021-41432.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41432.yaml
diff --git a/2021/CVE-2021-41460.md b/2021/CVE-2021-41460.md
index 76e3184e910..38c7c0fa46c 100644
--- a/2021/CVE-2021-41460.md
+++ b/2021/CVE-2021-41460.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41460.yaml
diff --git a/2021/CVE-2021-41467.md b/2021/CVE-2021-41467.md
index 1ba8e2d1a7c..6202c6fd19b 100644
--- a/2021/CVE-2021-41467.md
+++ b/2021/CVE-2021-41467.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41467.yaml
diff --git a/2021/CVE-2021-41569.md b/2021/CVE-2021-41569.md
index 1cedd19584e..70799fc20d0 100644
--- a/2021/CVE-2021-41569.md
+++ b/2021/CVE-2021-41569.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41569.yaml
diff --git a/2021/CVE-2021-41648.md b/2021/CVE-2021-41648.md
index d7e153086ea..68c53aea8b5 100644
--- a/2021/CVE-2021-41648.md
+++ b/2021/CVE-2021-41648.md
@@ -17,3 +17,5 @@ An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-syste
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41648.yaml
diff --git a/2021/CVE-2021-41649.md b/2021/CVE-2021-41649.md
index b6f00126ef5..fbfca304b9f 100644
--- a/2021/CVE-2021-41649.md
+++ b/2021/CVE-2021-41649.md
@@ -15,3 +15,5 @@ An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-syste
 #### Github
 - https://github.com/MobiusBinary/CVE-2021-41649
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41649.yaml
diff --git a/2021/CVE-2021-41653.md b/2021/CVE-2021-41653.md
index 96cdd85c020..6d750235f44 100644
--- a/2021/CVE-2021-41653.md
+++ b/2021/CVE-2021-41653.md
@@ -15,3 +15,5 @@ The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL
 #### Github
 - https://github.com/likeww/CVE-2021-41653
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41653.yaml
diff --git a/2021/CVE-2021-41691.md b/2021/CVE-2021-41691.md
index 650a4b6eb03..a277aaafcca 100644
--- a/2021/CVE-2021-41691.md
+++ b/2021/CVE-2021-41691.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41691.yaml
diff --git a/2021/CVE-2021-41773.md b/2021/CVE-2021-41773.md
index 3366aa21fd0..97f8cc91f68 100644
--- a/2021/CVE-2021-41773.md
+++ b/2021/CVE-2021-41773.md
@@ -167,3 +167,5 @@ A flaw was found in a change made to path normalization in Apache HTTP Server 2.
 - https://github.com/zeronine9/CVE-2021-41773
 - https://github.com/abdulrafay25-svg/CVE-2021-41773-Exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41773.yaml
diff --git a/2021/CVE-2021-41826.md b/2021/CVE-2021-41826.md
index 461df37d061..8d64f7dccfe 100644
--- a/2021/CVE-2021-41826.md
+++ b/2021/CVE-2021-41826.md
@@ -15,3 +15,5 @@ PlaceOS Authentication Service before 1.29.10.0 allows app/controllers/auth/sess
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41826.yaml
diff --git a/2021/CVE-2021-41878.md b/2021/CVE-2021-41878.md
index 5167a1ad323..9e160af4ce7 100644
--- a/2021/CVE-2021-41878.md
+++ b/2021/CVE-2021-41878.md
@@ -17,3 +17,5 @@ A reflected cross-site scripting (XSS) vulnerability exists in the i-Panel Admin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41878.yaml
diff --git a/2021/CVE-2021-4191.md b/2021/CVE-2021-4191.md
index a66f1ed6edc..654c5f532fa 100644
--- a/2021/CVE-2021-4191.md
+++ b/2021/CVE-2021-4191.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/Adelittle/CVE-2021-4191_Exploits
 - https://github.com/K3ysTr0K3R/CVE-2021-4191-EXPLOIT
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4191.yaml
diff --git a/2021/CVE-2021-41951.md b/2021/CVE-2021-41951.md
index 444d9b90a81..7a19a476a9c 100644
--- a/2021/CVE-2021-41951.md
+++ b/2021/CVE-2021-41951.md
@@ -15,3 +15,5 @@ ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41951.yaml
diff --git a/2021/CVE-2021-42013.md b/2021/CVE-2021-42013.md
index 8763661fdec..454b0a1e4a8 100644
--- a/2021/CVE-2021-42013.md
+++ b/2021/CVE-2021-42013.md
@@ -66,3 +66,5 @@ It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was in
 - https://github.com/walnutsecurity/cve-2021-42013
 - https://github.com/xMohamed0/CVE-2021-42013-ApacheRCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42013.yaml
diff --git a/2021/CVE-2021-42063.md b/2021/CVE-2021-42063.md
index 66fd7c0e94c..c725204936c 100644
--- a/2021/CVE-2021-42063.md
+++ b/2021/CVE-2021-42063.md
@@ -19,3 +19,5 @@ A security vulnerability has been discovered in the SAP Knowledge Warehouse - ve
 #### Github
 - https://github.com/Cappricio-Securities/CVE-2021-42063
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42063.yaml
diff --git a/2021/CVE-2021-42071.md b/2021/CVE-2021-42071.md
index 2e4f98fdfc0..e6ee55e71a2 100644
--- a/2021/CVE-2021-42071.md
+++ b/2021/CVE-2021-42071.md
@@ -16,3 +16,5 @@ In Visual Tools DVR VX16 4.2.28.0, an unauthenticated attacker can achieve remot
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42071.yaml
diff --git a/2021/CVE-2021-42192.md b/2021/CVE-2021-42192.md
index aa76861f49c..3a315e88db1 100644
--- a/2021/CVE-2021-42192.md
+++ b/2021/CVE-2021-42192.md
@@ -15,3 +15,5 @@ Konga v0.14.9 is affected by an incorrect access control vulnerability where a s
 #### Github
 - https://github.com/whokilleddb/Konga-Privilege-Escalation-Exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42192.yaml
diff --git a/2021/CVE-2021-42237.md b/2021/CVE-2021-42237.md
index 80bdeb5aa63..8e946f35da9 100644
--- a/2021/CVE-2021-42237.md
+++ b/2021/CVE-2021-42237.md
@@ -18,3 +18,5 @@ Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an
 - https://github.com/PinkDev1/CVE-2021-42237
 - https://github.com/vesperp/CVE-2021-42237-SiteCore-XP
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42237.yaml
diff --git a/2021/CVE-2021-42258.md b/2021/CVE-2021-42258.md
index 1926f5b554b..f29bab061c4 100644
--- a/2021/CVE-2021-42258.md
+++ b/2021/CVE-2021-42258.md
@@ -16,3 +16,5 @@ BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection f
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42258.yaml
diff --git a/2021/CVE-2021-42359.md b/2021/CVE-2021-42359.md
index a7c25f83c84..5d3812c47c4 100644
--- a/2021/CVE-2021-42359.md
+++ b/2021/CVE-2021-42359.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42359.yaml
diff --git a/2021/CVE-2021-42551.md b/2021/CVE-2021-42551.md
index 4d6317ec126..07c5a1256d4 100644
--- a/2021/CVE-2021-42551.md
+++ b/2021/CVE-2021-42551.md
@@ -17,3 +17,5 @@ Cross-site Scripting (XSS) vulnerability in the search functionality of AlCoda N
 #### Github
 - https://github.com/compr00t/nuclei-templates/blob/main/CVE-2021-42551.yaml
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42551.yaml
diff --git a/2021/CVE-2021-42565.md b/2021/CVE-2021-42565.md
index bcd43c51904..ee47414d17f 100644
--- a/2021/CVE-2021-42565.md
+++ b/2021/CVE-2021-42565.md
@@ -15,3 +15,5 @@ myfactory.FMS before 7.1-912 allows XSS via the UID parameter.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42565.yaml
diff --git a/2021/CVE-2021-42566.md b/2021/CVE-2021-42566.md
index c43764c8332..5ddc5727b3e 100644
--- a/2021/CVE-2021-42566.md
+++ b/2021/CVE-2021-42566.md
@@ -15,3 +15,5 @@ myfactory.FMS before 7.1-912 allows XSS via the Error parameter.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42566.yaml
diff --git a/2021/CVE-2021-42567.md b/2021/CVE-2021-42567.md
index 3f72e021ca7..4ecf30cec35 100644
--- a/2021/CVE-2021-42567.md
+++ b/2021/CVE-2021-42567.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42567.yaml
diff --git a/2021/CVE-2021-42627.md b/2021/CVE-2021-42627.md
index 0e56daa144c..83f55f4a267 100644
--- a/2021/CVE-2021-42627.md
+++ b/2021/CVE-2021-42627.md
@@ -16,3 +16,5 @@ The WAN configuration page "wan.htm" on D-Link DIR-615 devices with firmware 20.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42627.yaml
diff --git a/2021/CVE-2021-42663.md b/2021/CVE-2021-42663.md
index 3e5bff9bfde..6febf2fd4de 100644
--- a/2021/CVE-2021-42663.md
+++ b/2021/CVE-2021-42663.md
@@ -15,3 +15,5 @@ An HTML injection vulnerability exists in Sourcecodester Online Event Booking an
 #### Github
 - https://github.com/0xDeku/CVE-2021-42663
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42663.yaml
diff --git a/2021/CVE-2021-42667.md b/2021/CVE-2021-42667.md
index d36135aad5b..a0f6cbb401e 100644
--- a/2021/CVE-2021-42667.md
+++ b/2021/CVE-2021-42667.md
@@ -16,3 +16,5 @@ A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and
 #### Github
 - https://github.com/0xDeku/CVE-2021-42667
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42667.yaml
diff --git a/2021/CVE-2021-42887.md b/2021/CVE-2021-42887.md
index 9f64fe3f7cc..fc8b2af4053 100644
--- a/2021/CVE-2021-42887.md
+++ b/2021/CVE-2021-42887.md
@@ -15,3 +15,5 @@ In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a spe
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42887.yaml
diff --git a/2021/CVE-2021-43062.md b/2021/CVE-2021-43062.md
index c5235043233..73c32beb914 100644
--- a/2021/CVE-2021-43062.md
+++ b/2021/CVE-2021-43062.md
@@ -15,3 +15,5 @@ A improper neutralization of input during web page generation ('cross-site scrip
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43062.yaml
diff --git a/2021/CVE-2021-43287.md b/2021/CVE-2021-43287.md
index 0144730fe18..85fdb8e0c3c 100644
--- a/2021/CVE-2021-43287.md
+++ b/2021/CVE-2021-43287.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Wrin9/CVE-2021-43287
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43287.yaml
diff --git a/2021/CVE-2021-43421.md b/2021/CVE-2021-43421.md
index a8ac04588eb..6354313c2f6 100644
--- a/2021/CVE-2021-43421.md
+++ b/2021/CVE-2021-43421.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43421.yaml
diff --git a/2021/CVE-2021-43495.md b/2021/CVE-2021-43495.md
index c400aee5be3..3728808e552 100644
--- a/2021/CVE-2021-43495.md
+++ b/2021/CVE-2021-43495.md
@@ -15,3 +15,5 @@ AlquistManager branch as of commit 280d99f43b11378212652e75f6f3159cde9c1d36 is a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43495.yaml
diff --git a/2021/CVE-2021-43496.md b/2021/CVE-2021-43496.md
index 49820fe1d73..3627a815ece 100644
--- a/2021/CVE-2021-43496.md
+++ b/2021/CVE-2021-43496.md
@@ -15,3 +15,5 @@ Clustering master branch as of commit 53e663e259bcfc8cdecb56c0bb255bd70bfcaa70 i
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43496.yaml
diff --git a/2021/CVE-2021-43510.md b/2021/CVE-2021-43510.md
index c80786a1882..e9520561c76 100644
--- a/2021/CVE-2021-43510.md
+++ b/2021/CVE-2021-43510.md
@@ -16,3 +16,5 @@ SQL Injection vulnerability exists in Sourcecodester Simple Client Management Sy
 #### Github
 - https://github.com/r4hn1/Simple-Client-Management-System-Exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43510.yaml
diff --git a/2021/CVE-2021-43574.md b/2021/CVE-2021-43574.md
index 0ceb046d042..6d64cf2423f 100644
--- a/2021/CVE-2021-43574.md
+++ b/2021/CVE-2021-43574.md
@@ -15,3 +15,5 @@ WebAdmin Control Panel in Atmail 6.5.0 (a version released in 2012) allows XSS v
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43574.yaml
diff --git a/2021/CVE-2021-43734.md b/2021/CVE-2021-43734.md
index 76085778aaa..be4a8c6d793 100644
--- a/2021/CVE-2021-43734.md
+++ b/2021/CVE-2021-43734.md
@@ -15,3 +15,5 @@ kkFileview v4.0.0 has arbitrary file read through a directory traversal vulnerab
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43734.yaml
diff --git a/2021/CVE-2021-4374.md b/2021/CVE-2021-4374.md
index ebba85497f1..b967849a27a 100644
--- a/2021/CVE-2021-4374.md
+++ b/2021/CVE-2021-4374.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4374.yaml
diff --git a/2021/CVE-2021-43778.md b/2021/CVE-2021-43778.md
index 66cafcbbeb0..5195dd6396c 100644
--- a/2021/CVE-2021-43778.md
+++ b/2021/CVE-2021-43778.md
@@ -16,3 +16,5 @@ Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances vers
 #### Github
 - https://github.com/AK-blank/CVE-2021-43778
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43778.yaml
diff --git a/2021/CVE-2021-43798.md b/2021/CVE-2021-43798.md
index c6cb3c29a3d..9cc80d3eb2c 100644
--- a/2021/CVE-2021-43798.md
+++ b/2021/CVE-2021-43798.md
@@ -75,3 +75,5 @@ Grafana is an open-source platform for monitoring and observability. Grafana ver
 - https://github.com/z3n70/CVE-2021-43798
 - https://github.com/zer0yu/CVE-2021-43798
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43798.yaml
diff --git a/2021/CVE-2021-4380.md b/2021/CVE-2021-4380.md
index 6c24e1d4a16..10a27c710cd 100644
--- a/2021/CVE-2021-4380.md
+++ b/2021/CVE-2021-4380.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4380.yaml
diff --git a/2021/CVE-2021-43810.md b/2021/CVE-2021-43810.md
index 0026c6b38c9..b235da74f5d 100644
--- a/2021/CVE-2021-43810.md
+++ b/2021/CVE-2021-43810.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43810.yaml
diff --git a/2021/CVE-2021-44077.md b/2021/CVE-2021-44077.md
index 992e870e91e..25a14773e5b 100644
--- a/2021/CVE-2021-44077.md
+++ b/2021/CVE-2021-44077.md
@@ -17,3 +17,5 @@ Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 105
 - https://github.com/horizon3ai/CVE-2021-44077
 - https://github.com/pizza-power/Golang-CVE-2021-44077-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44077.yaml
diff --git a/2021/CVE-2021-44152.md b/2021/CVE-2021-44152.md
index 891e06a51d2..1b563c55079 100644
--- a/2021/CVE-2021-44152.md
+++ b/2021/CVE-2021-44152.md
@@ -15,3 +15,5 @@ An issue was discovered in Reprise RLM 14.2. Because /goform/change_password_pro
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44152.yaml
diff --git a/2021/CVE-2021-44228.md b/2021/CVE-2021-44228.md
index 87738940f90..25f6da4433e 100644
--- a/2021/CVE-2021-44228.md
+++ b/2021/CVE-2021-44228.md
@@ -450,3 +450,5 @@ Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12
 - https://github.com/zsolt-halo/Log4J-Log4Shell-CVE-2021-44228-Spring-Boot-Test-Service
 - https://github.com/zzzz0317/log4j2-vulnerable-spring-app
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44228.yaml
diff --git a/2021/CVE-2021-44260.md b/2021/CVE-2021-44260.md
index 97b6854dad7..bc4dedcf79a 100644
--- a/2021/CVE-2021-44260.md
+++ b/2021/CVE-2021-44260.md
@@ -15,3 +15,5 @@ A vulnerability is in the 'live_mfg.html' page of the WAVLINK AC1200, version WA
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44260.yaml
diff --git a/2021/CVE-2021-4436.md b/2021/CVE-2021-4436.md
index 0d7116ec4e5..30fbf54f8e7 100644
--- a/2021/CVE-2021-4436.md
+++ b/2021/CVE-2021-4436.md
@@ -15,3 +15,5 @@ The 3DPrint Lite WordPress plugin before 1.9.1.5 does not have any authorisation
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4436.yaml
diff --git a/2021/CVE-2021-44427.md b/2021/CVE-2021-44427.md
index 0d83ebb5ef2..a6ba5d84ad9 100644
--- a/2021/CVE-2021-44427.md
+++ b/2021/CVE-2021-44427.md
@@ -15,3 +15,5 @@ An unauthenticated SQL Injection vulnerability in Rosario Student Information Sy
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44427.yaml
diff --git a/2021/CVE-2021-44451.md b/2021/CVE-2021-44451.md
index 402ec0ad27f..dd6b8a25cfd 100644
--- a/2021/CVE-2021-44451.md
+++ b/2021/CVE-2021-44451.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44451.yaml
diff --git a/2021/CVE-2021-4448.md b/2021/CVE-2021-4448.md
index b8ca48486b3..b4ddc5e11d8 100644
--- a/2021/CVE-2021-4448.md
+++ b/2021/CVE-2021-4448.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4448.yaml
diff --git a/2021/CVE-2021-4449.md b/2021/CVE-2021-4449.md
index a357976eb9e..b6221a941f7 100644
--- a/2021/CVE-2021-4449.md
+++ b/2021/CVE-2021-4449.md
@@ -16,3 +16,5 @@ The ZoomSounds plugin for WordPress is vulnerable to arbitrary file uploads due
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4449.yaml
diff --git a/2021/CVE-2021-44515.md b/2021/CVE-2021-44515.md
index e7bba4176af..09d782a23d6 100644
--- a/2021/CVE-2021-44515.md
+++ b/2021/CVE-2021-44515.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44515.yaml
diff --git a/2021/CVE-2021-44521.md b/2021/CVE-2021-44521.md
index 51a5dfce723..470864c846a 100644
--- a/2021/CVE-2021-44521.md
+++ b/2021/CVE-2021-44521.md
@@ -19,3 +19,5 @@ No PoCs from references.
 - https://github.com/WoodenKlaas/CVE-2021-44521
 - https://github.com/Yeyvo/poc-CVE-2021-44521
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2021/CVE-2021-44521.yaml
diff --git a/2021/CVE-2021-44528.md b/2021/CVE-2021-44528.md
index e0f73f7c0ae..df256ce38eb 100644
--- a/2021/CVE-2021-44528.md
+++ b/2021/CVE-2021-44528.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44528.yaml
diff --git a/2021/CVE-2021-44529.md b/2021/CVE-2021-44529.md
index 880cb7a77e9..74612ca8f0d 100644
--- a/2021/CVE-2021-44529.md
+++ b/2021/CVE-2021-44529.md
@@ -19,3 +19,5 @@ A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA)
 - https://github.com/jax7sec/CVE-2021-44529
 - https://github.com/jkana/CVE-2021-44529
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44529.yaml
diff --git a/2021/CVE-2021-44848.md b/2021/CVE-2021-44848.md
index c846516d935..aced555fc28 100644
--- a/2021/CVE-2021-44848.md
+++ b/2021/CVE-2021-44848.md
@@ -16,3 +16,5 @@ In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different res
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44848.yaml
diff --git a/2021/CVE-2021-45027.md b/2021/CVE-2021-45027.md
index a99cb0619a2..6151638c90e 100644
--- a/2021/CVE-2021-45027.md
+++ b/2021/CVE-2021-45027.md
@@ -15,3 +15,5 @@ An arbitrary file download vulnerability in Oliver v5 Library Server Versions <
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45027.yaml
diff --git a/2021/CVE-2021-45043.md b/2021/CVE-2021-45043.md
index 46b47ffff6c..18cc5f77290 100644
--- a/2021/CVE-2021-45043.md
+++ b/2021/CVE-2021-45043.md
@@ -15,3 +15,5 @@ HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to rea
 #### Github
 - https://github.com/crypt0g30rgy/cve-2021-45043
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45043.yaml
diff --git a/2021/CVE-2021-45046.md b/2021/CVE-2021-45046.md
index c3e51f675ab..b7a2f93afe2 100644
--- a/2021/CVE-2021-45046.md
+++ b/2021/CVE-2021-45046.md
@@ -32,3 +32,5 @@ It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was i
 - https://github.com/tejas-nagchandi/CVE-2021-45046
 - https://github.com/yonocruzhj/AIG---Tasks
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45046.yaml
diff --git a/2021/CVE-2021-45092.md b/2021/CVE-2021-45092.md
index 93125596b22..ecc3b104a86 100644
--- a/2021/CVE-2021-45092.md
+++ b/2021/CVE-2021-45092.md
@@ -15,3 +15,5 @@ Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by defa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45092.yaml
diff --git a/2021/CVE-2021-45232.md b/2021/CVE-2021-45232.md
index 3b636b33bfb..d76bc63b505 100644
--- a/2021/CVE-2021-45232.md
+++ b/2021/CVE-2021-45232.md
@@ -27,3 +27,5 @@ No PoCs from references.
 - https://github.com/xiju2003/-cve-2021-45232
 - https://github.com/yggcwhat/CVE-2021-45232
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45232.yaml
diff --git a/2021/CVE-2021-45380.md b/2021/CVE-2021-45380.md
index 5103b927a2d..c6c31f73576 100644
--- a/2021/CVE-2021-45380.md
+++ b/2021/CVE-2021-45380.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45380.yaml
diff --git a/2021/CVE-2021-45382.md b/2021/CVE-2021-45382.md
index 1f36d22a8d0..6293fff72ff 100644
--- a/2021/CVE-2021-45382.md
+++ b/2021/CVE-2021-45382.md
@@ -16,3 +16,5 @@ A Remote Command Execution (RCE) vulnerability exists in all series H/W revision
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45382.yaml
diff --git a/2021/CVE-2021-45420.md b/2021/CVE-2021-45420.md
index 60611455796..818284d19bf 100644
--- a/2021/CVE-2021-45420.md
+++ b/2021/CVE-2021-45420.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45420.yaml
diff --git a/2021/CVE-2021-45422.md b/2021/CVE-2021-45422.md
index 4fdc393f3bc..53308ef07f3 100644
--- a/2021/CVE-2021-45422.md
+++ b/2021/CVE-2021-45422.md
@@ -18,3 +18,5 @@ Reprise License Manager 14.2 is affected by a reflected cross-site scripting vul
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45422.yaml
diff --git a/2021/CVE-2021-45428.md b/2021/CVE-2021-45428.md
index e1a268247b0..2b51c491c55 100644
--- a/2021/CVE-2021-45428.md
+++ b/2021/CVE-2021-45428.md
@@ -15,3 +15,5 @@ TLR-2005KSH is affected by an incorrect access control vulnerability. THe PUT me
 #### Github
 - https://github.com/projectforsix/CVE-2021-45428-Defacer
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45428.yaml
diff --git a/2021/CVE-2021-45467.md b/2021/CVE-2021-45467.md
index 7b86dde74c9..4a2fce61b52 100644
--- a/2021/CVE-2021-45467.md
+++ b/2021/CVE-2021-45467.md
@@ -15,3 +15,5 @@ In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, an unauthe
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45467.yaml
diff --git a/2021/CVE-2021-45793.md b/2021/CVE-2021-45793.md
index 3a7ac0ed470..fe2a0222a96 100644
--- a/2021/CVE-2021-45793.md
+++ b/2021/CVE-2021-45793.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45793.yaml
diff --git a/2021/CVE-2021-45811.md b/2021/CVE-2021-45811.md
index 1867bf8c9f4..e20033f5ae2 100644
--- a/2021/CVE-2021-45811.md
+++ b/2021/CVE-2021-45811.md
@@ -15,3 +15,5 @@ A SQL injection vulnerability in the "Search" functionality of "tickets.php" pag
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45811.yaml
diff --git a/2021/CVE-2021-45967.md b/2021/CVE-2021-45967.md
index b4914140b8a..4780768ade6 100644
--- a/2021/CVE-2021-45967.md
+++ b/2021/CVE-2021-45967.md
@@ -15,3 +15,5 @@ An issue was discovered in Pascom Cloud Phone System before 7.20.x. A configurat
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45967.yaml
diff --git a/2021/CVE-2021-45968.md b/2021/CVE-2021-45968.md
index 52b8ea0c20b..f7157fef554 100644
--- a/2021/CVE-2021-45968.md
+++ b/2021/CVE-2021-45968.md
@@ -15,3 +15,5 @@ An issue was discovered in xmppserver jar in the XMPP Server component of the JI
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45968.yaml
diff --git a/2021/CVE-2021-46005.md b/2021/CVE-2021-46005.md
index 071e6a36604..f51972f5a42 100644
--- a/2021/CVE-2021-46005.md
+++ b/2021/CVE-2021-46005.md
@@ -15,3 +15,5 @@ Sourcecodester Car Rental Management System 1.0 is vulnerable to Cross Site Scri
 #### Github
 - https://github.com/nawed20002/CVE-2021-46005
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46005.yaml
diff --git a/2021/CVE-2021-46068.md b/2021/CVE-2021-46068.md
index c13ff82d8c6..b8ad140e850 100644
--- a/2021/CVE-2021-46068.md
+++ b/2021/CVE-2021-46068.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/plsanu/CVE-2021-46068
 - https://github.com/plsanu/Vehicle-Service-Management-System-MyAccount-Stored-Cross-Site-Scripting-XSS
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46068.yaml
diff --git a/2021/CVE-2021-46069.md b/2021/CVE-2021-46069.md
index b0f40bcc71e..9939eac143e 100644
--- a/2021/CVE-2021-46069.md
+++ b/2021/CVE-2021-46069.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/plsanu/CVE-2021-46069
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46069.yaml
diff --git a/2021/CVE-2021-46071.md b/2021/CVE-2021-46071.md
index 678fc431eb1..82166cee096 100644
--- a/2021/CVE-2021-46071.md
+++ b/2021/CVE-2021-46071.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/plsanu/CVE-2021-46071
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46071.yaml
diff --git a/2021/CVE-2021-46072.md b/2021/CVE-2021-46072.md
index 16a51077bf8..79704ff5a03 100644
--- a/2021/CVE-2021-46072.md
+++ b/2021/CVE-2021-46072.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/plsanu/CVE-2021-46072
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46072.yaml
diff --git a/2021/CVE-2021-46073.md b/2021/CVE-2021-46073.md
index ea8197c8291..613a24c8eca 100644
--- a/2021/CVE-2021-46073.md
+++ b/2021/CVE-2021-46073.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/plsanu/CVE-2021-46073
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46073.yaml
diff --git a/2021/CVE-2021-46107.md b/2021/CVE-2021-46107.md
index 4202c1df1db..663217baa3a 100644
--- a/2021/CVE-2021-46107.md
+++ b/2021/CVE-2021-46107.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46107.yaml
diff --git a/2021/CVE-2021-46371.md b/2021/CVE-2021-46371.md
index c2d11f60417..c69eb0a30f3 100644
--- a/2021/CVE-2021-46371.md
+++ b/2021/CVE-2021-46371.md
@@ -15,3 +15,5 @@ antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unaut
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46371.yaml
diff --git a/2021/CVE-2021-46379.md b/2021/CVE-2021-46379.md
index 14d0631e8f2..23ec94a900e 100644
--- a/2021/CVE-2021-46379.md
+++ b/2021/CVE-2021-46379.md
@@ -17,3 +17,5 @@ DLink DIR850 ET850-1.08TRb03 is affected by an incorrect access control vulnerab
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46379.yaml
diff --git a/2021/CVE-2021-46381.md b/2021/CVE-2021-46381.md
index 470ad1fc197..e14f7f923e3 100644
--- a/2021/CVE-2021-46381.md
+++ b/2021/CVE-2021-46381.md
@@ -17,3 +17,5 @@ Local File Inclusion due to path traversal in D-Link DAP-1620 leads to unauthori
 #### Github
 - https://github.com/JCPpeiqi/-cve-2021-46381
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46381.yaml
diff --git a/2021/CVE-2021-46387.md b/2021/CVE-2021-46387.md
index 6531a10a02a..c56dac8cf62 100644
--- a/2021/CVE-2021-46387.md
+++ b/2021/CVE-2021-46387.md
@@ -16,3 +16,5 @@ ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Script
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46387.yaml
diff --git a/2021/CVE-2021-46417.md b/2021/CVE-2021-46417.md
index 6bd73b0943b..e212e958eb4 100644
--- a/2021/CVE-2021-46417.md
+++ b/2021/CVE-2021-46417.md
@@ -17,3 +17,5 @@ Insecure handling of a download function leads to disclosure of internal files d
 #### Github
 - https://github.com/Henry4E36/CVE-2021-46417
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46417.yaml
diff --git a/2021/CVE-2021-46418.md b/2021/CVE-2021-46418.md
index f6e63a9e5bf..93fa758a7cd 100644
--- a/2021/CVE-2021-46418.md
+++ b/2021/CVE-2021-46418.md
@@ -15,3 +15,5 @@ An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT me
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46418.yaml
diff --git a/2021/CVE-2021-46419.md b/2021/CVE-2021-46419.md
index 60a4ba899ba..680f71fa4d5 100644
--- a/2021/CVE-2021-46419.md
+++ b/2021/CVE-2021-46419.md
@@ -15,3 +15,5 @@ An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46419.yaml
diff --git a/2021/CVE-2021-46422.md b/2021/CVE-2021-46422.md
index 00896c61014..35b11f9025d 100644
--- a/2021/CVE-2021-46422.md
+++ b/2021/CVE-2021-46422.md
@@ -28,3 +28,5 @@ Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability
 - https://github.com/yigexioabai/CVE-2021-46422_RCE
 - https://github.com/yyqxi/CVE-2021-46422
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46422.yaml
diff --git a/2021/CVE-2021-46424.md b/2021/CVE-2021-46424.md
index 7cd167fd623..52dbe83d580 100644
--- a/2021/CVE-2021-46424.md
+++ b/2021/CVE-2021-46424.md
@@ -15,3 +15,5 @@ Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerabi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46424.yaml
diff --git a/2021/CVE-2021-46704.md b/2021/CVE-2021-46704.md
index 4c49724661a..315d4a7807b 100644
--- a/2021/CVE-2021-46704.md
+++ b/2021/CVE-2021-46704.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/Erenlancaster/CVE-2021-46704
 - https://github.com/MithatGuner/CVE-2021-46704-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46704.yaml
diff --git a/2022/CVE-2022-0087.md b/2022/CVE-2022-0087.md
index 9ceb111379f..45eda7e435e 100644
--- a/2022/CVE-2022-0087.md
+++ b/2022/CVE-2022-0087.md
@@ -15,3 +15,5 @@ keystone is vulnerable to Improper Neutralization of Input During Web Page Gener
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0087.yaml
diff --git a/2022/CVE-2022-0140.md b/2022/CVE-2022-0140.md
index 21a7ac94512..8a38698237d 100644
--- a/2022/CVE-2022-0140.md
+++ b/2022/CVE-2022-0140.md
@@ -15,3 +15,5 @@ The Visual Form Builder WordPress plugin before 3.0.6 does not perform access co
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0140.yaml
diff --git a/2022/CVE-2022-0147.md b/2022/CVE-2022-0147.md
index 0be875d5f88..140099501ba 100644
--- a/2022/CVE-2022-0147.md
+++ b/2022/CVE-2022-0147.md
@@ -15,3 +15,5 @@ The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0147.yaml
diff --git a/2022/CVE-2022-0148.md b/2022/CVE-2022-0148.md
index 0280a7f2f40..59055867ec9 100644
--- a/2022/CVE-2022-0148.md
+++ b/2022/CVE-2022-0148.md
@@ -15,3 +15,5 @@ The All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs WordP
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0148.yaml
diff --git a/2022/CVE-2022-0149.md b/2022/CVE-2022-0149.md
index 2b9293837fd..c203eb5bf95 100644
--- a/2022/CVE-2022-0149.md
+++ b/2022/CVE-2022-0149.md
@@ -15,3 +15,5 @@ The WooCommerce Stored Exporter WordPress plugin before 2.7.1 was affected by a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0149.yaml
diff --git a/2022/CVE-2022-0150.md b/2022/CVE-2022-0150.md
index 6bbc197ed12..cafe2a59a1b 100644
--- a/2022/CVE-2022-0150.md
+++ b/2022/CVE-2022-0150.md
@@ -15,3 +15,5 @@ The WP Accessibility Helper (WAH) WordPress plugin before 0.6.0.7 does not sanit
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0150.yaml
diff --git a/2022/CVE-2022-0165.md b/2022/CVE-2022-0165.md
index c3871d2b09d..714591ad957 100644
--- a/2022/CVE-2022-0165.md
+++ b/2022/CVE-2022-0165.md
@@ -16,3 +16,5 @@ The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate t
 - https://github.com/Cappricio-Securities/CVE-2022-0165
 - https://github.com/K3ysTr0K3R/CVE-2022-0165-EXPLOIT
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0165.yaml
diff --git a/2022/CVE-2022-0169.md b/2022/CVE-2022-0169.md
index 4e8b71f05ce..0f0caf0f553 100644
--- a/2022/CVE-2022-0169.md
+++ b/2022/CVE-2022-0169.md
@@ -15,3 +15,5 @@ The Photo Gallery by 10Web WordPress plugin before 1.6.0 does not validate and e
 #### Github
 - https://github.com/X3RX3SSec/CVE-2022-0169
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0169.yaml
diff --git a/2022/CVE-2022-0188.md b/2022/CVE-2022-0188.md
index 43a91a566f8..1d921a10346 100644
--- a/2022/CVE-2022-0188.md
+++ b/2022/CVE-2022-0188.md
@@ -15,3 +15,5 @@ The CMP WordPress plugin before 4.0.19 allows any user, even not logged in, to a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0188.yaml
diff --git a/2022/CVE-2022-0189.md b/2022/CVE-2022-0189.md
index 9b9806c638e..e76d90d3c2b 100644
--- a/2022/CVE-2022-0189.md
+++ b/2022/CVE-2022-0189.md
@@ -15,3 +15,5 @@ The WP RSS Aggregator WordPress plugin before 4.20 does not sanitise and escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0189.yaml
diff --git a/2022/CVE-2022-0201.md b/2022/CVE-2022-0201.md
index 9394c12c5cc..29dc16c8a69 100644
--- a/2022/CVE-2022-0201.md
+++ b/2022/CVE-2022-0201.md
@@ -16,3 +16,5 @@ The Permalink Manager Lite WordPress plugin before 2.2.15 and Permalink Manager
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0201.yaml
diff --git a/2022/CVE-2022-0206.md b/2022/CVE-2022-0206.md
index 919c44ba2fb..8caceefb2e1 100644
--- a/2022/CVE-2022-0206.md
+++ b/2022/CVE-2022-0206.md
@@ -15,3 +15,5 @@ The NewStatPress WordPress plugin before 1.3.6 does not properly escape the what
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0206.yaml
diff --git a/2022/CVE-2022-0208.md b/2022/CVE-2022-0208.md
index 6937ee673e3..76473245d09 100644
--- a/2022/CVE-2022-0208.md
+++ b/2022/CVE-2022-0208.md
@@ -15,3 +15,5 @@ The MapPress Maps for WordPress plugin before 2.73.4 does not sanitise and escap
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0208.yaml
diff --git a/2022/CVE-2022-0212.md b/2022/CVE-2022-0212.md
index 508f3cc735a..b0c923cd23a 100644
--- a/2022/CVE-2022-0212.md
+++ b/2022/CVE-2022-0212.md
@@ -15,3 +15,5 @@ The SpiderCalendar WordPress plugin through 1.5.65 does not sanitise and escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0212.yaml
diff --git a/2022/CVE-2022-0218.md b/2022/CVE-2022-0218.md
index b4884772e43..65ccf313319 100644
--- a/2022/CVE-2022-0218.md
+++ b/2022/CVE-2022-0218.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0218.yaml
diff --git a/2022/CVE-2022-0220.md b/2022/CVE-2022-0220.md
index 34f2d92422a..7bf2b3c80d3 100644
--- a/2022/CVE-2022-0220.md
+++ b/2022/CVE-2022-0220.md
@@ -15,3 +15,5 @@ The check_privacy_settings AJAX action of the WordPress GDPR WordPress plugin be
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0220.yaml
diff --git a/2022/CVE-2022-0228.md b/2022/CVE-2022-0228.md
index a9fed78a474..86d9f17e521 100644
--- a/2022/CVE-2022-0228.md
+++ b/2022/CVE-2022-0228.md
@@ -15,3 +15,5 @@ The Popup Builder WordPress plugin before 4.0.7 does not validate and properly e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0228.yaml
diff --git a/2022/CVE-2022-0234.md b/2022/CVE-2022-0234.md
index 5dd6e649b42..eb5ec4ccd3f 100644
--- a/2022/CVE-2022-0234.md
+++ b/2022/CVE-2022-0234.md
@@ -15,3 +15,5 @@ The WOOCS WordPress plugin before 1.3.7.5 does not sanitise and escape the woocs
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0234.yaml
diff --git a/2022/CVE-2022-0250.md b/2022/CVE-2022-0250.md
index cd489eb2696..c19f09f7ee8 100644
--- a/2022/CVE-2022-0250.md
+++ b/2022/CVE-2022-0250.md
@@ -15,3 +15,5 @@ The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0250.yaml
diff --git a/2022/CVE-2022-0271.md b/2022/CVE-2022-0271.md
index 233243c7939..907bf4a336a 100644
--- a/2022/CVE-2022-0271.md
+++ b/2022/CVE-2022-0271.md
@@ -15,3 +15,5 @@ The LearnPress WordPress plugin before 4.1.6 does not sanitise and escape the lp
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0271.yaml
diff --git a/2022/CVE-2022-0281.md b/2022/CVE-2022-0281.md
index 97662cbba5c..a1ebcbe242c 100644
--- a/2022/CVE-2022-0281.md
+++ b/2022/CVE-2022-0281.md
@@ -15,3 +15,5 @@ Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweb
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0281.yaml
diff --git a/2022/CVE-2022-0288.md b/2022/CVE-2022-0288.md
index e20848afc3e..445289a05ab 100644
--- a/2022/CVE-2022-0288.md
+++ b/2022/CVE-2022-0288.md
@@ -16,3 +16,5 @@ The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0288.yaml
diff --git a/2022/CVE-2022-0342.md b/2022/CVE-2022-0342.md
index e0d4aa61d6c..734a685f2a8 100644
--- a/2022/CVE-2022-0342.md
+++ b/2022/CVE-2022-0342.md
@@ -23,3 +23,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0342.yaml
diff --git a/2022/CVE-2022-0346.md b/2022/CVE-2022-0346.md
index a001a9a133c..28d0444be63 100644
--- a/2022/CVE-2022-0346.md
+++ b/2022/CVE-2022-0346.md
@@ -15,3 +15,5 @@ The XML Sitemap Generator for Google WordPress plugin before 2.0.4 does not vali
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0346.yaml
diff --git a/2022/CVE-2022-0349.md b/2022/CVE-2022-0349.md
index 73a0b1cd77b..c38287b0779 100644
--- a/2022/CVE-2022-0349.md
+++ b/2022/CVE-2022-0349.md
@@ -15,3 +15,5 @@ The NotificationX WordPress plugin before 2.3.9 does not sanitise and escape the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0349.yaml
diff --git a/2022/CVE-2022-0378.md b/2022/CVE-2022-0378.md
index d75221e6190..443ce306092 100644
--- a/2022/CVE-2022-0378.md
+++ b/2022/CVE-2022-0378.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0378.yaml
diff --git a/2022/CVE-2022-0381.md b/2022/CVE-2022-0381.md
index 029b18deac2..6b7f8a8f6a6 100644
--- a/2022/CVE-2022-0381.md
+++ b/2022/CVE-2022-0381.md
@@ -15,3 +15,5 @@ The Embed Swagger WordPress plugin is vulnerable to Reflected Cross-Site Scripti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0381.yaml
diff --git a/2022/CVE-2022-0412.md b/2022/CVE-2022-0412.md
index 9e32112cc48..48942557927 100644
--- a/2022/CVE-2022-0412.md
+++ b/2022/CVE-2022-0412.md
@@ -16,3 +16,5 @@ The TI WooCommerce Wishlist WordPress plugin before 1.40.1, TI WooCommerce Wishl
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0412.yaml
diff --git a/2022/CVE-2022-0415.md b/2022/CVE-2022-0415.md
index 0f676b812ce..cbaa970e7c2 100644
--- a/2022/CVE-2022-0415.md
+++ b/2022/CVE-2022-0415.md
@@ -15,3 +15,5 @@ Remote Command Execution in uploading repository file in GitHub repository gogs/
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0415.yaml
diff --git a/2022/CVE-2022-0422.md b/2022/CVE-2022-0422.md
index 74f0c4e1250..79f6a585ef5 100644
--- a/2022/CVE-2022-0422.md
+++ b/2022/CVE-2022-0422.md
@@ -15,3 +15,5 @@ The White Label CMS WordPress plugin before 2.2.9 does not sanitise and validate
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0422.yaml
diff --git a/2022/CVE-2022-0424.md b/2022/CVE-2022-0424.md
index 72f74ae1a04..9e78cf1747b 100644
--- a/2022/CVE-2022-0424.md
+++ b/2022/CVE-2022-0424.md
@@ -15,3 +15,5 @@ The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authenti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0424.yaml
diff --git a/2022/CVE-2022-0429.md b/2022/CVE-2022-0429.md
index 97d40044ffd..1d9afd789e6 100644
--- a/2022/CVE-2022-0429.md
+++ b/2022/CVE-2022-0429.md
@@ -15,3 +15,5 @@ The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 8.9.6 d
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0429.yaml
diff --git a/2022/CVE-2022-0432.md b/2022/CVE-2022-0432.md
index dabe3b80f77..629c692fd29 100644
--- a/2022/CVE-2022-0432.md
+++ b/2022/CVE-2022-0432.md
@@ -15,3 +15,5 @@ Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0432.yaml
diff --git a/2022/CVE-2022-0434.md b/2022/CVE-2022-0434.md
index 9f21df0e599..2987d7ed36b 100644
--- a/2022/CVE-2022-0434.md
+++ b/2022/CVE-2022-0434.md
@@ -15,3 +15,5 @@ The Page View Count WordPress plugin before 2.4.15 does not sanitise and escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0434.yaml
diff --git a/2022/CVE-2022-0437.md b/2022/CVE-2022-0437.md
index 7e74edcb9e3..3948c8a4404 100644
--- a/2022/CVE-2022-0437.md
+++ b/2022/CVE-2022-0437.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0437.yaml
diff --git a/2022/CVE-2022-0439.md b/2022/CVE-2022-0439.md
index 9bf0975e038..07b4c2ce4ff 100644
--- a/2022/CVE-2022-0439.md
+++ b/2022/CVE-2022-0439.md
@@ -16,3 +16,5 @@ The Email Subscribers & Newsletters WordPress plugin before 5.3.2 does not corre
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2022-0439
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0439.yaml
diff --git a/2022/CVE-2022-0441.md b/2022/CVE-2022-0441.md
index f37d9d2def6..e78e9f56284 100644
--- a/2022/CVE-2022-0441.md
+++ b/2022/CVE-2022-0441.md
@@ -18,3 +18,5 @@ The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some paramete
 - https://github.com/kyukazamiqq/CVE-2022-0441
 - https://github.com/tegal1337/CVE-2022-0441
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0441.yaml
diff --git a/2022/CVE-2022-0479.md b/2022/CVE-2022-0479.md
index 68e417f147d..b83ffb2dab0 100644
--- a/2022/CVE-2022-0479.md
+++ b/2022/CVE-2022-0479.md
@@ -15,3 +15,5 @@ The Popup Builder WordPress plugin before 4.1.1 does not sanitise and escape the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0479.yaml
diff --git a/2022/CVE-2022-0482.md b/2022/CVE-2022-0482.md
index a6c1fe1b6a8..dad4e5affd8 100644
--- a/2022/CVE-2022-0482.md
+++ b/2022/CVE-2022-0482.md
@@ -18,3 +18,5 @@ Exposure of Private Personal Information to an Unauthorized Actor in GitHub repo
 - https://github.com/Acceis/exploit-CVE-2022-0482
 - https://github.com/mija-pilkaite/CVE-2022-0482_exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0482.yaml
diff --git a/2022/CVE-2022-0533.md b/2022/CVE-2022-0533.md
index 4b3dd67e80b..254cf0cd7e1 100644
--- a/2022/CVE-2022-0533.md
+++ b/2022/CVE-2022-0533.md
@@ -15,3 +15,5 @@ The Ditty (formerly Ditty News Ticker) WordPress plugin before 3.0.15 is affecte
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0533.yaml
diff --git a/2022/CVE-2022-0535.md b/2022/CVE-2022-0535.md
index 8dbab3e0f93..f4fe40205a5 100644
--- a/2022/CVE-2022-0535.md
+++ b/2022/CVE-2022-0535.md
@@ -15,3 +15,5 @@ The E2Pdf WordPress plugin before 1.16.45 does not sanitise and escape some of i
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0535.yaml
diff --git a/2022/CVE-2022-0540.md b/2022/CVE-2022-0540.md
index 822ed126135..d5d547ea0d8 100644
--- a/2022/CVE-2022-0540.md
+++ b/2022/CVE-2022-0540.md
@@ -24,3 +24,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Pear1y/CVE-2022-0540-RCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0540.yaml
diff --git a/2022/CVE-2022-0543.md b/2022/CVE-2022-0543.md
index 3c314b92c47..28c387f0b0a 100644
--- a/2022/CVE-2022-0543.md
+++ b/2022/CVE-2022-0543.md
@@ -19,3 +19,5 @@ It was discovered, that redis, a persistent key-value database, due to a packagi
 - https://github.com/aodsec/CVE-2022-0543
 - https://github.com/z92g/CVE-2022-0543
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2022/CVE-2022-0543.yaml
diff --git a/2022/CVE-2022-0591.md b/2022/CVE-2022-0591.md
index fd692767138..6c86eb3815b 100644
--- a/2022/CVE-2022-0591.md
+++ b/2022/CVE-2022-0591.md
@@ -15,3 +15,5 @@ The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0591.yaml
diff --git a/2022/CVE-2022-0592.md b/2022/CVE-2022-0592.md
index 3b3aa6fc8e7..8aee08ed10e 100644
--- a/2022/CVE-2022-0592.md
+++ b/2022/CVE-2022-0592.md
@@ -15,3 +15,5 @@ The MapSVG WordPress plugin before 6.2.20 does not validate and escape a paramet
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0592.yaml
diff --git a/2022/CVE-2022-0594.md b/2022/CVE-2022-0594.md
index d1d4108e88f..413bcb4b3c7 100644
--- a/2022/CVE-2022-0594.md
+++ b/2022/CVE-2022-0594.md
@@ -15,3 +15,5 @@ The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0594.yaml
diff --git a/2022/CVE-2022-0595.md b/2022/CVE-2022-0595.md
index 3cb313b353e..dbba458c047 100644
--- a/2022/CVE-2022-0595.md
+++ b/2022/CVE-2022-0595.md
@@ -15,3 +15,5 @@ The Drag and Drop Multiple File Upload WordPress plugin before 1.3.6.3 allows SV
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0595.yaml
diff --git a/2022/CVE-2022-0597.md b/2022/CVE-2022-0597.md
index 18d22cd0fe6..d1175321827 100644
--- a/2022/CVE-2022-0597.md
+++ b/2022/CVE-2022-0597.md
@@ -15,3 +15,5 @@ Open Redirect in Packagist microweber/microweber prior to 1.2.11.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0597.yaml
diff --git a/2022/CVE-2022-0599.md b/2022/CVE-2022-0599.md
index 2577db59f61..60654113b00 100644
--- a/2022/CVE-2022-0599.md
+++ b/2022/CVE-2022-0599.md
@@ -15,3 +15,5 @@ The Mapping Multiple URLs Redirect Same Page WordPress plugin through 5.8 does n
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0599.yaml
diff --git a/2022/CVE-2022-0651.md b/2022/CVE-2022-0651.md
index 79016fdfd09..9ef5768134d 100644
--- a/2022/CVE-2022-0651.md
+++ b/2022/CVE-2022-0651.md
@@ -15,3 +15,5 @@ The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insuffi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0651.yaml
diff --git a/2022/CVE-2022-0653.md b/2022/CVE-2022-0653.md
index 3c7beb92bef..440b33ee248 100644
--- a/2022/CVE-2022-0653.md
+++ b/2022/CVE-2022-0653.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0653.yaml
diff --git a/2022/CVE-2022-0656.md b/2022/CVE-2022-0656.md
index 7173740f2fc..5a16a4d878d 100644
--- a/2022/CVE-2022-0656.md
+++ b/2022/CVE-2022-0656.md
@@ -15,3 +15,5 @@ The Web To Print Shop : uDraw WordPress plugin before 3.3.3 does not validate th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0656.yaml
diff --git a/2022/CVE-2022-0658.md b/2022/CVE-2022-0658.md
index aa4186a55fd..7a0fecb88e1 100644
--- a/2022/CVE-2022-0658.md
+++ b/2022/CVE-2022-0658.md
@@ -15,3 +15,5 @@ The CommonsBooking WordPress plugin before 2.6.8 does not sanitise and escape th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0658.yaml
diff --git a/2022/CVE-2022-0660.md b/2022/CVE-2022-0660.md
index 7a0a2fd67d6..bbc0b4058a8 100644
--- a/2022/CVE-2022-0660.md
+++ b/2022/CVE-2022-0660.md
@@ -15,3 +15,5 @@ Generation of Error Message Containing Sensitive Information in Packagist microw
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0660.yaml
diff --git a/2022/CVE-2022-0666.md b/2022/CVE-2022-0666.md
index 02002ee78be..ff273e33d77 100644
--- a/2022/CVE-2022-0666.md
+++ b/2022/CVE-2022-0666.md
@@ -15,3 +15,5 @@ CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https:/
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0666.yaml
diff --git a/2022/CVE-2022-0678.md b/2022/CVE-2022-0678.md
index 808cf2d437f..f1024174ee2 100644
--- a/2022/CVE-2022-0678.md
+++ b/2022/CVE-2022-0678.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0678.yaml
diff --git a/2022/CVE-2022-0679.md b/2022/CVE-2022-0679.md
index f3ac3f1d13b..b83414fe991 100644
--- a/2022/CVE-2022-0679.md
+++ b/2022/CVE-2022-0679.md
@@ -15,3 +15,5 @@ The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sani
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0679.yaml
diff --git a/2022/CVE-2022-0692.md b/2022/CVE-2022-0692.md
index ab497b77077..3c52d8bf0d1 100644
--- a/2022/CVE-2022-0692.md
+++ b/2022/CVE-2022-0692.md
@@ -15,3 +15,5 @@ Open Redirect on Rudloff/alltube in Packagist rudloff/alltube prior to 3.0.1.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0692.yaml
diff --git a/2022/CVE-2022-0693.md b/2022/CVE-2022-0693.md
index 830fb481028..58340b133da 100644
--- a/2022/CVE-2022-0693.md
+++ b/2022/CVE-2022-0693.md
@@ -15,3 +15,5 @@ The Master Elements WordPress plugin through 8.0 does not validate and escape th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0693.yaml
diff --git a/2022/CVE-2022-0735.md b/2022/CVE-2022-0735.md
index cc3c002b78a..6473ebe2a38 100644
--- a/2022/CVE-2022-0735.md
+++ b/2022/CVE-2022-0735.md
@@ -17,3 +17,5 @@ An issue has been discovered in GitLab CE/EE affecting all versions starting fro
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0735.yaml
diff --git a/2022/CVE-2022-0747.md b/2022/CVE-2022-0747.md
index 0682d2ddebc..e294d3ab5a2 100644
--- a/2022/CVE-2022-0747.md
+++ b/2022/CVE-2022-0747.md
@@ -15,3 +15,5 @@ The Infographic Maker WordPress plugin before 4.3.8 does not validate and escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0747.yaml
diff --git a/2022/CVE-2022-0760.md b/2022/CVE-2022-0760.md
index dfa09daf8e7..d1eecc51eaf 100644
--- a/2022/CVE-2022-0760.md
+++ b/2022/CVE-2022-0760.md
@@ -15,3 +15,5 @@ The Simple Link Directory WordPress plugin before 7.7.2 does not validate and es
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0760.yaml
diff --git a/2022/CVE-2022-0765.md b/2022/CVE-2022-0765.md
index b747bfb1515..1baa1074319 100644
--- a/2022/CVE-2022-0765.md
+++ b/2022/CVE-2022-0765.md
@@ -15,3 +15,5 @@ The Loco Translate WordPress plugin before 2.6.1 does not properly remove inline
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0765.yaml
diff --git a/2022/CVE-2022-0769.md b/2022/CVE-2022-0769.md
index 807225b9098..598b96eec20 100644
--- a/2022/CVE-2022-0769.md
+++ b/2022/CVE-2022-0769.md
@@ -15,3 +15,5 @@ The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and es
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0769.yaml
diff --git a/2022/CVE-2022-0773.md b/2022/CVE-2022-0773.md
index 32f5e24d42f..47f429d9d02 100644
--- a/2022/CVE-2022-0773.md
+++ b/2022/CVE-2022-0773.md
@@ -15,3 +15,5 @@ The Documentor WordPress plugin through 1.5.3 fails to sanitize and escape user
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0773.yaml
diff --git a/2022/CVE-2022-0776.md b/2022/CVE-2022-0776.md
index b973ecb89f5..6aea37666bf 100644
--- a/2022/CVE-2022-0776.md
+++ b/2022/CVE-2022-0776.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - DOM in GitHub repository hakimel/reveal.js prior to
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0776.yaml
diff --git a/2022/CVE-2022-0781.md b/2022/CVE-2022-0781.md
index 79a69e13658..177d1fcb8b5 100644
--- a/2022/CVE-2022-0781.md
+++ b/2022/CVE-2022-0781.md
@@ -15,3 +15,5 @@ The Nirweb support WordPress plugin before 2.8.2 does not sanitise and escape a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0781.yaml
diff --git a/2022/CVE-2022-0783.md b/2022/CVE-2022-0783.md
index 135343b52c5..e9eea5733c6 100644
--- a/2022/CVE-2022-0783.md
+++ b/2022/CVE-2022-0783.md
@@ -15,3 +15,5 @@ The Multiple Shipping Address Woocommerce WordPress plugin before 2.0 does not p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0783.yaml
diff --git a/2022/CVE-2022-0784.md b/2022/CVE-2022-0784.md
index e70ff6cf9d1..f160a2f2d6e 100644
--- a/2022/CVE-2022-0784.md
+++ b/2022/CVE-2022-0784.md
@@ -15,3 +15,5 @@ The Title Experiments Free WordPress plugin before 9.0.1 does not sanitise and e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0784.yaml
diff --git a/2022/CVE-2022-0785.md b/2022/CVE-2022-0785.md
index 120779ab030..2a582242362 100644
--- a/2022/CVE-2022-0785.md
+++ b/2022/CVE-2022-0785.md
@@ -15,3 +15,5 @@ The Daily Prayer Time WordPress plugin before 2022.03.01 does not sanitise and e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0785.yaml
diff --git a/2022/CVE-2022-0786.md b/2022/CVE-2022-0786.md
index 3026a8fa4a7..8389d0afc5e 100644
--- a/2022/CVE-2022-0786.md
+++ b/2022/CVE-2022-0786.md
@@ -15,3 +15,5 @@ The KiviCare WordPress plugin before 2.3.9 does not sanitise and escape some par
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0786.yaml
diff --git a/2022/CVE-2022-0787.md b/2022/CVE-2022-0787.md
index 79f2494f971..872aaa6e553 100644
--- a/2022/CVE-2022-0787.md
+++ b/2022/CVE-2022-0787.md
@@ -15,3 +15,5 @@ The Limit Login Attempts (Spam Protection) WordPress plugin before 5.1 does not
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0787.yaml
diff --git a/2022/CVE-2022-0788.md b/2022/CVE-2022-0788.md
index 8a62fec9dc4..236f4ccc72c 100644
--- a/2022/CVE-2022-0788.md
+++ b/2022/CVE-2022-0788.md
@@ -15,3 +15,5 @@ The WP Fundraising Donation and Crowdfunding Platform WordPress plugin before 1.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0788.yaml
diff --git a/2022/CVE-2022-0814.md b/2022/CVE-2022-0814.md
index 4ed68299078..e5440ea99e9 100644
--- a/2022/CVE-2022-0814.md
+++ b/2022/CVE-2022-0814.md
@@ -15,3 +15,5 @@ The Ubigeo de Perú para Woocommerce WordPress plugin before 3.6.4 does not prop
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0814.yaml
diff --git a/2022/CVE-2022-0817.md b/2022/CVE-2022-0817.md
index 039b866d4b7..eeab11a07ac 100644
--- a/2022/CVE-2022-0817.md
+++ b/2022/CVE-2022-0817.md
@@ -15,3 +15,5 @@ The BadgeOS WordPress plugin through 3.7.0 does not sanitise and escape a parame
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0817.yaml
diff --git a/2022/CVE-2022-0824.md b/2022/CVE-2022-0824.md
index d4f6a43f1c3..fb0c0560090 100644
--- a/2022/CVE-2022-0824.md
+++ b/2022/CVE-2022-0824.md
@@ -22,3 +22,5 @@ Improper Access Control to Remote Code Execution in GitHub repository webmin/web
 - https://github.com/gokul-ramesh/WebminRCE-exploit
 - https://github.com/pizza-power/golang-webmin-CVE-2022-0824-revshell
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0824.yaml
diff --git a/2022/CVE-2022-0826.md b/2022/CVE-2022-0826.md
index b80f0d1e65a..06c6edb446e 100644
--- a/2022/CVE-2022-0826.md
+++ b/2022/CVE-2022-0826.md
@@ -15,3 +15,5 @@ The WP Video Gallery WordPress plugin through 1.7.1 does not sanitise and escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0826.yaml
diff --git a/2022/CVE-2022-0827.md b/2022/CVE-2022-0827.md
index 79539cc7228..653d7e5088b 100644
--- a/2022/CVE-2022-0827.md
+++ b/2022/CVE-2022-0827.md
@@ -15,3 +15,5 @@ The Bestbooks WordPress plugin through 2.6.3 does not sanitise and escape some p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0827.yaml
diff --git a/2022/CVE-2022-0846.md b/2022/CVE-2022-0846.md
index 9d58280d40e..fedc13a97cc 100644
--- a/2022/CVE-2022-0846.md
+++ b/2022/CVE-2022-0846.md
@@ -15,3 +15,5 @@ The SpeakOut! Email Petitions WordPress plugin before 2.14.15.1 does not sanitis
 #### Github
 - https://github.com/DharmaDoll/Search-Poc-from-CVE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0846.yaml
diff --git a/2022/CVE-2022-0864.md b/2022/CVE-2022-0864.md
index 67edb258b0a..24da1641979 100644
--- a/2022/CVE-2022-0864.md
+++ b/2022/CVE-2022-0864.md
@@ -16,3 +16,5 @@ The UpdraftPlus WordPress Backup Plugin WordPress plugin before 1.22.9 does not
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0864.yaml
diff --git a/2022/CVE-2022-0867.md b/2022/CVE-2022-0867.md
index 72fd848e4b0..3a262d7c3f6 100644
--- a/2022/CVE-2022-0867.md
+++ b/2022/CVE-2022-0867.md
@@ -15,3 +15,5 @@ The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0867.yaml
diff --git a/2022/CVE-2022-0869.md b/2022/CVE-2022-0869.md
index eff50ac94bf..bd1feb88218 100644
--- a/2022/CVE-2022-0869.md
+++ b/2022/CVE-2022-0869.md
@@ -15,3 +15,5 @@ Multiple Open Redirect in GitHub repository nitely/spirit prior to 0.12.3.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0869.yaml
diff --git a/2022/CVE-2022-0870.md b/2022/CVE-2022-0870.md
index 83d42dba15c..55226e9227b 100644
--- a/2022/CVE-2022-0870.md
+++ b/2022/CVE-2022-0870.md
@@ -15,3 +15,5 @@ Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0870.yaml
diff --git a/2022/CVE-2022-0873.md b/2022/CVE-2022-0873.md
index e017465a6bf..c3c0f2a0ed2 100644
--- a/2022/CVE-2022-0873.md
+++ b/2022/CVE-2022-0873.md
@@ -15,3 +15,5 @@ The Gmedia Photo Gallery WordPress plugin before 1.20.0 does not sanitise and es
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0873.yaml
diff --git a/2022/CVE-2022-0879.md b/2022/CVE-2022-0879.md
index c3340d55a60..0ca5f82b9d1 100644
--- a/2022/CVE-2022-0879.md
+++ b/2022/CVE-2022-0879.md
@@ -15,3 +15,5 @@ The Caldera Forms WordPress plugin before 1.9.7 does not validate and escape the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0879.yaml
diff --git a/2022/CVE-2022-0885.md b/2022/CVE-2022-0885.md
index 8802fae01f7..239ed5927ac 100644
--- a/2022/CVE-2022-0885.md
+++ b/2022/CVE-2022-0885.md
@@ -16,3 +16,5 @@ The Member Hero WordPress plugin through 1.0.9 lacks authorization checks, and d
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0885.yaml
diff --git a/2022/CVE-2022-0899.md b/2022/CVE-2022-0899.md
index b3ef7739a07..98c0325bbc9 100644
--- a/2022/CVE-2022-0899.md
+++ b/2022/CVE-2022-0899.md
@@ -15,3 +15,5 @@ The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape ge
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0899.yaml
diff --git a/2022/CVE-2022-0928.md b/2022/CVE-2022-0928.md
index 50e46e45b7e..03c3b22f0a1 100644
--- a/2022/CVE-2022-0928.md
+++ b/2022/CVE-2022-0928.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0928.yaml
diff --git a/2022/CVE-2022-0948.md b/2022/CVE-2022-0948.md
index bacad616a1f..9aa04a59bf3 100644
--- a/2022/CVE-2022-0948.md
+++ b/2022/CVE-2022-0948.md
@@ -15,3 +15,5 @@ The Order Listener for WooCommerce WordPress plugin before 3.2.2 does not saniti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0948.yaml
diff --git a/2022/CVE-2022-0949.md b/2022/CVE-2022-0949.md
index fdc3ede8027..54b20d129fc 100644
--- a/2022/CVE-2022-0949.md
+++ b/2022/CVE-2022-0949.md
@@ -15,3 +15,5 @@ The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protecti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0949.yaml
diff --git a/2022/CVE-2022-0952.md b/2022/CVE-2022-0952.md
index 998cf6e4504..464e6e0bf09 100644
--- a/2022/CVE-2022-0952.md
+++ b/2022/CVE-2022-0952.md
@@ -16,3 +16,5 @@ The Sitemap by click5 WordPress plugin before 1.0.36 does not have authorisation
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2022-0952
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0952.yaml
diff --git a/2022/CVE-2022-0954.md b/2022/CVE-2022-0954.md
index fb230ea773f..79ee02e0384 100644
--- a/2022/CVE-2022-0954.md
+++ b/2022/CVE-2022-0954.md
@@ -15,3 +15,5 @@ Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Setti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0954.yaml
diff --git a/2022/CVE-2022-0963.md b/2022/CVE-2022-0963.md
index 443a478d39d..29b19c8468d 100644
--- a/2022/CVE-2022-0963.md
+++ b/2022/CVE-2022-0963.md
@@ -15,3 +15,5 @@ Unrestricted XML Files Leads to Stored XSS in GitHub repository microweber/micro
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0963.yaml
diff --git a/2022/CVE-2022-0968.md b/2022/CVE-2022-0968.md
index 98b34a1261d..8bf8d041746 100644
--- a/2022/CVE-2022-0968.md
+++ b/2022/CVE-2022-0968.md
@@ -15,3 +15,5 @@ The microweber application allows large characters to insert in the input field
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0968.yaml
diff --git a/2022/CVE-2022-1007.md b/2022/CVE-2022-1007.md
index 612d92d836d..c537a3ff6b7 100644
--- a/2022/CVE-2022-1007.md
+++ b/2022/CVE-2022-1007.md
@@ -15,3 +15,5 @@ The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1007.yaml
diff --git a/2022/CVE-2022-1013.md b/2022/CVE-2022-1013.md
index 83e0aad6b86..14db60f1d04 100644
--- a/2022/CVE-2022-1013.md
+++ b/2022/CVE-2022-1013.md
@@ -15,3 +15,5 @@ The Personal Dictionary WordPress plugin before 1.3.4 fails to properly sanitize
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1013.yaml
diff --git a/2022/CVE-2022-1020.md b/2022/CVE-2022-1020.md
index ab3c53ae1ed..265f7abfb52 100644
--- a/2022/CVE-2022-1020.md
+++ b/2022/CVE-2022-1020.md
@@ -17,3 +17,5 @@ The Product Table for WooCommerce (wooproducttable) WordPress plugin before 3.1.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1020.yaml
diff --git a/2022/CVE-2022-1026.md b/2022/CVE-2022-1026.md
index 5b4508fc60c..9831fbdba93 100644
--- a/2022/CVE-2022-1026.md
+++ b/2022/CVE-2022-1026.md
@@ -17,3 +17,5 @@ Kyocera multifunction printers running vulnerable versions of Net View unintenti
 - https://github.com/flamebarke/nmap-printer-nse-scripts
 - https://github.com/r0lh/kygocera
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1026.yaml
diff --git a/2022/CVE-2022-1029.md b/2022/CVE-2022-1029.md
index c07e649802b..e78bb23529a 100644
--- a/2022/CVE-2022-1029.md
+++ b/2022/CVE-2022-1029.md
@@ -15,3 +15,5 @@ The Limit Login Attempts WordPress plugin before 4.0.72 does not sanitise and es
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1029.yaml
diff --git a/2022/CVE-2022-1040.md b/2022/CVE-2022-1040.md
index abbb7c17779..e755d580b69 100644
--- a/2022/CVE-2022-1040.md
+++ b/2022/CVE-2022-1040.md
@@ -23,3 +23,5 @@ An authentication bypass vulnerability in the User Portal and Webadmin allows a
 - https://github.com/michealadams30/CVE-2022-1040
 - https://github.com/xMr110/CVE-2022-1040
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1040.yaml
diff --git a/2022/CVE-2022-1054.md b/2022/CVE-2022-1054.md
index 698e9883958..f4338dbeaf5 100644
--- a/2022/CVE-2022-1054.md
+++ b/2022/CVE-2022-1054.md
@@ -16,3 +16,5 @@ The RSVP and Event Management Plugin WordPress plugin before 2.7.8 does not have
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1054.yaml
diff --git a/2022/CVE-2022-1057.md b/2022/CVE-2022-1057.md
index 4d0c9e96804..65f0aa68b72 100644
--- a/2022/CVE-2022-1057.md
+++ b/2022/CVE-2022-1057.md
@@ -15,3 +15,5 @@ The Pricing Deals for WooCommerce WordPress plugin through 2.0.2.02 does not pro
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1057.yaml
diff --git a/2022/CVE-2022-1058.md b/2022/CVE-2022-1058.md
index f42ecd59469..2c741bf76f2 100644
--- a/2022/CVE-2022-1058.md
+++ b/2022/CVE-2022-1058.md
@@ -15,3 +15,5 @@ Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1058.yaml
diff --git a/2022/CVE-2022-1119.md b/2022/CVE-2022-1119.md
index 3b8b0654f4d..ff1869ffa9b 100644
--- a/2022/CVE-2022-1119.md
+++ b/2022/CVE-2022-1119.md
@@ -16,3 +16,5 @@ The Simple File List WordPress plugin is vulnerable to Arbitrary File Download v
 #### Github
 - https://github.com/z92g/CVE-2022-1119
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1119.yaml
diff --git a/2022/CVE-2022-1162.md b/2022/CVE-2022-1162.md
index 3268d16781c..0fc40a6f139 100644
--- a/2022/CVE-2022-1162.md
+++ b/2022/CVE-2022-1162.md
@@ -18,3 +18,5 @@ A hardcoded password was set for accounts registered using an OmniAuth provider
 - https://github.com/Greenwolf/CVE-2022-1162
 - https://github.com/ipsBruno/CVE-2022-1162
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1162.yaml
diff --git a/2022/CVE-2022-1168.md b/2022/CVE-2022-1168.md
index a5cefb55cd7..d15bdd1bdaf 100644
--- a/2022/CVE-2022-1168.md
+++ b/2022/CVE-2022-1168.md
@@ -15,3 +15,5 @@ There is a Cross-Site Scripting vulnerability in the JobSearch WP JobSearch Word
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1168.yaml
diff --git a/2022/CVE-2022-1170.md b/2022/CVE-2022-1170.md
index 2266b74c02f..7d4c20d319c 100644
--- a/2022/CVE-2022-1170.md
+++ b/2022/CVE-2022-1170.md
@@ -15,3 +15,5 @@ In the Noo JobMonster WordPress theme before 4.5.2.9 JobMonster there is a XSS v
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1170.yaml
diff --git a/2022/CVE-2022-1221.md b/2022/CVE-2022-1221.md
index a5fca71a67b..e782c0cdf0c 100644
--- a/2022/CVE-2022-1221.md
+++ b/2022/CVE-2022-1221.md
@@ -15,3 +15,5 @@ The Gwyn's Imagemap Selector WordPress plugin through 0.3.3 does not sanitise an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1221.yaml
diff --git a/2022/CVE-2022-1281.md b/2022/CVE-2022-1281.md
index 2919f5a2bec..d5b3293638c 100644
--- a/2022/CVE-2022-1281.md
+++ b/2022/CVE-2022-1281.md
@@ -15,3 +15,5 @@ The Photo Gallery WordPress plugin through 1.6.3 does not properly escape the $_
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1281.yaml
diff --git a/2022/CVE-2022-1329.md b/2022/CVE-2022-1329.md
index 39ac3c05a63..fe0b7b3b1a4 100644
--- a/2022/CVE-2022-1329.md
+++ b/2022/CVE-2022-1329.md
@@ -24,3 +24,5 @@ The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized
 - https://github.com/mcdulltii/CVE-2022-1329
 - https://github.com/phanthibichtram12/CVE-2022-1329
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1329.yaml
diff --git a/2022/CVE-2022-1386.md b/2022/CVE-2022-1386.md
index 4c3540859d5..6b1c3f570dd 100644
--- a/2022/CVE-2022-1386.md
+++ b/2022/CVE-2022-1386.md
@@ -21,3 +21,5 @@ The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does
 - https://github.com/satyasai1460/CVE-2022-1386
 - https://github.com/zycoder0day/CVE-2022-1386-Mass_Vulnerability
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1386.yaml
diff --git a/2022/CVE-2022-1388.md b/2022/CVE-2022-1388.md
index bbb030a637f..22c4da3403f 100644
--- a/2022/CVE-2022-1388.md
+++ b/2022/CVE-2022-1388.md
@@ -97,3 +97,5 @@ On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.
 - https://github.com/west9b/F5-BIG-IP-POC
 - https://github.com/yukar1z0e/CVE-2022-1388
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1388.yaml
diff --git a/2022/CVE-2022-1390.md b/2022/CVE-2022-1390.md
index 15a9f574105..f5db16e93e6 100644
--- a/2022/CVE-2022-1390.md
+++ b/2022/CVE-2022-1390.md
@@ -16,3 +16,5 @@ The Admin Word Count Column WordPress plugin through 2.2 does not validate the p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1390.yaml
diff --git a/2022/CVE-2022-1391.md b/2022/CVE-2022-1391.md
index 77763252c25..c8533055459 100644
--- a/2022/CVE-2022-1391.md
+++ b/2022/CVE-2022-1391.md
@@ -16,3 +16,5 @@ The Cab fare calculator WordPress plugin before 1.0.4 does not validate the cont
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1391.yaml
diff --git a/2022/CVE-2022-1392.md b/2022/CVE-2022-1392.md
index c0bb30133a0..b7d45c86889 100644
--- a/2022/CVE-2022-1392.md
+++ b/2022/CVE-2022-1392.md
@@ -16,3 +16,5 @@ The Videos sync PDF WordPress plugin through 1.7.4 does not validate the p param
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1392.yaml
diff --git a/2022/CVE-2022-1398.md b/2022/CVE-2022-1398.md
index 98e53c884c6..3df4a0f6536 100644
--- a/2022/CVE-2022-1398.md
+++ b/2022/CVE-2022-1398.md
@@ -15,3 +15,5 @@ The External Media without Import WordPress plugin through 1.1.2 does not have a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1398.yaml
diff --git a/2022/CVE-2022-1439.md b/2022/CVE-2022-1439.md
index 70f5baa5190..6a985f550c5 100644
--- a/2022/CVE-2022-1439.md
+++ b/2022/CVE-2022-1439.md
@@ -15,3 +15,5 @@ Reflected XSS on demo.microweber.org/demo/module/ in GitHub repository microwebe
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1439.yaml
diff --git a/2022/CVE-2022-1442.md b/2022/CVE-2022-1442.md
index 8def36fe298..0edfcd42d06 100644
--- a/2022/CVE-2022-1442.md
+++ b/2022/CVE-2022-1442.md
@@ -15,3 +15,5 @@ The Metform WordPress plugin is vulnerable to sensitive information disclosure d
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2022-1442
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1442.yaml
diff --git a/2022/CVE-2022-1453.md b/2022/CVE-2022-1453.md
index 25ffbd437ba..3550f530915 100644
--- a/2022/CVE-2022-1453.md
+++ b/2022/CVE-2022-1453.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1453.yaml
diff --git a/2022/CVE-2022-1574.md b/2022/CVE-2022-1574.md
index bddf3ec28f9..0e386026a31 100644
--- a/2022/CVE-2022-1574.md
+++ b/2022/CVE-2022-1574.md
@@ -16,3 +16,5 @@ The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1574.yaml
diff --git a/2022/CVE-2022-1580.md b/2022/CVE-2022-1580.md
index 1288fc2cdbc..7cca0121daf 100644
--- a/2022/CVE-2022-1580.md
+++ b/2022/CVE-2022-1580.md
@@ -15,3 +15,5 @@ The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin before 1.5.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1580.yaml
diff --git a/2022/CVE-2022-1595.md b/2022/CVE-2022-1595.md
index 4a05e45c73b..5a47f78cbc3 100644
--- a/2022/CVE-2022-1595.md
+++ b/2022/CVE-2022-1595.md
@@ -15,3 +15,5 @@ The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login U
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1595.yaml
diff --git a/2022/CVE-2022-1597.md b/2022/CVE-2022-1597.md
index dbaf19d1740..6736b57108b 100644
--- a/2022/CVE-2022-1597.md
+++ b/2022/CVE-2022-1597.md
@@ -15,3 +15,5 @@ The WPQA Builder WordPress plugin before 5.4, used as a companion for the Discy
 #### Github
 - https://github.com/V35HR4J/CVE-2022-1597
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1597.yaml
diff --git a/2022/CVE-2022-1598.md b/2022/CVE-2022-1598.md
index 9f4757fdc3d..101ac997c5b 100644
--- a/2022/CVE-2022-1598.md
+++ b/2022/CVE-2022-1598.md
@@ -15,3 +15,5 @@ The WPQA Builder WordPress plugin before 5.5 which is a companion to the Discy a
 #### Github
 - https://github.com/V35HR4J/CVE-2022-1598
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1598.yaml
diff --git a/2022/CVE-2022-1609.md b/2022/CVE-2022-1609.md
index 025e3328a2a..b439749f6d0 100644
--- a/2022/CVE-2022-1609.md
+++ b/2022/CVE-2022-1609.md
@@ -23,3 +23,5 @@ The School Management WordPress plugin before 9.9.7 contains an obfuscated backd
 - https://github.com/tuxsyscall/cve-2022-1609-exploit
 - https://github.com/w4r3s/cve-2022-1609-exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1609.yaml
diff --git a/2022/CVE-2022-1692.md b/2022/CVE-2022-1692.md
index 9a6c37cb95c..fa56cdc101d 100644
--- a/2022/CVE-2022-1692.md
+++ b/2022/CVE-2022-1692.md
@@ -16,3 +16,5 @@ The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not saniti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1692.yaml
diff --git a/2022/CVE-2022-1711.md b/2022/CVE-2022-1711.md
index 6e6b7e9d162..de8103f4763 100644
--- a/2022/CVE-2022-1711.md
+++ b/2022/CVE-2022-1711.md
@@ -15,3 +15,5 @@ Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1711.yaml
diff --git a/2022/CVE-2022-1713.md b/2022/CVE-2022-1713.md
index b71c3b5d3a2..652ac7e9ef8 100644
--- a/2022/CVE-2022-1713.md
+++ b/2022/CVE-2022-1713.md
@@ -15,3 +15,5 @@ SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker c
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1713.yaml
diff --git a/2022/CVE-2022-1724.md b/2022/CVE-2022-1724.md
index fb6f9b8195a..6a66b66714f 100644
--- a/2022/CVE-2022-1724.md
+++ b/2022/CVE-2022-1724.md
@@ -15,3 +15,5 @@ The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1724.yaml
diff --git a/2022/CVE-2022-1756.md b/2022/CVE-2022-1756.md
index 33f2384ccd1..ac6da1139aa 100644
--- a/2022/CVE-2022-1756.md
+++ b/2022/CVE-2022-1756.md
@@ -15,3 +15,5 @@ The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $_
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1756.yaml
diff --git a/2022/CVE-2022-1768.md b/2022/CVE-2022-1768.md
index ccbe175b34c..ce1f07851bd 100644
--- a/2022/CVE-2022-1768.md
+++ b/2022/CVE-2022-1768.md
@@ -5,7 +5,9 @@
 
 ### Description
 
-The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to insufficient escaping and parameterization on user supplied data passed to multiple SQL queries in the ~/rsvpmaker-email.php file. This makes it possible for unauthenticated attackers to steal sensitive information from the database in versions up to, and including, 9.3.2. 

Please note that this is separate from CVE-2022-1453 & CVE-2022-1505.
+The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to insufficient escaping and parameterization on user supplied data passed to multiple SQL queries in the ~/rsvpmaker-email.php file. This makes it possible for unauthenticated attackers to steal sensitive information from the database in versions up to, and including, 9.3.2. 
+
+Please note that this is separate from CVE-2022-1453 & CVE-2022-1505.
 
 ### POC
 
@@ -16,3 +18,5 @@ The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injectio
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1768.yaml
diff --git a/2022/CVE-2022-1815.md b/2022/CVE-2022-1815.md
index e689a5929da..7fe583a6af1 100644
--- a/2022/CVE-2022-1815.md
+++ b/2022/CVE-2022-1815.md
@@ -15,3 +15,5 @@ Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1815.yaml
diff --git a/2022/CVE-2022-1883.md b/2022/CVE-2022-1883.md
index b72ab9b61a0..c138481f2e4 100644
--- a/2022/CVE-2022-1883.md
+++ b/2022/CVE-2022-1883.md
@@ -15,3 +15,5 @@ SQL Injection in GitHub repository camptocamp/terraboard prior to 2.2.0.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1883.yaml
diff --git a/2022/CVE-2022-1903.md b/2022/CVE-2022-1903.md
index 6fb8082ab37..9687d44f58d 100644
--- a/2022/CVE-2022-1903.md
+++ b/2022/CVE-2022-1903.md
@@ -15,3 +15,5 @@ The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (ev
 #### Github
 - https://github.com/biulove0x/CVE-2022-1903
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1903.yaml
diff --git a/2022/CVE-2022-1904.md b/2022/CVE-2022-1904.md
index ae0b1584ec8..9b557ca7584 100644
--- a/2022/CVE-2022-1904.md
+++ b/2022/CVE-2022-1904.md
@@ -15,3 +15,5 @@ The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanit
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1904.yaml
diff --git a/2022/CVE-2022-1906.md b/2022/CVE-2022-1906.md
index 1f0e99c7508..9ff7a14d0b4 100644
--- a/2022/CVE-2022-1906.md
+++ b/2022/CVE-2022-1906.md
@@ -15,3 +15,5 @@ The Copyright Proof WordPress plugin through 4.16 does not sanitise and escape a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1906.yaml
diff --git a/2022/CVE-2022-1910.md b/2022/CVE-2022-1910.md
index 5b3b6700403..e02c012e0e1 100644
--- a/2022/CVE-2022-1910.md
+++ b/2022/CVE-2022-1910.md
@@ -15,3 +15,5 @@ The Shortcodes and extra features for Phlox WordPress plugin before 2.9.8 does n
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1910.yaml
diff --git a/2022/CVE-2022-1916.md b/2022/CVE-2022-1916.md
index 16d8e37eb99..5131c7b9200 100644
--- a/2022/CVE-2022-1916.md
+++ b/2022/CVE-2022-1916.md
@@ -15,3 +15,5 @@ The Active Products Tables for WooCommerce. Professional products tables for Woo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1916.yaml
diff --git a/2022/CVE-2022-1933.md b/2022/CVE-2022-1933.md
index f1a2f7fa07f..352f130e928 100644
--- a/2022/CVE-2022-1933.md
+++ b/2022/CVE-2022-1933.md
@@ -15,3 +15,5 @@ The CDI WordPress plugin before 5.1.9 does not sanitise and escape a parameter b
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1933.yaml
diff --git a/2022/CVE-2022-1937.md b/2022/CVE-2022-1937.md
index 30911646ab1..0da3595762b 100644
--- a/2022/CVE-2022-1937.md
+++ b/2022/CVE-2022-1937.md
@@ -15,3 +15,5 @@ The Awin Data Feed WordPress plugin before 1.8 does not sanitise and escape a pa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1937.yaml
diff --git a/2022/CVE-2022-1946.md b/2022/CVE-2022-1946.md
index 5b44b064342..7fcfd80b7e1 100644
--- a/2022/CVE-2022-1946.md
+++ b/2022/CVE-2022-1946.md
@@ -15,3 +15,5 @@ The Gallery WordPress plugin before 2.0.0 does not sanitise and escape a paramet
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1946.yaml
diff --git a/2022/CVE-2022-1950.md b/2022/CVE-2022-1950.md
index 446951a7150..381d1faa732 100644
--- a/2022/CVE-2022-1950.md
+++ b/2022/CVE-2022-1950.md
@@ -15,3 +15,5 @@ The Youzify WordPress plugin before 1.2.0 does not sanitise and escape a paramet
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1950.yaml
diff --git a/2022/CVE-2022-1952.md b/2022/CVE-2022-1952.md
index f4475d9b0e1..228868c866f 100644
--- a/2022/CVE-2022-1952.md
+++ b/2022/CVE-2022-1952.md
@@ -15,3 +15,5 @@ The Free Booking Plugin for Hotels, Restaurant and Car Rental WordPress plugin b
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1952.yaml
diff --git a/2022/CVE-2022-2034.md b/2022/CVE-2022-2034.md
index 8ca919cf536..378822e792d 100644
--- a/2022/CVE-2022-2034.md
+++ b/2022/CVE-2022-2034.md
@@ -15,3 +15,5 @@ The Sensei LMS WordPress plugin before 4.5.0 does not have proper permissions se
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2034.yaml
diff --git a/2022/CVE-2022-2130.md b/2022/CVE-2022-2130.md
index f918479f452..0566d4a0492 100644
--- a/2022/CVE-2022-2130.md
+++ b/2022/CVE-2022-2130.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microwebe
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2130.yaml
diff --git a/2022/CVE-2022-21371.md b/2022/CVE-2022-21371.md
index 72dd89b774b..bd30fab62c2 100644
--- a/2022/CVE-2022-21371.md
+++ b/2022/CVE-2022-21371.md
@@ -21,3 +21,5 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware
 - https://github.com/Mr-xn/CVE-2022-21371
 - https://github.com/Vulnmachines/Oracle-WebLogic-CVE-2022-21371
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-21371.yaml
diff --git a/2022/CVE-2022-21500.md b/2022/CVE-2022-21500.md
index 13124c2d172..244b7e43dc0 100644
--- a/2022/CVE-2022-21500.md
+++ b/2022/CVE-2022-21500.md
@@ -15,3 +15,5 @@ Vulnerability in Oracle E-Business Suite (component: Manage Proxies). The suppor
 #### Github
 - https://github.com/Cappricio-Securities/CVE-2022-21500
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-21500.yaml
diff --git a/2022/CVE-2022-21587.md b/2022/CVE-2022-21587.md
index fe2fb975ef9..51ce7e88001 100644
--- a/2022/CVE-2022-21587.md
+++ b/2022/CVE-2022-21587.md
@@ -19,3 +19,5 @@ Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracl
 - https://github.com/rockmelodies/Oracle-E-BS-CVE-2022-21587-Exploit
 - https://github.com/sahabrifki/CVE-2022-21587-Oracle-EBS-
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-21587.yaml
diff --git a/2022/CVE-2022-21661.md b/2022/CVE-2022-21661.md
index aebfa9f48b9..648cdd902d4 100644
--- a/2022/CVE-2022-21661.md
+++ b/2022/CVE-2022-21661.md
@@ -29,3 +29,5 @@ WordPress is a free and open-source content management system written in PHP and
 - https://github.com/w0r1i0g1ht/CVE-2022-21661
 - https://github.com/z92g/CVE-2022-21661
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-21661.yaml
diff --git a/2022/CVE-2022-2168.md b/2022/CVE-2022-2168.md
index 2f4d33958f5..351e287a864 100644
--- a/2022/CVE-2022-2168.md
+++ b/2022/CVE-2022-2168.md
@@ -15,3 +15,5 @@ The Download Manager WordPress plugin before 3.2.44 does not escape a generated
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2168.yaml
diff --git a/2022/CVE-2022-21705.md b/2022/CVE-2022-21705.md
index 2de06601eb4..c386893b0e9 100644
--- a/2022/CVE-2022-21705.md
+++ b/2022/CVE-2022-21705.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-21705.yaml
diff --git a/2022/CVE-2022-2174.md b/2022/CVE-2022-2174.md
index 40bf6bb369f..51478a473c5 100644
--- a/2022/CVE-2022-2174.md
+++ b/2022/CVE-2022-2174.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microwebe
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2174.yaml
diff --git a/2022/CVE-2022-2185.md b/2022/CVE-2022-2185.md
index 10a848266e3..75d2fc2222a 100644
--- a/2022/CVE-2022-2185.md
+++ b/2022/CVE-2022-2185.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/ESUAdmin/CVE-2022-2185
 - https://github.com/safe3s/CVE-2022-2185-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2185.yaml
diff --git a/2022/CVE-2022-2187.md b/2022/CVE-2022-2187.md
index 5c4aeaf2656..bd813a62f1f 100644
--- a/2022/CVE-2022-2187.md
+++ b/2022/CVE-2022-2187.md
@@ -15,3 +15,5 @@ The Contact Form 7 Captcha WordPress plugin before 0.1.2 does not escape the $_S
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2187.yaml
diff --git a/2022/CVE-2022-2219.md b/2022/CVE-2022-2219.md
index c7e68de8b2c..b4b1469726c 100644
--- a/2022/CVE-2022-2219.md
+++ b/2022/CVE-2022-2219.md
@@ -15,3 +15,5 @@ The Unyson WordPress plugin before 2.7.27 does not sanitise and escape a paramet
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2219.yaml
diff --git a/2022/CVE-2022-22242.md b/2022/CVE-2022-22242.md
index 80409b0bb2c..15f23132c9c 100644
--- a/2022/CVE-2022-22242.md
+++ b/2022/CVE-2022-22242.md
@@ -27,3 +27,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22242.yaml
diff --git a/2022/CVE-2022-22536.md b/2022/CVE-2022-22536.md
index 58ae90017a2..6980797480c 100644
--- a/2022/CVE-2022-22536.md
+++ b/2022/CVE-2022-22536.md
@@ -35,3 +35,5 @@ SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, AB
 - https://github.com/tes5hacks/SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536
 - https://github.com/tess-ss/SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22536.yaml
diff --git a/2022/CVE-2022-22733.md b/2022/CVE-2022-22733.md
index db46b3b1dbe..77a2b7944d2 100644
--- a/2022/CVE-2022-22733.md
+++ b/2022/CVE-2022-22733.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Zeyad-Azima/CVE-2022-22733
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22733.yaml
diff --git a/2022/CVE-2022-22897.md b/2022/CVE-2022-22897.md
index 4bf540bd8f8..558bb14dadb 100644
--- a/2022/CVE-2022-22897.md
+++ b/2022/CVE-2022-22897.md
@@ -16,3 +16,5 @@ A SQL injection vulnerability in the product_all_one_img and image_product param
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22897.yaml
diff --git a/2022/CVE-2022-2290.md b/2022/CVE-2022-2290.md
index 6dc6bdf270b..6e3f8da759c 100644
--- a/2022/CVE-2022-2290.md
+++ b/2022/CVE-2022-2290.md
@@ -16,3 +16,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository zadam/trilium prior
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2290.yaml
diff --git a/2022/CVE-2022-22947.md b/2022/CVE-2022-22947.md
index c163b5a42da..5678694282d 100644
--- a/2022/CVE-2022-22947.md
+++ b/2022/CVE-2022-22947.md
@@ -93,3 +93,5 @@ In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are v
 - https://github.com/whwlsfb/cve-2022-22947-godzilla-memshell
 - https://github.com/wjl110/Spring_CVE_2022_22947
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22947.yaml
diff --git a/2022/CVE-2022-22954.md b/2022/CVE-2022-22954.md
index 76de792a6ca..b6e111affaa 100644
--- a/2022/CVE-2022-22954.md
+++ b/2022/CVE-2022-22954.md
@@ -45,3 +45,5 @@ VMware Workspace ONE Access and Identity Manager contain a remote code execution
 - https://github.com/tyleraharrison/VMware-CVE-2022-22954-Command-Injector
 - https://github.com/zidanfanshao/vcenter_tools
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22954.yaml
diff --git a/2022/CVE-2022-22956.md b/2022/CVE-2022-22956.md
index fd527f3d462..d3aa3d60d05 100644
--- a/2022/CVE-2022-22956.md
+++ b/2022/CVE-2022-22956.md
@@ -16,3 +16,5 @@ VMware Workspace ONE Access has two authentication bypass vulnerabilities (CVE-2
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22956.yaml
diff --git a/2022/CVE-2022-22963.md b/2022/CVE-2022-22963.md
index d4a2aab89d8..cb3a65ce057 100644
--- a/2022/CVE-2022-22963.md
+++ b/2022/CVE-2022-22963.md
@@ -50,3 +50,5 @@ In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, w
 - https://github.com/sinjap/spring4shell
 - https://github.com/twseptian/cve-2022-22963
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22963.yaml
diff --git a/2022/CVE-2022-22965.md b/2022/CVE-2022-22965.md
index 8261c402e6e..da00212115d 100644
--- a/2022/CVE-2022-22965.md
+++ b/2022/CVE-2022-22965.md
@@ -122,3 +122,5 @@ A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable t
 - https://github.com/zangcc/CVE-2022-22965-rexbb
 - https://github.com/zer0yu/CVE-2022-22965
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22965.yaml
diff --git a/2022/CVE-2022-22972.md b/2022/CVE-2022-22972.md
index 180de8061e5..56848082516 100644
--- a/2022/CVE-2022-22972.md
+++ b/2022/CVE-2022-22972.md
@@ -19,3 +19,5 @@ No PoCs from references.
 - https://github.com/xK0ng/CVE-2022-22972
 - https://github.com/xk4ng/CVE-2022-22972
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22972.yaml
diff --git a/2022/CVE-2022-23102.md b/2022/CVE-2022-23102.md
index a7007392f4e..d6bb9c4c91c 100644
--- a/2022/CVE-2022-23102.md
+++ b/2022/CVE-2022-23102.md
@@ -16,3 +16,5 @@ A vulnerability has been identified in SINEMA Remote Connect Server (All version
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23102.yaml
diff --git a/2022/CVE-2022-23131.md b/2022/CVE-2022-23131.md
index df7cdb2517d..b39c38cd285 100644
--- a/2022/CVE-2022-23131.md
+++ b/2022/CVE-2022-23131.md
@@ -38,3 +38,5 @@ No PoCs from references.
 - https://github.com/wr0x00/cve-2022-23131
 - https://github.com/zwjjustdoit/cve-2022-23131
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23131.yaml
diff --git a/2022/CVE-2022-23134.md b/2022/CVE-2022-23134.md
index 455693f0804..e8cf3ee34e7 100644
--- a/2022/CVE-2022-23134.md
+++ b/2022/CVE-2022-23134.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 - https://github.com/TheN00bBuilder/cve-2022-23134-poc-and-writeup
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23134.yaml
diff --git a/2022/CVE-2022-2314.md b/2022/CVE-2022-2314.md
index 82d8cd029c9..8c9b1384d89 100644
--- a/2022/CVE-2022-2314.md
+++ b/2022/CVE-2022-2314.md
@@ -15,3 +15,5 @@ The VR Calendar WordPress plugin through 2.3.2 lets any user execute arbitrary P
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2314.yaml
diff --git a/2022/CVE-2022-23178.md b/2022/CVE-2022-23178.md
index 94e906eb895..60ccafc7c9a 100644
--- a/2022/CVE-2022-23178.md
+++ b/2022/CVE-2022-23178.md
@@ -15,3 +15,5 @@ An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23178.yaml
diff --git a/2022/CVE-2022-23347.md b/2022/CVE-2022-23347.md
index 13381cf7b95..a55ec889bc2 100644
--- a/2022/CVE-2022-23347.md
+++ b/2022/CVE-2022-23347.md
@@ -15,3 +15,5 @@ BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23347.yaml
diff --git a/2022/CVE-2022-23348.md b/2022/CVE-2022-23348.md
index 87a93161e29..6af7db0fc66 100644
--- a/2022/CVE-2022-23348.md
+++ b/2022/CVE-2022-23348.md
@@ -15,3 +15,5 @@ BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password ha
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23348.yaml
diff --git a/2022/CVE-2022-23397.md b/2022/CVE-2022-23397.md
index b1dc5eaf6fb..2472587ed23 100644
--- a/2022/CVE-2022-23397.md
+++ b/2022/CVE-2022-23397.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23397.yaml
diff --git a/2022/CVE-2022-23544.md b/2022/CVE-2022-23544.md
index 75a3304baab..91bfa50d0ae 100644
--- a/2022/CVE-2022-23544.md
+++ b/2022/CVE-2022-23544.md
@@ -16,3 +16,5 @@ MeterSphere is a one-stop open source continuous testing platform, covering test
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23544.yaml
diff --git a/2022/CVE-2022-2373.md b/2022/CVE-2022-2373.md
index d20b11531be..0f57fb72a88 100644
--- a/2022/CVE-2022-2373.md
+++ b/2022/CVE-2022-2373.md
@@ -15,3 +15,5 @@ The Simply Schedule Appointments WordPress plugin before 1.5.7.7 is missing auth
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2373.yaml
diff --git a/2022/CVE-2022-2376.md b/2022/CVE-2022-2376.md
index d7c386020b5..43adb88942b 100644
--- a/2022/CVE-2022-2376.md
+++ b/2022/CVE-2022-2376.md
@@ -15,3 +15,5 @@ The Directorist WordPress plugin before 7.3.1 discloses the email address of all
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2376.yaml
diff --git a/2022/CVE-2022-23779.md b/2022/CVE-2022-23779.md
index 8eb8ea361f7..fe94d5369f9 100644
--- a/2022/CVE-2022-23779.md
+++ b/2022/CVE-2022-23779.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/Vulnmachines/Zoho_CVE-2022-23779
 - https://github.com/fbusr/CVE-2022-23779
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23779.yaml
diff --git a/2022/CVE-2022-2379.md b/2022/CVE-2022-2379.md
index fc5cc3907f6..96fe81a361e 100644
--- a/2022/CVE-2022-2379.md
+++ b/2022/CVE-2022-2379.md
@@ -15,3 +15,5 @@ The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in i
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2379.yaml
diff --git a/2022/CVE-2022-23808.md b/2022/CVE-2022-23808.md
index ff4af77ba63..6ddccf5b06c 100644
--- a/2022/CVE-2022-23808.md
+++ b/2022/CVE-2022-23808.md
@@ -16,3 +16,5 @@ An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject m
 - https://github.com/dipakpanchal05/CVE-2022-23808
 - https://github.com/dipakpanchal456/CVE-2022-23808
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23808.yaml
diff --git a/2022/CVE-2022-2383.md b/2022/CVE-2022-2383.md
index 824602a4beb..c546e84dcc6 100644
--- a/2022/CVE-2022-2383.md
+++ b/2022/CVE-2022-2383.md
@@ -15,3 +15,5 @@ The Feed Them Social WordPress plugin before 3.0.1 does not sanitise and escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2383.yaml
diff --git a/2022/CVE-2022-23854.md b/2022/CVE-2022-23854.md
index 87b6f189dd3..cae3af9ba96 100644
--- a/2022/CVE-2022-23854.md
+++ b/2022/CVE-2022-23854.md
@@ -15,3 +15,5 @@ AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a pat
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23854.yaml
diff --git a/2022/CVE-2022-23881.md b/2022/CVE-2022-23881.md
index 455f4782806..47fa0557e8e 100644
--- a/2022/CVE-2022-23881.md
+++ b/2022/CVE-2022-23881.md
@@ -15,3 +15,5 @@ ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution (RCE)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23881.yaml
diff --git a/2022/CVE-2022-23944.md b/2022/CVE-2022-23944.md
index d7a9a0da7da..da9ebc08507 100644
--- a/2022/CVE-2022-23944.md
+++ b/2022/CVE-2022-23944.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23944.yaml
diff --git a/2022/CVE-2022-24086.md b/2022/CVE-2022-24086.md
index d598e01f156..b71c4a9958c 100644
--- a/2022/CVE-2022-24086.md
+++ b/2022/CVE-2022-24086.md
@@ -24,3 +24,5 @@ No PoCs from references.
 - https://github.com/rxerium/CVE-2022-24086
 - https://github.com/seymanurmutlu/CVE-2022-24086-CVE-2022-24087
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24086.yaml
diff --git a/2022/CVE-2022-24112.md b/2022/CVE-2022-24112.md
index a7599bdf050..2b5c1a37c34 100644
--- a/2022/CVE-2022-24112.md
+++ b/2022/CVE-2022-24112.md
@@ -30,3 +30,5 @@ An attacker can abuse the batch-requests plugin to send requests to bypass the I
 - https://github.com/kavishkagihan/CVE-2022-24112-POC
 - https://github.com/twseptian/cve-2022-24112
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24112.yaml
diff --git a/2022/CVE-2022-24124.md b/2022/CVE-2022-24124.md
index 0174332d5ba..2bb925349dd 100644
--- a/2022/CVE-2022-24124.md
+++ b/2022/CVE-2022-24124.md
@@ -24,3 +24,5 @@ The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related
 - https://github.com/b1gdog/cve_2022_24124
 - https://github.com/cukw/CVE-2022-24124_POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24124.yaml
diff --git a/2022/CVE-2022-24129.md b/2022/CVE-2022-24129.md
index 7cf19486c5a..f91803c435a 100644
--- a/2022/CVE-2022-24129.md
+++ b/2022/CVE-2022-24129.md
@@ -15,3 +15,5 @@ The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-s
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24129.yaml
diff --git a/2022/CVE-2022-2414.md b/2022/CVE-2022-2414.md
index 5ad91724568..ebb06c9834f 100644
--- a/2022/CVE-2022-2414.md
+++ b/2022/CVE-2022-2414.md
@@ -20,3 +20,5 @@ No PoCs from references.
 - https://github.com/strikersatya/CVE-2022-2414
 - https://github.com/superhac/CVE-2022-2414-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2414.yaml
diff --git a/2022/CVE-2022-24181.md b/2022/CVE-2022-24181.md
index d105b7048d3..e42fb72021c 100644
--- a/2022/CVE-2022-24181.md
+++ b/2022/CVE-2022-24181.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/comrade99/CVE-2022-24181
 - https://github.com/cyberhawk000/CVE-2022-24181
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24181.yaml
diff --git a/2022/CVE-2022-24223.md b/2022/CVE-2022-24223.md
index 91c02d29df9..51dc83ba726 100644
--- a/2022/CVE-2022-24223.md
+++ b/2022/CVE-2022-24223.md
@@ -15,3 +15,5 @@ AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24223.yaml
diff --git a/2022/CVE-2022-24260.md b/2022/CVE-2022-24260.md
index e9acd1caf17..af6490d273a 100644
--- a/2022/CVE-2022-24260.md
+++ b/2022/CVE-2022-24260.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24260.yaml
diff --git a/2022/CVE-2022-24264.md b/2022/CVE-2022-24264.md
index 232c21d3345..b35c603ca66 100644
--- a/2022/CVE-2022-24264.md
+++ b/2022/CVE-2022-24264.md
@@ -15,3 +15,5 @@ Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /admin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24264.yaml
diff --git a/2022/CVE-2022-24265.md b/2022/CVE-2022-24265.md
index 9a8f4154aa1..6e44a4270aa 100644
--- a/2022/CVE-2022-24265.md
+++ b/2022/CVE-2022-24265.md
@@ -15,3 +15,5 @@ Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /admin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24265.yaml
diff --git a/2022/CVE-2022-24266.md b/2022/CVE-2022-24266.md
index e4af14b329d..f51065f1341 100644
--- a/2022/CVE-2022-24266.md
+++ b/2022/CVE-2022-24266.md
@@ -15,3 +15,5 @@ Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /admin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24266.yaml
diff --git a/2022/CVE-2022-24288.md b/2022/CVE-2022-24288.md
index 2dd5ed380f1..ce68f526ad7 100644
--- a/2022/CVE-2022-24288.md
+++ b/2022/CVE-2022-24288.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24288.yaml
diff --git a/2022/CVE-2022-24384.md b/2022/CVE-2022-24384.md
index 3ea80780f27..0fb63028a73 100644
--- a/2022/CVE-2022-24384.md
+++ b/2022/CVE-2022-24384.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24384.yaml
diff --git a/2022/CVE-2022-2461.md b/2022/CVE-2022-2461.md
index 96d6b9c3faa..f3b91e05aa8 100644
--- a/2022/CVE-2022-2461.md
+++ b/2022/CVE-2022-2461.md
@@ -16,3 +16,5 @@ The Transposh WordPress Translation plugin for WordPress is vulnerable to unauth
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2461.yaml
diff --git a/2022/CVE-2022-2462.md b/2022/CVE-2022-2462.md
index 86cbe4d8f96..ad7406b9fa8 100644
--- a/2022/CVE-2022-2462.md
+++ b/2022/CVE-2022-2462.md
@@ -15,3 +15,5 @@ The Transposh WordPress Translation plugin for WordPress is vulnerable to sensit
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2462.yaml
diff --git a/2022/CVE-2022-24627.md b/2022/CVE-2022-24627.md
index 11daeb98cc2..5857ba8f262 100644
--- a/2022/CVE-2022-24627.md
+++ b/2022/CVE-2022-24627.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24627.yaml
diff --git a/2022/CVE-2022-24637.md b/2022/CVE-2022-24637.md
index fc1a54fea5c..dfb8108ceea 100644
--- a/2022/CVE-2022-24637.md
+++ b/2022/CVE-2022-24637.md
@@ -22,3 +22,5 @@ Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker
 - https://github.com/hupe1980/CVE-2022-24637
 - https://github.com/icebreack/CVE-2022-24637
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24637.yaml
diff --git a/2022/CVE-2022-2467.md b/2022/CVE-2022-2467.md
index 78d280ad801..4910b7620db 100644
--- a/2022/CVE-2022-2467.md
+++ b/2022/CVE-2022-2467.md
@@ -15,3 +15,5 @@ A vulnerability has been found in SourceCodester Garage Management System 1.0 an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2467.yaml
diff --git a/2022/CVE-2022-24681.md b/2022/CVE-2022-24681.md
index 03b1dcc363a..b5ec09e0dbe 100644
--- a/2022/CVE-2022-24681.md
+++ b/2022/CVE-2022-24681.md
@@ -15,3 +15,5 @@ Zoho ManageEngine ADSelfService Plus before 6121 allows XSS via the welcome name
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24681.yaml
diff --git a/2022/CVE-2022-24682.md b/2022/CVE-2022-24682.md
index 744d56b7106..51913bdacc3 100644
--- a/2022/CVE-2022-24682.md
+++ b/2022/CVE-2022-24682.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24682.yaml
diff --git a/2022/CVE-2022-24706.md b/2022/CVE-2022-24706.md
index abccc8d82aa..46692c21e18 100644
--- a/2022/CVE-2022-24706.md
+++ b/2022/CVE-2022-24706.md
@@ -21,3 +21,5 @@ In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured d
 - https://github.com/sadshade/CVE-2022-24706-CouchDB-Exploit
 - https://github.com/superzerosec/CVE-2022-24706
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2022/CVE-2022-24706.yaml
diff --git a/2022/CVE-2022-24716.md b/2022/CVE-2022-24716.md
index 2575286008a..7967c49dfec 100644
--- a/2022/CVE-2022-24716.md
+++ b/2022/CVE-2022-24716.md
@@ -17,3 +17,5 @@ Icinga Web 2 is an open source monitoring web interface, framework and command-l
 - https://github.com/doosec101/CVE-2022-24716
 - https://github.com/pumpkinpiteam/CVE-2022-24716
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24716.yaml
diff --git a/2022/CVE-2022-24816.md b/2022/CVE-2022-24816.md
index 8730a104fca..886c54d6220 100644
--- a/2022/CVE-2022-24816.md
+++ b/2022/CVE-2022-24816.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 - https://github.com/c1ph3rbyt3/CVE-2022-24816
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24816.yaml
diff --git a/2022/CVE-2022-24819.md b/2022/CVE-2022-24819.md
index f4ab48dac5b..a98b84c71e5 100644
--- a/2022/CVE-2022-24819.md
+++ b/2022/CVE-2022-24819.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24819.yaml
diff --git a/2022/CVE-2022-24856.md b/2022/CVE-2022-24856.md
index beae42956c1..cabacc5a45d 100644
--- a/2022/CVE-2022-24856.md
+++ b/2022/CVE-2022-24856.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24856.yaml
diff --git a/2022/CVE-2022-2486.md b/2022/CVE-2022-2486.md
index b39e12f8158..eb24e8f3359 100644
--- a/2022/CVE-2022-2486.md
+++ b/2022/CVE-2022-2486.md
@@ -17,3 +17,5 @@ A vulnerability, which was classified as critical, was found in WAVLINK WN535K2
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2486.yaml
diff --git a/2022/CVE-2022-2487.md b/2022/CVE-2022-2487.md
index 4285d74b26d..f9ab8fba7ae 100644
--- a/2022/CVE-2022-2487.md
+++ b/2022/CVE-2022-2487.md
@@ -17,3 +17,5 @@ A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2487.yaml
diff --git a/2022/CVE-2022-2488.md b/2022/CVE-2022-2488.md
index aff95b3c297..d010fda2453 100644
--- a/2022/CVE-2022-2488.md
+++ b/2022/CVE-2022-2488.md
@@ -16,3 +16,5 @@ A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as criti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2488.yaml
diff --git a/2022/CVE-2022-24899.md b/2022/CVE-2022-24899.md
index 09706f30abb..eaf244472b4 100644
--- a/2022/CVE-2022-24899.md
+++ b/2022/CVE-2022-24899.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24899.yaml
diff --git a/2022/CVE-2022-24900.md b/2022/CVE-2022-24900.md
index c8307b71bf3..fb6bd90eaaa 100644
--- a/2022/CVE-2022-24900.md
+++ b/2022/CVE-2022-24900.md
@@ -18,3 +18,5 @@ Piano LED Visualizer is software that allows LED lights to light up as a person
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24900.yaml
diff --git a/2022/CVE-2022-24990.md b/2022/CVE-2022-24990.md
index fffd63999dc..5eacf815008 100644
--- a/2022/CVE-2022-24990.md
+++ b/2022/CVE-2022-24990.md
@@ -22,3 +22,5 @@ TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the admin
 - https://github.com/jsongmax/terraMaster-CVE-2022-24990
 - https://github.com/lishang520/CVE-2022-24990
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24990.yaml
diff --git a/2022/CVE-2022-25061.md b/2022/CVE-2022-25061.md
index 78d3efd1ef1..036dc80b211 100644
--- a/2022/CVE-2022-25061.md
+++ b/2022/CVE-2022-25061.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/exploitwritter/CVE-2022-25061
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25061.yaml
diff --git a/2022/CVE-2022-25082.md b/2022/CVE-2022-25082.md
index 1efd0da623b..b03108f6466 100644
--- a/2022/CVE-2022-25082.md
+++ b/2022/CVE-2022-25082.md
@@ -15,3 +15,5 @@ TOTOLink A950RG V5.9c.4050_B20190424 and V4.1.2cu.5204_B20210112 were discovered
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25082.yaml
diff --git a/2022/CVE-2022-25148.md b/2022/CVE-2022-25148.md
index 397cd2bffd6..7fa500ac308 100644
--- a/2022/CVE-2022-25148.md
+++ b/2022/CVE-2022-25148.md
@@ -16,3 +16,5 @@ The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insuffi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25148.yaml
diff --git a/2022/CVE-2022-25149.md b/2022/CVE-2022-25149.md
index af6b2804a45..6fee0e8850a 100644
--- a/2022/CVE-2022-25149.md
+++ b/2022/CVE-2022-25149.md
@@ -15,3 +15,5 @@ The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insuffi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25149.yaml
diff --git a/2022/CVE-2022-25216.md b/2022/CVE-2022-25216.md
index 628f676fd1d..347e0e250d9 100644
--- a/2022/CVE-2022-25216.md
+++ b/2022/CVE-2022-25216.md
@@ -15,3 +15,5 @@ An absolute path traversal vulnerability allows a remote attacker to download an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25216.yaml
diff --git a/2022/CVE-2022-25226.md b/2022/CVE-2022-25226.md
index 7734350223a..746cfeb5367 100644
--- a/2022/CVE-2022-25226.md
+++ b/2022/CVE-2022-25226.md
@@ -15,3 +15,5 @@ ThinVNC version 1.0b1 allows an unauthenticated user to bypass the authenticatio
 #### Github
 - https://github.com/krill-x7/CVE-2022-25226
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25226.yaml
diff --git a/2022/CVE-2022-25237.md b/2022/CVE-2022-25237.md
index 14c05bda4c8..bc3366552ab 100644
--- a/2022/CVE-2022-25237.md
+++ b/2022/CVE-2022-25237.md
@@ -15,3 +15,5 @@ Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerabi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25237.yaml
diff --git a/2022/CVE-2022-25322.md b/2022/CVE-2022-25322.md
index 8d97165bf49..9f01f34e28c 100644
--- a/2022/CVE-2022-25322.md
+++ b/2022/CVE-2022-25322.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25322.yaml
diff --git a/2022/CVE-2022-25323.md b/2022/CVE-2022-25323.md
index d0e0d8a083c..d1eceab1379 100644
--- a/2022/CVE-2022-25323.md
+++ b/2022/CVE-2022-25323.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25323.yaml
diff --git a/2022/CVE-2022-2535.md b/2022/CVE-2022-2535.md
index 551e99acb4a..b0dabb63a40 100644
--- a/2022/CVE-2022-2535.md
+++ b/2022/CVE-2022-2535.md
@@ -15,3 +15,5 @@ The SearchWP Live Ajax Search WordPress plugin before 1.6.2 does not ensure that
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2535.yaml
diff --git a/2022/CVE-2022-25356.md b/2022/CVE-2022-25356.md
index 6574d02dd1f..dd0c30c3752 100644
--- a/2022/CVE-2022-25356.md
+++ b/2022/CVE-2022-25356.md
@@ -15,3 +15,5 @@ Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=log
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25356.yaml
diff --git a/2022/CVE-2022-2544.md b/2022/CVE-2022-2544.md
index a78c9836235..9e3f704a27d 100644
--- a/2022/CVE-2022-2544.md
+++ b/2022/CVE-2022-2544.md
@@ -16,3 +16,5 @@ The Ninja Job Board WordPress plugin before 1.3.3 does not protect the directory
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2544.yaml
diff --git a/2022/CVE-2022-2546.md b/2022/CVE-2022-2546.md
index e9f6e739557..7e7a3a6584c 100644
--- a/2022/CVE-2022-2546.md
+++ b/2022/CVE-2022-2546.md
@@ -15,3 +15,5 @@ The All-in-One WP Migration WordPress plugin before 7.63 uses the wrong content
 #### Github
 - https://github.com/OpenXP-Research/CVE-2022-2546
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2546.yaml
diff --git a/2022/CVE-2022-25481.md b/2022/CVE-2022-25481.md
index ba5c9089613..1659c160b1e 100644
--- a/2022/CVE-2022-25481.md
+++ b/2022/CVE-2022-25481.md
@@ -16,3 +16,5 @@ ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO
 #### Github
 - https://github.com/luck-ying/Goby2.0-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25481.yaml
diff --git a/2022/CVE-2022-25485.md b/2022/CVE-2022-25485.md
index 3b894cf2c11..31e7a3fb7f8 100644
--- a/2022/CVE-2022-25485.md
+++ b/2022/CVE-2022-25485.md
@@ -15,3 +15,5 @@ CuppaCMS v1.0 was discovered to contain a local file inclusion via the url param
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25485.yaml
diff --git a/2022/CVE-2022-25486.md b/2022/CVE-2022-25486.md
index 071503ae949..0e61903eebf 100644
--- a/2022/CVE-2022-25486.md
+++ b/2022/CVE-2022-25486.md
@@ -17,3 +17,5 @@ CuppaCMS v1.0 was discovered to contain a local file inclusion via the url param
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25486.yaml
diff --git a/2022/CVE-2022-25487.md b/2022/CVE-2022-25487.md
index 9f6a8ec9b3a..79a30fd3315 100644
--- a/2022/CVE-2022-25487.md
+++ b/2022/CVE-2022-25487.md
@@ -16,3 +16,5 @@ Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerabil
 #### Github
 - https://github.com/shikari00007/Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25487.yaml
diff --git a/2022/CVE-2022-25488.md b/2022/CVE-2022-25488.md
index b9bb8b6b35b..2d6cf3c4364 100644
--- a/2022/CVE-2022-25488.md
+++ b/2022/CVE-2022-25488.md
@@ -15,3 +15,5 @@ Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25488.yaml
diff --git a/2022/CVE-2022-25489.md b/2022/CVE-2022-25489.md
index f3cee141975..02e5b618512 100644
--- a/2022/CVE-2022-25489.md
+++ b/2022/CVE-2022-25489.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25489.yaml
diff --git a/2022/CVE-2022-25497.md b/2022/CVE-2022-25497.md
index b17ad06cac2..abbeb20236f 100644
--- a/2022/CVE-2022-25497.md
+++ b/2022/CVE-2022-25497.md
@@ -15,3 +15,5 @@ CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy func
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25497.yaml
diff --git a/2022/CVE-2022-2551.md b/2022/CVE-2022-2551.md
index ca9125292a3..999cb906152 100644
--- a/2022/CVE-2022-2551.md
+++ b/2022/CVE-2022-2551.md
@@ -16,3 +16,5 @@ The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2551.yaml
diff --git a/2022/CVE-2022-2552.md b/2022/CVE-2022-2552.md
index e84f63d6190..2723ec4130f 100644
--- a/2022/CVE-2022-2552.md
+++ b/2022/CVE-2022-2552.md
@@ -17,3 +17,5 @@ The Duplicator WordPress plugin before 1.4.7 does not authenticate or authorize
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2552.yaml
diff --git a/2022/CVE-2022-25568.md b/2022/CVE-2022-25568.md
index cf6630d65e1..005fe31fae5 100644
--- a/2022/CVE-2022-25568.md
+++ b/2022/CVE-2022-25568.md
@@ -15,3 +15,5 @@ MotionEye v0.42.1 and below allows attackers to access sensitive information via
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25568.yaml
diff --git a/2022/CVE-2022-2599.md b/2022/CVE-2022-2599.md
index 31f38ecfe11..8d3788d1d41 100644
--- a/2022/CVE-2022-2599.md
+++ b/2022/CVE-2022-2599.md
@@ -15,3 +15,5 @@ The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.21.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2599.yaml
diff --git a/2022/CVE-2022-26134.md b/2022/CVE-2022-26134.md
index de55a94b351..5555c82854b 100644
--- a/2022/CVE-2022-26134.md
+++ b/2022/CVE-2022-26134.md
@@ -101,3 +101,5 @@ In affected versions of Confluence Server and Data Center, an OGNL injection vul
 - https://github.com/yigexioabai/CVE-2022-26134-cve1
 - https://github.com/yyqxi/CVE-2022-26134
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26134.yaml
diff --git a/2022/CVE-2022-26138.md b/2022/CVE-2022-26138.md
index eecb831dfeb..20fdde36732 100644
--- a/2022/CVE-2022-26138.md
+++ b/2022/CVE-2022-26138.md
@@ -21,3 +21,5 @@ No PoCs from references.
 - https://github.com/shavchen/CVE-2022-26138
 - https://github.com/z92g/CVE-2022-26138
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26138.yaml
diff --git a/2022/CVE-2022-26143.md b/2022/CVE-2022-26143.md
index fc747eccb4b..61100b1229d 100644
--- a/2022/CVE-2022-26143.md
+++ b/2022/CVE-2022-26143.md
@@ -17,3 +17,5 @@ The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiV
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26143.yaml
diff --git a/2022/CVE-2022-26148.md b/2022/CVE-2022-26148.md
index e03e84a8ae6..b2001a306b2 100644
--- a/2022/CVE-2022-26148.md
+++ b/2022/CVE-2022-26148.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26148.yaml
diff --git a/2022/CVE-2022-26159.md b/2022/CVE-2022-26159.md
index 3d45f33fa1d..7618ee2b655 100644
--- a/2022/CVE-2022-26159.md
+++ b/2022/CVE-2022-26159.md
@@ -15,3 +15,5 @@ The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenti
 #### Github
 - https://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26159.yaml
diff --git a/2022/CVE-2022-26233.md b/2022/CVE-2022-26233.md
index 125be4532a9..a236e8cc669 100644
--- a/2022/CVE-2022-26233.md
+++ b/2022/CVE-2022-26233.md
@@ -16,3 +16,5 @@ Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26233.yaml
diff --git a/2022/CVE-2022-26263.md b/2022/CVE-2022-26263.md
index 869ffa4099a..ad6a89afa20 100644
--- a/2022/CVE-2022-26263.md
+++ b/2022/CVE-2022-26263.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26263.yaml
diff --git a/2022/CVE-2022-2627.md b/2022/CVE-2022-2627.md
index 5b2ef21930b..26746794586 100644
--- a/2022/CVE-2022-2627.md
+++ b/2022/CVE-2022-2627.md
@@ -15,3 +15,5 @@ The Newspaper WordPress theme before 12 does not sanitise a parameter before out
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2627.yaml
diff --git a/2022/CVE-2022-26271.md b/2022/CVE-2022-26271.md
index 21f559b06fd..94115267898 100644
--- a/2022/CVE-2022-26271.md
+++ b/2022/CVE-2022-26271.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26271.yaml
diff --git a/2022/CVE-2022-2633.md b/2022/CVE-2022-2633.md
index 0119bccee88..925000346f1 100644
--- a/2022/CVE-2022-2633.md
+++ b/2022/CVE-2022-2633.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2633.yaml
diff --git a/2022/CVE-2022-26352.md b/2022/CVE-2022-26352.md
index ab460b3eba8..648eed730eb 100644
--- a/2022/CVE-2022-26352.md
+++ b/2022/CVE-2022-26352.md
@@ -17,3 +17,5 @@ An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02.
 #### Github
 - https://github.com/KatherineHuangg/metasploit-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26352.yaml
diff --git a/2022/CVE-2022-26564.md b/2022/CVE-2022-26564.md
index e1b4f1537b2..6468f00f176 100644
--- a/2022/CVE-2022-26564.md
+++ b/2022/CVE-2022-26564.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26564.yaml
diff --git a/2022/CVE-2022-26585.md b/2022/CVE-2022-26585.md
index bd206ef0353..c9a9f3c14be 100644
--- a/2022/CVE-2022-26585.md
+++ b/2022/CVE-2022-26585.md
@@ -15,3 +15,5 @@ Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability via
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26585.yaml
diff --git a/2022/CVE-2022-26833.md b/2022/CVE-2022-26833.md
index 46d0e4cd0a5..e3d39135ac9 100644
--- a/2022/CVE-2022-26833.md
+++ b/2022/CVE-2022-26833.md
@@ -15,3 +15,5 @@ An improper authentication vulnerability exists in the REST API functionality of
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26833.yaml
diff --git a/2022/CVE-2022-26960.md b/2022/CVE-2022-26960.md
index 550f7275cbb..bd0e4b0d892 100644
--- a/2022/CVE-2022-26960.md
+++ b/2022/CVE-2022-26960.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26960.yaml
diff --git a/2022/CVE-2022-27043.md b/2022/CVE-2022-27043.md
index 2d5e737d627..70bec644995 100644
--- a/2022/CVE-2022-27043.md
+++ b/2022/CVE-2022-27043.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27043.yaml
diff --git a/2022/CVE-2022-27228.md b/2022/CVE-2022-27228.md
index 8bb81b01f8f..6dcedeca2c3 100644
--- a/2022/CVE-2022-27228.md
+++ b/2022/CVE-2022-27228.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/JackPot777/bitrix
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27228.yaml
diff --git a/2022/CVE-2022-2733.md b/2022/CVE-2022-2733.md
index 50416922909..6aeac26dd23 100644
--- a/2022/CVE-2022-2733.md
+++ b/2022/CVE-2022-2733.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prio
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2733.yaml
diff --git a/2022/CVE-2022-2756.md b/2022/CVE-2022-2756.md
index de622760c39..a54ce4fa4c9 100644
--- a/2022/CVE-2022-2756.md
+++ b/2022/CVE-2022-2756.md
@@ -15,3 +15,5 @@ Server-Side Request Forgery (SSRF) in GitHub repository kareadita/kavita prior t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2756.yaml
diff --git a/2022/CVE-2022-27593.md b/2022/CVE-2022-27593.md
index 8903409432b..f128b21e833 100644
--- a/2022/CVE-2022-27593.md
+++ b/2022/CVE-2022-27593.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27593.yaml
diff --git a/2022/CVE-2022-27849.md b/2022/CVE-2022-27849.md
index 519ae8721af..eadd056cbd4 100644
--- a/2022/CVE-2022-27849.md
+++ b/2022/CVE-2022-27849.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27849.yaml
diff --git a/2022/CVE-2022-27924.md b/2022/CVE-2022-27924.md
index bbe8041ca79..fcfd1810416 100644
--- a/2022/CVE-2022-27924.md
+++ b/2022/CVE-2022-27924.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27924.yaml
diff --git a/2022/CVE-2022-27926.md b/2022/CVE-2022-27926.md
index ccb994b1c95..8fe7d1ed9e9 100644
--- a/2022/CVE-2022-27926.md
+++ b/2022/CVE-2022-27926.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27926.yaml
diff --git a/2022/CVE-2022-27927.md b/2022/CVE-2022-27927.md
index 2c147c7f9e0..a9e781cb441 100644
--- a/2022/CVE-2022-27927.md
+++ b/2022/CVE-2022-27927.md
@@ -16,3 +16,5 @@ A SQL injection vulnerability exists in Microfinance Management System 1.0 when
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27927.yaml
diff --git a/2022/CVE-2022-27984.md b/2022/CVE-2022-27984.md
index d38dc9c8b8d..630a5109ef5 100644
--- a/2022/CVE-2022-27984.md
+++ b/2022/CVE-2022-27984.md
@@ -15,3 +15,5 @@ CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via the me
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27984.yaml
diff --git a/2022/CVE-2022-27985.md b/2022/CVE-2022-27985.md
index f644b06a656..daa9c4b7ebf 100644
--- a/2022/CVE-2022-27985.md
+++ b/2022/CVE-2022-27985.md
@@ -15,3 +15,5 @@ CuppaCMS v1.0 was discovered to contain a SQL injection vulnerability via /admin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27985.yaml
diff --git a/2022/CVE-2022-28032.md b/2022/CVE-2022-28032.md
index 6562a5d6cc4..533fd8ee941 100644
--- a/2022/CVE-2022-28032.md
+++ b/2022/CVE-2022-28032.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/bornrootcom/fictional-memory
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28032.yaml
diff --git a/2022/CVE-2022-28033.md b/2022/CVE-2022-28033.md
index 2f07b8d98c5..b752a5403c8 100644
--- a/2022/CVE-2022-28033.md
+++ b/2022/CVE-2022-28033.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28033.yaml
diff --git a/2022/CVE-2022-28079.md b/2022/CVE-2022-28079.md
index df5a7b8b7a3..51354902ec1 100644
--- a/2022/CVE-2022-28079.md
+++ b/2022/CVE-2022-28079.md
@@ -16,3 +16,5 @@ College Management System v1.0 was discovered to contain a SQL injection vulnera
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28079.yaml
diff --git a/2022/CVE-2022-28080.md b/2022/CVE-2022-28080.md
index c6721c5d812..2f64950aa5d 100644
--- a/2022/CVE-2022-28080.md
+++ b/2022/CVE-2022-28080.md
@@ -17,3 +17,5 @@ Royal Event Management System v1.0 was discovered to contain a SQL injection vul
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28080.yaml
diff --git a/2022/CVE-2022-28117.md b/2022/CVE-2022-28117.md
index 0c535c15f11..4be4971eada 100644
--- a/2022/CVE-2022-28117.md
+++ b/2022/CVE-2022-28117.md
@@ -17,3 +17,5 @@ A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4
 - https://github.com/cheshireca7/CVE-2022-28117
 - https://github.com/kimstars/POC-CVE-2022-28117
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28117.yaml
diff --git a/2022/CVE-2022-28219.md b/2022/CVE-2022-28219.md
index 6839faaec90..d055ffb0072 100644
--- a/2022/CVE-2022-28219.md
+++ b/2022/CVE-2022-28219.md
@@ -19,3 +19,5 @@ Cewolf in Zoho ManageEngine ADAudit Plus before 7060 is vulnerable to an unauthe
 - https://github.com/horizon3ai/CVE-2022-28219
 - https://github.com/rbowes-r7/manageengine-auditad-cve-2022-28219
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28219.yaml
diff --git a/2022/CVE-2022-28290.md b/2022/CVE-2022-28290.md
index bee0e0da5d5..73d0248979e 100644
--- a/2022/CVE-2022-28290.md
+++ b/2022/CVE-2022-28290.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28290.yaml
diff --git a/2022/CVE-2022-28363.md b/2022/CVE-2022-28363.md
index 53e39577292..ff3a12c598e 100644
--- a/2022/CVE-2022-28363.md
+++ b/2022/CVE-2022-28363.md
@@ -16,3 +16,5 @@ Reprise License Manager 14.2 is affected by a reflected cross-site scripting vul
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28363.yaml
diff --git a/2022/CVE-2022-28365.md b/2022/CVE-2022-28365.md
index 115fb62629c..e709f2eed3d 100644
--- a/2022/CVE-2022-28365.md
+++ b/2022/CVE-2022-28365.md
@@ -16,3 +16,5 @@ Reprise License Manager 14.2 is affected by an Information Disclosure vulnerabil
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28365.yaml
diff --git a/2022/CVE-2022-28508.md b/2022/CVE-2022-28508.md
index 39b7c509130..d91adc5a933 100644
--- a/2022/CVE-2022-28508.md
+++ b/2022/CVE-2022-28508.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/YSah44/CVE-2022-28508
 - https://github.com/YavuzSahbaz/CVE-2022-28508
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28508.yaml
diff --git a/2022/CVE-2022-2863.md b/2022/CVE-2022-2863.md
index 5e6ddd93edb..65ee9e7c309 100644
--- a/2022/CVE-2022-2863.md
+++ b/2022/CVE-2022-2863.md
@@ -16,3 +16,5 @@ The Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2863.yaml
diff --git a/2022/CVE-2022-28666.md b/2022/CVE-2022-28666.md
index b852ebce92a..c5cb07cc4ad 100644
--- a/2022/CVE-2022-28666.md
+++ b/2022/CVE-2022-28666.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28666.yaml
diff --git a/2022/CVE-2022-28923.md b/2022/CVE-2022-28923.md
index a1602d52d21..68e7805e5fa 100644
--- a/2022/CVE-2022-28923.md
+++ b/2022/CVE-2022-28923.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28923.yaml
diff --git a/2022/CVE-2022-28955.md b/2022/CVE-2022-28955.md
index 2b3166de4ea..a9f286946b5 100644
--- a/2022/CVE-2022-28955.md
+++ b/2022/CVE-2022-28955.md
@@ -15,3 +15,5 @@ An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attack
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28955.yaml
diff --git a/2022/CVE-2022-28987.md b/2022/CVE-2022-28987.md
index c2da99d0dd1..db555b8f3e0 100644
--- a/2022/CVE-2022-28987.md
+++ b/2022/CVE-2022-28987.md
@@ -15,3 +15,5 @@ Zoho ManageEngine ADSelfService Plus before 6202 allows attackers to perform use
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28987.yaml
diff --git a/2022/CVE-2022-29004.md b/2022/CVE-2022-29004.md
index 6c4712eccde..5b1b17d1906 100644
--- a/2022/CVE-2022-29004.md
+++ b/2022/CVE-2022-29004.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/sudoninja-noob/CVE-2022-29004
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29004.yaml
diff --git a/2022/CVE-2022-29005.md b/2022/CVE-2022-29005.md
index bf5e3a3dea1..d04aeefc187 100644
--- a/2022/CVE-2022-29005.md
+++ b/2022/CVE-2022-29005.md
@@ -15,3 +15,5 @@ Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/
 #### Github
 - https://github.com/sudoninja-noob/CVE-2022-29005
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29005.yaml
diff --git a/2022/CVE-2022-29006.md b/2022/CVE-2022-29006.md
index 9e257c77ae8..3d08c9aa8af 100644
--- a/2022/CVE-2022-29006.md
+++ b/2022/CVE-2022-29006.md
@@ -15,3 +15,5 @@ Multiple SQL injection vulnerabilities via the username and password parameters
 #### Github
 - https://github.com/sudoninja-noob/CVE-2022-29006
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29006.yaml
diff --git a/2022/CVE-2022-29007.md b/2022/CVE-2022-29007.md
index 7fd9b1072ae..9bdebf090bc 100644
--- a/2022/CVE-2022-29007.md
+++ b/2022/CVE-2022-29007.md
@@ -15,3 +15,5 @@ Multiple SQL injection vulnerabilities via the username and password parameters
 #### Github
 - https://github.com/sudoninja-noob/CVE-2022-29007
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29007.yaml
diff --git a/2022/CVE-2022-29009.md b/2022/CVE-2022-29009.md
index d1723cb3419..7fd6d1f2e5f 100644
--- a/2022/CVE-2022-29009.md
+++ b/2022/CVE-2022-29009.md
@@ -15,3 +15,5 @@ Multiple SQL injection vulnerabilities via the username and password parameters
 #### Github
 - https://github.com/sudoninja-noob/CVE-2022-29009
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29009.yaml
diff --git a/2022/CVE-2022-29013.md b/2022/CVE-2022-29013.md
index d8843148c72..469bde36e57 100644
--- a/2022/CVE-2022-29013.md
+++ b/2022/CVE-2022-29013.md
@@ -16,3 +16,5 @@ A command injection in the command parameter of Razer Sila Gaming Router v2.0.44
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29013.yaml
diff --git a/2022/CVE-2022-29014.md b/2022/CVE-2022-29014.md
index 5aa83f29a5a..ce2fa73b1f9 100644
--- a/2022/CVE-2022-29014.md
+++ b/2022/CVE-2022-29014.md
@@ -16,3 +16,5 @@ A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441_api-2.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29014.yaml
diff --git a/2022/CVE-2022-29078.md b/2022/CVE-2022-29078.md
index 27cf1646608..81e8671d778 100644
--- a/2022/CVE-2022-29078.md
+++ b/2022/CVE-2022-29078.md
@@ -41,3 +41,5 @@ The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows ser
 - https://github.com/yalinjob/express-js-ya
 - https://github.com/yoitsmikeho/express-js-appbundle
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29078.yaml
diff --git a/2022/CVE-2022-29081.md b/2022/CVE-2022-29081.md
index 8fcc99a5065..4ebfb114112 100644
--- a/2022/CVE-2022-29081.md
+++ b/2022/CVE-2022-29081.md
@@ -15,3 +15,5 @@ Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29081.yaml
diff --git a/2022/CVE-2022-29153.md b/2022/CVE-2022-29153.md
index 539bc988e86..e61fe05a670 100644
--- a/2022/CVE-2022-29153.md
+++ b/2022/CVE-2022-29153.md
@@ -16,3 +16,5 @@ HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29153.yaml
diff --git a/2022/CVE-2022-29272.md b/2022/CVE-2022-29272.md
index b9d2a5057b3..e0ca2daf035 100644
--- a/2022/CVE-2022-29272.md
+++ b/2022/CVE-2022-29272.md
@@ -15,3 +15,5 @@ In Nagios XI through 5.8.5, an open redirect vulnerability exists in the login f
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29272.yaml
diff --git a/2022/CVE-2022-29298.md b/2022/CVE-2022-29298.md
index e7ccebfa45a..4b195a17b9d 100644
--- a/2022/CVE-2022-29298.md
+++ b/2022/CVE-2022-29298.md
@@ -15,3 +15,5 @@ SolarView Compact ver.6.00 allows attackers to access sensitive files via direct
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29298.yaml
diff --git a/2022/CVE-2022-29303.md b/2022/CVE-2022-29303.md
index aa0a413a4fc..c1657cc2c9b 100644
--- a/2022/CVE-2022-29303.md
+++ b/2022/CVE-2022-29303.md
@@ -19,3 +19,5 @@ SolarView Compact ver.6.00 was discovered to contain a command injection vulnera
 - https://github.com/Chocapikk/CVE-2022-29303
 - https://github.com/emanueldosreis/nmap-CVE-2023-23333-exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29303.yaml
diff --git a/2022/CVE-2022-29349.md b/2022/CVE-2022-29349.md
index 963798e3bf1..4e93be405b1 100644
--- a/2022/CVE-2022-29349.md
+++ b/2022/CVE-2022-29349.md
@@ -15,3 +15,5 @@ kkFileView v4.0.0 was discovered to contain a cross-site scripting (XSS) vulnera
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29349.yaml
diff --git a/2022/CVE-2022-29383.md b/2022/CVE-2022-29383.md
index 3aba7a79aab..fec1f97c67b 100644
--- a/2022/CVE-2022-29383.md
+++ b/2022/CVE-2022-29383.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/badboycxcc/Netgear-ssl-vpn-20211222-CVE-2022-29383
 - https://github.com/cxaqhq/netgear-to-CVE-2022-29383
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29383.yaml
diff --git a/2022/CVE-2022-29455.md b/2022/CVE-2022-29455.md
index 150b158c2a9..9e963fd616a 100644
--- a/2022/CVE-2022-29455.md
+++ b/2022/CVE-2022-29455.md
@@ -20,3 +20,5 @@ DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elem
 - https://github.com/varelsecurity/CVE-2022-29455
 - https://github.com/yaudahbanh/CVE-2022-29455
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29455.yaml
diff --git a/2022/CVE-2022-29464.md b/2022/CVE-2022-29464.md
index f0d5786e3cf..a4438ef7c81 100644
--- a/2022/CVE-2022-29464.md
+++ b/2022/CVE-2022-29464.md
@@ -59,3 +59,5 @@ Certain WSO2 products allow unrestricted file upload with resultant remote code
 - https://github.com/superzerosec/CVE-2022-29464
 - https://github.com/tufanturhan/wso2-rce-cve-2022-29464
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29464.yaml
diff --git a/2022/CVE-2022-29495.md b/2022/CVE-2022-29495.md
index a42176f562a..4c3bb3b871d 100644
--- a/2022/CVE-2022-29495.md
+++ b/2022/CVE-2022-29495.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29495.yaml
diff --git a/2022/CVE-2022-29548.md b/2022/CVE-2022-29548.md
index 11566983556..d66f470f36e 100644
--- a/2022/CVE-2022-29548.md
+++ b/2022/CVE-2022-29548.md
@@ -16,3 +16,5 @@ A reflected XSS issue exists in the Management Console of several WSO2 products.
 #### Github
 - https://github.com/cxosmo/CVE-2022-29548
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29548.yaml
diff --git a/2022/CVE-2022-29775.md b/2022/CVE-2022-29775.md
index 8fd69eb238e..14cab064b62 100644
--- a/2022/CVE-2022-29775.md
+++ b/2022/CVE-2022-29775.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29775.yaml
diff --git a/2022/CVE-2022-30073.md b/2022/CVE-2022-30073.md
index bd1ac53f4ea..e98e49d59be 100644
--- a/2022/CVE-2022-30073.md
+++ b/2022/CVE-2022-30073.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30073.yaml
diff --git a/2022/CVE-2022-30489.md b/2022/CVE-2022-30489.md
index 277a928e3f0..7844d17d9e1 100644
--- a/2022/CVE-2022-30489.md
+++ b/2022/CVE-2022-30489.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/badboycxcc/XSS-CVE-2022-30489
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30489.yaml
diff --git a/2022/CVE-2022-30512.md b/2022/CVE-2022-30512.md
index baabe3f134d..f0b389ab302 100644
--- a/2022/CVE-2022-30512.md
+++ b/2022/CVE-2022-30512.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/bigzooooz/CVE-2022-30512
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30512.yaml
diff --git a/2022/CVE-2022-30513.md b/2022/CVE-2022-30513.md
index d2302db1ead..0b3c0e6c152 100644
--- a/2022/CVE-2022-30513.md
+++ b/2022/CVE-2022-30513.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/bigzooooz/CVE-2022-30513
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30513.yaml
diff --git a/2022/CVE-2022-30514.md b/2022/CVE-2022-30514.md
index 593d0f18991..5b32f3bd14b 100644
--- a/2022/CVE-2022-30514.md
+++ b/2022/CVE-2022-30514.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/bigzooooz/CVE-2022-30514
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30514.yaml
diff --git a/2022/CVE-2022-30525.md b/2022/CVE-2022-30525.md
index 90219531160..afad69b2e85 100644
--- a/2022/CVE-2022-30525.md
+++ b/2022/CVE-2022-30525.md
@@ -43,3 +43,5 @@ A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W)
 - https://github.com/west9b/CVE-2022-30525
 - https://github.com/west9b/F5-BIG-IP-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30525.yaml
diff --git a/2022/CVE-2022-3062.md b/2022/CVE-2022-3062.md
index b1d43e58b66..16f1e5ec984 100644
--- a/2022/CVE-2022-3062.md
+++ b/2022/CVE-2022-3062.md
@@ -15,3 +15,5 @@ The Simple File List WordPress plugin before 4.4.12 does not escape parameters b
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3062.yaml
diff --git a/2022/CVE-2022-30776.md b/2022/CVE-2022-30776.md
index 4107aad053b..99651d867e0 100644
--- a/2022/CVE-2022-30776.md
+++ b/2022/CVE-2022-30776.md
@@ -16,3 +16,5 @@ atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30776.yaml
diff --git a/2022/CVE-2022-30777.md b/2022/CVE-2022-30777.md
index b6531a844d0..d8bea0ca870 100644
--- a/2022/CVE-2022-30777.md
+++ b/2022/CVE-2022-30777.md
@@ -15,3 +15,5 @@ Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30777.yaml
diff --git a/2022/CVE-2022-31101.md b/2022/CVE-2022-31101.md
index b525116c0ce..0c5c13d6a5a 100644
--- a/2022/CVE-2022-31101.md
+++ b/2022/CVE-2022-31101.md
@@ -16,3 +16,5 @@ prestashop/blockwishlist is a prestashop extension which adds a block containing
 - https://github.com/MathiasReker/blmvuln
 - https://github.com/karthikuj/CVE-2022-31101
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31101.yaml
diff --git a/2022/CVE-2022-31126.md b/2022/CVE-2022-31126.md
index 76ff92e1520..c826c07eaec 100644
--- a/2022/CVE-2022-31126.md
+++ b/2022/CVE-2022-31126.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31126.yaml
diff --git a/2022/CVE-2022-31137.md b/2022/CVE-2022-31137.md
index 158cb6a4673..f7469111508 100644
--- a/2022/CVE-2022-31137.md
+++ b/2022/CVE-2022-31137.md
@@ -18,3 +18,5 @@ Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived se
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31137.yaml
diff --git a/2022/CVE-2022-31161.md b/2022/CVE-2022-31161.md
index 82be541accf..3a5380de6cd 100644
--- a/2022/CVE-2022-31161.md
+++ b/2022/CVE-2022-31161.md
@@ -16,3 +16,5 @@ Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. P
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31161.yaml
diff --git a/2022/CVE-2022-31181.md b/2022/CVE-2022-31181.md
index 5235a17a203..cbfaeddfc70 100644
--- a/2022/CVE-2022-31181.md
+++ b/2022/CVE-2022-31181.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/drkbcn/lblfixer_cve_2022_31181
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31181.yaml
diff --git a/2022/CVE-2022-3124.md b/2022/CVE-2022-3124.md
index 2b6cc01c02c..d177280b7dc 100644
--- a/2022/CVE-2022-3124.md
+++ b/2022/CVE-2022-3124.md
@@ -15,3 +15,5 @@ The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthe
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3124.yaml
diff --git a/2022/CVE-2022-31260.md b/2022/CVE-2022-31260.md
index 6ad931c7191..9be162b9454 100644
--- a/2022/CVE-2022-31260.md
+++ b/2022/CVE-2022-31260.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31260.yaml
diff --git a/2022/CVE-2022-31268.md b/2022/CVE-2022-31268.md
index b8af27c0548..711a02c4f32 100644
--- a/2022/CVE-2022-31268.md
+++ b/2022/CVE-2022-31268.md
@@ -15,3 +15,5 @@ A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website file
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31268.yaml
diff --git a/2022/CVE-2022-31269.md b/2022/CVE-2022-31269.md
index 29b309185d0..09f1f7d9547 100644
--- a/2022/CVE-2022-31269.md
+++ b/2022/CVE-2022-31269.md
@@ -18,3 +18,5 @@ Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials
 - https://github.com/Henry4E36/CVE-2022-31269
 - https://github.com/omarhashem123/CVE-2022-31269
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31269.yaml
diff --git a/2022/CVE-2022-31299.md b/2022/CVE-2022-31299.md
index 4188337318a..54ef1d09658 100644
--- a/2022/CVE-2022-31299.md
+++ b/2022/CVE-2022-31299.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/bigzooooz/CVE-2022-31299
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31299.yaml
diff --git a/2022/CVE-2022-31373.md b/2022/CVE-2022-31373.md
index 2a16a23fc81..d5e39736b3a 100644
--- a/2022/CVE-2022-31373.md
+++ b/2022/CVE-2022-31373.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31373.yaml
diff --git a/2022/CVE-2022-3142.md b/2022/CVE-2022-3142.md
index d68440fbcf1..c792d778662 100644
--- a/2022/CVE-2022-3142.md
+++ b/2022/CVE-2022-3142.md
@@ -17,3 +17,5 @@ The NEX-Forms WordPress plugin before 7.9.7 does not properly sanitise and escap
 #### Github
 - https://github.com/ehtec/nex-forms-exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3142.yaml
diff --git a/2022/CVE-2022-31470.md b/2022/CVE-2022-31470.md
index abedd192366..2d59f612be6 100644
--- a/2022/CVE-2022-31470.md
+++ b/2022/CVE-2022-31470.md
@@ -15,3 +15,5 @@ An XSS vulnerability in the index_mobile_changepass.hsp reset-password section o
 #### Github
 - https://github.com/amirzargham/CVE-2023-08-21-exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31470.yaml
diff --git a/2022/CVE-2022-31474.md b/2022/CVE-2022-31474.md
index cee09ff9942..80c02416def 100644
--- a/2022/CVE-2022-31474.md
+++ b/2022/CVE-2022-31474.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31474.yaml
diff --git a/2022/CVE-2022-31499.md b/2022/CVE-2022-31499.md
index 07d054adaaf..8a30999e936 100644
--- a/2022/CVE-2022-31499.md
+++ b/2022/CVE-2022-31499.md
@@ -17,3 +17,5 @@ Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated
 #### Github
 - https://github.com/omarhashem123/CVE-2022-31499
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31499.yaml
diff --git a/2022/CVE-2022-31656.md b/2022/CVE-2022-31656.md
index 622e6c0b4b7..8453f1c788f 100644
--- a/2022/CVE-2022-31656.md
+++ b/2022/CVE-2022-31656.md
@@ -15,3 +15,5 @@ VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31656.yaml
diff --git a/2022/CVE-2022-31678.md b/2022/CVE-2022-31678.md
index d8d3f7c3172..2d2844e717a 100644
--- a/2022/CVE-2022-31678.md
+++ b/2022/CVE-2022-31678.md
@@ -15,3 +15,5 @@ VMware Cloud Foundation (NSX-V) contains an XML External Entity (XXE) vulnerabil
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31678.yaml
diff --git a/2022/CVE-2022-31704.md b/2022/CVE-2022-31704.md
index f398803adc2..f22c327c85b 100644
--- a/2022/CVE-2022-31704.md
+++ b/2022/CVE-2022-31704.md
@@ -16,3 +16,5 @@ The vRealize Log Insight contains a broken access control vulnerability. An unau
 - https://github.com/horizon3ai/CVE-2023-34051
 - https://github.com/horizon3ai/vRealizeLogInsightRCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31704.yaml
diff --git a/2022/CVE-2022-31706.md b/2022/CVE-2022-31706.md
index a269902f36e..0e13b3ae247 100644
--- a/2022/CVE-2022-31706.md
+++ b/2022/CVE-2022-31706.md
@@ -16,3 +16,5 @@ The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauth
 - https://github.com/horizon3ai/CVE-2023-34051
 - https://github.com/horizon3ai/vRealizeLogInsightRCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31706.yaml
diff --git a/2022/CVE-2022-31711.md b/2022/CVE-2022-31711.md
index a3657e14a8d..b71f1bd147c 100644
--- a/2022/CVE-2022-31711.md
+++ b/2022/CVE-2022-31711.md
@@ -16,3 +16,5 @@ VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A
 - https://github.com/horizon3ai/CVE-2023-34051
 - https://github.com/horizon3ai/vRealizeLogInsightRCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31711.yaml
diff --git a/2022/CVE-2022-31793.md b/2022/CVE-2022-31793.md
index dd6759aa5dd..8b5ee24bbee 100644
--- a/2022/CVE-2022-31793.md
+++ b/2022/CVE-2022-31793.md
@@ -17,3 +17,5 @@ do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read
 - https://github.com/badboycxcc/script
 - https://github.com/xpgdgit/CVE-2022-31793
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2022/CVE-2022-31793.yaml
diff --git a/2022/CVE-2022-31798.md b/2022/CVE-2022-31798.md
index 8df4da653cd..0f3df469196 100644
--- a/2022/CVE-2022-31798.md
+++ b/2022/CVE-2022-31798.md
@@ -17,3 +17,5 @@ Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php
 #### Github
 - https://github.com/omarhashem123/CVE-2022-31798
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31798.yaml
diff --git a/2022/CVE-2022-31814.md b/2022/CVE-2022-31814.md
index a0ae894145f..80880defa0c 100644
--- a/2022/CVE-2022-31814.md
+++ b/2022/CVE-2022-31814.md
@@ -23,3 +23,5 @@ pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrar
 - https://github.com/TheUnknownSoul/CVE-2022-31814
 - https://github.com/dkstar11q/CVE-2022-31814
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31814.yaml
diff --git a/2022/CVE-2022-31845.md b/2022/CVE-2022-31845.md
index fe50d87f18d..da254a0f068 100644
--- a/2022/CVE-2022-31845.md
+++ b/2022/CVE-2022-31845.md
@@ -15,3 +15,5 @@ A vulnerability in live_check.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31845.yaml
diff --git a/2022/CVE-2022-31846.md b/2022/CVE-2022-31846.md
index d3d3bd2688b..62621569f2e 100644
--- a/2022/CVE-2022-31846.md
+++ b/2022/CVE-2022-31846.md
@@ -15,3 +15,5 @@ A vulnerability in live_mfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31846.yaml
diff --git a/2022/CVE-2022-31847.md b/2022/CVE-2022-31847.md
index d26b63eff2c..d743969a430 100644
--- a/2022/CVE-2022-31847.md
+++ b/2022/CVE-2022-31847.md
@@ -15,3 +15,5 @@ A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M79X3.V5030
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31847.yaml
diff --git a/2022/CVE-2022-31854.md b/2022/CVE-2022-31854.md
index 56e8eeaa803..ca2c5a432d2 100644
--- a/2022/CVE-2022-31854.md
+++ b/2022/CVE-2022-31854.md
@@ -16,3 +16,5 @@ Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability
 #### Github
 - https://github.com/Vikaran101/CVE-2022-31854
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31854.yaml
diff --git a/2022/CVE-2022-31976.md b/2022/CVE-2022-31976.md
index 2bff5672025..235f8137e2d 100644
--- a/2022/CVE-2022-31976.md
+++ b/2022/CVE-2022-31976.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31976.yaml
diff --git a/2022/CVE-2022-31977.md b/2022/CVE-2022-31977.md
index 53bc3762cca..577506a235a 100644
--- a/2022/CVE-2022-31977.md
+++ b/2022/CVE-2022-31977.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31977.yaml
diff --git a/2022/CVE-2022-31978.md b/2022/CVE-2022-31978.md
index aa675e13fad..236d9c7157c 100644
--- a/2022/CVE-2022-31978.md
+++ b/2022/CVE-2022-31978.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31978.yaml
diff --git a/2022/CVE-2022-32007.md b/2022/CVE-2022-32007.md
index 8d8cd1e374d..f7a1db8854c 100644
--- a/2022/CVE-2022-32007.md
+++ b/2022/CVE-2022-32007.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32007.yaml
diff --git a/2022/CVE-2022-32015.md b/2022/CVE-2022-32015.md
index e18180a5a00..0033efe4db8 100644
--- a/2022/CVE-2022-32015.md
+++ b/2022/CVE-2022-32015.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32015.yaml
diff --git a/2022/CVE-2022-32018.md b/2022/CVE-2022-32018.md
index 0f9f817cf33..b0ebf4661ec 100644
--- a/2022/CVE-2022-32018.md
+++ b/2022/CVE-2022-32018.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32018.yaml
diff --git a/2022/CVE-2022-32022.md b/2022/CVE-2022-32022.md
index 2a912c0963b..09ceefcd07a 100644
--- a/2022/CVE-2022-32022.md
+++ b/2022/CVE-2022-32022.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32022.yaml
diff --git a/2022/CVE-2022-32024.md b/2022/CVE-2022-32024.md
index c7cb3552ceb..22812af4638 100644
--- a/2022/CVE-2022-32024.md
+++ b/2022/CVE-2022-32024.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32024.yaml
diff --git a/2022/CVE-2022-32025.md b/2022/CVE-2022-32025.md
index d9073ddec03..fdf95fd071a 100644
--- a/2022/CVE-2022-32025.md
+++ b/2022/CVE-2022-32025.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32025.yaml
diff --git a/2022/CVE-2022-32026.md b/2022/CVE-2022-32026.md
index df970a38a55..47aa613a632 100644
--- a/2022/CVE-2022-32026.md
+++ b/2022/CVE-2022-32026.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32026.yaml
diff --git a/2022/CVE-2022-32028.md b/2022/CVE-2022-32028.md
index 2d4101df6b1..2b5df579ea5 100644
--- a/2022/CVE-2022-32028.md
+++ b/2022/CVE-2022-32028.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32028.yaml
diff --git a/2022/CVE-2022-32094.md b/2022/CVE-2022-32094.md
index 550630bd3d7..88b691da17e 100644
--- a/2022/CVE-2022-32094.md
+++ b/2022/CVE-2022-32094.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32094.yaml
diff --git a/2022/CVE-2022-32195.md b/2022/CVE-2022-32195.md
index efea1a648fa..2757e5fd10b 100644
--- a/2022/CVE-2022-32195.md
+++ b/2022/CVE-2022-32195.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32195.yaml
diff --git a/2022/CVE-2022-3236.md b/2022/CVE-2022-3236.md
index 4443b889711..bb497e5e082 100644
--- a/2022/CVE-2022-3236.md
+++ b/2022/CVE-2022-3236.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3236.yaml
diff --git a/2022/CVE-2022-32409.md b/2022/CVE-2022-32409.md
index fc5d2e24e54..78e40c62cc5 100644
--- a/2022/CVE-2022-32409.md
+++ b/2022/CVE-2022-32409.md
@@ -16,3 +16,5 @@ A local file inclusion (LFI) vulnerability in the component codemirror.php of Po
 #### Github
 - https://github.com/wagnerdracha/ProofOfConcept
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32409.yaml
diff --git a/2022/CVE-2022-3242.md b/2022/CVE-2022-3242.md
index b09f5f0b500..e837db2a50c 100644
--- a/2022/CVE-2022-3242.md
+++ b/2022/CVE-2022-3242.md
@@ -15,3 +15,5 @@ Code Injection in GitHub repository microweber/microweber prior to 1.3.2.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3242.yaml
diff --git a/2022/CVE-2022-32429.md b/2022/CVE-2022-32429.md
index 96d005a1d69..9a35995bf15 100644
--- a/2022/CVE-2022-32429.md
+++ b/2022/CVE-2022-32429.md
@@ -16,3 +16,5 @@ An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/Ex
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32429.yaml
diff --git a/2022/CVE-2022-32430.md b/2022/CVE-2022-32430.md
index 0709161e5c5..dc863aeeb8a 100644
--- a/2022/CVE-2022-32430.md
+++ b/2022/CVE-2022-32430.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32430.yaml
diff --git a/2022/CVE-2022-32444.md b/2022/CVE-2022-32444.md
index 144db1ad0b9..b08e1938330 100644
--- a/2022/CVE-2022-32444.md
+++ b/2022/CVE-2022-32444.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32444.yaml
diff --git a/2022/CVE-2022-3254.md b/2022/CVE-2022-3254.md
index ae31cff3afd..0451e4f76f2 100644
--- a/2022/CVE-2022-3254.md
+++ b/2022/CVE-2022-3254.md
@@ -15,3 +15,5 @@ The WordPress Classifieds Plugin WordPress plugin before 4.3 does not properly s
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3254.yaml
diff --git a/2022/CVE-2022-32770.md b/2022/CVE-2022-32770.md
index f8a7781c084..f3c33871d75 100644
--- a/2022/CVE-2022-32770.md
+++ b/2022/CVE-2022-32770.md
@@ -16,3 +16,5 @@ A cross-site scripting (xss) vulnerability exists in the footer alerts functiona
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32770.yaml
diff --git a/2022/CVE-2022-32771.md b/2022/CVE-2022-32771.md
index 4bb41e086df..f0f560e6cb0 100644
--- a/2022/CVE-2022-32771.md
+++ b/2022/CVE-2022-32771.md
@@ -16,3 +16,5 @@ A cross-site scripting (xss) vulnerability exists in the footer alerts functiona
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32771.yaml
diff --git a/2022/CVE-2022-32772.md b/2022/CVE-2022-32772.md
index e1b77fa05b4..ab60acaa250 100644
--- a/2022/CVE-2022-32772.md
+++ b/2022/CVE-2022-32772.md
@@ -16,3 +16,5 @@ A cross-site scripting (xss) vulnerability exists in the footer alerts functiona
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32772.yaml
diff --git a/2022/CVE-2022-33119.md b/2022/CVE-2022-33119.md
index 5b39230d6c1..34d4176ddd8 100644
--- a/2022/CVE-2022-33119.md
+++ b/2022/CVE-2022-33119.md
@@ -15,3 +15,5 @@ NUUO Network Video Recorder NVRsolo v03.06.02 was discovered to contain a reflec
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33119.yaml
diff --git a/2022/CVE-2022-33174.md b/2022/CVE-2022-33174.md
index 3a5f66216d2..d7490ff3354 100644
--- a/2022/CVE-2022-33174.md
+++ b/2022/CVE-2022-33174.md
@@ -15,3 +15,5 @@ Power Distribution Units running on Powertek firmware (multiple brands) before 3
 #### Github
 - https://github.com/Henry4E36/CVE-2022-33174
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33174.yaml
diff --git a/2022/CVE-2022-33198.md b/2022/CVE-2022-33198.md
index d753333e780..10499962145 100644
--- a/2022/CVE-2022-33198.md
+++ b/2022/CVE-2022-33198.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33198.yaml
diff --git a/2022/CVE-2022-33891.md b/2022/CVE-2022-33891.md
index c6073f103a2..da624c4f2d2 100644
--- a/2022/CVE-2022-33891.md
+++ b/2022/CVE-2022-33891.md
@@ -27,3 +27,5 @@ The Apache Spark UI offers the possibility to enable ACLs via the configuration
 - https://github.com/devengpk/Apache-zero-days
 - https://github.com/nanaao/CVE-2022-33891
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33891.yaml
diff --git a/2022/CVE-2022-33901.md b/2022/CVE-2022-33901.md
index 6f0c1609457..21f3aeb8489 100644
--- a/2022/CVE-2022-33901.md
+++ b/2022/CVE-2022-33901.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33901.yaml
diff --git a/2022/CVE-2022-33965.md b/2022/CVE-2022-33965.md
index 8c8b3ab3ed6..7d2f32cb2c1 100644
--- a/2022/CVE-2022-33965.md
+++ b/2022/CVE-2022-33965.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33965.yaml
diff --git a/2022/CVE-2022-34045.md b/2022/CVE-2022-34045.md
index c511b2709c5..51548a93578 100644
--- a/2022/CVE-2022-34045.md
+++ b/2022/CVE-2022-34045.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34045.yaml
diff --git a/2022/CVE-2022-34046.md b/2022/CVE-2022-34046.md
index f4eb51619d1..48f40aa2e9d 100644
--- a/2022/CVE-2022-34046.md
+++ b/2022/CVE-2022-34046.md
@@ -15,3 +15,5 @@ An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34046.yaml
diff --git a/2022/CVE-2022-34047.md b/2022/CVE-2022-34047.md
index 54fe590423e..ffc84fa515a 100644
--- a/2022/CVE-2022-34047.md
+++ b/2022/CVE-2022-34047.md
@@ -16,3 +16,5 @@ An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34047.yaml
diff --git a/2022/CVE-2022-34048.md b/2022/CVE-2022-34048.md
index ae026a09032..71796d2b3af 100644
--- a/2022/CVE-2022-34048.md
+++ b/2022/CVE-2022-34048.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34048.yaml
diff --git a/2022/CVE-2022-34049.md b/2022/CVE-2022-34049.md
index ffdeddeae35..489ff93b030 100644
--- a/2022/CVE-2022-34049.md
+++ b/2022/CVE-2022-34049.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34049.yaml
diff --git a/2022/CVE-2022-34093.md b/2022/CVE-2022-34093.md
index 54d7aa445f8..8440e3cdc53 100644
--- a/2022/CVE-2022-34093.md
+++ b/2022/CVE-2022-34093.md
@@ -17,3 +17,5 @@ Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a c
 #### Github
 - https://github.com/wagnerdracha/ProofOfConcept
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34093.yaml
diff --git a/2022/CVE-2022-34094.md b/2022/CVE-2022-34094.md
index 94230bcd1f0..7c145ab8f8b 100644
--- a/2022/CVE-2022-34094.md
+++ b/2022/CVE-2022-34094.md
@@ -17,3 +17,5 @@ Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a c
 #### Github
 - https://github.com/wagnerdracha/ProofOfConcept
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34094.yaml
diff --git a/2022/CVE-2022-34121.md b/2022/CVE-2022-34121.md
index 3ee4550c40d..d933fa77bf6 100644
--- a/2022/CVE-2022-34121.md
+++ b/2022/CVE-2022-34121.md
@@ -16,3 +16,5 @@ Cuppa CMS v1.0 was discovered to contain a local file inclusion (LFI) vulnerabil
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34121.yaml
diff --git a/2022/CVE-2022-34265.md b/2022/CVE-2022-34265.md
index 4a34ca30b54..1dd0f822620 100644
--- a/2022/CVE-2022-34265.md
+++ b/2022/CVE-2022-34265.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/aeyesec/CVE-2022-34265
 - https://github.com/traumatising/CVE-2022-34265
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2022/CVE-2022-34265.yaml
diff --git a/2022/CVE-2022-34267.md b/2022/CVE-2022-34267.md
index 53aed265761..a167729a579 100644
--- a/2022/CVE-2022-34267.md
+++ b/2022/CVE-2022-34267.md
@@ -15,3 +15,5 @@ An issue was discovered in RWS WorldServer before 11.7.3. Adding a token paramet
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34267.yaml
diff --git a/2022/CVE-2022-34305.md b/2022/CVE-2022-34305.md
index 6963fcf716d..274ec8975cd 100644
--- a/2022/CVE-2022-34305.md
+++ b/2022/CVE-2022-34305.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 - https://github.com/zeroc00I/CVE-2022-34305
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34305.yaml
diff --git a/2022/CVE-2022-34328.md b/2022/CVE-2022-34328.md
index e1eec81c9be..299711d7bf6 100644
--- a/2022/CVE-2022-34328.md
+++ b/2022/CVE-2022-34328.md
@@ -15,3 +15,5 @@ PMB 7.3.10 allows reflected XSS via the id parameter in an lvl=author_see reques
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34328.yaml
diff --git a/2022/CVE-2022-34487.md b/2022/CVE-2022-34487.md
index 191cf103907..610e0bd831e 100644
--- a/2022/CVE-2022-34487.md
+++ b/2022/CVE-2022-34487.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34487.yaml
diff --git a/2022/CVE-2022-34534.md b/2022/CVE-2022-34534.md
index 4adb1b07e2d..c0a6fae94c9 100644
--- a/2022/CVE-2022-34534.md
+++ b/2022/CVE-2022-34534.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34534.yaml
diff --git a/2022/CVE-2022-34576.md b/2022/CVE-2022-34576.md
index 6315a7a0bd6..7002175df3c 100644
--- a/2022/CVE-2022-34576.md
+++ b/2022/CVE-2022-34576.md
@@ -15,3 +15,5 @@ A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN535 G3 M35G3R.V503
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34576.yaml
diff --git a/2022/CVE-2022-34590.md b/2022/CVE-2022-34590.md
index 05acc8b840a..5892e266847 100644
--- a/2022/CVE-2022-34590.md
+++ b/2022/CVE-2022-34590.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34590.yaml
diff --git a/2022/CVE-2022-34753.md b/2022/CVE-2022-34753.md
index 09f5e5199ca..ea4fae4b293 100644
--- a/2022/CVE-2022-34753.md
+++ b/2022/CVE-2022-34753.md
@@ -15,3 +15,5 @@ A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS
 #### Github
 - https://github.com/K3ysTr0K3R/CVE-2022-34753-EXPLOIT
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34753.yaml
diff --git a/2022/CVE-2022-3477.md b/2022/CVE-2022-3477.md
index 1a085d59a9c..8588715b9c6 100644
--- a/2022/CVE-2022-3477.md
+++ b/2022/CVE-2022-3477.md
@@ -19,3 +19,5 @@ The tagDiv Composer WordPress plugin before 3.5, required by the Newspaper WordP
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3477.yaml
diff --git a/2022/CVE-2022-3481.md b/2022/CVE-2022-3481.md
index 3fd8a34d669..42f316a91fc 100644
--- a/2022/CVE-2022-3481.md
+++ b/2022/CVE-2022-3481.md
@@ -15,3 +15,5 @@ The WooCommerce Dropshipping WordPress plugin before 4.4 does not properly sanit
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3481.yaml
diff --git a/2022/CVE-2022-3484.md b/2022/CVE-2022-3484.md
index 177f2bbaff5..720018965c1 100644
--- a/2022/CVE-2022-3484.md
+++ b/2022/CVE-2022-3484.md
@@ -15,3 +15,5 @@ The WPB Show Core WordPress plugin does not sanitize and escape a parameter befo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3484.yaml
diff --git a/2022/CVE-2022-3506.md b/2022/CVE-2022-3506.md
index c1396d9658d..6f5f0d9f2e6 100644
--- a/2022/CVE-2022-3506.md
+++ b/2022/CVE-2022-3506.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Stored in GitHub repository barrykooij/related-post
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3506.yaml
diff --git a/2022/CVE-2022-35151.md b/2022/CVE-2022-35151.md
index b03f67fa57a..fd3db9857be 100644
--- a/2022/CVE-2022-35151.md
+++ b/2022/CVE-2022-35151.md
@@ -15,3 +15,5 @@ kkFileView v4.1.0 was discovered to contain multiple cross-site scripting (XSS)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35151.yaml
diff --git a/2022/CVE-2022-35405.md b/2022/CVE-2022-35405.md
index 493d08454ce..630307454ef 100644
--- a/2022/CVE-2022-35405.md
+++ b/2022/CVE-2022-35405.md
@@ -17,3 +17,5 @@ Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are v
 #### Github
 - https://github.com/viniciuspereiras/CVE-2022-35405
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35405.yaml
diff --git a/2022/CVE-2022-35413.md b/2022/CVE-2022-35413.md
index 415ec4b9bdb..41f9307998b 100644
--- a/2022/CVE-2022-35413.md
+++ b/2022/CVE-2022-35413.md
@@ -16,3 +16,5 @@ WAPPLES through 6.0 has a hardcoded systemi account. A threat actor could use th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35413.yaml
diff --git a/2022/CVE-2022-35416.md b/2022/CVE-2022-35416.md
index b5ca8bf468b..8ffc5676235 100644
--- a/2022/CVE-2022-35416.md
+++ b/2022/CVE-2022-35416.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/safe3s/CVE-2022-35416
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35416.yaml
diff --git a/2022/CVE-2022-35493.md b/2022/CVE-2022-35493.md
index 3ffe2145558..7fb24ab3ade 100644
--- a/2022/CVE-2022-35493.md
+++ b/2022/CVE-2022-35493.md
@@ -15,3 +15,5 @@ A Cross-site scripting (XSS) vulnerability in json search parse and the json res
 #### Github
 - https://github.com/Keyvanhardani/Exploit-eShop-Multipurpose-Ecommerce-Store-Website-3.0.4-Cross-Site-Scripting-XSS
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35493.yaml
diff --git a/2022/CVE-2022-35507.md b/2022/CVE-2022-35507.md
index d3447f758fc..70dc266938f 100644
--- a/2022/CVE-2022-35507.md
+++ b/2022/CVE-2022-35507.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35507.yaml
diff --git a/2022/CVE-2022-35653.md b/2022/CVE-2022-35653.md
index b91b3ff6bc1..2d9f32e00d6 100644
--- a/2022/CVE-2022-35653.md
+++ b/2022/CVE-2022-35653.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35653.yaml
diff --git a/2022/CVE-2022-3578.md b/2022/CVE-2022-3578.md
index f04e58ec183..b039e8d0464 100644
--- a/2022/CVE-2022-3578.md
+++ b/2022/CVE-2022-3578.md
@@ -15,3 +15,5 @@ The ProfileGrid WordPress plugin before 5.1.1 does not sanitise and escape a par
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3578.yaml
diff --git a/2022/CVE-2022-3590.md b/2022/CVE-2022-3590.md
index 28a03e1ec2c..373b6bbd3e9 100644
--- a/2022/CVE-2022-3590.md
+++ b/2022/CVE-2022-3590.md
@@ -16,3 +16,5 @@ WordPress is affected by an unauthenticated blind SSRF in the pingback feature.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3590.yaml
diff --git a/2022/CVE-2022-35914.md b/2022/CVE-2022-35914.md
index 59b5cd73920..cd1910b0e74 100644
--- a/2022/CVE-2022-35914.md
+++ b/2022/CVE-2022-35914.md
@@ -29,3 +29,5 @@
 - https://github.com/senderend/CVE-2022-35914
 - https://github.com/xiaobaiakai/CVE-2022-35914
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35914.yaml
diff --git a/2022/CVE-2022-36446.md b/2022/CVE-2022-36446.md
index e12590430fb..0d1afc85f28 100644
--- a/2022/CVE-2022-36446.md
+++ b/2022/CVE-2022-36446.md
@@ -20,3 +20,5 @@ software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.
 - https://github.com/monzaviman/CVE_2022_36446
 - https://github.com/p0dalirius/CVE-2022-36446-Webmin-Software-Package-Updates-RCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36446.yaml
diff --git a/2022/CVE-2022-36537.md b/2022/CVE-2022-36537.md
index 7e2dbecb23b..163c903cb70 100644
--- a/2022/CVE-2022-36537.md
+++ b/2022/CVE-2022-36537.md
@@ -18,3 +18,5 @@ ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to a
 - https://github.com/agnihackers/CVE-2022-36537-EXPLOIT
 - https://github.com/ethan-repo-lab4b6/CVE-2022-36537
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36537.yaml
diff --git a/2022/CVE-2022-36553.md b/2022/CVE-2022-36553.md
index 2322b2f4dff..7270ccb1165 100644
--- a/2022/CVE-2022-36553.md
+++ b/2022/CVE-2022-36553.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/0xNslabs/CVE-2022-36553-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36553.yaml
diff --git a/2022/CVE-2022-36642.md b/2022/CVE-2022-36642.md
index f74d60e16fd..25c9905da48 100644
--- a/2022/CVE-2022-36642.md
+++ b/2022/CVE-2022-36642.md
@@ -16,3 +16,5 @@ A local file disclosure vulnerability in /appConfig/userDB.json of Telos Allianc
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36642.yaml
diff --git a/2022/CVE-2022-36804.md b/2022/CVE-2022-36804.md
index e7df5fc63ec..39ebaa7b073 100644
--- a/2022/CVE-2022-36804.md
+++ b/2022/CVE-2022-36804.md
@@ -41,3 +41,5 @@ Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 befor
 - https://github.com/vj4336/CVE-2022-36804-ReverseShell
 - https://github.com/walnutsecurity/cve-2022-36804
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36804.yaml
diff --git a/2022/CVE-2022-36883.md b/2022/CVE-2022-36883.md
index a2b04479ba1..e606192d97e 100644
--- a/2022/CVE-2022-36883.md
+++ b/2022/CVE-2022-36883.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36883.yaml
diff --git a/2022/CVE-2022-36923.md b/2022/CVE-2022-36923.md
index 73bd99bb3ba..c03280ad405 100644
--- a/2022/CVE-2022-36923.md
+++ b/2022/CVE-2022-36923.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36923.yaml
diff --git a/2022/CVE-2022-37042.md b/2022/CVE-2022-37042.md
index 9189dbc4364..d0a2b39203f 100644
--- a/2022/CVE-2022-37042.md
+++ b/2022/CVE-2022-37042.md
@@ -19,3 +19,5 @@ Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality tha
 - https://github.com/aels/CVE-2022-37042
 - https://github.com/sanan2004/CVE-2022-27925
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37042.yaml
diff --git a/2022/CVE-2022-37061.md b/2022/CVE-2022-37061.md
index 09525ecc400..b768ea84499 100644
--- a/2022/CVE-2022-37061.md
+++ b/2022/CVE-2022-37061.md
@@ -19,3 +19,5 @@ All FLIR AX8 thermal sensor cameras version up to and including 1.46.16 are vuln
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37061.yaml
diff --git a/2022/CVE-2022-37122.md b/2022/CVE-2022-37122.md
index 7f961a42c37..53092a78f8e 100644
--- a/2022/CVE-2022-37122.md
+++ b/2022/CVE-2022-37122.md
@@ -16,3 +16,5 @@ Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application S
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37122.yaml
diff --git a/2022/CVE-2022-37153.md b/2022/CVE-2022-37153.md
index f3492eac2c1..535aa80d115 100644
--- a/2022/CVE-2022-37153.md
+++ b/2022/CVE-2022-37153.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37153.yaml
diff --git a/2022/CVE-2022-37190.md b/2022/CVE-2022-37190.md
index 0b52b25980c..058d74012f1 100644
--- a/2022/CVE-2022-37190.md
+++ b/2022/CVE-2022-37190.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37190.yaml
diff --git a/2022/CVE-2022-37191.md b/2022/CVE-2022-37191.md
index 682c49cb7b7..40702d7c1fd 100644
--- a/2022/CVE-2022-37191.md
+++ b/2022/CVE-2022-37191.md
@@ -16,3 +16,5 @@ The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An au
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37191.yaml
diff --git a/2022/CVE-2022-37299.md b/2022/CVE-2022-37299.md
index e5d56949319..df474c33dd3 100644
--- a/2022/CVE-2022-37299.md
+++ b/2022/CVE-2022-37299.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37299.yaml
diff --git a/2022/CVE-2022-3766.md b/2022/CVE-2022-3766.md
index a96ae9d23d7..70e20d26f44 100644
--- a/2022/CVE-2022-3766.md
+++ b/2022/CVE-2022-3766.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq pr
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3766.yaml
diff --git a/2022/CVE-2022-3768.md b/2022/CVE-2022-3768.md
index bd7ab5a2284..428ff8bc70f 100644
--- a/2022/CVE-2022-3768.md
+++ b/2022/CVE-2022-3768.md
@@ -16,3 +16,5 @@ The WPSmartContracts WordPress plugin before 1.3.12 does not properly sanitise a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3768.yaml
diff --git a/2022/CVE-2022-37932.md b/2022/CVE-2022-37932.md
index 314519f183c..51c990009c2 100644
--- a/2022/CVE-2022-37932.md
+++ b/2022/CVE-2022-37932.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Tim-Hoekstra/CVE-2022-37932
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37932.yaml
diff --git a/2022/CVE-2022-3800.md b/2022/CVE-2022-3800.md
index d07fe9a24ce..9696de11b7b 100644
--- a/2022/CVE-2022-3800.md
+++ b/2022/CVE-2022-3800.md
@@ -16,3 +16,5 @@ A vulnerability, which was classified as critical, has been found in IBAX go-iba
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3800.yaml
diff --git a/2022/CVE-2022-3805.md b/2022/CVE-2022-3805.md
index 0c146b29542..fe1109b7117 100644
--- a/2022/CVE-2022-3805.md
+++ b/2022/CVE-2022-3805.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3805.yaml
diff --git a/2022/CVE-2022-38130.md b/2022/CVE-2022-38130.md
index 284bdf047a5..eade801c597 100644
--- a/2022/CVE-2022-38130.md
+++ b/2022/CVE-2022-38130.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38130.yaml
diff --git a/2022/CVE-2022-38131.md b/2022/CVE-2022-38131.md
index b971b1763be..317229ebc38 100644
--- a/2022/CVE-2022-38131.md
+++ b/2022/CVE-2022-38131.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38131.yaml
diff --git a/2022/CVE-2022-38295.md b/2022/CVE-2022-38295.md
index 55632c356f5..256840e607f 100644
--- a/2022/CVE-2022-38295.md
+++ b/2022/CVE-2022-38295.md
@@ -15,3 +15,5 @@ Cuppa CMS v1.0 was discovered to contain a cross-site scripting vulnerability at
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38295.yaml
diff --git a/2022/CVE-2022-38296.md b/2022/CVE-2022-38296.md
index aae23005dc5..560bb4819b7 100644
--- a/2022/CVE-2022-38296.md
+++ b/2022/CVE-2022-38296.md
@@ -15,3 +15,5 @@ Cuppa CMS v1.0 was discovered to contain an arbitrary file upload vulnerability
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38296.yaml
diff --git a/2022/CVE-2022-38463.md b/2022/CVE-2022-38463.md
index d433af5cff6..a010e8bd7aa 100644
--- a/2022/CVE-2022-38463.md
+++ b/2022/CVE-2022-38463.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38463.yaml
diff --git a/2022/CVE-2022-38467.md b/2022/CVE-2022-38467.md
index 928cb65b139..b61b3d37171 100644
--- a/2022/CVE-2022-38467.md
+++ b/2022/CVE-2022-38467.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38467.yaml
diff --git a/2022/CVE-2022-38553.md b/2022/CVE-2022-38553.md
index 49a40a33e1f..acf2a00097c 100644
--- a/2022/CVE-2022-38553.md
+++ b/2022/CVE-2022-38553.md
@@ -15,3 +15,5 @@ Academy Learning Management System before v5.9.1 was discovered to contain a ref
 #### Github
 - https://github.com/4websecurity/CVE-2022-38553
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38553.yaml
diff --git a/2022/CVE-2022-38627.md b/2022/CVE-2022-38627.md
index 28acbf01fa0..2312811f4df 100644
--- a/2022/CVE-2022-38627.md
+++ b/2022/CVE-2022-38627.md
@@ -16,3 +16,5 @@ Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b,
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38627.yaml
diff --git a/2022/CVE-2022-38637.md b/2022/CVE-2022-38637.md
index eb5be4c13b1..0c22ee2c32a 100644
--- a/2022/CVE-2022-38637.md
+++ b/2022/CVE-2022-38637.md
@@ -15,3 +15,5 @@ Hospital Management System v1.0 was discovered to contain multiple SQL injection
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38637.yaml
diff --git a/2022/CVE-2022-3869.md b/2022/CVE-2022-3869.md
index f0f3363b55a..606a9523ce1 100644
--- a/2022/CVE-2022-3869.md
+++ b/2022/CVE-2022-3869.md
@@ -15,3 +15,5 @@ Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3869.yaml
diff --git a/2022/CVE-2022-38794.md b/2022/CVE-2022-38794.md
index d8b0054372f..e291806c1fd 100644
--- a/2022/CVE-2022-38794.md
+++ b/2022/CVE-2022-38794.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38794.yaml
diff --git a/2022/CVE-2022-38812.md b/2022/CVE-2022-38812.md
index 10adcc292a8..2a5866b1e94 100644
--- a/2022/CVE-2022-38812.md
+++ b/2022/CVE-2022-38812.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38812.yaml
diff --git a/2022/CVE-2022-38817.md b/2022/CVE-2022-38817.md
index 15202073734..b0911d6f534 100644
--- a/2022/CVE-2022-38817.md
+++ b/2022/CVE-2022-38817.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38817.yaml
diff --git a/2022/CVE-2022-38840.md b/2022/CVE-2022-38840.md
index cbfcf70da35..869b6b230c5 100644
--- a/2022/CVE-2022-38840.md
+++ b/2022/CVE-2022-38840.md
@@ -15,3 +15,5 @@ cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML Exte
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38840.yaml
diff --git a/2022/CVE-2022-38870.md b/2022/CVE-2022-38870.md
index cd9e7dc2307..58807c8ab09 100644
--- a/2022/CVE-2022-38870.md
+++ b/2022/CVE-2022-38870.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38870.yaml
diff --git a/2022/CVE-2022-3908.md b/2022/CVE-2022-3908.md
index 4e672d88282..567ec8aba84 100644
--- a/2022/CVE-2022-3908.md
+++ b/2022/CVE-2022-3908.md
@@ -15,3 +15,5 @@ The Helloprint WordPress plugin before 1.4.7 does not sanitise and escape a para
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3908.yaml
diff --git a/2022/CVE-2022-39195.md b/2022/CVE-2022-39195.md
index 3544e199dd3..e9ec91b523d 100644
--- a/2022/CVE-2022-39195.md
+++ b/2022/CVE-2022-39195.md
@@ -15,3 +15,5 @@ A cross-site scripting (XSS) vulnerability in the LISTSERV 17 web interface allo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39195.yaml
diff --git a/2022/CVE-2022-39258.md b/2022/CVE-2022-39258.md
index 7afa2adb0b4..99dfd4e380c 100644
--- a/2022/CVE-2022-39258.md
+++ b/2022/CVE-2022-39258.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39258.yaml
diff --git a/2022/CVE-2022-3933.md b/2022/CVE-2022-3933.md
index b53b8ba8dfe..c67c4e631e9 100644
--- a/2022/CVE-2022-3933.md
+++ b/2022/CVE-2022-3933.md
@@ -15,3 +15,5 @@ The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and es
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3933.yaml
diff --git a/2022/CVE-2022-3934.md b/2022/CVE-2022-3934.md
index e63cd7e45b5..f0e39e165dc 100644
--- a/2022/CVE-2022-3934.md
+++ b/2022/CVE-2022-3934.md
@@ -15,3 +15,5 @@ The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some para
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3934.yaml
diff --git a/2022/CVE-2022-3980.md b/2022/CVE-2022-3980.md
index 7bdb52f20ae..5f5ec5ec96a 100644
--- a/2022/CVE-2022-3980.md
+++ b/2022/CVE-2022-3980.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3980.yaml
diff --git a/2022/CVE-2022-3982.md b/2022/CVE-2022-3982.md
index 2949642da46..2170e741be5 100644
--- a/2022/CVE-2022-3982.md
+++ b/2022/CVE-2022-3982.md
@@ -15,3 +15,5 @@ The Booking calendar, Appointment Booking System WordPress plugin before 3.2.2 d
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3982.yaml
diff --git a/2022/CVE-2022-39952.md b/2022/CVE-2022-39952.md
index 84b9b2611b5..35d987ba9e5 100644
--- a/2022/CVE-2022-39952.md
+++ b/2022/CVE-2022-39952.md
@@ -25,3 +25,5 @@ No PoCs from references.
 - https://github.com/horizon3ai/CVE-2022-39952
 - https://github.com/shiyeshu/CVE-2022-39952_webshell
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39952.yaml
diff --git a/2022/CVE-2022-39960.md b/2022/CVE-2022-39960.md
index 6caa76f4025..ff4cf8fbcc8 100644
--- a/2022/CVE-2022-39960.md
+++ b/2022/CVE-2022-39960.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39960.yaml
diff --git a/2022/CVE-2022-39986.md b/2022/CVE-2022-39986.md
index edaf7f5f905..005fd085996 100644
--- a/2022/CVE-2022-39986.md
+++ b/2022/CVE-2022-39986.md
@@ -19,3 +19,5 @@ A Command injection vulnerability in RaspAP 2.8.0 thru 2.8.7 allows unauthentica
 - https://github.com/mind2hex/CVE-2022-39986-RaspAP-2.8.0-2.8.7-RCE
 - https://github.com/mind2hex/RaspAP_Hunter
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39986.yaml
diff --git a/2022/CVE-2022-40022.md b/2022/CVE-2022-40022.md
index 4494787cdd8..32b9aa87eaa 100644
--- a/2022/CVE-2022-40022.md
+++ b/2022/CVE-2022-40022.md
@@ -16,3 +16,5 @@ Microchip Technology (Microsemi) SyncServer S650 was discovered to contain a com
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40022.yaml
diff --git a/2022/CVE-2022-40032.md b/2022/CVE-2022-40032.md
index 010ceddea28..4018bc3f16e 100644
--- a/2022/CVE-2022-40032.md
+++ b/2022/CVE-2022-40032.md
@@ -16,3 +16,5 @@ SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40032.yaml
diff --git a/2022/CVE-2022-40083.md b/2022/CVE-2022-40083.md
index 1567ec4cd32..16a886de430 100644
--- a/2022/CVE-2022-40083.md
+++ b/2022/CVE-2022-40083.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40083.yaml
diff --git a/2022/CVE-2022-40127.md b/2022/CVE-2022-40127.md
index 1c3b338024b..d115f9886d3 100644
--- a/2022/CVE-2022-40127.md
+++ b/2022/CVE-2022-40127.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/jakabakos/CVE-2022-40127
 - https://github.com/jakabakos/CVE-2022-40127-Airflow-RCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40127.yaml
diff --git a/2022/CVE-2022-40359.md b/2022/CVE-2022-40359.md
index 0e6676e44db..e3d40504d3f 100644
--- a/2022/CVE-2022-40359.md
+++ b/2022/CVE-2022-40359.md
@@ -15,3 +15,5 @@ Cross site scripting (XSS) vulnerability in kfm through 1.4.7 via crafted GET re
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40359.yaml
diff --git a/2022/CVE-2022-40443.md b/2022/CVE-2022-40443.md
index 81baa9a48f1..9cc50f9e668 100644
--- a/2022/CVE-2022-40443.md
+++ b/2022/CVE-2022-40443.md
@@ -15,3 +15,5 @@ An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtai
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40443.yaml
diff --git a/2022/CVE-2022-4049.md b/2022/CVE-2022-4049.md
index fa7c26d2cff..a0c8982e41f 100644
--- a/2022/CVE-2022-4049.md
+++ b/2022/CVE-2022-4049.md
@@ -15,3 +15,5 @@ The WP User WordPress plugin through 7.0 does not properly sanitize and escape a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4049.yaml
diff --git a/2022/CVE-2022-4050.md b/2022/CVE-2022-4050.md
index 66f6cfc3a1b..d640f4321a4 100644
--- a/2022/CVE-2022-4050.md
+++ b/2022/CVE-2022-4050.md
@@ -15,3 +15,5 @@ The JoomSport WordPress plugin before 5.2.8 does not properly sanitise and escap
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4050.yaml
diff --git a/2022/CVE-2022-4057.md b/2022/CVE-2022-4057.md
index 306bb46a89d..9b413e44c6c 100644
--- a/2022/CVE-2022-4057.md
+++ b/2022/CVE-2022-4057.md
@@ -15,3 +15,5 @@ The Autoptimize WordPress plugin before 3.1.0 uses an easily guessable path to s
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4057.yaml
diff --git a/2022/CVE-2022-4059.md b/2022/CVE-2022-4059.md
index 3ec6d143483..0b28e56bc19 100644
--- a/2022/CVE-2022-4059.md
+++ b/2022/CVE-2022-4059.md
@@ -15,3 +15,5 @@ The Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4059.yaml
diff --git a/2022/CVE-2022-4060.md b/2022/CVE-2022-4060.md
index 15a3ef0871a..9313e80665f 100644
--- a/2022/CVE-2022-4060.md
+++ b/2022/CVE-2022-4060.md
@@ -16,3 +16,5 @@ The User Post Gallery WordPress plugin through 2.19 does not limit what callback
 - https://github.com/devmehedi101/wordpress-exploit
 - https://github.com/securi3ytalent/wordpress-exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4060.yaml
diff --git a/2022/CVE-2022-40624.md b/2022/CVE-2022-40624.md
index bdfc55e6dee..d946b7920d3 100644
--- a/2022/CVE-2022-40624.md
+++ b/2022/CVE-2022-40624.md
@@ -15,3 +15,5 @@ pfSense pfBlockerNG through 2.1.4_27 allows remote attackers to execute arbitrar
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40624.yaml
diff --git a/2022/CVE-2022-4063.md b/2022/CVE-2022-4063.md
index 0a5dfcd0c0c..19b86e05288 100644
--- a/2022/CVE-2022-4063.md
+++ b/2022/CVE-2022-4063.md
@@ -15,3 +15,5 @@ The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4063.yaml
diff --git a/2022/CVE-2022-40684.md b/2022/CVE-2022-40684.md
index 2ded4650967..29d8008b42d 100644
--- a/2022/CVE-2022-40684.md
+++ b/2022/CVE-2022-40684.md
@@ -40,3 +40,5 @@ An authentication bypass using an alternate path or channel [CWE-288] in Fortine
 - https://github.com/und3sc0n0c1d0/CVE-2022-40684
 - https://github.com/z-bool/CVE-2022-40684
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40684.yaml
diff --git a/2022/CVE-2022-40734.md b/2022/CVE-2022-40734.md
index 8cea94e08a1..014f279e0d1 100644
--- a/2022/CVE-2022-40734.md
+++ b/2022/CVE-2022-40734.md
@@ -17,3 +17,5 @@ UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows downl
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40734.yaml
diff --git a/2022/CVE-2022-40843.md b/2022/CVE-2022-40843.md
index 5c72ae76326..54fe6e9030d 100644
--- a/2022/CVE-2022-40843.md
+++ b/2022/CVE-2022-40843.md
@@ -15,3 +15,5 @@ The Tenda AC1200 V-W15Ev2 V15.11.0.10(1576) router is vulnerable to improper aut
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40843.yaml
diff --git a/2022/CVE-2022-40879.md b/2022/CVE-2022-40879.md
index 20495871164..b63c6570f5b 100644
--- a/2022/CVE-2022-40879.md
+++ b/2022/CVE-2022-40879.md
@@ -15,3 +15,5 @@ kkFileView v4.1.0 is vulnerable to Cross Site Scripting (XSS) via the parameter
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40879.yaml
diff --git a/2022/CVE-2022-40881.md b/2022/CVE-2022-40881.md
index 1133f19cd16..9a99a460d5d 100644
--- a/2022/CVE-2022-40881.md
+++ b/2022/CVE-2022-40881.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/yilin1203/CVE-2022-40881
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40881.yaml
diff --git a/2022/CVE-2022-4117.md b/2022/CVE-2022-4117.md
index ec897149a85..955495382bb 100644
--- a/2022/CVE-2022-4117.md
+++ b/2022/CVE-2022-4117.md
@@ -15,3 +15,5 @@ The IWS WordPress plugin through 1.0 does not properly escape a parameter before
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4117.yaml
diff --git a/2022/CVE-2022-41352.md b/2022/CVE-2022-41352.md
index f0cb9afa52a..11cb0c30ac9 100644
--- a/2022/CVE-2022-41352.md
+++ b/2022/CVE-2022-41352.md
@@ -20,3 +20,5 @@ An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacke
 - https://github.com/rxerium/CVE-2022-41352
 - https://github.com/segfault-it/cve-2022-41352
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41352.yaml
diff --git a/2022/CVE-2022-4140.md b/2022/CVE-2022-4140.md
index a87d0bbbadc..ca88c4d8172 100644
--- a/2022/CVE-2022-4140.md
+++ b/2022/CVE-2022-4140.md
@@ -15,3 +15,5 @@ The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user inpu
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4140.yaml
diff --git a/2022/CVE-2022-41412.md b/2022/CVE-2022-41412.md
index b2cc5782f58..4572891a5b8 100644
--- a/2022/CVE-2022-41412.md
+++ b/2022/CVE-2022-41412.md
@@ -16,3 +16,5 @@ An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows att
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41412.yaml
diff --git a/2022/CVE-2022-41441.md b/2022/CVE-2022-41441.md
index 5743d6edd0c..9b6d93bd10e 100644
--- a/2022/CVE-2022-41441.md
+++ b/2022/CVE-2022-41441.md
@@ -16,3 +16,5 @@ Multiple cross-site scripting (XSS) vulnerabilities in ReQlogic v11.3 allow atta
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41441.yaml
diff --git a/2022/CVE-2022-41473.md b/2022/CVE-2022-41473.md
index 711e7be82d0..455b4443e00 100644
--- a/2022/CVE-2022-41473.md
+++ b/2022/CVE-2022-41473.md
@@ -15,3 +15,5 @@ RPCMS v3.0.2 was discovered to contain a reflected cross-site scripting (XSS) vu
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41473.yaml
diff --git a/2022/CVE-2022-41678.md b/2022/CVE-2022-41678.md
index 0d80f45eda6..c61226cdecd 100644
--- a/2022/CVE-2022-41678.md
+++ b/2022/CVE-2022-41678.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 - https://github.com/mbadanoiu/CVE-2022-41678
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41678.yaml
diff --git a/2022/CVE-2022-41697.md b/2022/CVE-2022-41697.md
index c9d30cd6f0c..74a8c871c12 100644
--- a/2022/CVE-2022-41697.md
+++ b/2022/CVE-2022-41697.md
@@ -15,3 +15,5 @@ A user enumeration vulnerability exists in the login functionality of Ghost Foun
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41697.yaml
diff --git a/2022/CVE-2022-41800.md b/2022/CVE-2022-41800.md
index e0271e8d08c..abf60669690 100644
--- a/2022/CVE-2022-41800.md
+++ b/2022/CVE-2022-41800.md
@@ -19,3 +19,5 @@ No PoCs from references.
 #### Github
 - https://github.com/j-baines/tippa-my-tongue
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41800.yaml
diff --git a/2022/CVE-2022-41840.md b/2022/CVE-2022-41840.md
index 9027917acd7..1e6f21556fc 100644
--- a/2022/CVE-2022-41840.md
+++ b/2022/CVE-2022-41840.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41840.yaml
diff --git a/2022/CVE-2022-42094.md b/2022/CVE-2022-42094.md
index b4e51afeb35..7d3355866a2 100644
--- a/2022/CVE-2022-42094.md
+++ b/2022/CVE-2022-42094.md
@@ -15,3 +15,5 @@ Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site script
 #### Github
 - https://github.com/bypazs/CVE-2022-42094
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42094.yaml
diff --git a/2022/CVE-2022-42095.md b/2022/CVE-2022-42095.md
index 82f33bc1dca..8dd10a707bd 100644
--- a/2022/CVE-2022-42095.md
+++ b/2022/CVE-2022-42095.md
@@ -15,3 +15,5 @@ Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site script
 #### Github
 - https://github.com/bypazs/CVE-2022-42095
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42095.yaml
diff --git a/2022/CVE-2022-42096.md b/2022/CVE-2022-42096.md
index db4a3f502a9..e514fe40015 100644
--- a/2022/CVE-2022-42096.md
+++ b/2022/CVE-2022-42096.md
@@ -15,3 +15,5 @@ Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site script
 #### Github
 - https://github.com/bypazs/CVE-2022-42096
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42096.yaml
diff --git a/2022/CVE-2022-42118.md b/2022/CVE-2022-42118.md
index 23529fe6b95..9bedce09ef4 100644
--- a/2022/CVE-2022-42118.md
+++ b/2022/CVE-2022-42118.md
@@ -15,3 +15,5 @@ A Cross-site scripting (XSS) vulnerability in the Portal Search module in Lifera
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42118.yaml
diff --git a/2022/CVE-2022-4223.md b/2022/CVE-2022-4223.md
index 391542dae84..c451e9e2b8a 100644
--- a/2022/CVE-2022-4223.md
+++ b/2022/CVE-2022-4223.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4223.yaml
diff --git a/2022/CVE-2022-42233.md b/2022/CVE-2022-42233.md
index c254a122acf..f07f0968b59 100644
--- a/2022/CVE-2022-42233.md
+++ b/2022/CVE-2022-42233.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42233.yaml
diff --git a/2022/CVE-2022-42475.md b/2022/CVE-2022-42475.md
index dc254a0c961..237d1e7a6a1 100644
--- a/2022/CVE-2022-42475.md
+++ b/2022/CVE-2022-42475.md
@@ -40,3 +40,5 @@ No PoCs from references.
 - https://github.com/scrt/cve-2022-42475
 - https://github.com/uLl0a/cve-2022-42475-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2022/CVE-2022-42475.yaml
diff --git a/2022/CVE-2022-4260.md b/2022/CVE-2022-4260.md
index 16b0bacc057..1666539f2b5 100644
--- a/2022/CVE-2022-4260.md
+++ b/2022/CVE-2022-4260.md
@@ -15,3 +15,5 @@ The WP-Ban WordPress plugin before 1.69.1 does not sanitise and escape some of i
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4260.yaml
diff --git a/2022/CVE-2022-42746.md b/2022/CVE-2022-42746.md
index f915f2a6bc2..a8dc3956f45 100644
--- a/2022/CVE-2022-42746.md
+++ b/2022/CVE-2022-42746.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42746.yaml
diff --git a/2022/CVE-2022-42747.md b/2022/CVE-2022-42747.md
index 4a790a16240..d3bb27e920e 100644
--- a/2022/CVE-2022-42747.md
+++ b/2022/CVE-2022-42747.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42747.yaml
diff --git a/2022/CVE-2022-42748.md b/2022/CVE-2022-42748.md
index 6c16c9e1362..3718a7d1963 100644
--- a/2022/CVE-2022-42748.md
+++ b/2022/CVE-2022-42748.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42748.yaml
diff --git a/2022/CVE-2022-42749.md b/2022/CVE-2022-42749.md
index 865b0edf4bc..a715ea12302 100644
--- a/2022/CVE-2022-42749.md
+++ b/2022/CVE-2022-42749.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42749.yaml
diff --git a/2022/CVE-2022-42889.md b/2022/CVE-2022-42889.md
index 01c445a78c1..a5c58f2febf 100644
--- a/2022/CVE-2022-42889.md
+++ b/2022/CVE-2022-42889.md
@@ -59,3 +59,5 @@ Apache Commons Text performs variable interpolation, allowing properties to be d
 - https://github.com/uk0/cve-2022-42889-intercept
 - https://github.com/vickyaryan7/Text4shell-exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2022/CVE-2022-42889.yaml
diff --git a/2022/CVE-2022-4295.md b/2022/CVE-2022-4295.md
index 543fd21418e..39257770940 100644
--- a/2022/CVE-2022-4295.md
+++ b/2022/CVE-2022-4295.md
@@ -15,3 +15,5 @@ The Show All Comments WordPress plugin before 7.0.1 does not sanitise and escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4295.yaml
diff --git a/2022/CVE-2022-4301.md b/2022/CVE-2022-4301.md
index d01d328d5b0..c2afc8db0c1 100644
--- a/2022/CVE-2022-4301.md
+++ b/2022/CVE-2022-4301.md
@@ -15,3 +15,5 @@ The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and esc
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4301.yaml
diff --git a/2022/CVE-2022-43014.md b/2022/CVE-2022-43014.md
index 433d5861a02..077cd2f9219 100644
--- a/2022/CVE-2022-43014.md
+++ b/2022/CVE-2022-43014.md
@@ -15,3 +15,5 @@ OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43014.yaml
diff --git a/2022/CVE-2022-43015.md b/2022/CVE-2022-43015.md
index 8995019b603..df3be64fca1 100644
--- a/2022/CVE-2022-43015.md
+++ b/2022/CVE-2022-43015.md
@@ -15,3 +15,5 @@ OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43015.yaml
diff --git a/2022/CVE-2022-43016.md b/2022/CVE-2022-43016.md
index cecea92a18d..edbce2f3908 100644
--- a/2022/CVE-2022-43016.md
+++ b/2022/CVE-2022-43016.md
@@ -15,3 +15,5 @@ OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43016.yaml
diff --git a/2022/CVE-2022-43017.md b/2022/CVE-2022-43017.md
index 79bc2d81c52..75d58264307 100644
--- a/2022/CVE-2022-43017.md
+++ b/2022/CVE-2022-43017.md
@@ -15,3 +15,5 @@ OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43017.yaml
diff --git a/2022/CVE-2022-43018.md b/2022/CVE-2022-43018.md
index b6d9d9108f8..ff7d4adfc00 100644
--- a/2022/CVE-2022-43018.md
+++ b/2022/CVE-2022-43018.md
@@ -15,3 +15,5 @@ OpenCATS v0.9.6 was discovered to contain a reflected cross-site scripting (XSS)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43018.yaml
diff --git a/2022/CVE-2022-4305.md b/2022/CVE-2022-4305.md
index 1145c6f54da..caad8ccb81f 100644
--- a/2022/CVE-2022-4305.md
+++ b/2022/CVE-2022-4305.md
@@ -15,3 +15,5 @@ The Login as User or Customer WordPress plugin before 3.3 lacks authorization ch
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4305.yaml
diff --git a/2022/CVE-2022-4306.md b/2022/CVE-2022-4306.md
index 077048e30da..bb618a47218 100644
--- a/2022/CVE-2022-4306.md
+++ b/2022/CVE-2022-4306.md
@@ -15,3 +15,5 @@ The Panda Pods Repeater Field WordPress plugin before 1.5.4 does not sanitize an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4306.yaml
diff --git a/2022/CVE-2022-43140.md b/2022/CVE-2022-43140.md
index 5628c7e1408..db9a85ca5c9 100644
--- a/2022/CVE-2022-43140.md
+++ b/2022/CVE-2022-43140.md
@@ -15,3 +15,5 @@ kkFileView v4.1.0 was discovered to contain a Server-Side Request Forgery (SSRF)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43140.yaml
diff --git a/2022/CVE-2022-43164.md b/2022/CVE-2022-43164.md
index 8162df9d701..76c0400751b 100644
--- a/2022/CVE-2022-43164.md
+++ b/2022/CVE-2022-43164.md
@@ -15,3 +15,5 @@ A stored cross-site scripting (XSS) vulnerability in the Global Lists feature (/
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43164.yaml
diff --git a/2022/CVE-2022-43165.md b/2022/CVE-2022-43165.md
index 3ecc5a1c6b8..d7e305e5077 100644
--- a/2022/CVE-2022-43165.md
+++ b/2022/CVE-2022-43165.md
@@ -15,3 +15,5 @@ A stored cross-site scripting (XSS) vulnerability in the Global Variables featur
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43165.yaml
diff --git a/2022/CVE-2022-43166.md b/2022/CVE-2022-43166.md
index 0e4839da97e..d85abfde765 100644
--- a/2022/CVE-2022-43166.md
+++ b/2022/CVE-2022-43166.md
@@ -15,3 +15,5 @@ A stored cross-site scripting (XSS) vulnerability in the Global Entities feature
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43166.yaml
diff --git a/2022/CVE-2022-43167.md b/2022/CVE-2022-43167.md
index be1304800e5..3e6b55255e2 100644
--- a/2022/CVE-2022-43167.md
+++ b/2022/CVE-2022-43167.md
@@ -15,3 +15,5 @@ A stored cross-site scripting (XSS) vulnerability in the Users Alerts feature (/
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43167.yaml
diff --git a/2022/CVE-2022-43169.md b/2022/CVE-2022-43169.md
index f4757091a88..3c8353ad0da 100644
--- a/2022/CVE-2022-43169.md
+++ b/2022/CVE-2022-43169.md
@@ -15,3 +15,5 @@ A stored cross-site scripting (XSS) vulnerability in the Users Access Groups fea
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43169.yaml
diff --git a/2022/CVE-2022-43170.md b/2022/CVE-2022-43170.md
index c02571f983e..df52d5fc457 100644
--- a/2022/CVE-2022-43170.md
+++ b/2022/CVE-2022-43170.md
@@ -15,3 +15,5 @@ A stored cross-site scripting (XSS) vulnerability in the Dashboard Configuration
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43170.yaml
diff --git a/2022/CVE-2022-43185.md b/2022/CVE-2022-43185.md
index f156971bcee..f35df77a207 100644
--- a/2022/CVE-2022-43185.md
+++ b/2022/CVE-2022-43185.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43185.yaml
diff --git a/2022/CVE-2022-4320.md b/2022/CVE-2022-4320.md
index 95131b3ff60..25a7b46ffbf 100644
--- a/2022/CVE-2022-4320.md
+++ b/2022/CVE-2022-4320.md
@@ -15,3 +15,5 @@ The WordPress Events Calendar WordPress plugin before 1.4.5 does not sanitize an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4320.yaml
diff --git a/2022/CVE-2022-4321.md b/2022/CVE-2022-4321.md
index b34cbc55b06..604666fb05c 100644
--- a/2022/CVE-2022-4321.md
+++ b/2022/CVE-2022-4321.md
@@ -15,3 +15,5 @@ The PDF Generator for WordPress plugin before 1.1.2 includes a vendored dompdf e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4321.yaml
diff --git a/2022/CVE-2022-4325.md b/2022/CVE-2022-4325.md
index 3266f7ca6a9..95c791f5eb3 100644
--- a/2022/CVE-2022-4325.md
+++ b/2022/CVE-2022-4325.md
@@ -15,3 +15,5 @@ The Post Status Notifier Lite WordPress plugin before 1.10.1 does not sanitise a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4325.yaml
diff --git a/2022/CVE-2022-4328.md b/2022/CVE-2022-4328.md
index a5110b25819..7637ba8fc8c 100644
--- a/2022/CVE-2022-4328.md
+++ b/2022/CVE-2022-4328.md
@@ -15,3 +15,5 @@ The WooCommerce Checkout Field Manager WordPress plugin before 18.0 does not val
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4328.yaml
diff --git a/2022/CVE-2022-4375.md b/2022/CVE-2022-4375.md
index 3cb3ae98182..461811d391e 100644
--- a/2022/CVE-2022-4375.md
+++ b/2022/CVE-2022-4375.md
@@ -25,3 +25,5 @@ A vulnerability was found in Mingsoft MCMS up to 5.2.9. It has been classified a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4375.yaml
diff --git a/2022/CVE-2022-43769.md b/2022/CVE-2022-43769.md
index 8f078d4cf3c..04b1e0d530f 100644
--- a/2022/CVE-2022-43769.md
+++ b/2022/CVE-2022-43769.md
@@ -17,3 +17,5 @@ Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43769.yaml
diff --git a/2022/CVE-2022-43939.md b/2022/CVE-2022-43939.md
index 332e57b0214..2c7a5c548ea 100644
--- a/2022/CVE-2022-43939.md
+++ b/2022/CVE-2022-43939.md
@@ -17,3 +17,5 @@ Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43939.yaml
diff --git a/2022/CVE-2022-44290.md b/2022/CVE-2022-44290.md
index 40175e29d83..89c00d35d8c 100644
--- a/2022/CVE-2022-44290.md
+++ b/2022/CVE-2022-44290.md
@@ -15,3 +15,5 @@ webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44290.yaml
diff --git a/2022/CVE-2022-44291.md b/2022/CVE-2022-44291.md
index c3052220bd1..5836ff35099 100644
--- a/2022/CVE-2022-44291.md
+++ b/2022/CVE-2022-44291.md
@@ -15,3 +15,5 @@ webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44291.yaml
diff --git a/2022/CVE-2022-44356.md b/2022/CVE-2022-44356.md
index 52a2813b38e..01095e6e141 100644
--- a/2022/CVE-2022-44356.md
+++ b/2022/CVE-2022-44356.md
@@ -15,3 +15,5 @@ WAVLINK Quantum D4G (WL-WN531G3) running firmware versions M31G3.V5030.201204 an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44356.yaml
diff --git a/2022/CVE-2022-4447.md b/2022/CVE-2022-4447.md
index 5bbe16597dc..8213148d3a6 100644
--- a/2022/CVE-2022-4447.md
+++ b/2022/CVE-2022-4447.md
@@ -15,3 +15,5 @@ The Fontsy WordPress plugin through 1.8.6 does not properly sanitize and escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4447.yaml
diff --git a/2022/CVE-2022-44588.md b/2022/CVE-2022-44588.md
index a6b323c97cf..f9c2ef49666 100644
--- a/2022/CVE-2022-44588.md
+++ b/2022/CVE-2022-44588.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44588.yaml
diff --git a/2022/CVE-2022-44727.md b/2022/CVE-2022-44727.md
index a687d5b005c..3c800e4506f 100644
--- a/2022/CVE-2022-44727.md
+++ b/2022/CVE-2022-44727.md
@@ -15,3 +15,5 @@ The EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop all
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44727.yaml
diff --git a/2022/CVE-2022-44877.md b/2022/CVE-2022-44877.md
index 554c0a6b37a..4b16851de85 100644
--- a/2022/CVE-2022-44877.md
+++ b/2022/CVE-2022-44877.md
@@ -28,3 +28,5 @@ login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.
 - https://github.com/numanturle/CVE-2022-44877
 - https://github.com/rhymsc/CVE-2022-44877-RCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44877.yaml
diff --git a/2022/CVE-2022-44944.md b/2022/CVE-2022-44944.md
index a7b960c7292..ad905855907 100644
--- a/2022/CVE-2022-44944.md
+++ b/2022/CVE-2022-44944.md
@@ -15,3 +15,5 @@ Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44944.yaml
diff --git a/2022/CVE-2022-44946.md b/2022/CVE-2022-44946.md
index f25c8161b2b..cba5b95f590 100644
--- a/2022/CVE-2022-44946.md
+++ b/2022/CVE-2022-44946.md
@@ -15,3 +15,5 @@ Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44946.yaml
diff --git a/2022/CVE-2022-44947.md b/2022/CVE-2022-44947.md
index ca870c93d5e..e303b979549 100644
--- a/2022/CVE-2022-44947.md
+++ b/2022/CVE-2022-44947.md
@@ -15,3 +15,5 @@ Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44947.yaml
diff --git a/2022/CVE-2022-44948.md b/2022/CVE-2022-44948.md
index b78f4a144d3..c625148f94a 100644
--- a/2022/CVE-2022-44948.md
+++ b/2022/CVE-2022-44948.md
@@ -15,3 +15,5 @@ Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44948.yaml
diff --git a/2022/CVE-2022-44949.md b/2022/CVE-2022-44949.md
index 9a6677c3cd2..703050e2a2a 100644
--- a/2022/CVE-2022-44949.md
+++ b/2022/CVE-2022-44949.md
@@ -15,3 +15,5 @@ Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44949.yaml
diff --git a/2022/CVE-2022-44950.md b/2022/CVE-2022-44950.md
index 32cf9596c07..0c3be163ec4 100644
--- a/2022/CVE-2022-44950.md
+++ b/2022/CVE-2022-44950.md
@@ -15,3 +15,5 @@ Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44950.yaml
diff --git a/2022/CVE-2022-44951.md b/2022/CVE-2022-44951.md
index ace9b85d5ec..2c81d7e6df8 100644
--- a/2022/CVE-2022-44951.md
+++ b/2022/CVE-2022-44951.md
@@ -15,3 +15,5 @@ Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44951.yaml
diff --git a/2022/CVE-2022-44952.md b/2022/CVE-2022-44952.md
index 690185954fa..a5fe0654be9 100644
--- a/2022/CVE-2022-44952.md
+++ b/2022/CVE-2022-44952.md
@@ -15,3 +15,5 @@ Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44952.yaml
diff --git a/2022/CVE-2022-44957.md b/2022/CVE-2022-44957.md
index 3ac320a71b8..5201f76cc35 100644
--- a/2022/CVE-2022-44957.md
+++ b/2022/CVE-2022-44957.md
@@ -15,3 +15,5 @@ webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerabi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44957.yaml
diff --git a/2022/CVE-2022-45269.md b/2022/CVE-2022-45269.md
index 0c5f98c470b..e8e900b4183 100644
--- a/2022/CVE-2022-45269.md
+++ b/2022/CVE-2022-45269.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45269.yaml
diff --git a/2022/CVE-2022-45354.md b/2022/CVE-2022-45354.md
index 377b45b5a68..50694b20423 100644
--- a/2022/CVE-2022-45354.md
+++ b/2022/CVE-2022-45354.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2022-45354
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45354.yaml
diff --git a/2022/CVE-2022-45362.md b/2022/CVE-2022-45362.md
index 56114c68d92..acc64ea56b7 100644
--- a/2022/CVE-2022-45362.md
+++ b/2022/CVE-2022-45362.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45362.yaml
diff --git a/2022/CVE-2022-45365.md b/2022/CVE-2022-45365.md
index 7bcc014b1fd..b0da7e73e03 100644
--- a/2022/CVE-2022-45365.md
+++ b/2022/CVE-2022-45365.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45365.yaml
diff --git a/2022/CVE-2022-45699.md b/2022/CVE-2022-45699.md
index ceb6e26507a..da0f51c27c5 100644
--- a/2022/CVE-2022-45699.md
+++ b/2022/CVE-2022-45699.md
@@ -15,3 +15,5 @@ Command injection in the administration interface in APSystems ECU-R version 520
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45699.yaml
diff --git a/2022/CVE-2022-45805.md b/2022/CVE-2022-45805.md
index 724370a6a50..a3a0b32cac5 100644
--- a/2022/CVE-2022-45805.md
+++ b/2022/CVE-2022-45805.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45805.yaml
diff --git a/2022/CVE-2022-45808.md b/2022/CVE-2022-45808.md
index 9296cd386a8..58ae827c4d2 100644
--- a/2022/CVE-2022-45808.md
+++ b/2022/CVE-2022-45808.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2022-45808
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45808.yaml
diff --git a/2022/CVE-2022-45835.md b/2022/CVE-2022-45835.md
index 99bdd45db22..9de23a8292d 100644
--- a/2022/CVE-2022-45835.md
+++ b/2022/CVE-2022-45835.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45835.yaml
diff --git a/2022/CVE-2022-45836.md b/2022/CVE-2022-45836.md
index 972dec91587..90db1f3d887 100644
--- a/2022/CVE-2022-45836.md
+++ b/2022/CVE-2022-45836.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45836.yaml
diff --git a/2022/CVE-2022-45917.md b/2022/CVE-2022-45917.md
index 6d0093147ce..5f6b84cc2b3 100644
--- a/2022/CVE-2022-45917.md
+++ b/2022/CVE-2022-45917.md
@@ -17,3 +17,5 @@ ILIAS before 7.16 has an Open Redirect.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45917.yaml
diff --git a/2022/CVE-2022-45933.md b/2022/CVE-2022-45933.md
index b2a38a681fa..eb6b0ffc4a4 100644
--- a/2022/CVE-2022-45933.md
+++ b/2022/CVE-2022-45933.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45933.yaml
diff --git a/2022/CVE-2022-46071.md b/2022/CVE-2022-46071.md
index 2129e7b33a2..a8fdb3b49df 100644
--- a/2022/CVE-2022-46071.md
+++ b/2022/CVE-2022-46071.md
@@ -16,3 +16,5 @@ There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. T
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46071.yaml
diff --git a/2022/CVE-2022-46073.md b/2022/CVE-2022-46073.md
index 59e123cdc6b..59bee76a8fe 100644
--- a/2022/CVE-2022-46073.md
+++ b/2022/CVE-2022-46073.md
@@ -16,3 +16,5 @@ Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46073.yaml
diff --git a/2022/CVE-2022-46169.md b/2022/CVE-2022-46169.md
index a27e93f9edb..9ada8cb1cad 100644
--- a/2022/CVE-2022-46169.md
+++ b/2022/CVE-2022-46169.md
@@ -58,3 +58,5 @@ No PoCs from references.
 - https://github.com/yassinebk/CVE-2022-46169
 - https://github.com/K4PXD/CVE-2022-46169
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46169.yaml
diff --git a/2022/CVE-2022-46381.md b/2022/CVE-2022-46381.md
index bf3829181e3..0557703fe0c 100644
--- a/2022/CVE-2022-46381.md
+++ b/2022/CVE-2022-46381.md
@@ -15,3 +15,5 @@ Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type param
 #### Github
 - https://github.com/amitlttwo/CVE-2022-46381
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46381.yaml
diff --git a/2022/CVE-2022-46443.md b/2022/CVE-2022-46443.md
index 19e079f46f1..cdcb38b616c 100644
--- a/2022/CVE-2022-46443.md
+++ b/2022/CVE-2022-46443.md
@@ -16,3 +16,5 @@ mesinkasir Bangresto 1.0 is vulnberable to SQL Injection via the itemqty%5B%5D p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46443.yaml
diff --git a/2022/CVE-2022-46888.md b/2022/CVE-2022-46888.md
index 1f71438f373..cb788ce986a 100644
--- a/2022/CVE-2022-46888.md
+++ b/2022/CVE-2022-46888.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46888.yaml
diff --git a/2022/CVE-2022-46934.md b/2022/CVE-2022-46934.md
index 31657910235..958ca620a35 100644
--- a/2022/CVE-2022-46934.md
+++ b/2022/CVE-2022-46934.md
@@ -15,3 +15,5 @@ kkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnera
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46934.yaml
diff --git a/2022/CVE-2022-47002.md b/2022/CVE-2022-47002.md
index 6bd59f333be..f54713a0cdc 100644
--- a/2022/CVE-2022-47002.md
+++ b/2022/CVE-2022-47002.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47002.yaml
diff --git a/2022/CVE-2022-47003.md b/2022/CVE-2022-47003.md
index b07ff9092cc..7d360bc290d 100644
--- a/2022/CVE-2022-47003.md
+++ b/2022/CVE-2022-47003.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47003.yaml
diff --git a/2022/CVE-2022-47075.md b/2022/CVE-2022-47075.md
index 45a0fe74111..2d3fadc0f41 100644
--- a/2022/CVE-2022-47075.md
+++ b/2022/CVE-2022-47075.md
@@ -17,3 +17,5 @@ An issue was discovered in Smart Office Web 20.28 and earlier allows attackers t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47075.yaml
diff --git a/2022/CVE-2022-47615.md b/2022/CVE-2022-47615.md
index e817568a0dd..c67782df635 100644
--- a/2022/CVE-2022-47615.md
+++ b/2022/CVE-2022-47615.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2022-47615
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47615.yaml
diff --git a/2022/CVE-2022-47945.md b/2022/CVE-2022-47945.md
index e7692898ae1..c2d11335c55 100644
--- a/2022/CVE-2022-47945.md
+++ b/2022/CVE-2022-47945.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47945.yaml
diff --git a/2022/CVE-2022-47966.md b/2022/CVE-2022-47966.md
index 5f80d85fb2c..c7ac2c63c09 100644
--- a/2022/CVE-2022-47966.md
+++ b/2022/CVE-2022-47966.md
@@ -21,3 +21,5 @@ Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through
 #### Github
 - https://github.com/shameem-testing/PoC-for-ME-SAML-Vulnerability
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47966.yaml
diff --git a/2022/CVE-2022-47986.md b/2022/CVE-2022-47986.md
index b3f98f892af..e0d67208952 100644
--- a/2022/CVE-2022-47986.md
+++ b/2022/CVE-2022-47986.md
@@ -17,3 +17,5 @@ IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker
 - https://github.com/mauricelambert/CVE-2022-47986
 - https://github.com/ohnonoyesyes/CVE-2022-47986
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47986.yaml
diff --git a/2022/CVE-2022-48012.md b/2022/CVE-2022-48012.md
index 417d0da1686..104e827941f 100644
--- a/2022/CVE-2022-48012.md
+++ b/2022/CVE-2022-48012.md
@@ -15,3 +15,5 @@ Opencats v0.9.7 was discovered to contain a reflected cross-site scripting (XSS)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48012.yaml
diff --git a/2022/CVE-2022-48164.md b/2022/CVE-2022-48164.md
index 7e4d693e648..7a60452b619 100644
--- a/2022/CVE-2022-48164.md
+++ b/2022/CVE-2022-48164.md
@@ -16,3 +16,5 @@ An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48164.yaml
diff --git a/2022/CVE-2022-48165.md b/2022/CVE-2022-48165.md
index c9ffe71441c..dad38760fd5 100644
--- a/2022/CVE-2022-48165.md
+++ b/2022/CVE-2022-48165.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48165.yaml
diff --git a/2022/CVE-2022-48197.md b/2022/CVE-2022-48197.md
index c339892595a..b799abe5961 100644
--- a/2022/CVE-2022-48197.md
+++ b/2022/CVE-2022-48197.md
@@ -15,3 +15,5 @@ Reflected cross-site scripting (XSS) exists in Sandbox examples in the YUI2 repo
 #### Github
 - https://github.com/ryan412/CVE-2022-48197
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48197.yaml
diff --git a/2022/CVE-2022-48323.md b/2022/CVE-2022-48323.md
index 8dc65966848..04628da9dff 100644
--- a/2022/CVE-2022-48323.md
+++ b/2022/CVE-2022-48323.md
@@ -15,3 +15,5 @@ Sunlogin Sunflower Simplified (aka Sunflower Simple and Personal) 1.0.1.43315 is
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48323.yaml
diff --git a/2022/CVE-2022-4897.md b/2022/CVE-2022-4897.md
index 95914ae3af5..d032a7a208f 100644
--- a/2022/CVE-2022-4897.md
+++ b/2022/CVE-2022-4897.md
@@ -15,3 +15,5 @@ The BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4897.yaml
diff --git a/2022/CVE-2022-4940.md b/2022/CVE-2022-4940.md
index 35b91f47037..372791f5229 100644
--- a/2022/CVE-2022-4940.md
+++ b/2022/CVE-2022-4940.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4940.yaml
diff --git a/2022/CVE-2022-4971.md b/2022/CVE-2022-4971.md
index 657132243f5..9344dfcfcf3 100644
--- a/2022/CVE-2022-4971.md
+++ b/2022/CVE-2022-4971.md
@@ -15,3 +15,5 @@ The Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Sit
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4971.yaml
diff --git a/2023/CVE-2023-0037.md b/2023/CVE-2023-0037.md
index 3c659e8b9e1..cd5ecfb181b 100644
--- a/2023/CVE-2023-0037.md
+++ b/2023/CVE-2023-0037.md
@@ -15,3 +15,5 @@ The 10Web Map Builder for Google Maps WordPress plugin before 1.0.73 does not pr
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0037.yaml
diff --git a/2023/CVE-2023-0099.md b/2023/CVE-2023-0099.md
index 0762acb2885..ce46e4d3038 100644
--- a/2023/CVE-2023-0099.md
+++ b/2023/CVE-2023-0099.md
@@ -16,3 +16,5 @@ The Simple URLs WordPress plugin before 115 does not sanitise and escape some pa
 #### Github
 - https://github.com/amirzargham/CVE-2023-0099-exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0099.yaml
diff --git a/2023/CVE-2023-0126.md b/2023/CVE-2023-0126.md
index a76b4b5c056..2d4b2c4dbc9 100644
--- a/2023/CVE-2023-0126.md
+++ b/2023/CVE-2023-0126.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0126.yaml
diff --git a/2023/CVE-2023-0159.md b/2023/CVE-2023-0159.md
index 7cd2ebc5f18..3f5bca2b838 100644
--- a/2023/CVE-2023-0159.md
+++ b/2023/CVE-2023-0159.md
@@ -15,3 +15,5 @@ The Extensive VC Addons for WPBakery page builder WordPress plugin before 1.9.1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0159.yaml
diff --git a/2023/CVE-2023-0236.md b/2023/CVE-2023-0236.md
index 1bb100cab85..40d0156b3f2 100644
--- a/2023/CVE-2023-0236.md
+++ b/2023/CVE-2023-0236.md
@@ -15,3 +15,5 @@ The Tutor LMS WordPress plugin before 2.0.10 does not sanitise and escape the re
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0236.yaml
diff --git a/2023/CVE-2023-0261.md b/2023/CVE-2023-0261.md
index 48346259561..966db7986bb 100644
--- a/2023/CVE-2023-0261.md
+++ b/2023/CVE-2023-0261.md
@@ -15,3 +15,5 @@ The WP TripAdvisor Review Slider WordPress plugin before 10.8 does not properly
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0261.yaml
diff --git a/2023/CVE-2023-0297.md b/2023/CVE-2023-0297.md
index 6cf535806dc..6c976f60f11 100644
--- a/2023/CVE-2023-0297.md
+++ b/2023/CVE-2023-0297.md
@@ -21,3 +21,5 @@ Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.
 - https://github.com/btar1gan/exploit_CVE-2023-0297
 - https://github.com/overgrowncarrot1/CVE-2023-0297
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0297.yaml
diff --git a/2023/CVE-2023-0334.md b/2023/CVE-2023-0334.md
index 89dca5e3d01..28f4c353909 100644
--- a/2023/CVE-2023-0334.md
+++ b/2023/CVE-2023-0334.md
@@ -15,3 +15,5 @@ The ShortPixel Adaptive Images WordPress plugin before 3.6.3 does not sanitise a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0334.yaml
diff --git a/2023/CVE-2023-0448.md b/2023/CVE-2023-0448.md
index 4a85bf1a52f..2872f914bcf 100644
--- a/2023/CVE-2023-0448.md
+++ b/2023/CVE-2023-0448.md
@@ -15,3 +15,5 @@ The WP Helper Lite WordPress plugin, in versions < 4.3, returns all GET paramete
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0448.yaml
diff --git a/2023/CVE-2023-0514.md b/2023/CVE-2023-0514.md
index adaba005704..4bfbe3625f9 100644
--- a/2023/CVE-2023-0514.md
+++ b/2023/CVE-2023-0514.md
@@ -15,3 +15,5 @@ The Membership Database WordPress plugin through 1.0 does not sanitise and escap
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0514.yaml
diff --git a/2023/CVE-2023-0527.md b/2023/CVE-2023-0527.md
index b763787560f..9fb7a4f2ca5 100644
--- a/2023/CVE-2023-0527.md
+++ b/2023/CVE-2023-0527.md
@@ -17,3 +17,5 @@ Eine Schwachstelle wurde in PHPGurukul Online Security Guards Hiring System 1.0
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0527.yaml
diff --git a/2023/CVE-2023-0552.md b/2023/CVE-2023-0552.md
index 390751317b6..0621bc091f7 100644
--- a/2023/CVE-2023-0552.md
+++ b/2023/CVE-2023-0552.md
@@ -15,3 +15,5 @@ The Registration Forms WordPress plugin before 3.8.2.3 does not properly validat
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0552.yaml
diff --git a/2023/CVE-2023-0562.md b/2023/CVE-2023-0562.md
index afceea2ec48..90364681bc7 100644
--- a/2023/CVE-2023-0562.md
+++ b/2023/CVE-2023-0562.md
@@ -16,3 +16,5 @@ Eine kritische Schwachstelle wurde in PHPGurukul Bank Locker Management System 1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0562.yaml
diff --git a/2023/CVE-2023-0563.md b/2023/CVE-2023-0563.md
index 7bf23748204..c0c7ea2cf43 100644
--- a/2023/CVE-2023-0563.md
+++ b/2023/CVE-2023-0563.md
@@ -16,3 +16,5 @@ Es wurde eine Schwachstelle in PHPGurukul Bank Locker Management System 1.0 entd
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0563.yaml
diff --git a/2023/CVE-2023-0600.md b/2023/CVE-2023-0600.md
index 21f3074f8a3..a9ace817acf 100644
--- a/2023/CVE-2023-0600.md
+++ b/2023/CVE-2023-0600.md
@@ -15,3 +15,5 @@ The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 6.9 does n
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0600.yaml
diff --git a/2023/CVE-2023-0602.md b/2023/CVE-2023-0602.md
index a67e7e5750f..3ccb6edf991 100644
--- a/2023/CVE-2023-0602.md
+++ b/2023/CVE-2023-0602.md
@@ -15,3 +15,5 @@ The Twittee Text Tweet WordPress plugin through 1.0.8 does not properly escape P
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0602.yaml
diff --git a/2023/CVE-2023-0630.md b/2023/CVE-2023-0630.md
index 07f55fe2dc2..a3f7c4106c6 100644
--- a/2023/CVE-2023-0630.md
+++ b/2023/CVE-2023-0630.md
@@ -15,3 +15,5 @@ The Slimstat Analytics WordPress plugin before 4.9.3.3 does not prevent subscrib
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2023-0630
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0630.yaml
diff --git a/2023/CVE-2023-0669.md b/2023/CVE-2023-0669.md
index 78e96f6da72..61347f0ffc9 100644
--- a/2023/CVE-2023-0669.md
+++ b/2023/CVE-2023-0669.md
@@ -21,3 +21,5 @@ Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication
 - https://github.com/cataiovita/CVE-2023-0669
 - https://github.com/cataliniovita/CVE-2023-0669
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0669.yaml
diff --git a/2023/CVE-2023-0676.md b/2023/CVE-2023-0676.md
index f4bb4e54577..4786401c53f 100644
--- a/2023/CVE-2023-0676.md
+++ b/2023/CVE-2023-0676.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository phpipam/phpipam prio
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0676.yaml
diff --git a/2023/CVE-2023-0678.md b/2023/CVE-2023-0678.md
index fb3728b5895..8740c15896c 100644
--- a/2023/CVE-2023-0678.md
+++ b/2023/CVE-2023-0678.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0678.yaml
diff --git a/2023/CVE-2023-0777.md b/2023/CVE-2023-0777.md
index b2d44f1db28..b68f1329216 100644
--- a/2023/CVE-2023-0777.md
+++ b/2023/CVE-2023-0777.md
@@ -16,3 +16,5 @@ Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0777.yaml
diff --git a/2023/CVE-2023-0876.md b/2023/CVE-2023-0876.md
index 0882bd675d1..ed1723ee0da 100644
--- a/2023/CVE-2023-0876.md
+++ b/2023/CVE-2023-0876.md
@@ -15,3 +15,5 @@ The WP Meta SEO WordPress plugin before 4.5.3 does not authorize several ajax ac
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0876.yaml
diff --git a/2023/CVE-2023-0900.md b/2023/CVE-2023-0900.md
index d0e114e5f8d..7235fd4e5d0 100644
--- a/2023/CVE-2023-0900.md
+++ b/2023/CVE-2023-0900.md
@@ -15,3 +15,5 @@ The Pricing Table Builder WordPress plugin through 1.1.6 does not properly sanit
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0900.yaml
diff --git a/2023/CVE-2023-0942.md b/2023/CVE-2023-0942.md
index 5811bcb5e53..8055a8b75b2 100644
--- a/2023/CVE-2023-0942.md
+++ b/2023/CVE-2023-0942.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0942.yaml
diff --git a/2023/CVE-2023-0947.md b/2023/CVE-2023-0947.md
index b4a1b6337c8..74508e561f9 100644
--- a/2023/CVE-2023-0947.md
+++ b/2023/CVE-2023-0947.md
@@ -15,3 +15,5 @@ Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0947.yaml
diff --git a/2023/CVE-2023-0948.md b/2023/CVE-2023-0948.md
index 34e6297af6a..e8dbb952026 100644
--- a/2023/CVE-2023-0948.md
+++ b/2023/CVE-2023-0948.md
@@ -15,3 +15,5 @@ The Japanized For WooCommerce WordPress plugin before 2.5.8 does not escape gene
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0948.yaml
diff --git a/2023/CVE-2023-0968.md b/2023/CVE-2023-0968.md
index aa7fca56fdf..dd34152694e 100644
--- a/2023/CVE-2023-0968.md
+++ b/2023/CVE-2023-0968.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0968.yaml
diff --git a/2023/CVE-2023-1020.md b/2023/CVE-2023-1020.md
index cf8b937f96e..09a7620f719 100644
--- a/2023/CVE-2023-1020.md
+++ b/2023/CVE-2023-1020.md
@@ -15,3 +15,5 @@ The Steveas WP Live Chat Shoutbox WordPress plugin through 1.4.2 does not saniti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1020.yaml
diff --git a/2023/CVE-2023-1080.md b/2023/CVE-2023-1080.md
index 4398f0a8930..6980d4a27b8 100644
--- a/2023/CVE-2023-1080.md
+++ b/2023/CVE-2023-1080.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1080.yaml
diff --git a/2023/CVE-2023-1119.md b/2023/CVE-2023-1119.md
index 24ecb593dab..a87c20fab12 100644
--- a/2023/CVE-2023-1119.md
+++ b/2023/CVE-2023-1119.md
@@ -16,3 +16,5 @@ The WP-Optimize WordPress plugin before 3.2.13, SrbTransLatin WordPress plugin b
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1119.yaml
diff --git a/2023/CVE-2023-1177.md b/2023/CVE-2023-1177.md
index 7b7e057b1af..ad3772f6287 100644
--- a/2023/CVE-2023-1177.md
+++ b/2023/CVE-2023-1177.md
@@ -21,3 +21,5 @@ Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1
 - https://github.com/powned/Snaike-MLflow
 - https://github.com/tiyeume25112004/CVE-2023-1177-rebuild
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1177.yaml
diff --git a/2023/CVE-2023-1263.md b/2023/CVE-2023-1263.md
index ba87e54c997..e04a8a6c3bc 100644
--- a/2023/CVE-2023-1263.md
+++ b/2023/CVE-2023-1263.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1263.yaml
diff --git a/2023/CVE-2023-1315.md b/2023/CVE-2023-1315.md
index 10bfd7c9590..fa0e6c7a766 100644
--- a/2023/CVE-2023-1315.md
+++ b/2023/CVE-2023-1315.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket pr
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1315.yaml
diff --git a/2023/CVE-2023-1317.md b/2023/CVE-2023-1317.md
index c31f80d1769..a4d5f1cda8c 100644
--- a/2023/CVE-2023-1317.md
+++ b/2023/CVE-2023-1317.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket pr
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1317.yaml
diff --git a/2023/CVE-2023-1318.md b/2023/CVE-2023-1318.md
index 948675d831f..0afeff940c4 100644
--- a/2023/CVE-2023-1318.md
+++ b/2023/CVE-2023-1318.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Generic in GitHub repository osticket/osticket prio
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1318.yaml
diff --git a/2023/CVE-2023-1362.md b/2023/CVE-2023-1362.md
index 27f38fd9faf..3ab6da6ad1b 100644
--- a/2023/CVE-2023-1362.md
+++ b/2023/CVE-2023-1362.md
@@ -15,3 +15,5 @@ Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilog
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1362.yaml
diff --git a/2023/CVE-2023-1389.md b/2023/CVE-2023-1389.md
index 72c85a3692e..66885ad11bc 100644
--- a/2023/CVE-2023-1389.md
+++ b/2023/CVE-2023-1389.md
@@ -21,3 +21,5 @@ TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 conta
 - https://github.com/ohnahee/CVE_2023_1389_poc
 - https://github.com/werwolfz/CVE-2023-1389
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1389.yaml
diff --git a/2023/CVE-2023-1408.md b/2023/CVE-2023-1408.md
index edf9398a941..c030e952dbd 100644
--- a/2023/CVE-2023-1408.md
+++ b/2023/CVE-2023-1408.md
@@ -15,3 +15,5 @@ The Video List Manager WordPress plugin through 1.7 does not properly sanitise a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1408.yaml
diff --git a/2023/CVE-2023-1454.md b/2023/CVE-2023-1454.md
index 93faa142e13..528aa121b1b 100644
--- a/2023/CVE-2023-1454.md
+++ b/2023/CVE-2023-1454.md
@@ -25,3 +25,5 @@ No PoCs from references.
 - https://github.com/padbergpete47/CVE-2023-1454
 - https://github.com/shad0w0sec/CVE-2023-1454-EXP
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1454.yaml
diff --git a/2023/CVE-2023-1496.md b/2023/CVE-2023-1496.md
index dea2a7e5303..2cfbb60b336 100644
--- a/2023/CVE-2023-1496.md
+++ b/2023/CVE-2023-1496.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy pr
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1496.yaml
diff --git a/2023/CVE-2023-1546.md b/2023/CVE-2023-1546.md
index c7c66581304..d479e74681d 100644
--- a/2023/CVE-2023-1546.md
+++ b/2023/CVE-2023-1546.md
@@ -15,3 +15,5 @@ The MyCryptoCheckout WordPress plugin before 2.124 does not escape some URLs bef
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1546.yaml
diff --git a/2023/CVE-2023-1671.md b/2023/CVE-2023-1671.md
index 30790213945..0d34337a721 100644
--- a/2023/CVE-2023-1671.md
+++ b/2023/CVE-2023-1671.md
@@ -20,3 +20,5 @@ A pre-auth command injection vulnerability in the warn-proceed handler of Sophos
 - https://github.com/csffs/cve-2023-1671
 - https://github.com/ohnonoyesyes/CVE-2023-1671
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1671.yaml
diff --git a/2023/CVE-2023-1698.md b/2023/CVE-2023-1698.md
index 0b662093101..e40245b86e2 100644
--- a/2023/CVE-2023-1698.md
+++ b/2023/CVE-2023-1698.md
@@ -26,3 +26,5 @@ No PoCs from references.
 - https://github.com/deIndra/CVE-2023-1698
 - https://github.com/thedarknessdied/WAGO-CVE-2023-1698
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1698.yaml
diff --git a/2023/CVE-2023-1719.md b/2023/CVE-2023-1719.md
index 6a8c314291b..949c7adc49e 100644
--- a/2023/CVE-2023-1719.md
+++ b/2023/CVE-2023-1719.md
@@ -15,3 +15,5 @@ Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1719.yaml
diff --git a/2023/CVE-2023-1730.md b/2023/CVE-2023-1730.md
index a87d10cb7e0..8148b824837 100644
--- a/2023/CVE-2023-1730.md
+++ b/2023/CVE-2023-1730.md
@@ -15,3 +15,5 @@ The SupportCandy WordPress plugin before 3.1.5 does not validate and escape user
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1730.yaml
diff --git a/2023/CVE-2023-1780.md b/2023/CVE-2023-1780.md
index d36ccaf80a0..7b9a65ec7f0 100644
--- a/2023/CVE-2023-1780.md
+++ b/2023/CVE-2023-1780.md
@@ -15,3 +15,5 @@ The Companion Sitemap Generator WordPress plugin before 4.5.3 does not sanitise
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1780.yaml
diff --git a/2023/CVE-2023-1835.md b/2023/CVE-2023-1835.md
index 1c2df436a2e..26d2fe3525a 100644
--- a/2023/CVE-2023-1835.md
+++ b/2023/CVE-2023-1835.md
@@ -15,3 +15,5 @@ The Ninja Forms Contact Form WordPress plugin before 3.6.22 does not properly es
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1835.yaml
diff --git a/2023/CVE-2023-1880.md b/2023/CVE-2023-1880.md
index cd5ac146b43..639eac8fc52 100644
--- a/2023/CVE-2023-1880.md
+++ b/2023/CVE-2023-1880.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq pr
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1880.yaml
diff --git a/2023/CVE-2023-1890.md b/2023/CVE-2023-1890.md
index 60d367f0b63..700ae8f6a24 100644
--- a/2023/CVE-2023-1890.md
+++ b/2023/CVE-2023-1890.md
@@ -16,3 +16,5 @@ The Tablesome WordPress plugin before 1.0.9 does not escape various generated UR
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1890.yaml
diff --git a/2023/CVE-2023-1892.md b/2023/CVE-2023-1892.md
index 3bde15eb966..b6d7e4ee7bf 100644
--- a/2023/CVE-2023-1892.md
+++ b/2023/CVE-2023-1892.md
@@ -16,3 +16,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq prio
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1892.yaml
diff --git a/2023/CVE-2023-1893.md b/2023/CVE-2023-1893.md
index f84f5746426..94dc065df2a 100644
--- a/2023/CVE-2023-1893.md
+++ b/2023/CVE-2023-1893.md
@@ -16,3 +16,5 @@ The Login Configurator WordPress plugin through 2.1 does not properly escape a U
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1893.yaml
diff --git a/2023/CVE-2023-20073.md b/2023/CVE-2023-20073.md
index 5fa1831204b..2b94331033d 100644
--- a/2023/CVE-2023-20073.md
+++ b/2023/CVE-2023-20073.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RegularITCat/CVE-2023-20073
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-20073.yaml
diff --git a/2023/CVE-2023-2009.md b/2023/CVE-2023-2009.md
index 42119b482b2..68653e5bd24 100644
--- a/2023/CVE-2023-2009.md
+++ b/2023/CVE-2023-2009.md
@@ -15,3 +15,5 @@ Plugin does not sanitize and escape the URL field in the Pretty Url WordPress pl
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2009.yaml
diff --git a/2023/CVE-2023-20198.md b/2023/CVE-2023-20198.md
index 378ef59c304..5978c3e7e69 100644
--- a/2023/CVE-2023-20198.md
+++ b/2023/CVE-2023-20198.md
@@ -223,3 +223,5 @@ Cisco is providing an update for the ongoing investigation into observed exploit
 - https://github.com/smokeintheshell/CVE-2023-20198
 - https://github.com/sohaibeb/CVE-2023-20198
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-20198.yaml
diff --git a/2023/CVE-2023-2023.md b/2023/CVE-2023-2023.md
index b38d15065da..7837a650b08 100644
--- a/2023/CVE-2023-2023.md
+++ b/2023/CVE-2023-2023.md
@@ -16,3 +16,5 @@ The Custom 404 Pro WordPress plugin before 3.7.3 does not escape some URLs befor
 - https://github.com/druxter-x/PHP-CVE-2023-2023-2640-POC-Escalation
 - https://github.com/thatformat/Hvv2023
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2023.yaml
diff --git a/2023/CVE-2023-20864.md b/2023/CVE-2023-20864.md
index acfe2a8727e..45c3028c73d 100644
--- a/2023/CVE-2023-20864.md
+++ b/2023/CVE-2023-20864.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-20864.yaml
diff --git a/2023/CVE-2023-20887.md b/2023/CVE-2023-20887.md
index ad71c37dc14..bb1a6b28f77 100644
--- a/2023/CVE-2023-20887.md
+++ b/2023/CVE-2023-20887.md
@@ -19,3 +19,5 @@ Aria Operations for Networks contains a command injection vulnerability. A malic
 - https://github.com/mynempel/e
 - https://github.com/sinsinology/CVE-2023-20887
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-20887.yaml
diff --git a/2023/CVE-2023-2122.md b/2023/CVE-2023-2122.md
index fd8ce13e2f2..b9076c0290a 100644
--- a/2023/CVE-2023-2122.md
+++ b/2023/CVE-2023-2122.md
@@ -15,3 +15,5 @@ The Image Optimizer by 10web WordPress plugin before 1.0.27 does not sanitise an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2122.yaml
diff --git a/2023/CVE-2023-2130.md b/2023/CVE-2023-2130.md
index 7c980a842b9..859f1e22c24 100644
--- a/2023/CVE-2023-2130.md
+++ b/2023/CVE-2023-2130.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2130.yaml
diff --git a/2023/CVE-2023-2178.md b/2023/CVE-2023-2178.md
index a45f817ae2c..6d46e26c9ff 100644
--- a/2023/CVE-2023-2178.md
+++ b/2023/CVE-2023-2178.md
@@ -15,3 +15,5 @@ The Aajoda Testimonials WordPress plugin before 2.2.2 does not sanitise and esca
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2178.yaml
diff --git a/2023/CVE-2023-21839.md b/2023/CVE-2023-21839.md
index 43a4bc403d0..ec96ad25e0d 100644
--- a/2023/CVE-2023-21839.md
+++ b/2023/CVE-2023-21839.md
@@ -24,3 +24,5 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware
 - https://github.com/fakenews2025/CVE-2023-21839
 - https://github.com/houqe/POC_CVE-2023-21839
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2023/CVE-2023-21839.yaml
diff --git a/2023/CVE-2023-22047.md b/2023/CVE-2023-22047.md
index c186fba42a2..aa6b0969bf1 100644
--- a/2023/CVE-2023-22047.md
+++ b/2023/CVE-2023-22047.md
@@ -16,3 +16,5 @@ Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS
 #### Github
 - https://github.com/tuo4n8/CVE-2023-22047
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22047.yaml
diff --git a/2023/CVE-2023-22232.md b/2023/CVE-2023-22232.md
index 7c81a9b52f2..a2c781106ec 100644
--- a/2023/CVE-2023-22232.md
+++ b/2023/CVE-2023-22232.md
@@ -15,3 +15,5 @@ Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected b
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22232.yaml
diff --git a/2023/CVE-2023-2224.md b/2023/CVE-2023-2224.md
index 6e4309992d0..24a696e2e10 100644
--- a/2023/CVE-2023-2224.md
+++ b/2023/CVE-2023-2224.md
@@ -16,3 +16,5 @@ The SEO by 10Web WordPress plugin before 1.2.7 does not sanitise and escape some
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2224.yaml
diff --git a/2023/CVE-2023-2227.md b/2023/CVE-2023-2227.md
index acf1b74840e..31d3eaa11c4 100644
--- a/2023/CVE-2023-2227.md
+++ b/2023/CVE-2023-2227.md
@@ -15,3 +15,5 @@ Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2227.yaml
diff --git a/2023/CVE-2023-22432.md b/2023/CVE-2023-22432.md
index 94717e6f134..8d13fe44183 100644
--- a/2023/CVE-2023-22432.md
+++ b/2023/CVE-2023-22432.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/aeyesec/CVE-2023-22432
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22432.yaml
diff --git a/2023/CVE-2023-22463.md b/2023/CVE-2023-22463.md
index a54c9977dff..6937b56fe35 100644
--- a/2023/CVE-2023-22463.md
+++ b/2023/CVE-2023-22463.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22463.yaml
diff --git a/2023/CVE-2023-22478.md b/2023/CVE-2023-22478.md
index 3a386f5a2a2..5e82e913be1 100644
--- a/2023/CVE-2023-22478.md
+++ b/2023/CVE-2023-22478.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22478.yaml
diff --git a/2023/CVE-2023-22480.md b/2023/CVE-2023-22480.md
index 320c17528d2..22b3ffc8c04 100644
--- a/2023/CVE-2023-22480.md
+++ b/2023/CVE-2023-22480.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22480.yaml
diff --git a/2023/CVE-2023-22515.md b/2023/CVE-2023-22515.md
index 530abe614ce..a73077fcf0c 100644
--- a/2023/CVE-2023-22515.md
+++ b/2023/CVE-2023-22515.md
@@ -28,7 +28,9 @@
 
 ### Description
 
-Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances. 

Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue. 
+Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances. 
+
+Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue. 
 
 ### POC
 
@@ -61,3 +63,5 @@ Atlassian has been made aware of an issue reported by a handful of customers whe
 - https://github.com/xorbbo/cve-2023-22515
 - https://github.com/youcannotseemeagain/CVE-2023-22515_RCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22515.yaml
diff --git a/2023/CVE-2023-22518.md b/2023/CVE-2023-22518.md
index e0e644a6223..9e56ad2a3fa 100644
--- a/2023/CVE-2023-22518.md
+++ b/2023/CVE-2023-22518.md
@@ -26,3 +26,5 @@ All versions of Confluence Data Center and Server are affected by this unexploit
 - https://github.com/ductink98lhp/analyze-Exploit-CVE-2023-22518-Confluence
 - https://github.com/sanjai-AK47/CVE-2023-22518
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22518.yaml
diff --git a/2023/CVE-2023-2252.md b/2023/CVE-2023-2252.md
index 603dd4d1a0d..ab9e0feb007 100644
--- a/2023/CVE-2023-2252.md
+++ b/2023/CVE-2023-2252.md
@@ -15,3 +15,5 @@ The Directorist WordPress plugin before 7.5.4 is vulnerable to Local File Inclus
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2252.yaml
diff --git a/2023/CVE-2023-22527.md b/2023/CVE-2023-22527.md
index cb1f7a59ff7..d26f90f4901 100644
--- a/2023/CVE-2023-22527.md
+++ b/2023/CVE-2023-22527.md
@@ -48,3 +48,5 @@ A template injection vulnerability on older versions of Confluence Data Center a
 - https://github.com/vulncheck-oss/cve-2023-22527
 - https://github.com/yoryio/CVE-2023-22527
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22527.yaml
diff --git a/2023/CVE-2023-2256.md b/2023/CVE-2023-2256.md
index 9852d2f6acb..aef354c0ac9 100644
--- a/2023/CVE-2023-2256.md
+++ b/2023/CVE-2023-2256.md
@@ -15,3 +15,5 @@ The Product Addons & Fields for WooCommerce WordPress plugin before 32.0.7 does
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2256.yaml
diff --git a/2023/CVE-2023-22620.md b/2023/CVE-2023-22620.md
index 556e54cdf56..3f944a02489 100644
--- a/2023/CVE-2023-22620.md
+++ b/2023/CVE-2023-22620.md
@@ -17,3 +17,5 @@ An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22620.yaml
diff --git a/2023/CVE-2023-22621.md b/2023/CVE-2023-22621.md
index e1f8c290539..96966d7dd91 100644
--- a/2023/CVE-2023-22621.md
+++ b/2023/CVE-2023-22621.md
@@ -17,3 +17,5 @@ Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI)
 #### Github
 - https://github.com/sofianeelhor/CVE-2023-22621-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22621.yaml
diff --git a/2023/CVE-2023-22629.md b/2023/CVE-2023-22629.md
index b676d6d31bd..9c81d2272e8 100644
--- a/2023/CVE-2023-22629.md
+++ b/2023/CVE-2023-22629.md
@@ -16,3 +16,5 @@ An issue was discovered in TitanFTP through 1.94.1205. The move-file function ha
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-22629.yaml
diff --git a/2023/CVE-2023-2272.md b/2023/CVE-2023-2272.md
index e909c7afeaa..c056c1b7430 100644
--- a/2023/CVE-2023-2272.md
+++ b/2023/CVE-2023-2272.md
@@ -15,3 +15,5 @@ The Tiempo.com WordPress plugin through 0.1.2 does not sanitise and escape the p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2272.yaml
diff --git a/2023/CVE-2023-22893.md b/2023/CVE-2023-22893.md
index f6c67c8279b..86e9b5d7696 100644
--- a/2023/CVE-2023-22893.md
+++ b/2023/CVE-2023-22893.md
@@ -17,3 +17,5 @@ Strapi through 4.5.5 does not verify the access or ID tokens issued during the O
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22893.yaml
diff --git a/2023/CVE-2023-22897.md b/2023/CVE-2023-22897.md
index 81bbe11bb5e..369473332ca 100644
--- a/2023/CVE-2023-22897.md
+++ b/2023/CVE-2023-22897.md
@@ -17,3 +17,5 @@ An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22897.yaml
diff --git a/2023/CVE-2023-22952.md b/2023/CVE-2023-22952.md
index b73ec78337f..3efb17d7220 100644
--- a/2023/CVE-2023-22952.md
+++ b/2023/CVE-2023-22952.md
@@ -16,3 +16,5 @@ In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP c
 #### Github
 - https://github.com/jakabakos/PHP-payload-injection-to-PNGs
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22952.yaml
diff --git a/2023/CVE-2023-23063.md b/2023/CVE-2023-23063.md
index 5a4e173015e..4129f0cb4f5 100644
--- a/2023/CVE-2023-23063.md
+++ b/2023/CVE-2023-23063.md
@@ -16,3 +16,5 @@ Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulner
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23063.yaml
diff --git a/2023/CVE-2023-2309.md b/2023/CVE-2023-2309.md
index 7084c43d972..dd11ed04bf1 100644
--- a/2023/CVE-2023-2309.md
+++ b/2023/CVE-2023-2309.md
@@ -15,3 +15,5 @@ The wpForo Forum WordPress plugin before 2.1.9 does not escape some request para
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2309.yaml
diff --git a/2023/CVE-2023-23161.md b/2023/CVE-2023-23161.md
index b3fe68b355b..f559d45bdec 100644
--- a/2023/CVE-2023-23161.md
+++ b/2023/CVE-2023-23161.md
@@ -15,3 +15,5 @@ A reflected cross-site scripting (XSS) vulnerability in Art Gallery Management S
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23161.yaml
diff --git a/2023/CVE-2023-23333.md b/2023/CVE-2023-23333.md
index bdbc7569841..7406f79116f 100644
--- a/2023/CVE-2023-23333.md
+++ b/2023/CVE-2023-23333.md
@@ -17,3 +17,5 @@ There is a command injection vulnerability in SolarView Compact through 6.00, at
 - https://github.com/Mr-xn/CVE-2023-23333
 - https://github.com/emanueldosreis/nmap-CVE-2023-23333-exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23333.yaml
diff --git a/2023/CVE-2023-23488.md b/2023/CVE-2023-23488.md
index c41f645bfb9..d24d7a3176d 100644
--- a/2023/CVE-2023-23488.md
+++ b/2023/CVE-2023-23488.md
@@ -17,3 +17,5 @@ The Paid Memberships Pro WordPress Plugin, version < 2.9.8, is affected by an un
 - https://github.com/cybfar/CVE-2023-23488-pmpro-2.8
 - https://github.com/long-rookie/CVE-2023-23488-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23488.yaml
diff --git a/2023/CVE-2023-23489.md b/2023/CVE-2023-23489.md
index bb6442310d4..1af448122e0 100644
--- a/2023/CVE-2023-23489.md
+++ b/2023/CVE-2023-23489.md
@@ -15,3 +15,5 @@ The Easy Digital Downloads WordPress Plugin, versions 3.1.0.2 & 3.1.0.3, is affe
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23489.yaml
diff --git a/2023/CVE-2023-23491.md b/2023/CVE-2023-23491.md
index 6e96da3ac91..e8b407ceb6d 100644
--- a/2023/CVE-2023-23491.md
+++ b/2023/CVE-2023-23491.md
@@ -15,3 +15,5 @@ The Quick Event Manager WordPress Plugin, version < 9.7.5, is affected by a refl
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23491.yaml
diff --git a/2023/CVE-2023-23492.md b/2023/CVE-2023-23492.md
index 58afba9b24c..2ae3965ae36 100644
--- a/2023/CVE-2023-23492.md
+++ b/2023/CVE-2023-23492.md
@@ -15,3 +15,5 @@ The Login with Phone Number WordPress Plugin, version < 1.4.2, is affected by an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23492.yaml
diff --git a/2023/CVE-2023-2356.md b/2023/CVE-2023-2356.md
index 437e1ab958b..44037acbc68 100644
--- a/2023/CVE-2023-2356.md
+++ b/2023/CVE-2023-2356.md
@@ -15,3 +15,5 @@ Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2356.yaml
diff --git a/2023/CVE-2023-23752.md b/2023/CVE-2023-23752.md
index e665f60a349..479ddd22603 100644
--- a/2023/CVE-2023-23752.md
+++ b/2023/CVE-2023-23752.md
@@ -75,3 +75,5 @@ No PoCs from references.
 - https://github.com/yTxZx/CVE-2023-23752
 - https://github.com/z3n70/CVE-2023-23752
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23752.yaml
diff --git a/2023/CVE-2023-23897.md b/2023/CVE-2023-23897.md
index 4522cc642d2..5752ea978fa 100644
--- a/2023/CVE-2023-23897.md
+++ b/2023/CVE-2023-23897.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23897.yaml
diff --git a/2023/CVE-2023-24000.md b/2023/CVE-2023-24000.md
index 8f45788df12..19c56dbb550 100644
--- a/2023/CVE-2023-24000.md
+++ b/2023/CVE-2023-24000.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24000.yaml
diff --git a/2023/CVE-2023-24278.md b/2023/CVE-2023-24278.md
index 0bef1935ac8..2b1d95af0aa 100644
--- a/2023/CVE-2023-24278.md
+++ b/2023/CVE-2023-24278.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/NeCr00/CVE-2023-24278
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24278.yaml
diff --git a/2023/CVE-2023-24322.md b/2023/CVE-2023-24322.md
index 69e0941649d..eab8b2a0231 100644
--- a/2023/CVE-2023-24322.md
+++ b/2023/CVE-2023-24322.md
@@ -15,3 +15,5 @@ A reflected cross-site scripting (XSS) vulnerability in the FileDialog.aspx comp
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24322.yaml
diff --git a/2023/CVE-2023-2437.md b/2023/CVE-2023-2437.md
index f191c59eb6c..17fa3cbdfc9 100644
--- a/2023/CVE-2023-2437.md
+++ b/2023/CVE-2023-2437.md
@@ -16,3 +16,5 @@ The UserPro plugin for WordPress is vulnerable to authentication bypass in versi
 #### Github
 - https://github.com/RxRCoder/CVE-2023-2437
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2437.yaml
diff --git a/2023/CVE-2023-24488.md b/2023/CVE-2023-24488.md
index d7917846b60..1578cb3382d 100644
--- a/2023/CVE-2023-24488.md
+++ b/2023/CVE-2023-24488.md
@@ -25,3 +25,5 @@ No PoCs from references.
 - https://github.com/raytheon0x21/CVE-2023-24488
 - https://github.com/securitycipher/CVE-2023-24488
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24488.yaml
diff --git a/2023/CVE-2023-24489.md b/2023/CVE-2023-24489.md
index 9fade583d3b..b0ea587803b 100644
--- a/2023/CVE-2023-24489.md
+++ b/2023/CVE-2023-24489.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/adhikara13/CVE-2023-24489-ShareFile
 - https://github.com/whalebone7/CVE-2023-24489-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24489.yaml
diff --git a/2023/CVE-2023-24733.md b/2023/CVE-2023-24733.md
index 013efae5623..22b3a50b50d 100644
--- a/2023/CVE-2023-24733.md
+++ b/2023/CVE-2023-24733.md
@@ -15,3 +15,5 @@ PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vuln
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24733.yaml
diff --git a/2023/CVE-2023-24735.md b/2023/CVE-2023-24735.md
index abdaf2e451c..6ad6d8f9a14 100644
--- a/2023/CVE-2023-24735.md
+++ b/2023/CVE-2023-24735.md
@@ -15,3 +15,5 @@ PMB v7.4.6 was discovered to contain an open redirect vulnerability via the comp
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24735.yaml
diff --git a/2023/CVE-2023-24737.md b/2023/CVE-2023-24737.md
index d90b2343a9b..c2f70d185a8 100644
--- a/2023/CVE-2023-24737.md
+++ b/2023/CVE-2023-24737.md
@@ -15,3 +15,5 @@ PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vuln
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24737.yaml
diff --git a/2023/CVE-2023-2479.md b/2023/CVE-2023-2479.md
index be78869acfd..8a602911e64 100644
--- a/2023/CVE-2023-2479.md
+++ b/2023/CVE-2023-2479.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2479.yaml
diff --git a/2023/CVE-2023-25135.md b/2023/CVE-2023-25135.md
index f693210b77d..7857d5edb84 100644
--- a/2023/CVE-2023-25135.md
+++ b/2023/CVE-2023-25135.md
@@ -15,3 +15,5 @@ vBulletin before 5.6.9 PL1 allows an unauthenticated remote attacker to execute
 #### Github
 - https://github.com/ambionics/vbulletin-exploits
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25135.yaml
diff --git a/2023/CVE-2023-25157.md b/2023/CVE-2023-25157.md
index 42c2567a4f3..f667ada1083 100644
--- a/2023/CVE-2023-25157.md
+++ b/2023/CVE-2023-25157.md
@@ -23,3 +23,5 @@ No PoCs from references.
 - https://github.com/murataydemir/CVE-2023-25157-and-CVE-2023-25158
 - https://github.com/win3zz/CVE-2023-25157
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25157.yaml
diff --git a/2023/CVE-2023-2518.md b/2023/CVE-2023-2518.md
index 521062041f3..8bd351e5662 100644
--- a/2023/CVE-2023-2518.md
+++ b/2023/CVE-2023-2518.md
@@ -15,3 +15,5 @@ The Easy Forms for Mailchimp WordPress plugin before 6.8.9 does not sanitise and
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2518.yaml
diff --git a/2023/CVE-2023-25194.md b/2023/CVE-2023-25194.md
index 3a292139eae..4776206a1ca 100644
--- a/2023/CVE-2023-25194.md
+++ b/2023/CVE-2023-25194.md
@@ -17,3 +17,5 @@ A possible security vulnerability has been identified in Apache Kafka Connect AP
 - https://github.com/ohnonoyesyes/CVE-2023-25194
 - https://github.com/vulncheck-oss/cve-2023-25194
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25194.yaml
diff --git a/2023/CVE-2023-25280.md b/2023/CVE-2023-25280.md
index 9c947a5f642..8e33e75b048 100644
--- a/2023/CVE-2023-25280.md
+++ b/2023/CVE-2023-25280.md
@@ -18,3 +18,5 @@ OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25280.yaml
diff --git a/2023/CVE-2023-25346.md b/2023/CVE-2023-25346.md
index b80863dd7ba..d7ef5863e19 100644
--- a/2023/CVE-2023-25346.md
+++ b/2023/CVE-2023-25346.md
@@ -15,3 +15,5 @@ A reflected cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows r
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25346.yaml
diff --git a/2023/CVE-2023-25573.md b/2023/CVE-2023-25573.md
index a7b6c5918fd..3dc42dd4c8c 100644
--- a/2023/CVE-2023-25573.md
+++ b/2023/CVE-2023-25573.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25573.yaml
diff --git a/2023/CVE-2023-25717.md b/2023/CVE-2023-25717.md
index 894543b0abd..8e177197176 100644
--- a/2023/CVE-2023-25717.md
+++ b/2023/CVE-2023-25717.md
@@ -16,3 +16,5 @@ Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthent
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25717.yaml
diff --git a/2023/CVE-2023-25826.md b/2023/CVE-2023-25826.md
index 2b059307347..b4900a9c856 100644
--- a/2023/CVE-2023-25826.md
+++ b/2023/CVE-2023-25826.md
@@ -15,3 +15,5 @@ Due to insufficient validation of parameters passed to the legacy HTTP query API
 #### Github
 - https://github.com/ErikWynter/opentsdb_key_cmd_injection
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25826.yaml
diff --git a/2023/CVE-2023-26035.md b/2023/CVE-2023-26035.md
index 7bb0c36906e..3f84a18162c 100644
--- a/2023/CVE-2023-26035.md
+++ b/2023/CVE-2023-26035.md
@@ -21,3 +21,5 @@ ZoneMinder is a free, open source Closed-circuit television software application
 - https://github.com/m3m0o/zoneminder-snapshots-rce-poc
 - https://github.com/rvizx/CVE-2023-26035
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26035.yaml
diff --git a/2023/CVE-2023-26067.md b/2023/CVE-2023-26067.md
index b580cf055e2..e4012c2ef75 100644
--- a/2023/CVE-2023-26067.md
+++ b/2023/CVE-2023-26067.md
@@ -16,3 +16,5 @@ Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 o
 - https://github.com/CharonDefalt/printer-exploit-toronto
 - https://github.com/horizon3ai/CVE-2023-26067
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26067.yaml
diff --git a/2023/CVE-2023-2624.md b/2023/CVE-2023-2624.md
index a9a0376720a..d257eb9fd20 100644
--- a/2023/CVE-2023-2624.md
+++ b/2023/CVE-2023-2624.md
@@ -16,3 +16,5 @@ The KiviCare WordPress plugin before 3.2.1 does not sanitise and escape a parame
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2624.yaml
diff --git a/2023/CVE-2023-26255.md b/2023/CVE-2023-26255.md
index 01c2b75659e..eabffb623d1 100644
--- a/2023/CVE-2023-26255.md
+++ b/2023/CVE-2023-26255.md
@@ -15,3 +15,5 @@ An unauthenticated path traversal vulnerability affects the "STAGIL Navigation f
 #### Github
 - https://github.com/Nian-Stars/CVE-2023-26255-6
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26255.yaml
diff --git a/2023/CVE-2023-26256.md b/2023/CVE-2023-26256.md
index 27fc5664ece..2325759eeb0 100644
--- a/2023/CVE-2023-26256.md
+++ b/2023/CVE-2023-26256.md
@@ -20,3 +20,5 @@ An unauthenticated path traversal vulnerability affects the "STAGIL Navigation f
 - https://github.com/qs119/CVE-2023-26256
 - https://github.com/xhs-d/CVE-2023-26256
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26256.yaml
diff --git a/2023/CVE-2023-26258.md b/2023/CVE-2023-26258.md
index 5cef5b6dbce..e99e18c3e55 100644
--- a/2023/CVE-2023-26258.md
+++ b/2023/CVE-2023-26258.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/mdsecactivebreach/CVE-2023-26258-ArcServe
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26258.yaml
diff --git a/2023/CVE-2023-26360.md b/2023/CVE-2023-26360.md
index 80568fa9e69..5ab8be148b7 100644
--- a/2023/CVE-2023-26360.md
+++ b/2023/CVE-2023-26360.md
@@ -17,3 +17,5 @@ Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and ea
 - https://github.com/jakabakos/CVE-2023-26360-adobe-coldfusion-rce-exploit
 - https://github.com/yosef0x01/CVE-2023-26360
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26360.yaml
diff --git a/2023/CVE-2023-2640.md b/2023/CVE-2023-2640.md
index 91213dbe250..305483f5ac3 100644
--- a/2023/CVE-2023-2640.md
+++ b/2023/CVE-2023-2640.md
@@ -26,3 +26,5 @@ On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip
 - https://github.com/vinetsuicide/CVE-2023-2640-CVE-2023-32629
 - https://github.com/xS9NTX/CVE-2023-32629-CVE-2023-2640-Ubuntu-Privilege-Escalation-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-2640.yaml
diff --git a/2023/CVE-2023-26469.md b/2023/CVE-2023-26469.md
index c0d4f59be14..8aed12d0cbd 100644
--- a/2023/CVE-2023-26469.md
+++ b/2023/CVE-2023-26469.md
@@ -18,3 +18,5 @@ In Jorani 1.0.0, an attacker could leverage path traversal to access files and e
 - https://github.com/jiao-wt/scamer
 - https://github.com/samipmainali/Jorani-Reverse-Shell-v1.0.0
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26469.yaml
diff --git a/2023/CVE-2023-2648.md b/2023/CVE-2023-2648.md
index 3f5bdc8643c..92b6cf8dd4b 100644
--- a/2023/CVE-2023-2648.md
+++ b/2023/CVE-2023-2648.md
@@ -18,3 +18,5 @@ Es wurde eine Schwachstelle in Weaver E-Office 9.5 ausgemacht. Sie wurde als kri
 - https://github.com/werwolfz/cve-2023-2523-and-cve-2023-2648
 - https://github.com/zhaoyumi/WeaverExploit_All
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2648.yaml
diff --git a/2023/CVE-2023-26802.md b/2023/CVE-2023-26802.md
index 801862db5a7..759d4a5d371 100644
--- a/2023/CVE-2023-26802.md
+++ b/2023/CVE-2023-26802.md
@@ -15,3 +15,5 @@ An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Net
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26802.yaml
diff --git a/2023/CVE-2023-26842.md b/2023/CVE-2023-26842.md
index 688afbf005d..bcebbe35dfb 100644
--- a/2023/CVE-2023-26842.md
+++ b/2023/CVE-2023-26842.md
@@ -15,3 +15,5 @@ A stored Cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26842.yaml
diff --git a/2023/CVE-2023-26843.md b/2023/CVE-2023-26843.md
index a93ec0f44ee..a211b689d6c 100644
--- a/2023/CVE-2023-26843.md
+++ b/2023/CVE-2023-26843.md
@@ -15,3 +15,5 @@ A stored Cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26843.yaml
diff --git a/2023/CVE-2023-27008.md b/2023/CVE-2023-27008.md
index f0caba70c52..9920d66086b 100644
--- a/2023/CVE-2023-27008.md
+++ b/2023/CVE-2023-27008.md
@@ -15,3 +15,5 @@ A Cross-site scripting (XSS) vulnerability in the function encrypt_password() in
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27008.yaml
diff --git a/2023/CVE-2023-27032.md b/2023/CVE-2023-27032.md
index 1e754548015..7c2869e532e 100644
--- a/2023/CVE-2023-27032.md
+++ b/2023/CVE-2023-27032.md
@@ -15,3 +15,5 @@ Prestashop advancedpopupcreator v1.1.21 to v1.1.24 was discovered to contain a S
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27032.yaml
diff --git a/2023/CVE-2023-27034.md b/2023/CVE-2023-27034.md
index de5f9c900a6..13f0a3c94d0 100644
--- a/2023/CVE-2023-27034.md
+++ b/2023/CVE-2023-27034.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27034.yaml
diff --git a/2023/CVE-2023-27159.md b/2023/CVE-2023-27159.md
index e13077b23cf..29721069205 100644
--- a/2023/CVE-2023-27159.md
+++ b/2023/CVE-2023-27159.md
@@ -16,3 +16,5 @@ Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (S
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27159.yaml
diff --git a/2023/CVE-2023-27163.md b/2023/CVE-2023-27163.md
index b8a757d9ed1..17906b3a382 100644
--- a/2023/CVE-2023-27163.md
+++ b/2023/CVE-2023-27163.md
@@ -39,3 +39,5 @@ request-baskets up to v1.2.1 was discovered to contain a Server-Side Request For
 - https://github.com/theopaid/CVE-2023-27163-Request-Baskets-Local-Ports-Bruteforcer
 - https://github.com/thomas-osgood/CVE-2023-27163
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27163.yaml
diff --git a/2023/CVE-2023-27179.md b/2023/CVE-2023-27179.md
index 7d73672034f..1fc6aa401b8 100644
--- a/2023/CVE-2023-27179.md
+++ b/2023/CVE-2023-27179.md
@@ -15,3 +15,5 @@ GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file downloa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27179.yaml
diff --git a/2023/CVE-2023-27292.md b/2023/CVE-2023-27292.md
index f5f886fbee6..168d731fe11 100644
--- a/2023/CVE-2023-27292.md
+++ b/2023/CVE-2023-27292.md
@@ -15,3 +15,5 @@ An open redirect vulnerability exposes OpenCATS to template injection due to imp
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27292.yaml
diff --git a/2023/CVE-2023-2732.md b/2023/CVE-2023-2732.md
index b6f06c8e930..32c9b3c8d04 100644
--- a/2023/CVE-2023-2732.md
+++ b/2023/CVE-2023-2732.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/RandomRobbieBF/CVE-2023-2732
 - https://github.com/ThatNotEasy/CVE-2023-2732
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2732.yaml
diff --git a/2023/CVE-2023-2734.md b/2023/CVE-2023-2734.md
index 94d9e9e61b0..49fb9bea8b8 100644
--- a/2023/CVE-2023-2734.md
+++ b/2023/CVE-2023-2734.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2734.yaml
diff --git a/2023/CVE-2023-27350.md b/2023/CVE-2023-27350.md
index b6397c3e629..70d820597e9 100644
--- a/2023/CVE-2023-27350.md
+++ b/2023/CVE-2023-27350.md
@@ -36,3 +36,5 @@ This vulnerability allows remote attackers to bypass authentication on affected
 - https://github.com/rasan2001/CVE-2023-27350-Ongoing-Exploitation-of-PaperCut-Remote-Code-Execution-Vulnerability
 - https://github.com/HORKimhab/CVE-2023-27350-CVE-2023-27351
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27350.yaml
diff --git a/2023/CVE-2023-27351.md b/2023/CVE-2023-27351.md
index a278234ac45..32eeea54287 100644
--- a/2023/CVE-2023-27351.md
+++ b/2023/CVE-2023-27351.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/HORKimhab/CVE-2023-27350-CVE-2023-27351
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27351.yaml
diff --git a/2023/CVE-2023-27372.md b/2023/CVE-2023-27372.md
index d53bf74ded8..ff3887179e9 100644
--- a/2023/CVE-2023-27372.md
+++ b/2023/CVE-2023-27372.md
@@ -28,3 +28,5 @@ SPIP before 4.2.1 allows Remote Code Execution via form values in the public are
 - https://github.com/nuts7/CVE-2023-27372
 - https://github.com/redboltsec/CVE-2023-27372-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27372.yaml
diff --git a/2023/CVE-2023-2745.md b/2023/CVE-2023-2745.md
index 8160bc3d812..6fb2e74b2a3 100644
--- a/2023/CVE-2023-2745.md
+++ b/2023/CVE-2023-2745.md
@@ -38,3 +38,5 @@ WordPress Core is vulnerable to Directory Traversal in versions up to, and inclu
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2745.yaml
diff --git a/2023/CVE-2023-27482.md b/2023/CVE-2023-27482.md
index acb0661954c..752f8cbabed 100644
--- a/2023/CVE-2023-27482.md
+++ b/2023/CVE-2023-27482.md
@@ -18,3 +18,5 @@ homeassistant is an open source home automation tool. A remotely exploitable vul
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27482.yaml
diff --git a/2023/CVE-2023-27524.md b/2023/CVE-2023-27524.md
index 416e3b1e27a..1402997be3a 100644
--- a/2023/CVE-2023-27524.md
+++ b/2023/CVE-2023-27524.md
@@ -33,3 +33,5 @@ Session Validation attacks in Apache Superset versions up to and including 2.0.1
 - https://github.com/necroteddy/CVE-2023-27524
 - https://github.com/summerainX/vul_poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27524.yaml
diff --git a/2023/CVE-2023-27584.md b/2023/CVE-2023-27584.md
index 7b1b513787d..3c49f43396a 100644
--- a/2023/CVE-2023-27584.md
+++ b/2023/CVE-2023-27584.md
@@ -16,3 +16,5 @@ Dragonfly is an open source P2P-based file distribution and image acceleration s
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27584.yaml
diff --git a/2023/CVE-2023-27587.md b/2023/CVE-2023-27587.md
index 26b5b5c2b94..19b85e12e3d 100644
--- a/2023/CVE-2023-27587.md
+++ b/2023/CVE-2023-27587.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/sec-fx/CVE-2023-27587-PoC
 - https://github.com/vagnerd/CVE-2023-27587-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27587.yaml
diff --git a/2023/CVE-2023-27624.md b/2023/CVE-2023-27624.md
index 21b5895ca46..d09529d3c2a 100644
--- a/2023/CVE-2023-27624.md
+++ b/2023/CVE-2023-27624.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27624.yaml
diff --git a/2023/CVE-2023-27637.md b/2023/CVE-2023-27637.md
index 4d36d68a015..84143b333a5 100644
--- a/2023/CVE-2023-27637.md
+++ b/2023/CVE-2023-27637.md
@@ -15,3 +15,5 @@ An issue was discovered in the tshirtecommerce (aka Custom Product Designer) com
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27637.yaml
diff --git a/2023/CVE-2023-27638.md b/2023/CVE-2023-27638.md
index f05f25468dc..dd663837aed 100644
--- a/2023/CVE-2023-27638.md
+++ b/2023/CVE-2023-27638.md
@@ -15,3 +15,5 @@ An issue was discovered in the tshirtecommerce (aka Custom Product Designer) com
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27638.yaml
diff --git a/2023/CVE-2023-27639.md b/2023/CVE-2023-27639.md
index 4409ed065a2..7eea2db57e8 100644
--- a/2023/CVE-2023-27639.md
+++ b/2023/CVE-2023-27639.md
@@ -15,3 +15,5 @@ An issue was discovered in the tshirtecommerce (aka Custom Product Designer) com
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27639.yaml
diff --git a/2023/CVE-2023-27640.md b/2023/CVE-2023-27640.md
index b8b91a534f5..4043c083096 100644
--- a/2023/CVE-2023-27640.md
+++ b/2023/CVE-2023-27640.md
@@ -15,3 +15,5 @@ An issue was discovered in the tshirtecommerce (aka Custom Product Designer) com
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27640.yaml
diff --git a/2023/CVE-2023-27641.md b/2023/CVE-2023-27641.md
index ac8f92f4cfb..d3d7ccfee0b 100644
--- a/2023/CVE-2023-27641.md
+++ b/2023/CVE-2023-27641.md
@@ -15,3 +15,5 @@ The REPORT (after z but before a) parameter in wa.exe in L-Soft LISTSERV 16.5 be
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27641.yaml
diff --git a/2023/CVE-2023-2766.md b/2023/CVE-2023-2766.md
index 7c233abee7f..91d33a645a5 100644
--- a/2023/CVE-2023-2766.md
+++ b/2023/CVE-2023-2766.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2766.yaml
diff --git a/2023/CVE-2023-2779.md b/2023/CVE-2023-2779.md
index 49414fd6f0b..bf4cb497de4 100644
--- a/2023/CVE-2023-2779.md
+++ b/2023/CVE-2023-2779.md
@@ -17,3 +17,5 @@ The Social Share, Social Login and Social Comments WordPress plugin before 7.13.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2779.yaml
diff --git a/2023/CVE-2023-2780.md b/2023/CVE-2023-2780.md
index 8055b07a1a7..83b41c0dc54 100644
--- a/2023/CVE-2023-2780.md
+++ b/2023/CVE-2023-2780.md
@@ -15,3 +15,5 @@ Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2780.yaml
diff --git a/2023/CVE-2023-27847.md b/2023/CVE-2023-27847.md
index 81b714efc36..d326a2a5cab 100644
--- a/2023/CVE-2023-27847.md
+++ b/2023/CVE-2023-27847.md
@@ -15,3 +15,5 @@ SQL injection vulnerability found in PrestaShop xipblog v.2.0.1 and before allow
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27847.yaml
diff --git a/2023/CVE-2023-27922.md b/2023/CVE-2023-27922.md
index 5dfced1c3e2..765b189cbbb 100644
--- a/2023/CVE-2023-27922.md
+++ b/2023/CVE-2023-27922.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27922.yaml
diff --git a/2023/CVE-2023-2796.md b/2023/CVE-2023-2796.md
index 4b459ddd7e9..f2305e34664 100644
--- a/2023/CVE-2023-2796.md
+++ b/2023/CVE-2023-2796.md
@@ -16,3 +16,5 @@ The EventON WordPress plugin before 2.1.2 lacks authentication and authorization
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2796.yaml
diff --git a/2023/CVE-2023-28121.md b/2023/CVE-2023-28121.md
index 628b1c89079..f337822912b 100644
--- a/2023/CVE-2023-28121.md
+++ b/2023/CVE-2023-28121.md
@@ -20,3 +20,5 @@ An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower)
 - https://github.com/rio128128/Mass-CVE-2023-28121-kdoec
 - https://github.com/sug4r-wr41th/CVE-2023-28121
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-28121.yaml
diff --git a/2023/CVE-2023-2813.md b/2023/CVE-2023-2813.md
index d1aad227648..abe62c7e3f3 100644
--- a/2023/CVE-2023-2813.md
+++ b/2023/CVE-2023-2813.md
@@ -62,3 +62,5 @@ All of the above Aapna WordPress theme through 1.3, Anand WordPress theme throug
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2813.yaml
diff --git a/2023/CVE-2023-2822.md b/2023/CVE-2023-2822.md
index 28e61546a8f..f3e483de753 100644
--- a/2023/CVE-2023-2822.md
+++ b/2023/CVE-2023-2822.md
@@ -22,3 +22,5 @@ Es wurde eine problematische Schwachstelle in Ellucian Ethos Identity bis 5.10.5
 #### Github
 - https://github.com/cberman/CVE-2023-2822-demo
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2822.yaml
diff --git a/2023/CVE-2023-2825.md b/2023/CVE-2023-2825.md
index d10e48c7e1a..66d23d073e5 100644
--- a/2023/CVE-2023-2825.md
+++ b/2023/CVE-2023-2825.md
@@ -21,3 +21,5 @@ No PoCs from references.
 - https://github.com/caopengyan/CVE-2023-2825
 - https://github.com/cc3305/CVE-2023-2825
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2825.yaml
diff --git a/2023/CVE-2023-28343.md b/2023/CVE-2023-28343.md
index def6f1cf23d..360d809ce85 100644
--- a/2023/CVE-2023-28343.md
+++ b/2023/CVE-2023-28343.md
@@ -17,3 +17,5 @@ OS command injection affects Altenergy Power Control Software C1.2.5 via shell m
 - https://github.com/gobysec/CVE-2023-28343
 - https://github.com/superzerosec/CVE-2023-28343
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-28343.yaml
diff --git a/2023/CVE-2023-28432.md b/2023/CVE-2023-28432.md
index da799c5c6a2..b2de9adb720 100644
--- a/2023/CVE-2023-28432.md
+++ b/2023/CVE-2023-28432.md
@@ -35,3 +35,5 @@ Minio is a Multi-Cloud Object Storage framework. In a cluster deployment startin
 - https://github.com/xk-mt/CVE-2023-28432
 - https://github.com/yTxZx/CVE-2023-28432
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-28432.yaml
diff --git a/2023/CVE-2023-28662.md b/2023/CVE-2023-28662.md
index fe829211c23..7b00939c3b1 100644
--- a/2023/CVE-2023-28662.md
+++ b/2023/CVE-2023-28662.md
@@ -15,3 +15,5 @@ The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1,
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-28662.yaml
diff --git a/2023/CVE-2023-28665.md b/2023/CVE-2023-28665.md
index eb41375f074..f4a2a2ee68f 100644
--- a/2023/CVE-2023-28665.md
+++ b/2023/CVE-2023-28665.md
@@ -15,3 +15,5 @@ The Woo Bulk Price Update WordPress plugin, in versions < 2.2.2, is affected by
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-28665.yaml
diff --git a/2023/CVE-2023-28787.md b/2023/CVE-2023-28787.md
index 764c86d41b8..188d198eac8 100644
--- a/2023/CVE-2023-28787.md
+++ b/2023/CVE-2023-28787.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-28787.yaml
diff --git a/2023/CVE-2023-29084.md b/2023/CVE-2023-29084.md
index 50031901694..5c3d5d01dcd 100644
--- a/2023/CVE-2023-29084.md
+++ b/2023/CVE-2023-29084.md
@@ -15,3 +15,5 @@ Zoho ManageEngine ADManager Plus before 7181 allows for authenticated users to e
 #### Github
 - https://github.com/ohnonoyesyes/CVE-2023-29084
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29084.yaml
diff --git a/2023/CVE-2023-29204.md b/2023/CVE-2023-29204.md
index fd4faed2ed9..2e1dad01a7f 100644
--- a/2023/CVE-2023-29204.md
+++ b/2023/CVE-2023-29204.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29204.yaml
diff --git a/2023/CVE-2023-29298.md b/2023/CVE-2023-29298.md
index ab312ab26b4..e4e2c7a101d 100644
--- a/2023/CVE-2023-29298.md
+++ b/2023/CVE-2023-29298.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/CuriousLearnerDev/ColdFusion_EXp
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29298.yaml
diff --git a/2023/CVE-2023-29300.md b/2023/CVE-2023-29300.md
index bf80a81c76b..530d59a4c08 100644
--- a/2023/CVE-2023-29300.md
+++ b/2023/CVE-2023-29300.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29300.yaml
diff --git a/2023/CVE-2023-29357.md b/2023/CVE-2023-29357.md
index 64f76238738..e33f0bf012c 100644
--- a/2023/CVE-2023-29357.md
+++ b/2023/CVE-2023-29357.md
@@ -20,3 +20,5 @@ No PoCs from references.
 - https://github.com/KeyStrOke95/CVE-2023-29357-ExE
 - https://github.com/LuemmelSec/CVE-2023-29357
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29357.yaml
diff --git a/2023/CVE-2023-29439.md b/2023/CVE-2023-29439.md
index 4f7d09e2eee..3495e5e0d67 100644
--- a/2023/CVE-2023-29439.md
+++ b/2023/CVE-2023-29439.md
@@ -15,3 +15,5 @@ Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FooPlugins FooGall
 #### Github
 - https://github.com/LOURC0D3/CVE-2023-29439
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29439.yaml
diff --git a/2023/CVE-2023-2948.md b/2023/CVE-2023-2948.md
index b786a93dad6..0ecd35fcf79 100644
--- a/2023/CVE-2023-2948.md
+++ b/2023/CVE-2023-2948.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Generic in GitHub repository openemr/openemr prior
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2948.yaml
diff --git a/2023/CVE-2023-29489.md b/2023/CVE-2023-29489.md
index cd492acae4d..b7521cb856a 100644
--- a/2023/CVE-2023-29489.md
+++ b/2023/CVE-2023-29489.md
@@ -33,3 +33,5 @@ An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the c
 - https://github.com/whalebone7/EagleEye
 - https://github.com/xKore123/cPanel-CVE-2023-29489
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29489.yaml
diff --git a/2023/CVE-2023-2949.md b/2023/CVE-2023-2949.md
index 4394f82f716..93e975c3156 100644
--- a/2023/CVE-2023-2949.md
+++ b/2023/CVE-2023-2949.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prio
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2949.yaml
diff --git a/2023/CVE-2023-29506.md b/2023/CVE-2023-29506.md
index 9f665a93545..41ae62950f4 100644
--- a/2023/CVE-2023-29506.md
+++ b/2023/CVE-2023-29506.md
@@ -17,3 +17,5 @@ XWiki Commons are technical libraries common to several other top level XWiki pr
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29506.yaml
diff --git a/2023/CVE-2023-29623.md b/2023/CVE-2023-29623.md
index c9a75a099ac..2b631ff9724 100644
--- a/2023/CVE-2023-29623.md
+++ b/2023/CVE-2023-29623.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29623.yaml
diff --git a/2023/CVE-2023-2982.md b/2023/CVE-2023-2982.md
index 2a52d4e684d..f2de4105fcc 100644
--- a/2023/CVE-2023-2982.md
+++ b/2023/CVE-2023-2982.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/RandomRobbieBF/CVE-2023-2982
 - https://github.com/wshinkle/CVE-2023-2982
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2982.yaml
diff --git a/2023/CVE-2023-29827.md b/2023/CVE-2023-29827.md
index 049e5b4e70f..c71639f25c7 100644
--- a/2023/CVE-2023-29827.md
+++ b/2023/CVE-2023-29827.md
@@ -16,3 +16,5 @@ ejs v3.1.9 is vulnerable to server-side template injection. If the ejs file is c
 - https://github.com/NketiahGodfred/EJS-ssti-exploit
 - https://github.com/momrulhasan/ejs-ssti-shell-spawner
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29827.yaml
diff --git a/2023/CVE-2023-2986.md b/2023/CVE-2023-2986.md
index 673062d5e6b..b1c03cd8eda 100644
--- a/2023/CVE-2023-2986.md
+++ b/2023/CVE-2023-2986.md
@@ -18,3 +18,5 @@ The Abandoned Cart Lite for WooCommerce plugin for WordPress is vulnerable to au
 #### Github
 - https://github.com/Alucard0x1/CVE-2023-2986
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-2986.yaml
diff --git a/2023/CVE-2023-29919.md b/2023/CVE-2023-29919.md
index 9e022684fdf..383c79e7335 100644
--- a/2023/CVE-2023-29919.md
+++ b/2023/CVE-2023-29919.md
@@ -15,3 +15,5 @@ SolarView Compact <= 6.0 is vulnerable to Insecure Permissions. Any file on the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29919.yaml
diff --git a/2023/CVE-2023-29922.md b/2023/CVE-2023-29922.md
index 480720d1cdf..a4ad85824d9 100644
--- a/2023/CVE-2023-29922.md
+++ b/2023/CVE-2023-29922.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/CN016/Powerjob-CVE-2023-29922-
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29922.yaml
diff --git a/2023/CVE-2023-29923.md b/2023/CVE-2023-29923.md
index 0ab350935fe..ac381181e56 100644
--- a/2023/CVE-2023-29923.md
+++ b/2023/CVE-2023-29923.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/1820112015/CVE-2023-29923
 - https://github.com/Le1a/CVE-2023-29923
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29923.yaml
diff --git a/2023/CVE-2023-30013.md b/2023/CVE-2023-30013.md
index a3aa2edd7fb..3d2b2ecd007 100644
--- a/2023/CVE-2023-30013.md
+++ b/2023/CVE-2023-30013.md
@@ -16,3 +16,5 @@ TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a comm
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30013.yaml
diff --git a/2023/CVE-2023-30019.md b/2023/CVE-2023-30019.md
index 1f1137fdaab..1460a1191ce 100644
--- a/2023/CVE-2023-30019.md
+++ b/2023/CVE-2023-30019.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30019.yaml
diff --git a/2023/CVE-2023-30150.md b/2023/CVE-2023-30150.md
index 37cd0880bbd..b1d7d30291a 100644
--- a/2023/CVE-2023-30150.md
+++ b/2023/CVE-2023-30150.md
@@ -15,3 +15,5 @@ PrestaShop leocustomajax 1.0 and 1.0.0 are vulnerable to SQL Injection via modul
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30150.yaml
diff --git a/2023/CVE-2023-30192.md b/2023/CVE-2023-30192.md
index 2a4cc9f9013..efc29385c91 100644
--- a/2023/CVE-2023-30192.md
+++ b/2023/CVE-2023-30192.md
@@ -15,3 +15,5 @@ Prestashop possearchproducts 1.7 is vulnerable to SQL Injection via PosSearch::f
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30192.yaml
diff --git a/2023/CVE-2023-30194.md b/2023/CVE-2023-30194.md
index 67eeaea0608..23c8e0be388 100644
--- a/2023/CVE-2023-30194.md
+++ b/2023/CVE-2023-30194.md
@@ -15,3 +15,5 @@ Prestashop posstaticfooter <= 1.0.0 is vulnerable to SQL Injection via posstatic
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30194.yaml
diff --git a/2023/CVE-2023-30212.md b/2023/CVE-2023-30212.md
index 62e04ba2c40..573fafc0f8d 100644
--- a/2023/CVE-2023-30212.md
+++ b/2023/CVE-2023-30212.md
@@ -27,3 +27,5 @@ No PoCs from references.
 - https://github.com/libasv/Exploite-CVE-2023-30212-vulnerability
 - https://github.com/sungmin20/cve-2023-30212
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30212.yaml
diff --git a/2023/CVE-2023-30256.md b/2023/CVE-2023-30256.md
index 90d2a0a1e30..3ab3b734bc4 100644
--- a/2023/CVE-2023-30256.md
+++ b/2023/CVE-2023-30256.md
@@ -16,3 +16,5 @@ Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30256.yaml
diff --git a/2023/CVE-2023-30258.md b/2023/CVE-2023-30258.md
index eeb58cf3676..65677b6e6c2 100644
--- a/2023/CVE-2023-30258.md
+++ b/2023/CVE-2023-30258.md
@@ -23,3 +23,5 @@ Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allo
 - https://github.com/sk00l/CVE-2023-30258
 - https://github.com/tinashelorenzi/CVE-2023-30258-magnus-billing-v7-exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30258.yaml
diff --git a/2023/CVE-2023-30534.md b/2023/CVE-2023-30534.md
index aea74fbe51d..79fe046378a 100644
--- a/2023/CVE-2023-30534.md
+++ b/2023/CVE-2023-30534.md
@@ -16,3 +16,5 @@ Cacti is an open source operational monitoring and fault management framework. T
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30534.yaml
diff --git a/2023/CVE-2023-30625.md b/2023/CVE-2023-30625.md
index 83ace358aca..22eea402b25 100644
--- a/2023/CVE-2023-30625.md
+++ b/2023/CVE-2023-30625.md
@@ -16,3 +16,5 @@ rudder-server is part of RudderStack, an open source Customer Data Platform (CDP
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30625.yaml
diff --git a/2023/CVE-2023-3077.md b/2023/CVE-2023-3077.md
index c5cedd130b0..e76554822c8 100644
--- a/2023/CVE-2023-3077.md
+++ b/2023/CVE-2023-3077.md
@@ -15,3 +15,5 @@ The MStore API WordPress plugin before 3.9.8 does not sanitise and escape a para
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3077.yaml
diff --git a/2023/CVE-2023-30777.md b/2023/CVE-2023-30777.md
index eb95fabe697..99b26afd07e 100644
--- a/2023/CVE-2023-30777.md
+++ b/2023/CVE-2023-30777.md
@@ -16,3 +16,5 @@ Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Engine Advanced
 #### Github
 - https://github.com/Alucard0x1/CVE-2023-30777
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30777.yaml
diff --git a/2023/CVE-2023-30868.md b/2023/CVE-2023-30868.md
index ee39709cc6b..fca084b48cb 100644
--- a/2023/CVE-2023-30868.md
+++ b/2023/CVE-2023-30868.md
@@ -15,3 +15,5 @@ Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jon Christopher CM
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30868.yaml
diff --git a/2023/CVE-2023-30869.md b/2023/CVE-2023-30869.md
index 34f01ee20de..c3ea8e2af88 100644
--- a/2023/CVE-2023-30869.md
+++ b/2023/CVE-2023-30869.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30869.yaml
diff --git a/2023/CVE-2023-30943.md b/2023/CVE-2023-30943.md
index 77877ea2ad3..f227e179a44 100644
--- a/2023/CVE-2023-30943.md
+++ b/2023/CVE-2023-30943.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/RubyCat1337/CVE-2023-30943
 - https://github.com/d0rb/CVE-2023-30943
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30943.yaml
diff --git a/2023/CVE-2023-31059.md b/2023/CVE-2023-31059.md
index 50427571c1c..374ae4d9a68 100644
--- a/2023/CVE-2023-31059.md
+++ b/2023/CVE-2023-31059.md
@@ -15,3 +15,5 @@ Repetier Server through 1.4.10 allows ..%5c directory traversal for reading file
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31059.yaml
diff --git a/2023/CVE-2023-3139.md b/2023/CVE-2023-3139.md
index 22cf6d856cb..7fa1f13b7c3 100644
--- a/2023/CVE-2023-3139.md
+++ b/2023/CVE-2023-3139.md
@@ -15,3 +15,5 @@ The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3139.yaml
diff --git a/2023/CVE-2023-31446.md b/2023/CVE-2023-31446.md
index b0c712cab02..503e09a7b8f 100644
--- a/2023/CVE-2023-31446.md
+++ b/2023/CVE-2023-31446.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Dodge-MPTC/CVE-2023-31446-Remote-Code-Execution
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31446.yaml
diff --git a/2023/CVE-2023-31465.md b/2023/CVE-2023-31465.md
index ddbdd364a22..9c4e633d53a 100644
--- a/2023/CVE-2023-31465.md
+++ b/2023/CVE-2023-31465.md
@@ -15,3 +15,5 @@ An issue was discovered in FSMLabs TimeKeeper 8.0.17 through 8.0.28. By intercep
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31465.yaml
diff --git a/2023/CVE-2023-31478.md b/2023/CVE-2023-31478.md
index 81553d2ba94..440bb280753 100644
--- a/2023/CVE-2023-31478.md
+++ b/2023/CVE-2023-31478.md
@@ -15,3 +15,5 @@ An issue was discovered on GL.iNet devices before 3.216. An API endpoint reveals
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31478.yaml
diff --git a/2023/CVE-2023-31548.md b/2023/CVE-2023-31548.md
index d841a54c45b..a4ea7ca2b7c 100644
--- a/2023/CVE-2023-31548.md
+++ b/2023/CVE-2023-31548.md
@@ -15,3 +15,5 @@ A stored Cross-site scripting (XSS) vulnerability in the FundRaiserEditor.php co
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31548.yaml
diff --git a/2023/CVE-2023-3169.md b/2023/CVE-2023-3169.md
index d4a0cf89c8a..31a279a66f2 100644
--- a/2023/CVE-2023-3169.md
+++ b/2023/CVE-2023-3169.md
@@ -15,3 +15,5 @@ The tagDiv Composer WordPress plugin before 4.2, used as a companion by the News
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3169.yaml
diff --git a/2023/CVE-2023-3188.md b/2023/CVE-2023-3188.md
index 3b8191fe05a..286050e26c4 100644
--- a/2023/CVE-2023-3188.md
+++ b/2023/CVE-2023-3188.md
@@ -15,3 +15,5 @@ Server-Side Request Forgery (SSRF) in GitHub repository owncast/owncast prior to
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3188.yaml
diff --git a/2023/CVE-2023-3197.md b/2023/CVE-2023-3197.md
index c631f0f51a7..53b98cc7725 100644
--- a/2023/CVE-2023-3197.md
+++ b/2023/CVE-2023-3197.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3197.yaml
diff --git a/2023/CVE-2023-32068.md b/2023/CVE-2023-32068.md
index b58b32b0c85..218e24e129d 100644
--- a/2023/CVE-2023-32068.md
+++ b/2023/CVE-2023-32068.md
@@ -15,3 +15,5 @@ XWiki Platform is a generic wiki platform offering runtime services for applicat
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32068.yaml
diff --git a/2023/CVE-2023-32077.md b/2023/CVE-2023-32077.md
index 9760b53b51f..583ce9d6b8a 100644
--- a/2023/CVE-2023-32077.md
+++ b/2023/CVE-2023-32077.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32077.yaml
diff --git a/2023/CVE-2023-32117.md b/2023/CVE-2023-32117.md
index 71ec80166dd..0473811f06a 100644
--- a/2023/CVE-2023-32117.md
+++ b/2023/CVE-2023-32117.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2023-32117
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32117.yaml
diff --git a/2023/CVE-2023-3219.md b/2023/CVE-2023-3219.md
index bca31813b30..539bb0a3e4f 100644
--- a/2023/CVE-2023-3219.md
+++ b/2023/CVE-2023-3219.md
@@ -16,3 +16,5 @@ The EventON WordPress plugin before 2.1.2 does not validate that the event_id pa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3219.yaml
diff --git a/2023/CVE-2023-32235.md b/2023/CVE-2023-32235.md
index 2429cb640f1..d2383a1f374 100644
--- a/2023/CVE-2023-32235.md
+++ b/2023/CVE-2023-32235.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/AXRoux/Ghost-Path-Traversal-CVE-2023-32235-
 - https://github.com/VEEXH/Ghost-Path-Traversal-CVE-2023-32235-
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32235.yaml
diff --git a/2023/CVE-2023-32243.md b/2023/CVE-2023-32243.md
index c3558069d8e..d36c0b167c5 100644
--- a/2023/CVE-2023-32243.md
+++ b/2023/CVE-2023-32243.md
@@ -22,3 +22,5 @@ Improper Authentication vulnerability in WPDeveloper Essential Addons for Elemen
 - https://github.com/manavvedawala2/CVE-2023-32243-proof-of-concept
 - https://github.com/t101804/WP-PrivescExploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32243.yaml
diff --git a/2023/CVE-2023-32315.md b/2023/CVE-2023-32315.md
index 70965fc72fe..f182f2eaebb 100644
--- a/2023/CVE-2023-32315.md
+++ b/2023/CVE-2023-32315.md
@@ -30,3 +30,5 @@ Openfire is an XMPP server licensed under the Open Source Apache License. Openfi
 - https://github.com/rag-fish/openfire-exploit-suite
 - https://github.com/tangxiaofeng7/CVE-2023-32315-Openfire-Bypass
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32315.yaml
diff --git a/2023/CVE-2023-32563.md b/2023/CVE-2023-32563.md
index b9727f92292..7b6fa033a68 100644
--- a/2023/CVE-2023-32563.md
+++ b/2023/CVE-2023-32563.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32563.yaml
diff --git a/2023/CVE-2023-32590.md b/2023/CVE-2023-32590.md
index 26161852b9f..05fbc4bea4d 100644
--- a/2023/CVE-2023-32590.md
+++ b/2023/CVE-2023-32590.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2023-32590
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32590.yaml
diff --git a/2023/CVE-2023-3277.md b/2023/CVE-2023-3277.md
index 9f352e2f2a6..4e29a32fb03 100644
--- a/2023/CVE-2023-3277.md
+++ b/2023/CVE-2023-3277.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3277.yaml
diff --git a/2023/CVE-2023-33246.md b/2023/CVE-2023-33246.md
index 343853fd633..6d611b1d78c 100644
--- a/2023/CVE-2023-33246.md
+++ b/2023/CVE-2023-33246.md
@@ -35,3 +35,5 @@ For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk
 - https://github.com/vulncheck-oss/fetch-broker-conf
 - https://github.com/yizhimanpadewoniu/CVE-2023-33246-Copy
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-33246.yaml
diff --git a/2023/CVE-2023-33405.md b/2023/CVE-2023-33405.md
index d1d4e9fb79d..e26d52bd1e4 100644
--- a/2023/CVE-2023-33405.md
+++ b/2023/CVE-2023-33405.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/hacip/CVE-2023-33405
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33405.yaml
diff --git a/2023/CVE-2023-33440.md b/2023/CVE-2023-33440.md
index 869882012e7..ad3501d8ce9 100644
--- a/2023/CVE-2023-33440.md
+++ b/2023/CVE-2023-33440.md
@@ -15,3 +15,5 @@ Sourcecodester Faculty Evaluation System v1.0 is vulnerable to arbitrary code ex
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33440.yaml
diff --git a/2023/CVE-2023-3345.md b/2023/CVE-2023-3345.md
index 1fc06c40553..2acd17fcc98 100644
--- a/2023/CVE-2023-3345.md
+++ b/2023/CVE-2023-3345.md
@@ -15,3 +15,5 @@ The LMS by Masteriyo WordPress plugin before 1.6.8 does not have proper authoriz
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3345.yaml
diff --git a/2023/CVE-2023-33510.md b/2023/CVE-2023-33510.md
index f9ef14683a2..591248147fc 100644
--- a/2023/CVE-2023-33510.md
+++ b/2023/CVE-2023-33510.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33510.yaml
diff --git a/2023/CVE-2023-33568.md b/2023/CVE-2023-33568.md
index 825e9e3d773..66cca7e805b 100644
--- a/2023/CVE-2023-33568.md
+++ b/2023/CVE-2023-33568.md
@@ -15,3 +15,5 @@ An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perfor
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33568.yaml
diff --git a/2023/CVE-2023-33629.md b/2023/CVE-2023-33629.md
index 3bc98434a62..736e98e0872 100644
--- a/2023/CVE-2023-33629.md
+++ b/2023/CVE-2023-33629.md
@@ -15,3 +15,5 @@ H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack over
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33629.yaml
diff --git a/2023/CVE-2023-3368.md b/2023/CVE-2023-3368.md
index 6d66118d391..99abbffc6f9 100644
--- a/2023/CVE-2023-3368.md
+++ b/2023/CVE-2023-3368.md
@@ -15,3 +15,5 @@ Command injection in `/main/webservices/additional_webservices.php` in Chamilo L
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3368.yaml
diff --git a/2023/CVE-2023-3380.md b/2023/CVE-2023-3380.md
index b6e07b448d6..7e3f36a4f7c 100644
--- a/2023/CVE-2023-3380.md
+++ b/2023/CVE-2023-3380.md
@@ -16,3 +16,5 @@ Es wurde eine kritische Schwachstelle in Wavlink WN579X3 bis 20230615 entdeckt.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3380.yaml
diff --git a/2023/CVE-2023-33831.md b/2023/CVE-2023-33831.md
index 303734bcef9..716b8a99d3e 100644
--- a/2023/CVE-2023-33831.md
+++ b/2023/CVE-2023-33831.md
@@ -16,3 +16,5 @@ A remote command execution (RCE) vulnerability in the /api/runscript endpoint of
 - https://github.com/btar1gan/exploit_CVE-2023-33831
 - https://github.com/rodolfomarianocy/Unauthenticated-RCE-FUXA-CVE-2023-33831
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33831.yaml
diff --git a/2023/CVE-2023-3388.md b/2023/CVE-2023-3388.md
index b585327940e..3eb0c543e84 100644
--- a/2023/CVE-2023-3388.md
+++ b/2023/CVE-2023-3388.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3388.yaml
diff --git a/2023/CVE-2023-34020.md b/2023/CVE-2023-34020.md
index b579b806ffd..8964a348cee 100644
--- a/2023/CVE-2023-34020.md
+++ b/2023/CVE-2023-34020.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34020.yaml
diff --git a/2023/CVE-2023-34039.md b/2023/CVE-2023-34039.md
index 13edaad6156..e3770b6554a 100644
--- a/2023/CVE-2023-34039.md
+++ b/2023/CVE-2023-34039.md
@@ -20,3 +20,5 @@ Aria Operations for Networks contains an Authentication Bypass vulnerability due
 - https://github.com/sinsinology/CVE-2023-34039
 - https://github.com/syedhafiz1234/CVE-2023-34039
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2023/CVE-2023-34039.yaml
diff --git a/2023/CVE-2023-34048.md b/2023/CVE-2023-34048.md
index 821eb8fa471..a58664dbbfe 100644
--- a/2023/CVE-2023-34048.md
+++ b/2023/CVE-2023-34048.md
@@ -22,3 +22,5 @@ vCenter Server contains an out-of-bounds write vulnerability in the implementati
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34048.yaml
diff --git a/2023/CVE-2023-34092.md b/2023/CVE-2023-34092.md
index f41ecdf74bf..98989f466a4 100644
--- a/2023/CVE-2023-34092.md
+++ b/2023/CVE-2023-34092.md
@@ -21,3 +21,5 @@ Vite provides frontend tooling. Prior to versions 2.9.16, 3.2.7, 4.0.5, 4.1.5, 4
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34092.yaml
diff --git a/2023/CVE-2023-34105.md b/2023/CVE-2023-34105.md
index 65997df1f68..91b3e94ec99 100644
--- a/2023/CVE-2023-34105.md
+++ b/2023/CVE-2023-34105.md
@@ -17,3 +17,5 @@ SRS is a real-time video server supporting RTMP, WebRTC, HLS, HTTP-FLV, SRT, MPE
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34105.yaml
diff --git a/2023/CVE-2023-34124.md b/2023/CVE-2023-34124.md
index 765d48e49bd..5015154e4a5 100644
--- a/2023/CVE-2023-34124.md
+++ b/2023/CVE-2023-34124.md
@@ -17,3 +17,5 @@ The authentication mechanism in SonicWall GMS and Analytics Web Services had ins
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34124.yaml
diff --git a/2023/CVE-2023-34133.md b/2023/CVE-2023-34133.md
index f2bdd96e7b6..15bd1bbf3dc 100644
--- a/2023/CVE-2023-34133.md
+++ b/2023/CVE-2023-34133.md
@@ -17,3 +17,5 @@ Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34133.yaml
diff --git a/2023/CVE-2023-34192.md b/2023/CVE-2023-34192.md
index da2fe6025dc..f5a3ae0b36f 100644
--- a/2023/CVE-2023-34192.md
+++ b/2023/CVE-2023-34192.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34192.yaml
diff --git a/2023/CVE-2023-34259.md b/2023/CVE-2023-34259.md
index a8ed3351075..babeb8951d9 100644
--- a/2023/CVE-2023-34259.md
+++ b/2023/CVE-2023-34259.md
@@ -16,3 +16,5 @@ Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow /wlmdeu%2f%2e%2e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34259.yaml
diff --git a/2023/CVE-2023-34362.md b/2023/CVE-2023-34362.md
index c44c242fafa..5799da1faf8 100644
--- a/2023/CVE-2023-34362.md
+++ b/2023/CVE-2023-34362.md
@@ -38,3 +38,5 @@ In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.
 - https://github.com/sfewer-r7/CVE-2023-34362
 - https://github.com/toorandom/moveit-payload-decrypt-CVE-2023-34362
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34362.yaml
diff --git a/2023/CVE-2023-3452.md b/2023/CVE-2023-3452.md
index c1b7c31b4db..4c9de06ff90 100644
--- a/2023/CVE-2023-3452.md
+++ b/2023/CVE-2023-3452.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/leoanggal1/CVE-2023-3452-PoC
 - https://github.com/tranphuc2005/Exploit_Wordpress
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3452.yaml
diff --git a/2023/CVE-2023-34537.md b/2023/CVE-2023-34537.md
index 39a96153b0c..ef0584f31d6 100644
--- a/2023/CVE-2023-34537.md
+++ b/2023/CVE-2023-34537.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/leekenghwa/CVE-2023-34537---XSS-reflected--found-in-HotelDruid-3.0.5
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34537.yaml
diff --git a/2023/CVE-2023-34598.md b/2023/CVE-2023-34598.md
index 253c250736f..a596f24d29e 100644
--- a/2023/CVE-2023-34598.md
+++ b/2023/CVE-2023-34598.md
@@ -17,3 +17,5 @@ Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible
 - https://github.com/Szlein/CVE-2023-34598
 - https://github.com/Zer0F8th/CVE-2023-34598
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34598.yaml
diff --git a/2023/CVE-2023-34599.md b/2023/CVE-2023-34599.md
index 4165bbee302..c6ba85ed4ba 100644
--- a/2023/CVE-2023-34599.md
+++ b/2023/CVE-2023-34599.md
@@ -15,3 +15,5 @@ Multiple Cross-Site Scripting (XSS) vulnerabilities have been identified in Gibb
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34599.yaml
diff --git a/2023/CVE-2023-3460.md b/2023/CVE-2023-3460.md
index 11a7fe54c43..e450389fb29 100644
--- a/2023/CVE-2023-3460.md
+++ b/2023/CVE-2023-3460.md
@@ -25,3 +25,5 @@ The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from
 - https://github.com/rizqimaulanaa/CVE-2023-3460
 - https://github.com/yon3zu/Mass-CVE-2023-3460
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3460.yaml
diff --git a/2023/CVE-2023-34659.md b/2023/CVE-2023-34659.md
index 365af41200a..bfa2548dbd5 100644
--- a/2023/CVE-2023-34659.md
+++ b/2023/CVE-2023-34659.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34659.yaml
diff --git a/2023/CVE-2023-34751.md b/2023/CVE-2023-34751.md
index 998b5a4daec..397547f7665 100644
--- a/2023/CVE-2023-34751.md
+++ b/2023/CVE-2023-34751.md
@@ -15,3 +15,5 @@ bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34751.yaml
diff --git a/2023/CVE-2023-34752.md b/2023/CVE-2023-34752.md
index 27efe6850bc..733c5ba1b9c 100644
--- a/2023/CVE-2023-34752.md
+++ b/2023/CVE-2023-34752.md
@@ -15,3 +15,5 @@ bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34752.yaml
diff --git a/2023/CVE-2023-34753.md b/2023/CVE-2023-34753.md
index 04b97d3fcce..ce0c75c86d6 100644
--- a/2023/CVE-2023-34753.md
+++ b/2023/CVE-2023-34753.md
@@ -15,3 +15,5 @@ bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34753.yaml
diff --git a/2023/CVE-2023-34754.md b/2023/CVE-2023-34754.md
index 481f5034802..64b1c3d6716 100644
--- a/2023/CVE-2023-34754.md
+++ b/2023/CVE-2023-34754.md
@@ -15,3 +15,5 @@ bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34754.yaml
diff --git a/2023/CVE-2023-34755.md b/2023/CVE-2023-34755.md
index 60640e1da6b..416c47ed00b 100644
--- a/2023/CVE-2023-34755.md
+++ b/2023/CVE-2023-34755.md
@@ -15,3 +15,5 @@ bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34755.yaml
diff --git a/2023/CVE-2023-34756.md b/2023/CVE-2023-34756.md
index e526bb81f63..2ec93765315 100644
--- a/2023/CVE-2023-34756.md
+++ b/2023/CVE-2023-34756.md
@@ -15,3 +15,5 @@ bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34756.yaml
diff --git a/2023/CVE-2023-3479.md b/2023/CVE-2023-3479.md
index e3cb571b445..6fece186684 100644
--- a/2023/CVE-2023-3479.md
+++ b/2023/CVE-2023-3479.md
@@ -16,3 +16,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp pr
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3479.yaml
diff --git a/2023/CVE-2023-34843.md b/2023/CVE-2023-34843.md
index 0293d1a2438..13b7d98acba 100644
--- a/2023/CVE-2023-34843.md
+++ b/2023/CVE-2023-34843.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/rootd4ddy/CVE-2023-34843
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34843.yaml
diff --git a/2023/CVE-2023-34960.md b/2023/CVE-2023-34960.md
index ca8c8f57893..04ced6e8b63 100644
--- a/2023/CVE-2023-34960.md
+++ b/2023/CVE-2023-34960.md
@@ -22,3 +22,5 @@ A command injection vulnerability in the wsConvertPpt component of Chamilo v1.11
 - https://github.com/YongYe-Security/Chamilo_CVE-2023-34960-EXP
 - https://github.com/tpdlshdmlrkfmcla/cve-2023-34960
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34960.yaml
diff --git a/2023/CVE-2023-34990.md b/2023/CVE-2023-34990.md
index 8530b2a99bb..22c05ac53d2 100644
--- a/2023/CVE-2023-34990.md
+++ b/2023/CVE-2023-34990.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34990.yaml
diff --git a/2023/CVE-2023-34992.md b/2023/CVE-2023-34992.md
index afe59b2163a..22843bb4970 100644
--- a/2023/CVE-2023-34992.md
+++ b/2023/CVE-2023-34992.md
@@ -20,3 +20,5 @@ No PoCs from references.
 #### Github
 - https://github.com/horizon3ai/CVE-2023-34992
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-34992.yaml
diff --git a/2023/CVE-2023-35078.md b/2023/CVE-2023-35078.md
index 4c26aef51b1..4df4a92adb2 100644
--- a/2023/CVE-2023-35078.md
+++ b/2023/CVE-2023-35078.md
@@ -28,3 +28,5 @@ No PoCs from references.
 - https://github.com/synfinner/CVE-2023-35078
 - https://github.com/vchan-in/CVE-2023-35078-Exploit-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35078.yaml
diff --git a/2023/CVE-2023-35082.md b/2023/CVE-2023-35082.md
index 33321d11bd4..26926a3347f 100644
--- a/2023/CVE-2023-35082.md
+++ b/2023/CVE-2023-35082.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Chocapikk/CVE-2023-35082
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35082.yaml
diff --git a/2023/CVE-2023-35155.md b/2023/CVE-2023-35155.md
index 455e9a6f2b1..8e94f838a4e 100644
--- a/2023/CVE-2023-35155.md
+++ b/2023/CVE-2023-35155.md
@@ -16,3 +16,5 @@ XWiki Platform is a generic wiki platform offering runtime services for applicat
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35155.yaml
diff --git a/2023/CVE-2023-35156.md b/2023/CVE-2023-35156.md
index 5d87984ccc9..5ccfae6e385 100644
--- a/2023/CVE-2023-35156.md
+++ b/2023/CVE-2023-35156.md
@@ -16,3 +16,5 @@ XWiki Platform is a generic wiki platform offering runtime services for applicat
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35156.yaml
diff --git a/2023/CVE-2023-35158.md b/2023/CVE-2023-35158.md
index b11309b0910..1e7c077a22a 100644
--- a/2023/CVE-2023-35158.md
+++ b/2023/CVE-2023-35158.md
@@ -16,3 +16,5 @@ XWiki Platform is a generic wiki platform offering runtime services for applicat
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35158.yaml
diff --git a/2023/CVE-2023-35159.md b/2023/CVE-2023-35159.md
index a50befccbe8..0fd6a92a15a 100644
--- a/2023/CVE-2023-35159.md
+++ b/2023/CVE-2023-35159.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35159.yaml
diff --git a/2023/CVE-2023-35160.md b/2023/CVE-2023-35160.md
index 623b549d022..607edccd0e6 100644
--- a/2023/CVE-2023-35160.md
+++ b/2023/CVE-2023-35160.md
@@ -16,3 +16,5 @@ XWiki Platform is a generic wiki platform offering runtime services for applicat
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35160.yaml
diff --git a/2023/CVE-2023-35161.md b/2023/CVE-2023-35161.md
index 8bacc170f7e..637bbb7455f 100644
--- a/2023/CVE-2023-35161.md
+++ b/2023/CVE-2023-35161.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35161.yaml
diff --git a/2023/CVE-2023-35162.md b/2023/CVE-2023-35162.md
index de555c63a7d..6b6c0546e21 100644
--- a/2023/CVE-2023-35162.md
+++ b/2023/CVE-2023-35162.md
@@ -16,3 +16,5 @@ XWiki Platform is a generic wiki platform offering runtime services for applicat
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35162.yaml
diff --git a/2023/CVE-2023-3519.md b/2023/CVE-2023-3519.md
index 81a82fde2bd..34beded3e0a 100644
--- a/2023/CVE-2023-3519.md
+++ b/2023/CVE-2023-3519.md
@@ -30,3 +30,5 @@ Unauthenticated remote code execution
 - https://github.com/passwa11/CVE-2023-3519
 - https://github.com/rwincey/cve-2023-3519
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3519.yaml
diff --git a/2023/CVE-2023-3521.md b/2023/CVE-2023-3521.md
index cad7c736a9b..87218a498e1 100644
--- a/2023/CVE-2023-3521.md
+++ b/2023/CVE-2023-3521.md
@@ -16,3 +16,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository fossbilling/fossbill
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3521.yaml
diff --git a/2023/CVE-2023-35708.md b/2023/CVE-2023-35708.md
index df459cc5043..088ec5e405a 100644
--- a/2023/CVE-2023-35708.md
+++ b/2023/CVE-2023-35708.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35708.yaml
diff --git a/2023/CVE-2023-3578.md b/2023/CVE-2023-3578.md
index 3e8739ecddb..83921e0c614 100644
--- a/2023/CVE-2023-3578.md
+++ b/2023/CVE-2023-3578.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3578.yaml
diff --git a/2023/CVE-2023-35813.md b/2023/CVE-2023-35813.md
index 4b5fc8a5ea8..6f75eef9db3 100644
--- a/2023/CVE-2023-35813.md
+++ b/2023/CVE-2023-35813.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/BagheeraAltered/CVE-2023-35813-PoC
 - https://github.com/aalexpereira/CVE-2023-35813
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35813.yaml
diff --git a/2023/CVE-2023-35843.md b/2023/CVE-2023-35843.md
index 4069c66fb79..f9ebd518733 100644
--- a/2023/CVE-2023-35843.md
+++ b/2023/CVE-2023-35843.md
@@ -17,3 +17,5 @@ NocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allo
 - https://github.com/Szlein/CVE-2023-35843
 - https://github.com/b3nguang/CVE-2023-35843
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35843.yaml
diff --git a/2023/CVE-2023-35844.md b/2023/CVE-2023-35844.md
index 4538a5bbbd7..708170c5846 100644
--- a/2023/CVE-2023-35844.md
+++ b/2023/CVE-2023-35844.md
@@ -16,3 +16,5 @@ packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpo
 - https://github.com/Lserein/CVE-2023-35844
 - https://github.com/Szlein/CVE-2023-35844
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35844.yaml
diff --git a/2023/CVE-2023-35885.md b/2023/CVE-2023-35885.md
index 22753f548d3..ef228de1e0a 100644
--- a/2023/CVE-2023-35885.md
+++ b/2023/CVE-2023-35885.md
@@ -15,3 +15,5 @@ CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
 #### Github
 - https://github.com/Chocapikk/CVE-2023-35885
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35885.yaml
diff --git a/2023/CVE-2023-36144.md b/2023/CVE-2023-36144.md
index 444619f6ea3..3218a8080d3 100644
--- a/2023/CVE-2023-36144.md
+++ b/2023/CVE-2023-36144.md
@@ -16,3 +16,5 @@ An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36144.yaml
diff --git a/2023/CVE-2023-36306.md b/2023/CVE-2023-36306.md
index 0e6973e7344..f34f0d81af2 100644
--- a/2023/CVE-2023-36306.md
+++ b/2023/CVE-2023-36306.md
@@ -15,3 +15,5 @@ A Cross Site Scripting (XSS) vulnerability in Adiscon Aiscon LogAnalyzer through
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36306.yaml
diff --git a/2023/CVE-2023-36346.md b/2023/CVE-2023-36346.md
index 91e0bba88dd..5f6915acc67 100644
--- a/2023/CVE-2023-36346.md
+++ b/2023/CVE-2023-36346.md
@@ -17,3 +17,5 @@ POS Codekop v2.0 was discovered to contain a reflected cross-site scripting (XSS
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36346.yaml
diff --git a/2023/CVE-2023-36347.md b/2023/CVE-2023-36347.md
index 85858d20324..7d316e0188b 100644
--- a/2023/CVE-2023-36347.md
+++ b/2023/CVE-2023-36347.md
@@ -16,3 +16,5 @@ A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36347.yaml
diff --git a/2023/CVE-2023-3643.md b/2023/CVE-2023-3643.md
index 96340c56628..07d863013fc 100644
--- a/2023/CVE-2023-3643.md
+++ b/2023/CVE-2023-3643.md
@@ -16,3 +16,5 @@ Es wurde eine Schwachstelle in Boss Mini 1.4.0 Build 6221 ausgemacht. Sie wurde
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3643.yaml
diff --git a/2023/CVE-2023-36844.md b/2023/CVE-2023-36844.md
index 203488b4126..8eb0f45b2c1 100644
--- a/2023/CVE-2023-36844.md
+++ b/2023/CVE-2023-36844.md
@@ -29,3 +29,5 @@ A PHP External Variable Modification vulnerability in J-Web of Juniper Networks
 - https://github.com/r3dcl1ff/CVE-2023-36844_Juniper_RCE
 - https://github.com/watchtowrlabs/juniper-rce_cve-2023-36844
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36844.yaml
diff --git a/2023/CVE-2023-36845.md b/2023/CVE-2023-36845.md
index beae4844a61..92ce2e0bd72 100644
--- a/2023/CVE-2023-36845.md
+++ b/2023/CVE-2023-36845.md
@@ -41,3 +41,5 @@ A PHP External Variable Modification vulnerability in J-Web of Juniper Networks
 - https://github.com/simrotion13/CVE-2023-36845
 - https://github.com/zaenhaxor/CVE-2023-36845
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36845.yaml
diff --git a/2023/CVE-2023-36934.md b/2023/CVE-2023-36934.md
index 5b820f4b14d..a31b85db47e 100644
--- a/2023/CVE-2023-36934.md
+++ b/2023/CVE-2023-36934.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36934.yaml
diff --git a/2023/CVE-2023-3710.md b/2023/CVE-2023-3710.md
index 9c6f78df15c..bec244f20f8 100644
--- a/2023/CVE-2023-3710.md
+++ b/2023/CVE-2023-3710.md
@@ -23,3 +23,5 @@ Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printe
 #### Github
 - https://github.com/Michael-Meade/snackhack2
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3710.yaml
diff --git a/2023/CVE-2023-3722.md b/2023/CVE-2023-3722.md
index ffe25136f67..9778ac5933a 100644
--- a/2023/CVE-2023-3722.md
+++ b/2023/CVE-2023-3722.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/pizza-power/CVE-2023-3722
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3722.yaml
diff --git a/2023/CVE-2023-37265.md b/2023/CVE-2023-37265.md
index d68a14b1d50..1f188da2f57 100644
--- a/2023/CVE-2023-37265.md
+++ b/2023/CVE-2023-37265.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37265.yaml
diff --git a/2023/CVE-2023-37270.md b/2023/CVE-2023-37270.md
index ab34e496beb..956a2e839df 100644
--- a/2023/CVE-2023-37270.md
+++ b/2023/CVE-2023-37270.md
@@ -16,3 +16,5 @@ Piwigo is open source photo gallery software. Prior to version 13.8.0, there is
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37270.yaml
diff --git a/2023/CVE-2023-37462.md b/2023/CVE-2023-37462.md
index 0ef42f58695..d0ef1a2ac9a 100644
--- a/2023/CVE-2023-37462.md
+++ b/2023/CVE-2023-37462.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37462.yaml
diff --git a/2023/CVE-2023-37474.md b/2023/CVE-2023-37474.md
index ec84207bebe..a23f0447be7 100644
--- a/2023/CVE-2023-37474.md
+++ b/2023/CVE-2023-37474.md
@@ -17,3 +17,5 @@ Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a pa
 #### Github
 - https://github.com/ilqarli27/CVE-2023-37474
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37474.yaml
diff --git a/2023/CVE-2023-37580.md b/2023/CVE-2023-37580.md
index 9fcb98e38ed..df401ccb120 100644
--- a/2023/CVE-2023-37580.md
+++ b/2023/CVE-2023-37580.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37580.yaml
diff --git a/2023/CVE-2023-37582.md b/2023/CVE-2023-37582.md
index aac577e9e0e..226246497c7 100644
--- a/2023/CVE-2023-37582.md
+++ b/2023/CVE-2023-37582.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/laishouchao/Apache-RocketMQ-RCE-CVE-2023-37582-poc
 - https://github.com/shoucheng3/apache__rocketmq_CVE-2023-37582_4-9-6
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-37582.yaml
diff --git a/2023/CVE-2023-37599.md b/2023/CVE-2023-37599.md
index 407db93499c..eb1ac1f9ef2 100644
--- a/2023/CVE-2023-37599.md
+++ b/2023/CVE-2023-37599.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/sahiloj/CVE-2023-37599
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37599.yaml
diff --git a/2023/CVE-2023-37629.md b/2023/CVE-2023-37629.md
index e8fb83e479d..e73dc7cb7dc 100644
--- a/2023/CVE-2023-37629.md
+++ b/2023/CVE-2023-37629.md
@@ -16,3 +16,5 @@ Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenti
 #### Github
 - https://github.com/1337kid/Piggery_CMS_multiple_vulns_PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37629.yaml
diff --git a/2023/CVE-2023-37645.md b/2023/CVE-2023-37645.md
index e916f73f0a0..ec353ff08e3 100644
--- a/2023/CVE-2023-37645.md
+++ b/2023/CVE-2023-37645.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37645.yaml
diff --git a/2023/CVE-2023-3765.md b/2023/CVE-2023-3765.md
index 5cfa996d028..b36fecdca02 100644
--- a/2023/CVE-2023-3765.md
+++ b/2023/CVE-2023-3765.md
@@ -16,3 +16,5 @@ Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3765.yaml
diff --git a/2023/CVE-2023-37679.md b/2023/CVE-2023-37679.md
index eb06ddbc32c..eca52fe2d9d 100644
--- a/2023/CVE-2023-37679.md
+++ b/2023/CVE-2023-37679.md
@@ -17,3 +17,5 @@ A remote command execution (RCE) vulnerability in NextGen Mirth Connect v4.3.0 a
 - https://github.com/K3ysTr0K3R/CVE-2023-43208-EXPLOIT
 - https://github.com/jakabakos/CVE-2023-43208-mirth-connect-rce-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37679.yaml
diff --git a/2023/CVE-2023-37728.md b/2023/CVE-2023-37728.md
index 9be59cdd2ca..6c61f1c6cf7 100644
--- a/2023/CVE-2023-37728.md
+++ b/2023/CVE-2023-37728.md
@@ -16,3 +16,5 @@ IceWarp v10.2.1 was discovered to contain cross-site scripting (XSS) vulnerabili
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37728.yaml
diff --git a/2023/CVE-2023-37979.md b/2023/CVE-2023-37979.md
index 865a3be3c5d..456e7aa51bc 100644
--- a/2023/CVE-2023-37979.md
+++ b/2023/CVE-2023-37979.md
@@ -16,3 +16,5 @@ Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Saturday Drive Nin
 - https://github.com/Mehran-Seifalinia/CVE-2023-37979
 - https://github.com/d0rb/CVE-2023-37979
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37979.yaml
diff --git a/2023/CVE-2023-37988.md b/2023/CVE-2023-37988.md
index ecd35886eed..f6767ae545e 100644
--- a/2023/CVE-2023-37988.md
+++ b/2023/CVE-2023-37988.md
@@ -15,3 +15,5 @@ Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Creative Solutions
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37988.yaml
diff --git a/2023/CVE-2023-37999.md b/2023/CVE-2023-37999.md
index 1dbd7845ab3..6dbf16e38ae 100644
--- a/2023/CVE-2023-37999.md
+++ b/2023/CVE-2023-37999.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37999.yaml
diff --git a/2023/CVE-2023-38035.md b/2023/CVE-2023-38035.md
index 6607bd15600..cae0e88b9ca 100644
--- a/2023/CVE-2023-38035.md
+++ b/2023/CVE-2023-38035.md
@@ -21,3 +21,5 @@ A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versio
 - https://github.com/mind2hex/CVE-2023-38035-MobileIron-RCE
 - https://github.com/mind2hex/MICS_Hunter
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38035.yaml
diff --git a/2023/CVE-2023-38040.md b/2023/CVE-2023-38040.md
index 319ef270a5d..61b887abeee 100644
--- a/2023/CVE-2023-38040.md
+++ b/2023/CVE-2023-38040.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38040.yaml
diff --git a/2023/CVE-2023-38192.md b/2023/CVE-2023-38192.md
index ff8198c9d9e..977bd354bdb 100644
--- a/2023/CVE-2023-38192.md
+++ b/2023/CVE-2023-38192.md
@@ -15,3 +15,5 @@ An issue was discovered in SuperWebMailer 9.00.0.01710. It allows superadmincrea
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38192.yaml
diff --git a/2023/CVE-2023-38194.md b/2023/CVE-2023-38194.md
index 6e026a13102..15627a2390f 100644
--- a/2023/CVE-2023-38194.md
+++ b/2023/CVE-2023-38194.md
@@ -15,3 +15,5 @@ An issue was discovered in SuperWebMailer 9.00.0.01710. It allows keepalive.php
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38194.yaml
diff --git a/2023/CVE-2023-38203.md b/2023/CVE-2023-38203.md
index f25df055148..e1630e623d4 100644
--- a/2023/CVE-2023-38203.md
+++ b/2023/CVE-2023-38203.md
@@ -16,3 +16,5 @@ Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38203.yaml
diff --git a/2023/CVE-2023-38205.md b/2023/CVE-2023-38205.md
index 5f7e655fcb3..4e68a075542 100644
--- a/2023/CVE-2023-38205.md
+++ b/2023/CVE-2023-38205.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38205.yaml
diff --git a/2023/CVE-2023-3836.md b/2023/CVE-2023-3836.md
index b4303ec3742..18d127cd2f2 100644
--- a/2023/CVE-2023-3836.md
+++ b/2023/CVE-2023-3836.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/zh-byte/CVE-2023-3836
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3836.yaml
diff --git a/2023/CVE-2023-3843.md b/2023/CVE-2023-3843.md
index 1bc4e5d688c..8349c3a0d77 100644
--- a/2023/CVE-2023-3843.md
+++ b/2023/CVE-2023-3843.md
@@ -17,3 +17,5 @@ Es wurde eine problematische Schwachstelle in mooSocial mooDating 1.2 ausgemacht
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3843.yaml
diff --git a/2023/CVE-2023-38433.md b/2023/CVE-2023-38433.md
index c0468d111a4..0cdbf6b156f 100644
--- a/2023/CVE-2023-38433.md
+++ b/2023/CVE-2023-38433.md
@@ -29,3 +29,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38433.yaml
diff --git a/2023/CVE-2023-3844.md b/2023/CVE-2023-3844.md
index e88d590d3c7..346272dd34c 100644
--- a/2023/CVE-2023-3844.md
+++ b/2023/CVE-2023-3844.md
@@ -17,3 +17,5 @@ In mooSocial mooDating 1.2 wurde eine problematische Schwachstelle ausgemacht. E
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3844.yaml
diff --git a/2023/CVE-2023-3845.md b/2023/CVE-2023-3845.md
index 8f8a6ea429e..3524e270bf6 100644
--- a/2023/CVE-2023-3845.md
+++ b/2023/CVE-2023-3845.md
@@ -16,3 +16,5 @@ Eine problematische Schwachstelle wurde in mooSocial mooDating 1.2 ausgemacht. E
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3845.yaml
diff --git a/2023/CVE-2023-3846.md b/2023/CVE-2023-3846.md
index 987d96a4d1b..60ed843b938 100644
--- a/2023/CVE-2023-3846.md
+++ b/2023/CVE-2023-3846.md
@@ -16,3 +16,5 @@ Es wurde eine Schwachstelle in mooSocial mooDating 1.2 entdeckt. Sie wurde als p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3846.yaml
diff --git a/2023/CVE-2023-3847.md b/2023/CVE-2023-3847.md
index 60bebf98b07..137a9695030 100644
--- a/2023/CVE-2023-3847.md
+++ b/2023/CVE-2023-3847.md
@@ -16,3 +16,5 @@ In mooSocial mooDating 1.2 wurde eine Schwachstelle entdeckt. Sie wurde als prob
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3847.yaml
diff --git a/2023/CVE-2023-3848.md b/2023/CVE-2023-3848.md
index 7dcd71ad5de..70119b3363e 100644
--- a/2023/CVE-2023-3848.md
+++ b/2023/CVE-2023-3848.md
@@ -17,3 +17,5 @@ Eine Schwachstelle wurde in mooSocial mooDating 1.2 entdeckt. Sie wurde als prob
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3848.yaml
diff --git a/2023/CVE-2023-3849.md b/2023/CVE-2023-3849.md
index 69b18fad316..f4fe7fecfd5 100644
--- a/2023/CVE-2023-3849.md
+++ b/2023/CVE-2023-3849.md
@@ -16,3 +16,5 @@ Es wurde eine Schwachstelle in mooSocial mooDating 1.2 gefunden. Sie wurde als p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3849.yaml
diff --git a/2023/CVE-2023-38501.md b/2023/CVE-2023-38501.md
index ee13a1df229..af39e9043dc 100644
--- a/2023/CVE-2023-38501.md
+++ b/2023/CVE-2023-38501.md
@@ -17,3 +17,5 @@ copyparty is file server software. Prior to version 1.8.7, the application conta
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38501.yaml
diff --git a/2023/CVE-2023-38646.md b/2023/CVE-2023-38646.md
index ccc12b82f54..e293fa7e0ce 100644
--- a/2023/CVE-2023-38646.md
+++ b/2023/CVE-2023-38646.md
@@ -57,3 +57,5 @@ Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 all
 - https://github.com/threatHNTR/CVE-2023-38646
 - https://github.com/yxl2001/CVE-2023-38646
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38646.yaml
diff --git a/2023/CVE-2023-38875.md b/2023/CVE-2023-38875.md
index 33a00ab93f8..a62ce0f3b14 100644
--- a/2023/CVE-2023-38875.md
+++ b/2023/CVE-2023-38875.md
@@ -15,3 +15,5 @@ A reflected cross-site scripting (XSS) vulnerability in msaad1999's PHP-Login-Sy
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38875.yaml
diff --git a/2023/CVE-2023-38879.md b/2023/CVE-2023-38879.md
index f939ef83495..9ebe327e0d6 100644
--- a/2023/CVE-2023-38879.md
+++ b/2023/CVE-2023-38879.md
@@ -15,3 +15,5 @@ The Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attac
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38879.yaml
diff --git a/2023/CVE-2023-38950.md b/2023/CVE-2023-38950.md
index 65ee02606f0..b739044444a 100644
--- a/2023/CVE-2023-38950.md
+++ b/2023/CVE-2023-38950.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38950.yaml
diff --git a/2023/CVE-2023-38952.md b/2023/CVE-2023-38952.md
index ef055a82e05..03341d2a730 100644
--- a/2023/CVE-2023-38952.md
+++ b/2023/CVE-2023-38952.md
@@ -15,3 +15,5 @@ Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated att
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38952.yaml
diff --git a/2023/CVE-2023-38992.md b/2023/CVE-2023-38992.md
index 308f255090e..0a556e194c9 100644
--- a/2023/CVE-2023-38992.md
+++ b/2023/CVE-2023-38992.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38992.yaml
diff --git a/2023/CVE-2023-39002.md b/2023/CVE-2023-39002.md
index 584cd188d40..0bfb46833a8 100644
--- a/2023/CVE-2023-39002.md
+++ b/2023/CVE-2023-39002.md
@@ -15,3 +15,5 @@ A cross-site scripting (XSS) vulnerability in the act parameter of system_certma
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39002.yaml
diff --git a/2023/CVE-2023-39007.md b/2023/CVE-2023-39007.md
index efa47eebd9a..8ba51c9101f 100644
--- a/2023/CVE-2023-39007.md
+++ b/2023/CVE-2023-39007.md
@@ -15,3 +15,5 @@
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39007.yaml
diff --git a/2023/CVE-2023-39026.md b/2023/CVE-2023-39026.md
index 1b520d456a1..5d25b8e1166 100644
--- a/2023/CVE-2023-39026.md
+++ b/2023/CVE-2023-39026.md
@@ -17,3 +17,5 @@ Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39026.yaml
diff --git a/2023/CVE-2023-39108.md b/2023/CVE-2023-39108.md
index 055baf01159..922a85af0e5 100644
--- a/2023/CVE-2023-39108.md
+++ b/2023/CVE-2023-39108.md
@@ -15,3 +15,5 @@ rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) vi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39108.yaml
diff --git a/2023/CVE-2023-39109.md b/2023/CVE-2023-39109.md
index 170323ac497..846c1a6e9fb 100644
--- a/2023/CVE-2023-39109.md
+++ b/2023/CVE-2023-39109.md
@@ -15,3 +15,5 @@ rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) vi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39109.yaml
diff --git a/2023/CVE-2023-39110.md b/2023/CVE-2023-39110.md
index 168fe2a056a..fd8cec74aa8 100644
--- a/2023/CVE-2023-39110.md
+++ b/2023/CVE-2023-39110.md
@@ -15,3 +15,5 @@ rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery (SSRF) vi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39110.yaml
diff --git a/2023/CVE-2023-39121.md b/2023/CVE-2023-39121.md
index 61c503c3139..2cd55a6275e 100644
--- a/2023/CVE-2023-39121.md
+++ b/2023/CVE-2023-39121.md
@@ -16,3 +16,5 @@ emlog v2.1.9 was discovered to contain a SQL injection vulnerability via the com
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39121.yaml
diff --git a/2023/CVE-2023-39141.md b/2023/CVE-2023-39141.md
index ecd00ae8766..3b36b6be048 100644
--- a/2023/CVE-2023-39141.md
+++ b/2023/CVE-2023-39141.md
@@ -15,3 +15,5 @@ webui-aria2 commit 4fe2e was discovered to contain a path traversal vulnerabilit
 #### Github
 - https://github.com/MartiSabate/CVE-2023-39141-LFI-enumerator
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39141.yaml
diff --git a/2023/CVE-2023-39143.md b/2023/CVE-2023-39143.md
index 9edaead8ae7..c62f627f6ee 100644
--- a/2023/CVE-2023-39143.md
+++ b/2023/CVE-2023-39143.md
@@ -15,3 +15,5 @@ PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabl
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39143.yaml
diff --git a/2023/CVE-2023-3936.md b/2023/CVE-2023-3936.md
index aa5680236ac..b9b13419a0f 100644
--- a/2023/CVE-2023-3936.md
+++ b/2023/CVE-2023-3936.md
@@ -15,3 +15,5 @@ The Blog2Social WordPress plugin before 7.2.1 does not sanitise and escape a par
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3936.yaml
diff --git a/2023/CVE-2023-39361.md b/2023/CVE-2023-39361.md
index 81fae964ee3..8b349e3cf04 100644
--- a/2023/CVE-2023-39361.md
+++ b/2023/CVE-2023-39361.md
@@ -16,3 +16,5 @@ Cacti is an open source operational monitoring and fault management framework. A
 - https://github.com/ChoDeokCheol/CVE-2023-39361
 - https://github.com/HPT-Intern-Task-Submission/CVE-2023-39361
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39361.yaml
diff --git a/2023/CVE-2023-39560.md b/2023/CVE-2023-39560.md
index f7811ab8876..3038305ec58 100644
--- a/2023/CVE-2023-39560.md
+++ b/2023/CVE-2023-39560.md
@@ -15,3 +15,5 @@ ECTouch v2 was discovered to contain a SQL injection vulnerability via the $arr[
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39560.yaml
diff --git a/2023/CVE-2023-39598.md b/2023/CVE-2023-39598.md
index 1155b5aab3d..a4a257c6431 100644
--- a/2023/CVE-2023-39598.md
+++ b/2023/CVE-2023-39598.md
@@ -16,3 +16,5 @@ Cross Site Scripting vulnerability in IceWarp Corporation WebClient v.10.2.1 all
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39598.yaml
diff --git a/2023/CVE-2023-39600.md b/2023/CVE-2023-39600.md
index d033a895756..af87cd50749 100644
--- a/2023/CVE-2023-39600.md
+++ b/2023/CVE-2023-39600.md
@@ -16,3 +16,5 @@ IceWarp 11.4.6.0 was discovered to contain a cross-site scripting (XSS) vulnerab
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39600.yaml
diff --git a/2023/CVE-2023-39650.md b/2023/CVE-2023-39650.md
index d1aa9ea992c..ccbc527a368 100644
--- a/2023/CVE-2023-39650.md
+++ b/2023/CVE-2023-39650.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39650.yaml
diff --git a/2023/CVE-2023-39676.md b/2023/CVE-2023-39676.md
index 8e7fa128bc9..37f8c9c46ce 100644
--- a/2023/CVE-2023-39676.md
+++ b/2023/CVE-2023-39676.md
@@ -15,3 +15,5 @@ FieldPopupNewsletter Prestashop Module v1.0.0 was discovered to contain a reflec
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39676.yaml
diff --git a/2023/CVE-2023-39677.md b/2023/CVE-2023-39677.md
index f2287e528ad..4f06f53925f 100644
--- a/2023/CVE-2023-39677.md
+++ b/2023/CVE-2023-39677.md
@@ -15,3 +15,5 @@ MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39677.yaml
diff --git a/2023/CVE-2023-40000.md b/2023/CVE-2023-40000.md
index bd1d33ef6dc..91f644ec9d7 100644
--- a/2023/CVE-2023-40000.md
+++ b/2023/CVE-2023-40000.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/quantiom/litespeed-cache-xss-poc
 - https://github.com/rxerium/CVE-2023-40000
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40000.yaml
diff --git a/2023/CVE-2023-40044.md b/2023/CVE-2023-40044.md
index bab00ea168a..e6d0b0ab468 100644
--- a/2023/CVE-2023-40044.md
+++ b/2023/CVE-2023-40044.md
@@ -20,3 +20,5 @@ In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker
 #### Github
 - https://github.com/kenbuckler/WS_FTP-CVE-2023-40044
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40044.yaml
diff --git a/2023/CVE-2023-40208.md b/2023/CVE-2023-40208.md
index 5c14403b874..3e1e99a164b 100644
--- a/2023/CVE-2023-40208.md
+++ b/2023/CVE-2023-40208.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40208.yaml
diff --git a/2023/CVE-2023-40211.md b/2023/CVE-2023-40211.md
index d649ce229b5..49a66be9471 100644
--- a/2023/CVE-2023-40211.md
+++ b/2023/CVE-2023-40211.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40211.yaml
diff --git a/2023/CVE-2023-40355.md b/2023/CVE-2023-40355.md
index 8f99371b507..20ed371d777 100644
--- a/2023/CVE-2023-40355.md
+++ b/2023/CVE-2023-40355.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/ace-83/CVE-2023-40355
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40355.yaml
diff --git a/2023/CVE-2023-40504.md b/2023/CVE-2023-40504.md
index 3250f2f490d..0ea6f83fd35 100644
--- a/2023/CVE-2023-40504.md
+++ b/2023/CVE-2023-40504.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40504.yaml
diff --git a/2023/CVE-2023-40600.md b/2023/CVE-2023-40600.md
index 4a473ff653a..a1f42dc8ff9 100644
--- a/2023/CVE-2023-40600.md
+++ b/2023/CVE-2023-40600.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2023-40600
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40600.yaml
diff --git a/2023/CVE-2023-40748.md b/2023/CVE-2023-40748.md
index 605017feb42..58633d38e16 100644
--- a/2023/CVE-2023-40748.md
+++ b/2023/CVE-2023-40748.md
@@ -16,3 +16,5 @@ PHPJabbers Food Delivery Script 3.0 has a SQL injection (SQLi) vulnerability in
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40748.yaml
diff --git a/2023/CVE-2023-40749.md b/2023/CVE-2023-40749.md
index 42af37ca016..dcaee0aa850 100644
--- a/2023/CVE-2023-40749.md
+++ b/2023/CVE-2023-40749.md
@@ -16,3 +16,5 @@ PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "colu
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40749.yaml
diff --git a/2023/CVE-2023-40750.md b/2023/CVE-2023-40750.md
index 968983c7ae3..bc5b68228db 100644
--- a/2023/CVE-2023-40750.md
+++ b/2023/CVE-2023-40750.md
@@ -16,3 +16,5 @@ There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40750.yaml
diff --git a/2023/CVE-2023-40751.md b/2023/CVE-2023-40751.md
index 2445e981274..ef906e0dad4 100644
--- a/2023/CVE-2023-40751.md
+++ b/2023/CVE-2023-40751.md
@@ -16,3 +16,5 @@ PHPJabbers Fundraising Script v1.0 is vulnerable to Cross Site Scripting (XSS) v
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40751.yaml
diff --git a/2023/CVE-2023-40752.md b/2023/CVE-2023-40752.md
index 3aa4f502126..eb6c2aefc94 100644
--- a/2023/CVE-2023-40752.md
+++ b/2023/CVE-2023-40752.md
@@ -16,3 +16,5 @@ There is a Cross Site Scripting (XSS) vulnerability in the "action" parameter of
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40752.yaml
diff --git a/2023/CVE-2023-40753.md b/2023/CVE-2023-40753.md
index fd0363c112c..b4481f9d8c5 100644
--- a/2023/CVE-2023-40753.md
+++ b/2023/CVE-2023-40753.md
@@ -16,3 +16,5 @@ There is a Cross Site Scripting (XSS) vulnerability in the message parameter of
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40753.yaml
diff --git a/2023/CVE-2023-40755.md b/2023/CVE-2023-40755.md
index 19e0ffa8ee2..45ff87515bf 100644
--- a/2023/CVE-2023-40755.md
+++ b/2023/CVE-2023-40755.md
@@ -16,3 +16,5 @@ There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40755.yaml
diff --git a/2023/CVE-2023-40779.md b/2023/CVE-2023-40779.md
index 53d1d541b47..568788eff81 100644
--- a/2023/CVE-2023-40779.md
+++ b/2023/CVE-2023-40779.md
@@ -16,3 +16,5 @@ An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacke
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40779.yaml
diff --git a/2023/CVE-2023-40924.md b/2023/CVE-2023-40924.md
index 6920f331732..69856ce3b75 100644
--- a/2023/CVE-2023-40924.md
+++ b/2023/CVE-2023-40924.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Yobing1/CVE-2023-40924
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40924.yaml
diff --git a/2023/CVE-2023-40931.md b/2023/CVE-2023-40931.md
index 75d7841a29c..a21766a12e2 100644
--- a/2023/CVE-2023-40931.md
+++ b/2023/CVE-2023-40931.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/datboi6942/Nagios-XI-s-CVE-2023-40931-Exploit
 - https://github.com/sealldeveloper/CVE-2023-40931-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40931.yaml
diff --git a/2023/CVE-2023-4110.md b/2023/CVE-2023-4110.md
index 798ea395c4d..88be4044e57 100644
--- a/2023/CVE-2023-4110.md
+++ b/2023/CVE-2023-4110.md
@@ -17,3 +17,5 @@ In PHP Jabbers Availability Booking Calendar 5.0 wurde eine Schwachstelle gefund
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4110.yaml
diff --git a/2023/CVE-2023-41109.md b/2023/CVE-2023-41109.md
index fbdd169de9a..e4d75ba8e09 100644
--- a/2023/CVE-2023-41109.md
+++ b/2023/CVE-2023-41109.md
@@ -18,3 +18,5 @@ SmartNode SN200 (aka SN200) 3.21.2-23021 allows unauthenticated OS Command Injec
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41109.yaml
diff --git a/2023/CVE-2023-4111.md b/2023/CVE-2023-4111.md
index f4fe4f4316d..5b529a5e1b1 100644
--- a/2023/CVE-2023-4111.md
+++ b/2023/CVE-2023-4111.md
@@ -17,3 +17,5 @@ Eine Schwachstelle wurde in PHP Jabbers Bus Reservation System 1.1 gefunden. Sie
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4111.yaml
diff --git a/2023/CVE-2023-4112.md b/2023/CVE-2023-4112.md
index b77b02eeb11..3521c63b09c 100644
--- a/2023/CVE-2023-4112.md
+++ b/2023/CVE-2023-4112.md
@@ -16,3 +16,5 @@ Es wurde eine Schwachstelle in PHP Jabbers Shuttle Booking Software 1.0 ausgemac
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4112.yaml
diff --git a/2023/CVE-2023-4113.md b/2023/CVE-2023-4113.md
index 62baea1f39d..43efe9481ad 100644
--- a/2023/CVE-2023-4113.md
+++ b/2023/CVE-2023-4113.md
@@ -16,3 +16,5 @@ In PHP Jabbers Service Booking Script 1.0 wurde eine Schwachstelle ausgemacht. S
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4113.yaml
diff --git a/2023/CVE-2023-4114.md b/2023/CVE-2023-4114.md
index eba4645214e..a7f49a5f95e 100644
--- a/2023/CVE-2023-4114.md
+++ b/2023/CVE-2023-4114.md
@@ -17,3 +17,5 @@ Eine Schwachstelle wurde in PHP Jabbers Night Club Booking Software 1.0 ausgemac
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4114.yaml
diff --git a/2023/CVE-2023-4115.md b/2023/CVE-2023-4115.md
index 25a57cdfc6d..4c1ee2d2772 100644
--- a/2023/CVE-2023-4115.md
+++ b/2023/CVE-2023-4115.md
@@ -16,3 +16,5 @@ Es wurde eine problematische Schwachstelle in PHP Jabbers Cleaning Business 1.0
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4115.yaml
diff --git a/2023/CVE-2023-4116.md b/2023/CVE-2023-4116.md
index 454d23bfc4a..fefc2acb133 100644
--- a/2023/CVE-2023-4116.md
+++ b/2023/CVE-2023-4116.md
@@ -16,3 +16,5 @@ In PHP Jabbers Taxi Booking 2.0 wurde eine problematische Schwachstelle entdeckt
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4116.yaml
diff --git a/2023/CVE-2023-41265.md b/2023/CVE-2023-41265.md
index c431bfe7b39..8e1aa276f0f 100644
--- a/2023/CVE-2023-41265.md
+++ b/2023/CVE-2023-41265.md
@@ -17,3 +17,5 @@ An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41265.yaml
diff --git a/2023/CVE-2023-41266.md b/2023/CVE-2023-41266.md
index 420fc625e27..bd42ba6d9c0 100644
--- a/2023/CVE-2023-41266.md
+++ b/2023/CVE-2023-41266.md
@@ -17,3 +17,5 @@ A path traversal vulnerability found in Qlik Sense Enterprise for Windows for ve
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41266.yaml
diff --git a/2023/CVE-2023-4136.md b/2023/CVE-2023-4136.md
index 10fedab2854..d7bde3bf77d 100644
--- a/2023/CVE-2023-4136.md
+++ b/2023/CVE-2023-4136.md
@@ -16,3 +16,5 @@ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4136.yaml
diff --git a/2023/CVE-2023-4148.md b/2023/CVE-2023-4148.md
index 67fa8355e6a..e740bc03204 100644
--- a/2023/CVE-2023-4148.md
+++ b/2023/CVE-2023-4148.md
@@ -15,3 +15,5 @@ The Ditty WordPress plugin before 3.1.25 does not sanitise and escape some param
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4148.yaml
diff --git a/2023/CVE-2023-4151.md b/2023/CVE-2023-4151.md
index 3de96e90193..c6921baafc8 100644
--- a/2023/CVE-2023-4151.md
+++ b/2023/CVE-2023-4151.md
@@ -15,3 +15,5 @@ The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4151.yaml
diff --git a/2023/CVE-2023-41538.md b/2023/CVE-2023-41538.md
index 3b6e598c63f..772b28db81e 100644
--- a/2023/CVE-2023-41538.md
+++ b/2023/CVE-2023-41538.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41538.yaml
diff --git a/2023/CVE-2023-41597.md b/2023/CVE-2023-41597.md
index 0aef52b4d61..2069ea0741c 100644
--- a/2023/CVE-2023-41597.md
+++ b/2023/CVE-2023-41597.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41597.yaml
diff --git a/2023/CVE-2023-41599.md b/2023/CVE-2023-41599.md
index 2d73e48cc30..17b9be1180d 100644
--- a/2023/CVE-2023-41599.md
+++ b/2023/CVE-2023-41599.md
@@ -15,3 +15,5 @@ An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41599.yaml
diff --git a/2023/CVE-2023-41621.md b/2023/CVE-2023-41621.md
index 9f20f0d7cb5..cebf133dfec 100644
--- a/2023/CVE-2023-41621.md
+++ b/2023/CVE-2023-41621.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41621.yaml
diff --git a/2023/CVE-2023-41642.md b/2023/CVE-2023-41642.md
index 652dceed108..9f2c2b33bb3 100644
--- a/2023/CVE-2023-41642.md
+++ b/2023/CVE-2023-41642.md
@@ -16,3 +16,5 @@ Multiple reflected cross-site scripting (XSS) vulnerabilities in the ErroreNonGe
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41642.yaml
diff --git a/2023/CVE-2023-4168.md b/2023/CVE-2023-4168.md
index f8556ce131b..443c0bcec90 100644
--- a/2023/CVE-2023-4168.md
+++ b/2023/CVE-2023-4168.md
@@ -17,3 +17,5 @@ Es wurde eine problematische Schwachstelle in Templatecookie Adlisting 2.14.0 au
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4168.yaml
diff --git a/2023/CVE-2023-4169.md b/2023/CVE-2023-4169.md
index 55e26c41cb9..d8c55fd77bc 100644
--- a/2023/CVE-2023-4169.md
+++ b/2023/CVE-2023-4169.md
@@ -16,3 +16,5 @@ In Ruijie RG-EW1200G 1.0(1)B1P5 wurde eine kritische Schwachstelle ausgemacht. E
 #### Github
 - https://github.com/thedarknessdied/CVE-2023-4169_CVE-2023-3306_CVE-2023-4415
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4169.yaml
diff --git a/2023/CVE-2023-4173.md b/2023/CVE-2023-4173.md
index b498e944bcd..9ca8ca82eb5 100644
--- a/2023/CVE-2023-4173.md
+++ b/2023/CVE-2023-4173.md
@@ -16,3 +16,5 @@ Es wurde eine Schwachstelle in mooSocial mooStore 3.1.6 gefunden. Sie wurde als
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4173.yaml
diff --git a/2023/CVE-2023-4174.md b/2023/CVE-2023-4174.md
index 69745e68c21..85f2eadf815 100644
--- a/2023/CVE-2023-4174.md
+++ b/2023/CVE-2023-4174.md
@@ -16,3 +16,5 @@ In mooSocial mooStore 3.1.6 wurde eine Schwachstelle gefunden. Sie wurde als pro
 #### Github
 - https://github.com/d0rb/CVE-2023-4174
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4174.yaml
diff --git a/2023/CVE-2023-41763.md b/2023/CVE-2023-41763.md
index 24547d74e21..8042711aa2e 100644
--- a/2023/CVE-2023-41763.md
+++ b/2023/CVE-2023-41763.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41763.yaml
diff --git a/2023/CVE-2023-41892.md b/2023/CVE-2023-41892.md
index 459f739a7cd..9e77c4a347e 100644
--- a/2023/CVE-2023-41892.md
+++ b/2023/CVE-2023-41892.md
@@ -21,3 +21,5 @@ Craft CMS is a platform for creating digital experiences. This is a high-impact,
 - https://github.com/user01-1/CVE-2023-41892_poc
 - https://github.com/zaenhaxor/CVE-2023-41892
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41892.yaml
diff --git a/2023/CVE-2023-41954.md b/2023/CVE-2023-41954.md
index 4e7e904dda4..d38d1e3c406 100644
--- a/2023/CVE-2023-41954.md
+++ b/2023/CVE-2023-41954.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41954.yaml
diff --git a/2023/CVE-2023-4220.md b/2023/CVE-2023-4220.md
index 93fd07d7e57..6831323d452 100644
--- a/2023/CVE-2023-4220.md
+++ b/2023/CVE-2023-4220.md
@@ -40,3 +40,5 @@ Unrestricted file upload in big file upload functionality in `/main/inc/lib/java
 - https://github.com/thefizzyfish/CVE-2023-4220_Chamilo_RCE
 - https://github.com/zora-beep/CVE-2023-4220
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4220.yaml
diff --git a/2023/CVE-2023-42442.md b/2023/CVE-2023-42442.md
index dc9e1c2f506..6d5354c5b30 100644
--- a/2023/CVE-2023-42442.md
+++ b/2023/CVE-2023-42442.md
@@ -19,3 +19,5 @@ No PoCs from references.
 - https://github.com/tarihub/blackjump
 - https://github.com/tarimoe/blackjump
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-42442.yaml
diff --git a/2023/CVE-2023-42793.md b/2023/CVE-2023-42793.md
index e6d97312aa6..ee9d81dbe3a 100644
--- a/2023/CVE-2023-42793.md
+++ b/2023/CVE-2023-42793.md
@@ -33,3 +33,5 @@ In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on T
 - https://github.com/junnythemarksman/CVE-2023-42793
 - https://github.com/whoamins/CVE-2023-42793
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-42793.yaml
diff --git a/2023/CVE-2023-4284.md b/2023/CVE-2023-4284.md
index a9a5dd9843d..614682d3ffd 100644
--- a/2023/CVE-2023-4284.md
+++ b/2023/CVE-2023-4284.md
@@ -15,3 +15,5 @@ The Post Timeline WordPress plugin before 2.2.6 does not sanitise and escape an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4284.yaml
diff --git a/2023/CVE-2023-43177.md b/2023/CVE-2023-43177.md
index bc821d93668..785a96c7bbd 100644
--- a/2023/CVE-2023-43177.md
+++ b/2023/CVE-2023-43177.md
@@ -17,3 +17,5 @@ CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of
 - https://github.com/entroychang/CVE-2024-4040
 - https://github.com/the-emmons/CVE-2023-43177
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43177.yaml
diff --git a/2023/CVE-2023-43187.md b/2023/CVE-2023-43187.md
index 0b8ca4bb1c0..9cfdb61d637 100644
--- a/2023/CVE-2023-43187.md
+++ b/2023/CVE-2023-43187.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43187.yaml
diff --git a/2023/CVE-2023-43208.md b/2023/CVE-2023-43208.md
index 77e0c752009..2fbedd79ef7 100644
--- a/2023/CVE-2023-43208.md
+++ b/2023/CVE-2023-43208.md
@@ -21,3 +21,5 @@ NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthent
 - https://github.com/gotr00t0day/NextGen-Mirth-Connect-Exploit
 - https://github.com/jakabakos/CVE-2023-43208-mirth-connect-rce-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43208.yaml
diff --git a/2023/CVE-2023-43261.md b/2023/CVE-2023-43261.md
index 045f3dc892a..6d55deca2a4 100644
--- a/2023/CVE-2023-43261.md
+++ b/2023/CVE-2023-43261.md
@@ -17,3 +17,5 @@ An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43261.yaml
diff --git a/2023/CVE-2023-43323.md b/2023/CVE-2023-43323.md
index 7ffbfb23ef1..fc936c89c82 100644
--- a/2023/CVE-2023-43323.md
+++ b/2023/CVE-2023-43323.md
@@ -15,3 +15,5 @@ mooSocial 3.1.8 is vulnerable to external service interaction on post function.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43323.yaml
diff --git a/2023/CVE-2023-43325.md b/2023/CVE-2023-43325.md
index 83f056ed0a0..f2fbc431be8 100644
--- a/2023/CVE-2023-43325.md
+++ b/2023/CVE-2023-43325.md
@@ -15,3 +15,5 @@ A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43325.yaml
diff --git a/2023/CVE-2023-43326.md b/2023/CVE-2023-43326.md
index 7683a4a0dbc..a1133442115 100644
--- a/2023/CVE-2023-43326.md
+++ b/2023/CVE-2023-43326.md
@@ -15,3 +15,5 @@ A reflected cross-site scripting (XSS) vulnerability exisits in multiple url of
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43326.yaml
diff --git a/2023/CVE-2023-43373.md b/2023/CVE-2023-43373.md
index 292b84f5fa1..b6d8deb40f0 100644
--- a/2023/CVE-2023-43373.md
+++ b/2023/CVE-2023-43373.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43373.yaml
diff --git a/2023/CVE-2023-43654.md b/2023/CVE-2023-43654.md
index 379e3ddc6f1..fb3ce0ad383 100644
--- a/2023/CVE-2023-43654.md
+++ b/2023/CVE-2023-43654.md
@@ -16,3 +16,5 @@ TorchServe is a tool for serving and scaling PyTorch models in production. Torch
 #### Github
 - https://github.com/OligoCyberSecurity/CVE-2023-43654
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43654.yaml
diff --git a/2023/CVE-2023-43662.md b/2023/CVE-2023-43662.md
index d392f19bd53..eb347bbf7ca 100644
--- a/2023/CVE-2023-43662.md
+++ b/2023/CVE-2023-43662.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43662.yaml
diff --git a/2023/CVE-2023-43795.md b/2023/CVE-2023-43795.md
index e66ad08062a..82f2a97db6a 100644
--- a/2023/CVE-2023-43795.md
+++ b/2023/CVE-2023-43795.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43795.yaml
diff --git a/2023/CVE-2023-44012.md b/2023/CVE-2023-44012.md
index d324b26b422..1b2b28e86a6 100644
--- a/2023/CVE-2023-44012.md
+++ b/2023/CVE-2023-44012.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44012.yaml
diff --git a/2023/CVE-2023-4415.md b/2023/CVE-2023-4415.md
index 10a9373b7a3..689ce966e1f 100644
--- a/2023/CVE-2023-4415.md
+++ b/2023/CVE-2023-4415.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/thedarknessdied/CVE-2023-4169_CVE-2023-3306_CVE-2023-4415
 - https://github.com/thedarknessdied/Ruijie_RG-EW1200G_login_bypass-CVE-2023-4415
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4415.yaml
diff --git a/2023/CVE-2023-44353.md b/2023/CVE-2023-44353.md
index fb6e6930a15..4ba9b4ec4f3 100644
--- a/2023/CVE-2023-44353.md
+++ b/2023/CVE-2023-44353.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44353.yaml
diff --git a/2023/CVE-2023-44393.md b/2023/CVE-2023-44393.md
index 02e8db8fa74..8dbe5d6b1ab 100644
--- a/2023/CVE-2023-44393.md
+++ b/2023/CVE-2023-44393.md
@@ -17,3 +17,5 @@ Piwigo is an open source photo gallery application. Prior to version 14.0.0beta4
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44393.yaml
diff --git a/2023/CVE-2023-4450.md b/2023/CVE-2023-4450.md
index afb53a57d69..a236e34ddd8 100644
--- a/2023/CVE-2023-4450.md
+++ b/2023/CVE-2023-4450.md
@@ -22,3 +22,5 @@ No PoCs from references.
 #### Github
 - https://github.com/ilikeoyt/CVE-2023-4450-Attack
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4450.yaml
diff --git a/2023/CVE-2023-4451.md b/2023/CVE-2023-4451.md
index b8608aa552d..6fe8fc9e44b 100644
--- a/2023/CVE-2023-4451.md
+++ b/2023/CVE-2023-4451.md
@@ -16,3 +16,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4451.yaml
diff --git a/2023/CVE-2023-44812.md b/2023/CVE-2023-44812.md
index 7d90825e300..802ed89c824 100644
--- a/2023/CVE-2023-44812.md
+++ b/2023/CVE-2023-44812.md
@@ -15,3 +15,5 @@ Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote at
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44812.yaml
diff --git a/2023/CVE-2023-44813.md b/2023/CVE-2023-44813.md
index 8ac77e1dffb..8841e241a31 100644
--- a/2023/CVE-2023-44813.md
+++ b/2023/CVE-2023-44813.md
@@ -15,3 +15,5 @@ Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote at
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44813.yaml
diff --git a/2023/CVE-2023-4490.md b/2023/CVE-2023-4490.md
index 763a452e734..6ee536c91b1 100644
--- a/2023/CVE-2023-4490.md
+++ b/2023/CVE-2023-4490.md
@@ -15,3 +15,5 @@ The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape a p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4490.yaml
diff --git a/2023/CVE-2023-44982.md b/2023/CVE-2023-44982.md
index 24c5106ff6a..692c449c5d3 100644
--- a/2023/CVE-2023-44982.md
+++ b/2023/CVE-2023-44982.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44982.yaml
diff --git a/2023/CVE-2023-45038.md b/2023/CVE-2023-45038.md
index 59edb86b069..1fb287e3bc5 100644
--- a/2023/CVE-2023-45038.md
+++ b/2023/CVE-2023-45038.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45038.yaml
diff --git a/2023/CVE-2023-4521.md b/2023/CVE-2023-4521.md
index 94e0c33108b..b710edfd326 100644
--- a/2023/CVE-2023-4521.md
+++ b/2023/CVE-2023-4521.md
@@ -15,3 +15,5 @@ The Import XML and RSS Feeds WordPress plugin before 2.1.5 contains a web shell,
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4521.yaml
diff --git a/2023/CVE-2023-45249.md b/2023/CVE-2023-45249.md
index c6983845c02..bc2c91f7c05 100644
--- a/2023/CVE-2023-45249.md
+++ b/2023/CVE-2023-45249.md
@@ -21,3 +21,5 @@ Remote command execution due to use of default passwords. The following products
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2023/CVE-2023-45249.yaml
diff --git a/2023/CVE-2023-45375.md b/2023/CVE-2023-45375.md
index c3601c93a0c..34129e9715e 100644
--- a/2023/CVE-2023-45375.md
+++ b/2023/CVE-2023-45375.md
@@ -15,3 +15,5 @@ In the module "PireosPay" (pireospay) before version 1.7.10 from 01generator.com
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45375.yaml
diff --git a/2023/CVE-2023-4542.md b/2023/CVE-2023-4542.md
index 97b55d28c55..5cff4d718e6 100644
--- a/2023/CVE-2023-4542.md
+++ b/2023/CVE-2023-4542.md
@@ -18,3 +18,5 @@ Es wurde eine Schwachstelle in D-Link DAR-8000-10 bis 20230809 ausgemacht. Sie w
 #### Github
 - https://github.com/PumpkinBridge/CVE-2023-4542
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4542.yaml
diff --git a/2023/CVE-2023-4547.md b/2023/CVE-2023-4547.md
index a52f08ff36e..0530804bc75 100644
--- a/2023/CVE-2023-4547.md
+++ b/2023/CVE-2023-4547.md
@@ -16,3 +16,5 @@ Eine problematische Schwachstelle wurde in SPA-Cart eCommerce CMS 1.9.0.3 ausgem
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4547.yaml
diff --git a/2023/CVE-2023-45542.md b/2023/CVE-2023-45542.md
index 22197c02fe6..cd2d56647cc 100644
--- a/2023/CVE-2023-45542.md
+++ b/2023/CVE-2023-45542.md
@@ -15,3 +15,5 @@ Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45542.yaml
diff --git a/2023/CVE-2023-45648.md b/2023/CVE-2023-45648.md
index a283e91447d..ffe75b663a5 100644
--- a/2023/CVE-2023-45648.md
+++ b/2023/CVE-2023-45648.md
@@ -22,3 +22,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45648.yaml
diff --git a/2023/CVE-2023-45671.md b/2023/CVE-2023-45671.md
index 4b2841f29f5..16aca568e13 100644
--- a/2023/CVE-2023-45671.md
+++ b/2023/CVE-2023-45671.md
@@ -15,3 +15,5 @@ Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45671.yaml
diff --git a/2023/CVE-2023-4568.md b/2023/CVE-2023-4568.md
index 12c58cc4770..2fc3dbdf1cb 100644
--- a/2023/CVE-2023-4568.md
+++ b/2023/CVE-2023-4568.md
@@ -15,3 +15,5 @@ PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Ver
 #### Github
 - https://github.com/Cappricio-Securities/CVE-2023-4568
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4568.yaml
diff --git a/2023/CVE-2023-45826.md b/2023/CVE-2023-45826.md
index 50faeb061f0..7b4fe2752ba 100644
--- a/2023/CVE-2023-45826.md
+++ b/2023/CVE-2023-45826.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45826.yaml
diff --git a/2023/CVE-2023-45852.md b/2023/CVE-2023-45852.md
index e2bff1f3573..67d9b3e4e91 100644
--- a/2023/CVE-2023-45852.md
+++ b/2023/CVE-2023-45852.md
@@ -15,3 +15,5 @@ In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacke
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45852.yaml
diff --git a/2023/CVE-2023-45878.md b/2023/CVE-2023-45878.md
index f534e53b95a..450f2bea182 100644
--- a/2023/CVE-2023-45878.md
+++ b/2023/CVE-2023-45878.md
@@ -24,3 +24,5 @@ GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because r
 - https://github.com/nrazv/CVE-2023-45878
 - https://github.com/ulricvbs/gibbonlms-filewrite_rce
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45878.yaml
diff --git a/2023/CVE-2023-4596.md b/2023/CVE-2023-4596.md
index f24e8353b5b..a1768ceff02 100644
--- a/2023/CVE-2023-4596.md
+++ b/2023/CVE-2023-4596.md
@@ -16,3 +16,5 @@ The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due
 - https://github.com/E1A/CVE-2023-4596
 - https://github.com/X-Projetion/CVE-2023-4596-Vulnerable-Exploit-and-Checker-Version
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4596.yaml
diff --git a/2023/CVE-2023-4634.md b/2023/CVE-2023-4634.md
index 3f8a891cb47..4b059129b75 100644
--- a/2023/CVE-2023-4634.md
+++ b/2023/CVE-2023-4634.md
@@ -17,3 +17,5 @@ The Media Library Assistant plugin for WordPress is vulnerable to Local File Inc
 - https://github.com/Patrowl/CVE-2023-4634
 - https://github.com/lehazare/ProjetCL
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4634.yaml
diff --git a/2023/CVE-2023-46347.md b/2023/CVE-2023-46347.md
index b20582eb836..6305abb63c1 100644
--- a/2023/CVE-2023-46347.md
+++ b/2023/CVE-2023-46347.md
@@ -16,3 +16,5 @@ In the module "Step by Step products Pack" (ndk_steppingpack) version 1.5.6 and
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46347.yaml
diff --git a/2023/CVE-2023-46359.md b/2023/CVE-2023-46359.md
index c74672de54a..47fb7e2ad1d 100644
--- a/2023/CVE-2023-46359.md
+++ b/2023/CVE-2023-46359.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46359.yaml
diff --git a/2023/CVE-2023-46455.md b/2023/CVE-2023-46455.md
index 1295383330e..ef9dc4894eb 100644
--- a/2023/CVE-2023-46455.md
+++ b/2023/CVE-2023-46455.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46455.yaml
diff --git a/2023/CVE-2023-46574.md b/2023/CVE-2023-46574.md
index 10d6658bf95..77136c23df2 100644
--- a/2023/CVE-2023-46574.md
+++ b/2023/CVE-2023-46574.md
@@ -16,3 +16,5 @@ An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to e
 #### Github
 - https://github.com/OraclePi/repo
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46574.yaml
diff --git a/2023/CVE-2023-46604.md b/2023/CVE-2023-46604.md
index 05bc10f1f18..562ebc8358f 100644
--- a/2023/CVE-2023-46604.md
+++ b/2023/CVE-2023-46604.md
@@ -46,3 +46,5 @@ The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. Th
 - https://github.com/vjayant93/CVE-2023-46604-POC
 - https://github.com/vulncheck-oss/cve-2023-46604
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2023/CVE-2023-46604.yaml
diff --git a/2023/CVE-2023-4666.md b/2023/CVE-2023-4666.md
index e25c291468d..5e793490b8b 100644
--- a/2023/CVE-2023-4666.md
+++ b/2023/CVE-2023-4666.md
@@ -15,3 +15,5 @@ The Form Maker by 10Web WordPress plugin before 1.15.20 does not validate signat
 #### Github
 - https://github.com/MataKucing-OFC/NemesisTools
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4666.yaml
diff --git a/2023/CVE-2023-46747.md b/2023/CVE-2023-46747.md
index b9b5ad017e9..7ca50c7813a 100644
--- a/2023/CVE-2023-46747.md
+++ b/2023/CVE-2023-46747.md
@@ -32,3 +32,5 @@ Undisclosed requests may bypass configuration utility authentication, allowing a
 - https://github.com/sanjai-AK47/CVE-2023-46747
 - https://github.com/vidura2/cve-2023-46747
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46747.yaml
diff --git a/2023/CVE-2023-46805.md b/2023/CVE-2023-46805.md
index 658bdea3f1d..273702d92ff 100644
--- a/2023/CVE-2023-46805.md
+++ b/2023/CVE-2023-46805.md
@@ -26,3 +26,5 @@ An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 2
 - https://github.com/w2xim3/CVE-2023-46805
 - https://github.com/yoryio/CVE-2023-46805
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46805.yaml
diff --git a/2023/CVE-2023-46818.md b/2023/CVE-2023-46818.md
index 4597ea9d9aa..ab61c9304b1 100644
--- a/2023/CVE-2023-46818.md
+++ b/2023/CVE-2023-46818.md
@@ -26,3 +26,5 @@ An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be
 - https://github.com/vulnerk0/CVE-2023-46818
 - https://github.com/zs1n/CVE-2023-46818
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46818.yaml
diff --git a/2023/CVE-2023-47105.md b/2023/CVE-2023-47105.md
index 7193bd8bf54..1e9c986350e 100644
--- a/2023/CVE-2023-47105.md
+++ b/2023/CVE-2023-47105.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47105.yaml
diff --git a/2023/CVE-2023-47115.md b/2023/CVE-2023-47115.md
index c9baaad3e7c..5fd7547c40e 100644
--- a/2023/CVE-2023-47115.md
+++ b/2023/CVE-2023-47115.md
@@ -15,3 +15,5 @@ Label Studio is an a popular open source data labeling tool. Versions prior to 1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47115.yaml
diff --git a/2023/CVE-2023-47117.md b/2023/CVE-2023-47117.md
index 5cbbba848aa..b18e43fdf95 100644
--- a/2023/CVE-2023-47117.md
+++ b/2023/CVE-2023-47117.md
@@ -15,3 +15,5 @@ Label Studio is an open source data labeling tool. In all current versions of La
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47117.yaml
diff --git a/2023/CVE-2023-4714.md b/2023/CVE-2023-4714.md
index d4f06778dc8..edf2939f426 100644
--- a/2023/CVE-2023-4714.md
+++ b/2023/CVE-2023-4714.md
@@ -16,3 +16,5 @@ Eine problematische Schwachstelle wurde in PlayTube 3.0.1 gefunden. Dies betriff
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4714.yaml
diff --git a/2023/CVE-2023-47211.md b/2023/CVE-2023-47211.md
index e275648e066..864c8d9debe 100644
--- a/2023/CVE-2023-47211.md
+++ b/2023/CVE-2023-47211.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47211.yaml
diff --git a/2023/CVE-2023-47218.md b/2023/CVE-2023-47218.md
index 0ab92a82b08..987ce889717 100644
--- a/2023/CVE-2023-47218.md
+++ b/2023/CVE-2023-47218.md
@@ -21,3 +21,5 @@ An OS command injection vulnerability has been reported to affect several QNAP o
 #### Github
 - https://github.com/passwa11/CVE-2023-47218
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47218.yaml
diff --git a/2023/CVE-2023-47246.md b/2023/CVE-2023-47246.md
index 37bf30fe3ed..808396203f2 100644
--- a/2023/CVE-2023-47246.md
+++ b/2023/CVE-2023-47246.md
@@ -19,3 +19,5 @@ No PoCs from references.
 - https://github.com/W01fh4cker/CVE-2023-47246-EXP
 - https://github.com/ediop3SquadALT/ediop3Webshell
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47246.yaml
diff --git a/2023/CVE-2023-47248.md b/2023/CVE-2023-47248.md
index 0feef29c144..c4249c46454 100644
--- a/2023/CVE-2023-47248.md
+++ b/2023/CVE-2023-47248.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47248.yaml
diff --git a/2023/CVE-2023-47253.md b/2023/CVE-2023-47253.md
index ac4474dc52c..d890dcc788f 100644
--- a/2023/CVE-2023-47253.md
+++ b/2023/CVE-2023-47253.md
@@ -18,3 +18,5 @@ Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP
 - https://github.com/OpenXP-Research/CVE-2024-48359
 - https://github.com/gmh5225/CVE-2023-47253
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47253.yaml
diff --git a/2023/CVE-2023-47643.md b/2023/CVE-2023-47643.md
index fc5833b0d88..a44d0b2b1e6 100644
--- a/2023/CVE-2023-47643.md
+++ b/2023/CVE-2023-47643.md
@@ -15,3 +15,5 @@ SuiteCRM is a Customer Relationship Management (CRM) software application. Prior
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47643.yaml
diff --git a/2023/CVE-2023-47684.md b/2023/CVE-2023-47684.md
index 5744846d5f5..711df15bd46 100644
--- a/2023/CVE-2023-47684.md
+++ b/2023/CVE-2023-47684.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47684.yaml
diff --git a/2023/CVE-2023-47873.md b/2023/CVE-2023-47873.md
index c46d82e32c4..b1b0a365fa9 100644
--- a/2023/CVE-2023-47873.md
+++ b/2023/CVE-2023-47873.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47873.yaml
diff --git a/2023/CVE-2023-48022.md b/2023/CVE-2023-48022.md
index dc2f5abd219..45bf9cb87aa 100644
--- a/2023/CVE-2023-48022.md
+++ b/2023/CVE-2023-48022.md
@@ -19,3 +19,5 @@ Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code
 - https://github.com/0x656565/CVE-2023-48022
 - https://github.com/jakabakos/ShadowRay-RCE-PoC-CVE-2023-48022
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48022.yaml
diff --git a/2023/CVE-2023-48023.md b/2023/CVE-2023-48023.md
index 52dcbc271fd..c0f33483db1 100644
--- a/2023/CVE-2023-48023.md
+++ b/2023/CVE-2023-48023.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48023.yaml
diff --git a/2023/CVE-2023-48084.md b/2023/CVE-2023-48084.md
index 5cfbe34708e..34a70fa0d8b 100644
--- a/2023/CVE-2023-48084.md
+++ b/2023/CVE-2023-48084.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/Hamibubu/CVE-2023-48084
 - https://github.com/bucketcat/CVE-2023-48084
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48084.yaml
diff --git a/2023/CVE-2023-48728.md b/2023/CVE-2023-48728.md
index 67f5a89b800..0e38ae1764b 100644
--- a/2023/CVE-2023-48728.md
+++ b/2023/CVE-2023-48728.md
@@ -17,3 +17,5 @@ A cross-site scripting (xss) vulnerability exists in the functiongetOpenGraph vi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48728.yaml
diff --git a/2023/CVE-2023-48777.md b/2023/CVE-2023-48777.md
index 8a43c5c75dc..2643deb21d7 100644
--- a/2023/CVE-2023-48777.md
+++ b/2023/CVE-2023-48777.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/AkuCyberSec/Elementor-3.18.0-Upload-Path-Traversal-RCE-CVE-2023-48777
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48777.yaml
diff --git a/2023/CVE-2023-48788.md b/2023/CVE-2023-48788.md
index 177209dfaa9..2101e801868 100644
--- a/2023/CVE-2023-48788.md
+++ b/2023/CVE-2023-48788.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 - https://github.com/horizon3ai/CVE-2023-48788
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-48788.yaml
diff --git a/2023/CVE-2023-48795.md b/2023/CVE-2023-48795.md
index 2b17e354175..54afb94c33b 100644
--- a/2023/CVE-2023-48795.md
+++ b/2023/CVE-2023-48795.md
@@ -25,3 +25,5 @@ The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH bef
 - https://github.com/fantomcheg/Vulnerability-Checklist
 - https://github.com/sameeralam3127/rhel8_cve_2023_48795
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2023/CVE-2023-48795.yaml
diff --git a/2023/CVE-2023-49070.md b/2023/CVE-2023-49070.md
index 6908c111b3a..334e21a845b 100644
--- a/2023/CVE-2023-49070.md
+++ b/2023/CVE-2023-49070.md
@@ -22,3 +22,5 @@ Pre-auth RCE in Apache Ofbiz 18.12.09.It's due to XML-RPC no longer maintained
 - https://github.com/jakabakos/Apache-OFBiz-Authentication-Bypass
 - https://github.com/yukselberkay/CVE-2023-49070_CVE-2023-51467
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49070.yaml
diff --git a/2023/CVE-2023-49103.md b/2023/CVE-2023-49103.md
index 6b7a4ad52cf..8d95478c547 100644
--- a/2023/CVE-2023-49103.md
+++ b/2023/CVE-2023-49103.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/d0rb/CVE-2023-49103
 - https://github.com/merlin-ke/OwnCloud-CVE-2023-49103
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49103.yaml
diff --git a/2023/CVE-2023-49105.md b/2023/CVE-2023-49105.md
index f50bc758c47..ba8f96442e6 100644
--- a/2023/CVE-2023-49105.md
+++ b/2023/CVE-2023-49105.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-49105.yaml
diff --git a/2023/CVE-2023-4911.md b/2023/CVE-2023-4911.md
index ad62e72e836..89545accb40 100644
--- a/2023/CVE-2023-4911.md
+++ b/2023/CVE-2023-4911.md
@@ -44,3 +44,5 @@ A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so whi
 - https://github.com/vscvetkov/code
 - https://github.com/xiaoQ1z/CVE-2023-4911
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-4911.yaml
diff --git a/2023/CVE-2023-49230.md b/2023/CVE-2023-49230.md
index 2305af75d02..02cb198a553 100644
--- a/2023/CVE-2023-49230.md
+++ b/2023/CVE-2023-49230.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49230.yaml
diff --git a/2023/CVE-2023-49293.md b/2023/CVE-2023-49293.md
index bd6e2834dcf..e7bbeb14173 100644
--- a/2023/CVE-2023-49293.md
+++ b/2023/CVE-2023-49293.md
@@ -17,3 +17,5 @@ Vite is a website frontend framework. When Vite's HTML transformation is invoked
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49293.yaml
diff --git a/2023/CVE-2023-49438.md b/2023/CVE-2023-49438.md
index c94b32c2c04..c394a42c041 100644
--- a/2023/CVE-2023-49438.md
+++ b/2023/CVE-2023-49438.md
@@ -15,3 +15,5 @@ An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49438.yaml
diff --git a/2023/CVE-2023-49489.md b/2023/CVE-2023-49489.md
index 8311ccfb273..464544b5462 100644
--- a/2023/CVE-2023-49489.md
+++ b/2023/CVE-2023-49489.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49489.yaml
diff --git a/2023/CVE-2023-49494.md b/2023/CVE-2023-49494.md
index d49d21b00d3..8ea1d4265cc 100644
--- a/2023/CVE-2023-49494.md
+++ b/2023/CVE-2023-49494.md
@@ -15,3 +15,5 @@ DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XS
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49494.yaml
diff --git a/2023/CVE-2023-4966.md b/2023/CVE-2023-4966.md
index e0e2e552f49..b1ea5683c1b 100644
--- a/2023/CVE-2023-4966.md
+++ b/2023/CVE-2023-4966.md
@@ -37,3 +37,5 @@ Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when co
 - https://github.com/s-bt/CVE-2023-4966
 - https://github.com/sanjai-AK47/CVE-2023-4966
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4966.yaml
diff --git a/2023/CVE-2023-4973.md b/2023/CVE-2023-4973.md
index 9853bc0e4bc..5e11ff55f1f 100644
--- a/2023/CVE-2023-4973.md
+++ b/2023/CVE-2023-4973.md
@@ -17,3 +17,5 @@ In Academy LMS 6.2 für Windows wurde eine problematische Schwachstelle ausgemac
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4973.yaml
diff --git a/2023/CVE-2023-4974.md b/2023/CVE-2023-4974.md
index bd2af049b48..21a21a354c0 100644
--- a/2023/CVE-2023-4974.md
+++ b/2023/CVE-2023-4974.md
@@ -16,3 +16,5 @@ Eine kritische Schwachstelle wurde in Academy LMS 6.2 ausgemacht. Davon betroffe
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4974.yaml
diff --git a/2023/CVE-2023-49785.md b/2023/CVE-2023-49785.md
index 7da0a6c6b61..6cf28197e91 100644
--- a/2023/CVE-2023-49785.md
+++ b/2023/CVE-2023-49785.md
@@ -16,3 +16,5 @@ NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interfac
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49785.yaml
diff --git a/2023/CVE-2023-5003.md b/2023/CVE-2023-5003.md
index 11d59dba194..cf8055b3deb 100644
--- a/2023/CVE-2023-5003.md
+++ b/2023/CVE-2023-5003.md
@@ -15,3 +15,5 @@ The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5003.yaml
diff --git a/2023/CVE-2023-50094.md b/2023/CVE-2023-50094.md
index 5093db13d60..c15d2882b6a 100644
--- a/2023/CVE-2023-50094.md
+++ b/2023/CVE-2023-50094.md
@@ -16,3 +16,5 @@ reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid ses
 #### Github
 - https://github.com/Zierax/CVE-2023-50094_POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50094.yaml
diff --git a/2023/CVE-2023-50290.md b/2023/CVE-2023-50290.md
index ca74762e7eb..c6310a8ee67 100644
--- a/2023/CVE-2023-50290.md
+++ b/2023/CVE-2023-50290.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50290.yaml
diff --git a/2023/CVE-2023-50578.md b/2023/CVE-2023-50578.md
index 619f7f13ed9..df5caf251a4 100644
--- a/2023/CVE-2023-50578.md
+++ b/2023/CVE-2023-50578.md
@@ -15,3 +15,5 @@ Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50578.yaml
diff --git a/2023/CVE-2023-50720.md b/2023/CVE-2023-50720.md
index 1a6e51b5a62..0e2a7bc4d9b 100644
--- a/2023/CVE-2023-50720.md
+++ b/2023/CVE-2023-50720.md
@@ -17,3 +17,5 @@ XWiki Platform is a generic wiki platform. Prior to versions 14.10.15, 15.5.2, a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50720.yaml
diff --git a/2023/CVE-2023-5074.md b/2023/CVE-2023-5074.md
index 1a7162c5219..33085cfe427 100644
--- a/2023/CVE-2023-5074.md
+++ b/2023/CVE-2023-5074.md
@@ -15,3 +15,5 @@ Use of a static key to protect a JWT token used in user authentication can allow
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5074.yaml
diff --git a/2023/CVE-2023-50839.md b/2023/CVE-2023-50839.md
index a9dd5624a82..3f0d1b88f85 100644
--- a/2023/CVE-2023-50839.md
+++ b/2023/CVE-2023-50839.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50839.yaml
diff --git a/2023/CVE-2023-5089.md b/2023/CVE-2023-5089.md
index f5d33df37c5..d9e259f159a 100644
--- a/2023/CVE-2023-5089.md
+++ b/2023/CVE-2023-5089.md
@@ -15,3 +15,5 @@ The Defender Security WordPress plugin before 4.1.0 does not prevent redirects t
 #### Github
 - https://github.com/Cappricio-Securities/CVE-2023-5089
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5089.yaml
diff --git a/2023/CVE-2023-50917.md b/2023/CVE-2023-50917.md
index f6de7793087..4e6898b2e70 100644
--- a/2023/CVE-2023-50917.md
+++ b/2023/CVE-2023-50917.md
@@ -16,3 +16,5 @@ MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution vi
 #### Github
 - https://github.com/Chocapikk/CVE-2023-50917
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50917.yaml
diff --git a/2023/CVE-2023-50968.md b/2023/CVE-2023-50968.md
index c443dc84a29..716f3fc9c96 100644
--- a/2023/CVE-2023-50968.md
+++ b/2023/CVE-2023-50968.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50968.yaml
diff --git a/2023/CVE-2023-51409.md b/2023/CVE-2023-51409.md
index c1d33bad714..89a7fac367e 100644
--- a/2023/CVE-2023-51409.md
+++ b/2023/CVE-2023-51409.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/Nxploited/CVE-2023-51409
 - https://github.com/RandomRobbieBF/CVE-2023-51409
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-51409.yaml
diff --git a/2023/CVE-2023-51449.md b/2023/CVE-2023-51449.md
index f353ad5f6f2..b4629eaf727 100644
--- a/2023/CVE-2023-51449.md
+++ b/2023/CVE-2023-51449.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-51449.yaml
diff --git a/2023/CVE-2023-51467.md b/2023/CVE-2023-51467.md
index 08cb532baf8..182a6b8f484 100644
--- a/2023/CVE-2023-51467.md
+++ b/2023/CVE-2023-51467.md
@@ -30,3 +30,5 @@ The vulnerability permits attackers to circumvent authentication processes, enab
 - https://github.com/vulncheck-oss/cve-2023-51467
 - https://github.com/yukselberkay/CVE-2023-49070_CVE-2023-51467
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-51467.yaml
diff --git a/2023/CVE-2023-51713.md b/2023/CVE-2023-51713.md
index 6e193b7a719..e3f5c9cb8b0 100644
--- a/2023/CVE-2023-51713.md
+++ b/2023/CVE-2023-51713.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-51713.yaml
diff --git a/2023/CVE-2023-5203.md b/2023/CVE-2023-5203.md
index 15c18da32ec..d8274c87c9a 100644
--- a/2023/CVE-2023-5203.md
+++ b/2023/CVE-2023-5203.md
@@ -15,3 +15,5 @@ The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 doe
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5203.yaml
diff --git a/2023/CVE-2023-5204.md b/2023/CVE-2023-5204.md
index ec928eb8709..a156ee0d95a 100644
--- a/2023/CVE-2023-5204.md
+++ b/2023/CVE-2023-5204.md
@@ -15,3 +15,5 @@ The ChatBot plugin for WordPress is vulnerable to SQL Injection via the $strid p
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2023-5204
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5204.yaml
diff --git a/2023/CVE-2023-5222.md b/2023/CVE-2023-5222.md
index 37da926a9d0..d1c8f44bcdd 100644
--- a/2023/CVE-2023-5222.md
+++ b/2023/CVE-2023-5222.md
@@ -19,3 +19,5 @@ In Viessmann Vitogate 300 bis 2.1.3.0 wurde eine Schwachstelle entdeckt. Sie wur
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5222.yaml
diff --git a/2023/CVE-2023-52251.md b/2023/CVE-2023-52251.md
index bec07c9262d..5e9bdddeb82 100644
--- a/2023/CVE-2023-52251.md
+++ b/2023/CVE-2023-52251.md
@@ -16,3 +16,5 @@ An issue discovered in provectus kafka-ui 0.4.0 through 0.7.1 allows remote atta
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-52251.yaml
diff --git a/2023/CVE-2023-5244.md b/2023/CVE-2023-5244.md
index b017bf6d18e..e5b6521ada8 100644
--- a/2023/CVE-2023-5244.md
+++ b/2023/CVE-2023-5244.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microwebe
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5244.yaml
diff --git a/2023/CVE-2023-5360.md b/2023/CVE-2023-5360.md
index bfe26528d22..d80c27d20b9 100644
--- a/2023/CVE-2023-5360.md
+++ b/2023/CVE-2023-5360.md
@@ -23,3 +23,5 @@ The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not
 - https://github.com/phankz/Worpress-CVE-2023-5360
 - https://github.com/sagsooz/CVE-2023-5360
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5360.yaml
diff --git a/2023/CVE-2023-5375.md b/2023/CVE-2023-5375.md
index 052336778c2..b4b55839cd9 100644
--- a/2023/CVE-2023-5375.md
+++ b/2023/CVE-2023-5375.md
@@ -15,3 +15,5 @@ Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5375.yaml
diff --git a/2023/CVE-2023-5556.md b/2023/CVE-2023-5556.md
index 6620ad649de..af36825eb85 100644
--- a/2023/CVE-2023-5556.md
+++ b/2023/CVE-2023-5556.md
@@ -16,3 +16,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository structurizr/onpremis
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5556.yaml
diff --git a/2023/CVE-2023-5558.md b/2023/CVE-2023-5558.md
index b0ac6c8619a..f18739fdf47 100644
--- a/2023/CVE-2023-5558.md
+++ b/2023/CVE-2023-5558.md
@@ -15,3 +15,5 @@ The LearnPress WordPress plugin before 4.2.5.5 does not sanitise and escape user
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5558.yaml
diff --git a/2023/CVE-2023-5559.md b/2023/CVE-2023-5559.md
index 84c76fad30b..d1352fab815 100644
--- a/2023/CVE-2023-5559.md
+++ b/2023/CVE-2023-5559.md
@@ -15,3 +15,5 @@ The 10Web Booster WordPress plugin before 2.24.18 does not validate the option n
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5559.yaml
diff --git a/2023/CVE-2023-5561.md b/2023/CVE-2023-5561.md
index 5054f306337..541700edcf1 100644
--- a/2023/CVE-2023-5561.md
+++ b/2023/CVE-2023-5561.md
@@ -33,3 +33,5 @@ WordPress does not properly restrict which user fields are searchable via the RE
 - https://github.com/pog007/CVE-2023-5561-PoC
 - https://github.com/rootxsushant/CVE-2023-5561-POC-Updated
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5561.yaml
diff --git a/2023/CVE-2023-5652.md b/2023/CVE-2023-5652.md
index fbba8afedb8..714d266fff6 100644
--- a/2023/CVE-2023-5652.md
+++ b/2023/CVE-2023-5652.md
@@ -15,3 +15,5 @@ The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5652.yaml
diff --git a/2023/CVE-2023-5815.md b/2023/CVE-2023-5815.md
index 5816e381b4f..b617d09b11a 100644
--- a/2023/CVE-2023-5815.md
+++ b/2023/CVE-2023-5815.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5815.yaml
diff --git a/2023/CVE-2023-5863.md b/2023/CVE-2023-5863.md
index 5ea666d0962..ec5e1b24e90 100644
--- a/2023/CVE-2023-5863.md
+++ b/2023/CVE-2023-5863.md
@@ -15,3 +15,5 @@ Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq pr
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5863.yaml
diff --git a/2023/CVE-2023-5914.md b/2023/CVE-2023-5914.md
index 9df6ac804ec..bd573c39c6a 100644
--- a/2023/CVE-2023-5914.md
+++ b/2023/CVE-2023-5914.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5914.yaml
diff --git a/2023/CVE-2023-5974.md b/2023/CVE-2023-5974.md
index 452c2816d52..ab1e4697174 100644
--- a/2023/CVE-2023-5974.md
+++ b/2023/CVE-2023-5974.md
@@ -15,3 +15,5 @@ The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side requ
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5974.yaml
diff --git a/2023/CVE-2023-5991.md b/2023/CVE-2023-5991.md
index 170a709a727..2c023eef584 100644
--- a/2023/CVE-2023-5991.md
+++ b/2023/CVE-2023-5991.md
@@ -16,3 +16,5 @@ The Hotel Booking Lite WordPress plugin before 4.8.5 does not validate file path
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5991.yaml
diff --git a/2023/CVE-2023-6000.md b/2023/CVE-2023-6000.md
index fe7627067b9..06afd63f440 100644
--- a/2023/CVE-2023-6000.md
+++ b/2023/CVE-2023-6000.md
@@ -17,3 +17,5 @@ The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors
 - https://github.com/RonF98/CVE-2023-6000-POC
 - https://github.com/rxerium/CVE-2023-6000
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6000.yaml
diff --git a/2023/CVE-2023-6018.md b/2023/CVE-2023-6018.md
index fbb5120ebd4..15e004cee44 100644
--- a/2023/CVE-2023-6018.md
+++ b/2023/CVE-2023-6018.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6018.yaml
diff --git a/2023/CVE-2023-6020.md b/2023/CVE-2023-6020.md
index aafeea85532..bc1762468fa 100644
--- a/2023/CVE-2023-6020.md
+++ b/2023/CVE-2023-6020.md
@@ -15,3 +15,5 @@ LFI in Ray's /static/ directory allows attackers to read any file on the server
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6020.yaml
diff --git a/2023/CVE-2023-6021.md b/2023/CVE-2023-6021.md
index caa5ac25981..a5c8d572247 100644
--- a/2023/CVE-2023-6021.md
+++ b/2023/CVE-2023-6021.md
@@ -15,3 +15,5 @@ LFI in Ray's log API endpoint allows attackers to read any file on the server wi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6021.yaml
diff --git a/2023/CVE-2023-6023.md b/2023/CVE-2023-6023.md
index 07081d976ab..3c85cc7ce60 100644
--- a/2023/CVE-2023-6023.md
+++ b/2023/CVE-2023-6023.md
@@ -15,3 +15,5 @@ An attacker can read any file on the filesystem on the server hosting ModelDB th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6023.yaml
diff --git a/2023/CVE-2023-6030.md b/2023/CVE-2023-6030.md
index 717942d1540..5eb1857e5db 100644
--- a/2023/CVE-2023-6030.md
+++ b/2023/CVE-2023-6030.md
@@ -15,3 +15,5 @@ The LogDash Activity Log WordPress plugin before 1.1.4 hooks the wp_login_failed
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6030.yaml
diff --git a/2023/CVE-2023-6038.md b/2023/CVE-2023-6038.md
index ee0d51c6e80..9e26e9b4090 100644
--- a/2023/CVE-2023-6038.md
+++ b/2023/CVE-2023-6038.md
@@ -15,3 +15,5 @@ A Local File Inclusion (LFI) vulnerability exists in the h2o-3 REST API, allowin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6038.yaml
diff --git a/2023/CVE-2023-6063.md b/2023/CVE-2023-6063.md
index ffc6b5342da..87909c67ca2 100644
--- a/2023/CVE-2023-6063.md
+++ b/2023/CVE-2023-6063.md
@@ -20,3 +20,5 @@ The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise an
 - https://github.com/securi3ytalent/wordpress-exploit
 - https://github.com/thesafdari/CVE-2023-6063
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6063.yaml
diff --git a/2023/CVE-2023-6065.md b/2023/CVE-2023-6065.md
index 881629e1f26..9788d73f3d3 100644
--- a/2023/CVE-2023-6065.md
+++ b/2023/CVE-2023-6065.md
@@ -16,3 +16,5 @@ The Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 doesn't restrict
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6065.yaml
diff --git a/2023/CVE-2023-6114.md b/2023/CVE-2023-6114.md
index e428b7372c2..37a877aff6a 100644
--- a/2023/CVE-2023-6114.md
+++ b/2023/CVE-2023-6114.md
@@ -17,3 +17,5 @@ The Duplicator WordPress plugin before 1.5.7.1, Duplicator Pro WordPress plugin
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6114.yaml
diff --git a/2023/CVE-2023-6246.md b/2023/CVE-2023-6246.md
index b9d7dfbd1dc..b4633878ab2 100644
--- a/2023/CVE-2023-6246.md
+++ b/2023/CVE-2023-6246.md
@@ -24,3 +24,5 @@ A heap-based buffer overflow was found in the __vsyslog_internal function of the
 #### Github
 - https://github.com/elpe-pinillo/CVE-2023-6246
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-6246.yaml
diff --git a/2023/CVE-2023-6266.md b/2023/CVE-2023-6266.md
index 9e59440278f..a62820a17c3 100644
--- a/2023/CVE-2023-6266.md
+++ b/2023/CVE-2023-6266.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6266.yaml
diff --git a/2023/CVE-2023-6275.md b/2023/CVE-2023-6275.md
index 039afc46473..a26f2970d14 100644
--- a/2023/CVE-2023-6275.md
+++ b/2023/CVE-2023-6275.md
@@ -20,3 +20,5 @@ Eine problematische Schwachstelle wurde in TOTVS Fluig Platform 1.6.x/1.7.x/1.8.
 - https://github.com/LelioCosta/FLUIG-Vulnerabilidade-CVE-2023-6275
 - https://github.com/erickfernandox/CVE-2023-6275
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6275.yaml
diff --git a/2023/CVE-2023-6329.md b/2023/CVE-2023-6329.md
index 95f469de1b8..6d22b443124 100644
--- a/2023/CVE-2023-6329.md
+++ b/2023/CVE-2023-6329.md
@@ -15,3 +15,5 @@ An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6329.yaml
diff --git a/2023/CVE-2023-6360.md b/2023/CVE-2023-6360.md
index 27ce80bfe0e..9afb258c884 100644
--- a/2023/CVE-2023-6360.md
+++ b/2023/CVE-2023-6360.md
@@ -16,3 +16,5 @@ The 'My Calendar' WordPress Plugin, version < 3.4.22 is affected by an unauthent
 - https://github.com/tpdlshdmlrkfmcla/CVE-2023-6360
 - https://github.com/tranphuc2005/Exploit_Wordpress
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6360.yaml
diff --git a/2023/CVE-2023-6379.md b/2023/CVE-2023-6379.md
index 3a95a11b639..95ab3041249 100644
--- a/2023/CVE-2023-6379.md
+++ b/2023/CVE-2023-6379.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6379.yaml
diff --git a/2023/CVE-2023-6380.md b/2023/CVE-2023-6380.md
index 4859023efad..ad340fd60f5 100644
--- a/2023/CVE-2023-6380.md
+++ b/2023/CVE-2023-6380.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6380.yaml
diff --git a/2023/CVE-2023-6389.md b/2023/CVE-2023-6389.md
index 3631ff4ecb9..1972b988d6f 100644
--- a/2023/CVE-2023-6389.md
+++ b/2023/CVE-2023-6389.md
@@ -15,3 +15,5 @@ The WordPress Toolbar WordPress plugin through 2.2.6 redirects to any URL via th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6389.yaml
diff --git a/2023/CVE-2023-6421.md b/2023/CVE-2023-6421.md
index b3da6272737..66c4394e669 100644
--- a/2023/CVE-2023-6421.md
+++ b/2023/CVE-2023-6421.md
@@ -15,3 +15,5 @@ The Download Manager WordPress plugin before 3.2.83 does not protect file downlo
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2023-6421
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6421.yaml
diff --git a/2023/CVE-2023-6444.md b/2023/CVE-2023-6444.md
index af973373d7a..d1e40e58134 100644
--- a/2023/CVE-2023-6444.md
+++ b/2023/CVE-2023-6444.md
@@ -15,3 +15,5 @@ The Seriously Simple Podcasting WordPress plugin before 3.0.0 discloses the Podc
 #### Github
 - https://github.com/Wayne-Ker/CVE-2023-6444-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6444.yaml
diff --git a/2023/CVE-2023-6505.md b/2023/CVE-2023-6505.md
index f34ec1ee142..369664d0376 100644
--- a/2023/CVE-2023-6505.md
+++ b/2023/CVE-2023-6505.md
@@ -15,3 +15,5 @@ The Migrate WordPress Website & Backups WordPress plugin before 1.9.3 does not p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6505.yaml
diff --git a/2023/CVE-2023-6549.md b/2023/CVE-2023-6549.md
index 5332bc5c91f..4cd2abb012d 100644
--- a/2023/CVE-2023-6549.md
+++ b/2023/CVE-2023-6549.md
@@ -21,3 +21,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6549.yaml
diff --git a/2023/CVE-2023-6553.md b/2023/CVE-2023-6553.md
index 6349ea1c023..f317eb2ccd9 100644
--- a/2023/CVE-2023-6553.md
+++ b/2023/CVE-2023-6553.md
@@ -19,3 +19,5 @@ The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution
 - https://github.com/cc3305/CVE-2023-6553
 - https://github.com/motikan2010/CVE-2023-6553-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6553.yaml
diff --git a/2023/CVE-2023-6567.md b/2023/CVE-2023-6567.md
index 87bd62046c9..664a0711272 100644
--- a/2023/CVE-2023-6567.md
+++ b/2023/CVE-2023-6567.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/mimiloveexe/CVE-2023-6567-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6567.yaml
diff --git a/2023/CVE-2023-6568.md b/2023/CVE-2023-6568.md
index a3465c3c966..c5f869086ea 100644
--- a/2023/CVE-2023-6568.md
+++ b/2023/CVE-2023-6568.md
@@ -15,3 +15,5 @@ A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6568.yaml
diff --git a/2023/CVE-2023-6592.md b/2023/CVE-2023-6592.md
index 6a81112b85a..758449f0afb 100644
--- a/2023/CVE-2023-6592.md
+++ b/2023/CVE-2023-6592.md
@@ -16,3 +16,5 @@ The FastDup WordPress plugin before 2.2 does not prevent directory listing in se
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6592.yaml
diff --git a/2023/CVE-2023-6623.md b/2023/CVE-2023-6623.md
index 53b3b882650..e3768b27275 100644
--- a/2023/CVE-2023-6623.md
+++ b/2023/CVE-2023-6623.md
@@ -16,3 +16,5 @@ The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthentica
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6623.yaml
diff --git a/2023/CVE-2023-6634.md b/2023/CVE-2023-6634.md
index 15a466df55d..6a1b3c9b2db 100644
--- a/2023/CVE-2023-6634.md
+++ b/2023/CVE-2023-6634.md
@@ -15,3 +15,5 @@ The LearnPress plugin for WordPress is vulnerable to Command Injection in all ve
 #### Github
 - https://github.com/krn966/CVE-2023-6634
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6634.yaml
diff --git a/2023/CVE-2023-6655.md b/2023/CVE-2023-6655.md
index 596f4f50627..6092752bbd9 100644
--- a/2023/CVE-2023-6655.md
+++ b/2023/CVE-2023-6655.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6655.yaml
diff --git a/2023/CVE-2023-6697.md b/2023/CVE-2023-6697.md
index 3b8acbe7709..322fd986b37 100644
--- a/2023/CVE-2023-6697.md
+++ b/2023/CVE-2023-6697.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6697.yaml
diff --git a/2023/CVE-2023-6750.md b/2023/CVE-2023-6750.md
index 828446d9c66..688d6d1e8de 100644
--- a/2023/CVE-2023-6750.md
+++ b/2023/CVE-2023-6750.md
@@ -15,3 +15,5 @@ The Clone WordPress plugin before 2.4.3 uses buffer files to store in-progress b
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6750.yaml
diff --git a/2023/CVE-2023-6786.md b/2023/CVE-2023-6786.md
index 92ce14a119a..7b83c6f14de 100644
--- a/2023/CVE-2023-6786.md
+++ b/2023/CVE-2023-6786.md
@@ -15,3 +15,5 @@ The Payment Gateway for Telcell WordPress plugin through 2.0.1 does not validate
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6786.yaml
diff --git a/2023/CVE-2023-6825.md b/2023/CVE-2023-6825.md
index f3f2541cecd..4f886ad9f12 100644
--- a/2023/CVE-2023-6825.md
+++ b/2023/CVE-2023-6825.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6825.yaml
diff --git a/2023/CVE-2023-6875.md b/2023/CVE-2023-6875.md
index 26d06ec0855..cc07798f56d 100644
--- a/2023/CVE-2023-6875.md
+++ b/2023/CVE-2023-6875.md
@@ -18,3 +18,5 @@ The POST SMTP Mailer – Email log, Delivery Failure Notifications and Best Mail
 - https://github.com/gbrsh/CVE-2023-6875
 - https://github.com/hatlesswizard/CVE-2023-6875
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6875.yaml
diff --git a/2023/CVE-2023-6895.md b/2023/CVE-2023-6895.md
index 76093510ed9..2fbad4d4423 100644
--- a/2023/CVE-2023-6895.md
+++ b/2023/CVE-2023-6895.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/FuBoLuSec/CVE-2023-6895
 - https://github.com/nles-crt/CVE-2023-6895
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6895.yaml
diff --git a/2023/CVE-2023-6933.md b/2023/CVE-2023-6933.md
index 60093f0cce3..8143c9d940d 100644
--- a/2023/CVE-2023-6933.md
+++ b/2023/CVE-2023-6933.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/w2xim3/CVE-2023-6933
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6933.yaml
diff --git a/2023/CVE-2023-6970.md b/2023/CVE-2023-6970.md
index 142991c1db9..5647aacff93 100644
--- a/2023/CVE-2023-6970.md
+++ b/2023/CVE-2023-6970.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6970.yaml
diff --git a/2023/CVE-2023-6977.md b/2023/CVE-2023-6977.md
index d52ce438f1d..dfecc366510 100644
--- a/2023/CVE-2023-6977.md
+++ b/2023/CVE-2023-6977.md
@@ -15,3 +15,5 @@ This vulnerability enables malicious users to read sensitive files on the server
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6977.yaml
diff --git a/2023/CVE-2023-6989.md b/2023/CVE-2023-6989.md
index 69a4f33e5dc..5f9926f5488 100644
--- a/2023/CVE-2023-6989.md
+++ b/2023/CVE-2023-6989.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6989.yaml
diff --git a/2023/CVE-2023-7028.md b/2023/CVE-2023-7028.md
index 9774c9ba722..d1104931d23 100644
--- a/2023/CVE-2023-7028.md
+++ b/2023/CVE-2023-7028.md
@@ -39,3 +39,5 @@ An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 pr
 - https://github.com/thanhlam-attt/CVE-2023-7028
 - https://github.com/yoryio/CVE-2023-7028
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7028.yaml
diff --git a/2023/CVE-2023-7116.md b/2023/CVE-2023-7116.md
index 354e9cb41d2..c948dc91065 100644
--- a/2023/CVE-2023-7116.md
+++ b/2023/CVE-2023-7116.md
@@ -16,3 +16,5 @@ Eine kritische Schwachstelle wurde in WeiYe-Jing datax-web 2.1.2 entdeckt. Es ge
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7116.yaml
diff --git a/2023/CVE-2023-7164.md b/2023/CVE-2023-7164.md
index d8100001ca4..ea968644511 100644
--- a/2023/CVE-2023-7164.md
+++ b/2023/CVE-2023-7164.md
@@ -15,3 +15,5 @@ The BackWPup WordPress plugin before 4.0.4 does not prevent Directory Listing in
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7164.yaml
diff --git a/2023/CVE-2023-7165.md b/2023/CVE-2023-7165.md
index dd0fbd91aee..1fcc1ad045e 100644
--- a/2023/CVE-2023-7165.md
+++ b/2023/CVE-2023-7165.md
@@ -15,3 +15,5 @@ The JetBackup WordPress plugin before 2.0.9.9 doesn't use index files to prevent
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7165.yaml
diff --git a/2023/CVE-2023-7246.md b/2023/CVE-2023-7246.md
index 326850b1882..a2d5cd60fdf 100644
--- a/2023/CVE-2023-7246.md
+++ b/2023/CVE-2023-7246.md
@@ -15,3 +15,5 @@ The System Dashboard WordPress plugin before 2.8.10 does not sanitize and escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7246.yaml
diff --git a/2024/CVE-2024-0012.md b/2024/CVE-2024-0012.md
index 488fa39af73..736c19b058f 100644
--- a/2024/CVE-2024-0012.md
+++ b/2024/CVE-2024-0012.md
@@ -31,3 +31,5 @@ An authentication bypass in Palo Alto Networks PAN-OS software enables an unauth
 - https://github.com/punitdarji/Paloalto-CVE-2024-0012
 - https://github.com/watchtowrlabs/palo-alto-panos-cve-2024-0012
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0012.yaml
diff --git a/2024/CVE-2024-0195.md b/2024/CVE-2024-0195.md
index c5673d50195..dc6dba8194f 100644
--- a/2024/CVE-2024-0195.md
+++ b/2024/CVE-2024-0195.md
@@ -19,3 +19,5 @@ No PoCs from references.
 - https://github.com/gh-ost00/CVE-2024-0195-SpiderFlow
 - https://github.com/hack-with-rohit/CVE-2024-0195-SpiderFlow
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0195.yaml
diff --git a/2024/CVE-2024-0200.md b/2024/CVE-2024-0200.md
index 7424f627111..814d31c2860 100644
--- a/2024/CVE-2024-0200.md
+++ b/2024/CVE-2024-0200.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 - https://github.com/convisolabs/CVE-2024-0507_CVE-2024-0200-github
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0200.yaml
diff --git a/2024/CVE-2024-0204.md b/2024/CVE-2024-0204.md
index d2a297f0df0..efdcc83cada 100644
--- a/2024/CVE-2024-0204.md
+++ b/2024/CVE-2024-0204.md
@@ -18,3 +18,5 @@ Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauth
 - https://github.com/horizon3ai/CVE-2024-0204
 - https://github.com/m-cetin/CVE-2024-0204
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0204.yaml
diff --git a/2024/CVE-2024-0235.md b/2024/CVE-2024-0235.md
index 2fec5599b70..22a6c71b50e 100644
--- a/2024/CVE-2024-0235.md
+++ b/2024/CVE-2024-0235.md
@@ -16,3 +16,5 @@ The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7
 - https://github.com/Cappricio-Securities/CVE-2024-0235
 - https://github.com/Nxploited/CVE-2024-0235-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0235.yaml
diff --git a/2024/CVE-2024-0250.md b/2024/CVE-2024-0250.md
index c7f5750d573..a2e2cacea94 100644
--- a/2024/CVE-2024-0250.md
+++ b/2024/CVE-2024-0250.md
@@ -15,3 +15,5 @@ The Analytics Insights for Google Analytics 4 (AIWP) WordPress plugin before 6.3
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0250.yaml
diff --git a/2024/CVE-2024-0305.md b/2024/CVE-2024-0305.md
index ef6850473a1..4a7517da3c2 100644
--- a/2024/CVE-2024-0305.md
+++ b/2024/CVE-2024-0305.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/jidle123/cve-2024-0305exp
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0305.yaml
diff --git a/2024/CVE-2024-0337.md b/2024/CVE-2024-0337.md
index b61b3499ce8..b74e5c4e254 100644
--- a/2024/CVE-2024-0337.md
+++ b/2024/CVE-2024-0337.md
@@ -15,3 +15,5 @@ The Travelpayouts: All Travel Brands in One Place WordPress plugin through 1.1.1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0337.yaml
diff --git a/2024/CVE-2024-0352.md b/2024/CVE-2024-0352.md
index 298c32455a5..1debba8d91b 100644
--- a/2024/CVE-2024-0352.md
+++ b/2024/CVE-2024-0352.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Cappricio-Securities/CVE-2024-0352
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0352.yaml
diff --git a/2024/CVE-2024-0593.md b/2024/CVE-2024-0593.md
index 84895dfd24d..877f1b5576b 100644
--- a/2024/CVE-2024-0593.md
+++ b/2024/CVE-2024-0593.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0593.yaml
diff --git a/2024/CVE-2024-0692.md b/2024/CVE-2024-0692.md
index 023f3af8e9c..90d075e5d3b 100644
--- a/2024/CVE-2024-0692.md
+++ b/2024/CVE-2024-0692.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0692.yaml
diff --git a/2024/CVE-2024-0705.md b/2024/CVE-2024-0705.md
index 67fda22b461..77967bd7a53 100644
--- a/2024/CVE-2024-0705.md
+++ b/2024/CVE-2024-0705.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0705.yaml
diff --git a/2024/CVE-2024-0799.md b/2024/CVE-2024-0799.md
index e056187726b..a320fc99875 100644
--- a/2024/CVE-2024-0799.md
+++ b/2024/CVE-2024-0799.md
@@ -16,3 +16,5 @@ An authentication bypass vulnerability exists in Arcserve Unified Data Protectio
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0799.yaml
diff --git a/2024/CVE-2024-0801.md b/2024/CVE-2024-0801.md
index 6d2046249e4..7d96d72e531 100644
--- a/2024/CVE-2024-0801.md
+++ b/2024/CVE-2024-0801.md
@@ -15,3 +15,5 @@ A denial of service vulnerability exists in Arcserve Unified Data Protection 9.2
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0801.yaml
diff --git a/2024/CVE-2024-0881.md b/2024/CVE-2024-0881.md
index 673ccd61f29..9c5beac06ed 100644
--- a/2024/CVE-2024-0881.md
+++ b/2024/CVE-2024-0881.md
@@ -15,3 +15,5 @@ The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Ca
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0881.yaml
diff --git a/2024/CVE-2024-0939.md b/2024/CVE-2024-0939.md
index 915144c7ac9..6da07979633 100644
--- a/2024/CVE-2024-0939.md
+++ b/2024/CVE-2024-0939.md
@@ -16,3 +16,5 @@ In Byzoro Smart S210 Management Platform bis 20240117 wurde eine kritische Schwa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0939.yaml
diff --git a/2024/CVE-2024-0986.md b/2024/CVE-2024-0986.md
index b4f4da541a6..bad5d0b1a90 100644
--- a/2024/CVE-2024-0986.md
+++ b/2024/CVE-2024-0986.md
@@ -17,3 +17,5 @@ Eine Schwachstelle wurde in Issabel PBX 4.0.0 ausgemacht. Sie wurde als kritisch
 #### Github
 - https://github.com/gunzf0x/Issabel-PBX-4.0.0-RCE-Authenticated
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0986.yaml
diff --git a/2024/CVE-2024-10081.md b/2024/CVE-2024-10081.md
index 2ce8511594e..20539f9ad55 100644
--- a/2024/CVE-2024-10081.md
+++ b/2024/CVE-2024-10081.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10081.yaml
diff --git a/2024/CVE-2024-10146.md b/2024/CVE-2024-10146.md
index 5de33977728..54c3dd4f0d7 100644
--- a/2024/CVE-2024-10146.md
+++ b/2024/CVE-2024-10146.md
@@ -15,3 +15,5 @@ The Simple File List WordPress plugin before 6.1.13 does not sanitise and escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10146.yaml
diff --git a/2024/CVE-2024-10152.md b/2024/CVE-2024-10152.md
index 8dfb23886da..8a8bf1f6d1d 100644
--- a/2024/CVE-2024-10152.md
+++ b/2024/CVE-2024-10152.md
@@ -15,3 +15,5 @@ The Simple Certain Time to Show Content WordPress plugin before 1.3.1 does not s
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10152.yaml
diff --git a/2024/CVE-2024-1021.md b/2024/CVE-2024-1021.md
index 2b9f7515533..f5021b2d98d 100644
--- a/2024/CVE-2024-1021.md
+++ b/2024/CVE-2024-1021.md
@@ -21,3 +21,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1021.yaml
diff --git a/2024/CVE-2024-10400.md b/2024/CVE-2024-10400.md
index 8a789d20ed1..6e5eb4e6194 100644
--- a/2024/CVE-2024-10400.md
+++ b/2024/CVE-2024-10400.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/k0ns0l/CVE-2024-10400
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10400.yaml
diff --git a/2024/CVE-2024-10443.md b/2024/CVE-2024-10443.md
index b982f106947..baa918af631 100644
--- a/2024/CVE-2024-10443.md
+++ b/2024/CVE-2024-10443.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-10443.yaml
diff --git a/2024/CVE-2024-10516.md b/2024/CVE-2024-10516.md
index 1b5476c9de7..4f568d73ad6 100644
--- a/2024/CVE-2024-10516.md
+++ b/2024/CVE-2024-10516.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2024-10516
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10516.yaml
diff --git a/2024/CVE-2024-10571.md b/2024/CVE-2024-10571.md
index 54110615310..689eeaf4d37 100644
--- a/2024/CVE-2024-10571.md
+++ b/2024/CVE-2024-10571.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2024-10571
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10571.yaml
diff --git a/2024/CVE-2024-1061.md b/2024/CVE-2024-1061.md
index 75336c6d4a6..9a483eb2da3 100644
--- a/2024/CVE-2024-1061.md
+++ b/2024/CVE-2024-1061.md
@@ -15,3 +15,5 @@ The 'HTML5 Video Player' WordPress Plugin, version < 2.5.25 is affected by an un
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1061.yaml
diff --git a/2024/CVE-2024-10708.md b/2024/CVE-2024-10708.md
index f4b9ab942ff..f4a23900e06 100644
--- a/2024/CVE-2024-10708.md
+++ b/2024/CVE-2024-10708.md
@@ -15,3 +15,5 @@ The System Dashboard WordPress plugin before 2.8.15 does not validate user input
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10708.yaml
diff --git a/2024/CVE-2024-1071.md b/2024/CVE-2024-1071.md
index cee5ea2593b..c61c38c6328 100644
--- a/2024/CVE-2024-1071.md
+++ b/2024/CVE-2024-1071.md
@@ -24,3 +24,5 @@ No PoCs from references.
 - https://github.com/gbrsh/CVE-2024-1071
 - https://github.com/gh-ost00/CVE-2024-1071-SQL-Injection
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1071.yaml
diff --git a/2024/CVE-2024-10763.md b/2024/CVE-2024-10763.md
index ad5f80d47b4..a4659b13296 100644
--- a/2024/CVE-2024-10763.md
+++ b/2024/CVE-2024-10763.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10763.yaml
diff --git a/2024/CVE-2024-10783.md b/2024/CVE-2024-10783.md
index 90098192e91..f3fd9b9e244 100644
--- a/2024/CVE-2024-10783.md
+++ b/2024/CVE-2024-10783.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10783.yaml
diff --git a/2024/CVE-2024-10812.md b/2024/CVE-2024-10812.md
index 664d027e922..03a330f8f53 100644
--- a/2024/CVE-2024-10812.md
+++ b/2024/CVE-2024-10812.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10812.yaml
diff --git a/2024/CVE-2024-10908.md b/2024/CVE-2024-10908.md
index 91df46fad1c..8af24fb5a01 100644
--- a/2024/CVE-2024-10908.md
+++ b/2024/CVE-2024-10908.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10908.yaml
diff --git a/2024/CVE-2024-10914.md b/2024/CVE-2024-10914.md
index 21b3ae8f8d7..8914d8e85fa 100644
--- a/2024/CVE-2024-10914.md
+++ b/2024/CVE-2024-10914.md
@@ -38,3 +38,5 @@ In D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L bis 20241028 wurde eine kriti
 - https://github.com/verylazytech/CVE-2024-10914
 - https://github.com/yenyangmjaze/cve-2024-10914
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10914.yaml
diff --git a/2024/CVE-2024-10915.md b/2024/CVE-2024-10915.md
index 84413093b5c..81b6f372221 100644
--- a/2024/CVE-2024-10915.md
+++ b/2024/CVE-2024-10915.md
@@ -26,3 +26,5 @@ No PoCs from references.
 #### Github
 - https://github.com/r0otk3r/CVE-2024-10915
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10915.yaml
diff --git a/2024/CVE-2024-10924.md b/2024/CVE-2024-10924.md
index 2349676c883..79b69b57f77 100644
--- a/2024/CVE-2024-10924.md
+++ b/2024/CVE-2024-10924.md
@@ -33,3 +33,5 @@ No PoCs from references.
 - https://github.com/sariamubeen/CVE-2024-10924
 - https://github.com/z0roday/Realy-Simple-Security-Vulnerabilities-Exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10924.yaml
diff --git a/2024/CVE-2024-11044.md b/2024/CVE-2024-11044.md
index cf95f48b5a6..9f11f87de16 100644
--- a/2024/CVE-2024-11044.md
+++ b/2024/CVE-2024-11044.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11044.yaml
diff --git a/2024/CVE-2024-11238.md b/2024/CVE-2024-11238.md
index 1418d3947e4..679d6f92e5b 100644
--- a/2024/CVE-2024-11238.md
+++ b/2024/CVE-2024-11238.md
@@ -16,3 +16,5 @@ Es wurde eine kritische Schwachstelle in Landray EKP bis 16.0 gefunden. Dabei be
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11238.yaml
diff --git a/2024/CVE-2024-11303.md b/2024/CVE-2024-11303.md
index 62a3be41a64..a6266931bf7 100644
--- a/2024/CVE-2024-11303.md
+++ b/2024/CVE-2024-11303.md
@@ -15,3 +15,5 @@ The pathname of the root directory to a Restricted Directory ('Path Traversal')
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11303.yaml
diff --git a/2024/CVE-2024-11305.md b/2024/CVE-2024-11305.md
index 540b5e8101f..6a4307cba00 100644
--- a/2024/CVE-2024-11305.md
+++ b/2024/CVE-2024-11305.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11305.yaml
diff --git a/2024/CVE-2024-11320.md b/2024/CVE-2024-11320.md
index 8777f6daa71..6d85631e286 100644
--- a/2024/CVE-2024-11320.md
+++ b/2024/CVE-2024-11320.md
@@ -15,3 +15,5 @@ Arbitrary commands execution on the server by exploiting a command injection vul
 #### Github
 - https://github.com/mhaskar/CVE-2024-11320
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11320.yaml
diff --git a/2024/CVE-2024-11396.md b/2024/CVE-2024-11396.md
index 8e6b7b8959a..c9e4df6e555 100644
--- a/2024/CVE-2024-11396.md
+++ b/2024/CVE-2024-11396.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2024-11396
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11396.yaml
diff --git a/2024/CVE-2024-11587.md b/2024/CVE-2024-11587.md
index 52914e02b24..0be3af38ca1 100644
--- a/2024/CVE-2024-11587.md
+++ b/2024/CVE-2024-11587.md
@@ -18,3 +18,5 @@ Es wurde eine Schwachstelle in idcCMS 1.60 ausgemacht. Sie wurde als problematis
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11587.yaml
diff --git a/2024/CVE-2024-11680.md b/2024/CVE-2024-11680.md
index 258013c41e8..e5486b4f932 100644
--- a/2024/CVE-2024-11680.md
+++ b/2024/CVE-2024-11680.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/D3N14LD15K/CVE-2024-11680_PoC_Exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11680.yaml
diff --git a/2024/CVE-2024-11728.md b/2024/CVE-2024-11728.md
index 165aedf682e..644cff6459d 100644
--- a/2024/CVE-2024-11728.md
+++ b/2024/CVE-2024-11728.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/samogod/CVE-2024-11728
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11728.yaml
diff --git a/2024/CVE-2024-11740.md b/2024/CVE-2024-11740.md
index d64d8c59897..9a361917c4b 100644
--- a/2024/CVE-2024-11740.md
+++ b/2024/CVE-2024-11740.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11740.yaml
diff --git a/2024/CVE-2024-1183.md b/2024/CVE-2024-1183.md
index 7a157aea451..d03fc4bb916 100644
--- a/2024/CVE-2024-1183.md
+++ b/2024/CVE-2024-1183.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1183.yaml
diff --git a/2024/CVE-2024-11868.md b/2024/CVE-2024-11868.md
index 75d8e112b51..a7e69c8a51b 100644
--- a/2024/CVE-2024-11868.md
+++ b/2024/CVE-2024-11868.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11868.yaml
diff --git a/2024/CVE-2024-11921.md b/2024/CVE-2024-11921.md
index 2ddd428a1fd..b3f99eb494c 100644
--- a/2024/CVE-2024-11921.md
+++ b/2024/CVE-2024-11921.md
@@ -15,3 +15,5 @@ The GiveWP  WordPress plugin before 3.19.0 does not sanitise and escape a parame
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11921.yaml
diff --git a/2024/CVE-2024-11972.md b/2024/CVE-2024-11972.md
index 7f423719f64..8c6329bae5c 100644
--- a/2024/CVE-2024-11972.md
+++ b/2024/CVE-2024-11972.md
@@ -16,3 +16,5 @@ The Hunk Companion WordPress plugin before 1.9.0 does not correctly authorize so
 - https://github.com/Nxploited/CVE-2024-11972-PoC
 - https://github.com/RonF98/CVE-2024-11972-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11972.yaml
diff --git a/2024/CVE-2024-12008.md b/2024/CVE-2024-12008.md
index 37529993050..b968de5b180 100644
--- a/2024/CVE-2024-12008.md
+++ b/2024/CVE-2024-12008.md
@@ -5,7 +5,8 @@
 
 ### Description
 
-The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF attacks.
Note: the debug feature must be enabled for this to be a concern, and it is disabled by default.
+The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF attacks.
+Note: the debug feature must be enabled for this to be a concern, and it is disabled by default.
 
 ### POC
 
@@ -15,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/spyata123/CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-Cache
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12008.yaml
diff --git a/2024/CVE-2024-12025.md b/2024/CVE-2024-12025.md
index 5b2ab7f1648..ed6e93f4956 100644
--- a/2024/CVE-2024-12025.md
+++ b/2024/CVE-2024-12025.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2024-12025
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12025.yaml
diff --git a/2024/CVE-2024-1208.md b/2024/CVE-2024-1208.md
index 1253586b753..19ed0467bed 100644
--- a/2024/CVE-2024-1208.md
+++ b/2024/CVE-2024-1208.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/Cappricio-Securities/CVE-2024-1208
 - https://github.com/karlemilnikka/CVE-2024-1208-and-CVE-2024-1210
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1208.yaml
diff --git a/2024/CVE-2024-1209.md b/2024/CVE-2024-1209.md
index 96743a0b5d8..4ce8a0bdc21 100644
--- a/2024/CVE-2024-1209.md
+++ b/2024/CVE-2024-1209.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/karlemilnikka/CVE-2024-1209
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1209.yaml
diff --git a/2024/CVE-2024-1210.md b/2024/CVE-2024-1210.md
index 27f6689d76f..7619691bd9b 100644
--- a/2024/CVE-2024-1210.md
+++ b/2024/CVE-2024-1210.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/karlemilnikka/CVE-2024-1208-and-CVE-2024-1210
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1210.yaml
diff --git a/2024/CVE-2024-1212.md b/2024/CVE-2024-1212.md
index ecea9f936ca..fa5da30ace3 100644
--- a/2024/CVE-2024-1212.md
+++ b/2024/CVE-2024-1212.md
@@ -21,3 +21,5 @@ Unauthenticated remote attackers can access the system through the LoadMaster ma
 - https://github.com/alex14324/UCMDI
 - https://github.com/r0otk3r/CVE-2024-1212
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1212.yaml
diff --git a/2024/CVE-2024-12209.md b/2024/CVE-2024-12209.md
index 97cf013a0fb..7725e3f6442 100644
--- a/2024/CVE-2024-12209.md
+++ b/2024/CVE-2024-12209.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/Nxploited/CVE-2024-12209
 - https://github.com/RandomRobbieBF/CVE-2024-12209
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12209.yaml
diff --git a/2024/CVE-2024-12356.md b/2024/CVE-2024-12356.md
index ec6643940e1..1956749c52e 100644
--- a/2024/CVE-2024-12356.md
+++ b/2024/CVE-2024-12356.md
@@ -17,3 +17,5 @@ A critical vulnerability has been discovered in Privileged Remote Access (PRA) a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-12356.yaml
diff --git a/2024/CVE-2024-12585.md b/2024/CVE-2024-12585.md
index 740af5749a3..9b0e15bbd46 100644
--- a/2024/CVE-2024-12585.md
+++ b/2024/CVE-2024-12585.md
@@ -16,3 +16,5 @@ The Property Hive WordPress plugin before 2.1.1 does not sanitise and escape a p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12585.yaml
diff --git a/2024/CVE-2024-12638.md b/2024/CVE-2024-12638.md
index febb860d4bd..8b00a7895f1 100644
--- a/2024/CVE-2024-12638.md
+++ b/2024/CVE-2024-12638.md
@@ -15,3 +15,5 @@ The Bulk Me Now! WordPress plugin through 2.0 does not sanitise and escape a par
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12638.yaml
diff --git a/2024/CVE-2024-12724.md b/2024/CVE-2024-12724.md
index 08e4bcc9904..5b42362588d 100644
--- a/2024/CVE-2024-12724.md
+++ b/2024/CVE-2024-12724.md
@@ -15,3 +15,5 @@ The WP DeskLite  WordPress plugin through 1.0.0 does not sanitise and escape a p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12724.yaml
diff --git a/2024/CVE-2024-12732.md b/2024/CVE-2024-12732.md
index 0fcf4f5165b..96b5479b802 100644
--- a/2024/CVE-2024-12732.md
+++ b/2024/CVE-2024-12732.md
@@ -15,3 +15,5 @@ The AffiliateImporterEb WordPress plugin through 1.0.6 does not sanitise and esc
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12732.yaml
diff --git a/2024/CVE-2024-12734.md b/2024/CVE-2024-12734.md
index ee2bc1e0b03..00b16bf3665 100644
--- a/2024/CVE-2024-12734.md
+++ b/2024/CVE-2024-12734.md
@@ -15,3 +15,5 @@ The Advance Post Prefix WordPress plugin through 1.1.1, Advance Post Prefix Word
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12734.yaml
diff --git a/2024/CVE-2024-12737.md b/2024/CVE-2024-12737.md
index 0ae7a962fd7..0f6c3f001a5 100644
--- a/2024/CVE-2024-12737.md
+++ b/2024/CVE-2024-12737.md
@@ -15,3 +15,5 @@ The WP BASE Booking of Appointments, Services and Events WordPress plugin before
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12737.yaml
diff --git a/2024/CVE-2024-12749.md b/2024/CVE-2024-12749.md
index ddccf07ce0d..9cf832af456 100644
--- a/2024/CVE-2024-12749.md
+++ b/2024/CVE-2024-12749.md
@@ -15,3 +15,5 @@ The Competition Form WordPress plugin through 2.0 does not sanitise and escape a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12749.yaml
diff --git a/2024/CVE-2024-12824.md b/2024/CVE-2024-12824.md
index fe2e8c583e4..3dfa071ba54 100644
--- a/2024/CVE-2024-12824.md
+++ b/2024/CVE-2024-12824.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12824.yaml
diff --git a/2024/CVE-2024-12849.md b/2024/CVE-2024-12849.md
index 68ae3a40bb5..3ab25f2bd51 100644
--- a/2024/CVE-2024-12849.md
+++ b/2024/CVE-2024-12849.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/Nxploited/CVE-2024-12849-Poc
 - https://github.com/RandomRobbieBF/CVE-2024-12849
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12849.yaml
diff --git a/2024/CVE-2024-12873.md b/2024/CVE-2024-12873.md
index 03eae919ac2..bf72cc1d743 100644
--- a/2024/CVE-2024-12873.md
+++ b/2024/CVE-2024-12873.md
@@ -15,3 +15,5 @@ The Custom Field Manager WordPress plugin through 1.0 does not sanitise and esca
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12873.yaml
diff --git a/2024/CVE-2024-12878.md b/2024/CVE-2024-12878.md
index f57492ea687..c07f82f6a81 100644
--- a/2024/CVE-2024-12878.md
+++ b/2024/CVE-2024-12878.md
@@ -15,3 +15,5 @@ The Custom Block Builder  WordPress plugin before 3.8.3 does not sanitise and es
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12878.yaml
diff --git a/2024/CVE-2024-12987.md b/2024/CVE-2024-12987.md
index 524e20be279..a98bd1d4cad 100644
--- a/2024/CVE-2024-12987.md
+++ b/2024/CVE-2024-12987.md
@@ -19,3 +19,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12987.yaml
diff --git a/2024/CVE-2024-13055.md b/2024/CVE-2024-13055.md
index bd0e9a99c2d..a7154fe3bb5 100644
--- a/2024/CVE-2024-13055.md
+++ b/2024/CVE-2024-13055.md
@@ -15,3 +15,5 @@ The Dyn Business Panel WordPress plugin through 1.0.0 does not sanitise and esca
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13055.yaml
diff --git a/2024/CVE-2024-13094.md b/2024/CVE-2024-13094.md
index 3518dc49100..718ea9107c2 100644
--- a/2024/CVE-2024-13094.md
+++ b/2024/CVE-2024-13094.md
@@ -15,3 +15,5 @@ The WP Triggers Lite WordPress plugin through 2.5.3 does not sanitise and escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13094.yaml
diff --git a/2024/CVE-2024-13097.md b/2024/CVE-2024-13097.md
index d652df39c61..d1eb9432474 100644
--- a/2024/CVE-2024-13097.md
+++ b/2024/CVE-2024-13097.md
@@ -15,3 +15,5 @@ The WP Finance WordPress plugin through 1.3.6 does not sanitise and escape a par
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13097.yaml
diff --git a/2024/CVE-2024-13098.md b/2024/CVE-2024-13098.md
index 61454542f6e..7488e134299 100644
--- a/2024/CVE-2024-13098.md
+++ b/2024/CVE-2024-13098.md
@@ -15,3 +15,5 @@ The WordPress Email Newsletter WordPress plugin through 1.1 does not sanitise an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13098.yaml
diff --git a/2024/CVE-2024-13099.md b/2024/CVE-2024-13099.md
index 87c973b76af..8c816408444 100644
--- a/2024/CVE-2024-13099.md
+++ b/2024/CVE-2024-13099.md
@@ -15,3 +15,5 @@ The Widget4Call WordPress plugin through 1.0.7 does not sanitise and escape a pa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13099.yaml
diff --git a/2024/CVE-2024-13112.md b/2024/CVE-2024-13112.md
index ee2cc5e69dc..f09c971d86d 100644
--- a/2024/CVE-2024-13112.md
+++ b/2024/CVE-2024-13112.md
@@ -15,3 +15,5 @@ The WP MediaTagger WordPress plugin through 4.1.1 does not sanitise and escape a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13112.yaml
diff --git a/2024/CVE-2024-13114.md b/2024/CVE-2024-13114.md
index 073300e6da4..3d0a40179a2 100644
--- a/2024/CVE-2024-13114.md
+++ b/2024/CVE-2024-13114.md
@@ -15,3 +15,5 @@ The WP Projects Portfolio with Client Testimonials WordPress plugin through 3.0
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13114.yaml
diff --git a/2024/CVE-2024-13126.md b/2024/CVE-2024-13126.md
index 43a551ba66e..e7930422cfb 100644
--- a/2024/CVE-2024-13126.md
+++ b/2024/CVE-2024-13126.md
@@ -15,3 +15,5 @@ The Download Manager WordPress plugin before 3.3.07 doesn't prevent directory li
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13126.yaml
diff --git a/2024/CVE-2024-13159.md b/2024/CVE-2024-13159.md
index 26f855a9d50..090d9590209 100644
--- a/2024/CVE-2024-13159.md
+++ b/2024/CVE-2024-13159.md
@@ -16,3 +16,5 @@ Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Upda
 #### Github
 - https://github.com/horizon3ai/Ivanti-EPM-Coercion-Vulnerabilities
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13159.yaml
diff --git a/2024/CVE-2024-13160.md b/2024/CVE-2024-13160.md
index 3cce0fd90de..1ceeea29473 100644
--- a/2024/CVE-2024-13160.md
+++ b/2024/CVE-2024-13160.md
@@ -16,3 +16,5 @@ Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Upda
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13160.yaml
diff --git a/2024/CVE-2024-13161.md b/2024/CVE-2024-13161.md
index ab25079cef2..ebccf2fe6be 100644
--- a/2024/CVE-2024-13161.md
+++ b/2024/CVE-2024-13161.md
@@ -16,3 +16,5 @@ Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Upda
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13161.yaml
diff --git a/2024/CVE-2024-13219.md b/2024/CVE-2024-13219.md
index 3ce80cf8ef6..f4514168d89 100644
--- a/2024/CVE-2024-13219.md
+++ b/2024/CVE-2024-13219.md
@@ -15,3 +15,5 @@ The Privacy Policy Genius WordPress plugin through 2.0.4 does not sanitise and e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13219.yaml
diff --git a/2024/CVE-2024-13220.md b/2024/CVE-2024-13220.md
index 5f7bf436211..50f642e336f 100644
--- a/2024/CVE-2024-13220.md
+++ b/2024/CVE-2024-13220.md
@@ -15,3 +15,5 @@ The WordPress Google Map Professional (Map In Your Language) WordPress plugin th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13220.yaml
diff --git a/2024/CVE-2024-13221.md b/2024/CVE-2024-13221.md
index f1a329780a4..71b8de792f4 100644
--- a/2024/CVE-2024-13221.md
+++ b/2024/CVE-2024-13221.md
@@ -15,3 +15,5 @@ The Fantastic ElasticSearch WordPress plugin through 4.1.0 does not sanitise and
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13221.yaml
diff --git a/2024/CVE-2024-13222.md b/2024/CVE-2024-13222.md
index 51d40fa066b..dbbc9e78bab 100644
--- a/2024/CVE-2024-13222.md
+++ b/2024/CVE-2024-13222.md
@@ -15,3 +15,5 @@ The User Messages WordPress plugin through 1.2.4 does not sanitise and escape a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13222.yaml
diff --git a/2024/CVE-2024-13224.md b/2024/CVE-2024-13224.md
index ef7304a65a4..1b3d953d4cd 100644
--- a/2024/CVE-2024-13224.md
+++ b/2024/CVE-2024-13224.md
@@ -15,3 +15,5 @@ The SlideDeck 1 Lite Content Slider WordPress plugin through 1.4.8 does not sani
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13224.yaml
diff --git a/2024/CVE-2024-13225.md b/2024/CVE-2024-13225.md
index 2319136162a..cbbe15c01d3 100644
--- a/2024/CVE-2024-13225.md
+++ b/2024/CVE-2024-13225.md
@@ -15,3 +15,5 @@ The ECT Home Page Products WordPress plugin through 1.9 does not sanitise and es
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13225.yaml
diff --git a/2024/CVE-2024-13226.md b/2024/CVE-2024-13226.md
index 1691763f671..e88bdfee376 100644
--- a/2024/CVE-2024-13226.md
+++ b/2024/CVE-2024-13226.md
@@ -15,3 +15,5 @@ The A5 Custom Login Page WordPress plugin through 2.8.1 does not sanitise and es
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13226.yaml
diff --git a/2024/CVE-2024-13322.md b/2024/CVE-2024-13322.md
index 5543f854e07..791705ebe87 100644
--- a/2024/CVE-2024-13322.md
+++ b/2024/CVE-2024-13322.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13322.yaml
diff --git a/2024/CVE-2024-13325.md b/2024/CVE-2024-13325.md
index 7e4f1e4a939..9f7d74bc7a7 100644
--- a/2024/CVE-2024-13325.md
+++ b/2024/CVE-2024-13325.md
@@ -15,3 +15,5 @@ The Glossy WordPress plugin through 2.3.5 does not sanitise and escape a paramet
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13325.yaml
diff --git a/2024/CVE-2024-13326.md b/2024/CVE-2024-13326.md
index 07fd653302a..baf6cd9126c 100644
--- a/2024/CVE-2024-13326.md
+++ b/2024/CVE-2024-13326.md
@@ -15,3 +15,5 @@ The iBuildApp WordPress plugin through 0.2.0 does not sanitise and escape a para
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13326.yaml
diff --git a/2024/CVE-2024-13327.md b/2024/CVE-2024-13327.md
index cd8dd089258..d6c95047538 100644
--- a/2024/CVE-2024-13327.md
+++ b/2024/CVE-2024-13327.md
@@ -15,3 +15,5 @@ The Musicbox WordPress plugin through 2.0.3 does not sanitise and escape a param
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13327.yaml
diff --git a/2024/CVE-2024-13328.md b/2024/CVE-2024-13328.md
index 1438a6f3eb5..5e23f1e2c47 100644
--- a/2024/CVE-2024-13328.md
+++ b/2024/CVE-2024-13328.md
@@ -15,3 +15,5 @@ The Giga Messenger  WordPress plugin through 2.3.1 does not sanitise and escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13328.yaml
diff --git a/2024/CVE-2024-13330.md b/2024/CVE-2024-13330.md
index 477929b7cf6..59927bafcd6 100644
--- a/2024/CVE-2024-13330.md
+++ b/2024/CVE-2024-13330.md
@@ -15,3 +15,5 @@ The JustRows free WordPress plugin through 0.2 does not sanitise and escape a pa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13330.yaml
diff --git a/2024/CVE-2024-13331.md b/2024/CVE-2024-13331.md
index b816d462584..56e832bb2fb 100644
--- a/2024/CVE-2024-13331.md
+++ b/2024/CVE-2024-13331.md
@@ -15,3 +15,5 @@ The WP Dream Carousel WordPress plugin through 1.0.1b does not sanitise and esca
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13331.yaml
diff --git a/2024/CVE-2024-13352.md b/2024/CVE-2024-13352.md
index 7e40728e752..f62a123de17 100644
--- a/2024/CVE-2024-13352.md
+++ b/2024/CVE-2024-13352.md
@@ -15,3 +15,5 @@ The Legull WordPress plugin through 1.2.2 does not sanitise and escape a paramet
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13352.yaml
diff --git a/2024/CVE-2024-13492.md b/2024/CVE-2024-13492.md
index b68c4bd565d..7668db895cb 100644
--- a/2024/CVE-2024-13492.md
+++ b/2024/CVE-2024-13492.md
@@ -15,3 +15,5 @@ The Guten Free Options WordPress plugin through 0.9.5 does not sanitise and esca
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13492.yaml
diff --git a/2024/CVE-2024-13496.md b/2024/CVE-2024-13496.md
index f7ab9049b82..2540fe18ef6 100644
--- a/2024/CVE-2024-13496.md
+++ b/2024/CVE-2024-13496.md
@@ -15,3 +15,5 @@ The GamiPress – Gamification plugin to reward points, achievements, badges & r
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13496.yaml
diff --git a/2024/CVE-2024-13543.md b/2024/CVE-2024-13543.md
index 634c115adf9..a8b8be67abc 100644
--- a/2024/CVE-2024-13543.md
+++ b/2024/CVE-2024-13543.md
@@ -15,3 +15,5 @@ The Zarinpal Paid Download WordPress plugin through 2.3 does not sanitise and es
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13543.yaml
diff --git a/2024/CVE-2024-13569.md b/2024/CVE-2024-13569.md
index c0de8b68f67..a485e134dd6 100644
--- a/2024/CVE-2024-13569.md
+++ b/2024/CVE-2024-13569.md
@@ -15,3 +15,5 @@ The Front End Users WordPress plugin through 3.2.32 does not sanitise and escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13569.yaml
diff --git a/2024/CVE-2024-13570.md b/2024/CVE-2024-13570.md
index 5f570c90f5f..54a39c7fcf3 100644
--- a/2024/CVE-2024-13570.md
+++ b/2024/CVE-2024-13570.md
@@ -15,3 +15,5 @@ The Stray Random Quotes WordPress plugin through 1.9.9 does not sanitise and esc
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13570.yaml
diff --git a/2024/CVE-2024-13609.md b/2024/CVE-2024-13609.md
index d57473828f7..3d376ee9a84 100644
--- a/2024/CVE-2024-13609.md
+++ b/2024/CVE-2024-13609.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13609.yaml
diff --git a/2024/CVE-2024-13619.md b/2024/CVE-2024-13619.md
index a3b9bdfe787..683d3a48e27 100644
--- a/2024/CVE-2024-13619.md
+++ b/2024/CVE-2024-13619.md
@@ -15,3 +15,5 @@ The LifterLMS  WordPress plugin before 8.0.1 does not sanitise and escape a para
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13619.yaml
diff --git a/2024/CVE-2024-13624.md b/2024/CVE-2024-13624.md
index d05c3ca1187..2a53d4d49a7 100644
--- a/2024/CVE-2024-13624.md
+++ b/2024/CVE-2024-13624.md
@@ -15,3 +15,5 @@ The WPMovieLibrary WordPress plugin through 2.1.4.8 does not sanitise and escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13624.yaml
diff --git a/2024/CVE-2024-13625.md b/2024/CVE-2024-13625.md
index d1e01285f7e..ab9720201c4 100644
--- a/2024/CVE-2024-13625.md
+++ b/2024/CVE-2024-13625.md
@@ -15,3 +15,5 @@ The Tube Video Ads Lite WordPress plugin through 1.5.7 does not sanitise and esc
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13625.yaml
diff --git a/2024/CVE-2024-13627.md b/2024/CVE-2024-13627.md
index 30ca3b5ba85..8907569ed44 100644
--- a/2024/CVE-2024-13627.md
+++ b/2024/CVE-2024-13627.md
@@ -15,3 +15,5 @@ The OWL Carousel Slider WordPress plugin through 2.2 does not sanitise and escap
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13627.yaml
diff --git a/2024/CVE-2024-13628.md b/2024/CVE-2024-13628.md
index 36e6d941d13..990985ea1d8 100644
--- a/2024/CVE-2024-13628.md
+++ b/2024/CVE-2024-13628.md
@@ -15,3 +15,5 @@ The WP Pricing Table WordPress plugin through 1.1 does not sanitise and escape a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13628.yaml
diff --git a/2024/CVE-2024-13630.md b/2024/CVE-2024-13630.md
index 6d6df27ea6c..5e0b8e3ddce 100644
--- a/2024/CVE-2024-13630.md
+++ b/2024/CVE-2024-13630.md
@@ -15,3 +15,5 @@ The NewsTicker WordPress plugin through 1.0 does not sanitise and escape a param
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13630.yaml
diff --git a/2024/CVE-2024-13634.md b/2024/CVE-2024-13634.md
index 4070bb7e800..b875f517ed2 100644
--- a/2024/CVE-2024-13634.md
+++ b/2024/CVE-2024-13634.md
@@ -15,3 +15,5 @@ The Post Sync WordPress plugin through 1.1 does not sanitise and escape a parame
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13634.yaml
diff --git a/2024/CVE-2024-13726.md b/2024/CVE-2024-13726.md
index c3dd1c6f359..3b893ad5b01 100644
--- a/2024/CVE-2024-13726.md
+++ b/2024/CVE-2024-13726.md
@@ -15,3 +15,5 @@ The  Coder  WordPress plugin through 1.3.4 does not properly sanitise and escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13726.yaml
diff --git a/2024/CVE-2024-13727.md b/2024/CVE-2024-13727.md
index b63951ff303..9d6e4bd845b 100644
--- a/2024/CVE-2024-13727.md
+++ b/2024/CVE-2024-13727.md
@@ -15,3 +15,5 @@ The MemberSpace  WordPress plugin before 2.1.14 does not sanitise and escape a p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13727.yaml
diff --git a/2024/CVE-2024-1380.md b/2024/CVE-2024-1380.md
index c0d5c275887..88ed56e6959 100644
--- a/2024/CVE-2024-1380.md
+++ b/2024/CVE-2024-1380.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2024-1380
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1380.yaml
diff --git a/2024/CVE-2024-13853.md b/2024/CVE-2024-13853.md
index 95c83d6593a..a6d2eda3122 100644
--- a/2024/CVE-2024-13853.md
+++ b/2024/CVE-2024-13853.md
@@ -15,3 +15,5 @@ The SEO Tools WordPress plugin through 4.0.7 does not sanitise and escape a para
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13853.yaml
diff --git a/2024/CVE-2024-13888.md b/2024/CVE-2024-13888.md
index eced36b234c..9314a4fb557 100644
--- a/2024/CVE-2024-13888.md
+++ b/2024/CVE-2024-13888.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13888.yaml
diff --git a/2024/CVE-2024-13979.md b/2024/CVE-2024-13979.md
index aaaf223c634..1cadba4e32d 100644
--- a/2024/CVE-2024-13979.md
+++ b/2024/CVE-2024-13979.md
@@ -16,3 +16,5 @@ A SQL injection vulnerability exists in the St. Joe ERP system ("圣乔ERP系统
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13979.yaml
diff --git a/2024/CVE-2024-13985.md b/2024/CVE-2024-13985.md
index 1aefccce400..901173feb56 100644
--- a/2024/CVE-2024-13985.md
+++ b/2024/CVE-2024-13985.md
@@ -16,3 +16,5 @@ A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13985.yaml
diff --git a/2024/CVE-2024-1483.md b/2024/CVE-2024-1483.md
index 038a295d83a..9c27e555f49 100644
--- a/2024/CVE-2024-1483.md
+++ b/2024/CVE-2024-1483.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1483.yaml
diff --git a/2024/CVE-2024-1512.md b/2024/CVE-2024-1512.md
index 3bd3b27a779..37da3325867 100644
--- a/2024/CVE-2024-1512.md
+++ b/2024/CVE-2024-1512.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/rat-c/CVE-2024-1512
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1512.yaml
diff --git a/2024/CVE-2024-1561.md b/2024/CVE-2024-1561.md
index 401b6073bab..0a55b0e78a3 100644
--- a/2024/CVE-2024-1561.md
+++ b/2024/CVE-2024-1561.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/DiabloHTB/CVE-2024-1561
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1561.yaml
diff --git a/2024/CVE-2024-1698.md b/2024/CVE-2024-1698.md
index 0627b258968..9c78781cfb9 100644
--- a/2024/CVE-2024-1698.md
+++ b/2024/CVE-2024-1698.md
@@ -18,3 +18,5 @@ The NotificationX – Best FOMO, Social Proof, WooCommerce Sales Popup & Notific
 - https://github.com/kamranhasan/CVE-2024-1698-Exploit
 - https://github.com/shanglyu/CVE-2024-1698
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1698.yaml
diff --git a/2024/CVE-2024-1708.md b/2024/CVE-2024-1708.md
index a7d8c98af1e..66c5b3d884e 100644
--- a/2024/CVE-2024-1708.md
+++ b/2024/CVE-2024-1708.md
@@ -18,3 +18,5 @@ ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulner
 - https://github.com/cjybao/CVE-2024-1709-and-CVE-2024-1708
 - https://github.com/watchtowrlabs/connectwise-screenconnect_auth-bypass-add-user-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1708.yaml
diff --git a/2024/CVE-2024-1709.md b/2024/CVE-2024-1709.md
index 75e60035bdf..aa7331c61dd 100644
--- a/2024/CVE-2024-1709.md
+++ b/2024/CVE-2024-1709.md
@@ -26,3 +26,5 @@ ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Byp
 - https://github.com/cjybao/CVE-2024-1709-and-CVE-2024-1708
 - https://github.com/sxyrxyy/CVE-2024-1709-ConnectWise-ScreenConnect-Authentication-Bypass
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1709.yaml
diff --git a/2024/CVE-2024-1728.md b/2024/CVE-2024-1728.md
index bc337dd7bb4..33da9ffcd22 100644
--- a/2024/CVE-2024-1728.md
+++ b/2024/CVE-2024-1728.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1728.yaml
diff --git a/2024/CVE-2024-1751.md b/2024/CVE-2024-1751.md
index 6255c1b97aa..3fbc12ec982 100644
--- a/2024/CVE-2024-1751.md
+++ b/2024/CVE-2024-1751.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1751.yaml
diff --git a/2024/CVE-2024-20404.md b/2024/CVE-2024-20404.md
index 9d3a9e0df63..3ccf04e8b5d 100644
--- a/2024/CVE-2024-20404.md
+++ b/2024/CVE-2024-20404.md
@@ -11,7 +11,9 @@
 
 ### Description
 
-A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an affected system.

 This vulnerability is due to insufficient validation of user-supplied input for specific HTTP requests that are sent to an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to obtain limited sensitive information for services that are associated to the affected device.
+A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an affected system.
+
+ This vulnerability is due to insufficient validation of user-supplied input for specific HTTP requests that are sent to an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to obtain limited sensitive information for services that are associated to the affected device.
 
 ### POC
 
@@ -21,3 +23,5 @@ No PoCs from references.
 #### Github
 - https://github.com/AbdElRahmanEzzat1995/CVE-2024-20404
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-20404.yaml
diff --git a/2024/CVE-2024-20419.md b/2024/CVE-2024-20419.md
index c816287edcc..7467e5989b3 100644
--- a/2024/CVE-2024-20419.md
+++ b/2024/CVE-2024-20419.md
@@ -5,7 +5,9 @@
 
 ### Description
 
-A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users.

 This vulnerability is due to improper implementation of the password-change process. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow an attacker to access the web UI or API with the privileges of the compromised user.
+A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users.
+
+ This vulnerability is due to improper implementation of the password-change process. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow an attacker to access the web UI or API with the privileges of the compromised user.
 
 ### POC
 
@@ -15,3 +17,5 @@ A vulnerability in the authentication system of Cisco Smart Software Manager On-
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-20419.yaml
diff --git a/2024/CVE-2024-20439.md b/2024/CVE-2024-20439.md
index b5d1af3531e..2a56aaf482a 100644
--- a/2024/CVE-2024-20439.md
+++ b/2024/CVE-2024-20439.md
@@ -8,7 +8,9 @@
 
 ### Description
 
-A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a static administrative credential.

 This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could exploit this vulnerability by using the static credentials to login to the affected system. A successful exploit could allow the attacker to login to the affected system with administrative rights over the CSLU application API.
+A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a static administrative credential.
+
+ This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could exploit this vulnerability by using the static credentials to login to the affected system. A successful exploit could allow the attacker to login to the affected system with administrative rights over the CSLU application API.
 
 ### POC
 
@@ -18,3 +20,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-20439.yaml
diff --git a/2024/CVE-2024-20440.md b/2024/CVE-2024-20440.md
index 34125c61406..536094a8fda 100644
--- a/2024/CVE-2024-20440.md
+++ b/2024/CVE-2024-20440.md
@@ -7,7 +7,9 @@
 
 ### Description
 
-A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information.

This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain log files that contain sensitive data, including credentials that can be used to access the API.
+A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information.
+
+This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain log files that contain sensitive data, including credentials that can be used to access the API.
 
 ### POC
 
@@ -17,3 +19,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-20440.yaml
diff --git a/2024/CVE-2024-2053.md b/2024/CVE-2024-2053.md
index 03d5f55f3bb..15b0e9a3bd3 100644
--- a/2024/CVE-2024-2053.md
+++ b/2024/CVE-2024-2053.md
@@ -17,3 +17,5 @@ The Artica Proxy administrative web application will deserialize arbitrary PHP o
 #### Github
 - https://github.com/b-L-x/CVE-2024-2053
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2053.yaml
diff --git a/2024/CVE-2024-20767.md b/2024/CVE-2024-20767.md
index 3e6962d9be3..356a2851a14 100644
--- a/2024/CVE-2024-20767.md
+++ b/2024/CVE-2024-20767.md
@@ -22,3 +22,5 @@ No PoCs from references.
 - https://github.com/m-cetin/CVE-2024-20767
 - https://github.com/yoryio/CVE-2024-20767
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-20767.yaml
diff --git a/2024/CVE-2024-21136.md b/2024/CVE-2024-21136.md
index 5b4b2e3f29d..6054bd01083 100644
--- a/2024/CVE-2024-21136.md
+++ b/2024/CVE-2024-21136.md
@@ -19,3 +19,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21136.yaml
diff --git a/2024/CVE-2024-21485.md b/2024/CVE-2024-21485.md
index ba253771109..2b37e67b57d 100644
--- a/2024/CVE-2024-21485.md
+++ b/2024/CVE-2024-21485.md
@@ -7,7 +7,11 @@
 
 ### Description
 
-Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.16 are vulnerable to Cross-site Scripting (XSS) when the href of the a tag is controlled by an adversary. An authenticated attacker who stores a view that exploits this vulnerability could steal the data that's visible to another user who opens that view - not just the data already included on the page, but they could also, in theory, make additional requests and access other data accessible to this user. In some cases, they could also steal the access tokens of that user, which would allow the attacker to act as that user, including viewing other apps and resources hosted on the same server.

**Note:**

This is only exploitable in Dash apps that include some mechanism to store user input to be reloaded by a different user.
+Versions of the package dash-core-components before 2.13.0; versions of the package dash-core-components before 2.0.0; versions of the package dash before 2.15.0; versions of the package dash-html-components before 2.0.0; versions of the package dash-html-components before 2.0.16 are vulnerable to Cross-site Scripting (XSS) when the href of the a tag is controlled by an adversary. An authenticated attacker who stores a view that exploits this vulnerability could steal the data that's visible to another user who opens that view - not just the data already included on the page, but they could also, in theory, make additional requests and access other data accessible to this user. In some cases, they could also steal the access tokens of that user, which would allow the attacker to act as that user, including viewing other apps and resources hosted on the same server.
+
+**Note:**
+
+This is only exploitable in Dash apps that include some mechanism to store user input to be reloaded by a different user.
 
 ### POC
 
@@ -21,3 +25,5 @@ Versions of the package dash-core-components before 2.13.0; versions of the pack
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21485.yaml
diff --git a/2024/CVE-2024-21633.md b/2024/CVE-2024-21633.md
index d87cde3f12a..4d2057cd54e 100644
--- a/2024/CVE-2024-21633.md
+++ b/2024/CVE-2024-21633.md
@@ -16,3 +16,5 @@ Apktool is a tool for reverse engineering Android APK files. In versions 2.9.1 a
 #### Github
 - https://github.com/0x33c0unt/CVE-2024-21633
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21633.yaml
diff --git a/2024/CVE-2024-21641.md b/2024/CVE-2024-21641.md
index 5121ea89c82..47f63d4e328 100644
--- a/2024/CVE-2024-21641.md
+++ b/2024/CVE-2024-21641.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21641.yaml
diff --git a/2024/CVE-2024-21644.md b/2024/CVE-2024-21644.md
index 014851055c1..3165317b965 100644
--- a/2024/CVE-2024-21644.md
+++ b/2024/CVE-2024-21644.md
@@ -15,3 +15,5 @@ pyLoad is the free and open-source Download Manager written in pure Python. Any
 #### Github
 - https://github.com/ltranquility/CVE-2024-21644-Poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21644.yaml
diff --git a/2024/CVE-2024-21645.md b/2024/CVE-2024-21645.md
index a1860e7d2e3..1a66c7b968d 100644
--- a/2024/CVE-2024-21645.md
+++ b/2024/CVE-2024-21645.md
@@ -15,3 +15,5 @@ pyLoad is the free and open-source Download Manager written in pure Python. A lo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21645.yaml
diff --git a/2024/CVE-2024-21650.md b/2024/CVE-2024-21650.md
index f3598c21429..6ef03d6a074 100644
--- a/2024/CVE-2024-21650.md
+++ b/2024/CVE-2024-21650.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21650.yaml
diff --git a/2024/CVE-2024-21683.md b/2024/CVE-2024-21683.md
index 23d6bceeb4d..1b7cbf46bc7 100644
--- a/2024/CVE-2024-21683.md
+++ b/2024/CVE-2024-21683.md
@@ -44,3 +44,5 @@ No PoCs from references.
 - https://github.com/phucrio/CVE-2024-21683-RCE
 - https://github.com/r00t7oo2jm/-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21683.yaml
diff --git a/2024/CVE-2024-21887.md b/2024/CVE-2024-21887.md
index 0034a8dd6f1..880489e71a2 100644
--- a/2024/CVE-2024-21887.md
+++ b/2024/CVE-2024-21887.md
@@ -25,3 +25,5 @@ A command injection vulnerability in web components of Ivanti Connect Secure (9.
 - https://github.com/rxwx/pulse-meter
 - https://github.com/stephen-murcott/Ivanti-ICT-Snapshot-decryption
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21887.yaml
diff --git a/2024/CVE-2024-21893.md b/2024/CVE-2024-21893.md
index 68b02137b76..d1e0b041169 100644
--- a/2024/CVE-2024-21893.md
+++ b/2024/CVE-2024-21893.md
@@ -30,3 +30,5 @@ No PoCs from references.
 - https://github.com/Chocapikk/CVE-2024-21893-to-CVE-2024-21887
 - https://github.com/h4x0r-dz/CVE-2024-21893.py
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21893.yaml
diff --git a/2024/CVE-2024-22024.md b/2024/CVE-2024-22024.md
index aa4c2d8f5d8..34f9b8a2b6a 100644
--- a/2024/CVE-2024-22024.md
+++ b/2024/CVE-2024-22024.md
@@ -30,3 +30,5 @@ No PoCs from references.
 - https://github.com/0dteam/CVE-2024-22024
 - https://github.com/tequilasunsh1ne/ivanti_CVE_2024_22024
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22024.yaml
diff --git a/2024/CVE-2024-22120.md b/2024/CVE-2024-22120.md
index fb682acf4ce..5df715ba2e5 100644
--- a/2024/CVE-2024-22120.md
+++ b/2024/CVE-2024-22120.md
@@ -19,3 +19,5 @@ Zabbix server can perform command execution for configured scripts. After comman
 - https://github.com/g4nkd/CVE-2024-22120-RCE-with-gopher
 - https://github.com/isPique/CVE-2024-22120-RCE-with-gopher
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-22120.yaml
diff --git a/2024/CVE-2024-22207.md b/2024/CVE-2024-22207.md
index e8c410e1ebf..fc5b381b578 100644
--- a/2024/CVE-2024-22207.md
+++ b/2024/CVE-2024-22207.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22207.yaml
diff --git a/2024/CVE-2024-22320.md b/2024/CVE-2024-22320.md
index d8f2bf98520..854c012fa17 100644
--- a/2024/CVE-2024-22320.md
+++ b/2024/CVE-2024-22320.md
@@ -15,3 +15,5 @@ IBM Operational Decision Manager 8.10.3 could allow a remote authenticated attac
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22320.yaml
diff --git a/2024/CVE-2024-22476.md b/2024/CVE-2024-22476.md
index 8a0824904d0..d1c8c7b347c 100644
--- a/2024/CVE-2024-22476.md
+++ b/2024/CVE-2024-22476.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22476.yaml
diff --git a/2024/CVE-2024-22729.md b/2024/CVE-2024-22729.md
index 0da538bae45..b8842d3756f 100644
--- a/2024/CVE-2024-22729.md
+++ b/2024/CVE-2024-22729.md
@@ -15,3 +15,5 @@ NETIS SYSTEMS MW5360 V1.0.1.3031 was discovered to contain a command injection v
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22729.yaml
diff --git a/2024/CVE-2024-22927.md b/2024/CVE-2024-22927.md
index e361bed382e..bbc3b0d8877 100644
--- a/2024/CVE-2024-22927.md
+++ b/2024/CVE-2024-22927.md
@@ -15,3 +15,5 @@ Cross Site Scripting (XSS) vulnerability in the func parameter in eyoucms v.1.6.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22927.yaml
diff --git a/2024/CVE-2024-23055.md b/2024/CVE-2024-23055.md
index 010e9c24dec..29ed035b750 100644
--- a/2024/CVE-2024-23055.md
+++ b/2024/CVE-2024-23055.md
@@ -15,3 +15,5 @@ An issue in Plone Docker Official Image 5.2.13 (5221) open-source software allow
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-23055.yaml
diff --git a/2024/CVE-2024-23108.md b/2024/CVE-2024-23108.md
index 7ed9a9839da..e36b7a3a835 100644
--- a/2024/CVE-2024-23108.md
+++ b/2024/CVE-2024-23108.md
@@ -20,3 +20,5 @@ An improper neutralization of special elements used in an os command ('os comman
 #### Github
 - https://github.com/hitem/CVE-2024-23108
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2024/CVE-2024-23108.yaml
diff --git a/2024/CVE-2024-2330.md b/2024/CVE-2024-2330.md
index 8d99b437803..133621d6217 100644
--- a/2024/CVE-2024-2330.md
+++ b/2024/CVE-2024-2330.md
@@ -16,3 +16,5 @@ Es wurde eine Schwachstelle in Netentsec NS-ASG Application Security Gateway 6.3
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2330.yaml
diff --git a/2024/CVE-2024-23334.md b/2024/CVE-2024-23334.md
index 4a60045fb76..e5e0bdd55dd 100644
--- a/2024/CVE-2024-23334.md
+++ b/2024/CVE-2024-23334.md
@@ -28,3 +28,5 @@ aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.
 - https://github.com/wizarddos/CVE-2024-23334
 - https://github.com/z3rObyte/CVE-2024-23334-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-23334.yaml
diff --git a/2024/CVE-2024-2340.md b/2024/CVE-2024-2340.md
index 94cee677ddf..db554b99e49 100644
--- a/2024/CVE-2024-2340.md
+++ b/2024/CVE-2024-2340.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2340.yaml
diff --git a/2024/CVE-2024-23692.md b/2024/CVE-2024-23692.md
index c3b8c04c61d..2c24a667259 100644
--- a/2024/CVE-2024-23692.md
+++ b/2024/CVE-2024-23692.md
@@ -32,3 +32,5 @@ Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a t
 - https://github.com/vanboomqi/CVE-2024-23692
 - https://github.com/verylazytech/CVE-2024-23692
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-23692.yaml
diff --git a/2024/CVE-2024-2389.md b/2024/CVE-2024-2389.md
index 5ef95515003..d32faa9db3f 100644
--- a/2024/CVE-2024-2389.md
+++ b/2024/CVE-2024-2389.md
@@ -19,3 +19,5 @@ No PoCs from references.
 - https://github.com/YN1337/exploit
 - https://github.com/adhikara13/CVE-2024-2389
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2389.yaml
diff --git a/2024/CVE-2024-23897.md b/2024/CVE-2024-23897.md
index 75b2030ba60..a5ce0f24146 100644
--- a/2024/CVE-2024-23897.md
+++ b/2024/CVE-2024-23897.md
@@ -62,3 +62,5 @@ Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of
 - https://github.com/yoryio/CVE-2024-23897
 - https://github.com/MachiavelliII/CVE-2024-23897
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2024/CVE-2024-23897.yaml
diff --git a/2024/CVE-2024-23917.md b/2024/CVE-2024-23917.md
index d1aae594c4c..f35d4af3718 100644
--- a/2024/CVE-2024-23917.md
+++ b/2024/CVE-2024-23917.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-23917.yaml
diff --git a/2024/CVE-2024-24112.md b/2024/CVE-2024-24112.md
index aac289c8485..f18002a1526 100644
--- a/2024/CVE-2024-24112.md
+++ b/2024/CVE-2024-24112.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24112.yaml
diff --git a/2024/CVE-2024-24116.md b/2024/CVE-2024-24116.md
index a2bd4b6454a..119dc1de44b 100644
--- a/2024/CVE-2024-24116.md
+++ b/2024/CVE-2024-24116.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24116.yaml
diff --git a/2024/CVE-2024-24131.md b/2024/CVE-2024-24131.md
index 9fa2367438e..5f7a291536d 100644
--- a/2024/CVE-2024-24131.md
+++ b/2024/CVE-2024-24131.md
@@ -15,3 +15,5 @@ SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site sc
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24131.yaml
diff --git a/2024/CVE-2024-24328.md b/2024/CVE-2024-24328.md
index 2a4273562c6..69ef529025d 100644
--- a/2024/CVE-2024-24328.md
+++ b/2024/CVE-2024-24328.md
@@ -16,3 +16,5 @@ TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command inje
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24328.yaml
diff --git a/2024/CVE-2024-24329.md b/2024/CVE-2024-24329.md
index 550fb331811..096f483983a 100644
--- a/2024/CVE-2024-24329.md
+++ b/2024/CVE-2024-24329.md
@@ -16,3 +16,5 @@ TOTOLINK A3300R V17.0.0cu.557_B20221024 was discovered to contain a command inje
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24329.yaml
diff --git a/2024/CVE-2024-24565.md b/2024/CVE-2024-24565.md
index ccc02a4e076..e153659f7b7 100644
--- a/2024/CVE-2024-24565.md
+++ b/2024/CVE-2024-24565.md
@@ -22,3 +22,5 @@ CrateDB is a distributed SQL database that makes it simple to store and analyze
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24565.yaml
diff --git a/2024/CVE-2024-2473.md b/2024/CVE-2024-2473.md
index 63fd6fee073..f43660f55a0 100644
--- a/2024/CVE-2024-2473.md
+++ b/2024/CVE-2024-2473.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2473.yaml
diff --git a/2024/CVE-2024-24759.md b/2024/CVE-2024-24759.md
index 2642d3a9421..64e3eb98c4e 100644
--- a/2024/CVE-2024-24759.md
+++ b/2024/CVE-2024-24759.md
@@ -16,3 +16,5 @@ MindsDB is a platform for building artificial intelligence from enterprise data.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24759.yaml
diff --git a/2024/CVE-2024-24763.md b/2024/CVE-2024-24763.md
index e28c333976f..657ac7c28ee 100644
--- a/2024/CVE-2024-24763.md
+++ b/2024/CVE-2024-24763.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24763.yaml
diff --git a/2024/CVE-2024-24809.md b/2024/CVE-2024-24809.md
index 3e242d40218..ad0e9b23d33 100644
--- a/2024/CVE-2024-24809.md
+++ b/2024/CVE-2024-24809.md
@@ -17,3 +17,5 @@ Traccar is an open source GPS tracking system. Versions prior to 6.0 are vulnera
 - https://github.com/fa-rrel/CVE-2024-24809-Proof-of-concept
 - https://github.com/gh-ost00/CVE-2024-24809-Proof-of-concept
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24809.yaml
diff --git a/2024/CVE-2024-24882.md b/2024/CVE-2024-24882.md
index b3823543947..a1dc16e0dcd 100644
--- a/2024/CVE-2024-24882.md
+++ b/2024/CVE-2024-24882.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24882.yaml
diff --git a/2024/CVE-2024-24919.md b/2024/CVE-2024-24919.md
index 7bca272dc4f..d4e2618c663 100644
--- a/2024/CVE-2024-24919.md
+++ b/2024/CVE-2024-24919.md
@@ -72,3 +72,5 @@ Potentially allowing an attacker to read certain information on Check Point Secu
 - https://github.com/zam89/CVE-2024-24919
 - https://github.com/zxcod3/CVE-2024-24919
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24919.yaml
diff --git a/2024/CVE-2024-25600.md b/2024/CVE-2024-25600.md
index f8dc21ab303..764957410e9 100644
--- a/2024/CVE-2024-25600.md
+++ b/2024/CVE-2024-25600.md
@@ -30,3 +30,5 @@ Improper Control of Generation of Code ('Code Injection') vulnerability in Codee
 - https://github.com/svchostmm/CVE-2024-25600-mass
 - https://github.com/wh6amiGit/CVE-2024-25600
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-25600.yaml
diff --git a/2024/CVE-2024-25723.md b/2024/CVE-2024-25723.md
index 403529b2865..410ac84f474 100644
--- a/2024/CVE-2024-25723.md
+++ b/2024/CVE-2024-25723.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/david-botelho-mariano/exploit-CVE-2024-25723
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-25723.yaml
diff --git a/2024/CVE-2024-25735.md b/2024/CVE-2024-25735.md
index b4058716bb7..90403bf9ac4 100644
--- a/2024/CVE-2024-25735.md
+++ b/2024/CVE-2024-25735.md
@@ -16,3 +16,5 @@ An issue was discovered on WyreStorm Apollo VX20 devices before 1.3.58. Remote a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-25735.yaml
diff --git a/2024/CVE-2024-25852.md b/2024/CVE-2024-25852.md
index 7d70b3993a7..badd2eb64e1 100644
--- a/2024/CVE-2024-25852.md
+++ b/2024/CVE-2024-25852.md
@@ -18,3 +18,5 @@ Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerabili
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-25852.yaml
diff --git a/2024/CVE-2024-2621.md b/2024/CVE-2024-2621.md
index a746503bc95..ab8befa59a9 100644
--- a/2024/CVE-2024-2621.md
+++ b/2024/CVE-2024-2621.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2621.yaml
diff --git a/2024/CVE-2024-26291.md b/2024/CVE-2024-26291.md
index dd02d9ed128..119289578ef 100644
--- a/2024/CVE-2024-26291.md
+++ b/2024/CVE-2024-26291.md
@@ -18,3 +18,5 @@ An Unauthenticated Arbitrary File Read vulnerability affects theAgent when insta
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-26291.yaml
diff --git a/2024/CVE-2024-26331.md b/2024/CVE-2024-26331.md
index fbda8b2fb65..34913a9b4e2 100644
--- a/2024/CVE-2024-26331.md
+++ b/2024/CVE-2024-26331.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-26331.yaml
diff --git a/2024/CVE-2024-2667.md b/2024/CVE-2024-2667.md
index 25e7c19e902..d39868a538a 100644
--- a/2024/CVE-2024-2667.md
+++ b/2024/CVE-2024-2667.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/Nxploited/CVE-2024-2667-Poc
 - https://github.com/Puvipavan/CVE-2024-2667
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2667.yaml
diff --git a/2024/CVE-2024-27115.md b/2024/CVE-2024-27115.md
index 5998ce0404f..5326a6caea0 100644
--- a/2024/CVE-2024-27115.md
+++ b/2024/CVE-2024-27115.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/theexploiters/CVE-2024-27115-Exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27115.yaml
diff --git a/2024/CVE-2024-27198.md b/2024/CVE-2024-27198.md
index 98a7020c8c9..b3bf8247fb7 100644
--- a/2024/CVE-2024-27198.md
+++ b/2024/CVE-2024-27198.md
@@ -33,3 +33,5 @@ In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform
 - https://github.com/rampantspark/CVE-2024-27198
 - https://github.com/yoryio/CVE-2024-27198
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27198.yaml
diff --git a/2024/CVE-2024-27199.md b/2024/CVE-2024-27199.md
index 5ec50f6640c..c790f9a0669 100644
--- a/2024/CVE-2024-27199.md
+++ b/2024/CVE-2024-27199.md
@@ -19,3 +19,5 @@ In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limite
 - https://github.com/W01fh4cker/CVE-2024-27198-RCE
 - https://github.com/chebuya/CVE-2024-30851-jasmin-ransomware-path-traversal-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27199.yaml
diff --git a/2024/CVE-2024-27292.md b/2024/CVE-2024-27292.md
index 68ae6e3b3b5..2dc0e933855 100644
--- a/2024/CVE-2024-27292.md
+++ b/2024/CVE-2024-27292.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/tequilasunsh1ne/CVE_2024_27292
 - https://github.com/th3gokul/CVE-2024-27292
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27292.yaml
diff --git a/2024/CVE-2024-27348.md b/2024/CVE-2024-27348.md
index ce860e39cd0..0a7b944418f 100644
--- a/2024/CVE-2024-27348.md
+++ b/2024/CVE-2024-27348.md
@@ -19,3 +19,5 @@ RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue
 - https://github.com/kljunowsky/CVE-2024-27348
 - https://github.com/p0et08/CVE-2024-27348
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27348.yaml
diff --git a/2024/CVE-2024-27443.md b/2024/CVE-2024-27443.md
index f513e6d5ed5..4c0eae58b02 100644
--- a/2024/CVE-2024-27443.md
+++ b/2024/CVE-2024-27443.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27443.yaml
diff --git a/2024/CVE-2024-27497.md b/2024/CVE-2024-27497.md
index 1158be65e42..db42d8b357d 100644
--- a/2024/CVE-2024-27497.md
+++ b/2024/CVE-2024-27497.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27497.yaml
diff --git a/2024/CVE-2024-27564.md b/2024/CVE-2024-27564.md
index 35f4f41cd17..0fbc7628608 100644
--- a/2024/CVE-2024-27564.md
+++ b/2024/CVE-2024-27564.md
@@ -18,3 +18,5 @@ pictureproxy.php in the dirk1983 mm1.ltd source code f9f4bbc allows SSRF via the
 - https://github.com/Quantum-Hacker/CVE-2024-27564
 - https://github.com/chaudhrymuhammadtayab/SSRF-Exploit-CVE-2024-27564
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27564.yaml
diff --git a/2024/CVE-2024-2771.md b/2024/CVE-2024-2771.md
index 9cececa4945..b63618752df 100644
--- a/2024/CVE-2024-2771.md
+++ b/2024/CVE-2024-2771.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/whale93/CVE-2024-2771-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2771.yaml
diff --git a/2024/CVE-2024-27718.md b/2024/CVE-2024-27718.md
index 8f3cdb4dc19..5703a24cf38 100644
--- a/2024/CVE-2024-27718.md
+++ b/2024/CVE-2024-27718.md
@@ -16,3 +16,5 @@ SQL Injection vulnerability in Baizhuo Network Smart s200 Management Platform v.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27718.yaml
diff --git a/2024/CVE-2024-2782.md b/2024/CVE-2024-2782.md
index 54066eed0ce..6a515a30e08 100644
--- a/2024/CVE-2024-2782.md
+++ b/2024/CVE-2024-2782.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/whale93/CVE-2024-2782-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2782.yaml
diff --git a/2024/CVE-2024-27954.md b/2024/CVE-2024-27954.md
index 929991fb5f9..819bb10213a 100644
--- a/2024/CVE-2024-27954.md
+++ b/2024/CVE-2024-27954.md
@@ -20,3 +20,5 @@ No PoCs from references.
 - https://github.com/gh-ost00/CVE-2024-27954
 - https://github.com/r0otk3r/CVE-2024-27954
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27954.yaml
diff --git a/2024/CVE-2024-27956.md b/2024/CVE-2024-27956.md
index 404b96822a2..5a53d92c39c 100644
--- a/2024/CVE-2024-27956.md
+++ b/2024/CVE-2024-27956.md
@@ -34,3 +34,5 @@ No PoCs from references.
 - https://github.com/m4nInTh3mIdDle/wordpress-CVE-2024-27956
 - https://github.com/truonghuuphuc/CVE-2024-27956
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27956.yaml
diff --git a/2024/CVE-2024-28000.md b/2024/CVE-2024-28000.md
index 8dc26865bfd..11c96291a5e 100644
--- a/2024/CVE-2024-28000.md
+++ b/2024/CVE-2024-28000.md
@@ -20,3 +20,5 @@ Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed
 - https://github.com/arch1m3d/CVE-2024-28000
 - https://github.com/ebrasha/CVE-2024-28000
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28000.yaml
diff --git a/2024/CVE-2024-28253.md b/2024/CVE-2024-28253.md
index f6680d7cba0..466f003b8b1 100644
--- a/2024/CVE-2024-28253.md
+++ b/2024/CVE-2024-28253.md
@@ -16,3 +16,5 @@ OpenMetadata is a unified platform for discovery, observability, and governance
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28253.yaml
diff --git a/2024/CVE-2024-28255.md b/2024/CVE-2024-28255.md
index 8ca2de54d3f..ba96f372b3d 100644
--- a/2024/CVE-2024-28255.md
+++ b/2024/CVE-2024-28255.md
@@ -18,3 +18,5 @@ OpenMetadata is a unified platform for discovery, observability, and governance
 - https://github.com/YongYe-Security/CVE-2024-28255
 - https://github.com/jakabakos/OpenMetadata-Auth-bypass
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28255.yaml
diff --git a/2024/CVE-2024-28397.md b/2024/CVE-2024-28397.md
index 7ad796369e5..23389e59cdf 100644
--- a/2024/CVE-2024-28397.md
+++ b/2024/CVE-2024-28397.md
@@ -29,3 +29,5 @@ An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows a
 - https://github.com/vitaciminIPI/CVE-2024-28397-RCE
 - https://github.com/waleed-hassan569/CVE-2024-28397-command-execution-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28397.yaml
diff --git a/2024/CVE-2024-2862.md b/2024/CVE-2024-2862.md
index b9a8346390b..5cbde0c975d 100644
--- a/2024/CVE-2024-2862.md
+++ b/2024/CVE-2024-2862.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2862.yaml
diff --git a/2024/CVE-2024-28623.md b/2024/CVE-2024-28623.md
index 6180e414062..5f1f37f4be9 100644
--- a/2024/CVE-2024-28623.md
+++ b/2024/CVE-2024-28623.md
@@ -16,3 +16,5 @@ RiteCMS v3.0.0 was discovered to contain a cross-site scripting (XSS) vulnerabil
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28623.yaml
diff --git a/2024/CVE-2024-2863.md b/2024/CVE-2024-2863.md
index 462696cd07f..1f73f02ee86 100644
--- a/2024/CVE-2024-2863.md
+++ b/2024/CVE-2024-2863.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2863.yaml
diff --git a/2024/CVE-2024-28734.md b/2024/CVE-2024-28734.md
index 707f8e7a51b..1e8e51a96fc 100644
--- a/2024/CVE-2024-28734.md
+++ b/2024/CVE-2024-28734.md
@@ -16,3 +16,5 @@ Cross Site Scripting vulnerability in Unit4 Financials by Coda prior to 2023Q4 a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28734.yaml
diff --git a/2024/CVE-2024-2876.md b/2024/CVE-2024-2876.md
index b350b0ab67e..80e4d7ca78f 100644
--- a/2024/CVE-2024-2876.md
+++ b/2024/CVE-2024-2876.md
@@ -25,3 +25,5 @@ No PoCs from references.
 - https://github.com/skyrowalker/CVE-2024-2876
 - https://github.com/zxcod3/CVE-2024-2876
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2876.yaml
diff --git a/2024/CVE-2024-2879.md b/2024/CVE-2024-2879.md
index d0494f808fc..b2a5b22601b 100644
--- a/2024/CVE-2024-2879.md
+++ b/2024/CVE-2024-2879.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/MataKucing-OFC/NemesisTools
 - https://github.com/herculeszxc/CVE-2024-2879
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2879.yaml
diff --git a/2024/CVE-2024-28986.md b/2024/CVE-2024-28986.md
index c15e15aa6ff..0cc150f389d 100644
--- a/2024/CVE-2024-28986.md
+++ b/2024/CVE-2024-28986.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28986.yaml
diff --git a/2024/CVE-2024-28987.md b/2024/CVE-2024-28987.md
index 4a4d861fc85..b5ad5b9e840 100644
--- a/2024/CVE-2024-28987.md
+++ b/2024/CVE-2024-28987.md
@@ -20,3 +20,5 @@ No PoCs from references.
 - https://github.com/gh-ost00/CVE-2024-28987-POC
 - https://github.com/horizon3ai/CVE-2024-28987
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28987.yaml
diff --git a/2024/CVE-2024-28995.md b/2024/CVE-2024-28995.md
index b479f56a560..086b6b7b155 100644
--- a/2024/CVE-2024-28995.md
+++ b/2024/CVE-2024-28995.md
@@ -26,3 +26,5 @@ No PoCs from references.
 - https://github.com/gotr00t0day/CVE-2024-28995
 - https://github.com/muhammetali20/CVE-2024-28995
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28995.yaml
diff --git a/2024/CVE-2024-29028.md b/2024/CVE-2024-29028.md
index e55f3578ebd..85d7bfc6a54 100644
--- a/2024/CVE-2024-29028.md
+++ b/2024/CVE-2024-29028.md
@@ -16,3 +16,5 @@ memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an S
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29028.yaml
diff --git a/2024/CVE-2024-29029.md b/2024/CVE-2024-29029.md
index 00ce96335ff..2a32b9405d7 100644
--- a/2024/CVE-2024-29029.md
+++ b/2024/CVE-2024-29029.md
@@ -17,3 +17,5 @@ memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an S
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29029.yaml
diff --git a/2024/CVE-2024-29030.md b/2024/CVE-2024-29030.md
index f79befa2075..44345ca57ff 100644
--- a/2024/CVE-2024-29030.md
+++ b/2024/CVE-2024-29030.md
@@ -16,3 +16,5 @@ memos is a privacy-first, lightweight note-taking service. In memos 0.13.2, an S
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29030.yaml
diff --git a/2024/CVE-2024-29059.md b/2024/CVE-2024-29059.md
index a98aaee2224..69b29e25cf1 100644
--- a/2024/CVE-2024-29059.md
+++ b/2024/CVE-2024-29059.md
@@ -32,3 +32,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29059.yaml
diff --git a/2024/CVE-2024-29137.md b/2024/CVE-2024-29137.md
index 3a447373078..19736ddd696 100644
--- a/2024/CVE-2024-29137.md
+++ b/2024/CVE-2024-29137.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29137.yaml
diff --git a/2024/CVE-2024-29138.md b/2024/CVE-2024-29138.md
index 36c8933947d..d1afc472650 100644
--- a/2024/CVE-2024-29138.md
+++ b/2024/CVE-2024-29138.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29138.yaml
diff --git a/2024/CVE-2024-29198.md b/2024/CVE-2024-29198.md
index d29636d42d8..90d0409a582 100644
--- a/2024/CVE-2024-29198.md
+++ b/2024/CVE-2024-29198.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29198.yaml
diff --git a/2024/CVE-2024-29269.md b/2024/CVE-2024-29269.md
index 7cc2ca4fc98..ea40f9a7dca 100644
--- a/2024/CVE-2024-29269.md
+++ b/2024/CVE-2024-29269.md
@@ -24,3 +24,5 @@ No PoCs from references.
 - https://github.com/hack-with-rohit/CVE-2024-29269-RCE
 - https://github.com/wutalent/CVE-2024-29269
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29269.yaml
diff --git a/2024/CVE-2024-29272.md b/2024/CVE-2024-29272.md
index ab50aa3ffc5..2151daa3976 100644
--- a/2024/CVE-2024-29272.md
+++ b/2024/CVE-2024-29272.md
@@ -16,3 +16,5 @@ Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unau
 #### Github
 - https://github.com/awjkjflkwlekfdjs/CVE-2024-29272
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29272.yaml
diff --git a/2024/CVE-2024-2928.md b/2024/CVE-2024-2928.md
index 28c95347f56..c97982ec651 100644
--- a/2024/CVE-2024-2928.md
+++ b/2024/CVE-2024-2928.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/nuridincersaygili/CVE-2024-2928
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2928.yaml
diff --git a/2024/CVE-2024-2961.md b/2024/CVE-2024-2961.md
index f56782b377a..e8325eb8a65 100644
--- a/2024/CVE-2024-2961.md
+++ b/2024/CVE-2024-2961.md
@@ -25,3 +25,5 @@ No PoCs from references.
 - https://github.com/suce0155/CVE-2024-2961_buddyforms_2.7.7
 - https://github.com/tnishiox/cve-2024-2961
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2024/CVE-2024-2961.yaml
diff --git a/2024/CVE-2024-29792.md b/2024/CVE-2024-29792.md
index 3590fb0e3d9..11e346ef6a6 100644
--- a/2024/CVE-2024-29792.md
+++ b/2024/CVE-2024-29792.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29792.yaml
diff --git a/2024/CVE-2024-29824.md b/2024/CVE-2024-29824.md
index 9f252af20b6..b31eef710c3 100644
--- a/2024/CVE-2024-29824.md
+++ b/2024/CVE-2024-29824.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/R4be1/CVE-2024-29824
 - https://github.com/horizon3ai/CVE-2024-29824
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29824.yaml
diff --git a/2024/CVE-2024-29868.md b/2024/CVE-2024-29868.md
index 0a8918c7f61..2a4c8bda789 100644
--- a/2024/CVE-2024-29868.md
+++ b/2024/CVE-2024-29868.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/DEVisions/CVE-2024-29868
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29868.yaml
diff --git a/2024/CVE-2024-29882.md b/2024/CVE-2024-29882.md
index f114cd5916e..4fe27232259 100644
--- a/2024/CVE-2024-29882.md
+++ b/2024/CVE-2024-29882.md
@@ -18,3 +18,5 @@ SRS is a simple, high-efficiency, real-time video server. SRS's `/api/v1/vhosts/
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2024/CVE-2024-29882.yaml
diff --git a/2024/CVE-2024-29889.md b/2024/CVE-2024-29889.md
index 922b09863eb..f7636547e2b 100644
--- a/2024/CVE-2024-29889.md
+++ b/2024/CVE-2024-29889.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29889.yaml
diff --git a/2024/CVE-2024-29895.md b/2024/CVE-2024-29895.md
index 281fca0673a..8b9d3ddb68b 100644
--- a/2024/CVE-2024-29895.md
+++ b/2024/CVE-2024-29895.md
@@ -18,3 +18,5 @@ Cacti provides an operational monitoring and fault management framework. A comma
 - https://github.com/secunnix/CVE-2024-29895
 - https://github.com/ticofookfook/CVE-2024-29895.py
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29895.yaml
diff --git a/2024/CVE-2024-29931.md b/2024/CVE-2024-29931.md
index a22250858cc..28a1056eeaa 100644
--- a/2024/CVE-2024-29931.md
+++ b/2024/CVE-2024-29931.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29931.yaml
diff --git a/2024/CVE-2024-29972.md b/2024/CVE-2024-29972.md
index a1b65657436..8138de2df1b 100644
--- a/2024/CVE-2024-29972.md
+++ b/2024/CVE-2024-29972.md
@@ -19,3 +19,5 @@
 - https://github.com/Pommaq/CVE-2024-29972-CVE-2024-29976-CVE-2024-29973-CVE-2024-29975-CVE-2024-29974-poc
 - https://github.com/WanLiChangChengWanLiChang/CVE-2024-29972
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29972.yaml
diff --git a/2024/CVE-2024-29973.md b/2024/CVE-2024-29973.md
index 7e95ccb4299..593ecf72380 100644
--- a/2024/CVE-2024-29973.md
+++ b/2024/CVE-2024-29973.md
@@ -27,3 +27,5 @@
 - https://github.com/skyrowalker/CVE-2024-29973
 - https://github.com/zxcod3/CVE-2024-29973
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29973.yaml
diff --git a/2024/CVE-2024-30163.md b/2024/CVE-2024-30163.md
index fe61e50fe26..9afe54320b9 100644
--- a/2024/CVE-2024-30163.md
+++ b/2024/CVE-2024-30163.md
@@ -15,3 +15,5 @@ Invision Community before 4.7.16 allow SQL injection via the applications/nexus/
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30163.yaml
diff --git a/2024/CVE-2024-30188.md b/2024/CVE-2024-30188.md
index d7ec0500b4c..a76e1391bb8 100644
--- a/2024/CVE-2024-30188.md
+++ b/2024/CVE-2024-30188.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30188.yaml
diff --git a/2024/CVE-2024-30194.md b/2024/CVE-2024-30194.md
index 407bf80c8df..c1708b82e85 100644
--- a/2024/CVE-2024-30194.md
+++ b/2024/CVE-2024-30194.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30194.yaml
diff --git a/2024/CVE-2024-30269.md b/2024/CVE-2024-30269.md
index a5f0c2f25b6..6380d12e1fa 100644
--- a/2024/CVE-2024-30269.md
+++ b/2024/CVE-2024-30269.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30269.yaml
diff --git a/2024/CVE-2024-3032.md b/2024/CVE-2024-3032.md
index 90a7d6cc843..c6923415e54 100644
--- a/2024/CVE-2024-3032.md
+++ b/2024/CVE-2024-3032.md
@@ -15,3 +15,5 @@ Themify Builder WordPress plugin before 7.5.8 does not validate a parameter befo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3032.yaml
diff --git a/2024/CVE-2024-30464.md b/2024/CVE-2024-30464.md
index 191cb83a2f2..6acba558b6d 100644
--- a/2024/CVE-2024-30464.md
+++ b/2024/CVE-2024-30464.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30464.yaml
diff --git a/2024/CVE-2024-30490.md b/2024/CVE-2024-30490.md
index 01240fafaa6..27e387baea6 100644
--- a/2024/CVE-2024-30490.md
+++ b/2024/CVE-2024-30490.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30490.yaml
diff --git a/2024/CVE-2024-30498.md b/2024/CVE-2024-30498.md
index c230018fe23..3d8564868ca 100644
--- a/2024/CVE-2024-30498.md
+++ b/2024/CVE-2024-30498.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30498.yaml
diff --git a/2024/CVE-2024-30502.md b/2024/CVE-2024-30502.md
index 75ff62a0e15..33863e3c7ab 100644
--- a/2024/CVE-2024-30502.md
+++ b/2024/CVE-2024-30502.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30502.yaml
diff --git a/2024/CVE-2024-30568.md b/2024/CVE-2024-30568.md
index f1d6cd0b066..cc1e4bcfba7 100644
--- a/2024/CVE-2024-30568.md
+++ b/2024/CVE-2024-30568.md
@@ -17,3 +17,5 @@ Netgear R6850 1.1.0.88 was discovered to contain a command injection vulnerabili
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30568.yaml
diff --git a/2024/CVE-2024-3094.md b/2024/CVE-2024-3094.md
index 58cb43a0ca1..0b59cf8a505 100644
--- a/2024/CVE-2024-3094.md
+++ b/2024/CVE-2024-3094.md
@@ -12,7 +12,8 @@
 
 ### Description
 
-Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. 
Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.
+Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. 
+Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.
 
 ### POC
 
@@ -61,3 +62,5 @@ Malicious code was discovered in the upstream tarballs of xz, starting with vers
 - https://github.com/teyhouse/CVE-2024-3094
 - https://github.com/valeriot30/cve-2024-3094
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-3094.yaml
diff --git a/2024/CVE-2024-3097.md b/2024/CVE-2024-3097.md
index af5fe715fcd..3fa35baf796 100644
--- a/2024/CVE-2024-3097.md
+++ b/2024/CVE-2024-3097.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3097.yaml
diff --git a/2024/CVE-2024-31223.md b/2024/CVE-2024-31223.md
index 8b18161e8c5..2fc71779e0b 100644
--- a/2024/CVE-2024-31223.md
+++ b/2024/CVE-2024-31223.md
@@ -16,3 +16,5 @@ Fides is an open-source privacy engineering platform, and `SERVER_SIDE_FIDES_API
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31223.yaml
diff --git a/2024/CVE-2024-3136.md b/2024/CVE-2024-3136.md
index 859897f0073..9eca7c47e93 100644
--- a/2024/CVE-2024-3136.md
+++ b/2024/CVE-2024-3136.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3136.yaml
diff --git a/2024/CVE-2024-31621.md b/2024/CVE-2024-31621.md
index 21a0c21b92a..e713fe1d45a 100644
--- a/2024/CVE-2024-31621.md
+++ b/2024/CVE-2024-31621.md
@@ -16,3 +16,5 @@ An issue in FlowiseAI Inc Flowise v.1.6.2 and before allows a remote attacker to
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31621.yaml
diff --git a/2024/CVE-2024-31750.md b/2024/CVE-2024-31750.md
index 72c1280ec0b..f47a140212a 100644
--- a/2024/CVE-2024-31750.md
+++ b/2024/CVE-2024-31750.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31750.yaml
diff --git a/2024/CVE-2024-31839.md b/2024/CVE-2024-31839.md
index 41a4a066d1d..429cef9b28e 100644
--- a/2024/CVE-2024-31839.md
+++ b/2024/CVE-2024-31839.md
@@ -16,3 +16,5 @@ Cross Site Scripting vulnerability in tiagorlampert CHAOS v.5.0.1 allows a remot
 #### Github
 - https://github.com/chebuya/CVE-2024-30850-chaos-rat-rce-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31839.yaml
diff --git a/2024/CVE-2024-31848.md b/2024/CVE-2024-31848.md
index e6465dd0ed6..e1e0ac2a2d6 100644
--- a/2024/CVE-2024-31848.md
+++ b/2024/CVE-2024-31848.md
@@ -15,3 +15,5 @@ A path traversal vulnerability exists in the Java version of CData API Server <
 #### Github
 - https://github.com/Stuub/CVE-2024-31848-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31848.yaml
diff --git a/2024/CVE-2024-31849.md b/2024/CVE-2024-31849.md
index c5d8b01c6af..073ed92ef34 100644
--- a/2024/CVE-2024-31849.md
+++ b/2024/CVE-2024-31849.md
@@ -15,3 +15,5 @@ A path traversal vulnerability exists in the Java version of CData Connect < 23.
 #### Github
 - https://github.com/Stuub/CVE-2024-31848-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31849.yaml
diff --git a/2024/CVE-2024-31850.md b/2024/CVE-2024-31850.md
index 1a38c045f0a..dc593884661 100644
--- a/2024/CVE-2024-31850.md
+++ b/2024/CVE-2024-31850.md
@@ -15,3 +15,5 @@ A path traversal vulnerability exists in the Java version of CData Arc < 23.4.88
 #### Github
 - https://github.com/Stuub/CVE-2024-31848-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31850.yaml
diff --git a/2024/CVE-2024-31851.md b/2024/CVE-2024-31851.md
index 67b6b3a1fe8..b4f7571cb86 100644
--- a/2024/CVE-2024-31851.md
+++ b/2024/CVE-2024-31851.md
@@ -15,3 +15,5 @@ A path traversal vulnerability exists in the Java version of CData Sync < 23.4.8
 #### Github
 - https://github.com/Stuub/CVE-2024-31848-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31851.yaml
diff --git a/2024/CVE-2024-31982.md b/2024/CVE-2024-31982.md
index d82d906aa4f..6382edbc55c 100644
--- a/2024/CVE-2024-31982.md
+++ b/2024/CVE-2024-31982.md
@@ -25,3 +25,5 @@ XWiki Platform is a generic wiki platform. Starting in version 2.4-milestone-1 a
 - https://github.com/k3lpi3b4nsh33/CVE-2024-31982
 - https://github.com/th3gokul/CVE-2024-31982
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31982.yaml
diff --git a/2024/CVE-2024-32113.md b/2024/CVE-2024-32113.md
index 5839481993b..f0ed0f80e81 100644
--- a/2024/CVE-2024-32113.md
+++ b/2024/CVE-2024-32113.md
@@ -19,3 +19,5 @@ No PoCs from references.
 - https://github.com/YongYe-Security/CVE-2024-32113
 - https://github.com/absholi7ly/Apache-OFBiz-Directory-Traversal-exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32113.yaml
diff --git a/2024/CVE-2024-32114.md b/2024/CVE-2024-32114.md
index d6dbb34503b..b4305d175a9 100644
--- a/2024/CVE-2024-32114.md
+++ b/2024/CVE-2024-32114.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32114.yaml
diff --git a/2024/CVE-2024-32128.md b/2024/CVE-2024-32128.md
index 212cb88a0d9..8d490147c5e 100644
--- a/2024/CVE-2024-32128.md
+++ b/2024/CVE-2024-32128.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32128.yaml
diff --git a/2024/CVE-2024-32231.md b/2024/CVE-2024-32231.md
index dc946b8e819..c469d8ccc6f 100644
--- a/2024/CVE-2024-32231.md
+++ b/2024/CVE-2024-32231.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32231.yaml
diff --git a/2024/CVE-2024-32238.md b/2024/CVE-2024-32238.md
index 7de06cd95f6..65faf107f82 100644
--- a/2024/CVE-2024-32238.md
+++ b/2024/CVE-2024-32238.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/FuBoLuSec/CVE-2024-32238
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32238.yaml
diff --git a/2024/CVE-2024-3231.md b/2024/CVE-2024-3231.md
index 35ab263bf2b..64a83bbac46 100644
--- a/2024/CVE-2024-3231.md
+++ b/2024/CVE-2024-3231.md
@@ -15,3 +15,5 @@ The Popup4Phone WordPress plugin through 1.3.2 does not sanitise and escape some
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3231.yaml
diff --git a/2024/CVE-2024-3234.md b/2024/CVE-2024-3234.md
index b17740b7eba..b74f5f11221 100644
--- a/2024/CVE-2024-3234.md
+++ b/2024/CVE-2024-3234.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3234.yaml
diff --git a/2024/CVE-2024-32399.md b/2024/CVE-2024-32399.md
index 393a701e98b..9fcf6c149cf 100644
--- a/2024/CVE-2024-32399.md
+++ b/2024/CVE-2024-32399.md
@@ -16,3 +16,5 @@ Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before
 #### Github
 - https://github.com/NN0b0dy/CVE-2024-32399
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32399.yaml
diff --git a/2024/CVE-2024-32640.md b/2024/CVE-2024-32640.md
index 96f59220757..64dce361c22 100644
--- a/2024/CVE-2024-32640.md
+++ b/2024/CVE-2024-32640.md
@@ -21,3 +21,5 @@ MASA CMS is an Enterprise Content Management platform based on open source techn
 - https://github.com/pizza-power/CVE-2024-32640
 - https://github.com/sammings/CVE-2024-32640
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32640.yaml
diff --git a/2024/CVE-2024-32651.md b/2024/CVE-2024-32651.md
index a32998020a4..aff576c92ed 100644
--- a/2024/CVE-2024-32651.md
+++ b/2024/CVE-2024-32651.md
@@ -17,3 +17,5 @@ changedetection.io is an open source web page change detection, website watcher,
 - https://github.com/s0ck3t-s3c/CVE-2024-32651-changedetection-RCE
 - https://github.com/zcrosman/cve-2024-32651
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32651.yaml
diff --git a/2024/CVE-2024-32709.md b/2024/CVE-2024-32709.md
index 13bf8406977..3608f95efd9 100644
--- a/2024/CVE-2024-32709.md
+++ b/2024/CVE-2024-32709.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32709.yaml
diff --git a/2024/CVE-2024-3272.md b/2024/CVE-2024-3272.md
index d2e35458e68..beb03e2bb6a 100644
--- a/2024/CVE-2024-3272.md
+++ b/2024/CVE-2024-3272.md
@@ -20,3 +20,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3272.yaml
diff --git a/2024/CVE-2024-3273.md b/2024/CVE-2024-3273.md
index 888b6844cdf..d047c630ef9 100644
--- a/2024/CVE-2024-3273.md
+++ b/2024/CVE-2024-3273.md
@@ -26,3 +26,5 @@ Es wurde eine Schwachstelle in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L b
 - https://github.com/adhikara13/CVE-2024-3273
 - https://github.com/mrrobot0o/CVE-2024-3273-
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3273.yaml
diff --git a/2024/CVE-2024-32735.md b/2024/CVE-2024-32735.md
index 1453f055ee8..43e31acfe6f 100644
--- a/2024/CVE-2024-32735.md
+++ b/2024/CVE-2024-32735.md
@@ -15,3 +15,5 @@ An issue regarding missing authentication for certain utilities exists in CyberP
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32735.yaml
diff --git a/2024/CVE-2024-32736.md b/2024/CVE-2024-32736.md
index 8af23222b64..f1b6c0a7e5f 100644
--- a/2024/CVE-2024-32736.md
+++ b/2024/CVE-2024-32736.md
@@ -15,3 +15,5 @@ A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32736.yaml
diff --git a/2024/CVE-2024-32737.md b/2024/CVE-2024-32737.md
index b53f91ae15b..66547ea8c1b 100644
--- a/2024/CVE-2024-32737.md
+++ b/2024/CVE-2024-32737.md
@@ -15,3 +15,5 @@ A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32737.yaml
diff --git a/2024/CVE-2024-32738.md b/2024/CVE-2024-32738.md
index 127d5395d98..6a153736dba 100644
--- a/2024/CVE-2024-32738.md
+++ b/2024/CVE-2024-32738.md
@@ -15,3 +15,5 @@ A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32738.yaml
diff --git a/2024/CVE-2024-32739.md b/2024/CVE-2024-32739.md
index ae1135d0388..a22ab72b6b3 100644
--- a/2024/CVE-2024-32739.md
+++ b/2024/CVE-2024-32739.md
@@ -15,3 +15,5 @@ A sql injection vulnerability exists in CyberPower PowerPanel Enterprise prior t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32739.yaml
diff --git a/2024/CVE-2024-3274.md b/2024/CVE-2024-3274.md
index 661860042f7..189b078870e 100644
--- a/2024/CVE-2024-3274.md
+++ b/2024/CVE-2024-3274.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3274.yaml
diff --git a/2024/CVE-2024-32825.md b/2024/CVE-2024-32825.md
index 3b79378ce72..1cfd102d617 100644
--- a/2024/CVE-2024-32825.md
+++ b/2024/CVE-2024-32825.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32825.yaml
diff --git a/2024/CVE-2024-32964.md b/2024/CVE-2024-32964.md
index 1eeb1594b1a..7a0a37a1e1c 100644
--- a/2024/CVE-2024-32964.md
+++ b/2024/CVE-2024-32964.md
@@ -16,3 +16,5 @@ Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32964.yaml
diff --git a/2024/CVE-2024-3300.md b/2024/CVE-2024-3300.md
index 90529ea5e5f..50cfc86091e 100644
--- a/2024/CVE-2024-3300.md
+++ b/2024/CVE-2024-3300.md
@@ -26,3 +26,5 @@ An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 201
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3300.yaml
diff --git a/2024/CVE-2024-33113.md b/2024/CVE-2024-33113.md
index c7643b5e11d..b64662ce24f 100644
--- a/2024/CVE-2024-33113.md
+++ b/2024/CVE-2024-33113.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/FaLLenSKiLL1/CVE-2024-33113
 - https://github.com/tekua/CVE-2024-33113
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33113.yaml
diff --git a/2024/CVE-2024-33326.md b/2024/CVE-2024-33326.md
index d5fba6f1150..48d53b901a0 100644
--- a/2024/CVE-2024-33326.md
+++ b/2024/CVE-2024-33326.md
@@ -16,3 +16,5 @@ A cross-site scripting (XSS) vulnerability in the component XsltResultController
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33326.yaml
diff --git a/2024/CVE-2024-33575.md b/2024/CVE-2024-33575.md
index 3e23930e223..981229266d7 100644
--- a/2024/CVE-2024-33575.md
+++ b/2024/CVE-2024-33575.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33575.yaml
diff --git a/2024/CVE-2024-33605.md b/2024/CVE-2024-33605.md
index 0d07672974d..3b558c5760c 100644
--- a/2024/CVE-2024-33605.md
+++ b/2024/CVE-2024-33605.md
@@ -17,3 +17,5 @@ Improper processing of some parameters of installed_emanual_list.html leads to a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33605.yaml
diff --git a/2024/CVE-2024-33610.md b/2024/CVE-2024-33610.md
index 1a3f91f1c5f..237cd44994e 100644
--- a/2024/CVE-2024-33610.md
+++ b/2024/CVE-2024-33610.md
@@ -17,3 +17,5 @@
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33610.yaml
diff --git a/2024/CVE-2024-3378.md b/2024/CVE-2024-3378.md
index da23ea2862d..e9baa6b2e3a 100644
--- a/2024/CVE-2024-3378.md
+++ b/2024/CVE-2024-3378.md
@@ -17,3 +17,5 @@ In iboss Secure Web Gateway bis 10.1 wurde eine Schwachstelle gefunden. Sie wurd
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3378.yaml
diff --git a/2024/CVE-2024-33832.md b/2024/CVE-2024-33832.md
index 662f8651955..433e4362d64 100644
--- a/2024/CVE-2024-33832.md
+++ b/2024/CVE-2024-33832.md
@@ -16,3 +16,5 @@ OneNav v0.9.35-20240318 was discovered to contain a Server-Side Request Forgery
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33832.yaml
diff --git a/2024/CVE-2024-33939.md b/2024/CVE-2024-33939.md
index 8128e79c7c9..23180b5adbb 100644
--- a/2024/CVE-2024-33939.md
+++ b/2024/CVE-2024-33939.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33939.yaml
diff --git a/2024/CVE-2024-3400.md b/2024/CVE-2024-3400.md
index d497b8c6ea6..0cf86f1a381 100644
--- a/2024/CVE-2024-3400.md
+++ b/2024/CVE-2024-3400.md
@@ -57,3 +57,5 @@ A command injection as a result of arbitrary file creation vulnerability in the
 - https://github.com/workshop748/CVE-2024-3400
 - https://github.com/zam89/CVE-2024-3400-pot
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3400.yaml
diff --git a/2024/CVE-2024-34061.md b/2024/CVE-2024-34061.md
index a1857828ddd..471d591509e 100644
--- a/2024/CVE-2024-34061.md
+++ b/2024/CVE-2024-34061.md
@@ -16,3 +16,5 @@ changedetection.io is a free open source web page change detection, website watc
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34061.yaml
diff --git a/2024/CVE-2024-3408.md b/2024/CVE-2024-3408.md
index 1c226375cd4..d5baca7dfd4 100644
--- a/2024/CVE-2024-3408.md
+++ b/2024/CVE-2024-3408.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3408.yaml
diff --git a/2024/CVE-2024-34102.md b/2024/CVE-2024-34102.md
index e8e486d03a8..2c26ba668f6 100644
--- a/2024/CVE-2024-34102.md
+++ b/2024/CVE-2024-34102.md
@@ -35,3 +35,5 @@ Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affe
 - https://github.com/mksundaram69/CVE-2024-34102
 - https://github.com/th3gokul/CVE-2024-34102
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34102.yaml
diff --git a/2024/CVE-2024-34257.md b/2024/CVE-2024-34257.md
index 058effaf76d..3f8a9117a82 100644
--- a/2024/CVE-2024-34257.md
+++ b/2024/CVE-2024-34257.md
@@ -16,3 +16,5 @@ TOTOLINK EX1800T V9.1.0cu.2112_B20220316 has a vulnerability in the apcliEncrypT
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34257.yaml
diff --git a/2024/CVE-2024-34351.md b/2024/CVE-2024-34351.md
index 84ab4dee3aa..1dfb937d601 100644
--- a/2024/CVE-2024-34351.md
+++ b/2024/CVE-2024-34351.md
@@ -20,3 +20,5 @@ No PoCs from references.
 - https://github.com/avergnaud/csr-rsc-ssg-isr-ssr-ssrf
 - https://github.com/patzj/apx-nextjs-ssrf
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34351.yaml
diff --git a/2024/CVE-2024-34470.md b/2024/CVE-2024-34470.md
index 79cd32ba979..f57330bba72 100644
--- a/2024/CVE-2024-34470.md
+++ b/2024/CVE-2024-34470.md
@@ -19,3 +19,5 @@ An issue was discovered in HSC Mailinspector 5.2.17-3 through v.5.2.18. An Unaut
 - https://github.com/bigb0x/CVE-2024-34470
 - https://github.com/th3gokul/CVE-2024-34470
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34470.yaml
diff --git a/2024/CVE-2024-3495.md b/2024/CVE-2024-3495.md
index 828cda2b497..f377219470c 100644
--- a/2024/CVE-2024-3495.md
+++ b/2024/CVE-2024-3495.md
@@ -21,3 +21,5 @@ No PoCs from references.
 - https://github.com/truonghuuphuc/CVE-2024-3495-Poc
 - https://github.com/zomasec/CVE-2024-3495-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3495.yaml
diff --git a/2024/CVE-2024-34982.md b/2024/CVE-2024-34982.md
index fcf9a6ab2a1..cb61da6fb04 100644
--- a/2024/CVE-2024-34982.md
+++ b/2024/CVE-2024-34982.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34982.yaml
diff --git a/2024/CVE-2024-35219.md b/2024/CVE-2024-35219.md
index 6677de853ba..1c096d66cc9 100644
--- a/2024/CVE-2024-35219.md
+++ b/2024/CVE-2024-35219.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35219.yaml
diff --git a/2024/CVE-2024-35286.md b/2024/CVE-2024-35286.md
index b8feb18466a..ff74b30a325 100644
--- a/2024/CVE-2024-35286.md
+++ b/2024/CVE-2024-35286.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35286.yaml
diff --git a/2024/CVE-2024-3552.md b/2024/CVE-2024-3552.md
index 37e70f7430f..4f04178389a 100644
--- a/2024/CVE-2024-3552.md
+++ b/2024/CVE-2024-3552.md
@@ -15,3 +15,5 @@ The Web Directory Free WordPress plugin before 1.7.0 does not sanitise and escap
 #### Github
 - https://github.com/KiPhuong/cve-2024-3552
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3552.yaml
diff --git a/2024/CVE-2024-35584.md b/2024/CVE-2024-35584.md
index 0ef5539259a..44da143a267 100644
--- a/2024/CVE-2024-35584.md
+++ b/2024/CVE-2024-35584.md
@@ -17,3 +17,5 @@ SQL injection vulnerabilities were discovered in Ajax.php, ForWindow.php, ForExp
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35584.yaml
diff --git a/2024/CVE-2024-35627.md b/2024/CVE-2024-35627.md
index c691e73d27f..b4f6994b720 100644
--- a/2024/CVE-2024-35627.md
+++ b/2024/CVE-2024-35627.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35627.yaml
diff --git a/2024/CVE-2024-3605.md b/2024/CVE-2024-3605.md
index 67b4ab136de..f261df029f6 100644
--- a/2024/CVE-2024-3605.md
+++ b/2024/CVE-2024-3605.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2024-3605
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3605.yaml
diff --git a/2024/CVE-2024-36104.md b/2024/CVE-2024-36104.md
index 5167042d4e9..a4515f9320b 100644
--- a/2024/CVE-2024-36104.md
+++ b/2024/CVE-2024-36104.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/RacerZ-fighting/CVE-2024-32113-POC
 - https://github.com/ggfzx/CVE-2024-36104
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36104.yaml
diff --git a/2024/CVE-2024-36117.md b/2024/CVE-2024-36117.md
index af8036ba310..57cacef724f 100644
--- a/2024/CVE-2024-36117.md
+++ b/2024/CVE-2024-36117.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36117.yaml
diff --git a/2024/CVE-2024-36401.md b/2024/CVE-2024-36401.md
index c963c3e1951..ba6f977dfe2 100644
--- a/2024/CVE-2024-36401.md
+++ b/2024/CVE-2024-36401.md
@@ -44,3 +44,5 @@ GeoServer is an open source server that allows users to share and edit geospatia
 - https://github.com/y1s4s/CVE-2024-36401-PoC
 - https://github.com/yisas93/CVE-2024-36401-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36401.yaml
diff --git a/2024/CVE-2024-36404.md b/2024/CVE-2024-36404.md
index d3dc94e8c45..92fba18fec7 100644
--- a/2024/CVE-2024-36404.md
+++ b/2024/CVE-2024-36404.md
@@ -23,3 +23,5 @@ GeoTools is an open source Java library that provides tools for geospatial data.
 #### Github
 - https://github.com/whitebear-ch/GeoServerExploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36404.yaml
diff --git a/2024/CVE-2024-36412.md b/2024/CVE-2024-36412.md
index 88137af7e4b..16ae1396ceb 100644
--- a/2024/CVE-2024-36412.md
+++ b/2024/CVE-2024-36412.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36412.yaml
diff --git a/2024/CVE-2024-36420.md b/2024/CVE-2024-36420.md
index a523ff087bb..7b26ca24d00 100644
--- a/2024/CVE-2024-36420.md
+++ b/2024/CVE-2024-36420.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36420.yaml
diff --git a/2024/CVE-2024-36527.md b/2024/CVE-2024-36527.md
index fad905c56cf..ff1ad732ce3 100644
--- a/2024/CVE-2024-36527.md
+++ b/2024/CVE-2024-36527.md
@@ -16,3 +16,5 @@ puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Atta
 #### Github
 - https://github.com/bigb0x/CVE-2024-36527
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36527.yaml
diff --git a/2024/CVE-2024-3656.md b/2024/CVE-2024-3656.md
index cd6ce479111..6ec098540a2 100644
--- a/2024/CVE-2024-3656.md
+++ b/2024/CVE-2024-3656.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 - https://github.com/h4x0r-dz/CVE-2024-3656
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3656.yaml
diff --git a/2024/CVE-2024-36675.md b/2024/CVE-2024-36675.md
index 1fb93d3bc98..567b76d6baa 100644
--- a/2024/CVE-2024-36675.md
+++ b/2024/CVE-2024-36675.md
@@ -16,3 +16,5 @@ LyLme_spage v1.9.5 is vulnerable to Server-Side Request Forgery (SSRF) via the g
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36675.yaml
diff --git a/2024/CVE-2024-36683.md b/2024/CVE-2024-36683.md
index b32fa4637b6..b012d43a586 100644
--- a/2024/CVE-2024-36683.md
+++ b/2024/CVE-2024-36683.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36683.yaml
diff --git a/2024/CVE-2024-3673.md b/2024/CVE-2024-3673.md
index 465bc7976fb..e81181df3df 100644
--- a/2024/CVE-2024-3673.md
+++ b/2024/CVE-2024-3673.md
@@ -16,3 +16,5 @@ The Web Directory Free WordPress plugin before 1.7.3 does not validate a paramet
 - https://github.com/Nxploited/CVE-2024-3673
 - https://github.com/tranphuc2005/Exploit_Wordpress
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3673.yaml
diff --git a/2024/CVE-2024-36837.md b/2024/CVE-2024-36837.md
index 6ee31f62e9f..cc890047087 100644
--- a/2024/CVE-2024-36837.md
+++ b/2024/CVE-2024-36837.md
@@ -16,3 +16,5 @@ SQL Injection vulnerability in CRMEB v.5.2.2 allows a remote attacker to obtain
 #### Github
 - https://github.com/lhc321-source/CVE-2024-36837
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36837.yaml
diff --git a/2024/CVE-2024-36857.md b/2024/CVE-2024-36857.md
index 4ab40e70907..eadd9c31a64 100644
--- a/2024/CVE-2024-36857.md
+++ b/2024/CVE-2024-36857.md
@@ -16,3 +16,5 @@ Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36857.yaml
diff --git a/2024/CVE-2024-36858.md b/2024/CVE-2024-36858.md
index c0cd4fffcdb..8bcd3f1592c 100644
--- a/2024/CVE-2024-36858.md
+++ b/2024/CVE-2024-36858.md
@@ -16,3 +16,5 @@ An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36858.yaml
diff --git a/2024/CVE-2024-36991.md b/2024/CVE-2024-36991.md
index 88c96d1bd4d..baa795d4854 100644
--- a/2024/CVE-2024-36991.md
+++ b/2024/CVE-2024-36991.md
@@ -29,3 +29,5 @@ No PoCs from references.
 - https://github.com/sardine-web/CVE-2024-36991
 - https://github.com/th3gokul/CVE-2024-36991
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36991.yaml
diff --git a/2024/CVE-2024-37032.md b/2024/CVE-2024-37032.md
index 9a9e34a8c5a..124a8a2aee7 100644
--- a/2024/CVE-2024-37032.md
+++ b/2024/CVE-2024-37032.md
@@ -17,3 +17,5 @@ Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64
 - https://github.com/badboy0/Ollama_Exploit_Tool
 - https://github.com/pankass/CVE-2024-37032_CVE-2024-45436
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37032.yaml
diff --git a/2024/CVE-2024-37152.md b/2024/CVE-2024-37152.md
index 56bf1656aa6..090c110a352 100644
--- a/2024/CVE-2024-37152.md
+++ b/2024/CVE-2024-37152.md
@@ -21,3 +21,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37152.yaml
diff --git a/2024/CVE-2024-37259.md b/2024/CVE-2024-37259.md
index 17cd8e3d38a..d4410715afb 100644
--- a/2024/CVE-2024-37259.md
+++ b/2024/CVE-2024-37259.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37259.yaml
diff --git a/2024/CVE-2024-37261.md b/2024/CVE-2024-37261.md
index bcac28d5872..f77f0b70d83 100644
--- a/2024/CVE-2024-37261.md
+++ b/2024/CVE-2024-37261.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37261.yaml
diff --git a/2024/CVE-2024-37393.md b/2024/CVE-2024-37393.md
index f731bed0c07..10a833b989b 100644
--- a/2024/CVE-2024-37393.md
+++ b/2024/CVE-2024-37393.md
@@ -17,3 +17,5 @@ Multiple LDAP injections vulnerabilities exist in SecurEnvoy MFA before 9.4.514
 - https://github.com/noways-io/securenvoy-cve-2024-37393
 - https://github.com/optistream/securenvoy-cve-2024-37393
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37393.yaml
diff --git a/2024/CVE-2024-3742.md b/2024/CVE-2024-3742.md
index 7702a41e7df..1069f6fce1e 100644
--- a/2024/CVE-2024-3742.md
+++ b/2024/CVE-2024-3742.md
@@ -40,3 +40,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3742.yaml
diff --git a/2024/CVE-2024-3753.md b/2024/CVE-2024-3753.md
index 7b36db00a5b..5d071cdcd69 100644
--- a/2024/CVE-2024-3753.md
+++ b/2024/CVE-2024-3753.md
@@ -15,3 +15,5 @@ The Hostel WordPress plugin before 1.1.5.3 does not sanitise and escape a parame
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3753.yaml
diff --git a/2024/CVE-2024-37656.md b/2024/CVE-2024-37656.md
index 14b7b336158..5be8b32189a 100644
--- a/2024/CVE-2024-37656.md
+++ b/2024/CVE-2024-37656.md
@@ -15,3 +15,5 @@ An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37656.yaml
diff --git a/2024/CVE-2024-37728.md b/2024/CVE-2024-37728.md
index 5cbd2198805..3104b470474 100644
--- a/2024/CVE-2024-37728.md
+++ b/2024/CVE-2024-37728.md
@@ -17,3 +17,5 @@ Arbitrary File Read vulnerability in Xi'an Daxi Information Technology Co., Ltd
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37728.yaml
diff --git a/2024/CVE-2024-37843.md b/2024/CVE-2024-37843.md
index cd4af61b0e2..08190117d2d 100644
--- a/2024/CVE-2024-37843.md
+++ b/2024/CVE-2024-37843.md
@@ -16,3 +16,5 @@ Craft CMS up to v3.7.31 was discovered to contain a SQL injection vulnerability
 #### Github
 - https://github.com/gsmith257-cyber/CVE-2024-37843-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37843.yaml
diff --git a/2024/CVE-2024-3822.md b/2024/CVE-2024-3822.md
index 261ac605ebf..f8708bd34f9 100644
--- a/2024/CVE-2024-3822.md
+++ b/2024/CVE-2024-3822.md
@@ -15,3 +15,5 @@ The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not sanitise and
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3822.yaml
diff --git a/2024/CVE-2024-38288.md b/2024/CVE-2024-38288.md
index 6197edd2b44..7b5bf1f4806 100644
--- a/2024/CVE-2024-38288.md
+++ b/2024/CVE-2024-38288.md
@@ -16,3 +16,5 @@ A command-injection issue in the Certificate Signing Request (CSR) functionality
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38288.yaml
diff --git a/2024/CVE-2024-38289.md b/2024/CVE-2024-38289.md
index 6cbb3fc9d3d..a602bd68469 100644
--- a/2024/CVE-2024-38289.md
+++ b/2024/CVE-2024-38289.md
@@ -16,3 +16,5 @@ A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38289.yaml
diff --git a/2024/CVE-2024-38353.md b/2024/CVE-2024-38353.md
index ca20619dc39..0d3a31e793d 100644
--- a/2024/CVE-2024-38353.md
+++ b/2024/CVE-2024-38353.md
@@ -17,3 +17,5 @@ CodiMD allows realtime collaborative markdown notes on all platforms. CodiMD bef
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38353.yaml
diff --git a/2024/CVE-2024-38472.md b/2024/CVE-2024-38472.md
index 99f34cf588e..f707daa0366 100644
--- a/2024/CVE-2024-38472.md
+++ b/2024/CVE-2024-38472.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Abdurahmon3236/CVE-2024-38472
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38472.yaml
diff --git a/2024/CVE-2024-38473.md b/2024/CVE-2024-38473.md
index c5cb2e63141..5b995d0f983 100644
--- a/2024/CVE-2024-38473.md
+++ b/2024/CVE-2024-38473.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/Abdurahmon3236/CVE-2024-38473
 - https://github.com/mmtalsi/toolbox
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38473.yaml
diff --git a/2024/CVE-2024-38475.md b/2024/CVE-2024-38475.md
index 47d5c6bb6f6..f77fcd16d4b 100644
--- a/2024/CVE-2024-38475.md
+++ b/2024/CVE-2024-38475.md
@@ -21,3 +21,5 @@ No PoCs from references.
 - https://github.com/syaifulandy/CVE-2024-38475
 - https://github.com/watchtowrlabs/watchTowr-vs-SonicWall-PreAuth-RCE-Chain
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38475.yaml
diff --git a/2024/CVE-2024-3848.md b/2024/CVE-2024-3848.md
index 53a6e338482..09eaeabdf94 100644
--- a/2024/CVE-2024-3848.md
+++ b/2024/CVE-2024-3848.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3848.yaml
diff --git a/2024/CVE-2024-3850.md b/2024/CVE-2024-3850.md
index 5d3bd9aeeb4..0d2d98874ce 100644
--- a/2024/CVE-2024-3850.md
+++ b/2024/CVE-2024-3850.md
@@ -15,3 +15,5 @@ Uniview NVR301-04S2-P4 is vulnerable to reflected cross-site scripting attack (X
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3850.yaml
diff --git a/2024/CVE-2024-38514.md b/2024/CVE-2024-38514.md
index ca450889436..b92498778a4 100644
--- a/2024/CVE-2024-38514.md
+++ b/2024/CVE-2024-38514.md
@@ -16,3 +16,5 @@ NextChat is a cross-platform ChatGPT/Gemini UI. There is a Server-Side Request F
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38514.yaml
diff --git a/2024/CVE-2024-38526.md b/2024/CVE-2024-38526.md
index ef8928d7b6c..583e7325b4c 100644
--- a/2024/CVE-2024-38526.md
+++ b/2024/CVE-2024-38526.md
@@ -16,3 +16,5 @@ pdoc provides API Documentation for Python Projects. Documentation generated wit
 #### Github
 - https://github.com/putget/CVE-2024-38526
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2024/CVE-2024-38526.yaml
diff --git a/2024/CVE-2024-38653.md b/2024/CVE-2024-38653.md
index c0a45580444..ecf5cec696c 100644
--- a/2024/CVE-2024-38653.md
+++ b/2024/CVE-2024-38653.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38653.yaml
diff --git a/2024/CVE-2024-38816.md b/2024/CVE-2024-38816.md
index b07a98d07b7..ee383ff81ea 100644
--- a/2024/CVE-2024-38816.md
+++ b/2024/CVE-2024-38816.md
@@ -22,3 +22,5 @@ No PoCs from references.
 - https://github.com/startsw1th/cve-2024-38816-demo
 - https://github.com/swarathesh/AI-Experts
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38816.yaml
diff --git a/2024/CVE-2024-38819.md b/2024/CVE-2024-38819.md
index 3c28f8dfde5..6bc267aea88 100644
--- a/2024/CVE-2024-38819.md
+++ b/2024/CVE-2024-38819.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/skrkcb2/cve-2024-38819
 - https://github.com/vishalnoza/CVE-2024-38819-POC2
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38819.yaml
diff --git a/2024/CVE-2024-38856.md b/2024/CVE-2024-38856.md
index 845cd948c01..3c61640cf06 100644
--- a/2024/CVE-2024-38856.md
+++ b/2024/CVE-2024-38856.md
@@ -24,3 +24,5 @@ No PoCs from references.
 - https://github.com/emanueldosreis/CVE-2024-38856
 - https://github.com/guinea-offensive-security/Ofbiz-RCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38856.yaml
diff --git a/2024/CVE-2024-3922.md b/2024/CVE-2024-3922.md
index 15f99e4838e..e60c5a47f9f 100644
--- a/2024/CVE-2024-3922.md
+++ b/2024/CVE-2024-3922.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/truonghuuphuc/CVE-2024-3922-Poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3922.yaml
diff --git a/2024/CVE-2024-39250.md b/2024/CVE-2024-39250.md
index 2fc1ea8c522..30ece9fa2cf 100644
--- a/2024/CVE-2024-39250.md
+++ b/2024/CVE-2024-39250.md
@@ -16,3 +16,5 @@ EfroTech Timetrax v8.3 was discovered to contain an unauthenticated SQL injectio
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39250.yaml
diff --git a/2024/CVE-2024-39646.md b/2024/CVE-2024-39646.md
index 9b668b5cae5..a88f8e801e9 100644
--- a/2024/CVE-2024-39646.md
+++ b/2024/CVE-2024-39646.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39646.yaml
diff --git a/2024/CVE-2024-39713.md b/2024/CVE-2024-39713.md
index 55c16b61b93..2b04b80e87e 100644
--- a/2024/CVE-2024-39713.md
+++ b/2024/CVE-2024-39713.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/typical-pashochek/CVE-2024-39713
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39713.yaml
diff --git a/2024/CVE-2024-39887.md b/2024/CVE-2024-39887.md
index 8bea488ac3a..ae6776e6e53 100644
--- a/2024/CVE-2024-39887.md
+++ b/2024/CVE-2024-39887.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39887.yaml
diff --git a/2024/CVE-2024-39903.md b/2024/CVE-2024-39903.md
index bc7439dd1b5..2f77497a242 100644
--- a/2024/CVE-2024-39903.md
+++ b/2024/CVE-2024-39903.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39903.yaml
diff --git a/2024/CVE-2024-39907.md b/2024/CVE-2024-39907.md
index d4bae1465c7..1224c63777e 100644
--- a/2024/CVE-2024-39907.md
+++ b/2024/CVE-2024-39907.md
@@ -16,3 +16,5 @@
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39907.yaml
diff --git a/2024/CVE-2024-39914.md b/2024/CVE-2024-39914.md
index 9bbdd41bdda..d76ac701352 100644
--- a/2024/CVE-2024-39914.md
+++ b/2024/CVE-2024-39914.md
@@ -16,3 +16,5 @@ FOG is a cloning/imaging/rescue suite/inventory management system. Prior to 1.5.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39914.yaml
diff --git a/2024/CVE-2024-40348.md b/2024/CVE-2024-40348.md
index f41abe0c6e7..db94e3243d7 100644
--- a/2024/CVE-2024-40348.md
+++ b/2024/CVE-2024-40348.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/NingXin2002/Bazaar_poc
 - https://github.com/bigb0x/CVE-2024-40348
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-40348.yaml
diff --git a/2024/CVE-2024-4040.md b/2024/CVE-2024-4040.md
index 898e188b3f2..df12b241557 100644
--- a/2024/CVE-2024-4040.md
+++ b/2024/CVE-2024-4040.md
@@ -36,3 +36,5 @@ A server side template injection vulnerability in CrushFTP in all versions befor
 - https://github.com/safeer-accuknox/CrushFTP-cve-2024-4040-poc
 - https://github.com/tongchengbin/nuclei-sdk
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4040.yaml
diff --git a/2024/CVE-2024-40422.md b/2024/CVE-2024-40422.md
index a4c998a2430..01e3973fe2e 100644
--- a/2024/CVE-2024-40422.md
+++ b/2024/CVE-2024-40422.md
@@ -18,3 +18,5 @@ The snapshot_path parameter in the /api/get-browser-snapshot endpoint in stition
 - https://github.com/alpernae/vulnerability-research
 - https://github.com/j3r1ch0123/CVE-2024-40422
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-40422.yaml
diff --git a/2024/CVE-2024-40711.md b/2024/CVE-2024-40711.md
index a453a97708a..041f4d77dd5 100644
--- a/2024/CVE-2024-40711.md
+++ b/2024/CVE-2024-40711.md
@@ -18,3 +18,5 @@ A deserialization of untrusted data vulnerability with a malicious payload can a
 - https://github.com/realstatus/CVE-2024-40711-Exp
 - https://github.com/watchtowrlabs/CVE-2024-40711
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-40711.yaml
diff --git a/2024/CVE-2024-41107.md b/2024/CVE-2024-41107.md
index c237848adb3..0c7405360e4 100644
--- a/2024/CVE-2024-41107.md
+++ b/2024/CVE-2024-41107.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/d0rb/CVE-2024-41107
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41107.yaml
diff --git a/2024/CVE-2024-41628.md b/2024/CVE-2024-41628.md
index 3e2e0529f86..87efd73c2a4 100644
--- a/2024/CVE-2024-41628.md
+++ b/2024/CVE-2024-41628.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Redshift-CyberSecurity/CVE-2024-41628
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41628.yaml
diff --git a/2024/CVE-2024-41667.md b/2024/CVE-2024-41667.md
index 5416c666dae..cc38ea4b3da 100644
--- a/2024/CVE-2024-41667.md
+++ b/2024/CVE-2024-41667.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41667.yaml
diff --git a/2024/CVE-2024-41713.md b/2024/CVE-2024-41713.md
index d49e5a5ec99..754cf19e3f9 100644
--- a/2024/CVE-2024-41713.md
+++ b/2024/CVE-2024-41713.md
@@ -21,3 +21,5 @@ No PoCs from references.
 - https://github.com/gunyakit/CVE-2024-41713-PoC-exploit
 - https://github.com/watchtowrlabs/Mitel-MiCollab-Auth-Bypass_CVE-2024-41713
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41713.yaml
diff --git a/2024/CVE-2024-4180.md b/2024/CVE-2024-4180.md
index 6365186b9ac..6f921147631 100644
--- a/2024/CVE-2024-4180.md
+++ b/2024/CVE-2024-4180.md
@@ -15,3 +15,5 @@ The Events Calendar WordPress plugin before 6.4.0.1 does not properly sanitize u
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4180.yaml
diff --git a/2024/CVE-2024-41810.md b/2024/CVE-2024-41810.md
index 7d972107a51..06efac4900c 100644
--- a/2024/CVE-2024-41810.md
+++ b/2024/CVE-2024-41810.md
@@ -17,3 +17,5 @@ Twisted is an event-based framework for internet applications, supporting Python
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41810.yaml
diff --git a/2024/CVE-2024-41955.md b/2024/CVE-2024-41955.md
index 2503b1452f8..f1277a448df 100644
--- a/2024/CVE-2024-41955.md
+++ b/2024/CVE-2024-41955.md
@@ -15,3 +15,5 @@ Mobile Security Framework (MobSF) is a security research platform for mobile app
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41955.yaml
diff --git a/2024/CVE-2024-42009.md b/2024/CVE-2024-42009.md
index 4fce4d07eca..15d0f263c6d 100644
--- a/2024/CVE-2024-42009.md
+++ b/2024/CVE-2024-42009.md
@@ -20,3 +20,5 @@ A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x throug
 - https://github.com/Foxer131/CVE-2024-42008-9-exploit
 - https://github.com/Shubhankargupta691/CVE-2024-42009
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-42009.yaml
diff --git a/2024/CVE-2024-42323.md b/2024/CVE-2024-42323.md
index def85187565..4207bf0b065 100644
--- a/2024/CVE-2024-42323.md
+++ b/2024/CVE-2024-42323.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-42323.yaml
diff --git a/2024/CVE-2024-4257.md b/2024/CVE-2024-4257.md
index c7e2c241bcf..9fa0aab83f6 100644
--- a/2024/CVE-2024-4257.md
+++ b/2024/CVE-2024-4257.md
@@ -17,3 +17,5 @@ Es wurde eine Schwachstelle in BlueNet Technology Clinical Browsing System 1.2.1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4257.yaml
diff --git a/2024/CVE-2024-42640.md b/2024/CVE-2024-42640.md
index be34c6bf761..0ae0bd54bdc 100644
--- a/2024/CVE-2024-42640.md
+++ b/2024/CVE-2024-42640.md
@@ -17,3 +17,5 @@ angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote c
 - https://github.com/KTN1990/CVE-2024-42640
 - https://github.com/rvizx/CVE-2024-42640
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-42640.yaml
diff --git a/2024/CVE-2024-42852.md b/2024/CVE-2024-42852.md
index 5a13466a277..1998cbe1645 100644
--- a/2024/CVE-2024-42852.md
+++ b/2024/CVE-2024-42852.md
@@ -16,3 +16,5 @@ Cross Site Scripting vulnerability in AcuToWeb server v.10.5.0.7577C8b allows a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-42852.yaml
diff --git a/2024/CVE-2024-4295.md b/2024/CVE-2024-4295.md
index 9574d07c2af..8b598248d9f 100644
--- a/2024/CVE-2024-4295.md
+++ b/2024/CVE-2024-4295.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/cve-2024/CVE-2024-4295-Poc
 - https://github.com/rtenacity/cve-docker-test
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4295.yaml
diff --git a/2024/CVE-2024-43144.md b/2024/CVE-2024-43144.md
index 8f1210afe43..89aa3bc8ddf 100644
--- a/2024/CVE-2024-43144.md
+++ b/2024/CVE-2024-43144.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43144.yaml
diff --git a/2024/CVE-2024-43160.md b/2024/CVE-2024-43160.md
index 590a69c5663..6eeabc636c8 100644
--- a/2024/CVE-2024-43160.md
+++ b/2024/CVE-2024-43160.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/KTN1990/CVE-2024-43160
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43160.yaml
diff --git a/2024/CVE-2024-4322.md b/2024/CVE-2024-4322.md
index 62f4320b6b6..78a000f7e11 100644
--- a/2024/CVE-2024-4322.md
+++ b/2024/CVE-2024-4322.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4322.yaml
diff --git a/2024/CVE-2024-4325.md b/2024/CVE-2024-4325.md
index 825024eb075..0eb07a625db 100644
--- a/2024/CVE-2024-4325.md
+++ b/2024/CVE-2024-4325.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4325.yaml
diff --git a/2024/CVE-2024-43283.md b/2024/CVE-2024-43283.md
index d1fd452d54a..c2c3d5b3662 100644
--- a/2024/CVE-2024-43283.md
+++ b/2024/CVE-2024-43283.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43283.yaml
diff --git a/2024/CVE-2024-43360.md b/2024/CVE-2024-43360.md
index 60113c4a3b0..8be64679213 100644
--- a/2024/CVE-2024-43360.md
+++ b/2024/CVE-2024-43360.md
@@ -18,3 +18,5 @@ ZoneMinder is a free, open source closed-circuit television software application
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43360.yaml
diff --git a/2024/CVE-2024-4340.md b/2024/CVE-2024-4340.md
index abf1400cacd..e10357a6f5e 100644
--- a/2024/CVE-2024-4340.md
+++ b/2024/CVE-2024-4340.md
@@ -16,3 +16,5 @@ Passing a heavily nested list to sqlparse.parse() leads to a Denial of Service d
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-4340.yaml
diff --git a/2024/CVE-2024-43425.md b/2024/CVE-2024-43425.md
index dfbd5006413..330f1f98e01 100644
--- a/2024/CVE-2024-43425.md
+++ b/2024/CVE-2024-43425.md
@@ -20,3 +20,5 @@ No PoCs from references.
 - https://github.com/aayush256-sys/Moodle-authenticated-RCE
 - https://github.com/aninfosec/CVE-2024-43425-Poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43425.yaml
diff --git a/2024/CVE-2024-43441.md b/2024/CVE-2024-43441.md
index 3822814f0bf..55a29e60e44 100644
--- a/2024/CVE-2024-43441.md
+++ b/2024/CVE-2024-43441.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43441.yaml
diff --git a/2024/CVE-2024-4348.md b/2024/CVE-2024-4348.md
index 51876e3d8b1..f953dc2d5db 100644
--- a/2024/CVE-2024-4348.md
+++ b/2024/CVE-2024-4348.md
@@ -16,3 +16,5 @@ Es wurde eine Schwachstelle in osCommerce 4 gefunden. Sie wurde als problematisc
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4348.yaml
diff --git a/2024/CVE-2024-4358.md b/2024/CVE-2024-4358.md
index 44472dc401b..e594fd39170 100644
--- a/2024/CVE-2024-4358.md
+++ b/2024/CVE-2024-4358.md
@@ -23,3 +23,5 @@ No PoCs from references.
 - https://github.com/sinsinology/CVE-2024-4358
 - https://github.com/verylazytech/CVE-2024-4358
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4358.yaml
diff --git a/2024/CVE-2024-43917.md b/2024/CVE-2024-43917.md
index aabce1bf789..a04699c4e92 100644
--- a/2024/CVE-2024-43917.md
+++ b/2024/CVE-2024-43917.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/p33d/CVE-2024-43917
 - https://github.com/sug4r-wr41th/CVE-2024-43917
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43917.yaml
diff --git a/2024/CVE-2024-43919.md b/2024/CVE-2024-43919.md
index 1d2b39ca972..022f2112dff 100644
--- a/2024/CVE-2024-43919.md
+++ b/2024/CVE-2024-43919.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2024-43919
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43919.yaml
diff --git a/2024/CVE-2024-43965.md b/2024/CVE-2024-43965.md
index c72875d1d01..0a15c0b3fa0 100644
--- a/2024/CVE-2024-43965.md
+++ b/2024/CVE-2024-43965.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2024-43965
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43965.yaml
diff --git a/2024/CVE-2024-43971.md b/2024/CVE-2024-43971.md
index 4819621e4e7..b4f3de92ec7 100644
--- a/2024/CVE-2024-43971.md
+++ b/2024/CVE-2024-43971.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43971.yaml
diff --git a/2024/CVE-2024-4399.md b/2024/CVE-2024-4399.md
index 67adb166dfa..4f8fc4969d7 100644
--- a/2024/CVE-2024-4399.md
+++ b/2024/CVE-2024-4399.md
@@ -15,3 +15,5 @@ The  does not validate a parameter before making a request to it, which could al
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4399.yaml
diff --git a/2024/CVE-2024-44000.md b/2024/CVE-2024-44000.md
index ad9af815ef8..ab8312fb614 100644
--- a/2024/CVE-2024-44000.md
+++ b/2024/CVE-2024-44000.md
@@ -20,3 +20,5 @@ No PoCs from references.
 - https://github.com/geniuszlyy/CVE-2024-44000
 - https://github.com/ifqygazhar/CVE-2024-44000-LiteSpeed-Cache
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44000.yaml
diff --git a/2024/CVE-2024-4434.md b/2024/CVE-2024-4434.md
index 04fb3cb818a..d9c0e07926b 100644
--- a/2024/CVE-2024-4434.md
+++ b/2024/CVE-2024-4434.md
@@ -16,3 +16,5 @@ The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to ti
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4434.yaml
diff --git a/2024/CVE-2024-44349.md b/2024/CVE-2024-44349.md
index 1e6e02611be..d5d25e03640 100644
--- a/2024/CVE-2024-44349.md
+++ b/2024/CVE-2024-44349.md
@@ -17,3 +17,5 @@ A SQL injection vulnerability in login portal in AnteeoWMS before v4.7.34 allows
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44349.yaml
diff --git a/2024/CVE-2024-4439.md b/2024/CVE-2024-4439.md
index 6208b7e0f6d..160afd033ce 100644
--- a/2024/CVE-2024-4439.md
+++ b/2024/CVE-2024-4439.md
@@ -24,3 +24,5 @@ No PoCs from references.
 - https://github.com/w0r1i0g1ht/CVE-2024-4439
 - https://github.com/xssor-dz/-CVE-2024-4439
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4439.yaml
diff --git a/2024/CVE-2024-4443.md b/2024/CVE-2024-4443.md
index 824d359b5a5..e7e654c2470 100644
--- a/2024/CVE-2024-4443.md
+++ b/2024/CVE-2024-4443.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/truonghuuphuc/CVE-2024-4443-Poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4443.yaml
diff --git a/2024/CVE-2024-44762.md b/2024/CVE-2024-44762.md
index 3f9889fb77c..a05dae485db 100644
--- a/2024/CVE-2024-44762.md
+++ b/2024/CVE-2024-44762.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44762.yaml
diff --git a/2024/CVE-2024-44849.md b/2024/CVE-2024-44849.md
index 28978daa31a..961243c1c9e 100644
--- a/2024/CVE-2024-44849.md
+++ b/2024/CVE-2024-44849.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/extencil/CVE-2024-44849
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44849.yaml
diff --git a/2024/CVE-2024-45195.md b/2024/CVE-2024-45195.md
index f8264343504..786df6caac2 100644
--- a/2024/CVE-2024-45195.md
+++ b/2024/CVE-2024-45195.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/wyyazjjl/CVE-2024-45195
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45195.yaml
diff --git a/2024/CVE-2024-45216.md b/2024/CVE-2024-45216.md
index 6bec7b9d7dc..4c5a8035a18 100644
--- a/2024/CVE-2024-45216.md
+++ b/2024/CVE-2024-45216.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/congdong007/CVE-2024-45216-Poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45216.yaml
diff --git a/2024/CVE-2024-45241.md b/2024/CVE-2024-45241.md
index f25b7a512e6..eacd67b27c2 100644
--- a/2024/CVE-2024-45241.md
+++ b/2024/CVE-2024-45241.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/d4lyw/CVE-2024-45241
 - https://github.com/verylazytech/CVE-2024-45241
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45241.yaml
diff --git a/2024/CVE-2024-45293.md b/2024/CVE-2024-45293.md
index 692d8b233c3..3e5e30b3d8d 100644
--- a/2024/CVE-2024-45293.md
+++ b/2024/CVE-2024-45293.md
@@ -20,3 +20,5 @@ PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45293.yaml
diff --git a/2024/CVE-2024-45309.md b/2024/CVE-2024-45309.md
index 91aa8961757..2c0df372d2a 100644
--- a/2024/CVE-2024-45309.md
+++ b/2024/CVE-2024-45309.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45309.yaml
diff --git a/2024/CVE-2024-45388.md b/2024/CVE-2024-45388.md
index e754aeb9244..4f6c4407672 100644
--- a/2024/CVE-2024-45388.md
+++ b/2024/CVE-2024-45388.md
@@ -16,3 +16,5 @@ Hoverfly is a lightweight service virtualization/ API simulation / API mocking t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45388.yaml
diff --git a/2024/CVE-2024-45409.md b/2024/CVE-2024-45409.md
index 8286a847b69..04e550c02ca 100644
--- a/2024/CVE-2024-45409.md
+++ b/2024/CVE-2024-45409.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 - https://github.com/synacktiv/CVE-2024-45409
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-45409.yaml
diff --git a/2024/CVE-2024-45440.md b/2024/CVE-2024-45440.md
index fe4ecbf93b5..2e970151f07 100644
--- a/2024/CVE-2024-45440.md
+++ b/2024/CVE-2024-45440.md
@@ -16,3 +16,5 @@ core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when err
 #### Github
 - https://github.com/w0r1i0g1ht/CVE-2024-45440
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45440.yaml
diff --git a/2024/CVE-2024-45488.md b/2024/CVE-2024-45488.md
index 8730179c8b3..1e301b760b2 100644
--- a/2024/CVE-2024-45488.md
+++ b/2024/CVE-2024-45488.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45488.yaml
diff --git a/2024/CVE-2024-45507.md b/2024/CVE-2024-45507.md
index 0c95308ea2f..d09430704f1 100644
--- a/2024/CVE-2024-45507.md
+++ b/2024/CVE-2024-45507.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Avento/CVE-2024-45507_Behinder_Webshell
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45507.yaml
diff --git a/2024/CVE-2024-45519.md b/2024/CVE-2024-45519.md
index dccacb5fb3d..e1c6e08384a 100644
--- a/2024/CVE-2024-45519.md
+++ b/2024/CVE-2024-45519.md
@@ -19,3 +19,5 @@ The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9
 - https://github.com/p33d/CVE-2024-45519
 - https://github.com/sec13b/CVE-2024-45519
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2024/CVE-2024-45519.yaml
diff --git a/2024/CVE-2024-45591.md b/2024/CVE-2024-45591.md
index f59979c7449..1189454cc06 100644
--- a/2024/CVE-2024-45591.md
+++ b/2024/CVE-2024-45591.md
@@ -19,3 +19,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45591.yaml
diff --git a/2024/CVE-2024-45622.md b/2024/CVE-2024-45622.md
index 3db97464ffc..aa1154e556a 100644
--- a/2024/CVE-2024-45622.md
+++ b/2024/CVE-2024-45622.md
@@ -16,3 +16,5 @@ ASIS (aka Aplikasi Sistem Sekolah using CodeIgniter 3) 3.0.0 through 3.2.0 allow
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45622.yaml
diff --git a/2024/CVE-2024-4577.md b/2024/CVE-2024-4577.md
index d7fda68b7bc..e0fa90b35ba 100644
--- a/2024/CVE-2024-4577.md
+++ b/2024/CVE-2024-4577.md
@@ -92,3 +92,5 @@ In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, w
 - https://github.com/xcanwin/CVE-2024-4577-PHP-RCE
 - https://github.com/zomasec/CVE-2024-4577
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4577.yaml
diff --git a/2024/CVE-2024-4620.md b/2024/CVE-2024-4620.md
index 9bc72afdb7b..2f261cda024 100644
--- a/2024/CVE-2024-4620.md
+++ b/2024/CVE-2024-4620.md
@@ -15,3 +15,5 @@ The ARForms - Premium WordPress Form Builder Plugin WordPress plugin before 6.6
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4620.yaml
diff --git a/2024/CVE-2024-46310.md b/2024/CVE-2024-46310.md
index 5ae2599a152..8a62670efc7 100644
--- a/2024/CVE-2024-46310.md
+++ b/2024/CVE-2024-46310.md
@@ -15,3 +15,5 @@ Incorrect Access Control in Cfx.re FXServer v9601 and earlier allows unauthentic
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46310.yaml
diff --git a/2024/CVE-2024-46506.md b/2024/CVE-2024-46506.md
index 504f9bb7562..05debd5aba9 100644
--- a/2024/CVE-2024-46506.md
+++ b/2024/CVE-2024-46506.md
@@ -15,3 +15,5 @@ NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command i
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46506.yaml
diff --git a/2024/CVE-2024-46627.md b/2024/CVE-2024-46627.md
index 32378d2fd7d..28bfbe3ee4c 100644
--- a/2024/CVE-2024-46627.md
+++ b/2024/CVE-2024-46627.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/d4lyw/CVE-2024-46627
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46627.yaml
diff --git a/2024/CVE-2024-46938.md b/2024/CVE-2024-46938.md
index 1dba0872f75..3cb0d4b7dc5 100644
--- a/2024/CVE-2024-46938.md
+++ b/2024/CVE-2024-46938.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46938.yaml
diff --git a/2024/CVE-2024-46986.md b/2024/CVE-2024-46986.md
index 98e0bc98ae2..8a36820a150 100644
--- a/2024/CVE-2024-46986.md
+++ b/2024/CVE-2024-46986.md
@@ -17,3 +17,5 @@ Camaleon CMS is a dynamic and advanced content management system based on Ruby o
 #### Github
 - https://github.com/vidura2/CVE-2024-46986
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46986.yaml
diff --git a/2024/CVE-2024-47062.md b/2024/CVE-2024-47062.md
index a1c34c85e42..266772a9af6 100644
--- a/2024/CVE-2024-47062.md
+++ b/2024/CVE-2024-47062.md
@@ -16,3 +16,5 @@ Navidrome is an open source web-based music collection server and streamer. Navi
 #### Github
 - https://github.com/saisathvik1/CVE-2024-47062
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-47062.yaml
diff --git a/2024/CVE-2024-47073.md b/2024/CVE-2024-47073.md
index bdfd86d727c..41440bc232e 100644
--- a/2024/CVE-2024-47073.md
+++ b/2024/CVE-2024-47073.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-47073.yaml
diff --git a/2024/CVE-2024-47176.md b/2024/CVE-2024-47176.md
index eb206e92ea8..231ca7f16ad 100644
--- a/2024/CVE-2024-47176.md
+++ b/2024/CVE-2024-47176.md
@@ -30,3 +30,5 @@ CUPS is a standards-based, open-source printing system, and `cups-browsed` conta
 - https://github.com/onhexgroup/Exploits-Review
 - https://github.com/workabhiwin09/CVE-2024-47176
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2024/CVE-2024-47176.yaml
diff --git a/2024/CVE-2024-47308.md b/2024/CVE-2024-47308.md
index a5462ae6c6d..53014efd053 100644
--- a/2024/CVE-2024-47308.md
+++ b/2024/CVE-2024-47308.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-47308.yaml
diff --git a/2024/CVE-2024-47374.md b/2024/CVE-2024-47374.md
index 7117739dad5..88e76561cf1 100644
--- a/2024/CVE-2024-47374.md
+++ b/2024/CVE-2024-47374.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-47374.yaml
diff --git a/2024/CVE-2024-47533.md b/2024/CVE-2024-47533.md
index c7ab1d02afe..39b6fc6553e 100644
--- a/2024/CVE-2024-47533.md
+++ b/2024/CVE-2024-47533.md
@@ -23,3 +23,5 @@ Cobbler, a Linux installation server that allows for rapid setup of network inst
 - https://github.com/zs1n/CVE-2023-46818
 - https://github.com/zs1n/CVE-2024-47533
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-47533.yaml
diff --git a/2024/CVE-2024-47575.md b/2024/CVE-2024-47575.md
index 0227ab9cd12..ffb1c1f0725 100644
--- a/2024/CVE-2024-47575.md
+++ b/2024/CVE-2024-47575.md
@@ -24,3 +24,5 @@ No PoCs from references.
 - https://github.com/revanslbw/CVE-2024-47575-POC
 - https://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-47575.yaml
diff --git a/2024/CVE-2024-48208.md b/2024/CVE-2024-48208.md
index 749d9215639..ee1104dc99d 100644
--- a/2024/CVE-2024-48208.md
+++ b/2024/CVE-2024-48208.md
@@ -16,3 +16,5 @@ pure-ftpd before 1.0.52 is vulnerable to Buffer Overflow. There is an out of bou
 #### Github
 - https://github.com/rohilchaudhry/CVE-2024-48208
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2024/CVE-2024-48208.yaml
diff --git a/2024/CVE-2024-48248.md b/2024/CVE-2024-48248.md
index 3bc6413b81a..cac6136e2c4 100644
--- a/2024/CVE-2024-48248.md
+++ b/2024/CVE-2024-48248.md
@@ -17,3 +17,5 @@ NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal f
 #### Github
 - https://github.com/watchtowrlabs/nakivo-arbitrary-file-read-poc-CVE-2024-48248
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48248.yaml
diff --git a/2024/CVE-2024-48307.md b/2024/CVE-2024-48307.md
index 47e595e5c2c..4905c31eff9 100644
--- a/2024/CVE-2024-48307.md
+++ b/2024/CVE-2024-48307.md
@@ -16,3 +16,5 @@ JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the
 #### Github
 - https://github.com/jisi-001/CVE-2024-48307POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48307.yaml
diff --git a/2024/CVE-2024-4836.md b/2024/CVE-2024-4836.md
index fd349153188..923b30be22d 100644
--- a/2024/CVE-2024-4836.md
+++ b/2024/CVE-2024-4836.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4836.yaml
diff --git a/2024/CVE-2024-48360.md b/2024/CVE-2024-48360.md
index c6ff466f270..9fe3b93dfbf 100644
--- a/2024/CVE-2024-48360.md
+++ b/2024/CVE-2024-48360.md
@@ -16,3 +16,5 @@ Qualitor v8.24 was discovered to contain a Server-Side Request Forgery (SSRF) vi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48360.yaml
diff --git a/2024/CVE-2024-4841.md b/2024/CVE-2024-4841.md
index f0a2cfecaef..ae6d204c8cb 100644
--- a/2024/CVE-2024-4841.md
+++ b/2024/CVE-2024-4841.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4841.yaml
diff --git a/2024/CVE-2024-48455.md b/2024/CVE-2024-48455.md
index 3001b98e73c..b3efc6ed7a2 100644
--- a/2024/CVE-2024-48455.md
+++ b/2024/CVE-2024-48455.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48455.yaml
diff --git a/2024/CVE-2024-48651.md b/2024/CVE-2024-48651.md
index 2b5caa98291..addec9c8d6e 100644
--- a/2024/CVE-2024-48651.md
+++ b/2024/CVE-2024-48651.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2024/CVE-2024-48651.yaml
diff --git a/2024/CVE-2024-48766.md b/2024/CVE-2024-48766.md
index c7aa1c72681..24bd17b3e51 100644
--- a/2024/CVE-2024-48766.md
+++ b/2024/CVE-2024-48766.md
@@ -15,3 +15,5 @@ NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48766.yaml
diff --git a/2024/CVE-2024-4879.md b/2024/CVE-2024-4879.md
index 28dc22baf37..ed4850db4be 100644
--- a/2024/CVE-2024-4879.md
+++ b/2024/CVE-2024-4879.md
@@ -24,3 +24,5 @@ ServiceNow has addressed an input validation vulnerability that was identified i
 - https://github.com/jdusane/CVE-2024-4879
 - https://github.com/tequilasunsh1ne/CVE_2024_4879
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4879.yaml
diff --git a/2024/CVE-2024-4885.md b/2024/CVE-2024-4885.md
index 36f9f0fec25..353a783bf5a 100644
--- a/2024/CVE-2024-4885.md
+++ b/2024/CVE-2024-4885.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/sinsinology/CVE-2024-4885
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4885.yaml
diff --git a/2024/CVE-2024-48914.md b/2024/CVE-2024-48914.md
index 9fd08b075af..6aa53d32269 100644
--- a/2024/CVE-2024-48914.md
+++ b/2024/CVE-2024-48914.md
@@ -18,3 +18,5 @@ Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 an
 #### Github
 - https://github.com/EQSTLab/CVE-2024-48914
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48914.yaml
diff --git a/2024/CVE-2024-4898.md b/2024/CVE-2024-4898.md
index a6410caad05..5c9f44af45b 100644
--- a/2024/CVE-2024-4898.md
+++ b/2024/CVE-2024-4898.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/cve-2024/CVE-2024-4898-Poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4898.yaml
diff --git a/2024/CVE-2024-49357.md b/2024/CVE-2024-49357.md
index 9830cdfe855..e2d8278d9f7 100644
--- a/2024/CVE-2024-49357.md
+++ b/2024/CVE-2024-49357.md
@@ -17,3 +17,5 @@ ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 syst
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-49357.yaml
diff --git a/2024/CVE-2024-4940.md b/2024/CVE-2024-4940.md
index ea9f37daba1..e859204cdf3 100644
--- a/2024/CVE-2024-4940.md
+++ b/2024/CVE-2024-4940.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4940.yaml
diff --git a/2024/CVE-2024-4956.md b/2024/CVE-2024-4956.md
index 8c174188c73..5157cfa3dc9 100644
--- a/2024/CVE-2024-4956.md
+++ b/2024/CVE-2024-4956.md
@@ -30,3 +30,5 @@ Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker
 - https://github.com/verylazytech/CVE-2024-4956
 - https://github.com/xungzzz/CVE-2024-4956
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4956.yaml
diff --git a/2024/CVE-2024-49757.md b/2024/CVE-2024-49757.md
index cc468f9f01f..43ee14b575d 100644
--- a/2024/CVE-2024-49757.md
+++ b/2024/CVE-2024-49757.md
@@ -20,3 +20,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-49757.yaml
diff --git a/2024/CVE-2024-50334.md b/2024/CVE-2024-50334.md
index 46cea87c82c..33fc004ecd0 100644
--- a/2024/CVE-2024-50334.md
+++ b/2024/CVE-2024-50334.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50334.yaml
diff --git a/2024/CVE-2024-50340.md b/2024/CVE-2024-50340.md
index 754f37a6aa4..2933e780696 100644
--- a/2024/CVE-2024-50340.md
+++ b/2024/CVE-2024-50340.md
@@ -20,3 +20,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Nyamort/CVE-2024-50340
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50340.yaml
diff --git a/2024/CVE-2024-50477.md b/2024/CVE-2024-50477.md
index b0e836b4669..25a6dae2393 100644
--- a/2024/CVE-2024-50477.md
+++ b/2024/CVE-2024-50477.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2024-50477
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50477.yaml
diff --git a/2024/CVE-2024-50498.md b/2024/CVE-2024-50498.md
index fe1c0022837..2eb9b1b34d9 100644
--- a/2024/CVE-2024-50498.md
+++ b/2024/CVE-2024-50498.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/RandomRobbieBF/CVE-2024-50498
 - https://github.com/p0et08/CVE-2024-50498
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50498.yaml
diff --git a/2024/CVE-2024-5057.md b/2024/CVE-2024-5057.md
index 26c708c881e..6f0f2f5519b 100644
--- a/2024/CVE-2024-5057.md
+++ b/2024/CVE-2024-5057.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5057.yaml
diff --git a/2024/CVE-2024-50603.md b/2024/CVE-2024-50603.md
index cb672f92878..3684e23a3a4 100644
--- a/2024/CVE-2024-50603.md
+++ b/2024/CVE-2024-50603.md
@@ -18,3 +18,5 @@ An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before
 - https://github.com/newlinesec/CVE-2024-50603
 - https://github.com/th3gokul/CVE-2024-50603
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50603.yaml
diff --git a/2024/CVE-2024-50623.md b/2024/CVE-2024-50623.md
index 2dd6e7ce5e8..463b54b1ec3 100644
--- a/2024/CVE-2024-50623.md
+++ b/2024/CVE-2024-50623.md
@@ -21,3 +21,5 @@ No PoCs from references.
 - https://github.com/verylazytech/CVE-2024-50623
 - https://github.com/watchtowrlabs/CVE-2024-50623
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50623.yaml
diff --git a/2024/CVE-2024-5082.md b/2024/CVE-2024-5082.md
index ac24ea58945..cb1aa68a787 100644
--- a/2024/CVE-2024-5082.md
+++ b/2024/CVE-2024-5082.md
@@ -15,3 +15,5 @@ A Remote Code Execution vulnerability has been discovered in Sonatype Nexus Repo
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5082.yaml
diff --git a/2024/CVE-2024-5084.md b/2024/CVE-2024-5084.md
index 64e913bf5f7..9d0e2026f95 100644
--- a/2024/CVE-2024-5084.md
+++ b/2024/CVE-2024-5084.md
@@ -23,3 +23,5 @@ No PoCs from references.
 - https://github.com/amessedad/autoexploitGPT
 - https://github.com/k3lpi3b4nsh33/CVE-2024-5084
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5084.yaml
diff --git a/2024/CVE-2024-50857.md b/2024/CVE-2024-50857.md
index ab7849a554a..f7a35700354 100644
--- a/2024/CVE-2024-50857.md
+++ b/2024/CVE-2024-50857.md
@@ -15,3 +15,5 @@ The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50857.yaml
diff --git a/2024/CVE-2024-50967.md b/2024/CVE-2024-50967.md
index 1ecc0a52138..a5b6782d141 100644
--- a/2024/CVE-2024-50967.md
+++ b/2024/CVE-2024-50967.md
@@ -15,3 +15,5 @@ The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an
 #### Github
 - https://github.com/0xByteHunter/CVE-2024-50967
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50967.yaml
diff --git a/2024/CVE-2024-51211.md b/2024/CVE-2024-51211.md
index 0e088c9f4f7..4496e7fa94d 100644
--- a/2024/CVE-2024-51211.md
+++ b/2024/CVE-2024-51211.md
@@ -16,3 +16,5 @@ SQL injection vulnerability exists in OS4ED openSIS-Classic Version 9.1, specifi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51211.yaml
diff --git a/2024/CVE-2024-51228.md b/2024/CVE-2024-51228.md
index 47d213bd241..b5364b7e6e0 100644
--- a/2024/CVE-2024-51228.md
+++ b/2024/CVE-2024-51228.md
@@ -21,3 +21,5 @@ An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.
 #### Github
 - https://github.com/tequilasunsh1ne/CVE_2024_51228
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51228.yaml
diff --git a/2024/CVE-2024-51378.md b/2024/CVE-2024-51378.md
index cf26a107452..7c3f0d5d7e7 100644
--- a/2024/CVE-2024-51378.md
+++ b/2024/CVE-2024-51378.md
@@ -19,3 +19,5 @@ getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel)
 - https://github.com/qnole000/CVE-2024-51378
 - https://github.com/refr4g/CVE-2024-51378
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51378.yaml
diff --git a/2024/CVE-2024-51482.md b/2024/CVE-2024-51482.md
index 3645d823bfc..c63a89354be 100644
--- a/2024/CVE-2024-51482.md
+++ b/2024/CVE-2024-51482.md
@@ -16,3 +16,5 @@ ZoneMinder is a free, open source closed-circuit television software application
 #### Github
 - https://github.com/BwithE/CVE-2024-51482
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51482.yaml
diff --git a/2024/CVE-2024-51483.md b/2024/CVE-2024-51483.md
index 938c5a34959..52b39460165 100644
--- a/2024/CVE-2024-51483.md
+++ b/2024/CVE-2024-51483.md
@@ -16,3 +16,5 @@ changedetection.io is free, open source web page change detection software. Prio
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51483.yaml
diff --git a/2024/CVE-2024-51567.md b/2024/CVE-2024-51567.md
index d154f0cbd80..c4758c62005 100644
--- a/2024/CVE-2024-51567.md
+++ b/2024/CVE-2024-51567.md
@@ -19,3 +19,5 @@ upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before
 - https://github.com/ajayalf/CVE-2024-51567
 - https://github.com/thehash007/CVE-2024-51567-RCE-EXPLOIT
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51567.yaml
diff --git a/2024/CVE-2024-51568.md b/2024/CVE-2024-51568.md
index 80648af325d..0ec99f6f985 100644
--- a/2024/CVE-2024-51568.md
+++ b/2024/CVE-2024-51568.md
@@ -16,3 +16,5 @@ CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completeP
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51568.yaml
diff --git a/2024/CVE-2024-51739.md b/2024/CVE-2024-51739.md
index ec2de5c8f92..0aa805e1bf1 100644
--- a/2024/CVE-2024-51739.md
+++ b/2024/CVE-2024-51739.md
@@ -20,3 +20,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51739.yaml
diff --git a/2024/CVE-2024-51977.md b/2024/CVE-2024-51977.md
index 1f5ddd2857b..0269d047495 100644
--- a/2024/CVE-2024-51977.md
+++ b/2024/CVE-2024-51977.md
@@ -478,3 +478,5 @@ An unauthenticated attacker who can access either the HTTP service (TCP port 80)
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51977.yaml
diff --git a/2024/CVE-2024-51978.md b/2024/CVE-2024-51978.md
index ff73c35d0e2..3f6eda1831c 100644
--- a/2024/CVE-2024-51978.md
+++ b/2024/CVE-2024-51978.md
@@ -710,3 +710,5 @@ An unauthenticated attacker who knows the target device's serial number, can gen
 #### Github
 - https://github.com/thx0701/POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51978.yaml
diff --git a/2024/CVE-2024-5217.md b/2024/CVE-2024-5217.md
index 25ae846a357..743854700fe 100644
--- a/2024/CVE-2024-5217.md
+++ b/2024/CVE-2024-5217.md
@@ -16,3 +16,5 @@ ServiceNow has addressed an input validation vulnerability that was identified i
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5217.yaml
diff --git a/2024/CVE-2024-5230.md b/2024/CVE-2024-5230.md
index 0897baf0bdd..d4c0c38d2c3 100644
--- a/2024/CVE-2024-5230.md
+++ b/2024/CVE-2024-5230.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5230.yaml
diff --git a/2024/CVE-2024-52433.md b/2024/CVE-2024-52433.md
index e75303f5aee..a0da4da2f49 100644
--- a/2024/CVE-2024-52433.md
+++ b/2024/CVE-2024-52433.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2024-52433
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-52433.yaml
diff --git a/2024/CVE-2024-5276.md b/2024/CVE-2024-5276.md
index 5d44368516e..38638d54a19 100644
--- a/2024/CVE-2024-5276.md
+++ b/2024/CVE-2024-5276.md
@@ -16,3 +16,5 @@ A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5276.yaml
diff --git a/2024/CVE-2024-52762.md b/2024/CVE-2024-52762.md
index 6b5bb8ffb6c..cfea2a1c1cd 100644
--- a/2024/CVE-2024-52762.md
+++ b/2024/CVE-2024-52762.md
@@ -15,3 +15,5 @@ A cross-site scripting (XSS) vulnerability in the component /master/header.php o
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-52762.yaml
diff --git a/2024/CVE-2024-52763.md b/2024/CVE-2024-52763.md
index fd071224e66..d386965c9b7 100644
--- a/2024/CVE-2024-52763.md
+++ b/2024/CVE-2024-52763.md
@@ -15,3 +15,5 @@ A cross-site scripting (XSS) vulnerability in the component /graph_all_periods.p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-52763.yaml
diff --git a/2024/CVE-2024-52875.md b/2024/CVE-2024-52875.md
index af781fd481a..94b28588be7 100644
--- a/2024/CVE-2024-52875.md
+++ b/2024/CVE-2024-52875.md
@@ -15,3 +15,5 @@ An issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5. The dest GET p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-52875.yaml
diff --git a/2024/CVE-2024-5315.md b/2024/CVE-2024-5315.md
index c855d76c6c7..476d62a0f16 100644
--- a/2024/CVE-2024-5315.md
+++ b/2024/CVE-2024-5315.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5315.yaml
diff --git a/2024/CVE-2024-5333.md b/2024/CVE-2024-5333.md
index c8fcf888442..032c671741b 100644
--- a/2024/CVE-2024-5333.md
+++ b/2024/CVE-2024-5333.md
@@ -15,3 +15,5 @@ The Events Calendar WordPress plugin before 6.8.2.1 is missing access checks in
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5333.yaml
diff --git a/2024/CVE-2024-5334.md b/2024/CVE-2024-5334.md
index 1cfbdc45302..b66b258d046 100644
--- a/2024/CVE-2024-5334.md
+++ b/2024/CVE-2024-5334.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5334.yaml
diff --git a/2024/CVE-2024-53704.md b/2024/CVE-2024-53704.md
index 1917dc6b153..7691edbf92c 100644
--- a/2024/CVE-2024-53704.md
+++ b/2024/CVE-2024-53704.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 - https://github.com/istagmbh/CVE-2024-53704
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-53704.yaml
diff --git a/2024/CVE-2024-53900.md b/2024/CVE-2024-53900.md
index 7f140eba7b6..33bf6425a67 100644
--- a/2024/CVE-2024-53900.md
+++ b/2024/CVE-2024-53900.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/Gokul-Krishnan-V-R/CVE-2024-53900
 - https://github.com/www-spam/CVE-2024-53900
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-53900.yaml
diff --git a/2024/CVE-2024-53991.md b/2024/CVE-2024-53991.md
index df4014939f4..1356da0b971 100644
--- a/2024/CVE-2024-53991.md
+++ b/2024/CVE-2024-53991.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-53991.yaml
diff --git a/2024/CVE-2024-53995.md b/2024/CVE-2024-53995.md
index 48e0b59eaad..194fb46a421 100644
--- a/2024/CVE-2024-53995.md
+++ b/2024/CVE-2024-53995.md
@@ -16,3 +16,5 @@ SickChill is an automatic video library manager for TV shows. A user-controlled
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-53995.yaml
diff --git a/2024/CVE-2024-5420.md b/2024/CVE-2024-5420.md
index 13ad2be9bc9..1a3d9b334ed 100644
--- a/2024/CVE-2024-5420.md
+++ b/2024/CVE-2024-5420.md
@@ -19,3 +19,5 @@ Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computer
 - https://github.com/fa-rrel/CVE-2024-5420-XSS
 - https://github.com/gh-ost00/CVE-2024-5420-XSS
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5420.yaml
diff --git a/2024/CVE-2024-5421.md b/2024/CVE-2024-5421.md
index 8a0a5cb0203..30e14ce11ac 100644
--- a/2024/CVE-2024-5421.md
+++ b/2024/CVE-2024-5421.md
@@ -18,3 +18,5 @@ Missing input validation and OS command integration of the input in the utnserve
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5421.yaml
diff --git a/2024/CVE-2024-54330.md b/2024/CVE-2024-54330.md
index ef7823122ce..c62db836cc8 100644
--- a/2024/CVE-2024-54330.md
+++ b/2024/CVE-2024-54330.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2024-54330
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-54330.yaml
diff --git a/2024/CVE-2024-54385.md b/2024/CVE-2024-54385.md
index c792337f861..bdf80d9ce8f 100644
--- a/2024/CVE-2024-54385.md
+++ b/2024/CVE-2024-54385.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2024-54385
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-54385.yaml
diff --git a/2024/CVE-2024-54763.md b/2024/CVE-2024-54763.md
index c465647431a..774456218d2 100644
--- a/2024/CVE-2024-54763.md
+++ b/2024/CVE-2024-54763.md
@@ -15,3 +15,5 @@ An access control issue in the component /login/hostinfo.cgi of ipTIME A2004 v12
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-54763.yaml
diff --git a/2024/CVE-2024-54764.md b/2024/CVE-2024-54764.md
index 47ac4a1b920..56679b65570 100644
--- a/2024/CVE-2024-54764.md
+++ b/2024/CVE-2024-54764.md
@@ -15,3 +15,5 @@ An access control issue in the component /login/hostinfo2.cgi of ipTIME A2004 v1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-54764.yaml
diff --git a/2024/CVE-2024-54767.md b/2024/CVE-2024-54767.md
index 5d76080d90b..f166152c9bf 100644
--- a/2024/CVE-2024-54767.md
+++ b/2024/CVE-2024-54767.md
@@ -16,3 +16,5 @@ An access control issue in the component /juis_boxinfo.xml of AVM FRITZ!Box 7530
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-54767.yaml
diff --git a/2024/CVE-2024-5488.md b/2024/CVE-2024-5488.md
index a8952781002..7db2a70e265 100644
--- a/2024/CVE-2024-5488.md
+++ b/2024/CVE-2024-5488.md
@@ -15,3 +15,5 @@ The SEOPress  WordPress plugin before 7.9 does not properly protect some of its
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5488.yaml
diff --git a/2024/CVE-2024-55218.md b/2024/CVE-2024-55218.md
index 585e5c21471..88cd23f6e02 100644
--- a/2024/CVE-2024-55218.md
+++ b/2024/CVE-2024-55218.md
@@ -15,3 +15,5 @@ IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting (XSS) via the meta p
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55218.yaml
diff --git a/2024/CVE-2024-5522.md b/2024/CVE-2024-5522.md
index 7cca2b12cae..d90477f18d1 100644
--- a/2024/CVE-2024-5522.md
+++ b/2024/CVE-2024-5522.md
@@ -17,3 +17,5 @@ The HTML5 Video Player  WordPress plugin before 2.5.27 does not sanitize and esc
 - https://github.com/geniuszlyy/CVE-2024-5522
 - https://github.com/kryptonproject/CVE-2024-5522-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5522.yaml
diff --git a/2024/CVE-2024-55415.md b/2024/CVE-2024-55415.md
index c314ae4bd87..20ddb72d759 100644
--- a/2024/CVE-2024-55415.md
+++ b/2024/CVE-2024-55415.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55415.yaml
diff --git a/2024/CVE-2024-55416.md b/2024/CVE-2024-55416.md
index 91d0bae86b1..e0677aaab4e 100644
--- a/2024/CVE-2024-55416.md
+++ b/2024/CVE-2024-55416.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55416.yaml
diff --git a/2024/CVE-2024-55417.md b/2024/CVE-2024-55417.md
index 95cb20e7153..873cce373cf 100644
--- a/2024/CVE-2024-55417.md
+++ b/2024/CVE-2024-55417.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55417.yaml
diff --git a/2024/CVE-2024-55457.md b/2024/CVE-2024-55457.md
index a1e061218d9..70561af5576 100644
--- a/2024/CVE-2024-55457.md
+++ b/2024/CVE-2024-55457.md
@@ -15,3 +15,5 @@ MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/dow
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55457.yaml
diff --git a/2024/CVE-2024-55550.md b/2024/CVE-2024-55550.md
index a12ed7d3593..02ca051f8e1 100644
--- a/2024/CVE-2024-55550.md
+++ b/2024/CVE-2024-55550.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55550.yaml
diff --git a/2024/CVE-2024-55556.md b/2024/CVE-2024-55556.md
index 03f77d95e4d..abe5a1f7091 100644
--- a/2024/CVE-2024-55556.md
+++ b/2024/CVE-2024-55556.md
@@ -15,3 +15,5 @@ A vulnerability in Crater Invoice allows an unauthenticated attacker with knowle
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-55556.yaml
diff --git a/2024/CVE-2024-55591.md b/2024/CVE-2024-55591.md
index a1e44340a26..329e55a4b4e 100644
--- a/2024/CVE-2024-55591.md
+++ b/2024/CVE-2024-55591.md
@@ -25,3 +25,5 @@ No PoCs from references.
 - https://github.com/virus-or-not/CVE-2024-55591
 - https://github.com/watchtowrlabs/fortios-auth-bypass-poc-CVE-2024-55591
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55591.yaml
diff --git a/2024/CVE-2024-55890.md b/2024/CVE-2024-55890.md
index 4ab516877b5..18012a607b4 100644
--- a/2024/CVE-2024-55890.md
+++ b/2024/CVE-2024-55890.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/samh4cks/CVE-2024-55890
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55890.yaml
diff --git a/2024/CVE-2024-55956.md b/2024/CVE-2024-55956.md
index 327a459dc5c..d7276b7226c 100644
--- a/2024/CVE-2024-55956.md
+++ b/2024/CVE-2024-55956.md
@@ -16,3 +16,5 @@ In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.
 #### Github
 - https://github.com/fl4m3-s/Cleo_Unauth_RCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55956.yaml
diff --git a/2024/CVE-2024-56064.md b/2024/CVE-2024-56064.md
index d9f876b190a..7254bc058e6 100644
--- a/2024/CVE-2024-56064.md
+++ b/2024/CVE-2024-56064.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2024-56064
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-56064.yaml
diff --git a/2024/CVE-2024-56145.md b/2024/CVE-2024-56145.md
index 319a28a7e85..cefd76de656 100644
--- a/2024/CVE-2024-56145.md
+++ b/2024/CVE-2024-56145.md
@@ -20,3 +20,5 @@ No PoCs from references.
 - https://github.com/Sachinart/CVE-2024-56145-craftcms-rce
 - https://github.com/hmhlol/craft-cms-RCE-CVE-2024-56145
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-56145.yaml
diff --git a/2024/CVE-2024-56159.md b/2024/CVE-2024-56159.md
index 30f813485b4..e549fbad932 100644
--- a/2024/CVE-2024-56159.md
+++ b/2024/CVE-2024-56159.md
@@ -16,3 +16,5 @@ Astro is a web framework for content-driven websites. A bug in the build process
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-56159.yaml
diff --git a/2024/CVE-2024-56331.md b/2024/CVE-2024-56331.md
index 2a1e76638d4..f5e46506618 100644
--- a/2024/CVE-2024-56331.md
+++ b/2024/CVE-2024-56331.md
@@ -16,3 +16,5 @@ Uptime Kuma is an open source, self-hosted monitoring tool. An **Improper URL Ha
 #### Github
 - https://github.com/griisemine/CVE-2024-56331
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-56331.yaml
diff --git a/2024/CVE-2024-56511.md b/2024/CVE-2024-56511.md
index cb4e1cba62a..28bff254e19 100644
--- a/2024/CVE-2024-56511.md
+++ b/2024/CVE-2024-56511.md
@@ -15,3 +15,5 @@ DataEase is an open source data visualization analysis tool. Prior to 2.10.4, th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-56511.yaml
diff --git a/2024/CVE-2024-56512.md b/2024/CVE-2024-56512.md
index a58fc96bb0e..2c796502c1a 100644
--- a/2024/CVE-2024-56512.md
+++ b/2024/CVE-2024-56512.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/absholi7ly/CVE-2024-56512-Apache-NiFi-Exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-56512.yaml
diff --git a/2024/CVE-2024-57045.md b/2024/CVE-2024-57045.md
index 88fd655021d..17fd044767d 100644
--- a/2024/CVE-2024-57045.md
+++ b/2024/CVE-2024-57045.md
@@ -15,3 +15,5 @@ A vulnerability in the D-Link DIR-859 router with firmware version A3 1.05 and e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57045.yaml
diff --git a/2024/CVE-2024-57046.md b/2024/CVE-2024-57046.md
index 0ab81e169b1..044ef6780c4 100644
--- a/2024/CVE-2024-57046.md
+++ b/2024/CVE-2024-57046.md
@@ -15,3 +15,5 @@ A vulnerability in the Netgear DGN2200 router with firmware version v1.0.0.46 an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57046.yaml
diff --git a/2024/CVE-2024-57049.md b/2024/CVE-2024-57049.md
index d6f6afab7a0..b4fa4a81457 100644
--- a/2024/CVE-2024-57049.md
+++ b/2024/CVE-2024-57049.md
@@ -15,3 +15,5 @@ A vulnerability in the TP-Link Archer c20 router with firmware version V6.6_2304
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57049.yaml
diff --git a/2024/CVE-2024-57241.md b/2024/CVE-2024-57241.md
index 3e243cd7223..170e1bd8504 100644
--- a/2024/CVE-2024-57241.md
+++ b/2024/CVE-2024-57241.md
@@ -15,3 +15,5 @@ Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web applicatio
 #### Github
 - https://github.com/woshidaheike/CVE-2024-57241
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57241.yaml
diff --git a/2024/CVE-2024-57514.md b/2024/CVE-2024-57514.md
index 1eab3321727..e5eef0db238 100644
--- a/2024/CVE-2024-57514.md
+++ b/2024/CVE-2024-57514.md
@@ -15,3 +15,5 @@ The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due
 #### Github
 - https://github.com/rvizx/CVE-2024-57514
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57514.yaml
diff --git a/2024/CVE-2024-5765.md b/2024/CVE-2024-5765.md
index c19bd0fb7d4..032fa7ea1a0 100644
--- a/2024/CVE-2024-5765.md
+++ b/2024/CVE-2024-5765.md
@@ -15,3 +15,5 @@ The WpStickyBar  WordPress plugin through 2.1.0 does not properly sanitise and e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5765.yaml
diff --git a/2024/CVE-2024-57726.md b/2024/CVE-2024-57726.md
index 7d078f4ece7..bc78b10b5d9 100644
--- a/2024/CVE-2024-57726.md
+++ b/2024/CVE-2024-57726.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57726.yaml
diff --git a/2024/CVE-2024-57727.md b/2024/CVE-2024-57727.md
index 7e29fac3b86..7fcee71fbd1 100644
--- a/2024/CVE-2024-57727.md
+++ b/2024/CVE-2024-57727.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/imjdl/CVE-2024-57727
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57727.yaml
diff --git a/2024/CVE-2024-58136.md b/2024/CVE-2024-58136.md
index badbbb103bd..d52b224ceb4 100644
--- a/2024/CVE-2024-58136.md
+++ b/2024/CVE-2024-58136.md
@@ -16,3 +16,5 @@ Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an _
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-58136.yaml
diff --git a/2024/CVE-2024-5827.md b/2024/CVE-2024-5827.md
index 26552a881a1..27414ccdee2 100644
--- a/2024/CVE-2024-5827.md
+++ b/2024/CVE-2024-5827.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5827.yaml
diff --git a/2024/CVE-2024-5910.md b/2024/CVE-2024-5910.md
index 749b426a299..a83e406b960 100644
--- a/2024/CVE-2024-5910.md
+++ b/2024/CVE-2024-5910.md
@@ -16,3 +16,5 @@ Missing authentication for a critical function in Palo Alto Networks Expedition
 #### Github
 - https://github.com/p33d/Palo-Alto-Expedition-Remote-Code
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5910.yaml
diff --git a/2024/CVE-2024-5932.md b/2024/CVE-2024-5932.md
index 760925ef27a..71ff450f5d2 100644
--- a/2024/CVE-2024-5932.md
+++ b/2024/CVE-2024-5932.md
@@ -22,3 +22,5 @@ The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is
 - https://github.com/hlc23/CVE-2024-5932-web-ui
 - https://github.com/tk-1001/PHPexploit_pack
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5932.yaml
diff --git a/2024/CVE-2024-5936.md b/2024/CVE-2024-5936.md
index 464b1667726..f9e6cc2df06 100644
--- a/2024/CVE-2024-5936.md
+++ b/2024/CVE-2024-5936.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5936.yaml
diff --git a/2024/CVE-2024-5947.md b/2024/CVE-2024-5947.md
index 65f8eef5722..c3d62c2c1dd 100644
--- a/2024/CVE-2024-5947.md
+++ b/2024/CVE-2024-5947.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Cappricio-Securities/CVE-2024-5947
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5947.yaml
diff --git a/2024/CVE-2024-5975.md b/2024/CVE-2024-5975.md
index 98d374667f7..e68169589a1 100644
--- a/2024/CVE-2024-5975.md
+++ b/2024/CVE-2024-5975.md
@@ -15,3 +15,5 @@ The CZ Loan Management WordPress plugin through 1.1 does not properly sanitise a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5975.yaml
diff --git a/2024/CVE-2024-6028.md b/2024/CVE-2024-6028.md
index 7728735ea7b..4e44152e332 100644
--- a/2024/CVE-2024-6028.md
+++ b/2024/CVE-2024-6028.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6028.yaml
diff --git a/2024/CVE-2024-6049.md b/2024/CVE-2024-6049.md
index e40f9fef366..6461a15cbd3 100644
--- a/2024/CVE-2024-6049.md
+++ b/2024/CVE-2024-6049.md
@@ -16,3 +16,5 @@ The web server of Lawo AG vsm LTC Time Sync (vTimeSync) is affected by a "..." (
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6049.yaml
diff --git a/2024/CVE-2024-6095.md b/2024/CVE-2024-6095.md
index de7cfc47a5d..e6c0a33311d 100644
--- a/2024/CVE-2024-6095.md
+++ b/2024/CVE-2024-6095.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Abdurahmon3236/-CVE-2024-6095
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6095.yaml
diff --git a/2024/CVE-2024-6159.md b/2024/CVE-2024-6159.md
index 331cdcabc63..ba74fbe490e 100644
--- a/2024/CVE-2024-6159.md
+++ b/2024/CVE-2024-6159.md
@@ -15,3 +15,5 @@ The Push Notification for Post and BuddyPress WordPress plugin before 1.9.4 does
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6159.yaml
diff --git a/2024/CVE-2024-6188.md b/2024/CVE-2024-6188.md
index cd221732a17..c16dd6875b6 100644
--- a/2024/CVE-2024-6188.md
+++ b/2024/CVE-2024-6188.md
@@ -17,3 +17,5 @@ Eine problematische Schwachstelle wurde in Parsec Automation TrackSYS 11.x.x gef
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6188.yaml
diff --git a/2024/CVE-2024-6205.md b/2024/CVE-2024-6205.md
index d3e63f23715..dbdf6605a42 100644
--- a/2024/CVE-2024-6205.md
+++ b/2024/CVE-2024-6205.md
@@ -15,3 +15,5 @@ The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sani
 #### Github
 - https://github.com/j3r1ch0123/CVE-2024-6205
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6205.yaml
diff --git a/2024/CVE-2024-6220.md b/2024/CVE-2024-6220.md
index 2233b2edeec..fea89aac891 100644
--- a/2024/CVE-2024-6220.md
+++ b/2024/CVE-2024-6220.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6220.yaml
diff --git a/2024/CVE-2024-6235.md b/2024/CVE-2024-6235.md
index 7f6ac2e0d9b..ed69cc1e7b6 100644
--- a/2024/CVE-2024-6235.md
+++ b/2024/CVE-2024-6235.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6235.yaml
diff --git a/2024/CVE-2024-6265.md b/2024/CVE-2024-6265.md
index d5d8b9c047a..4a397c9dd3c 100644
--- a/2024/CVE-2024-6265.md
+++ b/2024/CVE-2024-6265.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6265.yaml
diff --git a/2024/CVE-2024-6289.md b/2024/CVE-2024-6289.md
index 66693c92262..288eb841b3d 100644
--- a/2024/CVE-2024-6289.md
+++ b/2024/CVE-2024-6289.md
@@ -15,3 +15,5 @@ The WPS Hide Login WordPress plugin before 1.9.16.4 does not prevent redirects t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6289.yaml
diff --git a/2024/CVE-2024-6366.md b/2024/CVE-2024-6366.md
index 3a0e009cd38..d28ba4270de 100644
--- a/2024/CVE-2024-6366.md
+++ b/2024/CVE-2024-6366.md
@@ -16,3 +16,5 @@ The User Profile Builder  WordPress plugin before 3.11.8 does not have proper au
 - https://github.com/Abdurahmon3236/CVE-2024-6366
 - https://github.com/Nxploited/CVE-2024-6366-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6366.yaml
diff --git a/2024/CVE-2024-6396.md b/2024/CVE-2024-6396.md
index 689b5bca905..43d731bd1dc 100644
--- a/2024/CVE-2024-6396.md
+++ b/2024/CVE-2024-6396.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6396.yaml
diff --git a/2024/CVE-2024-6420.md b/2024/CVE-2024-6420.md
index 07b88ea5e86..72a8b2e65b4 100644
--- a/2024/CVE-2024-6420.md
+++ b/2024/CVE-2024-6420.md
@@ -15,3 +15,5 @@ The Hide My WP Ghost WordPress plugin before 5.2.02 does not prevent redirects t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6420.yaml
diff --git a/2024/CVE-2024-6460.md b/2024/CVE-2024-6460.md
index 1a19450e6e5..84cc99840dc 100644
--- a/2024/CVE-2024-6460.md
+++ b/2024/CVE-2024-6460.md
@@ -16,3 +16,5 @@ The Grow by Tradedoubler  WordPress plugin through 2.0.21 is vulnerable to Local
 - https://github.com/E1-Bot141/CVE-2024-6460
 - https://github.com/Nxploited/CVE-2024-6460
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6460.yaml
diff --git a/2024/CVE-2024-6517.md b/2024/CVE-2024-6517.md
index fced593912e..53f3308535a 100644
--- a/2024/CVE-2024-6517.md
+++ b/2024/CVE-2024-6517.md
@@ -15,3 +15,5 @@ The Contact Form 7 Math Captcha WordPress plugin through 2.0.1 does not sanitise
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6517.yaml
diff --git a/2024/CVE-2024-6555.md b/2024/CVE-2024-6555.md
index a5db05fea42..46906569ea8 100644
--- a/2024/CVE-2024-6555.md
+++ b/2024/CVE-2024-6555.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6555.yaml
diff --git a/2024/CVE-2024-6586.md b/2024/CVE-2024-6586.md
index 9a507e8a827..72724ecc0d1 100644
--- a/2024/CVE-2024-6586.md
+++ b/2024/CVE-2024-6586.md
@@ -15,3 +15,5 @@ Lightdash version 0.1024.6 allows users with the necessary permissions, such as
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6586.yaml
diff --git a/2024/CVE-2024-6587.md b/2024/CVE-2024-6587.md
index 33026ab2b1b..605cdd8b594 100644
--- a/2024/CVE-2024-6587.md
+++ b/2024/CVE-2024-6587.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6587.yaml
diff --git a/2024/CVE-2024-6646.md b/2024/CVE-2024-6646.md
index 44e4261bd15..18aad236122 100644
--- a/2024/CVE-2024-6646.md
+++ b/2024/CVE-2024-6646.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6646.yaml
diff --git a/2024/CVE-2024-6651.md b/2024/CVE-2024-6651.md
index b63c4c1710f..487fbdd516f 100644
--- a/2024/CVE-2024-6651.md
+++ b/2024/CVE-2024-6651.md
@@ -15,3 +15,5 @@ The WordPress File Upload WordPress plugin before 4.24.8 does not sanitise and e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6651.yaml
diff --git a/2024/CVE-2024-6670.md b/2024/CVE-2024-6670.md
index 13675ad3f1b..ea2f020f2bc 100644
--- a/2024/CVE-2024-6670.md
+++ b/2024/CVE-2024-6670.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/sinsinology/CVE-2024-6670
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6670.yaml
diff --git a/2024/CVE-2024-6671.md b/2024/CVE-2024-6671.md
index 0dd523b5af8..eefd6c933c3 100644
--- a/2024/CVE-2024-6671.md
+++ b/2024/CVE-2024-6671.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6671.yaml
diff --git a/2024/CVE-2024-6690.md b/2024/CVE-2024-6690.md
index f549d9cfb7b..c2cd9b6c900 100644
--- a/2024/CVE-2024-6690.md
+++ b/2024/CVE-2024-6690.md
@@ -15,3 +15,5 @@ The wccp-pro WordPress plugin before 15.3 contains an open-redirect flaw via the
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6690.yaml
diff --git a/2024/CVE-2024-6746.md b/2024/CVE-2024-6746.md
index 06a06d1f99a..e4b2d444a54 100644
--- a/2024/CVE-2024-6746.md
+++ b/2024/CVE-2024-6746.md
@@ -17,3 +17,5 @@ In NaiboWang EasySpider 0.6.2 für Windows wurde eine problematische Schwachstel
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6746.yaml
diff --git a/2024/CVE-2024-6753.md b/2024/CVE-2024-6753.md
index 531c0b679e2..36af4c76c39 100644
--- a/2024/CVE-2024-6753.md
+++ b/2024/CVE-2024-6753.md
@@ -16,3 +16,5 @@ The Social Auto Poster plugin for WordPress is vulnerable to Stored Cross-Site S
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6753.yaml
diff --git a/2024/CVE-2024-6781.md b/2024/CVE-2024-6781.md
index e549b0f6ba1..3d1b252e675 100644
--- a/2024/CVE-2024-6781.md
+++ b/2024/CVE-2024-6781.md
@@ -15,3 +15,5 @@ Path traversal in Calibre <= 7.14.0 allow unauthenticated attackers to achieve a
 #### Github
 - https://github.com/FelinaeBlanc/CVE_2024_6781
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6781.yaml
diff --git a/2024/CVE-2024-6782.md b/2024/CVE-2024-6782.md
index 0512eb15230..d48d8be22cb 100644
--- a/2024/CVE-2024-6782.md
+++ b/2024/CVE-2024-6782.md
@@ -19,3 +19,5 @@ Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attacker
 - https://github.com/jdpsl/CVE-2024-6782
 - https://github.com/zangjiahe/CVE-2024-6782
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6782.yaml
diff --git a/2024/CVE-2024-6842.md b/2024/CVE-2024-6842.md
index 2e60c7d6f3e..cfbf7a48f6b 100644
--- a/2024/CVE-2024-6842.md
+++ b/2024/CVE-2024-6842.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6842.yaml
diff --git a/2024/CVE-2024-6845.md b/2024/CVE-2024-6845.md
index 8cab4524f97..f5475c54045 100644
--- a/2024/CVE-2024-6845.md
+++ b/2024/CVE-2024-6845.md
@@ -15,3 +15,5 @@ The Chatbot with ChatGPT WordPress plugin before 2.4.6 does not have proper auth
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6845.yaml
diff --git a/2024/CVE-2024-6846.md b/2024/CVE-2024-6846.md
index 395e9f678af..5e7345b152e 100644
--- a/2024/CVE-2024-6846.md
+++ b/2024/CVE-2024-6846.md
@@ -15,3 +15,5 @@ The Chatbot with ChatGPT WordPress plugin before 2.4.5 does not validate access
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6846.yaml
diff --git a/2024/CVE-2024-6886.md b/2024/CVE-2024-6886.md
index d8a3443fec2..e50324394b6 100644
--- a/2024/CVE-2024-6886.md
+++ b/2024/CVE-2024-6886.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6886.yaml
diff --git a/2024/CVE-2024-6892.md b/2024/CVE-2024-6892.md
index d117a19f83b..ba87469deac 100644
--- a/2024/CVE-2024-6892.md
+++ b/2024/CVE-2024-6892.md
@@ -16,3 +16,5 @@ Attackers can craft a malicious link that once clicked will execute arbitrary Ja
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6892.yaml
diff --git a/2024/CVE-2024-6893.md b/2024/CVE-2024-6893.md
index cdf1439ff32..9ee4f5371d4 100644
--- a/2024/CVE-2024-6893.md
+++ b/2024/CVE-2024-6893.md
@@ -16,3 +16,5 @@ The "soap_cgi.pyc" API handler allows the XML body of SOAP requests to contain r
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6893.yaml
diff --git a/2024/CVE-2024-6911.md b/2024/CVE-2024-6911.md
index 40dbfa0d65f..371b01e28ba 100644
--- a/2024/CVE-2024-6911.md
+++ b/2024/CVE-2024-6911.md
@@ -16,3 +16,5 @@ Files on the Windows system are accessible without authentication to external pa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6911.yaml
diff --git a/2024/CVE-2024-6922.md b/2024/CVE-2024-6922.md
index 50bc47eb1da..a4b1d5adc10 100644
--- a/2024/CVE-2024-6922.md
+++ b/2024/CVE-2024-6922.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6922.yaml
diff --git a/2024/CVE-2024-6924.md b/2024/CVE-2024-6924.md
index 51587cda3b4..8724b15fce2 100644
--- a/2024/CVE-2024-6924.md
+++ b/2024/CVE-2024-6924.md
@@ -15,3 +15,5 @@ The TrueBooker  WordPress plugin before 1.0.3 does not properly sanitise and esc
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6924.yaml
diff --git a/2024/CVE-2024-6926.md b/2024/CVE-2024-6926.md
index eb8ba2ed4b8..22ea61ff1e7 100644
--- a/2024/CVE-2024-6926.md
+++ b/2024/CVE-2024-6926.md
@@ -15,3 +15,5 @@ The Viral Signup  WordPress plugin through 2.1 does not properly sanitise and es
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6926.yaml
diff --git a/2024/CVE-2024-6928.md b/2024/CVE-2024-6928.md
index 32354c75887..70bb0716b55 100644
--- a/2024/CVE-2024-6928.md
+++ b/2024/CVE-2024-6928.md
@@ -15,3 +15,5 @@ The Opti Marketing WordPress plugin through 2.0.9 does not properly sanitise and
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6928.yaml
diff --git a/2024/CVE-2024-7008.md b/2024/CVE-2024-7008.md
index 8ab2da40bc4..b8e61dc8144 100644
--- a/2024/CVE-2024-7008.md
+++ b/2024/CVE-2024-7008.md
@@ -16,3 +16,5 @@ Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7008.yaml
diff --git a/2024/CVE-2024-7029.md b/2024/CVE-2024-7029.md
index 0a874bdc87b..0b5ed37fb09 100644
--- a/2024/CVE-2024-7029.md
+++ b/2024/CVE-2024-7029.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/geniuszly/CVE-2024-7029
 - https://github.com/geniuszlyy/CVE-2024-7029
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7029.yaml
diff --git a/2024/CVE-2024-7097.md b/2024/CVE-2024-7097.md
index 79bc3bc6b8e..b9e22a36998 100644
--- a/2024/CVE-2024-7097.md
+++ b/2024/CVE-2024-7097.md
@@ -51,3 +51,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7097.yaml
diff --git a/2024/CVE-2024-7120.md b/2024/CVE-2024-7120.md
index f53eb207eaf..c92733a97a6 100644
--- a/2024/CVE-2024-7120.md
+++ b/2024/CVE-2024-7120.md
@@ -21,3 +21,5 @@ No PoCs from references.
 - https://github.com/gh-ost00/CVE-2024-7120
 - https://github.com/jokeir07x/CVE-2024-7120-Exploit-by-Dark-07x
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7120.yaml
diff --git a/2024/CVE-2024-7188.md b/2024/CVE-2024-7188.md
index d3e1a449caa..e5d47da11a8 100644
--- a/2024/CVE-2024-7188.md
+++ b/2024/CVE-2024-7188.md
@@ -16,3 +16,5 @@ Eine Schwachstelle wurde in Bylancer Quicklancer 2.4 ausgemacht. Sie wurde als k
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7188.yaml
diff --git a/2024/CVE-2024-7313.md b/2024/CVE-2024-7313.md
index 9d96cf59245..dff521d02d4 100644
--- a/2024/CVE-2024-7313.md
+++ b/2024/CVE-2024-7313.md
@@ -16,3 +16,5 @@ The Shield Security  WordPress plugin before 20.0.6 does not sanitise and escape
 #### Github
 - https://github.com/Wayne-Ker/CVE-2024-7313
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7313.yaml
diff --git a/2024/CVE-2024-7314.md b/2024/CVE-2024-7314.md
index 2a6afb91cad..c7c4d735fc1 100644
--- a/2024/CVE-2024-7314.md
+++ b/2024/CVE-2024-7314.md
@@ -15,3 +15,5 @@ anji-plus AJ-Report is affected by an authentication bypass vulnerability. A rem
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7314.yaml
diff --git a/2024/CVE-2024-7332.md b/2024/CVE-2024-7332.md
index 0224966dbd0..0d5b52ed311 100644
--- a/2024/CVE-2024-7332.md
+++ b/2024/CVE-2024-7332.md
@@ -17,3 +17,5 @@ Es wurde eine Schwachstelle in TOTOLINK CP450 4.1.0cu.747_B20191224 ausgemacht.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7332.yaml
diff --git a/2024/CVE-2024-7339.md b/2024/CVE-2024-7339.md
index 955815b5697..21d709d92e2 100644
--- a/2024/CVE-2024-7339.md
+++ b/2024/CVE-2024-7339.md
@@ -33,3 +33,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RevoltSecurities/CVE-2024-7339
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7339.yaml
diff --git a/2024/CVE-2024-7340.md b/2024/CVE-2024-7340.md
index 1e50ec47649..de187dc03da 100644
--- a/2024/CVE-2024-7340.md
+++ b/2024/CVE-2024-7340.md
@@ -15,3 +15,5 @@ The Weave server API allows remote users to fetch files from a specific director
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7340.yaml
diff --git a/2024/CVE-2024-7354.md b/2024/CVE-2024-7354.md
index 0ea8a4b0bfb..035d60d00e8 100644
--- a/2024/CVE-2024-7354.md
+++ b/2024/CVE-2024-7354.md
@@ -16,3 +16,5 @@ The Ninja Forms  WordPress plugin before 3.8.11 does not escape an URL before ou
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7354.yaml
diff --git a/2024/CVE-2024-7399.md b/2024/CVE-2024-7399.md
index 572511f82fd..cded7c6eda7 100644
--- a/2024/CVE-2024-7399.md
+++ b/2024/CVE-2024-7399.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 - https://github.com/davidxbors/CVE-2024-7399-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7399.yaml
diff --git a/2024/CVE-2024-7591.md b/2024/CVE-2024-7591.md
index 218e186ec56..7b8199d651a 100644
--- a/2024/CVE-2024-7591.md
+++ b/2024/CVE-2024-7591.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/butyraldehyde/CVE-2024-7591-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7591.yaml
diff --git a/2024/CVE-2024-7593.md b/2024/CVE-2024-7593.md
index c9ac5748e8b..156873c8a06 100644
--- a/2024/CVE-2024-7593.md
+++ b/2024/CVE-2024-7593.md
@@ -27,3 +27,5 @@ No PoCs from references.
 - https://github.com/skyrowalker/CVE-2024-7593
 - https://github.com/zxcod3/CVE-2024-7593
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7593.yaml
diff --git a/2024/CVE-2024-7714.md b/2024/CVE-2024-7714.md
index e4bc4ad5095..1ab8f5a8c0f 100644
--- a/2024/CVE-2024-7714.md
+++ b/2024/CVE-2024-7714.md
@@ -15,3 +15,5 @@ The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7714.yaml
diff --git a/2024/CVE-2024-7786.md b/2024/CVE-2024-7786.md
index a34f967ce23..cc666cb9c50 100644
--- a/2024/CVE-2024-7786.md
+++ b/2024/CVE-2024-7786.md
@@ -15,3 +15,5 @@ The Sensei LMS  WordPress plugin before 4.24.2 does not properly protect some it
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7786.yaml
diff --git a/2024/CVE-2024-7854.md b/2024/CVE-2024-7854.md
index faf32c488cc..72ce8e5ed48 100644
--- a/2024/CVE-2024-7854.md
+++ b/2024/CVE-2024-7854.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2024-7854
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7854.yaml
diff --git a/2024/CVE-2024-7928.md b/2024/CVE-2024-7928.md
index 4af4d9f7cda..c7442ca44bf 100644
--- a/2024/CVE-2024-7928.md
+++ b/2024/CVE-2024-7928.md
@@ -22,3 +22,5 @@ Eine problematische Schwachstelle wurde in FastAdmin bis 1.3.3.20220121 entdeckt
 - https://github.com/th3gokul/CVE-2024-7928
 - https://github.com/wh6amiGit/CVE-2024-7928
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7928.yaml
diff --git a/2024/CVE-2024-7954.md b/2024/CVE-2024-7954.md
index 5f5d70fd07f..091c91454f8 100644
--- a/2024/CVE-2024-7954.md
+++ b/2024/CVE-2024-7954.md
@@ -25,3 +25,5 @@ The porte_plume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vu
 - https://github.com/gh-ost00/CVE-2024-7954-RCE
 - https://github.com/r0otk3r/CVE-2024-7954
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7954.yaml
diff --git a/2024/CVE-2024-8021.md b/2024/CVE-2024-8021.md
index e99f09f69a6..88ed8905b8f 100644
--- a/2024/CVE-2024-8021.md
+++ b/2024/CVE-2024-8021.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8021.yaml
diff --git a/2024/CVE-2024-8181.md b/2024/CVE-2024-8181.md
index 4e137b554a3..b812448658a 100644
--- a/2024/CVE-2024-8181.md
+++ b/2024/CVE-2024-8181.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8181.yaml
diff --git a/2024/CVE-2024-8252.md b/2024/CVE-2024-8252.md
index f410f04ef7d..9e9defe1c87 100644
--- a/2024/CVE-2024-8252.md
+++ b/2024/CVE-2024-8252.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8252.yaml
diff --git a/2024/CVE-2024-8353.md b/2024/CVE-2024-8353.md
index a1c5679086e..513ec4a4d32 100644
--- a/2024/CVE-2024-8353.md
+++ b/2024/CVE-2024-8353.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/0xb0mb3r/CVE-2024-8353-PoC
 - https://github.com/EQSTLab/CVE-2024-8353
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8353.yaml
diff --git a/2024/CVE-2024-8425.md b/2024/CVE-2024-8425.md
index 7626074cc15..1e41fa36b1a 100644
--- a/2024/CVE-2024-8425.md
+++ b/2024/CVE-2024-8425.md
@@ -15,3 +15,5 @@ The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitra
 #### Github
 - https://github.com/KTN1990/CVE-2024-8425
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8425.yaml
diff --git a/2024/CVE-2024-8484.md b/2024/CVE-2024-8484.md
index 4c270854754..5f163fd7618 100644
--- a/2024/CVE-2024-8484.md
+++ b/2024/CVE-2024-8484.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2024-8484
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8484.yaml
diff --git a/2024/CVE-2024-8503.md b/2024/CVE-2024-8503.md
index 85f02a7e712..d50038b2524 100644
--- a/2024/CVE-2024-8503.md
+++ b/2024/CVE-2024-8503.md
@@ -15,3 +15,5 @@ An unauthenticated attacker can leverage a time-based SQL injection vulnerabilit
 #### Github
 - https://github.com/Chocapikk/CVE-2024-8504
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8503.yaml
diff --git a/2024/CVE-2024-8517.md b/2024/CVE-2024-8517.md
index cdc89a3cedd..0b7a8812ba5 100644
--- a/2024/CVE-2024-8517.md
+++ b/2024/CVE-2024-8517.md
@@ -20,3 +20,5 @@ No PoCs from references.
 - https://github.com/Chocapikk/CVE-2024-8517
 - https://github.com/saadhassan77/SPIP-BigUp-Unauthenticated-RCE-Exploit-CVE-2024-8517
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8517.yaml
diff --git a/2024/CVE-2024-8522.md b/2024/CVE-2024-8522.md
index 6d31b30f35f..d8da4aba25d 100644
--- a/2024/CVE-2024-8522.md
+++ b/2024/CVE-2024-8522.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Avento/CVE-2024-8522
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8522.yaml
diff --git a/2024/CVE-2024-8529.md b/2024/CVE-2024-8529.md
index 572a12bc844..6ec060687f5 100644
--- a/2024/CVE-2024-8529.md
+++ b/2024/CVE-2024-8529.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2024-8529
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8529.yaml
diff --git a/2024/CVE-2024-8625.md b/2024/CVE-2024-8625.md
index c262f11a947..331081be3b1 100644
--- a/2024/CVE-2024-8625.md
+++ b/2024/CVE-2024-8625.md
@@ -15,3 +15,5 @@ The TS Poll  WordPress plugin before 2.4.0 does not sanitize and escape a parame
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8625.yaml
diff --git a/2024/CVE-2024-8673.md b/2024/CVE-2024-8673.md
index 31115a860a3..c1e12315429 100644
--- a/2024/CVE-2024-8673.md
+++ b/2024/CVE-2024-8673.md
@@ -15,3 +15,5 @@ The Z-Downloads WordPress plugin before 1.11.7 does not properly validate upload
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8673.yaml
diff --git a/2024/CVE-2024-8698.md b/2024/CVE-2024-8698.md
index a7426672816..dca66d091b1 100644
--- a/2024/CVE-2024-8698.md
+++ b/2024/CVE-2024-8698.md
@@ -27,3 +27,5 @@ A flaw exists in the SAML signature validation method within the Keycloak XMLSig
 #### Github
 - https://github.com/huydoppaz/CVE-2024-8698-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8698.yaml
diff --git a/2024/CVE-2024-8752.md b/2024/CVE-2024-8752.md
index 070e74e1d95..c279a29edb0 100644
--- a/2024/CVE-2024-8752.md
+++ b/2024/CVE-2024-8752.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/D3anSPGDMS/CVE-2024-8752
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8752.yaml
diff --git a/2024/CVE-2024-8852.md b/2024/CVE-2024-8852.md
index a98235052bd..2670fd07bbc 100644
--- a/2024/CVE-2024-8852.md
+++ b/2024/CVE-2024-8852.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8852.yaml
diff --git a/2024/CVE-2024-8856.md b/2024/CVE-2024-8856.md
index 7b4b30b8c7c..6390a8afbd8 100644
--- a/2024/CVE-2024-8856.md
+++ b/2024/CVE-2024-8856.md
@@ -18,3 +18,5 @@ The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to
 - https://github.com/ubaii/CVE-2024-8856
 - https://github.com/ubaydev/CVE-2024-8856
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8856.yaml
diff --git a/2024/CVE-2024-8859.md b/2024/CVE-2024-8859.md
index a003c07a443..8b195349efc 100644
--- a/2024/CVE-2024-8859.md
+++ b/2024/CVE-2024-8859.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8859.yaml
diff --git a/2024/CVE-2024-8877.md b/2024/CVE-2024-8877.md
index 9e52db236f1..e74937257e9 100644
--- a/2024/CVE-2024-8877.md
+++ b/2024/CVE-2024-8877.md
@@ -15,3 +15,5 @@ Improper neutralization of special elements results in a SQL Injection vulnerabi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8877.yaml
diff --git a/2024/CVE-2024-8883.md b/2024/CVE-2024-8883.md
index 2e42b401a17..859c7b63aa3 100644
--- a/2024/CVE-2024-8883.md
+++ b/2024/CVE-2024-8883.md
@@ -29,3 +29,5 @@ A misconfiguration flaw was found in Keycloak. This issue can allow an attacker
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8883.yaml
diff --git a/2024/CVE-2024-8911.md b/2024/CVE-2024-8911.md
index ee202d4f1f1..63bc774cd1d 100644
--- a/2024/CVE-2024-8911.md
+++ b/2024/CVE-2024-8911.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8911.yaml
diff --git a/2024/CVE-2024-8943.md b/2024/CVE-2024-8943.md
index 19a7bc7a6ad..1459520a26f 100644
--- a/2024/CVE-2024-8943.md
+++ b/2024/CVE-2024-8943.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8943.yaml
diff --git a/2024/CVE-2024-8963.md b/2024/CVE-2024-8963.md
index 95d5e143f19..5d563002e90 100644
--- a/2024/CVE-2024-8963.md
+++ b/2024/CVE-2024-8963.md
@@ -19,3 +19,5 @@ No PoCs from references.
 - https://github.com/flyingllama87/CVE-2024-8190-unauth
 - https://github.com/patfire94/CVE-2024-8963
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8963.yaml
diff --git a/2024/CVE-2024-9007.md b/2024/CVE-2024-9007.md
index fecee13114b..128b88a5eba 100644
--- a/2024/CVE-2024-9007.md
+++ b/2024/CVE-2024-9007.md
@@ -17,3 +17,5 @@ Es wurde eine Schwachstelle in jeanmarc77 123solar 1.8.4.5 entdeckt. Sie wurde a
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9007.yaml
diff --git a/2024/CVE-2024-9014.md b/2024/CVE-2024-9014.md
index 7256c650238..84c5f87be79 100644
--- a/2024/CVE-2024-9014.md
+++ b/2024/CVE-2024-9014.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/EQSTLab/CVE-2024-9014
 - https://github.com/r0otk3r/CVE-2024-9014
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9014.yaml
diff --git a/2024/CVE-2024-9047.md b/2024/CVE-2024-9047.md
index fb5b99796fc..d44fbd2b154 100644
--- a/2024/CVE-2024-9047.md
+++ b/2024/CVE-2024-9047.md
@@ -20,3 +20,5 @@ No PoCs from references.
 - https://github.com/tpdlshdmlrkfmcla/CVE-2024-9047
 - https://github.com/verylazytech/CVE-2024-9047
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9047.yaml
diff --git a/2024/CVE-2024-9061.md b/2024/CVE-2024-9061.md
index 5498fc95b92..1e34d6cd0ad 100644
--- a/2024/CVE-2024-9061.md
+++ b/2024/CVE-2024-9061.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2024-9061
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9061.yaml
diff --git a/2024/CVE-2024-9161.md b/2024/CVE-2024-9161.md
index 4a4d000c7cc..3fc1f6ba2fa 100644
--- a/2024/CVE-2024-9161.md
+++ b/2024/CVE-2024-9161.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9161.yaml
diff --git a/2024/CVE-2024-9166.md b/2024/CVE-2024-9166.md
index 6cfc4007dc9..6f7ce34826e 100644
--- a/2024/CVE-2024-9166.md
+++ b/2024/CVE-2024-9166.md
@@ -15,3 +15,5 @@ The device enables an unauthorized attacker to execute system commands with elev
 #### Github
 - https://github.com/Andrysqui/CVE-2024-9166
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9166.yaml
diff --git a/2024/CVE-2024-9186.md b/2024/CVE-2024-9186.md
index 09554ea2bef..d9fd2a305db 100644
--- a/2024/CVE-2024-9186.md
+++ b/2024/CVE-2024-9186.md
@@ -15,3 +15,5 @@ The Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9186.yaml
diff --git a/2024/CVE-2024-9193.md b/2024/CVE-2024-9193.md
index 5d073624335..c5a2b6810ca 100644
--- a/2024/CVE-2024-9193.md
+++ b/2024/CVE-2024-9193.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9193.yaml
diff --git a/2024/CVE-2024-9234.md b/2024/CVE-2024-9234.md
index 1e8338a2cef..102c6f7c6db 100644
--- a/2024/CVE-2024-9234.md
+++ b/2024/CVE-2024-9234.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/Nxploited/CVE-2024-9234
 - https://github.com/RandomRobbieBF/CVE-2024-9234
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9234.yaml
diff --git a/2024/CVE-2024-9264.md b/2024/CVE-2024-9264.md
index d68513e750c..14709709f1f 100644
--- a/2024/CVE-2024-9264.md
+++ b/2024/CVE-2024-9264.md
@@ -30,3 +30,5 @@ No PoCs from references.
 - https://github.com/z3k0sec/CVE-2024-9264-RCE-Exploit
 - https://github.com/z3k0sec/File-Read-CVE-2024-9264
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9264.yaml
diff --git a/2024/CVE-2024-9463.md b/2024/CVE-2024-9463.md
index 85491a19bbe..337fd58b54c 100644
--- a/2024/CVE-2024-9463.md
+++ b/2024/CVE-2024-9463.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/momo1239/CVE-2024-9463-Proof-of-Concept
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9463.yaml
diff --git a/2024/CVE-2024-9465.md b/2024/CVE-2024-9465.md
index 648d8ee7d3f..4936233ddd3 100644
--- a/2024/CVE-2024-9465.md
+++ b/2024/CVE-2024-9465.md
@@ -17,3 +17,5 @@ An SQL injection vulnerability in Palo Alto Networks Expedition allows an unauth
 - https://github.com/Qlng/CVE-2024-9465
 - https://github.com/horizon3ai/CVE-2024-9465
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9465.yaml
diff --git a/2024/CVE-2024-9474.md b/2024/CVE-2024-9474.md
index 52fb69b67d4..cb137d52957 100644
--- a/2024/CVE-2024-9474.md
+++ b/2024/CVE-2024-9474.md
@@ -31,3 +31,5 @@ A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allow
 - https://github.com/deathvu/CVE-2024-9474
 - https://github.com/k4nfr3/CVE-2024-9474
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9474.yaml
diff --git a/2024/CVE-2024-9487.md b/2024/CVE-2024-9487.md
index bc9564567bc..5321ade78e7 100644
--- a/2024/CVE-2024-9487.md
+++ b/2024/CVE-2024-9487.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-9487.yaml
diff --git a/2024/CVE-2024-9593.md b/2024/CVE-2024-9593.md
index c6c602f736c..7adfffc6c59 100644
--- a/2024/CVE-2024-9593.md
+++ b/2024/CVE-2024-9593.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/Nxploited/CVE-2024-9593-Exploit
 - https://github.com/RandomRobbieBF/CVE-2024-9593
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9593.yaml
diff --git a/2024/CVE-2024-9617.md b/2024/CVE-2024-9617.md
index c86c4c7773f..e512cf0c976 100644
--- a/2024/CVE-2024-9617.md
+++ b/2024/CVE-2024-9617.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9617.yaml
diff --git a/2024/CVE-2024-9643.md b/2024/CVE-2024-9643.md
index 3134cbbdef5..f1a17c9c212 100644
--- a/2024/CVE-2024-9643.md
+++ b/2024/CVE-2024-9643.md
@@ -16,3 +16,5 @@ The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to authenticati
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9643.yaml
diff --git a/2024/CVE-2024-9707.md b/2024/CVE-2024-9707.md
index dabdf473158..75444fe8346 100644
--- a/2024/CVE-2024-9707.md
+++ b/2024/CVE-2024-9707.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/Nxploited/CVE-2024-9707-Poc
 - https://github.com/RandomRobbieBF/CVE-2024-9707
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9707.yaml
diff --git a/2024/CVE-2024-9765.md b/2024/CVE-2024-9765.md
index 13e66858fbe..81e9961017f 100644
--- a/2024/CVE-2024-9765.md
+++ b/2024/CVE-2024-9765.md
@@ -15,3 +15,5 @@ The EKC Tournament Manager WordPress plugin before 2.2.2 allows a logged in admi
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9765.yaml
diff --git a/2024/CVE-2024-9772.md b/2024/CVE-2024-9772.md
index 840bcb75150..aac186ce3a3 100644
--- a/2024/CVE-2024-9772.md
+++ b/2024/CVE-2024-9772.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9772.yaml
diff --git a/2024/CVE-2024-9796.md b/2024/CVE-2024-9796.md
index 0be9fd70d2b..94e59d18540 100644
--- a/2024/CVE-2024-9796.md
+++ b/2024/CVE-2024-9796.md
@@ -17,3 +17,5 @@ The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and esc
 - https://github.com/RandomRobbieBF/CVE-2024-9796
 - https://github.com/viniciuslazzari/CVE-2024-9796
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9796.yaml
diff --git a/2024/CVE-2024-9916.md b/2024/CVE-2024-9916.md
index 86b660e0486..ac1c99b7df3 100644
--- a/2024/CVE-2024-9916.md
+++ b/2024/CVE-2024-9916.md
@@ -17,3 +17,5 @@ Eine kritische Schwachstelle wurde in HuangDou UTCMS V9 entdeckt. Hierbei geht e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9916.yaml
diff --git a/2024/CVE-2024-9935.md b/2024/CVE-2024-9935.md
index 44ffde67ad0..ac790648be4 100644
--- a/2024/CVE-2024-9935.md
+++ b/2024/CVE-2024-9935.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/RandomRobbieBF/CVE-2024-9935
 - https://github.com/verylazytech/CVE-2024-9935
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9935.yaml
diff --git a/2024/CVE-2024-9989.md b/2024/CVE-2024-9989.md
index 376da6edac2..7e8cf01f0e0 100644
--- a/2024/CVE-2024-9989.md
+++ b/2024/CVE-2024-9989.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9989.yaml
diff --git a/2025/CVE-2025-0107.md b/2025/CVE-2025-0107.md
index 5872e6c42b9..3173f80f655 100644
--- a/2025/CVE-2025-0107.md
+++ b/2025/CVE-2025-0107.md
@@ -20,3 +20,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0107.yaml
diff --git a/2025/CVE-2025-0108.md b/2025/CVE-2025-0108.md
index 70723f6872e..c2ddb867bcb 100644
--- a/2025/CVE-2025-0108.md
+++ b/2025/CVE-2025-0108.md
@@ -26,3 +26,5 @@ An authentication bypass in the Palo Alto Networks PAN-OS software enables an un
 - https://github.com/becrevex/CVE-2025-0108
 - https://github.com/sohaibeb/CVE-2025-0108
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0108.yaml
diff --git a/2025/CVE-2025-0133.md b/2025/CVE-2025-0133.md
index 2a5215d5398..7dc5e5ccf71 100644
--- a/2025/CVE-2025-0133.md
+++ b/2025/CVE-2025-0133.md
@@ -23,3 +23,5 @@ A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect™ gat
 - https://github.com/wiseep/CVE-2025-0133
 - https://github.com/ynsmroztas/-CVE-2025-0133-GlobalProtect-XSS
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0133.yaml
diff --git a/2025/CVE-2025-0282.md b/2025/CVE-2025-0282.md
index 3a7202bb996..cce52baf467 100644
--- a/2025/CVE-2025-0282.md
+++ b/2025/CVE-2025-0282.md
@@ -29,3 +29,5 @@ A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5,
 - https://github.com/punitdarji/Ivanti-CVE-2025-0282
 - https://github.com/watchtowrlabs/CVE-2025-0282
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0282.yaml
diff --git a/2025/CVE-2025-0520.md b/2025/CVE-2025-0520.md
index a0c3bc3c2f5..1b0f15c0510 100644
--- a/2025/CVE-2025-0520.md
+++ b/2025/CVE-2025-0520.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0520.yaml
diff --git a/2025/CVE-2025-0674.md b/2025/CVE-2025-0674.md
index c67c8d9c654..d1c8b84f57a 100644
--- a/2025/CVE-2025-0674.md
+++ b/2025/CVE-2025-0674.md
@@ -22,3 +22,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0674.yaml
diff --git a/2025/CVE-2025-0868.md b/2025/CVE-2025-0868.md
index e27e7d57480..e4b844552f5 100644
--- a/2025/CVE-2025-0868.md
+++ b/2025/CVE-2025-0868.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/aidana-gift/CVE-2025-0868
 - https://github.com/pbuff07/waf_repeater
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0868.yaml
diff --git a/2025/CVE-2025-10035.md b/2025/CVE-2025-10035.md
index 0f8b8a180a9..be1b0d467d1 100644
--- a/2025/CVE-2025-10035.md
+++ b/2025/CVE-2025-10035.md
@@ -19,3 +19,5 @@ No PoCs from references.
 - https://github.com/orange0Mint/CVE-2025-10035_GoAnywhere
 - https://github.com/rxerium/CVE-2025-10035
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10035.yaml
diff --git a/2025/CVE-2025-10090.md b/2025/CVE-2025-10090.md
index 0523668a5c9..fbc1a5e2e99 100644
--- a/2025/CVE-2025-10090.md
+++ b/2025/CVE-2025-10090.md
@@ -19,3 +19,5 @@ Es wurde eine Schwachstelle in Jinher OA bis 1.2 entdeckt. Betroffen davon ist e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10090.yaml
diff --git a/2025/CVE-2025-10210.md b/2025/CVE-2025-10210.md
index 1cd27c35842..aadeee69b63 100644
--- a/2025/CVE-2025-10210.md
+++ b/2025/CVE-2025-10210.md
@@ -20,3 +20,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10210.yaml
diff --git a/2025/CVE-2025-1023.md b/2025/CVE-2025-1023.md
index 512136e4e3e..b1b1f43bec0 100644
--- a/2025/CVE-2025-1023.md
+++ b/2025/CVE-2025-1023.md
@@ -15,3 +15,5 @@ A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1023.yaml
diff --git a/2025/CVE-2025-1025.md b/2025/CVE-2025-1025.md
index 0e2f90265f0..b15257ea64a 100644
--- a/2025/CVE-2025-1025.md
+++ b/2025/CVE-2025-1025.md
@@ -17,3 +17,5 @@ Versions of the package cockpit-hq/cockpit before 2.4.1 are vulnerable to Arbitr
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1025.yaml
diff --git a/2025/CVE-2025-1035.md b/2025/CVE-2025-1035.md
index 52eb29af80b..ff6eb63a923 100644
--- a/2025/CVE-2025-1035.md
+++ b/2025/CVE-2025-1035.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1035.yaml
diff --git a/2025/CVE-2025-1097.md b/2025/CVE-2025-1097.md
index 94fe1d05d9d..b36948d52b2 100644
--- a/2025/CVE-2025-1097.md
+++ b/2025/CVE-2025-1097.md
@@ -20,3 +20,5 @@ No PoCs from references.
 - https://github.com/lufeirider/IngressNightmare-PoC
 - https://github.com/salt318/CVE-2025-1974
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1097.yaml
diff --git a/2025/CVE-2025-1098.md b/2025/CVE-2025-1098.md
index 08a54aed40b..14292820728 100644
--- a/2025/CVE-2025-1098.md
+++ b/2025/CVE-2025-1098.md
@@ -20,3 +20,5 @@ No PoCs from references.
 - https://github.com/lufeirider/IngressNightmare-PoC
 - https://github.com/salt318/CVE-2025-1974
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1098.yaml
diff --git a/2025/CVE-2025-1232.md b/2025/CVE-2025-1232.md
index efc8ab0b9ef..a543364f20c 100644
--- a/2025/CVE-2025-1232.md
+++ b/2025/CVE-2025-1232.md
@@ -15,3 +15,5 @@ The Site Reviews WordPress plugin before 7.2.5 does not properly sanitise and es
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1232.yaml
diff --git a/2025/CVE-2025-1302.md b/2025/CVE-2025-1302.md
index f1791bf4031..9e842e6363a 100644
--- a/2025/CVE-2025-1302.md
+++ b/2025/CVE-2025-1302.md
@@ -5,7 +5,11 @@
 
 ### Description
 
-Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of eval='safe' mode.

**Note:**

This is caused by an incomplete fix for [CVE-2024-21534](https://security.snyk.io/vuln/SNYK-JS-JSONPATHPLUS-7945884).
+Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of eval='safe' mode.
+
+**Note:**
+
+This is caused by an incomplete fix for [CVE-2024-21534](https://security.snyk.io/vuln/SNYK-JS-JSONPATHPLUS-7945884).
 
 ### POC
 
@@ -18,3 +22,5 @@ Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Cod
 - https://github.com/abrewer251/CVE-2025-1302_jsonpath-plus_RCE
 - https://github.com/vladko312/extras
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1302.yaml
diff --git a/2025/CVE-2025-1303.md b/2025/CVE-2025-1303.md
index 4da6f53ac2f..a0a536065c8 100644
--- a/2025/CVE-2025-1303.md
+++ b/2025/CVE-2025-1303.md
@@ -15,3 +15,5 @@ The Plugin Oficial  WordPress plugin through 1.7.3 does not sanitise and escape
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1303.yaml
diff --git a/2025/CVE-2025-1323.md b/2025/CVE-2025-1323.md
index 71390852a7d..ad82f61315e 100644
--- a/2025/CVE-2025-1323.md
+++ b/2025/CVE-2025-1323.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/p33d/cve-2025-1323
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1323.yaml
diff --git a/2025/CVE-2025-1338.md b/2025/CVE-2025-1338.md
index 168a226f796..20de52a7ab3 100644
--- a/2025/CVE-2025-1338.md
+++ b/2025/CVE-2025-1338.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1338.yaml
diff --git a/2025/CVE-2025-1361.md b/2025/CVE-2025-1361.md
index 71aa15cfe48..be2b26243ff 100644
--- a/2025/CVE-2025-1361.md
+++ b/2025/CVE-2025-1361.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1361.yaml
diff --git a/2025/CVE-2025-14847.md b/2025/CVE-2025-14847.md
index 0eff081dea9..964b1bfb0be 100644
--- a/2025/CVE-2025-14847.md
+++ b/2025/CVE-2025-14847.md
@@ -23,3 +23,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/sakthivel10q/CVE-2025-14847
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2025/CVE-2025-14847.yaml
diff --git a/2025/CVE-2025-1550.md b/2025/CVE-2025-1550.md
index 975c7d9ed20..cc6eac3d3b4 100644
--- a/2025/CVE-2025-1550.md
+++ b/2025/CVE-2025-1550.md
@@ -16,3 +16,5 @@ The Keras Model.load_model function permits arbitrary code execution, even with
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-1550.yaml
diff --git a/2025/CVE-2025-1562.md b/2025/CVE-2025-1562.md
index fe55f819875..52d0a354675 100644
--- a/2025/CVE-2025-1562.md
+++ b/2025/CVE-2025-1562.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/gmh5225/CVE-2025-1562
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1562.yaml
diff --git a/2025/CVE-2025-1595.md b/2025/CVE-2025-1595.md
index a7b32d24470..553efa95ff4 100644
--- a/2025/CVE-2025-1595.md
+++ b/2025/CVE-2025-1595.md
@@ -25,3 +25,5 @@ In Anhui Xufan Information Technology EasyCVR bis 2.7.0 wurde eine problematisch
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1595.yaml
diff --git a/2025/CVE-2025-1661.md b/2025/CVE-2025-1661.md
index 4e0c45cbfe3..563b498e917 100644
--- a/2025/CVE-2025-1661.md
+++ b/2025/CVE-2025-1661.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/gbrsh/CVE-2025-1661
 - https://github.com/shahwarshah/CVE-2025-1661
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1661.yaml
diff --git a/2025/CVE-2025-1743.md b/2025/CVE-2025-1743.md
index c101050ea17..c548999dde4 100644
--- a/2025/CVE-2025-1743.md
+++ b/2025/CVE-2025-1743.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1743.yaml
diff --git a/2025/CVE-2025-1974.md b/2025/CVE-2025-1974.md
index 844b969a0c7..7b0ac7a1ce0 100644
--- a/2025/CVE-2025-1974.md
+++ b/2025/CVE-2025-1974.md
@@ -35,3 +35,5 @@ No PoCs from references.
 - https://github.com/zulloper/CVE-2025-1974
 - https://github.com/zwxxb/CVE-2025-1974
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1974.yaml
diff --git a/2025/CVE-2025-2010.md b/2025/CVE-2025-2010.md
index a2d70bbb67f..b5ffaf7382f 100644
--- a/2025/CVE-2025-2010.md
+++ b/2025/CVE-2025-2010.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2010.yaml
diff --git a/2025/CVE-2025-2011.md b/2025/CVE-2025-2011.md
index 4f5e02c86c5..5399d440760 100644
--- a/2025/CVE-2025-2011.md
+++ b/2025/CVE-2025-2011.md
@@ -15,3 +15,5 @@ The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to gen
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2011.yaml
diff --git a/2025/CVE-2025-20188.md b/2025/CVE-2025-20188.md
index 717086b0043..f247d6e679c 100644
--- a/2025/CVE-2025-20188.md
+++ b/2025/CVE-2025-20188.md
@@ -11,7 +11,9 @@
 
 ### Description
 
-A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system.

 This vulnerability is due to the presence of a hard-coded JSON Web Token (JWT) on an affected system.  An attacker could exploit this vulnerability by sending crafted HTTPS requests to the AP file upload interface. A successful exploit could allow the attacker to upload files, perform path traversal, and execute arbitrary commands with root privileges.
+A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system.
+
+ This vulnerability is due to the presence of a hard-coded JSON Web Token (JWT) on an affected system.  An attacker could exploit this vulnerability by sending crafted HTTPS requests to the AP file upload interface. A successful exploit could allow the attacker to upload files, perform path traversal, and execute arbitrary commands with root privileges.
 
 ### POC
 
@@ -21,3 +23,5 @@ A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean A
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-20188.yaml
diff --git a/2025/CVE-2025-20281.md b/2025/CVE-2025-20281.md
index 330ed6d5bf1..8860a765dc1 100644
--- a/2025/CVE-2025-20281.md
+++ b/2025/CVE-2025-20281.md
@@ -14,7 +14,9 @@
 
 ### Description
 
-A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability.

This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to obtain root privileges on an affected device.
+A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability.
+
+This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to obtain root privileges on an affected device.
 
 ### POC
 
@@ -26,3 +28,5 @@ No PoCs from references.
 - https://github.com/grupooruss/CVE-2025-20281-Cisco
 - https://github.com/ill-deed/Cisco-CVE-2025-20281-illdeed
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-20281.yaml
diff --git a/2025/CVE-2025-20282.md b/2025/CVE-2025-20282.md
index 853c7002780..3c4baee58cb 100644
--- a/2025/CVE-2025-20282.md
+++ b/2025/CVE-2025-20282.md
@@ -6,7 +6,9 @@
 
 ### Description
 
-A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device and then execute those files on the underlying operating system as root.

This vulnerability is due a lack of file validation checks that would prevent uploaded files from being placed in privileged directories on an affected system. An attacker could exploit this vulnerability by uploading a crafted file to the affected device. A successful exploit could allow the attacker to store malicious files on the affected system and then execute arbitrary code or obtain root privileges on the system.
+A vulnerability in an internal API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device and then execute those files on the underlying operating system as root.
+
+This vulnerability is due a lack of file validation checks that would prevent uploaded files from being placed in privileged directories on an affected system. An attacker could exploit this vulnerability by uploading a crafted file to the affected device. A successful exploit could allow the attacker to store malicious files on the affected system and then execute arbitrary code or obtain root privileges on the system.
 
 ### POC
 
@@ -16,3 +18,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-20282.yaml
diff --git a/2025/CVE-2025-20362.md b/2025/CVE-2025-20362.md
index 7bd39e622c2..ff1262799b3 100644
--- a/2025/CVE-2025-20362.md
+++ b/2025/CVE-2025-20362.md
@@ -341,7 +341,9 @@
 
 ### Description
 
-A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should otherwise be inaccessible without authentication.

 This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted web server on a device. A successful exploit could allow the attacker to access a restricted URL without authentication.
+A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to access restricted URL endpoints that are related to remote access VPN that should otherwise be inaccessible without authentication.
+
+ This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted web server on a device. A successful exploit could allow the attacker to access a restricted URL without authentication.
 
 ### POC
 
@@ -351,3 +353,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-20362.yaml
diff --git a/2025/CVE-2025-2127.md b/2025/CVE-2025-2127.md
index 330dcff0cb5..5e0002ff1a1 100644
--- a/2025/CVE-2025-2127.md
+++ b/2025/CVE-2025-2127.md
@@ -17,3 +17,5 @@ Es wurde eine problematische Schwachstelle in JoomlaUX JUX Real Estate 3.4.0 fü
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2127.yaml
diff --git a/2025/CVE-2025-2129.md b/2025/CVE-2025-2129.md
index 94279b08cda..c4dea5528ea 100644
--- a/2025/CVE-2025-2129.md
+++ b/2025/CVE-2025-2129.md
@@ -17,3 +17,5 @@ Es wurde eine Schwachstelle in Mage AI 0.9.75 ausgemacht. Sie wurde als problema
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2129.yaml
diff --git a/2025/CVE-2025-22457.md b/2025/CVE-2025-22457.md
index 43dd53d6444..525cda493f0 100644
--- a/2025/CVE-2025-22457.md
+++ b/2025/CVE-2025-22457.md
@@ -20,3 +20,5 @@ No PoCs from references.
 - https://github.com/securekomodo/CVE-2025-22457
 - https://github.com/sfewer-r7/CVE-2025-22457
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-22457.yaml
diff --git a/2025/CVE-2025-2264.md b/2025/CVE-2025-2264.md
index 4f84c262b1e..a651542e66a 100644
--- a/2025/CVE-2025-2264.md
+++ b/2025/CVE-2025-2264.md
@@ -16,3 +16,5 @@ A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Serv
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2264.yaml
diff --git a/2025/CVE-2025-22785.md b/2025/CVE-2025-22785.md
index 1529725eb7a..c8b801b7d4c 100644
--- a/2025/CVE-2025-22785.md
+++ b/2025/CVE-2025-22785.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2025-22785
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-22785.yaml
diff --git a/2025/CVE-2025-2294.md b/2025/CVE-2025-2294.md
index ac5f5582878..24546e8a232 100644
--- a/2025/CVE-2025-2294.md
+++ b/2025/CVE-2025-2294.md
@@ -23,3 +23,5 @@ No PoCs from references.
 - https://github.com/romanedutov/CVE-2025-2294
 - https://github.com/GMJayy/wp-cve-poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2294.yaml
diff --git a/2025/CVE-2025-22952.md b/2025/CVE-2025-22952.md
index 3ed543fcde0..72bf3a6e6dc 100644
--- a/2025/CVE-2025-22952.md
+++ b/2025/CVE-2025-22952.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-22952.yaml
diff --git a/2025/CVE-2025-23061.md b/2025/CVE-2025-23061.md
index a147f1ae89e..03adb851c47 100644
--- a/2025/CVE-2025-23061.md
+++ b/2025/CVE-2025-23061.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-23061.yaml
diff --git a/2025/CVE-2025-23211.md b/2025/CVE-2025-23211.md
index a707fe699f1..c837226a266 100644
--- a/2025/CVE-2025-23211.md
+++ b/2025/CVE-2025-23211.md
@@ -15,3 +15,5 @@ Tandoor Recipes is an application for managing recipes, planning meals, and buil
 #### Github
 - https://github.com/IIxoskeletonII/DataPrivacy-CVE-2025-23211
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-23211.yaml
diff --git a/2025/CVE-2025-24016.md b/2025/CVE-2025-24016.md
index 984a472d6f9..9b2f3e21615 100644
--- a/2025/CVE-2025-24016.md
+++ b/2025/CVE-2025-24016.md
@@ -22,3 +22,5 @@ Wazuh is a free and open source platform used for threat prevention, detection,
 - https://github.com/cybersecplayground/CVE-2025-24016-Wazuh-Remote-Code-Execution-RCE-PoC
 - https://github.com/rxerium/CVE-2025-24016
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24016.yaml
diff --git a/2025/CVE-2025-24354.md b/2025/CVE-2025-24354.md
index 22aa3feb812..ca6d6ced1e8 100644
--- a/2025/CVE-2025-24354.md
+++ b/2025/CVE-2025-24354.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Admin9961/CVE-2025-24354-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24354.yaml
diff --git a/2025/CVE-2025-24514.md b/2025/CVE-2025-24514.md
index a56c1765ec7..80501d27d70 100644
--- a/2025/CVE-2025-24514.md
+++ b/2025/CVE-2025-24514.md
@@ -21,3 +21,5 @@ No PoCs from references.
 - https://github.com/lufeirider/IngressNightmare-PoC
 - https://github.com/salt318/CVE-2025-1974
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24514.yaml
diff --git a/2025/CVE-2025-24582.md b/2025/CVE-2025-24582.md
index 1e6f92c1c2b..e7e34fd13ea 100644
--- a/2025/CVE-2025-24582.md
+++ b/2025/CVE-2025-24582.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24582.yaml
diff --git a/2025/CVE-2025-2473.md b/2025/CVE-2025-2473.md
index 3b66b0ccec2..3c53a2dfa66 100644
--- a/2025/CVE-2025-2473.md
+++ b/2025/CVE-2025-2473.md
@@ -17,3 +17,5 @@ Eine Schwachstelle wurde in PHPGurukul Company Visitor Management System 2.0 gef
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2473.yaml
diff --git a/2025/CVE-2025-24752.md b/2025/CVE-2025-24752.md
index eacf87fa343..b5070a47bad 100644
--- a/2025/CVE-2025-24752.md
+++ b/2025/CVE-2025-24752.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/Sachinart/essential-addons-for-elementor-xss-poc
 - https://github.com/bartfroklage/CVE-2025-24752-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-24752.yaml
diff --git a/2025/CVE-2025-24786.md b/2025/CVE-2025-24786.md
index 59b69478fc8..9d0fedbc8c7 100644
--- a/2025/CVE-2025-24786.md
+++ b/2025/CVE-2025-24786.md
@@ -16,3 +16,5 @@ WhoDB is an open source database management tool. While the application only dis
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24786.yaml
diff --git a/2025/CVE-2025-24799.md b/2025/CVE-2025-24799.md
index 58a6208ab56..ac86f7aab2f 100644
--- a/2025/CVE-2025-24799.md
+++ b/2025/CVE-2025-24799.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/MuhammadWaseem29/CVE-2025-24799
 - https://github.com/Rosemary1337/CVE-2025-24799
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24799.yaml
diff --git a/2025/CVE-2025-24813.md b/2025/CVE-2025-24813.md
index 305b32a83f9..efd4ccdaee9 100644
--- a/2025/CVE-2025-24813.md
+++ b/2025/CVE-2025-24813.md
@@ -64,3 +64,5 @@ Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution a
 - https://github.com/leonzhao7/jvuln-platform
 - https://github.com/mrzero-cool/cve-poc-search
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24813.yaml
diff --git a/2025/CVE-2025-24893.md b/2025/CVE-2025-24893.md
index c7bee73d9f5..91b23ca6d37 100644
--- a/2025/CVE-2025-24893.md
+++ b/2025/CVE-2025-24893.md
@@ -45,3 +45,5 @@ XWiki Platform is a generic wiki platform offering runtime services for applicat
 - https://github.com/x0da6h/POC-for-CVE-2025-24893
 - https://github.com/zs1n/CVE-2025-24893
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24893.yaml
diff --git a/2025/CVE-2025-24963.md b/2025/CVE-2025-24963.md
index fc488355154..931e00ce058 100644
--- a/2025/CVE-2025-24963.md
+++ b/2025/CVE-2025-24963.md
@@ -16,3 +16,5 @@ Vitest is a testing framework powered by Vite. The `__screenshot-error` handler
 #### Github
 - https://github.com/0xdeviner/CVE-2025-24963
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24963.yaml
diff --git a/2025/CVE-2025-25034.md b/2025/CVE-2025-25034.md
index 6a53547962e..a765b43768f 100644
--- a/2025/CVE-2025-25034.md
+++ b/2025/CVE-2025-25034.md
@@ -19,3 +19,5 @@ A PHP object injection vulnerability exists in SugarCRM versions prior to 6.5.24
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25034.yaml
diff --git a/2025/CVE-2025-25037.md b/2025/CVE-2025-25037.md
index 24bf27c9112..1ea391c2f41 100644
--- a/2025/CVE-2025-25037.md
+++ b/2025/CVE-2025-25037.md
@@ -16,3 +16,5 @@ An information disclosure vulnerability exists in Aquatronica Controller System
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25037.yaml
diff --git a/2025/CVE-2025-25062.md b/2025/CVE-2025-25062.md
index a19df75b955..e7f20e9b65a 100644
--- a/2025/CVE-2025-25062.md
+++ b/2025/CVE-2025-25062.md
@@ -16,3 +16,5 @@ An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x befo
 #### Github
 - https://github.com/rhburt/CVE-2025-25062
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-25062.yaml
diff --git a/2025/CVE-2025-25231.md b/2025/CVE-2025-25231.md
index 468214f27dd..06840a5fcc1 100644
--- a/2025/CVE-2025-25231.md
+++ b/2025/CVE-2025-25231.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 - https://github.com/ashkan-pu/CVE-CVE-2025-25231
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25231.yaml
diff --git a/2025/CVE-2025-25256.md b/2025/CVE-2025-25256.md
index 1b0d2b1689d..2bf6eabc018 100644
--- a/2025/CVE-2025-25256.md
+++ b/2025/CVE-2025-25256.md
@@ -26,3 +26,5 @@ An improper neutralization of special elements used in an OS command ('OS Comman
 #### Github
 - https://github.com/watchtowrlabs/watchTowr-vs-FortiSIEM-CVE-2025-25256
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2025/CVE-2025-25256.yaml
diff --git a/2025/CVE-2025-25257.md b/2025/CVE-2025-25257.md
index 04e0cbe34a0..2edf530e7ea 100644
--- a/2025/CVE-2025-25257.md
+++ b/2025/CVE-2025-25257.md
@@ -26,3 +26,5 @@ An improper neutralization of special elements used in an SQL command ('SQL Inje
 - https://github.com/segfault-it/CVE-2025-25257
 - https://github.com/watchtowrlabs/watchTowr-vs-FortiWeb-CVE-2025-25257
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25257.yaml
diff --git a/2025/CVE-2025-25291.md b/2025/CVE-2025-25291.md
index c78e658d092..0d28402dcb6 100644
--- a/2025/CVE-2025-25291.md
+++ b/2025/CVE-2025-25291.md
@@ -17,3 +17,5 @@ ruby-saml provides security assertion markup language (SAML) single sign-on (SSO
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-25291.yaml
diff --git a/2025/CVE-2025-25296.md b/2025/CVE-2025-25296.md
index 7ecc8f5fc98..2348e27415f 100644
--- a/2025/CVE-2025-25296.md
+++ b/2025/CVE-2025-25296.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/math-x-io/CVE-2025-25296-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25296.yaml
diff --git a/2025/CVE-2025-2539.md b/2025/CVE-2025-2539.md
index e27bd97d0d1..821481af51b 100644
--- a/2025/CVE-2025-2539.md
+++ b/2025/CVE-2025-2539.md
@@ -19,3 +19,5 @@ No PoCs from references.
 - https://github.com/verylazytech/CVE-2025-2539
 - https://github.com/whattheslime/file-away-exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2539.yaml
diff --git a/2025/CVE-2025-25570.md b/2025/CVE-2025-25570.md
index 083bd7a936c..be5de28d116 100644
--- a/2025/CVE-2025-25570.md
+++ b/2025/CVE-2025-25570.md
@@ -15,3 +15,5 @@ Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue w
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25570.yaml
diff --git a/2025/CVE-2025-2558.md b/2025/CVE-2025-2558.md
index 9d9dac904aa..0bd059efcdf 100644
--- a/2025/CVE-2025-2558.md
+++ b/2025/CVE-2025-2558.md
@@ -15,3 +15,5 @@ The-wound WordPress theme through 0.0.1 does not validate some parameters before
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2558.yaml
diff --git a/2025/CVE-2025-2563.md b/2025/CVE-2025-2563.md
index 292a4266369..f6420a7d98a 100644
--- a/2025/CVE-2025-2563.md
+++ b/2025/CVE-2025-2563.md
@@ -15,3 +15,5 @@ The User Registration & Membership  WordPress plugin before 4.1.2 does not preve
 #### Github
 - https://github.com/ubaydev/CVE-2025-2563
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2563.yaml
diff --git a/2025/CVE-2025-2609.md b/2025/CVE-2025-2609.md
index 4d09014da4f..253ff195578 100644
--- a/2025/CVE-2025-2609.md
+++ b/2025/CVE-2025-2609.md
@@ -15,3 +15,5 @@ Improper neutralization of input during web page generation vulnerability in Mag
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2609.yaml
diff --git a/2025/CVE-2025-2610.md b/2025/CVE-2025-2610.md
index a6dd9387fae..05db0511b38 100644
--- a/2025/CVE-2025-2610.md
+++ b/2025/CVE-2025-2610.md
@@ -15,3 +15,5 @@ Improper neutralization of input during web page generation vulnerability in Mag
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2610.yaml
diff --git a/2025/CVE-2025-2611.md b/2025/CVE-2025-2611.md
index 6c74cdac22f..8db86e0821f 100644
--- a/2025/CVE-2025-2611.md
+++ b/2025/CVE-2025-2611.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2611.yaml
diff --git a/2025/CVE-2025-26319.md b/2025/CVE-2025-26319.md
index dc85799c48d..297a496ef2b 100644
--- a/2025/CVE-2025-26319.md
+++ b/2025/CVE-2025-26319.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/dorattias/CVE-2025-26319
 - https://github.com/redpack-kr/CVE-2025-26319
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-26319.yaml
diff --git a/2025/CVE-2025-2636.md b/2025/CVE-2025-2636.md
index fb2871b36f7..d2d2e4e6f20 100644
--- a/2025/CVE-2025-2636.md
+++ b/2025/CVE-2025-2636.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2636.yaml
diff --git a/2025/CVE-2025-26399.md b/2025/CVE-2025-26399.md
index dd1fd990e8a..6239e34032e 100644
--- a/2025/CVE-2025-26399.md
+++ b/2025/CVE-2025-26399.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/rxerium/CVE-2025-26399
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-26399.yaml
diff --git a/2025/CVE-2025-27007.md b/2025/CVE-2025-27007.md
index 340e2b66a28..165e7a27137 100644
--- a/2025/CVE-2025-27007.md
+++ b/2025/CVE-2025-27007.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/absholi7ly/CVE-2025-27007-OttoKit-exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27007.yaml
diff --git a/2025/CVE-2025-2709.md b/2025/CVE-2025-2709.md
index adfa244c27e..21379fee7e8 100644
--- a/2025/CVE-2025-2709.md
+++ b/2025/CVE-2025-2709.md
@@ -17,3 +17,5 @@ In Yonyou UFIDA ERP-NC 5.0 wurde eine problematische Schwachstelle gefunden. Es
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2709.yaml
diff --git a/2025/CVE-2025-2710.md b/2025/CVE-2025-2710.md
index 330db66b123..1e35da676a7 100644
--- a/2025/CVE-2025-2710.md
+++ b/2025/CVE-2025-2710.md
@@ -17,3 +17,5 @@ Eine problematische Schwachstelle wurde in Yonyou UFIDA ERP-NC 5.0 gefunden. Es
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2710.yaml
diff --git a/2025/CVE-2025-2711.md b/2025/CVE-2025-2711.md
index b38d17c9c16..f87c5c50f77 100644
--- a/2025/CVE-2025-2711.md
+++ b/2025/CVE-2025-2711.md
@@ -17,3 +17,5 @@ Es wurde eine problematische Schwachstelle in Yonyou UFIDA ERP-NC 5.0 ausgemacht
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2711.yaml
diff --git a/2025/CVE-2025-27112.md b/2025/CVE-2025-27112.md
index 18124638861..4ecae3964a0 100644
--- a/2025/CVE-2025-27112.md
+++ b/2025/CVE-2025-27112.md
@@ -15,3 +15,5 @@ Navidrome is an open source web-based music collection server and streamer. Star
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27112.yaml
diff --git a/2025/CVE-2025-2712.md b/2025/CVE-2025-2712.md
index c93bb03c774..5dd4c926c7f 100644
--- a/2025/CVE-2025-2712.md
+++ b/2025/CVE-2025-2712.md
@@ -17,3 +17,5 @@ In Yonyou UFIDA ERP-NC 5.0 wurde eine problematische Schwachstelle ausgemacht. D
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2712.yaml
diff --git a/2025/CVE-2025-27134.md b/2025/CVE-2025-27134.md
index f7eae22714d..0a2570c3608 100644
--- a/2025/CVE-2025-27134.md
+++ b/2025/CVE-2025-27134.md
@@ -15,3 +15,5 @@ Joplin is a free, open source note taking and to-do application, which can handl
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27134.yaml
diff --git a/2025/CVE-2025-27218.md b/2025/CVE-2025-27218.md
index 7a2ac4a404c..85776c39140 100644
--- a/2025/CVE-2025-27218.md
+++ b/2025/CVE-2025-27218.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27218.yaml
diff --git a/2025/CVE-2025-2746.md b/2025/CVE-2025-2746.md
index f85ae7e1bdc..21a3764d23e 100644
--- a/2025/CVE-2025-2746.md
+++ b/2025/CVE-2025-2746.md
@@ -16,3 +16,5 @@ An authentication bypass vulnerability in Kentico Xperience allows authenticatio
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2746.yaml
diff --git a/2025/CVE-2025-2747.md b/2025/CVE-2025-2747.md
index 72a160319c1..1130ab1f4e1 100644
--- a/2025/CVE-2025-2747.md
+++ b/2025/CVE-2025-2747.md
@@ -16,3 +16,5 @@ An authentication bypass vulnerability in Kentico Xperience allows authenticatio
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2747.yaml
diff --git a/2025/CVE-2025-2748.md b/2025/CVE-2025-2748.md
index 0a76a4f1aff..8e2a10c1c4c 100644
--- a/2025/CVE-2025-2748.md
+++ b/2025/CVE-2025-2748.md
@@ -16,3 +16,5 @@ The Kentico Xperience application does not fully validate or filter files uploa
 #### Github
 - https://github.com/xirtam2669/Kentico-Xperience-before-13.0.178---XSS-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2748.yaml
diff --git a/2025/CVE-2025-27506.md b/2025/CVE-2025-27506.md
index d82ee813672..bc97d488fe9 100644
--- a/2025/CVE-2025-27506.md
+++ b/2025/CVE-2025-27506.md
@@ -15,3 +15,5 @@ NocoDB is software for building databases as spreadsheets. The API endpoint rela
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27506.yaml
diff --git a/2025/CVE-2025-2775.md b/2025/CVE-2025-2775.md
index 40ecf9d942c..e6f14f6e311 100644
--- a/2025/CVE-2025-2775.md
+++ b/2025/CVE-2025-2775.md
@@ -17,3 +17,5 @@ SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML Exte
 - https://github.com/0xgh057r3c0n/SysAid-PreAuth-RCE-Chain
 - https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2775.yaml
diff --git a/2025/CVE-2025-2776.md b/2025/CVE-2025-2776.md
index 483cd8e9be1..2da88a76b78 100644
--- a/2025/CVE-2025-2776.md
+++ b/2025/CVE-2025-2776.md
@@ -18,3 +18,5 @@ SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML Exte
 - https://github.com/mrk336/From-EternalBlue-to-CVE-2025-2776-The-Evolution-of-an-SMB-Attack
 - https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2776.yaml
diff --git a/2025/CVE-2025-2777.md b/2025/CVE-2025-2777.md
index 137a17b7330..790105c4503 100644
--- a/2025/CVE-2025-2777.md
+++ b/2025/CVE-2025-2777.md
@@ -16,3 +16,5 @@ SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML Exte
 - https://github.com/0xgh057r3c0n/SysAid-PreAuth-RCE-Chain
 - https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2777.yaml
diff --git a/2025/CVE-2025-27817.md b/2025/CVE-2025-27817.md
index c28821a4e55..cf32e13c02c 100644
--- a/2025/CVE-2025-27817.md
+++ b/2025/CVE-2025-27817.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/iSee857/CVE-2025-27817
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27817.yaml
diff --git a/2025/CVE-2025-27888.md b/2025/CVE-2025-27888.md
index 4d953e2ea0e..3e6433a3e98 100644
--- a/2025/CVE-2025-27888.md
+++ b/2025/CVE-2025-27888.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27888.yaml
diff --git a/2025/CVE-2025-27892.md b/2025/CVE-2025-27892.md
index a5698d63e6f..9fc6d28b7d0 100644
--- a/2025/CVE-2025-27892.md
+++ b/2025/CVE-2025-27892.md
@@ -15,3 +15,5 @@ Shopware prior to version 6.5.8.13 is affected by a SQL injection vulnerability
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27892.yaml
diff --git a/2025/CVE-2025-27915.md b/2025/CVE-2025-27915.md
index 51d9253c7dd..e53f8fdabf9 100644
--- a/2025/CVE-2025-27915.md
+++ b/2025/CVE-2025-27915.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/alsyundawy/eradicate-zimbra-malware
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27915.yaml
diff --git a/2025/CVE-2025-28228.md b/2025/CVE-2025-28228.md
index aaa63660139..6a0bfc07a9f 100644
--- a/2025/CVE-2025-28228.md
+++ b/2025/CVE-2025-28228.md
@@ -15,3 +15,5 @@ A credential exposure vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Tra
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-28228.yaml
diff --git a/2025/CVE-2025-28242.md b/2025/CVE-2025-28242.md
index 502ccf43641..caf5b728168 100644
--- a/2025/CVE-2025-28242.md
+++ b/2025/CVE-2025-28242.md
@@ -15,3 +15,5 @@ Improper session management in the /login_ok.htm endpoint of DAEnetIP4 METO v1.2
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-28242.yaml
diff --git a/2025/CVE-2025-28367.md b/2025/CVE-2025-28367.md
index 780372565ac..0a19c0b237f 100644
--- a/2025/CVE-2025-28367.md
+++ b/2025/CVE-2025-28367.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-28367.yaml
diff --git a/2025/CVE-2025-28906.md b/2025/CVE-2025-28906.md
index abbfb05beb9..3328bc243fb 100644
--- a/2025/CVE-2025-28906.md
+++ b/2025/CVE-2025-28906.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-28906.yaml
diff --git a/2025/CVE-2025-2907.md b/2025/CVE-2025-2907.md
index 1118784bdcd..c425269351f 100644
--- a/2025/CVE-2025-2907.md
+++ b/2025/CVE-2025-2907.md
@@ -16,3 +16,5 @@ The Order Delivery Date WordPress plugin before 12.3.1 does not have authorizati
 #### Github
 - https://github.com/Yucaerin/CVE-2025-2907
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2907.yaml
diff --git a/2025/CVE-2025-29085.md b/2025/CVE-2025-29085.md
index c20eb0510ec..b8c1dceda82 100644
--- a/2025/CVE-2025-29085.md
+++ b/2025/CVE-2025-29085.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-29085.yaml
diff --git a/2025/CVE-2025-29306.md b/2025/CVE-2025-29306.md
index aca6ff18417..e764210b473 100644
--- a/2025/CVE-2025-29306.md
+++ b/2025/CVE-2025-29306.md
@@ -18,3 +18,5 @@ An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code vi
 - https://github.com/inok009/FOXCMS-CVE-2025-29306-POC
 - https://github.com/verylazytech/CVE-2025-29306
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-29306.yaml
diff --git a/2025/CVE-2025-29635.md b/2025/CVE-2025-29635.md
index 551ce5d3757..5c92d3f34a0 100644
--- a/2025/CVE-2025-29635.md
+++ b/2025/CVE-2025-29635.md
@@ -16,3 +16,5 @@ A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-29635.yaml
diff --git a/2025/CVE-2025-29925.md b/2025/CVE-2025-29925.md
index d57d229e6b3..8fcdd45a406 100644
--- a/2025/CVE-2025-29925.md
+++ b/2025/CVE-2025-29925.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-29925.yaml
diff --git a/2025/CVE-2025-29927.md b/2025/CVE-2025-29927.md
index b29db8e6495..3024399741c 100644
--- a/2025/CVE-2025-29927.md
+++ b/2025/CVE-2025-29927.md
@@ -114,3 +114,5 @@ No PoCs from references.
 - https://github.com/zs1n/CVE-2025-29927
 - https://github.com/kuyrathdaro/cve-2025-29927
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-29927.yaml
diff --git a/2025/CVE-2025-30208.md b/2025/CVE-2025-30208.md
index eb677d7b2ce..32fd533aa56 100644
--- a/2025/CVE-2025-30208.md
+++ b/2025/CVE-2025-30208.md
@@ -37,3 +37,5 @@ Vite, a provider of frontend development tooling, has a vulnerability in version
 - https://github.com/sumeet-darekar/CVE-2025-30208
 - https://github.com/xuemian168/CVE-2025-30208
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-30208.yaml
diff --git a/2025/CVE-2025-30220.md b/2025/CVE-2025-30220.md
index 2f848ae1ab3..f2b6d5efff3 100644
--- a/2025/CVE-2025-30220.md
+++ b/2025/CVE-2025-30220.md
@@ -18,3 +18,5 @@ GeoServer is an open source server that allows users to share and edit geospatia
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-30220.yaml
diff --git a/2025/CVE-2025-30406.md b/2025/CVE-2025-30406.md
index 9c5479be539..cbebd0abe23 100644
--- a/2025/CVE-2025-30406.md
+++ b/2025/CVE-2025-30406.md
@@ -17,3 +17,5 @@ Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a
 - https://github.com/W01fh4cker/CVE-2025-30406
 - https://github.com/mchklt/CVE-2025-30406
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-30406.yaml
diff --git a/2025/CVE-2025-30567.md b/2025/CVE-2025-30567.md
index b8d7bc97404..2667d102ef2 100644
--- a/2025/CVE-2025-30567.md
+++ b/2025/CVE-2025-30567.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Oyst3r1ng/CVE-2025-30567
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-30567.yaml
diff --git a/2025/CVE-2025-3102.md b/2025/CVE-2025-3102.md
index e9fbb56e502..0e0021b964a 100644
--- a/2025/CVE-2025-3102.md
+++ b/2025/CVE-2025-3102.md
@@ -23,3 +23,5 @@ No PoCs from references.
 - https://github.com/itsismarcos/vanda-CVE-2025-3102
 - https://github.com/rhz0d/CVE-2025-3102
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3102.yaml
diff --git a/2025/CVE-2025-31125.md b/2025/CVE-2025-31125.md
index a33a11c45e8..16da9b5213b 100644
--- a/2025/CVE-2025-31125.md
+++ b/2025/CVE-2025-31125.md
@@ -26,3 +26,5 @@ Vite is a frontend tooling framework for javascript. Vite exposes content of non
 - https://github.com/khadafigans/Vite-Exploit
 - https://github.com/sunhuiHi666/CVE-2025-31125
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31125.yaml
diff --git a/2025/CVE-2025-31131.md b/2025/CVE-2025-31131.md
index 71568e9cd08..ab9d690651f 100644
--- a/2025/CVE-2025-31131.md
+++ b/2025/CVE-2025-31131.md
@@ -15,3 +15,5 @@ YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable t
 #### Github
 - https://github.com/MuhammadWaseem29/CVE-2025-31131
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31131.yaml
diff --git a/2025/CVE-2025-31161.md b/2025/CVE-2025-31161.md
index 22b4d00aa8c..610b1cac022 100644
--- a/2025/CVE-2025-31161.md
+++ b/2025/CVE-2025-31161.md
@@ -34,3 +34,5 @@ CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and
 - https://github.com/gvincenti/Soulmate
 - https://github.com/r0otk3r/CVE-2025-31161
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31161.yaml
diff --git a/2025/CVE-2025-31324.md b/2025/CVE-2025-31324.md
index 30b19d20616..0ece620c6f3 100644
--- a/2025/CVE-2025-31324.md
+++ b/2025/CVE-2025-31324.md
@@ -32,3 +32,5 @@ No PoCs from references.
 - https://github.com/rxerium/CVE-2025-31324
 - https://github.com/sug4r-wr41th/CVE-2025-31324
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31324.yaml
diff --git a/2025/CVE-2025-31486.md b/2025/CVE-2025-31486.md
index c3c9d8d0fea..5bdc515b48f 100644
--- a/2025/CVE-2025-31486.md
+++ b/2025/CVE-2025-31486.md
@@ -21,3 +21,5 @@ Vite is a frontend tooling framework for javascript. The contents of arbitrary f
 - https://github.com/hackmelocal/CVE-2025-31486-Simulation
 - https://github.com/iSee857/CVE-2025-31486-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31486.yaml
diff --git a/2025/CVE-2025-31489.md b/2025/CVE-2025-31489.md
index e59548ac59b..86296108f73 100644
--- a/2025/CVE-2025-31489.md
+++ b/2025/CVE-2025-31489.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31489.yaml
diff --git a/2025/CVE-2025-32395.md b/2025/CVE-2025-32395.md
index 1724eaf2118..b23d8598aa6 100644
--- a/2025/CVE-2025-32395.md
+++ b/2025/CVE-2025-32395.md
@@ -20,3 +20,5 @@ Vite is a frontend tooling framework for javascript. Prior to 6.2.6, 6.1.5, 6.0.
 - https://github.com/FlowerWitch/my_poc-exp
 - https://github.com/ruiwenya/CVE-2025-32395
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32395.yaml
diff --git a/2025/CVE-2025-32429.md b/2025/CVE-2025-32429.md
index c07b6090994..c32b5b47734 100644
--- a/2025/CVE-2025-32429.md
+++ b/2025/CVE-2025-32429.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/amir-othman/CVE-2025-32429
 - https://github.com/byteReaper77/CVE-2025-32429
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32429.yaml
diff --git a/2025/CVE-2025-32430.md b/2025/CVE-2025-32430.md
index e91f7435e26..49ba4559260 100644
--- a/2025/CVE-2025-32430.md
+++ b/2025/CVE-2025-32430.md
@@ -17,3 +17,5 @@ XWiki Platform is a generic wiki platform offering runtime services for applicat
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32430.yaml
diff --git a/2025/CVE-2025-32432.md b/2025/CVE-2025-32432.md
index 27fb9e71c83..4e47dbde2cc 100644
--- a/2025/CVE-2025-32432.md
+++ b/2025/CVE-2025-32432.md
@@ -22,3 +22,5 @@ Craft is a flexible, user-friendly CMS for creating custom digital experiences o
 - https://github.com/apostolovd/PoCs
 - https://github.com/bambooqj/CVE-2025-32432
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32432.yaml
diff --git a/2025/CVE-2025-32433.md b/2025/CVE-2025-32433.md
index e6f40c33791..cbb91216c7d 100644
--- a/2025/CVE-2025-32433.md
+++ b/2025/CVE-2025-32433.md
@@ -43,3 +43,5 @@ Erlang/OTP is a set of libraries for the Erlang programming language. Prior to v
 - https://github.com/teamtopkarl/CVE-2025-32433
 - https://github.com/vigilante-1337/CVE-2025-32433
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-32433.yaml
diff --git a/2025/CVE-2025-32463.md b/2025/CVE-2025-32463.md
index 65b75fad0ab..d763f0375c6 100644
--- a/2025/CVE-2025-32463.md
+++ b/2025/CVE-2025-32463.md
@@ -60,3 +60,5 @@ Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswi
 - https://github.com/zhaduchanhzz/CVE-2025-32463_POC
 - https://github.com/zinzloun/CVE-2025-32463
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-32463.yaml
diff --git a/2025/CVE-2025-3248.md b/2025/CVE-2025-3248.md
index 7df00815478..db3f52a4e6f 100644
--- a/2025/CVE-2025-3248.md
+++ b/2025/CVE-2025-3248.md
@@ -38,3 +38,5 @@ Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v
 - https://github.com/zapstiko/CVE-2025-3248
 - https://github.com/hideki233/CVE-2025-3248-Langflow-RCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3248.yaml
diff --git a/2025/CVE-2025-32778.md b/2025/CVE-2025-32778.md
index 4cceb41df4a..9f611cbb9ca 100644
--- a/2025/CVE-2025-32778.md
+++ b/2025/CVE-2025-32778.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/00xCanelo/CVE-2025-32778
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32778.yaml
diff --git a/2025/CVE-2025-32813.md b/2025/CVE-2025-32813.md
index 0f35179cb93..fb955349dba 100644
--- a/2025/CVE-2025-32813.md
+++ b/2025/CVE-2025-32813.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32813.yaml
diff --git a/2025/CVE-2025-32814.md b/2025/CVE-2025-32814.md
index 33d09df928d..f7721056855 100644
--- a/2025/CVE-2025-32814.md
+++ b/2025/CVE-2025-32814.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32814.yaml
diff --git a/2025/CVE-2025-32815.md b/2025/CVE-2025-32815.md
index 2e1e513e13d..7db563dd06a 100644
--- a/2025/CVE-2025-32815.md
+++ b/2025/CVE-2025-32815.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32815.yaml
diff --git a/2025/CVE-2025-32966.md b/2025/CVE-2025-32966.md
index d7aae5fcd05..ac2e98aa3fc 100644
--- a/2025/CVE-2025-32966.md
+++ b/2025/CVE-2025-32966.md
@@ -15,3 +15,5 @@ DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32966.yaml
diff --git a/2025/CVE-2025-32969.md b/2025/CVE-2025-32969.md
index cc357dfd774..ae287cce5db 100644
--- a/2025/CVE-2025-32969.md
+++ b/2025/CVE-2025-32969.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32969.yaml
diff --git a/2025/CVE-2025-32970.md b/2025/CVE-2025-32970.md
index 9556004aa86..4bb9878f258 100644
--- a/2025/CVE-2025-32970.md
+++ b/2025/CVE-2025-32970.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32970.yaml
diff --git a/2025/CVE-2025-34023.md b/2025/CVE-2025-34023.md
index 6325109c4fa..91636995f54 100644
--- a/2025/CVE-2025-34023.md
+++ b/2025/CVE-2025-34023.md
@@ -15,3 +15,5 @@ A path traversal vulnerability exists in the Karel IP1211 IP Phone's web managem
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34023.yaml
diff --git a/2025/CVE-2025-34026.md b/2025/CVE-2025-34026.md
index 18ca310ae1a..3420947d32e 100644
--- a/2025/CVE-2025-34026.md
+++ b/2025/CVE-2025-34026.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34026.yaml
diff --git a/2025/CVE-2025-34027.md b/2025/CVE-2025-34027.md
index 585dda01ec1..ff46ea19725 100644
--- a/2025/CVE-2025-34027.md
+++ b/2025/CVE-2025-34027.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34027.yaml
diff --git a/2025/CVE-2025-34028.md b/2025/CVE-2025-34028.md
index 83eec7d82c0..cca85073701 100644
--- a/2025/CVE-2025-34028.md
+++ b/2025/CVE-2025-34028.md
@@ -19,3 +19,5 @@ The Commvault Command Center Innovation Release allows an unauthenticated actor
 - https://github.com/Mattb709/CVE-2025-34028-PoC-Commvault-RCE
 - https://github.com/becrevex/Commvault-CVE-2025-34028
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34028.yaml
diff --git a/2025/CVE-2025-34030.md b/2025/CVE-2025-34030.md
index 7d0df9130bd..c371c78766c 100644
--- a/2025/CVE-2025-34030.md
+++ b/2025/CVE-2025-34030.md
@@ -16,3 +16,5 @@ An OS command injection vulnerability exists in sar2html version 3.2.2 and prior
 #### Github
 - https://github.com/HackerTyperAbuser/CVE-2025-34030-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34030.yaml
diff --git a/2025/CVE-2025-34031.md b/2025/CVE-2025-34031.md
index 759609af0da..544b8346b3d 100644
--- a/2025/CVE-2025-34031.md
+++ b/2025/CVE-2025-34031.md
@@ -18,3 +18,5 @@ A path traversal vulnerability exists in the Moodle LMS Jmol plugin version 6.1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34031.yaml
diff --git a/2025/CVE-2025-34032.md b/2025/CVE-2025-34032.md
index 1514c4d4a45..aba35f5590c 100644
--- a/2025/CVE-2025-34032.md
+++ b/2025/CVE-2025-34032.md
@@ -17,3 +17,5 @@ A reflected cross-site scripting (XSS) vulnerability exists in the Moodle LMS Jm
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34032.yaml
diff --git a/2025/CVE-2025-34035.md b/2025/CVE-2025-34035.md
index ae8c335b592..1dd1de2b9e1 100644
--- a/2025/CVE-2025-34035.md
+++ b/2025/CVE-2025-34035.md
@@ -17,3 +17,5 @@ An OS command injection vulnerability exists in EnGenius EnShare Cloud Service v
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34035.yaml
diff --git a/2025/CVE-2025-34040.md b/2025/CVE-2025-34040.md
index d7dcce5ac47..7ffaa1646f1 100644
--- a/2025/CVE-2025-34040.md
+++ b/2025/CVE-2025-34040.md
@@ -22,3 +22,5 @@ An arbitrary file upload vulnerability exists in the Zhiyuan OA platform 5.0, 5.
 #### Github
 - https://github.com/jisi-001/CVE-2025-34040Exp
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34040.yaml
diff --git a/2025/CVE-2025-34073.md b/2025/CVE-2025-34073.md
index 9879321b3ff..1c2c89ca1ff 100644
--- a/2025/CVE-2025-34073.md
+++ b/2025/CVE-2025-34073.md
@@ -16,3 +16,5 @@ An unauthenticated command injection vulnerability exists in stamparm/maltrail (
 #### Github
 - https://github.com/infcodev/pentesting_scripts
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34073.yaml
diff --git a/2025/CVE-2025-34077.md b/2025/CVE-2025-34077.md
index 4e2b1771945..15ea739f84c 100644
--- a/2025/CVE-2025-34077.md
+++ b/2025/CVE-2025-34077.md
@@ -18,3 +18,5 @@ An authentication bypass vulnerability exists in the WordPress Pie Register plug
 - https://github.com/0xgh057r3c0n/CVE-2025-34077
 - https://github.com/MrjHaxcore/CVE-2025-34077
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34077.yaml
diff --git a/2025/CVE-2025-3415.md b/2025/CVE-2025-3415.md
index aa02f4a8576..937ee9cd82b 100644
--- a/2025/CVE-2025-3415.md
+++ b/2025/CVE-2025-3415.md
@@ -21,3 +21,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3415.yaml
diff --git a/2025/CVE-2025-34152.md b/2025/CVE-2025-34152.md
index f93e8f5de17..7ba6e42cf24 100644
--- a/2025/CVE-2025-34152.md
+++ b/2025/CVE-2025-34152.md
@@ -16,3 +16,5 @@ An unauthenticated OS command injection vulnerability exists in the Shenzhen Ait
 - https://github.com/Chocapikk/CVE-2025-34152
 - https://github.com/kh4sh3i/CVE-2025-34152
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34152.yaml
diff --git a/2025/CVE-2025-34300.md b/2025/CVE-2025-34300.md
index f2ee980788f..38374c72b1c 100644
--- a/2025/CVE-2025-34300.md
+++ b/2025/CVE-2025-34300.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/jisi-001/CVE-2025-34300POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34300.yaml
diff --git a/2025/CVE-2025-34509.md b/2025/CVE-2025-34509.md
index c6d2d07a2ea..f0478a6cd75 100644
--- a/2025/CVE-2025-34509.md
+++ b/2025/CVE-2025-34509.md
@@ -18,3 +18,5 @@ Sitecore Experience Manager (XM) and Experience Platform (XP) versions 10.1 to 1
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34509.yaml
diff --git a/2025/CVE-2025-3472.md b/2025/CVE-2025-3472.md
index 34971372887..aac8cf32db7 100644
--- a/2025/CVE-2025-3472.md
+++ b/2025/CVE-2025-3472.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3472.yaml
diff --git a/2025/CVE-2025-3515.md b/2025/CVE-2025-3515.md
index ac74425d106..d177a6f4a44 100644
--- a/2025/CVE-2025-3515.md
+++ b/2025/CVE-2025-3515.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/blueisbeautiful/CVE-2025-3515
 - https://github.com/brokendreamsclub/CVE-2025-3515
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3515.yaml
diff --git a/2025/CVE-2025-3605.md b/2025/CVE-2025-3605.md
index 079cb5305b1..86147bf74e7 100644
--- a/2025/CVE-2025-3605.md
+++ b/2025/CVE-2025-3605.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Nxploited/CVE-2025-3605
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3605.yaml
diff --git a/2025/CVE-2025-36604.md b/2025/CVE-2025-36604.md
index bd91be9208f..fccd39b3f47 100644
--- a/2025/CVE-2025-36604.md
+++ b/2025/CVE-2025-36604.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-36604.yaml
diff --git a/2025/CVE-2025-36845.md b/2025/CVE-2025-36845.md
index c763c46d6c6..e7b1676d5e8 100644
--- a/2025/CVE-2025-36845.md
+++ b/2025/CVE-2025-36845.md
@@ -15,3 +15,5 @@ An issue was discovered in Eveo URVE Web Manager 27.02.2025. The endpoint /_inte
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-36845.yaml
diff --git a/2025/CVE-2025-4008.md b/2025/CVE-2025-4008.md
index 30e4ec7b42a..d0b9da3983f 100644
--- a/2025/CVE-2025-4008.md
+++ b/2025/CVE-2025-4008.md
@@ -17,3 +17,5 @@ The Meteobridge web interface let meteobridge administrator manage their weather
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4008.yaml
diff --git a/2025/CVE-2025-4009.md b/2025/CVE-2025-4009.md
index 63d989c649e..62af1c3f8ca 100644
--- a/2025/CVE-2025-4009.md
+++ b/2025/CVE-2025-4009.md
@@ -20,3 +20,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4009.yaml
diff --git a/2025/CVE-2025-40630.md b/2025/CVE-2025-40630.md
index ced55bedf26..bfd5c629146 100644
--- a/2025/CVE-2025-40630.md
+++ b/2025/CVE-2025-40630.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-40630.yaml
diff --git a/2025/CVE-2025-4123.md b/2025/CVE-2025-4123.md
index 52e6741ca1a..910fd43adc0 100644
--- a/2025/CVE-2025-4123.md
+++ b/2025/CVE-2025-4123.md
@@ -25,3 +25,5 @@ No PoCs from references.
 - https://github.com/punitdarji/Grafana-cve-2025-4123
 - https://github.com/ynsmroztas/CVE-2025-4123-Exploit-Tool-Grafana-
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4123.yaml
diff --git a/2025/CVE-2025-41242.md b/2025/CVE-2025-41242.md
index fde3bf254a9..e83e313fbae 100644
--- a/2025/CVE-2025-41242.md
+++ b/2025/CVE-2025-41242.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-41242.yaml
diff --git a/2025/CVE-2025-41243.md b/2025/CVE-2025-41243.md
index 9b465062d27..e788be6f206 100644
--- a/2025/CVE-2025-41243.md
+++ b/2025/CVE-2025-41243.md
@@ -19,3 +19,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-41243.yaml
diff --git a/2025/CVE-2025-41393.md b/2025/CVE-2025-41393.md
index fd4e83f303a..3282a6a6f16 100644
--- a/2025/CVE-2025-41393.md
+++ b/2025/CVE-2025-41393.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-41393.yaml
diff --git a/2025/CVE-2025-41646.md b/2025/CVE-2025-41646.md
index 62f0577013a..796893c18b7 100644
--- a/2025/CVE-2025-41646.md
+++ b/2025/CVE-2025-41646.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/GreenForceNetworks/CVE-2025-41646---Critical-Authentication-Bypass-
 - https://github.com/r0otk3r/CVE-2025-41646
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-41646.yaml
diff --git a/2025/CVE-2025-4302.md b/2025/CVE-2025-4302.md
index e075ff3a75d..f239b13ba8f 100644
--- a/2025/CVE-2025-4302.md
+++ b/2025/CVE-2025-4302.md
@@ -15,3 +15,5 @@ The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4302.yaml
diff --git a/2025/CVE-2025-4322.md b/2025/CVE-2025-4322.md
index b766f9554fe..dbf66d2799d 100644
--- a/2025/CVE-2025-4322.md
+++ b/2025/CVE-2025-4322.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/IndominusRexes/CVE-2025-4322-Exploit
 - https://github.com/Yucaerin/CVE-2025-4322
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4322.yaml
diff --git a/2025/CVE-2025-4334.md b/2025/CVE-2025-4334.md
index 0690e8ff857..986791581e5 100644
--- a/2025/CVE-2025-4334.md
+++ b/2025/CVE-2025-4334.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/0xgh057r3c0n/CVE-2025-4334
 - https://github.com/Nxploited/CVE-2025-4334
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4334.yaml
diff --git a/2025/CVE-2025-4380.md b/2025/CVE-2025-4380.md
index f94f61918f0..c5efc402ccf 100644
--- a/2025/CVE-2025-4380.md
+++ b/2025/CVE-2025-4380.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/r0otk3r/CVE-2025-4380
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4380.yaml
diff --git a/2025/CVE-2025-4388.md b/2025/CVE-2025-4388.md
index 6ece34e1c62..91149c651ec 100644
--- a/2025/CVE-2025-4388.md
+++ b/2025/CVE-2025-4388.md
@@ -21,3 +21,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4388.yaml
diff --git a/2025/CVE-2025-4396.md b/2025/CVE-2025-4396.md
index 6222395862c..073c210ff6f 100644
--- a/2025/CVE-2025-4396.md
+++ b/2025/CVE-2025-4396.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4396.yaml
diff --git a/2025/CVE-2025-44136.md b/2025/CVE-2025-44136.md
index 360afa5deed..f95c6cc994b 100644
--- a/2025/CVE-2025-44136.md
+++ b/2025/CVE-2025-44136.md
@@ -16,3 +16,5 @@ MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting (XSS). The GE
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-44136.yaml
diff --git a/2025/CVE-2025-44137.md b/2025/CVE-2025-44137.md
index 95a89802995..12bc2d51af0 100644
--- a/2025/CVE-2025-44137.md
+++ b/2025/CVE-2025-44137.md
@@ -16,3 +16,5 @@ MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTil
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-44137.yaml
diff --git a/2025/CVE-2025-44148.md b/2025/CVE-2025-44148.md
index 85b0a664633..db9990c36fe 100644
--- a/2025/CVE-2025-44148.md
+++ b/2025/CVE-2025-44148.md
@@ -15,3 +15,5 @@ Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remot
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-44148.yaml
diff --git a/2025/CVE-2025-44177.md b/2025/CVE-2025-44177.md
index e5421779cb1..e600104689e 100644
--- a/2025/CVE-2025-44177.md
+++ b/2025/CVE-2025-44177.md
@@ -15,3 +15,5 @@ A directory traversal vulnerability was discovered in White Star Software Protop
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-44177.yaml
diff --git a/2025/CVE-2025-4427.md b/2025/CVE-2025-4427.md
index f1dd4906078..bca2e44f155 100644
--- a/2025/CVE-2025-4427.md
+++ b/2025/CVE-2025-4427.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428
 - https://github.com/xie-22/CVE-2025-4428
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4427.yaml
diff --git a/2025/CVE-2025-4524.md b/2025/CVE-2025-4524.md
index adbaa873f6e..8475ecf92ec 100644
--- a/2025/CVE-2025-4524.md
+++ b/2025/CVE-2025-4524.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/ptrstr/CVE-2025-4524
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4524.yaml
diff --git a/2025/CVE-2025-4576.md b/2025/CVE-2025-4576.md
index 97ae15333d5..5d84cd8d4c7 100644
--- a/2025/CVE-2025-4576.md
+++ b/2025/CVE-2025-4576.md
@@ -22,3 +22,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4576.yaml
diff --git a/2025/CVE-2025-45854.md b/2025/CVE-2025-45854.md
index 29beb7081b5..5d2cc31e5b5 100644
--- a/2025/CVE-2025-45854.md
+++ b/2025/CVE-2025-45854.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-45854.yaml
diff --git a/2025/CVE-2025-45985.md b/2025/CVE-2025-45985.md
index 3d319a81cee..44d1167c01b 100644
--- a/2025/CVE-2025-45985.md
+++ b/2025/CVE-2025-45985.md
@@ -15,3 +15,5 @@ Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LT
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-45985.yaml
diff --git a/2025/CVE-2025-4632.md b/2025/CVE-2025-4632.md
index 12b2b6ff1ea..0e8ca08001a 100644
--- a/2025/CVE-2025-4632.md
+++ b/2025/CVE-2025-4632.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/MantisToboggan-git/CVE-2025-4632-POC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4632.yaml
diff --git a/2025/CVE-2025-46349.md b/2025/CVE-2025-46349.md
index 8e53db628bb..9dbbd22d2b1 100644
--- a/2025/CVE-2025-46349.md
+++ b/2025/CVE-2025-46349.md
@@ -15,3 +15,5 @@ YesWiki is a wiki system written in PHP. Prior to version 4.5.4, YesWiki is vuln
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46349.yaml
diff --git a/2025/CVE-2025-4652.md b/2025/CVE-2025-4652.md
index 252521d5c62..ab26b08cd10 100644
--- a/2025/CVE-2025-4652.md
+++ b/2025/CVE-2025-4652.md
@@ -15,3 +15,5 @@ The Broadstreet WordPress plugin before 1.51.8 does not sanitise and escape a pa
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4652.yaml
diff --git a/2025/CVE-2025-46549.md b/2025/CVE-2025-46549.md
index 7b849090bfc..50793683481 100644
--- a/2025/CVE-2025-46549.md
+++ b/2025/CVE-2025-46549.md
@@ -15,3 +15,5 @@ YesWiki is a wiki system written in PHP. Prior to version 4.5.4, an attacker can
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46549.yaml
diff --git a/2025/CVE-2025-46550.md b/2025/CVE-2025-46550.md
index e93cf72cff5..e71ccaa3429 100644
--- a/2025/CVE-2025-46550.md
+++ b/2025/CVE-2025-46550.md
@@ -15,3 +15,5 @@ YesWiki is a wiki system written in PHP. Prior to version 4.5.4, the `/?BazaR` e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46550.yaml
diff --git a/2025/CVE-2025-46554.md b/2025/CVE-2025-46554.md
index 4da241a1bd2..8bff1398236 100644
--- a/2025/CVE-2025-46554.md
+++ b/2025/CVE-2025-46554.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46554.yaml
diff --git a/2025/CVE-2025-46565.md b/2025/CVE-2025-46565.md
index 709b0413a5b..5f97707067e 100644
--- a/2025/CVE-2025-46565.md
+++ b/2025/CVE-2025-46565.md
@@ -19,3 +19,5 @@ Vite is a frontend tooling framework for javascript. Prior to versions 6.3.4, 6.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46565.yaml
diff --git a/2025/CVE-2025-46822.md b/2025/CVE-2025-46822.md
index ad49ded3d71..3ae010b8e80 100644
--- a/2025/CVE-2025-46822.md
+++ b/2025/CVE-2025-46822.md
@@ -15,3 +15,5 @@ OsamaTaher/Java-springboot-codebase is a collection of Java and Spring Boot code
 #### Github
 - https://github.com/d3sca/CVE-2025-46822
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46822.yaml
diff --git a/2025/CVE-2025-47188.md b/2025/CVE-2025-47188.md
index 344fb5ea042..de9c75a9e80 100644
--- a/2025/CVE-2025-47188.md
+++ b/2025/CVE-2025-47188.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47188.yaml
diff --git a/2025/CVE-2025-47204.md b/2025/CVE-2025-47204.md
index 06ed475e464..494d04d6dd9 100644
--- a/2025/CVE-2025-47204.md
+++ b/2025/CVE-2025-47204.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47204.yaml
diff --git a/2025/CVE-2025-47423.md b/2025/CVE-2025-47423.md
index 5c7b646a3b9..b42411ab832 100644
--- a/2025/CVE-2025-47423.md
+++ b/2025/CVE-2025-47423.md
@@ -15,3 +15,5 @@ Personal Weather Station Dashboard 12_lts allows unauthenticated remote attacker
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47423.yaml
diff --git a/2025/CVE-2025-47445.md b/2025/CVE-2025-47445.md
index 275df583b81..ab849faf2fc 100644
--- a/2025/CVE-2025-47445.md
+++ b/2025/CVE-2025-47445.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47445.yaml
diff --git a/2025/CVE-2025-47539.md b/2025/CVE-2025-47539.md
index 612a9bd8cca..14e790adb1e 100644
--- a/2025/CVE-2025-47539.md
+++ b/2025/CVE-2025-47539.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Nxploited/CVE-2025-47539
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47539.yaml
diff --git a/2025/CVE-2025-47577.md b/2025/CVE-2025-47577.md
index 67aefcca2d0..c7a09564ed7 100644
--- a/2025/CVE-2025-47577.md
+++ b/2025/CVE-2025-47577.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/Yucaerin/CVE-2025-47577
 - https://github.com/sug4r-wr41th/CVE-2025-47577
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47577.yaml
diff --git a/2025/CVE-2025-47646.md b/2025/CVE-2025-47646.md
index 68e847070c0..9d79620ad2c 100644
--- a/2025/CVE-2025-47646.md
+++ b/2025/CVE-2025-47646.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/Nxploited/CVE-2025-47646
 - https://github.com/RootHarpy/CVE-2025-47646
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47646.yaml
diff --git a/2025/CVE-2025-47783.md b/2025/CVE-2025-47783.md
index e22d3c4d97e..2ac46eb17ed 100644
--- a/2025/CVE-2025-47783.md
+++ b/2025/CVE-2025-47783.md
@@ -15,3 +15,5 @@ Label Studio is a multi-type data labeling and annotation tool. A vulnerability
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47783.yaml
diff --git a/2025/CVE-2025-47812.md b/2025/CVE-2025-47812.md
index 49e69f42696..90efa424557 100644
--- a/2025/CVE-2025-47812.md
+++ b/2025/CVE-2025-47812.md
@@ -26,3 +26,5 @@ In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0
 - https://github.com/r0otk3r/CVE-2025-47812
 - https://github.com/rxerium/CVE-2025-47812
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47812.yaml
diff --git a/2025/CVE-2025-47813.md b/2025/CVE-2025-47813.md
index 14733312f64..8f770223a43 100644
--- a/2025/CVE-2025-47813.md
+++ b/2025/CVE-2025-47813.md
@@ -17,3 +17,5 @@ loginok.html in Wing FTP Server before 7.4.4 discloses the full local installati
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47813.yaml
diff --git a/2025/CVE-2025-47916.md b/2025/CVE-2025-47916.md
index 8235bb8bdb1..610be0c9f32 100644
--- a/2025/CVE-2025-47916.md
+++ b/2025/CVE-2025-47916.md
@@ -16,3 +16,5 @@ Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted t
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47916.yaml
diff --git a/2025/CVE-2025-48703.md b/2025/CVE-2025-48703.md
index aeb8d8ec535..1d80c586703 100644
--- a/2025/CVE-2025-48703.md
+++ b/2025/CVE-2025-48703.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/Skynoxk/CVE-2025-48703
 - https://github.com/itstarsec/CVE-2025-48703
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-48703.yaml
diff --git a/2025/CVE-2025-48827.md b/2025/CVE-2025-48827.md
index 727a37da658..3dc9ea08bd7 100644
--- a/2025/CVE-2025-48827.md
+++ b/2025/CVE-2025-48827.md
@@ -18,3 +18,5 @@ vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated use
 - https://github.com/0xgh057r3c0n/CVE-2025-48827
 - https://github.com/wiseep/CVE-2025-48827
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-48827.yaml
diff --git a/2025/CVE-2025-48828.md b/2025/CVE-2025-48828.md
index 8eb81a321d7..5fc3eb406bf 100644
--- a/2025/CVE-2025-48828.md
+++ b/2025/CVE-2025-48828.md
@@ -16,3 +16,5 @@ Certain vBulletin versions might allow attackers to execute arbitrary PHP code b
 #### Github
 - https://github.com/ill-deed/vBulletin-CVE-2025-48828-Multi-target
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-48828.yaml
diff --git a/2025/CVE-2025-48954.md b/2025/CVE-2025-48954.md
index b1cdcdd5ae6..8f977de73f4 100644
--- a/2025/CVE-2025-48954.md
+++ b/2025/CVE-2025-48954.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-48954.yaml
diff --git a/2025/CVE-2025-49001.md b/2025/CVE-2025-49001.md
index 32ce58918c3..f2a101e6565 100644
--- a/2025/CVE-2025-49001.md
+++ b/2025/CVE-2025-49001.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49001.yaml
diff --git a/2025/CVE-2025-49002.md b/2025/CVE-2025-49002.md
index aa7dbf11bc3..f3f943c557b 100644
--- a/2025/CVE-2025-49002.md
+++ b/2025/CVE-2025-49002.md
@@ -16,3 +16,5 @@ DataEase is an open source business intelligence and data visualization tool. Ve
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49002.yaml
diff --git a/2025/CVE-2025-49029.md b/2025/CVE-2025-49029.md
index 65b438f41ad..f6714575ea6 100644
--- a/2025/CVE-2025-49029.md
+++ b/2025/CVE-2025-49029.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/Nxploited/CVE-2025-49029
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49029.yaml
diff --git a/2025/CVE-2025-49113.md b/2025/CVE-2025-49113.md
index 401e79f9fe9..f467014d1d5 100644
--- a/2025/CVE-2025-49113.md
+++ b/2025/CVE-2025-49113.md
@@ -38,3 +38,5 @@ Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execu
 - https://github.com/rasool13x/exploit-CVE-2025-49113
 - https://github.com/rxerium/CVE-2025-49113
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49113.yaml
diff --git a/2025/CVE-2025-49132.md b/2025/CVE-2025-49132.md
index 79d9396717f..edea5e2bcde 100644
--- a/2025/CVE-2025-49132.md
+++ b/2025/CVE-2025-49132.md
@@ -24,3 +24,5 @@ No PoCs from references.
 - https://github.com/pxxdrobits/CVE-2025-49132
 - https://github.com/qiaojojo/CVE-2025-49132_poc
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49132.yaml
diff --git a/2025/CVE-2025-49493.md b/2025/CVE-2025-49493.md
index 95ebf279a2b..8ce72f87415 100644
--- a/2025/CVE-2025-49493.md
+++ b/2025/CVE-2025-49493.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49493.yaml
diff --git a/2025/CVE-2025-49533.md b/2025/CVE-2025-49533.md
index 0e45b6337a5..e48e2f9bc93 100644
--- a/2025/CVE-2025-49533.md
+++ b/2025/CVE-2025-49533.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49533.yaml
diff --git a/2025/CVE-2025-49596.md b/2025/CVE-2025-49596.md
index 4e5f6c891b9..4d2410f6aa1 100644
--- a/2025/CVE-2025-49596.md
+++ b/2025/CVE-2025-49596.md
@@ -15,3 +15,5 @@ The MCP inspector is a developer tool for testing and debugging MCP servers. Ver
 #### Github
 - https://github.com/ashiqrehan-21/MCP-Inspector-CVE-2025-49596
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49596.yaml
diff --git a/2025/CVE-2025-49706.md b/2025/CVE-2025-49706.md
index c6321cb2995..3327d277e8b 100644
--- a/2025/CVE-2025-49706.md
+++ b/2025/CVE-2025-49706.md
@@ -22,3 +22,5 @@ No PoCs from references.
 - https://github.com/Salehswt/SharePoint-CVEs-Hunter
 - https://github.com/saladin0x1/CVE-2025-53770
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49706.yaml
diff --git a/2025/CVE-2025-49825.md b/2025/CVE-2025-49825.md
index 2538f8ced3c..b43d4fac137 100644
--- a/2025/CVE-2025-49825.md
+++ b/2025/CVE-2025-49825.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49825.yaml
diff --git a/2025/CVE-2025-49844.md b/2025/CVE-2025-49844.md
index e0982e4b428..9dcb8d7c5dc 100644
--- a/2025/CVE-2025-49844.md
+++ b/2025/CVE-2025-49844.md
@@ -15,3 +15,6 @@ No PoCs from references.
 #### Github
 - https://github.com/Zain3311/CVE-2025-49844
 - https://github.com/alsyundawy/eradicate-zimbra-malware
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2025/CVE-2025-49844.yaml
diff --git a/2025/CVE-2025-50578.md b/2025/CVE-2025-50578.md
index 181f1ade8c2..5130e247dc2 100644
--- a/2025/CVE-2025-50578.md
+++ b/2025/CVE-2025-50578.md
@@ -16,3 +16,5 @@ LinuxServer.io heimdall 2.6.3-ls307 contains a vulnerability in how it handles u
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-50578.yaml
diff --git a/2025/CVE-2025-50738.md b/2025/CVE-2025-50738.md
index 594bef995cb..5f54aa1af66 100644
--- a/2025/CVE-2025-50738.md
+++ b/2025/CVE-2025-50738.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-50738.yaml
diff --git a/2025/CVE-2025-5086.md b/2025/CVE-2025-5086.md
index e06011d04a7..ca2d3339ec1 100644
--- a/2025/CVE-2025-5086.md
+++ b/2025/CVE-2025-5086.md
@@ -21,3 +21,5 @@ A deserialization of untrusted data vulnerability affecting DELMIA Apriso from R
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5086.yaml
diff --git a/2025/CVE-2025-51482.md b/2025/CVE-2025-51482.md
index 4fa91b6b24a..5513035ed2f 100644
--- a/2025/CVE-2025-51482.md
+++ b/2025/CVE-2025-51482.md
@@ -16,3 +16,5 @@ Remote Code Execution in letta.server.rest_api.routers.v1.tools.run_tool_from_so
 #### Github
 - https://github.com/Kai-One001/Letta-CVE-2025-51482-RCE
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51482.yaml
diff --git a/2025/CVE-2025-51501.md b/2025/CVE-2025-51501.md
index 698a2f1e1a1..76695999dfb 100644
--- a/2025/CVE-2025-51501.md
+++ b/2025/CVE-2025-51501.md
@@ -15,3 +15,5 @@ Reflected Cross-Site Scripting (XSS) in the id parameter of the live_edit.module
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51501.yaml
diff --git a/2025/CVE-2025-51502.md b/2025/CVE-2025-51502.md
index 5416096b922..afeab920604 100644
--- a/2025/CVE-2025-51502.md
+++ b/2025/CVE-2025-51502.md
@@ -15,3 +15,5 @@ Reflected Cross-Site Scripting (XSS) in Microweber CMS 2.0 via the layout parame
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51502.yaml
diff --git a/2025/CVE-2025-51586.md b/2025/CVE-2025-51586.md
index 11a7d41bde4..87d926d7321 100644
--- a/2025/CVE-2025-51586.md
+++ b/2025/CVE-2025-51586.md
@@ -15,3 +15,5 @@ An issue was discoverd in file controllers/admin/AdminLoginController.php in Pre
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51586.yaml
diff --git a/2025/CVE-2025-51990.md b/2025/CVE-2025-51990.md
index 2e478c013fb..1b39304ca40 100644
--- a/2025/CVE-2025-51990.md
+++ b/2025/CVE-2025-51990.md
@@ -15,3 +15,5 @@ XWiki through version 17.3.0 is affected by multiple stored Cross-Site Scripting
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51990.yaml
diff --git a/2025/CVE-2025-51991.md b/2025/CVE-2025-51991.md
index 6b9fb13b76f..86d78f30032 100644
--- a/2025/CVE-2025-51991.md
+++ b/2025/CVE-2025-51991.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51991.yaml
diff --git a/2025/CVE-2025-52488.md b/2025/CVE-2025-52488.md
index dda93cdcfa1..d0b28770b3f 100644
--- a/2025/CVE-2025-52488.md
+++ b/2025/CVE-2025-52488.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52488.yaml
diff --git a/2025/CVE-2025-5287.md b/2025/CVE-2025-5287.md
index 5c170eefc62..0a1f668f66b 100644
--- a/2025/CVE-2025-5287.md
+++ b/2025/CVE-2025-5287.md
@@ -18,3 +18,5 @@ No PoCs from references.
 - https://github.com/RootHarpy/CVE-2025-5287
 - https://github.com/wiseep/CVE-2025-5287
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5287.yaml
diff --git a/2025/CVE-2025-52970.md b/2025/CVE-2025-52970.md
index cfb0f41f354..b12403278b6 100644
--- a/2025/CVE-2025-52970.md
+++ b/2025/CVE-2025-52970.md
@@ -19,3 +19,5 @@ A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below,
 - https://github.com/34zY/CVE-2025-52970
 - https://github.com/Hex00-0x4/FortiWeb-CVE-2025-52970-Authentication-Bypass
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52970.yaml
diff --git a/2025/CVE-2025-5301.md b/2025/CVE-2025-5301.md
index 6d75fbdc060..8e5488a2a2f 100644
--- a/2025/CVE-2025-5301.md
+++ b/2025/CVE-2025-5301.md
@@ -17,3 +17,5 @@ ONLYOFFICE Docs (DocumentServer) in versions equal and below 8.3.1 are affected
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5301.yaml
diff --git a/2025/CVE-2025-53118.md b/2025/CVE-2025-53118.md
index 6fe2b46730a..07d57b49353 100644
--- a/2025/CVE-2025-53118.md
+++ b/2025/CVE-2025-53118.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53118.yaml
diff --git a/2025/CVE-2025-53364.md b/2025/CVE-2025-53364.md
index 417bad745e5..af2cced4b48 100644
--- a/2025/CVE-2025-53364.md
+++ b/2025/CVE-2025-53364.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53364.yaml
diff --git a/2025/CVE-2025-53558.md b/2025/CVE-2025-53558.md
index 3739466e95b..7619e3b8c97 100644
--- a/2025/CVE-2025-53558.md
+++ b/2025/CVE-2025-53558.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53558.yaml
diff --git a/2025/CVE-2025-53624.md b/2025/CVE-2025-53624.md
index 93eb0f35d8c..b8fe95e5560 100644
--- a/2025/CVE-2025-53624.md
+++ b/2025/CVE-2025-53624.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53624.yaml
diff --git a/2025/CVE-2025-53770.md b/2025/CVE-2025-53770.md
index c93853b2fc8..b7a5abf4ca8 100644
--- a/2025/CVE-2025-53770.md
+++ b/2025/CVE-2025-53770.md
@@ -47,3 +47,5 @@ Deserialization of untrusted data in on-premises Microsoft SharePoint Server all
 - https://github.com/soltanali0/CVE-2025-53770-Exploit
 - https://github.com/unk9vvn/sharepoint-toolpane
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53770.yaml
diff --git a/2025/CVE-2025-53771.md b/2025/CVE-2025-53771.md
index 47aadf110c0..0fec3e1abd3 100644
--- a/2025/CVE-2025-53771.md
+++ b/2025/CVE-2025-53771.md
@@ -19,3 +19,5 @@ No PoCs from references.
 - https://github.com/saladin0x1/CVE-2025-53770
 - https://github.com/unk9vvn/sharepoint-toolpane
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53771.yaml
diff --git a/2025/CVE-2025-53833.md b/2025/CVE-2025-53833.md
index 5e57edfc706..08ca9b79c82 100644
--- a/2025/CVE-2025-53833.md
+++ b/2025/CVE-2025-53833.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53833.yaml
diff --git a/2025/CVE-2025-5394.md b/2025/CVE-2025-5394.md
index 89cefb382a0..4872d8390bc 100644
--- a/2025/CVE-2025-5394.md
+++ b/2025/CVE-2025-5394.md
@@ -17,3 +17,5 @@ No PoCs from references.
 - https://github.com/Yucaerin/CVE-2025-5394
 - https://github.com/fokda-prodz/CVE-2025-5394
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5394.yaml
diff --git a/2025/CVE-2025-54068.md b/2025/CVE-2025-54068.md
index a8d1c56584d..3fd63db9dd5 100644
--- a/2025/CVE-2025-54068.md
+++ b/2025/CVE-2025-54068.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54068.yaml
diff --git a/2025/CVE-2025-54123.md b/2025/CVE-2025-54123.md
index 17f2cb7f084..08351fd8448 100644
--- a/2025/CVE-2025-54123.md
+++ b/2025/CVE-2025-54123.md
@@ -16,3 +16,5 @@ Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, th
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54123.yaml
diff --git a/2025/CVE-2025-54125.md b/2025/CVE-2025-54125.md
index a1da076d3d7..7cbad01b813 100644
--- a/2025/CVE-2025-54125.md
+++ b/2025/CVE-2025-54125.md
@@ -17,3 +17,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54125.yaml
diff --git a/2025/CVE-2025-54236.md b/2025/CVE-2025-54236.md
index cbe384b56c5..67a2b90c1c3 100644
--- a/2025/CVE-2025-54236.md
+++ b/2025/CVE-2025-54236.md
@@ -16,3 +16,5 @@ Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14,
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54236.yaml
diff --git a/2025/CVE-2025-54249.md b/2025/CVE-2025-54249.md
index a5d0e768284..029ffef16c6 100644
--- a/2025/CVE-2025-54249.md
+++ b/2025/CVE-2025-54249.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54249.yaml
diff --git a/2025/CVE-2025-54251.md b/2025/CVE-2025-54251.md
index e5f1cd85469..da8b83017df 100644
--- a/2025/CVE-2025-54251.md
+++ b/2025/CVE-2025-54251.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54251.yaml
diff --git a/2025/CVE-2025-54309.md b/2025/CVE-2025-54309.md
index f53db8582cc..0717fb1835f 100644
--- a/2025/CVE-2025-54309.md
+++ b/2025/CVE-2025-54309.md
@@ -23,3 +23,5 @@ CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is
 - https://github.com/watchtowrlabs/watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309
 - https://github.com/whisperer1290/CVE-2025-54309__Enhanced_exploit
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-54309.yaml
diff --git a/2025/CVE-2025-54589.md b/2025/CVE-2025-54589.md
index f821326dfe2..207592cca03 100644
--- a/2025/CVE-2025-54589.md
+++ b/2025/CVE-2025-54589.md
@@ -16,3 +16,5 @@ Copyparty is a portable file server. In versions 1.18.6 and below, when accessin
 #### Github
 - https://github.com/byteReaper77/CVE-2025-54589
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54589.yaml
diff --git a/2025/CVE-2025-54726.md b/2025/CVE-2025-54726.md
index 5e29dcdcf9b..fc207882fc8 100644
--- a/2025/CVE-2025-54726.md
+++ b/2025/CVE-2025-54726.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2025-54726
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54726.yaml
diff --git a/2025/CVE-2025-54782.md b/2025/CVE-2025-54782.md
index 952016aa9ae..41589816eda 100644
--- a/2025/CVE-2025-54782.md
+++ b/2025/CVE-2025-54782.md
@@ -18,3 +18,5 @@ Nest is a framework for building scalable Node.js server-side applications. In v
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54782.yaml
diff --git a/2025/CVE-2025-54988.md b/2025/CVE-2025-54988.md
index 7451fb97e29..876a4581439 100644
--- a/2025/CVE-2025-54988.md
+++ b/2025/CVE-2025-54988.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/mgthuramoemyint/POC-CVE-2025-54988
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54988.yaml
diff --git a/2025/CVE-2025-55150.md b/2025/CVE-2025-55150.md
index 59eb7bd3117..501295da576 100644
--- a/2025/CVE-2025-55150.md
+++ b/2025/CVE-2025-55150.md
@@ -15,3 +15,5 @@ Stirling-PDF is a locally hosted web application that performs various operation
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55150.yaml
diff --git a/2025/CVE-2025-55161.md b/2025/CVE-2025-55161.md
index 5fc0a1f1d2c..595ee2b056d 100644
--- a/2025/CVE-2025-55161.md
+++ b/2025/CVE-2025-55161.md
@@ -15,3 +15,5 @@ Stirling-PDF is a locally hosted web application that performs various operation
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55161.yaml
diff --git a/2025/CVE-2025-55169.md b/2025/CVE-2025-55169.md
index 6bd6cb89c97..b66ef6775f7 100644
--- a/2025/CVE-2025-55169.md
+++ b/2025/CVE-2025-55169.md
@@ -16,3 +16,5 @@ WeGIA is an open source web manager with a focus on the Portuguese language and
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55169.yaml
diff --git a/2025/CVE-2025-55182.md b/2025/CVE-2025-55182.md
index 4685ec67ab0..a2105a116db 100644
--- a/2025/CVE-2025-55182.md
+++ b/2025/CVE-2025-55182.md
@@ -24,3 +24,6 @@ No PoCs from references.
 - https://github.com/Tc3s/REACT2SHELL-WEB-VULN
 - https://github.com/Farhan9488/CVE-2025-55182-research
 - https://github.com/JotaEspig/CVE-2025-66478-PoC-Reverse-Shell
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55182.yaml
diff --git a/2025/CVE-2025-55190.md b/2025/CVE-2025-55190.md
index 5e5182ade0c..170efff1ae3 100644
--- a/2025/CVE-2025-55190.md
+++ b/2025/CVE-2025-55190.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55190.yaml
diff --git a/2025/CVE-2025-55303.md b/2025/CVE-2025-55303.md
index ed5583d1e38..b12fd0b9165 100644
--- a/2025/CVE-2025-55303.md
+++ b/2025/CVE-2025-55303.md
@@ -17,3 +17,5 @@ Astro is a web framework for content-driven websites. In versions of astro befor
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55303.yaml
diff --git a/2025/CVE-2025-55523.md b/2025/CVE-2025-55523.md
index dc56d40baca..f9e276481d3 100644
--- a/2025/CVE-2025-55523.md
+++ b/2025/CVE-2025-55523.md
@@ -15,3 +15,5 @@ An issue in the component /api/download_work_dir_file.py of Agent-Zero v0.8.* al
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55523.yaml
diff --git a/2025/CVE-2025-5569.md b/2025/CVE-2025-5569.md
index 2d559dc7faf..5e934811256 100644
--- a/2025/CVE-2025-5569.md
+++ b/2025/CVE-2025-5569.md
@@ -22,3 +22,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5569.yaml
diff --git a/2025/CVE-2025-55746.md b/2025/CVE-2025-55746.md
index 95db479e2ab..903d7dbb07c 100644
--- a/2025/CVE-2025-55746.md
+++ b/2025/CVE-2025-55746.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55746.yaml
diff --git a/2025/CVE-2025-55747.md b/2025/CVE-2025-55747.md
index c94694ee8a2..6b9508d7dec 100644
--- a/2025/CVE-2025-55747.md
+++ b/2025/CVE-2025-55747.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55747.yaml
diff --git a/2025/CVE-2025-55748.md b/2025/CVE-2025-55748.md
index ab3610e54c5..77c0f3d0b5c 100644
--- a/2025/CVE-2025-55748.md
+++ b/2025/CVE-2025-55748.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55748.yaml
diff --git a/2025/CVE-2025-56266.md b/2025/CVE-2025-56266.md
index 364f7c879f3..76c330f59ed 100644
--- a/2025/CVE-2025-56266.md
+++ b/2025/CVE-2025-56266.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-56266.yaml
diff --git a/2025/CVE-2025-56819.md b/2025/CVE-2025-56819.md
index 3ea6ca5d37c..6ef084a5a11 100644
--- a/2025/CVE-2025-56819.md
+++ b/2025/CVE-2025-56819.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/xyyzxc/CVE-2025-56819
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-56819.yaml
diff --git a/2025/CVE-2025-5701.md b/2025/CVE-2025-5701.md
index 015486519a2..3fd8ee0a32c 100644
--- a/2025/CVE-2025-5701.md
+++ b/2025/CVE-2025-5701.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/Nxploited/CVE-2025-5701
 - https://github.com/RandomRobbieBF/CVE-2025-5701
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5701.yaml
diff --git a/2025/CVE-2025-5777.md b/2025/CVE-2025-5777.md
index ee76c16bb43..3deaa2e7fcb 100644
--- a/2025/CVE-2025-5777.md
+++ b/2025/CVE-2025-5777.md
@@ -38,3 +38,5 @@ Insufficient input validation leading to memory overread when the NetScaler is
 - https://github.com/win3zz/CVE-2025-5777
 - https://github.com/maxprog-svg/CitrixBleedCVE-2026-8452-2025-5777
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5777.yaml
diff --git a/2025/CVE-2025-57788.md b/2025/CVE-2025-57788.md
index d4816d6d095..fc85c6673c1 100644
--- a/2025/CVE-2025-57788.md
+++ b/2025/CVE-2025-57788.md
@@ -16,3 +16,5 @@ A vulnerability in a known login mechanism allows unauthenticated attackers to e
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-57788.yaml
diff --git a/2025/CVE-2025-57808.md b/2025/CVE-2025-57808.md
index b3ed88ac297..1aad38b1ab8 100644
--- a/2025/CVE-2025-57808.md
+++ b/2025/CVE-2025-57808.md
@@ -15,3 +15,5 @@ ESPHome is a system to control microcontrollers remotely through Home Automation
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-57808.yaml
diff --git a/2025/CVE-2025-57819.md b/2025/CVE-2025-57819.md
index 4eb9b949e2c..907374b8129 100644
--- a/2025/CVE-2025-57819.md
+++ b/2025/CVE-2025-57819.md
@@ -25,3 +25,5 @@ No PoCs from references.
 - https://github.com/watchtowrlabs/watchTowr-vs-FreePBX-CVE-2025-57819
 - https://github.com/xV4nd3Rx/CVE-2025-57819_FreePBX-PoC
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-57819.yaml
diff --git a/2025/CVE-2025-57822.md b/2025/CVE-2025-57822.md
index 22693579158..b052cf4e2c7 100644
--- a/2025/CVE-2025-57822.md
+++ b/2025/CVE-2025-57822.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-57822.yaml
diff --git a/2025/CVE-2025-58179.md b/2025/CVE-2025-58179.md
index 88821e67e49..9d27b4f3b1a 100644
--- a/2025/CVE-2025-58179.md
+++ b/2025/CVE-2025-58179.md
@@ -15,3 +15,5 @@ Astro is a web framework for content-driven websites. Versions 11.0.3 through 12
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58179.yaml
diff --git a/2025/CVE-2025-58434.md b/2025/CVE-2025-58434.md
index 4eea73881e5..5c9bd75e563 100644
--- a/2025/CVE-2025-58434.md
+++ b/2025/CVE-2025-58434.md
@@ -15,3 +15,5 @@ Flowise is a drag & drop user interface to build a customized large language mod
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58434.yaml
diff --git a/2025/CVE-2025-58443.md b/2025/CVE-2025-58443.md
index 9e364dc87b5..684a64586ad 100644
--- a/2025/CVE-2025-58443.md
+++ b/2025/CVE-2025-58443.md
@@ -16,3 +16,5 @@ FOG is a free open-source cloning/imaging/rescue suite/inventory management syst
 #### Github
 - https://github.com/casp3r0x0/CVE-2025-58443
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58443.yaml
diff --git a/2025/CVE-2025-58751.md b/2025/CVE-2025-58751.md
index 4e7496b42fa..e00bf903f0e 100644
--- a/2025/CVE-2025-58751.md
+++ b/2025/CVE-2025-58751.md
@@ -20,3 +20,5 @@ Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58751.yaml
diff --git a/2025/CVE-2025-59049.md b/2025/CVE-2025-59049.md
index 9bd72aaa5fd..662703d6acf 100644
--- a/2025/CVE-2025-59049.md
+++ b/2025/CVE-2025-59049.md
@@ -17,3 +17,5 @@ Mockoon provides way to design and run mock APIs. Prior to version 9.2.0, a mock
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59049.yaml
diff --git a/2025/CVE-2025-59287.md b/2025/CVE-2025-59287.md
index 6a03e512bf1..4c2f590dbe2 100644
--- a/2025/CVE-2025-59287.md
+++ b/2025/CVE-2025-59287.md
@@ -32,3 +32,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/trustedsec/spoonmap
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59287.yaml
diff --git a/2025/CVE-2025-59341.md b/2025/CVE-2025-59341.md
index 4dc835e7664..0b77677f59a 100644
--- a/2025/CVE-2025-59341.md
+++ b/2025/CVE-2025-59341.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59341.yaml
diff --git a/2025/CVE-2025-59342.md b/2025/CVE-2025-59342.md
index 402f31fd693..f6438dd9e62 100644
--- a/2025/CVE-2025-59342.md
+++ b/2025/CVE-2025-59342.md
@@ -15,3 +15,5 @@ esm.sh is a nobuild content delivery network(CDN) for modern web development. In
 #### Github
 - https://github.com/byteReaper77/CVE-2025-59342
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59342.yaml
diff --git a/2025/CVE-2025-59474.md b/2025/CVE-2025-59474.md
index 5ebdfe4f1f2..102f839d7cd 100644
--- a/2025/CVE-2025-59474.md
+++ b/2025/CVE-2025-59474.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59474.yaml
diff --git a/2025/CVE-2025-59528.md b/2025/CVE-2025-59528.md
index 1f3cabded05..cbb5e95025d 100644
--- a/2025/CVE-2025-59528.md
+++ b/2025/CVE-2025-59528.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 - https://github.com/hackpatato/PoC-and-yara-rules-of-CVE-2025-59528-Flowise-has-Remote-Code-Execution-vulnerability
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59528.yaml
diff --git a/2025/CVE-2025-59582.md b/2025/CVE-2025-59582.md
index af571dd2f7f..b65741f0bea 100644
--- a/2025/CVE-2025-59582.md
+++ b/2025/CVE-2025-59582.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59582.yaml
diff --git a/2025/CVE-2025-5961.md b/2025/CVE-2025-5961.md
index 935c915f039..9fd2ef92cbe 100644
--- a/2025/CVE-2025-5961.md
+++ b/2025/CVE-2025-5961.md
@@ -16,3 +16,5 @@ The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPre
 #### Github
 - https://github.com/Nxploited/CVE-2025-5961
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5961.yaml
diff --git a/2025/CVE-2025-6058.md b/2025/CVE-2025-6058.md
index bd77ef82e28..fe57178260f 100644
--- a/2025/CVE-2025-6058.md
+++ b/2025/CVE-2025-6058.md
@@ -16,3 +16,5 @@ No PoCs from references.
 - https://github.com/0xgh057r3c0n/CVE-2025-6058
 - https://github.com/Nxploited/CVE-2025-6058
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6058.yaml
diff --git a/2025/CVE-2025-6174.md b/2025/CVE-2025-6174.md
index 79ec92481ba..296e13d5bf2 100644
--- a/2025/CVE-2025-6174.md
+++ b/2025/CVE-2025-6174.md
@@ -15,3 +15,5 @@ The Qwizcards | online quizzes and flashcards WordPress plugin through 3.9.4 doe
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6174.yaml
diff --git a/2025/CVE-2025-6197.md b/2025/CVE-2025-6197.md
index 0f26f8f972a..816785e0b50 100644
--- a/2025/CVE-2025-6197.md
+++ b/2025/CVE-2025-6197.md
@@ -19,3 +19,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6197.yaml
diff --git a/2025/CVE-2025-6204.md b/2025/CVE-2025-6204.md
index 71d6d3500ed..81551e4db30 100644
--- a/2025/CVE-2025-6204.md
+++ b/2025/CVE-2025-6204.md
@@ -21,3 +21,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6204.yaml
diff --git a/2025/CVE-2025-6205.md b/2025/CVE-2025-6205.md
index e92f248cd23..db05a7d764f 100644
--- a/2025/CVE-2025-6205.md
+++ b/2025/CVE-2025-6205.md
@@ -21,3 +21,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6205.yaml
diff --git a/2025/CVE-2025-6403.md b/2025/CVE-2025-6403.md
index c52ec52f0ba..8243f63e036 100644
--- a/2025/CVE-2025-6403.md
+++ b/2025/CVE-2025-6403.md
@@ -17,3 +17,5 @@ Eine Schwachstelle wurde in code-projects School Fees Payment System 1.0 ausgema
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6403.yaml
diff --git a/2025/CVE-2025-6934.md b/2025/CVE-2025-6934.md
index a8e55d2287f..508f62ae8ce 100644
--- a/2025/CVE-2025-6934.md
+++ b/2025/CVE-2025-6934.md
@@ -20,3 +20,5 @@ The Opal Estate Pro – Property Management and Submission plugin for WordPress,
 - https://github.com/Rosemary1337/CVE-2025-6934
 - https://github.com/yukinime/CVE-2025-6934
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6934.yaml
diff --git a/2025/CVE-2025-6970.md b/2025/CVE-2025-6970.md
index 6abb1049e24..3ac913aabfa 100644
--- a/2025/CVE-2025-6970.md
+++ b/2025/CVE-2025-6970.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2025-6970
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6970.yaml
diff --git a/2025/CVE-2025-6984.md b/2025/CVE-2025-6984.md
index 495d6df227c..4b696e7855e 100644
--- a/2025/CVE-2025-6984.md
+++ b/2025/CVE-2025-6984.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-6984.yaml
diff --git a/2025/CVE-2025-7160.md b/2025/CVE-2025-7160.md
index 6ea7c7733ea..81d1610e007 100644
--- a/2025/CVE-2025-7160.md
+++ b/2025/CVE-2025-7160.md
@@ -17,3 +17,5 @@ Es wurde eine Schwachstelle in PHPGurukul Zoo Management System 2.1 entdeckt. Si
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-7160.yaml
diff --git a/2025/CVE-2025-7901.md b/2025/CVE-2025-7901.md
index 17e26f6af7b..cdf80f280f7 100644
--- a/2025/CVE-2025-7901.md
+++ b/2025/CVE-2025-7901.md
@@ -18,3 +18,5 @@ Eine Schwachstelle wurde in yangzongzhuan RuoYi bis 4.8.1 ausgemacht. Sie wurde
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-7901.yaml
diff --git a/2025/CVE-2025-8085.md b/2025/CVE-2025-8085.md
index a3e24c4882c..675a5f63ec4 100644
--- a/2025/CVE-2025-8085.md
+++ b/2025/CVE-2025-8085.md
@@ -15,3 +15,5 @@ The Ditty  WordPress plugin before 3.1.58 lacks authorization and authentication
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-8085.yaml
diff --git a/2025/CVE-2025-8191.md b/2025/CVE-2025-8191.md
index cac64b61415..b5286df81ee 100644
--- a/2025/CVE-2025-8191.md
+++ b/2025/CVE-2025-8191.md
@@ -20,3 +20,5 @@ Es wurde eine Schwachstelle in macrozheng mall bis 1.0.3 gefunden. Sie wurde als
 #### Github
 - https://github.com/byteReaper77/CVE-2025-8191
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-8191.yaml
diff --git a/2025/CVE-2025-8266.md b/2025/CVE-2025-8266.md
index 3735f5f1dd4..ee696c0077a 100644
--- a/2025/CVE-2025-8266.md
+++ b/2025/CVE-2025-8266.md
@@ -20,3 +20,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-8266.yaml
diff --git a/2025/CVE-2025-8286.md b/2025/CVE-2025-8286.md
index 163ded4e9f6..b89e402c913 100644
--- a/2025/CVE-2025-8286.md
+++ b/2025/CVE-2025-8286.md
@@ -16,3 +16,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2025/CVE-2025-8286.yaml
diff --git a/2025/CVE-2025-8943.md b/2025/CVE-2025-8943.md
index 0f000e8bb2b..e302678e8a2 100644
--- a/2025/CVE-2025-8943.md
+++ b/2025/CVE-2025-8943.md
@@ -15,3 +15,5 @@ The Custom MCPs feature is designed to execute OS commands, for instance, using
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-8943.yaml
diff --git a/2025/CVE-2025-9242.md b/2025/CVE-2025-9242.md
index f473f1a6d5b..d7f71994b28 100644
--- a/2025/CVE-2025-9242.md
+++ b/2025/CVE-2025-9242.md
@@ -18,3 +18,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-9242.yaml
diff --git a/2025/CVE-2025-9744.md b/2025/CVE-2025-9744.md
index 73ede6a34ce..7102aed57c2 100644
--- a/2025/CVE-2025-9744.md
+++ b/2025/CVE-2025-9744.md
@@ -17,3 +17,5 @@ In Campcodes Online Loan Management System 1.0 ist eine Schwachstelle entdeckt w
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-9744.yaml
diff --git a/2025/CVE-2025-9808.md b/2025/CVE-2025-9808.md
index 2b6dbe296d6..420f13ef2a0 100644
--- a/2025/CVE-2025-9808.md
+++ b/2025/CVE-2025-9808.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-9808.yaml
diff --git a/2025/CVE-2025-9985.md b/2025/CVE-2025-9985.md
index f5d974f6c74..3a575c6b975 100644
--- a/2025/CVE-2025-9985.md
+++ b/2025/CVE-2025-9985.md
@@ -15,3 +15,5 @@ No PoCs from references.
 #### Github
 No PoCs found on GitHub currently.
 
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-9985.yaml
diff --git a/2026/CVE-2026-0257.md b/2026/CVE-2026-0257.md
index 1621dd22173..064027741b1 100644
--- a/2026/CVE-2026-0257.md
+++ b/2026/CVE-2026-0257.md
@@ -27,3 +27,6 @@ No PoCs from references.
 - https://github.com/akashsingh0454/CVE-2026-0257-PoC
 - https://github.com/Mr-Robot-LP/CVE-2026-0257
 - https://github.com/Ez4rd1x1/CVE-2026-0257
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-0257.yaml
diff --git a/2026/CVE-2026-0594.md b/2026/CVE-2026-0594.md
index 769305f9545..645b940703b 100644
--- a/2026/CVE-2026-0594.md
+++ b/2026/CVE-2026-0594.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/m4sh-wacker/CVE-2026-0594-ListSiteContributors-Plugin-Exploit
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0594.yaml
diff --git a/2026/CVE-2026-0740.md b/2026/CVE-2026-0740.md
index 6cf390b30bd..e7a95966abd 100644
--- a/2026/CVE-2026-0740.md
+++ b/2026/CVE-2026-0740.md
@@ -20,3 +20,6 @@ No PoCs from references.
 - https://github.com/a24ac1/CVE-2026-0740
 - https://github.com/MadExploits/ninja-form-exploit
 - https://github.com/ExDev994/CVE-2026-0740-mass
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0740.yaml
diff --git a/2026/CVE-2026-0770.md b/2026/CVE-2026-0770.md
index deb347380c9..647dfed8f55 100644
--- a/2026/CVE-2026-0770.md
+++ b/2026/CVE-2026-0770.md
@@ -23,3 +23,6 @@ No PoCs from references.
 - https://github.com/diamorphine666/CVE-2026-0770
 - https://github.com/Ez4rd1x1/CVE-2026-0770
 - https://github.com/razureink/cve-2026-0770-langflow_rce_reproduction
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0770.yaml
diff --git a/2026/CVE-2026-0829.md b/2026/CVE-2026-0829.md
index 7c3a945d6a5..d8640a22322 100644
--- a/2026/CVE-2026-0829.md
+++ b/2026/CVE-2026-0829.md
@@ -14,3 +14,6 @@ The Frontend File Manager Plugin WordPress plugin through 23.5 allows unauthenti
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0829.yaml
diff --git a/2026/CVE-2026-0926.md b/2026/CVE-2026-0926.md
index bd3df5a1a58..e58fba88154 100644
--- a/2026/CVE-2026-0926.md
+++ b/2026/CVE-2026-0926.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/diamorphine666/CVE-2026-0926-exploit
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0926.yaml
diff --git a/2026/CVE-2026-10520.md b/2026/CVE-2026-10520.md
index f859b320bcd..f52234edd5d 100644
--- a/2026/CVE-2026-10520.md
+++ b/2026/CVE-2026-10520.md
@@ -21,3 +21,6 @@ No PoCs from references.
 - https://github.com/error-inside/CVE-2026-10520
 - https://github.com/imbas007/RCE-CVE-2026-10520-CVE-2026-10523
 - https://github.com/snowcapped-morula414/bingo
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-10520.yaml
diff --git a/2026/CVE-2026-10580.md b/2026/CVE-2026-10580.md
index 65486581829..a3186ad9bda 100644
--- a/2026/CVE-2026-10580.md
+++ b/2026/CVE-2026-10580.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/0xgh057r3c0n/CVE-2026-10580
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-10580.yaml
diff --git a/2026/CVE-2026-10795.md b/2026/CVE-2026-10795.md
index 94fe9f4f1cb..8d69417d5be 100644
--- a/2026/CVE-2026-10795.md
+++ b/2026/CVE-2026-10795.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/izxci/CVE-2026-10795
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-10795.yaml
diff --git a/2026/CVE-2026-10823.md b/2026/CVE-2026-10823.md
index def9b99bc85..59231158087 100644
--- a/2026/CVE-2026-10823.md
+++ b/2026/CVE-2026-10823.md
@@ -14,3 +14,6 @@ The YMC Filter WordPress plugin before 3.11.3 does not properly authorize access
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-10823.yaml
diff --git a/2026/CVE-2026-1207.md b/2026/CVE-2026-1207.md
index 49f71b00a09..fc31540981a 100644
--- a/2026/CVE-2026-1207.md
+++ b/2026/CVE-2026-1207.md
@@ -19,3 +19,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/sw0rd1ight/CVE-2026-1207
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1207.yaml
diff --git a/2026/CVE-2026-12394.md b/2026/CVE-2026-12394.md
index 8614056743f..77e3ed5174c 100644
--- a/2026/CVE-2026-12394.md
+++ b/2026/CVE-2026-12394.md
@@ -14,3 +14,6 @@ The MemberGlut  WordPress plugin before 1.1.5 does not validate the role chosen
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-12394.yaml
diff --git a/2026/CVE-2026-12898.md b/2026/CVE-2026-12898.md
index 8102caed0a1..957170ef291 100644
--- a/2026/CVE-2026-12898.md
+++ b/2026/CVE-2026-12898.md
@@ -14,3 +14,6 @@ The All-in-One WP Migration and Backup WordPress plugin before 7.106 does not pr
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-12898.yaml
diff --git a/2026/CVE-2026-13001.md b/2026/CVE-2026-13001.md
index a44502eaabb..462916bc4dc 100644
--- a/2026/CVE-2026-13001.md
+++ b/2026/CVE-2026-13001.md
@@ -15,3 +15,6 @@ No PoCs from references.
 #### Github
 - https://github.com/shinthink/CVE-2026-13001
 - https://github.com/ghostpels/CVE-2026-13001
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-13001.yaml
diff --git a/2026/CVE-2026-13147.md b/2026/CVE-2026-13147.md
index 790a2932d47..bc57a138489 100644
--- a/2026/CVE-2026-13147.md
+++ b/2026/CVE-2026-13147.md
@@ -14,3 +14,6 @@ The Kirki  WordPress plugin before 6.0.12 does not validate a user-supplied URL
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-13147.yaml
diff --git a/2026/CVE-2026-1357.md b/2026/CVE-2026-1357.md
index e601b25116d..83e1ae4201b 100644
--- a/2026/CVE-2026-1357.md
+++ b/2026/CVE-2026-1357.md
@@ -23,3 +23,6 @@ No PoCs from references.
 - https://github.com/masterwok/PoC-CVE-2026-1357
 - https://github.com/masterwok/PoC-CVE-2026-21858
 - https://github.com/sahmsec/CVE-2026-1357
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1357.yaml
diff --git a/2026/CVE-2026-1368.md b/2026/CVE-2026-1368.md
index c05e3faf99e..f0f4bf26c81 100644
--- a/2026/CVE-2026-1368.md
+++ b/2026/CVE-2026-1368.md
@@ -14,3 +14,6 @@ The Video Conferencing with Zoom WordPress plugin before 4.6.6 contains an AJAX
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1368.yaml
diff --git a/2026/CVE-2026-14483.md b/2026/CVE-2026-14483.md
index ab3b8dc8a30..5b79f23a859 100644
--- a/2026/CVE-2026-14483.md
+++ b/2026/CVE-2026-14483.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/MadExploits/CVE-2026-14483
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-14483.yaml
diff --git a/2026/CVE-2026-14894.md b/2026/CVE-2026-14894.md
index 1fef49b989c..87dae3e330a 100644
--- a/2026/CVE-2026-14894.md
+++ b/2026/CVE-2026-14894.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/1beelze/CVE-2026-14894
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-14894.yaml
diff --git a/2026/CVE-2026-1492.md b/2026/CVE-2026-1492.md
index 1d13225766a..59907481f5e 100644
--- a/2026/CVE-2026-1492.md
+++ b/2026/CVE-2026-1492.md
@@ -16,3 +16,6 @@ No PoCs from references.
 - https://github.com/the8frust/CVE-2026-1492
 - https://github.com/medlemark-dz/CVE-2026-1492-POC
 - https://github.com/Nxploited/CVE-2026-1492
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1492.yaml
diff --git a/2026/CVE-2026-15409.md b/2026/CVE-2026-15409.md
index ef9c6f66cd4..17411b03297 100644
--- a/2026/CVE-2026-15409.md
+++ b/2026/CVE-2026-15409.md
@@ -19,3 +19,6 @@ No PoCs from references.
 - https://github.com/0xBlackash/CVE-2026-15409
 - https://github.com/HORKimhab/CVE-2026-15409
 - https://github.com/Ch4120N/CVE-2026-15409
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-15409.yaml
diff --git a/2026/CVE-2026-15733.md b/2026/CVE-2026-15733.md
index 78d0a2bb249..5e7d83dc0d7 100644
--- a/2026/CVE-2026-15733.md
+++ b/2026/CVE-2026-15733.md
@@ -14,3 +14,6 @@ A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 a
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-15733.yaml
diff --git a/2026/CVE-2026-15826.md b/2026/CVE-2026-15826.md
index 5beea661696..02e3ebf34b5 100644
--- a/2026/CVE-2026-15826.md
+++ b/2026/CVE-2026-15826.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/HORKimhab/CVE-2026-15826-CVE-2026-15748
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-15826.yaml
diff --git a/2026/CVE-2026-16232.md b/2026/CVE-2026-16232.md
index 191da541ce0..593a80cdd54 100644
--- a/2026/CVE-2026-16232.md
+++ b/2026/CVE-2026-16232.md
@@ -20,3 +20,6 @@ No PoCs from references.
 #### Github
 - https://github.com/sfewer-r7/CVE-2026-16232
 - https://github.com/HackSpeak/CVE-2026-16232
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-16232.yaml
diff --git a/2026/CVE-2026-16268.md b/2026/CVE-2026-16268.md
index 47371e3d85d..9ef40170e56 100644
--- a/2026/CVE-2026-16268.md
+++ b/2026/CVE-2026-16268.md
@@ -14,3 +14,6 @@ The Newsletters WordPress plugin before 4.16 does not authenticate or validate a
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-16268.yaml
diff --git a/2026/CVE-2026-1731.md b/2026/CVE-2026-1731.md
index cea8616777a..aa1ea413a77 100644
--- a/2026/CVE-2026-1731.md
+++ b/2026/CVE-2026-1731.md
@@ -17,3 +17,6 @@ No PoCs from references.
 - https://github.com/win3zz/CVE-2026-1731
 - https://github.com/jakubie07/CVE-2026-1731
 - https://github.com/hexissam/CVE-2026-1731
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-1731.yaml
diff --git a/2026/CVE-2026-17532.md b/2026/CVE-2026-17532.md
index b65de1066e8..6155b307846 100644
--- a/2026/CVE-2026-17532.md
+++ b/2026/CVE-2026-17532.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/kalhoralireza/CVE-2026-17532
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-17532.yaml
diff --git a/2026/CVE-2026-18577.md b/2026/CVE-2026-18577.md
index 6711c7f1b72..4d9887fc443 100644
--- a/2026/CVE-2026-18577.md
+++ b/2026/CVE-2026-18577.md
@@ -15,3 +15,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/HORKimhab/CVE-2026-18577
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-18577.yaml
diff --git a/2026/CVE-2026-1890.md b/2026/CVE-2026-1890.md
index 8d7d6353bf1..eeb99754552 100644
--- a/2026/CVE-2026-1890.md
+++ b/2026/CVE-2026-1890.md
@@ -14,3 +14,6 @@ The LeadConnector WordPress plugin before 3.0.22 does not have authorization in
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1890.yaml
diff --git a/2026/CVE-2026-18963.md b/2026/CVE-2026-18963.md
index e3bfff4409c..b55a1e5874d 100644
--- a/2026/CVE-2026-18963.md
+++ b/2026/CVE-2026-18963.md
@@ -26,3 +26,6 @@ No PoCs from references.
 - https://github.com/BlackHatExploitation/Exploit-For-CVE-2026-18963
 - https://github.com/c0dejump/UnKeycloak
 - https://github.com/M4xSec/My-Exploits
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-18963.yaml
diff --git a/2026/CVE-2026-19478.md b/2026/CVE-2026-19478.md
index f96547d0345..640946f66ca 100644
--- a/2026/CVE-2026-19478.md
+++ b/2026/CVE-2026-19478.md
@@ -22,3 +22,6 @@ GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2
 - https://github.com/punitdarji/Gitlab-CVE-2026-19478
 - https://github.com/renzi25031469/CVE-2026-19478
 - https://github.com/n0xdaemon/cve-2026-19478
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-19478.yaml
diff --git a/2026/CVE-2026-19598.md b/2026/CVE-2026-19598.md
index 88fd4729570..19bec7da58e 100644
--- a/2026/CVE-2026-19598.md
+++ b/2026/CVE-2026-19598.md
@@ -24,3 +24,6 @@ No PoCs from references.
 - https://github.com/absholi7ly/PoC-Pods-Unauthenticated-Privilege-Escalation
 - https://github.com/HackfutSecRoot/multi_exploit_wp/blob/main/multi_exploit.py
 - https://github.com/HackfutSecRoot/multi_exploit_wp
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-19598.yaml
diff --git a/2026/CVE-2026-20079.md b/2026/CVE-2026-20079.md
index 8bba5a274cb..c3de4002c02 100644
--- a/2026/CVE-2026-20079.md
+++ b/2026/CVE-2026-20079.md
@@ -87,3 +87,6 @@ No PoCs from references.
 #### Github
 - https://github.com/0xBlackash/CVE-2026-20079
 - https://github.com/CyberAuth/CVE-2026-20079
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-20079.yaml
diff --git a/2026/CVE-2026-20182.md b/2026/CVE-2026-20182.md
index 694782a55c1..d2627ce5e83 100644
--- a/2026/CVE-2026-20182.md
+++ b/2026/CVE-2026-20182.md
@@ -155,3 +155,6 @@ No PoCs from references.
 - https://github.com/Nxploited/CVE-2026-20182
 - https://github.com/portbuster1337/CVE-2026-20182
 - https://github.com/HORKimhab/CVE-2026-20182
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-20182.yaml
diff --git a/2026/CVE-2026-2025.md b/2026/CVE-2026-2025.md
index c6c3f4c28b4..b4ae4710e1b 100644
--- a/2026/CVE-2026-2025.md
+++ b/2026/CVE-2026-2025.md
@@ -14,3 +14,6 @@ The Mail Mint  WordPress plugin before 1.19.5 does not have authorization in one
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2025.yaml
diff --git a/2026/CVE-2026-20253.md b/2026/CVE-2026-20253.md
index dd977209b42..db947116fb2 100644
--- a/2026/CVE-2026-20253.md
+++ b/2026/CVE-2026-20253.md
@@ -21,3 +21,6 @@ No PoCs from references.
 - https://github.com/fevar54/CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE-
 - https://github.com/Het-Kalariya/CVE-2026-20253
 - https://github.com/shunfeng8421/exploit-library
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-20253.yaml
diff --git a/2026/CVE-2026-20896.md b/2026/CVE-2026-20896.md
index 78fd109df4b..1ce78b9180e 100644
--- a/2026/CVE-2026-20896.md
+++ b/2026/CVE-2026-20896.md
@@ -18,3 +18,6 @@ No PoCs from references.
 - https://github.com/XaocZenon/CVE-2026-20896
 - https://github.com/EQSTLab/CVE-2026-20896
 - https://github.com/judgedbykira/CVE-2026-20896-Gitea-Authentication-Bypass
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-20896.yaml
diff --git a/2026/CVE-2026-21445.md b/2026/CVE-2026-21445.md
index d908f16351d..dc80d54ad6e 100644
--- a/2026/CVE-2026-21445.md
+++ b/2026/CVE-2026-21445.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/codeb0ssx/CVE-2026-21445-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21445.yaml
diff --git a/2026/CVE-2026-21643.md b/2026/CVE-2026-21643.md
index 36ded145393..5e96b8133de 100644
--- a/2026/CVE-2026-21643.md
+++ b/2026/CVE-2026-21643.md
@@ -16,3 +16,6 @@ No PoCs from references.
 #### Github
 - https://github.com/0xBlackash/CVE-2026-21643
 - https://github.com/alirezac0/CVE-2026-21643
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21643.yaml
diff --git a/2026/CVE-2026-21858.md b/2026/CVE-2026-21858.md
index 57b9d3e6f37..ebe716b81ba 100644
--- a/2026/CVE-2026-21858.md
+++ b/2026/CVE-2026-21858.md
@@ -28,3 +28,6 @@ No PoCs from references.
 - https://github.com/qianlijaingshan/n8n-cve-2026-21858
 - https://github.com/Giangdurian/CVE-2026-21858-and-CVE-2025-68613
 - https://github.com/xitexploiter96-dot/exploit-21858
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21858.yaml
diff --git a/2026/CVE-2026-21877.md b/2026/CVE-2026-21877.md
index 37adaacf356..15141d4c43e 100644
--- a/2026/CVE-2026-21877.md
+++ b/2026/CVE-2026-21877.md
@@ -16,3 +16,6 @@ No PoCs from references.
 #### Github
 - https://github.com/CVEs-Labs/CVE-2026-21877
 - https://github.com/monkeontheroof/cve-2026-21877-rce
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21877.yaml
diff --git a/2026/CVE-2026-22200.md b/2026/CVE-2026-22200.md
index be251c5efe8..78e27fdfb7c 100644
--- a/2026/CVE-2026-22200.md
+++ b/2026/CVE-2026-22200.md
@@ -16,3 +16,6 @@ Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7
 #### Github
 - https://github.com/horizon3ai/CVE-2026-22200
 - https://github.com/Clarissss/osTicketFileReadIntoRCE
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-22200.yaml
diff --git a/2026/CVE-2026-22557.md b/2026/CVE-2026-22557.md
index 4f87ab330b3..56119ec8f17 100644
--- a/2026/CVE-2026-22557.md
+++ b/2026/CVE-2026-22557.md
@@ -18,3 +18,6 @@ No PoCs from references.
 - https://github.com/0xBlackash/CVE-2026-22557
 - https://github.com/ThePotatoOfDoom/CVE-2026-22557-PoC
 - https://github.com/gagaltotal/CVE-2026-22557-Path-Traversal-Ubiquti-UniFi
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-22557.yaml
diff --git a/2026/CVE-2026-22683.md b/2026/CVE-2026-22683.md
index 2f3a0abce64..061248e0034 100644
--- a/2026/CVE-2026-22683.md
+++ b/2026/CVE-2026-22683.md
@@ -16,3 +16,6 @@ Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnera
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-22683.yaml
diff --git a/2026/CVE-2026-22812.md b/2026/CVE-2026-22812.md
index cef722f7565..a1ac98d99a3 100644
--- a/2026/CVE-2026-22812.md
+++ b/2026/CVE-2026-22812.md
@@ -22,3 +22,6 @@ No PoCs from references.
 - https://github.com/Udyz/CVE-2026-22812-Exp
 - https://github.com/0xBlackash/CVE-2026-22812
 - https://github.com/Hex-Neo/CVE-2026-22812-OpenCode-RCE-exp
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-22812.yaml
diff --git a/2026/CVE-2026-23491.md b/2026/CVE-2026-23491.md
index 6d2348406fb..f8ec4071505 100644
--- a/2026/CVE-2026-23491.md
+++ b/2026/CVE-2026-23491.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/lukasz-rybak/CVE-2026-23491
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23491.yaml
diff --git a/2026/CVE-2026-23550.md b/2026/CVE-2026-23550.md
index 89b7f907e66..258b1477eb2 100644
--- a/2026/CVE-2026-23550.md
+++ b/2026/CVE-2026-23550.md
@@ -19,3 +19,6 @@ No PoCs from references.
 - https://github.com/SangSenimanWartefak/CVE-2026-23550
 - https://github.com/1beelze/CVE-2026-23550
 - https://github.com/baktistr/cve-2026-23550-poc
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23550.yaml
diff --git a/2026/CVE-2026-23696.md b/2026/CVE-2026-23696.md
index 50ca592a15f..a204bf295e0 100644
--- a/2026/CVE-2026-23696.md
+++ b/2026/CVE-2026-23696.md
@@ -16,3 +16,6 @@ Windmill CE and EE versions 1.276.0 through 1.603.2 contain an SQL injection vul
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23696.yaml
diff --git a/2026/CVE-2026-23744.md b/2026/CVE-2026-23744.md
index ef849a03828..6ea3d13c74d 100644
--- a/2026/CVE-2026-23744.md
+++ b/2026/CVE-2026-23744.md
@@ -52,3 +52,6 @@ No PoCs from references.
 - https://github.com/itsC1SCO/mcpjam-to-root
 - https://github.com/pppxo/CVE-2025-49596-PoC
 - https://github.com/BabaCrow-byte/mcp-rce-poc
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23744.yaml
diff --git a/2026/CVE-2026-23760.md b/2026/CVE-2026-23760.md
index fa5cbe74fb5..200d11be338 100644
--- a/2026/CVE-2026-23760.md
+++ b/2026/CVE-2026-23760.md
@@ -15,3 +15,6 @@ SmarterTools SmarterMail versions prior to build 9511 contain an authentication
 
 #### Github
 - https://github.com/MaxMnMl/smartermail-CVE-2026-23760-poc
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23760.yaml
diff --git a/2026/CVE-2026-24061.md b/2026/CVE-2026-24061.md
index 1ce95d52364..eb4badb7917 100644
--- a/2026/CVE-2026-24061.md
+++ b/2026/CVE-2026-24061.md
@@ -65,3 +65,6 @@ No PoCs from references.
 - https://github.com/s-vx/CVE-2026-24061
 - https://github.com/iLokaas/CVE-2026-24061-payload
 - https://github.com/hackingyseguridad/root
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-24061.yaml
diff --git a/2026/CVE-2026-2413.md b/2026/CVE-2026-2413.md
index d4ddc64a48e..ea6ebeed3d3 100644
--- a/2026/CVE-2026-2413.md
+++ b/2026/CVE-2026-2413.md
@@ -15,3 +15,6 @@ No PoCs from references.
 #### Github
 - https://github.com/RandomRobbieBF/CVE-2026-2413
 - https://github.com/p3Nt3st3r-sTAr/CVE-2026-2413-POC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2413.yaml
diff --git a/2026/CVE-2026-24423.md b/2026/CVE-2026-24423.md
index bc0c649ff28..5e7284c5c81 100644
--- a/2026/CVE-2026-24423.md
+++ b/2026/CVE-2026-24423.md
@@ -15,3 +15,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/aavamin/CVE-2026-24423
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-24423.yaml
diff --git a/2026/CVE-2026-25512.md b/2026/CVE-2026-25512.md
index bd78d8be0ea..19aa622a9a6 100644
--- a/2026/CVE-2026-25512.md
+++ b/2026/CVE-2026-25512.md
@@ -17,3 +17,6 @@ No PoCs from references.
 #### Github
 - https://github.com/NumberOreo1/CVE-2026-25512
 - https://github.com/mbanyamer/CVE-2026-25512-PoC-Group-Office-Authenticated-RCE
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25512.yaml
diff --git a/2026/CVE-2026-25555.md b/2026/CVE-2026-25555.md
index f3ff035776d..c12438a5547 100644
--- a/2026/CVE-2026-25555.md
+++ b/2026/CVE-2026-25555.md
@@ -14,3 +14,6 @@ OpenBullet2 through version 0.3.2 contains an authentication bypass vulnerabilit
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25555.yaml
diff --git a/2026/CVE-2026-25895.md b/2026/CVE-2026-25895.md
index 0c3bfa39f6c..9bfef94d7db 100644
--- a/2026/CVE-2026-25895.md
+++ b/2026/CVE-2026-25895.md
@@ -15,3 +15,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/Hann1bl3L3ct3r/FUXAPWN
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25895.yaml
diff --git a/2026/CVE-2026-26341.md b/2026/CVE-2026-26341.md
index 953fe9826fb..afd0ef70ac8 100644
--- a/2026/CVE-2026-26341.md
+++ b/2026/CVE-2026-26341.md
@@ -23,3 +23,6 @@ Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and pr
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-26341.yaml
diff --git a/2026/CVE-2026-26980.md b/2026/CVE-2026-26980.md
index f02212955e9..817532f23c7 100644
--- a/2026/CVE-2026-26980.md
+++ b/2026/CVE-2026-26980.md
@@ -17,3 +17,6 @@ No PoCs from references.
 - https://github.com/EQSTLab/CVE-2026-26980
 - https://github.com/gagaltotal/CVE-2026-26980-Ghost-CMS-Api
 - https://github.com/n0bitaemon/CVE-2026-26980-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-26980.yaml
diff --git a/2026/CVE-2026-2699.md b/2026/CVE-2026-2699.md
index efbca1bc9f0..42903a3bbe5 100644
--- a/2026/CVE-2026-2699.md
+++ b/2026/CVE-2026-2699.md
@@ -16,3 +16,6 @@ No PoCs from references.
 #### Github
 - https://github.com/watchtowrlabs/watchTowr-vs-Progress-ShareFile-CVE-2026-2699
 - https://github.com/0xBlackash/CVE-2026-2699
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2699.yaml
diff --git a/2026/CVE-2026-27174.md b/2026/CVE-2026-27174.md
index 6f6ccfbdacb..2b017b5dc95 100644
--- a/2026/CVE-2026-27174.md
+++ b/2026/CVE-2026-27174.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/MaxMnMl/majordomo-CVE-2026-27174-poc
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27174.yaml
diff --git a/2026/CVE-2026-27483.md b/2026/CVE-2026-27483.md
index dae05520aab..9f2e2f69090 100644
--- a/2026/CVE-2026-27483.md
+++ b/2026/CVE-2026-27483.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/thewhiteh4t/cve-2026-27483
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27483.yaml
diff --git a/2026/CVE-2026-27542.md b/2026/CVE-2026-27542.md
index 1427a55b8d0..824ab3258cf 100644
--- a/2026/CVE-2026-27542.md
+++ b/2026/CVE-2026-27542.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/Nxploited/CVE-2026-27542-CVE-2026-27540-
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27542.yaml
diff --git a/2026/CVE-2026-27760.md b/2026/CVE-2026-27760.md
index b818e67ac4f..1e14b984ba1 100644
--- a/2026/CVE-2026-27760.md
+++ b/2026/CVE-2026-27760.md
@@ -14,3 +14,6 @@ OpenCATS prior to commit 3002a29 contains a PHP code injection vulnerability in
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27760.yaml
diff --git a/2026/CVE-2026-27771.md b/2026/CVE-2026-27771.md
index 6a23598dc4b..5c459ec5821 100644
--- a/2026/CVE-2026-27771.md
+++ b/2026/CVE-2026-27771.md
@@ -15,3 +15,6 @@ No PoCs from references.
 #### Github
 - https://github.com/portbuster1337/CVE-2026-27771
 - https://github.com/HORKimhab/CVE-2026-27771
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27771.yaml
diff --git a/2026/CVE-2026-27944.md b/2026/CVE-2026-27944.md
index 6add486e131..7cc97cee0e6 100644
--- a/2026/CVE-2026-27944.md
+++ b/2026/CVE-2026-27944.md
@@ -18,3 +18,6 @@ No PoCs from references.
 - https://github.com/NULL200OK/CVE-2026-27944
 - https://github.com/Goultarde/CVE-2026-27944-poc
 - https://github.com/jake-young-dev/CVE-2026-27944
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27944.yaml
diff --git a/2026/CVE-2026-29014.md b/2026/CVE-2026-29014.md
index ac9e553b818..71743f4f2fa 100644
--- a/2026/CVE-2026-29014.md
+++ b/2026/CVE-2026-29014.md
@@ -14,3 +14,6 @@ MetInfo CMS versions 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injec
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-29014.yaml
diff --git a/2026/CVE-2026-29059.md b/2026/CVE-2026-29059.md
index 26c5ee64d72..f216f80342d 100644
--- a/2026/CVE-2026-29059.md
+++ b/2026/CVE-2026-29059.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/Chocapikk/Windfall
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-29059.yaml
diff --git a/2026/CVE-2026-3055.md b/2026/CVE-2026-3055.md
index 5a457f4bede..05c7b105277 100644
--- a/2026/CVE-2026-3055.md
+++ b/2026/CVE-2026-3055.md
@@ -19,3 +19,6 @@ No PoCs from references.
 #### Github
 - https://github.com/fevar54/CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC
 - https://github.com/NetVanguard-cmd/CVE-2026-3055
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3055.yaml
diff --git a/2026/CVE-2026-30824.md b/2026/CVE-2026-30824.md
index e47e5f92f34..65ab19efdd1 100644
--- a/2026/CVE-2026-30824.md
+++ b/2026/CVE-2026-30824.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/dylvie/CVE-2026-30824-Flowise-NVIDIA-NIM-Authentication
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-30824.yaml
diff --git a/2026/CVE-2026-31431.md b/2026/CVE-2026-31431.md
index 73bea886b8a..765b76d062f 100644
--- a/2026/CVE-2026-31431.md
+++ b/2026/CVE-2026-31431.md
@@ -231,3 +231,6 @@ No PoCs from references.
 - https://github.com/Vehicle-Security/PoCLab
 - https://github.com/songzzzz/dirtyfrag
 - https://github.com/nek-3231/copyfail-poc
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-31431.yaml
diff --git a/2026/CVE-2026-31816.md b/2026/CVE-2026-31816.md
index 74f09bfbd23..fcd7dd0364a 100644
--- a/2026/CVE-2026-31816.md
+++ b/2026/CVE-2026-31816.md
@@ -15,3 +15,6 @@ No PoCs from references.
 #### Github
 - https://github.com/imjdl/CVE-2026-31816-rshell
 - https://github.com/K3ysTr0K3R/CVE-2026-31816
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31816.yaml
diff --git a/2026/CVE-2026-32255.md b/2026/CVE-2026-32255.md
index dc8b212951a..6bec224e304 100644
--- a/2026/CVE-2026-32255.md
+++ b/2026/CVE-2026-32255.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/kOaDT/poc-cve-2026-32255
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-32255.yaml
diff --git a/2026/CVE-2026-32475.md b/2026/CVE-2026-32475.md
index 52580e7d036..584e34a2083 100644
--- a/2026/CVE-2026-32475.md
+++ b/2026/CVE-2026-32475.md
@@ -18,3 +18,6 @@ No PoCs from references.
 - https://github.com/Boreas37/CVE-2026-32475-PoC
 - https://github.com/0xBlackash/CVE-2026-32475
 - https://github.com/sahmsec/CVE-2026-32475
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-32475.yaml
diff --git a/2026/CVE-2026-3296.md b/2026/CVE-2026-3296.md
index a4c730813bc..1bd37c5a68c 100644
--- a/2026/CVE-2026-3296.md
+++ b/2026/CVE-2026-3296.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/xxconi/CVE-2026-3296
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3296.yaml
diff --git a/2026/CVE-2026-3300.md b/2026/CVE-2026-3300.md
index b51fd5cd9a2..ab870f1b583 100644
--- a/2026/CVE-2026-3300.md
+++ b/2026/CVE-2026-3300.md
@@ -15,3 +15,6 @@ No PoCs from references.
 #### Github
 - https://github.com/HORKimhab/CVE-2026-3300
 - https://github.com/adamshaikhma/CVE-2026-3300
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3300.yaml
diff --git a/2026/CVE-2026-33017.md b/2026/CVE-2026-33017.md
index 536e9a0900e..dc6831638f3 100644
--- a/2026/CVE-2026-33017.md
+++ b/2026/CVE-2026-33017.md
@@ -39,3 +39,6 @@ No PoCs from references.
 - https://github.com/sonnelon/CVE-2026-33017-PoC
 - https://github.com/ahseven/CVE-2026-33017-PoC-Reverse-Shell
 - https://github.com/masterwok/PoC-CVE-2025-55182
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33017.yaml
diff --git a/2026/CVE-2026-33032.md b/2026/CVE-2026-33032.md
index 705f4cf8445..05417c2945f 100644
--- a/2026/CVE-2026-33032.md
+++ b/2026/CVE-2026-33032.md
@@ -15,3 +15,6 @@ No PoCs from references.
 #### Github
 - https://github.com/keraattin/CVE-2026-33032
 - https://github.com/Baba01hacker666/CVE-2026-33032
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33032.yaml
diff --git a/2026/CVE-2026-33057.md b/2026/CVE-2026-33057.md
index 62b84de5920..b28a4025c52 100644
--- a/2026/CVE-2026-33057.md
+++ b/2026/CVE-2026-33057.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/hackpatato/CVE-2026-33057---Mesop-Unauthenticated-RCE-PoC-and-yara-rules
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33057.yaml
diff --git a/2026/CVE-2026-3326.md b/2026/CVE-2026-3326.md
index 565708bec00..4dfdbb54975 100644
--- a/2026/CVE-2026-3326.md
+++ b/2026/CVE-2026-3326.md
@@ -14,3 +14,6 @@ The Xstore WordPress theme before 9.7.3 does not properly sanitise and escape a
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3326.yaml
diff --git a/2026/CVE-2026-33340.md b/2026/CVE-2026-33340.md
index 206a8bdc127..56c7a542e2c 100644
--- a/2026/CVE-2026-33340.md
+++ b/2026/CVE-2026-33340.md
@@ -15,3 +15,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/regaan/CVE-2026-33340
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33340.yaml
diff --git a/2026/CVE-2026-33439.md b/2026/CVE-2026-33439.md
index 4ba73879cb3..a86af3ce32e 100644
--- a/2026/CVE-2026-33439.md
+++ b/2026/CVE-2026-33439.md
@@ -16,3 +16,6 @@ No PoCs from references.
 - https://github.com/TheMalwareGuardian/CVE-2026-33439
 - https://github.com/Ibonok/CVE-2026-33439-PoC
 - https://github.com/shreyas-malhotra/CVE-2026-33439-OpenAM
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33439.yaml
diff --git a/2026/CVE-2026-33453.md b/2026/CVE-2026-33453.md
index db35b61892e..5a62ef708e5 100644
--- a/2026/CVE-2026-33453.md
+++ b/2026/CVE-2026-33453.md
@@ -31,3 +31,6 @@ No PoCs from references.
 #### Github
 - https://github.com/dinosn/CVE-2026-33453
 - https://github.com/oscerd/CVE-2026-33453
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-33453.yaml
diff --git a/2026/CVE-2026-33534.md b/2026/CVE-2026-33534.md
index b1c624b9440..4b58d7d7ac0 100644
--- a/2026/CVE-2026-33534.md
+++ b/2026/CVE-2026-33534.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/EntroVyx/CVE-2026-33534
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33534.yaml
diff --git a/2026/CVE-2026-3395.md b/2026/CVE-2026-3395.md
index 7225c8816b0..0e476432627 100644
--- a/2026/CVE-2026-3395.md
+++ b/2026/CVE-2026-3395.md
@@ -16,3 +16,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/mbanyamer/CVE-2026-3395-MaxSite-CMS-Unauthenticated-RCE
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3395.yaml
diff --git a/2026/CVE-2026-34036.md b/2026/CVE-2026-34036.md
index e968ec63e89..2e0278924a8 100644
--- a/2026/CVE-2026-34036.md
+++ b/2026/CVE-2026-34036.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/cnf409/CVE-2026-34036
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34036.yaml
diff --git a/2026/CVE-2026-34156.md b/2026/CVE-2026-34156.md
index f1f1b25aec6..006c7d6540f 100644
--- a/2026/CVE-2026-34156.md
+++ b/2026/CVE-2026-34156.md
@@ -15,3 +15,6 @@ No PoCs from references.
 #### Github
 - https://github.com/0xBlackash/CVE-2026-34156
 - https://github.com/Dhananjayasj/CVE-2026-34156-NocoBase-Sandbox-Escape-via-Workflow-Execution-Vulnerability-
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34156.yaml
diff --git a/2026/CVE-2026-34197.md b/2026/CVE-2026-34197.md
index 8d4096424b7..b303a133f10 100644
--- a/2026/CVE-2026-34197.md
+++ b/2026/CVE-2026-34197.md
@@ -42,3 +42,6 @@ No PoCs from references.
 - https://github.com/hnytgl/CVE-2026-34197
 - https://github.com/K3ysTr0K3R/CVE-2026-34197
 - https://github.com/pssec-io/CVE-2026-34197
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34197.yaml
diff --git a/2026/CVE-2026-34413.md b/2026/CVE-2026-34413.md
index 82f259d5508..87870b9a669 100644
--- a/2026/CVE-2026-34413.md
+++ b/2026/CVE-2026-34413.md
@@ -14,3 +14,6 @@ Xerte Online Toolkits versions 3.15 and earlier contain a missing authentication
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34413.yaml
diff --git a/2026/CVE-2026-34486.md b/2026/CVE-2026-34486.md
index a62067b21ce..70b6ae0bb8c 100644
--- a/2026/CVE-2026-34486.md
+++ b/2026/CVE-2026-34486.md
@@ -27,3 +27,6 @@ No PoCs from references.
 - https://github.com/anonmrc/CVE-2026-34486-e-Tomcat-Tribes
 - https://github.com/razureink/cve-2026-34486-tomcat_encrypt_bypass_reproduction
 - https://github.com/CypherHippie/CVE-2026-34486---unauthenticated-RCE-via-Java-deserialization
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34486.yaml
diff --git a/2026/CVE-2026-34908.md b/2026/CVE-2026-34908.md
index 3294ae4b09b..44ca06ecc59 100644
--- a/2026/CVE-2026-34908.md
+++ b/2026/CVE-2026-34908.md
@@ -45,3 +45,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/Boreas37/CVE-2026-34910-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34908.yaml
diff --git a/2026/CVE-2026-34910.md b/2026/CVE-2026-34910.md
index 8d6640b7629..7bde1f10bb3 100644
--- a/2026/CVE-2026-34910.md
+++ b/2026/CVE-2026-34910.md
@@ -46,3 +46,6 @@ No PoCs from references.
 #### Github
 - https://github.com/Boreas37/CVE-2026-34910-PoC
 - https://github.com/gagaltotal/CVE-2026-34910-unifi-poc
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34910.yaml
diff --git a/2026/CVE-2026-35029.md b/2026/CVE-2026-35029.md
index a607be2c1c8..797721fae87 100644
--- a/2026/CVE-2026-35029.md
+++ b/2026/CVE-2026-35029.md
@@ -15,3 +15,6 @@ No PoCs from references.
 #### Github
 - https://github.com/learner202649/CVE-2026-35030-PoC
 - https://github.com/learner202649/CVE-2026-35029-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-35029.yaml
diff --git a/2026/CVE-2026-35273.md b/2026/CVE-2026-35273.md
index b826819b487..0234deebc18 100644
--- a/2026/CVE-2026-35273.md
+++ b/2026/CVE-2026-35273.md
@@ -18,3 +18,6 @@ No PoCs from references.
 - https://github.com/0xBlackash/CVE-2026-35273
 - https://github.com/HORKimhab/CVE-2026-35273
 - https://github.com/12hrformat/CVE-2026-35273-POC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-35273.yaml
diff --git a/2026/CVE-2026-35616.md b/2026/CVE-2026-35616.md
index 4f7841e6fd0..54526276bdf 100644
--- a/2026/CVE-2026-35616.md
+++ b/2026/CVE-2026-35616.md
@@ -19,3 +19,6 @@ No PoCs from references.
 - https://github.com/Alaatk/CVE-2026-35616
 - https://github.com/wa6n3r/CVE-2026-35616
 - https://github.com/HORKimhab/CVE-2026-35616
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-35616.yaml
diff --git a/2026/CVE-2026-3576.md b/2026/CVE-2026-3576.md
index 462a4d23620..bfaf684df30 100644
--- a/2026/CVE-2026-3576.md
+++ b/2026/CVE-2026-3576.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/anirbala98/CVE-2026-3576
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3576.yaml
diff --git a/2026/CVE-2026-3844.md b/2026/CVE-2026-3844.md
index da6b4dda781..13ef991560e 100644
--- a/2026/CVE-2026-3844.md
+++ b/2026/CVE-2026-3844.md
@@ -20,3 +20,6 @@ No PoCs from references.
 - https://github.com/0xgh057r3c0n/CVE-2026-3844
 - https://github.com/Dhananjayasj/CVE-2026-3844-Breeze-Cache-WordPress-Plugin-Remote-Code-Execution
 - https://github.com/Alevtinka19/CVE-2026-3844
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3844.yaml
diff --git a/2026/CVE-2026-3891.md b/2026/CVE-2026-3891.md
index 90525ec2981..eacac17573f 100644
--- a/2026/CVE-2026-3891.md
+++ b/2026/CVE-2026-3891.md
@@ -20,3 +20,6 @@ No PoCs from references.
 - https://github.com/shinthink/CVE-2026-3891
 - https://github.com/VeronnX666/CVE-2026-3891
 - https://github.com/Ch4120N/CVE-2026-3891
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3891.yaml
diff --git a/2026/CVE-2026-39363.md b/2026/CVE-2026-39363.md
index 01534aaef5b..59c3f0f4c81 100644
--- a/2026/CVE-2026-39363.md
+++ b/2026/CVE-2026-39363.md
@@ -20,3 +20,6 @@ No PoCs from references.
 #### Github
 - https://github.com/f4s1on/CVE-2026-39363
 - https://github.com/sunynov/CVE-2026-39363
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-39363.yaml
diff --git a/2026/CVE-2026-39808.md b/2026/CVE-2026-39808.md
index 1d54b448069..83ec3f7d55b 100644
--- a/2026/CVE-2026-39808.md
+++ b/2026/CVE-2026-39808.md
@@ -29,3 +29,6 @@ No PoCs from references.
 - https://github.com/Lechansky/CVE-2026-39808
 - https://github.com/HORKimhab/CVE-2026-39808
 - https://github.com/error-inside/CVE-2026-39808
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-39808.yaml
diff --git a/2026/CVE-2026-39987.md b/2026/CVE-2026-39987.md
index e583ee317ee..7364597ee46 100644
--- a/2026/CVE-2026-39987.md
+++ b/2026/CVE-2026-39987.md
@@ -29,3 +29,6 @@ No PoCs from references.
 - https://github.com/dodeepsink/CVE-2026-39987.py
 - https://github.com/MADA0L/CVE-2026-39987-Poc
 - https://github.com/Wind010/CVE-2026-39987_PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-39987.yaml
diff --git a/2026/CVE-2026-4020.md b/2026/CVE-2026-4020.md
index 8fe008b6f4b..420986c2217 100644
--- a/2026/CVE-2026-4020.md
+++ b/2026/CVE-2026-4020.md
@@ -15,3 +15,6 @@ No PoCs from references.
 #### Github
 - https://github.com/HORKimhab/CVE-2026-4020
 - https://github.com/faizdotid/CVE-2026-4020
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4020.yaml
diff --git a/2026/CVE-2026-40217.md b/2026/CVE-2026-40217.md
index 4bc17c14175..dd852362e18 100644
--- a/2026/CVE-2026-40217.md
+++ b/2026/CVE-2026-40217.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/learner202649/CVE-2026-40217-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40217.yaml
diff --git a/2026/CVE-2026-4060.md b/2026/CVE-2026-4060.md
index 59f841fb457..f93c6ba8670 100644
--- a/2026/CVE-2026-4060.md
+++ b/2026/CVE-2026-4060.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/ydking0911/CVE-2026-4060-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4060.yaml
diff --git a/2026/CVE-2026-41042.md b/2026/CVE-2026-41042.md
index 3e2e60331df..dd7fd28be44 100644
--- a/2026/CVE-2026-41042.md
+++ b/2026/CVE-2026-41042.md
@@ -20,3 +20,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/Lulztigre/cve-2026-41042
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41042.yaml
diff --git a/2026/CVE-2026-4106.md b/2026/CVE-2026-4106.md
index 00e7ea747bb..09eec9cf7cb 100644
--- a/2026/CVE-2026-4106.md
+++ b/2026/CVE-2026-4106.md
@@ -14,3 +14,6 @@ The HT Mega Addons for Elementor  WordPress plugin before 3.0.7 contains an unau
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4106.yaml
diff --git a/2026/CVE-2026-41179.md b/2026/CVE-2026-41179.md
index 2717d0478db..21ccefdf7f1 100644
--- a/2026/CVE-2026-41179.md
+++ b/2026/CVE-2026-41179.md
@@ -16,3 +16,6 @@ No PoCs from references.
 #### Github
 - https://github.com/pssec-io/CVE-2026-41179
 - https://github.com/s-vx/CVE-2026-41179
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41179.yaml
diff --git a/2026/CVE-2026-41940.md b/2026/CVE-2026-41940.md
index 29fce4da901..7841a11650a 100644
--- a/2026/CVE-2026-41940.md
+++ b/2026/CVE-2026-41940.md
@@ -64,3 +64,6 @@ No PoCs from references.
 - https://github.com/lanicer/cve-2026-41940-PoC
 - https://github.com/t4xo/CVE-2026-41940
 - https://github.com/keithbennedict/CVE-2026-41940-Linux
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41940.yaml
diff --git a/2026/CVE-2026-42167.md b/2026/CVE-2026-42167.md
index 8311ccfc673..674cf6a89b9 100644
--- a/2026/CVE-2026-42167.md
+++ b/2026/CVE-2026-42167.md
@@ -18,3 +18,6 @@ mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary co
 - https://github.com/jimmexploit/CVE-2026-42167-PoC
 - https://github.com/Sl4cK0TH/CVE-2026-42167-PoC
 - https://github.com/SimoesCTT/CTT-ProFTPD-Resonance
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2026/CVE-2026-42167.yaml
diff --git a/2026/CVE-2026-42271.md b/2026/CVE-2026-42271.md
index 8beefc09835..54188ba73f0 100644
--- a/2026/CVE-2026-42271.md
+++ b/2026/CVE-2026-42271.md
@@ -17,3 +17,6 @@ No PoCs from references.
 #### Github
 - https://github.com/HORKimhab/CVE-2026-42271
 - https://github.com/learner202649/CVE-2026-42271-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42271.yaml
diff --git a/2026/CVE-2026-42281.md b/2026/CVE-2026-42281.md
index 8e1afce7b6d..2d6a4f223ea 100644
--- a/2026/CVE-2026-42281.md
+++ b/2026/CVE-2026-42281.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/Astaruf/CVE-2026-42281
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42281.yaml
diff --git a/2026/CVE-2026-42569.md b/2026/CVE-2026-42569.md
index 6ef42ec020d..8357f70dc3b 100644
--- a/2026/CVE-2026-42569.md
+++ b/2026/CVE-2026-42569.md
@@ -16,3 +16,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/0xBlackash/CVE-2026-42569
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42569.yaml
diff --git a/2026/CVE-2026-4257.md b/2026/CVE-2026-4257.md
index c686693cae8..278d96150b9 100644
--- a/2026/CVE-2026-4257.md
+++ b/2026/CVE-2026-4257.md
@@ -16,3 +16,6 @@ No PoCs from references.
 - https://github.com/bootstrapbool/cve-2026-4257
 - https://github.com/shootcannon/CVE-2026-4257
 - https://github.com/dann3xplo1t/CVE-2026-4257
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4257.yaml
diff --git a/2026/CVE-2026-42796.md b/2026/CVE-2026-42796.md
index 649431d19f5..48095fbd979 100644
--- a/2026/CVE-2026-42796.md
+++ b/2026/CVE-2026-42796.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/ameerhamza-malik/CVE-2026-42796
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42796.yaml
diff --git a/2026/CVE-2026-44262.md b/2026/CVE-2026-44262.md
index 9114b7dbf3e..372148cfa53 100644
--- a/2026/CVE-2026-44262.md
+++ b/2026/CVE-2026-44262.md
@@ -15,3 +15,6 @@ No PoCs from references.
 #### Github
 - https://github.com/joshuavanderpoll/CVE-2026-44262
 - https://github.com/akash-osmsec/CVE-2026-44262-
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-44262.yaml
diff --git a/2026/CVE-2026-44338.md b/2026/CVE-2026-44338.md
index 9fc52fd1108..3647a469dac 100644
--- a/2026/CVE-2026-44338.md
+++ b/2026/CVE-2026-44338.md
@@ -16,3 +16,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/HORKimhab/CVE-2026-44338
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-44338.yaml
diff --git a/2026/CVE-2026-44578.md b/2026/CVE-2026-44578.md
index 098f3d22f24..dc5fb591e63 100644
--- a/2026/CVE-2026-44578.md
+++ b/2026/CVE-2026-44578.md
@@ -18,3 +18,6 @@ No PoCs from references.
 - https://github.com/0xBlackash/CVE-2026-44578
 - https://github.com/tocong282/CVE-2026-44578-PoC
 - https://github.com/lxxexxbxx/CVE-2026-44578
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-44578.yaml
diff --git a/2026/CVE-2026-4480.md b/2026/CVE-2026-4480.md
index 46d901e219a..e2237c078b5 100644
--- a/2026/CVE-2026-4480.md
+++ b/2026/CVE-2026-4480.md
@@ -36,3 +36,6 @@ No PoCs from references.
 - https://github.com/Vusal777/CVE-2026-4480-exploit-poc
 - https://github.com/ClearLotus-git/CVE-2026-4480-PoC
 - https://github.com/SafeBreach-Labs/ForgottenButNotGone
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-4480.yaml
diff --git a/2026/CVE-2026-44825.md b/2026/CVE-2026-44825.md
index d1457723c9d..ce1b586b9b0 100644
--- a/2026/CVE-2026-44825.md
+++ b/2026/CVE-2026-44825.md
@@ -23,3 +23,6 @@ No PoCs from references.
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-44825.yaml
diff --git a/2026/CVE-2026-45332.md b/2026/CVE-2026-45332.md
index 11107552906..add297ee889 100644
--- a/2026/CVE-2026-45332.md
+++ b/2026/CVE-2026-45332.md
@@ -15,3 +15,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/lorenzocamilli/CVE-2026-45332-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-45332.yaml
diff --git a/2026/CVE-2026-4631.md b/2026/CVE-2026-4631.md
index 55554b7e080..de1957d1628 100644
--- a/2026/CVE-2026-4631.md
+++ b/2026/CVE-2026-4631.md
@@ -19,3 +19,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/cyberheartmi9/CVE-2026-4631-cockpit-RCE
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4631.yaml
diff --git a/2026/CVE-2026-46339.md b/2026/CVE-2026-46339.md
index 9c59e2fe00c..72f38c70f3e 100644
--- a/2026/CVE-2026-46339.md
+++ b/2026/CVE-2026-46339.md
@@ -15,3 +15,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/SimoesCTT/CTT-Enhanced-CVE-2026-46339-Exploit-Engine
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-46339.yaml
diff --git a/2026/CVE-2026-46442.md b/2026/CVE-2026-46442.md
index 9a20da45114..6a6f62553d4 100644
--- a/2026/CVE-2026-46442.md
+++ b/2026/CVE-2026-46442.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/codeb0ssx/CVE-2026-46442-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-46442.yaml
diff --git a/2026/CVE-2026-47668.md b/2026/CVE-2026-47668.md
index 5eadcb350f9..d2e626a7fe0 100644
--- a/2026/CVE-2026-47668.md
+++ b/2026/CVE-2026-47668.md
@@ -17,3 +17,6 @@ No PoCs from references.
 #### Github
 - https://github.com/Nxploited/CVE-2026-47668
 - https://github.com/s-vx/CVE-2026-47668
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-47668.yaml
diff --git a/2026/CVE-2026-47670.md b/2026/CVE-2026-47670.md
index f778aca6630..37ce5a41577 100644
--- a/2026/CVE-2026-47670.md
+++ b/2026/CVE-2026-47670.md
@@ -15,3 +15,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/error-inside/CVE-2026-47670
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-47670.yaml
diff --git a/2026/CVE-2026-48030.md b/2026/CVE-2026-48030.md
index 7bf232ff6e7..236cce4ca9c 100644
--- a/2026/CVE-2026-48030.md
+++ b/2026/CVE-2026-48030.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/muslimbek-0x/CVE-2026-48030
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48030.yaml
diff --git a/2026/CVE-2026-48282.md b/2026/CVE-2026-48282.md
index bd9a769af9b..e3654ea3989 100644
--- a/2026/CVE-2026-48282.md
+++ b/2026/CVE-2026-48282.md
@@ -16,3 +16,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/imbas007/CVE-2026-48282
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48282.yaml
diff --git a/2026/CVE-2026-48611.md b/2026/CVE-2026-48611.md
index a098e6c062a..535652314b5 100644
--- a/2026/CVE-2026-48611.md
+++ b/2026/CVE-2026-48611.md
@@ -15,3 +15,6 @@ No PoCs from references.
 #### Github
 - https://github.com/wanmywan/CVE-2026-48611-phpBB
 - https://github.com/Ethicalgrey/phpBB-CVE-2026-48611
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48611.yaml
diff --git a/2026/CVE-2026-48710.md b/2026/CVE-2026-48710.md
index 2c1ed19f889..b00228caa35 100644
--- a/2026/CVE-2026-48710.md
+++ b/2026/CVE-2026-48710.md
@@ -16,3 +16,6 @@ No PoCs from references.
 - https://github.com/Bhanunamikaze/BadHost-CVE-2026-48710-Exploit
 - https://github.com/CuteeCat/CVE-2026-48710
 - https://github.com/sb-ox/repro-OXDEV-77637-uv-workspace
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48710.yaml
diff --git a/2026/CVE-2026-48907.md b/2026/CVE-2026-48907.md
index 9ed3daf140d..be508fb5529 100644
--- a/2026/CVE-2026-48907.md
+++ b/2026/CVE-2026-48907.md
@@ -28,3 +28,6 @@ No PoCs from references.
 - https://github.com/ksotaria1337/-CVE-2026-48907-
 - https://github.com/CerberusMrXi/JCEzploit-CVE-2026-48907
 - https://github.com/itsismarcos/COM_JCE_VANDA
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48907.yaml
diff --git a/2026/CVE-2026-48908.md b/2026/CVE-2026-48908.md
index 799178e378c..7240f34bac0 100644
--- a/2026/CVE-2026-48908.md
+++ b/2026/CVE-2026-48908.md
@@ -20,3 +20,6 @@ No PoCs from references.
 - https://github.com/gagaltotal/CVE-2026-48908-SP-Page-Builder-Joomla
 - https://github.com/Jenderal92/CVE-2026-48908
 - https://github.com/cazzysoci/cve-2026-48908
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-48908.yaml
diff --git a/2026/CVE-2026-48909.md b/2026/CVE-2026-48909.md
index 7258e69b02b..497802621f4 100644
--- a/2026/CVE-2026-48909.md
+++ b/2026/CVE-2026-48909.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/Is4yev/CVE-2026-48909
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-48909.yaml
diff --git a/2026/CVE-2026-48939.md b/2026/CVE-2026-48939.md
index 798f7ba2a2d..d3c1fdd3f2f 100644
--- a/2026/CVE-2026-48939.md
+++ b/2026/CVE-2026-48939.md
@@ -15,3 +15,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/Polosss/By-Poloss..-..CVE-2026-48939
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48939.yaml
diff --git a/2026/CVE-2026-49049.md b/2026/CVE-2026-49049.md
index e608d7f3595..11114a4cb23 100644
--- a/2026/CVE-2026-49049.md
+++ b/2026/CVE-2026-49049.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/Dr-D25/CVE-2026-49049
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-49049.yaml
diff --git a/2026/CVE-2026-49777.md b/2026/CVE-2026-49777.md
index 08a8094b1ed..96c2d3d8af1 100644
--- a/2026/CVE-2026-49777.md
+++ b/2026/CVE-2026-49777.md
@@ -17,3 +17,6 @@ No PoCs from references.
 #### Github
 - https://github.com/xxconi/CVE-2026-49777-CVE-2026-10735
 - https://github.com/izxci/CVE-2026-49777
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-49777.yaml
diff --git a/2026/CVE-2026-49952.md b/2026/CVE-2026-49952.md
index ce866718607..6cb8f38ac70 100644
--- a/2026/CVE-2026-49952.md
+++ b/2026/CVE-2026-49952.md
@@ -14,3 +14,6 @@ Discuz! X5.0 releases 20260320 through 20260501 contains an authentication bypas
 
 #### Github
 - https://github.com/passwa11/CVE-2026-49952
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-49952.yaml
diff --git a/2026/CVE-2026-50229.md b/2026/CVE-2026-50229.md
index e5b2444225a..48a03be787e 100644
--- a/2026/CVE-2026-50229.md
+++ b/2026/CVE-2026-50229.md
@@ -22,3 +22,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/zero-trace7/CVE-2026-50229
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-50229.yaml
diff --git a/2026/CVE-2026-5027.md b/2026/CVE-2026-5027.md
index 78fd4e76153..3b209cae72e 100644
--- a/2026/CVE-2026-5027.md
+++ b/2026/CVE-2026-5027.md
@@ -18,3 +18,6 @@ No PoCs from references.
 - https://github.com/min8282/CVE-2026-5027
 - https://github.com/HORKimhab/CVE-2026-5027
 - https://github.com/Layer-6/CVE-2026-5027-Langflow
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-5027.yaml
diff --git a/2026/CVE-2026-50751.md b/2026/CVE-2026-50751.md
index 6b5fb49319c..16441456754 100644
--- a/2026/CVE-2026-50751.md
+++ b/2026/CVE-2026-50751.md
@@ -22,3 +22,6 @@ No PoCs from references.
 - https://github.com/fevar54/CVE-2026-50751---Check-Point-IKEv1-Authentication-Bypass-Exploit
 - https://github.com/0xBlackash/CVE-2026-50751
 - https://github.com/e4zyy/Project-CVE-2026-50751
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-50751.yaml
diff --git a/2026/CVE-2026-52806.md b/2026/CVE-2026-52806.md
index 93ed65ba4c1..159384d7680 100644
--- a/2026/CVE-2026-52806.md
+++ b/2026/CVE-2026-52806.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/portbuster1337/CVE-2026-52806
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-52806.yaml
diff --git a/2026/CVE-2026-53519.md b/2026/CVE-2026-53519.md
index 24f03b28fad..13349d35e19 100644
--- a/2026/CVE-2026-53519.md
+++ b/2026/CVE-2026-53519.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/tar-xz/CVE-2026-53519-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53519.yaml
diff --git a/2026/CVE-2026-53576.md b/2026/CVE-2026-53576.md
index 579424a9d8b..058892e50a1 100644
--- a/2026/CVE-2026-53576.md
+++ b/2026/CVE-2026-53576.md
@@ -16,3 +16,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/TamatahYT/CVE-2026-53576
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53576.yaml
diff --git a/2026/CVE-2026-53753.md b/2026/CVE-2026-53753.md
index 69ac7867b8b..fece62d6bfc 100644
--- a/2026/CVE-2026-53753.md
+++ b/2026/CVE-2026-53753.md
@@ -15,3 +15,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/0xEnc0der/CVE-2026-53753
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53753.yaml
diff --git a/2026/CVE-2026-53787.md b/2026/CVE-2026-53787.md
index 37730bffa41..5c8cd7d804e 100644
--- a/2026/CVE-2026-53787.md
+++ b/2026/CVE-2026-53787.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/ChrisSEC2014/amasty-chekout-POC-rce
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53787.yaml
diff --git a/2026/CVE-2026-55040.md b/2026/CVE-2026-55040.md
index 2bcfa9bfe3b..9af9e64aa86 100644
--- a/2026/CVE-2026-55040.md
+++ b/2026/CVE-2026-55040.md
@@ -21,3 +21,6 @@ No PoCs from references.
 - https://github.com/hypnguyen1209/CVE-2026-63520
 - https://github.com/zenzue/CVE-2026-55040
 - https://github.com/maxprog-svg/CVE-2026-55040-Mass-Exploit
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-55040.yaml
diff --git a/2026/CVE-2026-5615.md b/2026/CVE-2026-5615.md
index b34c4150919..0f20a7119d6 100644
--- a/2026/CVE-2026-5615.md
+++ b/2026/CVE-2026-5615.md
@@ -20,3 +20,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/sahmsec/CVE-2026-5615
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-5615.yaml
diff --git a/2026/CVE-2026-56290.md b/2026/CVE-2026-56290.md
index 71ef1b0500e..4bc1881eb9e 100644
--- a/2026/CVE-2026-56290.md
+++ b/2026/CVE-2026-56290.md
@@ -16,3 +16,6 @@ No PoCs from references.
 #### Github
 - https://github.com/sagsooz/PageBuilderCK-CVE-2026-56290-Exploit
 - https://github.com/MRCUKIL/com_pagebuilderck
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56290.yaml
diff --git a/2026/CVE-2026-56291.md b/2026/CVE-2026-56291.md
index df375d5b3d0..aa47651b7fb 100644
--- a/2026/CVE-2026-56291.md
+++ b/2026/CVE-2026-56291.md
@@ -16,3 +16,6 @@ No PoCs from references.
 #### Github
 - https://github.com/shinthink/CVE-2026-56291
 - https://github.com/rimbadirgantara/CVE-2026-56291.yaml
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56291.yaml
diff --git a/2026/CVE-2026-5718.md b/2026/CVE-2026-5718.md
index e5f181c88a0..a340d1890c2 100644
--- a/2026/CVE-2026-5718.md
+++ b/2026/CVE-2026-5718.md
@@ -16,3 +16,6 @@ No PoCs from references.
 - https://github.com/kyukazamiqq/cve-2026-5718
 - https://github.com/xxconi/CVE-2026-5718
 - https://github.com/xxconi/CVE-2026-5718-PR-V-EXPLO-T
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-5718.yaml
diff --git a/2026/CVE-2026-57827.md b/2026/CVE-2026-57827.md
index 803141d5a4d..f85d17f850a 100644
--- a/2026/CVE-2026-57827.md
+++ b/2026/CVE-2026-57827.md
@@ -18,3 +18,6 @@ No PoCs from references.
 - https://github.com/Candisexterior171/CVE-2026-57827
 - https://github.com/jjkk123123/CVE-2026-57827
 - https://github.com/g0d150ne/CVE_2026_57827
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-57827.yaml
diff --git a/2026/CVE-2026-58138.md b/2026/CVE-2026-58138.md
index ca88698f038..80444c849e5 100644
--- a/2026/CVE-2026-58138.md
+++ b/2026/CVE-2026-58138.md
@@ -16,3 +16,6 @@ No PoCs from references.
 - https://github.com/seqra/cve-2026-58138
 - https://github.com/0xgh057r3c0n/CVE-2026-58138
 - https://github.com/Procjevt/CVE-2026-58138
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-58138.yaml
diff --git a/2026/CVE-2026-58455.md b/2026/CVE-2026-58455.md
index aee75b8674f..c1524d86785 100644
--- a/2026/CVE-2026-58455.md
+++ b/2026/CVE-2026-58455.md
@@ -15,3 +15,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/Boreas37/CVE-2026-58455-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-58455.yaml
diff --git a/2026/CVE-2026-60004.md b/2026/CVE-2026-60004.md
index 59fa18ee970..9bc92e06576 100644
--- a/2026/CVE-2026-60004.md
+++ b/2026/CVE-2026-60004.md
@@ -24,3 +24,6 @@ No PoCs from references.
 - https://github.com/shinthink/CVE-2026-60004
 - https://github.com/Sachinart/CVE-2026-60004-gitea-0day
 - https://github.com/InfoSec-DB/CVE-2026-60004-Gitea-RCE-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-60004.yaml
diff --git a/2026/CVE-2026-6118.md b/2026/CVE-2026-6118.md
index 90c4749412d..f990d7f398a 100644
--- a/2026/CVE-2026-6118.md
+++ b/2026/CVE-2026-6118.md
@@ -16,3 +16,6 @@ A vulnerability was determined in AstrBotDevs AstrBot up to 4.22.1. Impacted is
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6118.yaml
diff --git a/2026/CVE-2026-61511.md b/2026/CVE-2026-61511.md
index 55a77170589..50d74962fa1 100644
--- a/2026/CVE-2026-61511.md
+++ b/2026/CVE-2026-61511.md
@@ -17,3 +17,6 @@ vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vul
 #### Github
 - https://github.com/HORKimhab/CVE-2026-61511
 - https://github.com/shootcannon/CVE-2026-61511
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-61511.yaml
diff --git a/2026/CVE-2026-63030.md b/2026/CVE-2026-63030.md
index 6da5943a786..41c8a011aae 100644
--- a/2026/CVE-2026-63030.md
+++ b/2026/CVE-2026-63030.md
@@ -65,3 +65,6 @@ No PoCs from references.
 - https://github.com/GMJayy/wp-cve-poc
 - https://github.com/Ka01nq/WpScc
 - https://github.com/sahmsec/wp2shell
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-63030.yaml
diff --git a/2026/CVE-2026-63077.md b/2026/CVE-2026-63077.md
index 20eb5c3620f..491e3c4b62f 100644
--- a/2026/CVE-2026-63077.md
+++ b/2026/CVE-2026-63077.md
@@ -16,3 +16,6 @@ No PoCs from references.
 #### Github
 - https://github.com/sfewer-r7/CVE-2026-63077
 - https://github.com/BoredHackerBlog/teamcity-CVE-2026-63077-pcap
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-63077.yaml
diff --git a/2026/CVE-2026-6433.md b/2026/CVE-2026-6433.md
index 33a04c93b24..291029c08ff 100644
--- a/2026/CVE-2026-6433.md
+++ b/2026/CVE-2026-6433.md
@@ -15,3 +15,6 @@ The Custom css-js-php WordPress plugin through 2.0.7 does not properly sanitize
 #### Github
 - https://github.com/murrez/CVE-2026-6433
 - https://github.com/davinmaritza/wp-exploit
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6433.yaml
diff --git a/2026/CVE-2026-64638.md b/2026/CVE-2026-64638.md
index 794ec8d551d..04ca69275e1 100644
--- a/2026/CVE-2026-64638.md
+++ b/2026/CVE-2026-64638.md
@@ -42,3 +42,6 @@ No PoCs from references.
 - https://github.com/686f6c61/POC-WP-XSS2Shell-CVE-2026-64638
 - https://github.com/g0d150ne/XSS2Shell
 - https://github.com/SanchitMhase/XSS2SHELL-POC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-64638.yaml
diff --git a/2026/CVE-2026-64849.md b/2026/CVE-2026-64849.md
index b8de2c5cfdf..42888c592a3 100644
--- a/2026/CVE-2026-64849.md
+++ b/2026/CVE-2026-64849.md
@@ -18,3 +18,6 @@ No PoCs from references.
 - https://github.com/zavisco/CVE-2026-64849.yaml
 - https://github.com/codeb0ssx/CVE-2026-64849-PoC
 - https://github.com/mrzero-cool/cve-poc-search
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-64849.yaml
diff --git a/2026/CVE-2026-65694.md b/2026/CVE-2026-65694.md
index 8c621b6999c..0745166b7f8 100644
--- a/2026/CVE-2026-65694.md
+++ b/2026/CVE-2026-65694.md
@@ -14,3 +14,6 @@ Microweber CMS through 2.0.20 contains a path traversal vulnerability in the sta
 
 #### Github
 - https://github.com/abdugafforov-bobur/CVE-2026-65694-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-65694.yaml
diff --git a/2026/CVE-2026-65761.md b/2026/CVE-2026-65761.md
index 809d123307c..ea1b0fbc327 100644
--- a/2026/CVE-2026-65761.md
+++ b/2026/CVE-2026-65761.md
@@ -15,3 +15,6 @@ No PoCs from references.
 #### Github
 - https://github.com/ywh-jfellus/CVE-2026-65761
 - https://github.com/shinthink/CVE-2026-65761
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-65761.yaml
diff --git a/2026/CVE-2026-6875.md b/2026/CVE-2026-6875.md
index 29cfa00abbd..4c43d319245 100644
--- a/2026/CVE-2026-6875.md
+++ b/2026/CVE-2026-6875.md
@@ -27,3 +27,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/HORKimhab/CVE-2026-6875
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6875.yaml
diff --git a/2026/CVE-2026-69084.md b/2026/CVE-2026-69084.md
index 2fa93ecd6ff..0eb126aa548 100644
--- a/2026/CVE-2026-69084.md
+++ b/2026/CVE-2026-69084.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/Boreas37/CVE-2026-69084-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-69084.yaml
diff --git a/2026/CVE-2026-72898.md b/2026/CVE-2026-72898.md
index 365025a79ba..56c0d1bd298 100644
--- a/2026/CVE-2026-72898.md
+++ b/2026/CVE-2026-72898.md
@@ -25,3 +25,6 @@ No PoCs from references.
 - https://github.com/VuxNx/CVE-2026-72898
 - https://github.com/codeb0ssx/CVE-2026-72898-PoC
 - https://github.com/BlackHatExploitation/metabase-sql-poc
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-72898.yaml
diff --git a/2026/CVE-2026-73034.md b/2026/CVE-2026-73034.md
index 8fdb5f88cc3..929d3bfc4ca 100644
--- a/2026/CVE-2026-73034.md
+++ b/2026/CVE-2026-73034.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/Boreas37/CVE-2026-73034-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-73034.yaml
diff --git a/2026/CVE-2026-73570.md b/2026/CVE-2026-73570.md
index 1effe192dc5..92818e6e0b5 100644
--- a/2026/CVE-2026-73570.md
+++ b/2026/CVE-2026-73570.md
@@ -20,3 +20,6 @@ No PoCs from references.
 - https://github.com/BiuTrap/CVE-2026-73570
 - https://github.com/alsyundawy/eradicate-zimbra-malware
 - https://github.com/virologi-info/Zimbra-security
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2026/CVE-2026-73570.yaml
diff --git a/2026/CVE-2026-76904.md b/2026/CVE-2026-76904.md
index b9f188791d7..01f6c193029 100644
--- a/2026/CVE-2026-76904.md
+++ b/2026/CVE-2026-76904.md
@@ -17,3 +17,6 @@ No PoCs from references.
 #### Github
 - https://github.com/YonLiud/CVE-2026-76904
 - https://github.com/bickZero93/CVE-2026-76904
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-76904.yaml
diff --git a/2026/CVE-2026-77806.md b/2026/CVE-2026-77806.md
index 744b18c2914..9787a596f43 100644
--- a/2026/CVE-2026-77806.md
+++ b/2026/CVE-2026-77806.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/CuteeCat/CVE-2026-77806
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-77806.yaml
diff --git a/2026/CVE-2026-8037.md b/2026/CVE-2026-8037.md
index ef2e89ddee1..bf7f98dcfc2 100644
--- a/2026/CVE-2026-8037.md
+++ b/2026/CVE-2026-8037.md
@@ -20,3 +20,6 @@ No PoCs from references.
 #### Github
 - https://github.com/HORKimhab/CVE-2026-8037
 - https://github.com/Caster-chen/CVE-2026-8037-POC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8037.yaml
diff --git a/2026/CVE-2026-8054.md b/2026/CVE-2026-8054.md
index 7fae67d7303..ae8192426d2 100644
--- a/2026/CVE-2026-8054.md
+++ b/2026/CVE-2026-8054.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/Mr-xn/CVE-2026-8054
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8054.yaml
diff --git a/2026/CVE-2026-8181.md b/2026/CVE-2026-8181.md
index 9925f01b637..eaccb182321 100644
--- a/2026/CVE-2026-8181.md
+++ b/2026/CVE-2026-8181.md
@@ -20,3 +20,6 @@ No PoCs from references.
 - https://github.com/Jenderal92/CVE-2026-8181
 - https://github.com/Squamity/CVE-2026-8181-PoC
 - https://github.com/0xTerror/CVE-2026-8181
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8181.yaml
diff --git a/2026/CVE-2026-8237.md b/2026/CVE-2026-8237.md
index e11d6a47170..81999e74a5b 100644
--- a/2026/CVE-2026-8237.md
+++ b/2026/CVE-2026-8237.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/aj2108/CVE-2026-8237
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8237.yaml
diff --git a/2026/CVE-2026-8383.md b/2026/CVE-2026-8383.md
index a9244e060e4..a9eed20f7a2 100644
--- a/2026/CVE-2026-8383.md
+++ b/2026/CVE-2026-8383.md
@@ -14,3 +14,6 @@ The LearnPress  WordPress plugin before 4.3.7 does not gate the `edit` context o
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8383.yaml
diff --git a/2026/CVE-2026-8385.md b/2026/CVE-2026-8385.md
index 991fe158e55..a0dfbcf9f26 100644
--- a/2026/CVE-2026-8385.md
+++ b/2026/CVE-2026-8385.md
@@ -14,3 +14,6 @@ The WP Go Maps  WordPress plugin before 10.0.10 does not properly enforce the ma
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8385.yaml
diff --git a/2026/CVE-2026-8386.md b/2026/CVE-2026-8386.md
index fc46cd99e1b..4637197a494 100644
--- a/2026/CVE-2026-8386.md
+++ b/2026/CVE-2026-8386.md
@@ -14,3 +14,6 @@ The WP Go Maps  WordPress plugin before 10.0.10 does not perform any approval-st
 
 #### Github
 No PoCs found on GitHub currently.
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8386.yaml
diff --git a/2026/CVE-2026-8713.md b/2026/CVE-2026-8713.md
index bffc4aa0760..9cc4912d3b8 100644
--- a/2026/CVE-2026-8713.md
+++ b/2026/CVE-2026-8713.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/shinthink/CVE-2026-8713
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8713.yaml
diff --git a/2026/CVE-2026-8732.md b/2026/CVE-2026-8732.md
index 552cc88be1e..6b9484d4a62 100644
--- a/2026/CVE-2026-8732.md
+++ b/2026/CVE-2026-8732.md
@@ -16,3 +16,6 @@ No PoCs from references.
 - https://github.com/zycoder0day/CVE-2026-8732
 - https://github.com/HORKimhab/CVE-2026-8732
 - https://github.com/Diznev/CVE-2026-8732-EXPLOIT
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8732.yaml
diff --git a/2026/CVE-2026-9082.md b/2026/CVE-2026-9082.md
index 44bc7ad0991..a83302bbcb7 100644
--- a/2026/CVE-2026-9082.md
+++ b/2026/CVE-2026-9082.md
@@ -29,3 +29,6 @@ No PoCs from references.
 - https://github.com/11romain/CVE-2026-9082
 - https://github.com/ywh-jfellus/CVE-2026-9082
 - https://github.com/thinhap/CVE-2026-9082-PoC
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9082.yaml
diff --git a/2026/CVE-2026-9198.md b/2026/CVE-2026-9198.md
index d4e2c6dc398..d3cdaf76361 100644
--- a/2026/CVE-2026-9198.md
+++ b/2026/CVE-2026-9198.md
@@ -21,3 +21,6 @@ No PoCs from references.
 - https://github.com/K3ysTr0K3R/CVE-2026-9198
 - https://github.com/rmhowe425/PoC-CVE-2026-9198
 - https://github.com/joaovicdev/EXPLOIT-CVE-2026-9198
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9198.yaml
diff --git a/2026/CVE-2026-9290.md b/2026/CVE-2026-9290.md
index f65dae82e24..4aa51b4a54a 100644
--- a/2026/CVE-2026-9290.md
+++ b/2026/CVE-2026-9290.md
@@ -14,3 +14,6 @@ No PoCs from references.
 
 #### Github
 - https://github.com/shinthink/CVE-2026-9290
+
+#### Nuclei
+- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9290.yaml
diff --git a/docs/logic.js b/docs/logic.js
index 6532185592e..072b847d4e0 100644
--- a/docs/logic.js
+++ b/docs/logic.js
@@ -19,6 +19,7 @@ const state = {
 let dataset = [];
 let repoMeta = {};
 let kev = {};
+let ratings = {};
 let trending = [];
 let indexMeta = null;
 
@@ -288,6 +289,13 @@ const el = {
 };
 
 function pocRow(url) {
+  if (url.includes('/nuclei-templates/')) {
+    const file = url.split('/').pop();
+    return '<div class="poc-row"><span class="poc-name">' +
+      '<span class="poc-tag" title="Runnable nuclei detection template">NUCLEI</span>' +
+      `<a href="${escapeHTML(url)}" target="_blank" rel="noopener">${escapeHTML(file)}</a>` +
+      '</span><span class="poc-stars"></span><span class="poc-age"></span></div>';
+  }
   const parsed = repoFromUrl(url);
   const href = escapeHTML(url);
   // A gist or an advisory has no owner and no stars; the star and age columns
@@ -333,7 +341,9 @@ function rankedLinks(entry) {
   });
   scored.sort((a, b) =>
     (b.dedicated - a.dedicated) || (b.stars - a.stars) || (a.index - b.index));
-  entry._ranked = scored.map(item => item.url);
+  // A nuclei template leads: of everything linked here it is the one entry that
+  // runs as it stands, against a target, without reading somebody's code first.
+  entry._ranked = [...(entry.nuclei || []), ...scored.map(item => item.url)];
   return entry._ranked;
 }
 
@@ -350,6 +360,18 @@ function resultRow(entry) {
       `${all ? '↑ show fewer' : '+ ' + formatCount(links.length - POC_PREVIEW) + ' more'}</button>`
     : '';
 
+  // Nuclei rates what it covers, so a row can say how bad the flaw is and how
+  // likely it is to be exploited, not only that somebody wrote code for it.
+  const rated = ratings[id] || {};
+  const severityChip = rated.severity
+    ? `<span class="chip chip-sev is-${escapeHTML(rated.severity)}"${rated.cvss_vector ? ` title="${escapeHTML(rated.cvss_vector)}"` : ''}>` +
+      `${escapeHTML(rated.severity.toUpperCase())}${rated.cvss ? ' ' + rated.cvss : ''}</span>`
+    : '';
+  const epssChip = rated.epss != null
+    ? `<span class="chip chip-epss" title="EPSS: estimated chance of exploitation in the next 30 days, ${Math.round((rated.epss_pct || 0) * 100)}th percentile">` +
+      `EPSS ${(rated.epss * 100).toFixed(rated.epss >= 0.1 ? 0 : 1)}%</span>`
+    : '';
+
   const flagged = kev[id];
   const kevChip = flagged
     ? `<span class="chip chip-kev" title="Listed in CISA's Known Exploited Vulnerabilities catalogue on ${escapeHTML(flagged[0])}${flagged[1] ? ', used in ransomware campaigns' : ''}">` +
@@ -368,7 +390,7 @@ function resultRow(entry) {
     <a class="result-id" href="https://nvd.nist.gov/vuln/detail/${encodeURIComponent(id)}" target="_blank" rel="noopener">${escapeHTML(id)}</a>
     <div class="result-pocs">${formatCount(links.length)} linked PoC${links.length === 1 ? '' : 's'}</div>
     ${dateHtml}
-    <div class="chips">${kevChip}
+    <div class="chips">${kevChip}${severityChip}${epssChip}
       <a class="chip" href="https://www.cve.org/CVERecord?id=${encodeURIComponent(id)}" target="_blank" rel="noopener">MITRE ↗</a>
     </div>
   </div>
@@ -606,7 +628,7 @@ async function loadJSON(url, options) {
 
   // The repository metadata is optional: without it the PoC rows simply lose
   // their star and age columns, which is the documented fallback.
-  loadJSON('/kev.json').then(data => {
+  loadJSON('/kev.json', { cache: 'no-cache' }).then(data => {
     kev = data || {};
     paintHeroStats();
     // A search already on screen owns the view; only repaint the idle table.
@@ -614,14 +636,19 @@ async function loadJSON(url, options) {
     if (state.query && state.ready) renderResults(null);
   }).catch(err => console.warn(err.message));
 
-  loadJSON('/repo_meta.json').then(data => {
+  loadJSON('/nuclei.json', { cache: 'no-cache' }).then(data => {
+    ratings = data || {};
+    if (state.query && state.ready) renderResults(null);
+  }).catch(err => console.warn(err.message));
+
+  loadJSON('/repo_meta.json', { cache: 'no-cache' }).then(data => {
     repoMeta = data || {};
     for (const entry of dataset) entry._ranked = null;
     if (state.query && state.ready) renderResults(null);
   }).catch(err => console.warn(err.message));
 
   try {
-    dataset = prepareDataset(await loadJSON('/CVE_list.json'));
+    dataset = prepareDataset(await loadJSON('/CVE_list.json', { cache: 'no-cache' }));
     state.ready = true;
     render();
   } catch (err) {
diff --git a/docs/style.css b/docs/style.css
index fd2ccf6c281..66cb4278eb9 100644
--- a/docs/style.css
+++ b/docs/style.css
@@ -206,6 +206,12 @@ a.chip:hover { color: var(--fg); border-color: var(--fg-muted); }
   background: rgba(248, 81, 73, .1);
   border-color: rgba(248, 81, 73, .4);
 }
+.chip-sev { font-weight: 500; letter-spacing: .08em; }
+.chip-sev.is-critical { color: #ff7b72; border-color: rgba(255, 123, 114, .45); background: rgba(255, 123, 114, .1); }
+.chip-sev.is-high { color: #f0883e; border-color: rgba(240, 136, 62, .45); background: rgba(240, 136, 62, .1); }
+.chip-sev.is-medium { color: var(--attention); border-color: rgba(227, 179, 65, .4); background: rgba(227, 179, 65, .1); }
+.chip-sev.is-low { color: var(--fg-muted); }
+.chip-epss { color: var(--fg-subtle); font-variant-numeric: tabular-nums; }
 
 .result-body { padding: 16px; min-width: 0; }
 .result-desc {
@@ -250,6 +256,16 @@ a.chip:hover { color: var(--fg); border-color: var(--fg-muted); }
 .poc-name a { color: var(--fg); font-weight: 500; }
 .poc-name a:hover { color: var(--accent); }
 .poc-name a.plain { color: var(--fg-muted); font-weight: 400; }
+.poc-tag {
+  margin-right: 7px;
+  padding: 2px 5px;
+  border-radius: 3px;
+  font: 600 9px/1 var(--mono);
+  letter-spacing: .08em;
+  color: #a5d6ff;
+  background: rgba(56, 139, 253, .12);
+  border: 1px solid rgba(56, 139, 253, .4);
+}
 .poc-name a.plain:hover { color: var(--accent); }
 .poc-stars { text-align: right; font: 400 12px/1 var(--mono); color: var(--fg-muted); }
 .poc-stars.is-popular { color: var(--attention); }
diff --git a/nuclei.json b/nuclei.json
new file mode 100644
index 00000000000..c028ad1fcc6
--- /dev/null
+++ b/nuclei.json
@@ -0,0 +1,42870 @@
+{
+"CVE-2000-0114": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.47595,
+"epss_pct": 0.98758,
+"name": "Microsoft FrontPage Extensions - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2000/CVE-2000-0114.yaml"
+},
+"CVE-2000-0760": {
+"cvss": 6.4,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:N",
+"epss": 0.62496,
+"epss_pct": 0.99125,
+"name": "Jakarta Tomcat 3.1 and 3.0 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2000/CVE-2000-0760.yaml"
+},
+"CVE-2001-0537": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:C",
+"cwe": "CWE-287",
+"epss": 0.6845,
+"epss_pct": 0.99282,
+"name": "Cisco IOS HTTP Configuration - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2001/CVE-2001-0537.yaml"
+},
+"CVE-2001-1473": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-310",
+"epss": 0.06268,
+"epss_pct": 0.93068,
+"name": "Deprecated SSHv1 Protocol Detection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2001/CVE-2001-1473.yaml"
+},
+"CVE-2002-1131": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-80",
+"epss": 0.25562,
+"epss_pct": 0.97804,
+"name": "SquirrelMail 1.2.6/1.2.7 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2002/CVE-2002-1131.yaml"
+},
+"CVE-2004-0437": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P",
+"epss": 0.07672,
+"epss_pct": 0.94157,
+"name": "Titan FTP Server 3.01 - DoS via LIST Command Disconnection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2004/CVE-2004-0437.yaml"
+},
+"CVE-2004-0519": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"epss": 0.22528,
+"epss_pct": 0.97538,
+"name": "SquirrelMail 1.4.x - Folder Name Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2004/CVE-2004-0519.yaml"
+},
+"CVE-2004-0656": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P",
+"epss": 0.02349,
+"epss_pct": 0.82486,
+"name": "Pure-FTPd \u2264 1.0.18 - DoS via Connection Limit Exhaustion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2004/CVE-2004-0656.yaml"
+},
+"CVE-2004-1602": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-203",
+"epss": 0.30679,
+"epss_pct": 0.98112,
+"name": "ProFTPD 1.2.x - Username Enumeration via Timing Attack",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2004/CVE-2004-1602.yaml"
+},
+"CVE-2004-1641": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P",
+"epss": 0.0824,
+"epss_pct": 0.94488,
+"name": "Titan FTP \u2264 3.21 - Heap Overflow via Long Commands",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2004/CVE-2004-1641.yaml"
+},
+"CVE-2004-1965": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"epss": 0.09001,
+"epss_pct": 0.94893,
+"name": "Open Bulletin Board (OpenBB) v1.0.6 - Open Redirect/XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2004/CVE-2004-1965.yaml"
+},
+"CVE-2004-2687": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:C",
+"cwe": "CWE-16",
+"epss": 0.88195,
+"epss_pct": 0.99755,
+"name": "Distccd v1 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2004/CVE-2004-2687.yaml"
+},
+"CVE-2005-0850": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P",
+"cwe": "CWE-20",
+"epss": 0.0219,
+"epss_pct": 0.81164,
+"name": "FileZilla Server < 0.9.6 - DoS via MS-DOS Device Names",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2005/CVE-2005-0850.yaml"
+},
+"CVE-2005-0851": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P",
+"cwe": "CWE-835",
+"epss": 0.0219,
+"epss_pct": 0.81164,
+"name": "FileZilla Server < 0.9.6 - DoS via MODE Z Infinite Loop",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2005/CVE-2005-0851.yaml"
+},
+"CVE-2005-2428": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.73028,
+"epss_pct": 0.99414,
+"name": "Lotus Domino R5 and R6 WebMail - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2005/CVE-2005-2428.yaml"
+},
+"CVE-2005-3128": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-80",
+"epss": 0.03436,
+"epss_pct": 0.88117,
+"name": "SquirrelMail Address Add 1.4.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2005/CVE-2005-3128.yaml"
+},
+"CVE-2005-3344": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C",
+"epss": 0.07986,
+"epss_pct": 0.94342,
+"name": "Horde Groupware Unauthenticated Admin Access",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2005/CVE-2005-3344.yaml"
+},
+"CVE-2005-3634": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:N",
+"epss": 0.17757,
+"epss_pct": 0.96941,
+"name": "SAP Web Application Server 6.x/7.0 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2005/CVE-2005-3634.yaml"
+},
+"CVE-2005-4385": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"epss": 0.08836,
+"epss_pct": 0.94818,
+"name": "Cofax <=2.0RC3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2005/CVE-2005-4385.yaml"
+},
+"CVE-2006-1681": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"epss": 0.06643,
+"epss_pct": 0.93388,
+"name": "Cherokee HTTPD <=0.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2006/CVE-2006-1681.yaml"
+},
+"CVE-2006-2173": {
+"cvss": 6.4,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:P",
+"epss": 0.06499,
+"epss_pct": 0.93275,
+"name": "FileZilla FTP Server 2.2.22 - Buffer Overflow",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2006/CVE-2006-2173.yaml"
+},
+"CVE-2006-2842": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.47196,
+"epss_pct": 0.9875,
+"name": "Squirrelmail <=1.4.6 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2006/CVE-2006-2842.yaml"
+},
+"CVE-2006-3392": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.78286,
+"epss_pct": 0.99546,
+"name": "Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2006/CVE-2006-3392.yaml"
+},
+"CVE-2006-6565": {
+"cvss": 4.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:S/C:N/I:N/A:P",
+"cwe": "CWE-476",
+"epss": 0.71504,
+"epss_pct": 0.9937,
+"name": "FileZilla Server < 0.9.22 - DoS via Wildcard Commands",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2006/CVE-2006-6565.yaml"
+},
+"CVE-2007-0885": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"epss": 0.05472,
+"epss_pct": 0.92192,
+"name": "Jira Rainbow.Zen - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-0885.yaml"
+},
+"CVE-2007-2449": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.77376,
+"epss_pct": 0.99521,
+"name": "Apache Tomcat 4.x-7.x - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-2449.yaml"
+},
+"CVE-2007-3010": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C",
+"cwe": "CWE-20",
+"epss": 0.97407,
+"epss_pct": 0.99893,
+"name": "Alcatel-Lucent OmniPCX - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-3010.yaml"
+},
+"CVE-2007-4504": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.09491,
+"epss_pct": 0.9508,
+"name": "Joomla! RSfiles <=1.0.2 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-4504.yaml"
+},
+"CVE-2007-4556": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"epss": 0.25749,
+"epss_pct": 0.97816,
+"name": "OpenSymphony XWork/Apache Struts2 - Remote Code Execution",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-4556.yaml"
+},
+"CVE-2007-5728": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.14639,
+"epss_pct": 0.96405,
+"name": "phpPgAdmin <=4.1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-5728.yaml"
+},
+"CVE-2008-0702": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:C",
+"cwe": "CWE-119",
+"epss": 0.07707,
+"epss_pct": 0.94178,
+"name": "Titan FTP Server 6.03 and 6.0.5.549 - Heap Overflow via Long Commands",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2008/CVE-2008-0702.yaml"
+},
+"CVE-2008-1059": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-94",
+"epss": 0.48329,
+"epss_pct": 0.98775,
+"name": "WordPress Sniplets 1.1.2 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-1059.yaml"
+},
+"CVE-2008-1061": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.074,
+"epss_pct": 0.93986,
+"name": "WordPress Sniplets <=1.2.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-1061.yaml"
+},
+"CVE-2008-1547": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-601",
+"epss": 0.48137,
+"epss_pct": 0.9877,
+"name": "Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-1547.yaml"
+},
+"CVE-2008-2052": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01568,
+"epss_pct": 0.73587,
+"name": "Bitrix Site Manager 6.5 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-2052.yaml"
+},
+"CVE-2008-2398": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.06232,
+"epss_pct": 0.93034,
+"name": "AppServ Open Project <=2.5.10 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-2398.yaml"
+},
+"CVE-2008-2650": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.18809,
+"epss_pct": 0.97074,
+"name": "CMSimple 3.1 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-2650.yaml"
+},
+"CVE-2008-4668": {
+"cvss": 9.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.21476,
+"epss_pct": 0.97436,
+"name": "Joomla! Image Browser 0.1.5 rc2 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-4668.yaml"
+},
+"CVE-2008-4764": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.16505,
+"epss_pct": 0.9676,
+"name": "Joomla! <=2.0.0 RC2 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-4764.yaml"
+},
+"CVE-2008-5281": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C",
+"cwe": "CWE-119",
+"epss": 0.06401,
+"epss_pct": 0.93179,
+"name": "Titan FTP Server 6.05 DELE Command - Heap Overflow",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2008/CVE-2008-5281.yaml"
+},
+"CVE-2008-5587": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.12865,
+"epss_pct": 0.96016,
+"name": "phpPgAdmin <=4.2.1 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-5587.yaml"
+},
+"CVE-2008-6080": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.10637,
+"epss_pct": 0.95467,
+"name": "Joomla! ionFiles 4.4.2 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6080.yaml"
+},
+"CVE-2008-6172": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.12284,
+"epss_pct": 0.95891,
+"name": "Joomla! Component RWCards 3.0.11 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6172.yaml"
+},
+"CVE-2008-6222": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.11497,
+"epss_pct": 0.95706,
+"name": "Joomla! ProDesk 1.0/1.2 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6222.yaml"
+},
+"CVE-2008-6465": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.05114,
+"epss_pct": 0.91778,
+"name": "Parallels H-Sphere 3.0.0 P9/3.1 P1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6465.yaml"
+},
+"CVE-2008-6668": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.15346,
+"epss_pct": 0.96528,
+"name": "nweb2fax <=0.2.7 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6668.yaml"
+},
+"CVE-2008-6982": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.05735,
+"epss_pct": 0.92514,
+"name": "Devalcms 1.4a - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6982.yaml"
+},
+"CVE-2008-7269": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:P",
+"cwe": "CWE-20",
+"epss": 0.08391,
+"epss_pct": 0.94573,
+"name": "UC Gateway Investment SiteEngine v5.0 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-7269.yaml"
+},
+"CVE-2009-0347": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:P",
+"cwe": "CWE-59",
+"epss": 0.10932,
+"epss_pct": 0.95559,
+"name": "Autonomy Ultraseek - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-0347.yaml"
+},
+"CVE-2009-0545": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C",
+"cwe": "CWE-20",
+"epss": 0.90386,
+"epss_pct": 0.9979,
+"name": "ZeroShell <= 1.0beta11 Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-0545.yaml"
+},
+"CVE-2009-0884": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:P",
+"cwe": "CWE-120",
+"epss": 0.03421,
+"epss_pct": 0.88057,
+"name": "FileZilla Server < 0.9.31 - SSL/TLS Packet Overflow DoS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2009/CVE-2009-0884.yaml"
+},
+"CVE-2009-0932": {
+"cvss": 6.4,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:N",
+"cwe": "CWE-22",
+"epss": 0.45764,
+"epss_pct": 0.98711,
+"name": "Horde/Horde Groupware - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-0932.yaml"
+},
+"CVE-2009-1151": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-94",
+"epss": 0.96565,
+"epss_pct": 0.99877,
+"name": "PhpMyAdmin Scripts - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-1151.yaml"
+},
+"CVE-2009-1496": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.07183,
+"epss_pct": 0.93844,
+"name": "Joomla! Cmimarketplace 0.1 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-1496.yaml"
+},
+"CVE-2009-1558": {
+"cvss": 7.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.29821,
+"epss_pct": 0.98067,
+"name": "Cisco Linksys WVC54GCA 1.00R22/1.00R24 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-1558.yaml"
+},
+"CVE-2009-1872": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.16083,
+"epss_pct": 0.96684,
+"name": "Adobe Coldfusion <=8.0.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-1872.yaml"
+},
+"CVE-2009-2015": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.06507,
+"epss_pct": 0.9328,
+"name": "Joomla! MooFAQ 1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-2015.yaml"
+},
+"CVE-2009-2100": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.08229,
+"epss_pct": 0.94483,
+"name": "Joomla! JoomlaPraise Projectfork  2.0.10 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-2100.yaml"
+},
+"CVE-2009-3053": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.05925,
+"epss_pct": 0.92723,
+"name": "Joomla! Agora 3.0.0b - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-3053.yaml"
+},
+"CVE-2009-3318": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.06455,
+"epss_pct": 0.93238,
+"name": "Joomla! Roland Breedveld Album 1.14 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-3318.yaml"
+},
+"CVE-2009-4202": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.08109,
+"epss_pct": 0.94416,
+"name": "Joomla! Omilen Photo Gallery 0.5b - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-4202.yaml"
+},
+"CVE-2009-4223": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-94",
+"epss": 0.54584,
+"epss_pct": 0.98941,
+"name": "KR-Web <=1.1b2 - Remote File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-4223.yaml"
+},
+"CVE-2009-4679": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.07866,
+"epss_pct": 0.94272,
+"name": "Joomla! Portfolio Nexus - Remote File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-4679.yaml"
+},
+"CVE-2009-5020": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:P",
+"cwe": "CWE-20",
+"epss": 0.03488,
+"epss_pct": 0.88301,
+"name": "AWStats < 6.95 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-5020.yaml"
+},
+"CVE-2009-5114": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.13298,
+"epss_pct": 0.96113,
+"name": "WebGlimpse 2.18.7 - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-5114.yaml"
+},
+"CVE-2010-0157": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.12969,
+"epss_pct": 0.96036,
+"name": "Joomla! Component com_biblestudy - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0157.yaml"
+},
+"CVE-2010-0219": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C",
+"cwe": "CWE-255",
+"epss": 0.89871,
+"epss_pct": 0.99781,
+"name": "Apache Axis2 Default Login",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0219.yaml"
+},
+"CVE-2010-0467": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.43296,
+"epss_pct": 0.98631,
+"name": "Joomla! Component CCNewsLetter - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0467.yaml"
+},
+"CVE-2010-0696": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.28222,
+"epss_pct": 0.97975,
+"name": "Joomla! Component Jw_allVideos - Arbitrary File Retrieval",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0696.yaml"
+},
+"CVE-2010-0759": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.15242,
+"epss_pct": 0.96513,
+"name": "Joomla! Plugin Core Design Scriptegrator - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0759.yaml"
+},
+"CVE-2010-0942": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.0724,
+"epss_pct": 0.93879,
+"name": "Joomla! Component com_jvideodirect - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0942.yaml"
+},
+"CVE-2010-0943": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.16358,
+"epss_pct": 0.96733,
+"name": "Joomla! Component com_jashowcase - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0943.yaml"
+},
+"CVE-2010-0944": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.14041,
+"epss_pct": 0.96288,
+"name": "Joomla! Component com_jcollection - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0944.yaml"
+},
+"CVE-2010-0972": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.13257,
+"epss_pct": 0.96104,
+"name": "Joomla! Component com_gcalendar Suite 2.1.5 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0972.yaml"
+},
+"CVE-2010-0982": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.06238,
+"epss_pct": 0.93039,
+"name": "Joomla! Component com_cartweberp - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0982.yaml"
+},
+"CVE-2010-0985": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.13095,
+"epss_pct": 0.96072,
+"name": "Joomla! Component com_abbrev - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0985.yaml"
+},
+"CVE-2010-1056": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.11414,
+"epss_pct": 0.95686,
+"name": "Joomla! Component com_rokdownloads - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1056.yaml"
+},
+"CVE-2010-1081": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.14597,
+"epss_pct": 0.96396,
+"name": "Joomla! Component com_communitypolls 1.5.2 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1081.yaml"
+},
+"CVE-2010-1217": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.06429,
+"epss_pct": 0.93209,
+"name": "Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1217.yaml"
+},
+"CVE-2010-1219": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.08266,
+"epss_pct": 0.94506,
+"name": "Joomla! Component com_janews - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1219.yaml"
+},
+"CVE-2010-1302": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.08483,
+"epss_pct": 0.94629,
+"name": "Joomla! Component DW Graph - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1302.yaml"
+},
+"CVE-2010-1304": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.14041,
+"epss_pct": 0.96287,
+"name": "Joomla! Component User Status - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1304.yaml"
+},
+"CVE-2010-1305": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.20719,
+"epss_pct": 0.97355,
+"name": "Joomla! Component JInventory 1.23.02 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1305.yaml"
+},
+"CVE-2010-1306": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.15722,
+"epss_pct": 0.96616,
+"name": "Joomla! Component Picasa 2.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1306.yaml"
+},
+"CVE-2010-1307": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.10158,
+"epss_pct": 0.95315,
+"name": "Joomla! Component Magic Updater - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1307.yaml"
+},
+"CVE-2010-1308": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.13997,
+"epss_pct": 0.96282,
+"name": "Joomla! Component SVMap 1.1.1 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1308.yaml"
+},
+"CVE-2010-1312": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.13621,
+"epss_pct": 0.96196,
+"name": "Joomla! Component News Portal 1.5.x - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1312.yaml"
+},
+"CVE-2010-1313": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.08684,
+"epss_pct": 0.9474,
+"name": "Joomla! Component Saber Cart 1.0.0.12 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1313.yaml"
+},
+"CVE-2010-1314": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.15909,
+"epss_pct": 0.96652,
+"name": "Joomla! Component Highslide 1.5 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1314.yaml"
+},
+"CVE-2010-1315": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.08233,
+"epss_pct": 0.94485,
+"name": "Joomla! Component webERPcustomer - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1315.yaml"
+},
+"CVE-2010-1340": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.13621,
+"epss_pct": 0.96197,
+"name": "Joomla! Component com_jresearch - 'Controller' Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1340.yaml"
+},
+"CVE-2010-1345": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.16872,
+"epss_pct": 0.96823,
+"name": "Joomla! Component Cookex Agency CKForms - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1345.yaml"
+},
+"CVE-2010-1352": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.13598,
+"epss_pct": 0.96189,
+"name": "Joomla! Component Juke Box 1.7 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1352.yaml"
+},
+"CVE-2010-1353": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.19192,
+"epss_pct": 0.97129,
+"name": "Joomla! Component LoginBox - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1353.yaml"
+},
+"CVE-2010-1354": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.15909,
+"epss_pct": 0.96652,
+"name": "Joomla! Component VJDEO 1.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1354.yaml"
+},
+"CVE-2010-1429": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-264",
+"epss": 0.53728,
+"epss_pct": 0.98921,
+"name": "Red Hat JBoss Enterprise Application Platform - Sensitive Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1429.yaml"
+},
+"CVE-2010-1461": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.08233,
+"epss_pct": 0.94485,
+"name": "Joomla! Component Photo Battle 1.0.1 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1461.yaml"
+},
+"CVE-2010-1469": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.08163,
+"epss_pct": 0.94448,
+"name": "Joomla! Component JProject Manager 1.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1469.yaml"
+},
+"CVE-2010-1470": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.13351,
+"epss_pct": 0.9613,
+"name": "Joomla! Component Web TV 1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1470.yaml"
+},
+"CVE-2010-1471": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.16152,
+"epss_pct": 0.96696,
+"name": "Joomla! Component Address Book 1.5.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1471.yaml"
+},
+"CVE-2010-1472": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.13351,
+"epss_pct": 0.9613,
+"name": "Joomla! Component Horoscope 1.5.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1472.yaml"
+},
+"CVE-2010-1473": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.08163,
+"epss_pct": 0.94448,
+"name": "Joomla! Component Advertising 0.25 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1473.yaml"
+},
+"CVE-2010-1474": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.09471,
+"epss_pct": 0.95071,
+"name": "Joomla! Component Sweetykeeper 1.5 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1474.yaml"
+},
+"CVE-2010-1475": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.09471,
+"epss_pct": 0.95073,
+"name": "Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1475.yaml"
+},
+"CVE-2010-1476": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.0994,
+"epss_pct": 0.95248,
+"name": "Joomla! Component AlphaUserPoints 1.5.5 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1476.yaml"
+},
+"CVE-2010-1478": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.08163,
+"epss_pct": 0.94448,
+"name": "Joomla! Component Jfeedback 1.2 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1478.yaml"
+},
+"CVE-2010-1491": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.13598,
+"epss_pct": 0.96187,
+"name": "Joomla! Component MMS Blog 2.3.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1491.yaml"
+},
+"CVE-2010-1494": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.167,
+"epss_pct": 0.96799,
+"name": "Joomla! Component AWDwall 1.5.4 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1494.yaml"
+},
+"CVE-2010-1495": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.18938,
+"epss_pct": 0.97092,
+"name": "Joomla! Component Matamko 1.01 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1495.yaml"
+},
+"CVE-2010-1531": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.16915,
+"epss_pct": 0.9683,
+"name": "Joomla! Component redSHOP 1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1531.yaml"
+},
+"CVE-2010-1532": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.1633,
+"epss_pct": 0.96729,
+"name": "Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1532.yaml"
+},
+"CVE-2010-1533": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.15088,
+"epss_pct": 0.96482,
+"name": "Joomla! Component TweetLA 1.0.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1533.yaml"
+},
+"CVE-2010-1534": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.13621,
+"epss_pct": 0.96197,
+"name": "Joomla! Component Shoutbox Pro - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1534.yaml"
+},
+"CVE-2010-1535": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.15334,
+"epss_pct": 0.96525,
+"name": "Joomla! Component TRAVELbook 1.0.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1535.yaml"
+},
+"CVE-2010-1540": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.08233,
+"epss_pct": 0.94485,
+"name": "Joomla! Component com_blog - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1540.yaml"
+},
+"CVE-2010-1586": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-20",
+"epss": 0.10296,
+"epss_pct": 0.95357,
+"name": "HP System Management Homepage (SMH) v2.x.x.x - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1586.yaml"
+},
+"CVE-2010-1601": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.15974,
+"epss_pct": 0.96662,
+"name": "Joomla! Component JA Comment - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1601.yaml"
+},
+"CVE-2010-1602": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.15695,
+"epss_pct": 0.96608,
+"name": "Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1602.yaml"
+},
+"CVE-2010-1603": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.07402,
+"epss_pct": 0.93988,
+"name": "Joomla! Component ZiMBCore 0.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1603.yaml"
+},
+"CVE-2010-1607": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.08177,
+"epss_pct": 0.94457,
+"name": "Joomla! Component WMI 1.5.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1607.yaml"
+},
+"CVE-2010-1653": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.13373,
+"epss_pct": 0.96136,
+"name": "Joomla! Component Graphics 1.0.6 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1653.yaml"
+},
+"CVE-2010-1657": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.19192,
+"epss_pct": 0.97129,
+"name": "Joomla! Component SmartSite 1.0.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1657.yaml"
+},
+"CVE-2010-1658": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.16014,
+"epss_pct": 0.96672,
+"name": "Joomla! Component NoticeBoard 1.3 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1658.yaml"
+},
+"CVE-2010-1659": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.13985,
+"epss_pct": 0.96279,
+"name": "Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1659.yaml"
+},
+"CVE-2010-1714": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.18703,
+"epss_pct": 0.97062,
+"name": "Joomla! Component Arcade Games 1.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1714.yaml"
+},
+"CVE-2010-1715": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.08177,
+"epss_pct": 0.94457,
+"name": "Joomla! Component Online Exam 1.5.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1715.yaml"
+},
+"CVE-2010-1717": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.22285,
+"epss_pct": 0.97509,
+"name": "Joomla! Component iF surfALERT 1.2 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1717.yaml"
+},
+"CVE-2010-1718": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.09455,
+"epss_pct": 0.95065,
+"name": "Joomla! Component Archery Scores 1.0.6 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1718.yaml"
+},
+"CVE-2010-1719": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.09371,
+"epss_pct": 0.95034,
+"name": "Joomla! Component MT Fire Eagle 1.2 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1719.yaml"
+},
+"CVE-2010-1722": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.09471,
+"epss_pct": 0.95073,
+"name": "Joomla! Component Online Market 2.x - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1722.yaml"
+},
+"CVE-2010-1723": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.08408,
+"epss_pct": 0.94583,
+"name": "Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1723.yaml"
+},
+"CVE-2010-1858": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.13621,
+"epss_pct": 0.96197,
+"name": "Joomla! Component SMEStorage - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1858.yaml"
+},
+"CVE-2010-1870": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-917",
+"epss": 0.92015,
+"epss_pct": 0.99811,
+"name": "ListSERV Maestro <= 9.0-8 RCE",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1870.yaml"
+},
+"CVE-2010-1875": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.15722,
+"epss_pct": 0.96617,
+"name": "Joomla! Component Property - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1875.yaml"
+},
+"CVE-2010-1878": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.11429,
+"epss_pct": 0.95691,
+"name": "Joomla! Component OrgChart 1.0.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1878.yaml"
+},
+"CVE-2010-1952": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.12991,
+"epss_pct": 0.96042,
+"name": "Joomla! Component BeeHeard 1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1952.yaml"
+},
+"CVE-2010-1953": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.16152,
+"epss_pct": 0.96694,
+"name": "Joomla! Component iNetLanka Multiple Map 1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1953.yaml"
+},
+"CVE-2010-1954": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.16152,
+"epss_pct": 0.96694,
+"name": "Joomla! Component iNetLanka Multiple root 1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1954.yaml"
+},
+"CVE-2010-1955": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.17938,
+"epss_pct": 0.96963,
+"name": "Joomla! Component Deluxe Blog Factory 1.1.2 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1955.yaml"
+},
+"CVE-2010-1956": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.17003,
+"epss_pct": 0.96843,
+"name": "Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1956.yaml"
+},
+"CVE-2010-1957": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.14847,
+"epss_pct": 0.96445,
+"name": "Joomla! Component Love Factory 1.3.4 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1957.yaml"
+},
+"CVE-2010-1977": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.07402,
+"epss_pct": 0.93988,
+"name": "Joomla! Component J!WHMCS Integrator 1.5.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1977.yaml"
+},
+"CVE-2010-1979": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.1115,
+"epss_pct": 0.95623,
+"name": "Joomla! Component Affiliate Datafeeds 880 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1979.yaml"
+},
+"CVE-2010-1980": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.18835,
+"epss_pct": 0.97078,
+"name": "Joomla! Component Joomla! Flickr 1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1980.yaml"
+},
+"CVE-2010-1981": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.11864,
+"epss_pct": 0.95795,
+"name": "Joomla! Component Fabrik 2.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1981.yaml"
+},
+"CVE-2010-1982": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.08286,
+"epss_pct": 0.94516,
+"name": "Joomla! Component JA Voice 2.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1982.yaml"
+},
+"CVE-2010-1983": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.18816,
+"epss_pct": 0.97074,
+"name": "Joomla! Component redTWITTER 1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1983.yaml"
+},
+"CVE-2010-20103": {
+"name": "ProFTPd-1.3.3c - Backdoor Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2010/CVE-2010-20103.yaml"
+},
+"CVE-2010-2018": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.03258,
+"epss_pct": 0.87485,
+"name": "Lokomedia CMS - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2018.yaml"
+},
+"CVE-2010-2033": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.15795,
+"epss_pct": 0.96628,
+"name": "Joomla! Percha Categories Tree 0.6 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2033.yaml"
+},
+"CVE-2010-2034": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.11077,
+"epss_pct": 0.95605,
+"name": "Joomla! Component Percha Image Attach 1.1 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2034.yaml"
+},
+"CVE-2010-2035": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.15781,
+"epss_pct": 0.96627,
+"name": "Joomla! Component Percha Gallery 1.6 Beta - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2035.yaml"
+},
+"CVE-2010-2036": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.1321,
+"epss_pct": 0.96095,
+"name": "Joomla! Component Percha Fields Attach 1.0 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2036.yaml"
+},
+"CVE-2010-2037": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.11077,
+"epss_pct": 0.95603,
+"name": "Joomla! Component Percha Downloads Attach 1.1 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2037.yaml"
+},
+"CVE-2010-2045": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.08931,
+"epss_pct": 0.94862,
+"name": "Joomla! Component FDione Form Wizard 1.0.2 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2045.yaml"
+},
+"CVE-2010-2050": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.13074,
+"epss_pct": 0.96069,
+"name": "Joomla! Component MS Comment 0.8.0b - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2050.yaml"
+},
+"CVE-2010-2122": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.11663,
+"epss_pct": 0.95743,
+"name": "Joomla! Component simpledownload <=0.9.5 - Arbitrary File Retrieval",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2122.yaml"
+},
+"CVE-2010-2128": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.15821,
+"epss_pct": 0.96635,
+"name": "Joomla! Component JE Quotation Form 1.0b1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2128.yaml"
+},
+"CVE-2010-2259": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.18051,
+"epss_pct": 0.96979,
+"name": "Joomla! Component com_bfsurvey - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2259.yaml"
+},
+"CVE-2010-2307": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.08604,
+"epss_pct": 0.94693,
+"name": "Motorola SBV6120E SURFboard Digital Voice Modem SBV6X2X-1.0.0.5-SCM - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2307.yaml"
+},
+"CVE-2010-2507": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.09432,
+"epss_pct": 0.95056,
+"name": "Joomla! Component Picasa2Gallery 1.2.8 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2507.yaml"
+},
+"CVE-2010-2680": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.04848,
+"epss_pct": 0.9139,
+"name": "Joomla! Component jesectionfinder - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2680.yaml"
+},
+"CVE-2010-2682": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.14311,
+"epss_pct": 0.96342,
+"name": "Joomla! Component Realtyna Translator 1.0.15 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2682.yaml"
+},
+"CVE-2010-2857": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.04848,
+"epss_pct": 0.9139,
+"name": "Joomla! Component Music Manager - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2857.yaml"
+},
+"CVE-2010-2861": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.99721,
+"epss_pct": 0.99951,
+"name": "Adobe ColdFusion 8.0/8.0.1/9.0/9.0.1 LFI",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2861.yaml"
+},
+"CVE-2010-2918": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-94",
+"epss": 0.13704,
+"epss_pct": 0.96216,
+"name": "Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2918.yaml"
+},
+"CVE-2010-2920": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.05688,
+"epss_pct": 0.92457,
+"name": "Joomla! Component Foobla Suggestions 1.5.1.2 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2920.yaml"
+},
+"CVE-2010-3203": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.08523,
+"epss_pct": 0.9465,
+"name": "Joomla! Component PicSell 1.0 - Arbitrary File Retrieval",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-3203.yaml"
+},
+"CVE-2010-3426": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.1385,
+"epss_pct": 0.9625,
+"name": "Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-3426.yaml"
+},
+"CVE-2010-3867": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:2.0/AV:N/AC:H/Au:S/C:C/I:C/A:C",
+"cwe": "CWE-22",
+"epss": 0.07563,
+"epss_pct": 0.94084,
+"name": "ProFTPD < 1.3.3c - Directory Traversal via mod_site_misc",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2010/CVE-2010-3867.yaml"
+},
+"CVE-2010-4231": {
+"cvss": 7.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.1633,
+"epss_pct": 0.96728,
+"name": "Camtron CMNC-200 IP Camera - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4231.yaml"
+},
+"CVE-2010-4239": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.1343,
+"epss_pct": 0.96148,
+"name": "Tiki Wiki CMS Groupware 5.2 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4239.yaml"
+},
+"CVE-2010-4282": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.19647,
+"epss_pct": 0.97199,
+"name": "Pandora Fms < 3.1.1 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4282.yaml"
+},
+"CVE-2010-4617": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.08571,
+"epss_pct": 0.94676,
+"name": "Joomla! Component JotLoader 2.2.1 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4617.yaml"
+},
+"CVE-2010-4719": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.15786,
+"epss_pct": 0.96628,
+"name": "Joomla! Component JRadio - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4719.yaml"
+},
+"CVE-2010-4769": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.07593,
+"epss_pct": 0.94105,
+"name": "Joomla! Component Jimtawl 1.0.2 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4769.yaml"
+},
+"CVE-2010-4977": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-89",
+"epss": 0.15251,
+"epss_pct": 0.96515,
+"name": "Joomla! Component Canteen 1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4977.yaml"
+},
+"CVE-2010-5028": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-89",
+"epss": 0.09247,
+"epss_pct": 0.94988,
+"name": "Joomla! Component JE Job 1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-5028.yaml"
+},
+"CVE-2010-5278": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.18633,
+"epss_pct": 0.97053,
+"name": "MODx manager - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-5278.yaml"
+},
+"CVE-2010-5286": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C",
+"cwe": "CWE-22",
+"epss": 0.11382,
+"epss_pct": 0.95681,
+"name": "Joomla! Component Jstore - 'Controller' Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-5286.yaml"
+},
+"CVE-2011-0049": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.95388,
+"epss_pct": 0.99862,
+"name": "Majordomo2 - SMTP/HTTP Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-0049.yaml"
+},
+"CVE-2011-0518": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.15833,
+"epss_pct": 0.96635,
+"name": "LotusCMS 3.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-0518.yaml"
+},
+"CVE-2011-0762": {
+"cvss": 4.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:S/C:N/I:N/A:P",
+"cwe": "CWE-400",
+"epss": 0.73946,
+"epss_pct": 0.9944,
+"name": "vsftpd < 2.3.3 - DoS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2011/CVE-2011-0762.yaml"
+},
+"CVE-2011-1669": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.22157,
+"epss_pct": 0.97497,
+"name": "WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-1669.yaml"
+},
+"CVE-2011-2523": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.96184,
+"epss_pct": 0.99873,
+"name": "VSFTPD 2.3.4 - Backdoor Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2011/CVE-2011-2523.yaml"
+},
+"CVE-2011-2744": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.0896,
+"epss_pct": 0.94878,
+"name": "Chyrp 2.x - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-2744.yaml"
+},
+"CVE-2011-2780": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.12991,
+"epss_pct": 0.96043,
+"name": "Chyrp 2.x - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-2780.yaml"
+},
+"CVE-2011-3171": {
+"cvss": 3.6,
+"cvss_vector": "CVSS:2.0/AV:L/AC:L/Au:N/C:N/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.00585,
+"epss_pct": 0.45623,
+"name": "Pure-FTPd \u2264 1.0.22 - Directory Traversal",
+"severity": "low",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2011/CVE-2011-3171.yaml"
+},
+"CVE-2011-3315": {
+"cvss": 7.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.26393,
+"epss_pct": 0.97858,
+"name": "Cisco CUCM, UCCX, and Unified IP-IVR- Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-3315.yaml"
+},
+"CVE-2011-3600": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-611",
+"epss": 0.1591,
+"epss_pct": 0.96652,
+"name": "Apache OFBiz - XML External Entity Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-3600.yaml"
+},
+"CVE-2011-4336": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.07652,
+"epss_pct": 0.94144,
+"name": "Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4336.yaml"
+},
+"CVE-2011-4618": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.10083,
+"epss_pct": 0.95293,
+"name": "Advanced Text Widget < 2.0.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4618.yaml"
+},
+"CVE-2011-4624": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.07062,
+"epss_pct": 0.9374,
+"name": "GRAND FlAGallery 1.57 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4624.yaml"
+},
+"CVE-2011-4640": {
+"cvss": 4.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:S/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.07323,
+"epss_pct": 0.93937,
+"name": "WebTitan < 3.60 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4640.yaml"
+},
+"CVE-2011-4804": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.20981,
+"epss_pct": 0.97388,
+"name": "Joomla! Component com_kp - 'Controller' Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4804.yaml"
+},
+"CVE-2011-4926": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.10911,
+"epss_pct": 0.9555,
+"name": "Adminimize 1.7.22 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4926.yaml"
+},
+"CVE-2011-5106": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.10899,
+"epss_pct": 0.95547,
+"name": "WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5106.yaml"
+},
+"CVE-2011-5107": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.08772,
+"epss_pct": 0.94787,
+"name": "Alert Before Your Post <= 0.1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5107.yaml"
+},
+"CVE-2011-5179": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.08772,
+"epss_pct": 0.94787,
+"name": "Skysa App Bar 1.04 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5179.yaml"
+},
+"CVE-2011-5181": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.10428,
+"epss_pct": 0.95401,
+"name": "ClickDesk Live Support Live Chat 2.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5181.yaml"
+},
+"CVE-2011-5252": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N",
+"cwe": "CWE-20",
+"epss": 0.11927,
+"epss_pct": 0.95812,
+"name": "Orchard 'ReturnUrl' Parameter URI - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5252.yaml"
+},
+"CVE-2011-5265": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.09964,
+"epss_pct": 0.95255,
+"name": "Featurific For WordPress 1.6.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5265.yaml"
+},
+"CVE-2012-0392": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"epss": 0.97534,
+"epss_pct": 0.99896,
+"name": "Apache Struts2 S2-008 RCE",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0392.yaml"
+},
+"CVE-2012-0394": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-94",
+"epss": 0.729,
+"epss_pct": 0.9941,
+"name": "Apache Struts <2.3.1.1 - Remote Code Execution",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0394.yaml"
+},
+"CVE-2012-0896": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.25224,
+"epss_pct": 0.97779,
+"name": "Count Per Day <= 3.1 - download.php f Parameter Traversal Arbitrary File Access",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0896.yaml"
+},
+"CVE-2012-0901": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.07676,
+"epss_pct": 0.94159,
+"name": "YouSayToo auto-publishing 1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0901.yaml"
+},
+"CVE-2012-0981": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.11059,
+"epss_pct": 0.95598,
+"name": "phpShowtime 2.0 - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0981.yaml"
+},
+"CVE-2012-0991": {
+"cvss": 3.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:S/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.11261,
+"epss_pct": 0.95654,
+"name": "OpenEMR 4.1 - Local File Inclusion",
+"severity": "low",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0991.yaml"
+},
+"CVE-2012-0996": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.09794,
+"epss_pct": 0.95194,
+"name": "11in1 CMS 1.2.1 - Local File Inclusion (LFI)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0996.yaml"
+},
+"CVE-2012-10018": {
+"cvss": 8.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.01181,
+"epss_pct": 0.65517,
+"name": "WordPress Mapplic <= 6.1 / Mapplic Lite <= 1.0 - Authenticated Stored XSS via SVG File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-10018.yaml"
+},
+"CVE-2012-1226": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.251,
+"epss_pct": 0.97767,
+"name": "Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilities",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-1226.yaml"
+},
+"CVE-2012-1823": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-20",
+"epss": 0.99998,
+"epss_pct": 0.9999,
+"name": "PHP CGI v5.3.12/5.4.2 Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-1823.yaml"
+},
+"CVE-2012-1835": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.08946,
+"epss_pct": 0.94869,
+"name": "WordPress Plugin All-in-One Event Calendar 1.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-1835.yaml"
+},
+"CVE-2012-2122": {
+"cvss": 5.1,
+"cvss_vector": "CVSS:2.0/AV:N/AC:H/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-287",
+"epss": 0.965,
+"epss_pct": 0.99877,
+"name": "MySQL - Authentication Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2012/CVE-2012-2122.yaml"
+},
+"CVE-2012-2371": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.12848,
+"epss_pct": 0.96011,
+"name": "WP-FaceThumb 0.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-2371.yaml"
+},
+"CVE-2012-3153": {
+"cvss": 6.4,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:N",
+"epss": 0.9822,
+"epss_pct": 0.99911,
+"name": "Oracle Forms & Reports RCE (CVE-2012-3152 & CVE-2012-3153)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-3153.yaml"
+},
+"CVE-2012-4032": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N",
+"cwe": "CWE-20",
+"epss": 0.10311,
+"epss_pct": 0.95364,
+"name": "WebsitePanel before v1.2.2.1 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4032.yaml"
+},
+"CVE-2012-4242": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.0928,
+"epss_pct": 0.95001,
+"name": "WordPress Plugin MF Gig Calendar 0.9.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4242.yaml"
+},
+"CVE-2012-4253": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.08465,
+"epss_pct": 0.94621,
+"name": "MySQLDumper 1.24.4 - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4253.yaml"
+},
+"CVE-2012-4273": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.0578,
+"epss_pct": 0.92559,
+"name": "2 Click Socialmedia Buttons < 0.34 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4273.yaml"
+},
+"CVE-2012-4547": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.05796,
+"epss_pct": 0.92585,
+"name": "AWStats 6.95/7.0 - 'awredir.pl' Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4547.yaml"
+},
+"CVE-2012-4768": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.10456,
+"epss_pct": 0.95411,
+"name": "WordPress Plugin Download Monitor < 3.3.5.9 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4768.yaml"
+},
+"CVE-2012-4878": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.08761,
+"epss_pct": 0.94779,
+"name": "FlatnuX CMS - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4878.yaml"
+},
+"CVE-2012-4889": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.07718,
+"epss_pct": 0.94188,
+"name": "ManageEngine Firewall Analyzer 7.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4889.yaml"
+},
+"CVE-2012-4940": {
+"cvss": 6.4,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:N",
+"cwe": "CWE-22",
+"epss": 0.83632,
+"epss_pct": 0.99666,
+"name": "Axigen Mail Server Filename Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4940.yaml"
+},
+"CVE-2012-4982": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N",
+"cwe": "CWE-20",
+"epss": 0.08907,
+"epss_pct": 0.94857,
+"name": "Forescout CounterACT 6.3.4.1 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4982.yaml"
+},
+"CVE-2012-5321": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N",
+"cwe": "CWE-20",
+"epss": 0.1375,
+"epss_pct": 0.96233,
+"name": "TikiWiki CMS Groupware v8.3 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-5321.yaml"
+},
+"CVE-2012-5913": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.08693,
+"epss_pct": 0.94742,
+"name": "WordPress Integrator 1.32 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-5913.yaml"
+},
+"CVE-2012-6499": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N",
+"cwe": "CWE-20",
+"epss": 0.10557,
+"epss_pct": 0.95445,
+"name": "WordPress Plugin Age Verification v0.4 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-6499.yaml"
+},
+"CVE-2013-1965": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:C",
+"cwe": "CWE-94",
+"epss": 0.93527,
+"epss_pct": 0.99833,
+"name": "Apache Struts2 S2-012 RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-1965.yaml"
+},
+"CVE-2013-2248": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N",
+"cwe": "CWE-20",
+"epss": 0.94654,
+"epss_pct": 0.99849,
+"name": "Apache Struts - Multiple Open Redirection Vulnerabilities",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-2248.yaml"
+},
+"CVE-2013-2251": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:C",
+"cwe": "CWE-20",
+"epss": 0.99998,
+"epss_pct": 0.9999,
+"name": "Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-2251.yaml"
+},
+"CVE-2013-2287": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.09239,
+"epss_pct": 0.94984,
+"name": "WordPress Plugin Uploader 1.0.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-2287.yaml"
+},
+"CVE-2013-2621": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.10692,
+"epss_pct": 0.95484,
+"name": "Telaen => v1.3.1 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-2621.yaml"
+},
+"CVE-2013-3526": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.13939,
+"epss_pct": 0.96269,
+"name": "WordPress Plugin Traffic Analyzer - 'aoid' Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-3526.yaml"
+},
+"CVE-2013-3827": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"epss": 0.32441,
+"epss_pct": 0.98207,
+"name": "Javafaces LFI",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-3827.yaml"
+},
+"CVE-2013-4117": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.12974,
+"epss_pct": 0.96039,
+"name": "WordPress Plugin Category Grid View Gallery 2.3.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-4117.yaml"
+},
+"CVE-2013-4625": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.11102,
+"epss_pct": 0.95611,
+"name": "WordPress Plugin Duplicator < 0.4.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-4625.yaml"
+},
+"CVE-2013-4982": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.13117,
+"epss_pct": 0.96075,
+"name": "AVTECH DVR - Login Verification Code Bypass",
+"severity": "low",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-4982.yaml"
+},
+"CVE-2013-5528": {
+"cvss": 4.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:S/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.23309,
+"epss_pct": 0.9761,
+"name": "Cisco Unified Communications Manager 7/8/9 - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-5528.yaml"
+},
+"CVE-2013-5979": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.18125,
+"epss_pct": 0.96989,
+"name": "Xibo 1.2.2/1.4.1 - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-5979.yaml"
+},
+"CVE-2013-6281": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.0522,
+"epss_pct": 0.91922,
+"name": "WordPress Spreadsheet - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-6281.yaml"
+},
+"CVE-2013-7091": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.86311,
+"epss_pct": 0.99719,
+"name": "Zimbra Collaboration Server 7.2.2/8.0.2 Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-7091.yaml"
+},
+"CVE-2013-7240": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.19641,
+"epss_pct": 0.97197,
+"name": "WordPress Plugin Advanced Dewplayer 1.2 - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-7240.yaml"
+},
+"CVE-2013-7285": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.84362,
+"epss_pct": 0.9968,
+"name": "XStream <1.4.6/1.4.10 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-7285.yaml"
+},
+"CVE-2014-0160": {
+"epss": 0.99999,
+"epss_pct": 0.99997,
+"name": "OpenSSL Heartbleed Vulnerability",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2014/CVE-2014-0160.yaml"
+},
+"CVE-2014-100004": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02016,
+"epss_pct": 0.79525,
+"name": "Sitecore CMS - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-100004.yaml"
+},
+"CVE-2014-10037": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.18834,
+"epss_pct": 0.97077,
+"name": "DomPHP 0.83 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-10037.yaml"
+},
+"CVE-2014-1203": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.15647,
+"epss_pct": 0.96597,
+"name": "Eyou E-Mail <3.6 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-1203.yaml"
+},
+"CVE-2014-1841": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.04851,
+"epss_pct": 0.91394,
+"name": "Titan FTP Server < 10.40 Move Function - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2014/CVE-2014-1841.yaml"
+},
+"CVE-2014-1842": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.04787,
+"epss_pct": 0.91298,
+"name": "Titan FTP Server Search Function < 10.40 - User Enumeration",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2014/CVE-2014-1842.yaml"
+},
+"CVE-2014-1843": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.04667,
+"epss_pct": 0.91107,
+"name": "Titan FTP Server < 10.40 - User Properties Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2014/CVE-2014-1843.yaml"
+},
+"CVE-2014-2321": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C",
+"cwe": "CWE-264",
+"epss": 0.59259,
+"epss_pct": 0.99049,
+"name": "ZTE Cable Modem Web Shell",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2321.yaml"
+},
+"CVE-2014-2323": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.62752,
+"epss_pct": 0.99132,
+"name": "Lighttpd 1.4.34 SQL Injection and Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2323.yaml"
+},
+"CVE-2014-2383": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-200",
+"epss": 0.39231,
+"epss_pct": 0.98493,
+"name": "Dompdf < v0.6.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2383.yaml"
+},
+"CVE-2014-2908": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.20862,
+"epss_pct": 0.97374,
+"name": "Siemens SIMATIC S7-1200 CPU - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2908.yaml"
+},
+"CVE-2014-2962": {
+"cvss": 7.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.47095,
+"epss_pct": 0.98748,
+"name": "Belkin N150 Router 1.00.08/1.00.09 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2962.yaml"
+},
+"CVE-2014-3120": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-284",
+"epss": 0.88559,
+"epss_pct": 0.99762,
+"name": "ElasticSearch v1.1.1/1.2 RCE",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-3120.yaml"
+},
+"CVE-2014-3206": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.51014,
+"epss_pct": 0.98846,
+"name": "Seagate BlackArmor NAS - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-3206.yaml"
+},
+"CVE-2014-3704": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-89",
+"epss": 0.99974,
+"epss_pct": 0.99977,
+"name": "Drupal SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-3704.yaml"
+},
+"CVE-2014-3744": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.34012,
+"epss_pct": 0.98279,
+"name": "Node.js st module Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-3744.yaml"
+},
+"CVE-2014-4210": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"epss": 0.38152,
+"epss_pct": 0.9845,
+"name": "Oracle Weblogic - Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4210.yaml"
+},
+"CVE-2014-4513": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.04573,
+"epss_pct": 0.90952,
+"name": "ActiveHelper LiveHelp Server 3.1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4513.yaml"
+},
+"CVE-2014-4535": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03983,
+"epss_pct": 0.89761,
+"name": "Import Legacy Media <= 0.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4535.yaml"
+},
+"CVE-2014-4536": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03902,
+"epss_pct": 0.89525,
+"name": "Infusionsoft Gravity Forms Add-on < 1.5.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4536.yaml"
+},
+"CVE-2014-4539": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03983,
+"epss_pct": 0.89761,
+"name": "Movies <= 0.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4539.yaml"
+},
+"CVE-2014-4544": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03779,
+"epss_pct": 0.89179,
+"name": "Podcast Channels < 0.28 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4544.yaml"
+},
+"CVE-2014-4550": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03918,
+"epss_pct": 0.89568,
+"name": "Shortcode Ninja <= 1.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4550.yaml"
+},
+"CVE-2014-4558": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0421,
+"epss_pct": 0.9026,
+"name": "WooCommerce Swipe <= 2.7.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4558.yaml"
+},
+"CVE-2014-4561": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03826,
+"epss_pct": 0.89325,
+"name": "Ultimate Weather Plugin <= 1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4561.yaml"
+},
+"CVE-2014-4577": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.03749,
+"epss_pct": 0.89089,
+"name": "WP AmASIN \u2013 The Amazon Affiliate Shop - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4577.yaml"
+},
+"CVE-2014-4592": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04032,
+"epss_pct": 0.8987,
+"name": "WP Planet <= 0.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4592.yaml"
+},
+"CVE-2014-4940": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.1927,
+"epss_pct": 0.97141,
+"name": "WordPress Plugin Tera Charts - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4940.yaml"
+},
+"CVE-2014-4941": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.04306,
+"epss_pct": 0.90452,
+"name": "Cross RSS 1.7 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4941.yaml"
+},
+"CVE-2014-4942": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.04536,
+"epss_pct": 0.90877,
+"name": "WordPress EasyCart <2.0.6 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4942.yaml"
+},
+"CVE-2014-5111": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.21569,
+"epss_pct": 0.97446,
+"name": "Fonality trixbox - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-5111.yaml"
+},
+"CVE-2014-5181": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.04259,
+"epss_pct": 0.90362,
+"name": "Last.fm Rotation 1.0 - Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-5181.yaml"
+},
+"CVE-2014-5187": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.04718,
+"epss_pct": 0.91186,
+"name": "Tom M8te (tom-m8te) Plugin 1.5.3 - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-5187.yaml"
+},
+"CVE-2014-5258": {
+"cvss": 4.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:S/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.20326,
+"epss_pct": 0.97292,
+"name": "webEdition 6.3.8.0 - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-5258.yaml"
+},
+"CVE-2014-5368": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.18817,
+"epss_pct": 0.97075,
+"name": "WordPress Plugin WP Content Source Control - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-5368.yaml"
+},
+"CVE-2014-6271": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99999,
+"epss_pct": 0.99992,
+"name": "ShellShock - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-6271.yaml"
+},
+"CVE-2014-6287": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.99323,
+"epss_pct": 0.99936,
+"name": "HTTP File Server <2.3c - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-6287.yaml"
+},
+"CVE-2014-6308": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.2226,
+"epss_pct": 0.97507,
+"name": "Osclass Security Advisory 3.4.1 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-6308.yaml"
+},
+"CVE-2014-8676": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.40779,
+"epss_pct": 0.9855,
+"name": "Simple Online Planning Tool <1.3.2 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-8676.yaml"
+},
+"CVE-2014-8682": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-89",
+"epss": 0.33391,
+"epss_pct": 0.98253,
+"name": "Gogs (Go Git Service) - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-8682.yaml"
+},
+"CVE-2014-8739": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.91656,
+"epss_pct": 0.99806,
+"name": "WordPress Sexy Contact Form (<= 0.9.7) - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-8739.yaml"
+},
+"CVE-2014-8799": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.67631,
+"epss_pct": 0.99258,
+"name": "WordPress Plugin DukaPress 2.5.2 - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-8799.yaml"
+},
+"CVE-2014-9094": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.07309,
+"epss_pct": 0.93928,
+"name": "WordPress DZS-VideoGallery Plugin Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9094.yaml"
+},
+"CVE-2014-9119": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.15652,
+"epss_pct": 0.96599,
+"name": "WordPress DB Backup <=4.5 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9119.yaml"
+},
+"CVE-2014-9180": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-601",
+"epss": 0.04417,
+"epss_pct": 0.90658,
+"name": "Eleanor CMS - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9180.yaml"
+},
+"CVE-2014-9444": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.06701,
+"epss_pct": 0.93436,
+"name": "Frontend Uploader <= 0.9.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9444.yaml"
+},
+"CVE-2014-9606": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04121,
+"epss_pct": 0.90066,
+"name": "Netsweeper 4.0.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9606.yaml"
+},
+"CVE-2014-9607": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04749,
+"epss_pct": 0.91238,
+"name": "Netsweeper 4.0.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9607.yaml"
+},
+"CVE-2014-9608": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04663,
+"epss_pct": 0.91102,
+"name": "Netsweeper 4.0.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9608.yaml"
+},
+"CVE-2014-9609": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.12631,
+"epss_pct": 0.95957,
+"name": "Netsweeper 4.0.8 - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9609.yaml"
+},
+"CVE-2014-9614": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.68706,
+"epss_pct": 0.99288,
+"name": "Netsweeper 4.0.5 - Default Weak Account",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9614.yaml"
+},
+"CVE-2014-9615": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04121,
+"epss_pct": 0.90067,
+"name": "Netsweeper 4.0.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9615.yaml"
+},
+"CVE-2014-9617": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.08013,
+"epss_pct": 0.94353,
+"name": "Netsweeper 3.0.6 - Open Redirection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9617.yaml"
+},
+"CVE-2014-9618": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.72696,
+"epss_pct": 0.99404,
+"name": "Netsweeper - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9618.yaml"
+},
+"CVE-2014-9735": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-264",
+"epss": 0.75701,
+"epss_pct": 0.99483,
+"name": "WordPress RevSlider - Remote Code Execution via File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9735.yaml"
+},
+"CVE-2015-0554": {
+"cvss": 9.4,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:N/A:C",
+"cwe": "CWE-264",
+"epss": 0.38932,
+"epss_pct": 0.9848,
+"name": "ADB/Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-0554.yaml"
+},
+"CVE-2015-1000005": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.08598,
+"epss_pct": 0.94689,
+"name": "WordPress Candidate Application Form <= 1.3 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1000005.yaml"
+},
+"CVE-2015-1000010": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-284",
+"epss": 0.0685,
+"epss_pct": 0.93564,
+"name": "WordPress Simple Image Manipulator < 1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1000010.yaml"
+},
+"CVE-2015-1000012": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.09325,
+"epss_pct": 0.95015,
+"name": "WordPress MyPixs <=0.3 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1000012.yaml"
+},
+"CVE-2015-10141": {
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+"cwe": "CWE-78",
+"epss": 0.05072,
+"epss_pct": 0.91721,
+"name": "Xdebug <= 2.5.5 - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-10141.yaml"
+},
+"CVE-2015-1419": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:N",
+"epss": 0.06732,
+"epss_pct": 0.93469,
+"name": "vsftpd <= 3.0.2 - Access Restriction Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2015/CVE-2015-1419.yaml"
+},
+"CVE-2015-1427": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-284",
+"epss": 0.99906,
+"epss_pct": 0.99965,
+"name": "ElasticSearch - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1427.yaml"
+},
+"CVE-2015-1503": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.58302,
+"epss_pct": 0.99027,
+"name": "IceWarp Mail Server <11.1.1 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1503.yaml"
+},
+"CVE-2015-1579": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.22055,
+"epss_pct": 0.97491,
+"name": "WordPress Slider Revolution - Local File Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1579.yaml"
+},
+"CVE-2015-1635": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C",
+"cwe": "CWE-94",
+"epss": 0.99999,
+"epss_pct": 0.99998,
+"name": "Microsoft Windows 'HTTP.sys' - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1635.yaml"
+},
+"CVE-2015-1880": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.14157,
+"epss_pct": 0.96308,
+"name": "Fortinet FortiOS <=5.2.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1880.yaml"
+},
+"CVE-2015-20067": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.07729,
+"epss_pct": 0.94193,
+"name": "WP Attachment Export < 0.2.4 - Unrestricted File Download",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-20067.yaml"
+},
+"CVE-2015-2067": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.39424,
+"epss_pct": 0.98503,
+"name": "Magento Server MAGMI - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2067.yaml"
+},
+"CVE-2015-2068": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.1404,
+"epss_pct": 0.96288,
+"name": "Magento Server Mass Importer - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2068.yaml"
+},
+"CVE-2015-2080": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.74881,
+"epss_pct": 0.99467,
+"name": "Eclipse Jetty <9.2.9.v20150224 - Sensitive Information Leakage",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2080.yaml"
+},
+"CVE-2015-2166": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.26774,
+"epss_pct": 0.97882,
+"name": "Ericsson Drutt MSDP - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2166.yaml"
+},
+"CVE-2015-2196": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-89",
+"epss": 0.11182,
+"epss_pct": 0.95633,
+"name": "WordPress Spider Calendar <=1.4.9 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2196.yaml"
+},
+"CVE-2015-2755": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-352",
+"epss": 0.03831,
+"epss_pct": 0.8934,
+"name": "WordPress AB Google Map Travel <=3.4 - Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2755.yaml"
+},
+"CVE-2015-2794": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-264",
+"epss": 0.74552,
+"epss_pct": 0.99459,
+"name": "DotNetNuke 07.04.00 - Administration Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2794.yaml"
+},
+"CVE-2015-2807": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.07328,
+"epss_pct": 0.93941,
+"name": "Navis DocumentCloud <0.1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2807.yaml"
+},
+"CVE-2015-2863": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-601",
+"epss": 0.10317,
+"epss_pct": 0.95366,
+"name": "Kaseya Virtual System Administrator - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2863.yaml"
+},
+"CVE-2015-2996": {
+"cvss": 8.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:C",
+"cwe": "CWE-22",
+"epss": 0.86643,
+"epss_pct": 0.99725,
+"name": "SysAid Help Desk <15.2 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2996.yaml"
+},
+"CVE-2015-3035": {
+"cvss": 7.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.83948,
+"epss_pct": 0.99673,
+"name": "TP-LINK - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-3035.yaml"
+},
+"CVE-2015-3224": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-284",
+"epss": 0.44708,
+"epss_pct": 0.98677,
+"name": "Ruby on Rails Web Console - Remote Code Execution",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-3224.yaml"
+},
+"CVE-2015-3306": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C",
+"cwe": "CWE-284",
+"epss": 0.96752,
+"epss_pct": 0.99883,
+"name": "ProFTPd - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2015/CVE-2015-3306.yaml"
+},
+"CVE-2015-3337": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.32927,
+"epss_pct": 0.98234,
+"name": "Elasticsearch - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-3337.yaml"
+},
+"CVE-2015-3648": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-22",
+"epss": 0.08083,
+"epss_pct": 0.94391,
+"name": "ResourceSpace - Local File inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-3648.yaml"
+},
+"CVE-2015-3897": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.17681,
+"epss_pct": 0.96934,
+"name": "Bonita BPM Portal <6.5.3 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-3897.yaml"
+},
+"CVE-2015-4050": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-284",
+"epss": 0.08269,
+"epss_pct": 0.94508,
+"name": "Symfony - Authentication Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4050.yaml"
+},
+"CVE-2015-4062": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:S/C:P/I:P/A:P",
+"cwe": "CWE-89",
+"epss": 0.09183,
+"epss_pct": 0.94959,
+"name": "WordPress NewStatPress 0.9.8 - SQL Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4062.yaml"
+},
+"CVE-2015-4063": {
+"cvss": 3.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:S/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.06188,
+"epss_pct": 0.92989,
+"name": "NewStatPress <0.9.9 - Cross-Site Scripting",
+"severity": "low",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4063.yaml"
+},
+"CVE-2015-4074": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.5651,
+"epss_pct": 0.98985,
+"name": "Joomla! Helpdesk Pro plugin <1.4.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4074.yaml"
+},
+"CVE-2015-4127": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.07495,
+"epss_pct": 0.94041,
+"name": "WordPress Church Admin <0.810 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4127.yaml"
+},
+"CVE-2015-4414": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.18958,
+"epss_pct": 0.97094,
+"name": "WordPress SE HTML5 Album Audio Player 1.1.0 - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4414.yaml"
+},
+"CVE-2015-4455": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.40595,
+"epss_pct": 0.98548,
+"name": "WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4455.yaml"
+},
+"CVE-2015-4632": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.51829,
+"epss_pct": 0.98866,
+"name": "Koha 3.20.1 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4632.yaml"
+},
+"CVE-2015-4666": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.16235,
+"epss_pct": 0.96713,
+"name": "Xceedium Xsuite <=2.4.4.5 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4666.yaml"
+},
+"CVE-2015-4668": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.06719,
+"epss_pct": 0.93448,
+"name": "Xsuite <=2.4.4.5 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4668.yaml"
+},
+"CVE-2015-4694": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.15646,
+"epss_pct": 0.96598,
+"name": "WordPress Zip Attachments <= 1.1.4 - Arbitrary File Retrieval",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4694.yaml"
+},
+"CVE-2015-5354": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N",
+"cwe": "CWE-601",
+"epss": 0.12523,
+"epss_pct": 0.95935,
+"name": "Novius OS 5.0.1-elche - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5354.yaml"
+},
+"CVE-2015-5461": {
+"cvss": 6.4,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:N",
+"epss": 0.06283,
+"epss_pct": 0.93085,
+"name": "WordPress StageShow <5.0.9 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5461.yaml"
+},
+"CVE-2015-5469": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.10148,
+"epss_pct": 0.95313,
+"name": "WordPress MDC YouTube Downloader 2.1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5469.yaml"
+},
+"CVE-2015-5471": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.32483,
+"epss_pct": 0.9821,
+"name": "Swim Team <= v1.44.10777 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5471.yaml"
+},
+"CVE-2015-5531": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.94788,
+"epss_pct": 0.99852,
+"name": "ElasticSearch <1.6.1 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5531.yaml"
+},
+"CVE-2015-5688": {
+"cvss": 5.0,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.09385,
+"epss_pct": 0.95038,
+"name": "Geddy <13.0.8 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5688.yaml"
+},
+"CVE-2015-6477": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.12042,
+"epss_pct": 0.95837,
+"name": "Nordex NC2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-6477.yaml"
+},
+"CVE-2015-6544": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05375,
+"epss_pct": 0.92087,
+"name": "Combodo iTop <2.2.0-2459 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-6544.yaml"
+},
+"CVE-2015-6920": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.0384,
+"epss_pct": 0.89364,
+"name": "WordPress sourceAFRICA <=0.1.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-6920.yaml"
+},
+"CVE-2015-7245": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.45479,
+"epss_pct": 0.98701,
+"name": "D-Link DVG-N5402SP - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7245.yaml"
+},
+"CVE-2015-7297": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"cwe": "CWE-89",
+"epss": 0.99967,
+"epss_pct": 0.99976,
+"name": "Joomla! Core SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7297.yaml"
+},
+"CVE-2015-7377": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N",
+"cwe": "CWE-79",
+"epss": 0.04405,
+"epss_pct": 0.90635,
+"name": "WordPress Pie-Register <2.0.19 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7377.yaml"
+},
+"CVE-2015-7450": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.97655,
+"epss_pct": 0.99898,
+"name": "IBM WebSphere Java Object Deserialization - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7450.yaml"
+},
+"CVE-2015-7501": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.85562,
+"epss_pct": 0.99706,
+"name": "Red Hat JBoss - Insecure Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7501.yaml"
+},
+"CVE-2015-7780": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.10631,
+"epss_pct": 0.95466,
+"name": "ManageEngine Firewall Analyzer <8.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7780.yaml"
+},
+"CVE-2015-7823": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N",
+"epss": 0.05143,
+"epss_pct": 0.91815,
+"name": "Kentico CMS 8.2 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7823.yaml"
+},
+"CVE-2015-8349": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03263,
+"epss_pct": 0.87504,
+"name": "SourceBans <2.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-8349.yaml"
+},
+"CVE-2015-8350": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02645,
+"epss_pct": 0.84526,
+"name": "WordPress Calls to Action <=2.4.3 - Authenticated Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-8350.yaml"
+},
+"CVE-2015-8399": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.60241,
+"epss_pct": 0.9907,
+"name": "Atlassian Confluence <5.8.17 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-8399.yaml"
+},
+"CVE-2015-8562": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P",
+"epss": 0.98283,
+"epss_pct": 0.99912,
+"name": "Joomla HTTP Header Unauthenticated - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-8562.yaml"
+},
+"CVE-2015-8813": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N",
+"cwe": "CWE-918",
+"epss": 0.11154,
+"epss_pct": 0.95627,
+"name": "Umbraco <7.4.0- Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-8813.yaml"
+},
+"CVE-2015-9312": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01805,
+"epss_pct": 0.77002,
+"name": "NewStatPress <=1.0.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9312.yaml"
+},
+"CVE-2015-9323": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.46125,
+"epss_pct": 0.98721,
+"name": "404 to 301 <= 2.0.2 - Authenticated Blind SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9323.yaml"
+},
+"CVE-2015-9406": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.55008,
+"epss_pct": 0.98953,
+"name": "mTheme Unus < 2.3 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9406.yaml"
+},
+"CVE-2015-9414": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03605,
+"epss_pct": 0.88647,
+"name": "WordPress Symposium <=15.8.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9414.yaml"
+},
+"CVE-2015-9415": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-20",
+"epss": 0.03399,
+"epss_pct": 0.87992,
+"name": "BJ Lazy Load (Timthumb) <= 0.7.5 - Remote File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9415.yaml"
+},
+"CVE-2015-9480": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.12736,
+"epss_pct": 0.95983,
+"name": "WordPress RobotCPA 5 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9480.yaml"
+},
+"CVE-2015-9499": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.16254,
+"epss_pct": 0.96716,
+"name": "WordPress ShowBiz Pro <= 1.7.1 - Authenticated Arbitrary File Upload to RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9499.yaml"
+},
+"CVE-2016-0957": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.51989,
+"epss_pct": 0.9887,
+"name": "Adobe AEM Dispatcher <4.15 - Rules Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-0957.yaml"
+},
+"CVE-2016-1000126": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03718,
+"epss_pct": 0.88994,
+"name": "WordPress Admin Font Editor <=1.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000126.yaml"
+},
+"CVE-2016-1000127": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03718,
+"epss_pct": 0.88994,
+"name": "WordPress AJAX Random Post <=2.00 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000127.yaml"
+},
+"CVE-2016-1000128": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04195,
+"epss_pct": 0.90227,
+"name": "WordPress anti-plagiarism <=3.60 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000128.yaml"
+},
+"CVE-2016-1000129": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03236,
+"epss_pct": 0.87391,
+"name": "WordPress defa-online-image-protector <=3.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000129.yaml"
+},
+"CVE-2016-1000130": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02897,
+"epss_pct": 0.85955,
+"name": "WordPress e-search <=1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000130.yaml"
+},
+"CVE-2016-1000131": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0465,
+"epss_pct": 0.91081,
+"name": "WordPress e-search <=1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000131.yaml"
+},
+"CVE-2016-1000132": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04426,
+"epss_pct": 0.90673,
+"name": "WordPress enhanced-tooltipglossary 3.2.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000132.yaml"
+},
+"CVE-2016-1000133": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03415,
+"epss_pct": 0.88044,
+"name": "WordPress forget-about-shortcode-buttons 1.1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000133.yaml"
+},
+"CVE-2016-1000134": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0465,
+"epss_pct": 0.91081,
+"name": "WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000134.yaml"
+},
+"CVE-2016-1000135": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0465,
+"epss_pct": 0.91081,
+"name": "WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000135.yaml"
+},
+"CVE-2016-1000136": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03415,
+"epss_pct": 0.88044,
+"name": "WordPress heat-trackr 1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000136.yaml"
+},
+"CVE-2016-1000137": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04448,
+"epss_pct": 0.90723,
+"name": "WordPress Hero Maps Pro 2.1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000137.yaml"
+},
+"CVE-2016-1000138": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03432,
+"epss_pct": 0.88104,
+"name": "WordPress Admin Font Editor <=1.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000138.yaml"
+},
+"CVE-2016-1000139": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04195,
+"epss_pct": 0.90226,
+"name": "WordPress Infusionsoft Gravity Forms <=1.5.11 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000139.yaml"
+},
+"CVE-2016-1000140": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03432,
+"epss_pct": 0.88104,
+"name": "WordPress New Year Firework <=1.1.9 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000140.yaml"
+},
+"CVE-2016-1000141": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03462,
+"epss_pct": 0.88209,
+"name": "WordPress Page Layout builder v1.9.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000141.yaml"
+},
+"CVE-2016-1000142": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04448,
+"epss_pct": 0.90723,
+"name": "WordPress MW Font Changer <=4.2.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000142.yaml"
+},
+"CVE-2016-1000143": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03558,
+"epss_pct": 0.885,
+"name": "WordPress Photoxhibit 2.1.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000143.yaml"
+},
+"CVE-2016-1000146": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03462,
+"epss_pct": 0.88209,
+"name": "WordPress Pondol Form to Mail <=1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000146.yaml"
+},
+"CVE-2016-1000148": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03209,
+"epss_pct": 0.87275,
+"name": "WordPress S3 Video <=0.983 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000148.yaml"
+},
+"CVE-2016-1000149": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03977,
+"epss_pct": 0.89747,
+"name": "WordPress Simpel Reserveren <=3.5.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000149.yaml"
+},
+"CVE-2016-1000152": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04173,
+"epss_pct": 0.9018,
+"name": "WordPress Tidio-form <=1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000152.yaml"
+},
+"CVE-2016-1000153": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04486,
+"epss_pct": 0.90787,
+"name": "WordPress Tidio Gallery <=1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000153.yaml"
+},
+"CVE-2016-1000154": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03432,
+"epss_pct": 0.88104,
+"name": "WordPress WHIZZ <=1.0.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000154.yaml"
+},
+"CVE-2016-1000155": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04486,
+"epss_pct": 0.90787,
+"name": "WordPress WPSOLR <=8.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000155.yaml"
+},
+"CVE-2016-10033": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-88",
+"epss": 0.99714,
+"epss_pct": 0.9995,
+"name": "WordPress PHPMailer < 5.2.18 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10033.yaml"
+},
+"CVE-2016-10108": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.98071,
+"epss_pct": 0.99908,
+"name": "Western Digital MyCloud NAS - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10108.yaml"
+},
+"CVE-2016-10134": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.83406,
+"epss_pct": 0.99659,
+"name": "Zabbix - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10134.yaml"
+},
+"CVE-2016-10367": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.16109,
+"epss_pct": 0.96687,
+"name": "Opsview Monitor Pro - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10367.yaml"
+},
+"CVE-2016-10368": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02178,
+"epss_pct": 0.8107,
+"name": "Opsview Monitor Pro - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10368.yaml"
+},
+"CVE-2016-10924": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.11662,
+"epss_pct": 0.95743,
+"name": "Wordpress Zedna eBook download <1.2 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10924.yaml"
+},
+"CVE-2016-10940": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.05596,
+"epss_pct": 0.92351,
+"name": "WordPress zm-gallery plugin 1.0 SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10940.yaml"
+},
+"CVE-2016-10956": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-20",
+"epss": 0.10582,
+"epss_pct": 0.95451,
+"name": "WordPress Mail Masta 1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10956.yaml"
+},
+"CVE-2016-10960": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.08976,
+"epss_pct": 0.94882,
+"name": "WordPress wSecure Lite < 2.4 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10960.yaml"
+},
+"CVE-2016-10972": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.09268,
+"epss_pct": 0.94994,
+"name": "Newspaper Theme 6.4\u20136.7.1 - Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10972.yaml"
+},
+"CVE-2016-10973": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01703,
+"epss_pct": 0.75607,
+"name": "Brafton WordPress Plugin < 3.4.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10973.yaml"
+},
+"CVE-2016-10976": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01506,
+"epss_pct": 0.72558,
+"name": "Safe Editor Plugin < 1.2 - CSS/JS-injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10976.yaml"
+},
+"CVE-2016-10993": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02796,
+"epss_pct": 0.85439,
+"name": "ScoreMe Theme - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10993.yaml"
+},
+"CVE-2016-15041": {
+"name": "MainWP Dashboard <= 3.1.2 - Stored Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-15041.yaml"
+},
+"CVE-2016-15042": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.05719,
+"epss_pct": 0.92492,
+"name": "WordPress Frontend File Manager < 4.0 & N-Media Post Frontend < 1.1 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-15042.yaml"
+},
+"CVE-2016-15043": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.10032,
+"epss_pct": 0.95274,
+"name": "WP Mobile Detector <= 3.5 - Unrestricted File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-15043.yaml"
+},
+"CVE-2016-1555": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.98325,
+"epss_pct": 0.99913,
+"name": "NETGEAR WNAP320 Access Point Firmware - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1555.yaml"
+},
+"CVE-2016-2004": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.94251,
+"epss_pct": 0.99842,
+"name": "HP Data Protector - Arbitrary Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2016/CVE-2016-2004.yaml"
+},
+"CVE-2016-2389": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.4145,
+"epss_pct": 0.98573,
+"name": "SAP xMII 15.0 for SAP NetWeaver 7.4 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-2389.yaml"
+},
+"CVE-2016-3081": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.93352,
+"epss_pct": 0.99831,
+"name": "Apache S2-032 Struts - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-3081.yaml"
+},
+"CVE-2016-3088": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.98518,
+"epss_pct": 0.99918,
+"name": "Apache ActiveMQ Fileserver - Arbitrary File Write",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-3088.yaml"
+},
+"CVE-2016-3510": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-119",
+"epss": 0.91402,
+"epss_pct": 0.99804,
+"name": "Oracle WebLogic Server Java Object Deserialization - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2016/CVE-2016-3510.yaml"
+},
+"CVE-2016-3978": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05937,
+"epss_pct": 0.92736,
+"name": "Fortinet FortiOS - Open Redirect/Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-3978.yaml"
+},
+"CVE-2016-4437": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-284",
+"epss": 0.93039,
+"epss_pct": 0.99825,
+"name": "Apache Shiro 1.2.4 Cookie RememberME - Deserial Remote Code Execution Vulnerability",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-4437.yaml"
+},
+"CVE-2016-4975": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-93",
+"epss": 0.19798,
+"epss_pct": 0.97218,
+"name": "Apache mod_userdir CRLF injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-4975.yaml"
+},
+"CVE-2016-4977": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-19",
+"epss": 0.79176,
+"epss_pct": 0.99568,
+"name": "Spring Security OAuth2 Remote Command Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-4977.yaml"
+},
+"CVE-2016-5649": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.24427,
+"epss_pct": 0.97708,
+"name": "NETGEAR DGN2200 / DGND3700 - Admin Password Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-5649.yaml"
+},
+"CVE-2016-5674": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.9461,
+"epss_pct": 0.99848,
+"name": "NUUO NVR camera `debugging_center_utils_.php` - Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-5674.yaml"
+},
+"CVE-2016-6195": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.68493,
+"epss_pct": 0.99283,
+"name": "vBulletin <= 4.2.3 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-6195.yaml"
+},
+"CVE-2016-6277": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-352",
+"epss": 0.99803,
+"epss_pct": 0.99956,
+"name": "NETGEAR Routers - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-6277.yaml"
+},
+"CVE-2016-6601": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.97415,
+"epss_pct": 0.99894,
+"name": "ZOHO WebNMS Framework <5.2 SP1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-6601.yaml"
+},
+"CVE-2016-7552": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.93249,
+"epss_pct": 0.99828,
+"name": "Trend Micro Threat Discovery Appliance 2.6.1062r1 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-7552.yaml"
+},
+"CVE-2016-7834": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-200",
+"epss": 0.03869,
+"epss_pct": 0.89444,
+"name": "Sony IPELA Engine IP Camera - Hardcoded Account",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-7834.yaml"
+},
+"CVE-2016-7981": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.08216,
+"epss_pct": 0.94477,
+"name": "SPIP <3.1.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-7981.yaml"
+},
+"CVE-2016-8527": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.13164,
+"epss_pct": 0.96084,
+"name": "Aruba Airwave <8.2.3.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-8527.yaml"
+},
+"CVE-2016-8706": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-190",
+"epss": 0.45703,
+"epss_pct": 0.98708,
+"name": "Memcached Server SASL Authentication - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2016/CVE-2016-8706.yaml"
+},
+"CVE-2016-8735": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.90338,
+"epss_pct": 0.99789,
+"name": "Apache Tomcat - Remote Code Execution via JMX Ports",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2016/CVE-2016-8735.yaml"
+},
+"CVE-2016-9299": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-90",
+"epss": 0.9765,
+"epss_pct": 0.99898,
+"name": "Jenkins CLI - HTTP Java Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2016/CVE-2016-9299.yaml"
+},
+"CVE-2017-0929": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.12543,
+"epss_pct": 0.9594,
+"name": "DotNetNuke (DNN) ImageHandler <9.2.0 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-0929.yaml"
+},
+"CVE-2017-1000028": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.99479,
+"epss_pct": 0.99941,
+"name": "Oracle GlassFish Server Open Source Edition 4.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000028.yaml"
+},
+"CVE-2017-1000029": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.08348,
+"epss_pct": 0.94548,
+"name": "Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000029.yaml"
+},
+"CVE-2017-1000163": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02377,
+"epss_pct": 0.82684,
+"name": "Phoenix Framework - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000163.yaml"
+},
+"CVE-2017-1000170": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.59063,
+"epss_pct": 0.99044,
+"name": "WordPress Delightful Downloads Jquery File Tree 2.1.5 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000170.yaml"
+},
+"CVE-2017-1000353": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.99679,
+"epss_pct": 0.99948,
+"name": "Jenkins CLI - Java Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2017/CVE-2017-1000353.yaml"
+},
+"CVE-2017-1000486": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-326",
+"epss": 0.94104,
+"epss_pct": 0.9984,
+"name": "Primetek Primefaces 5.x - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000486.yaml"
+},
+"CVE-2017-10075": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
+"epss": 0.17558,
+"epss_pct": 0.96916,
+"name": "Oracle Content Server - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-10075.yaml"
+},
+"CVE-2017-10271": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"epss": 0.99993,
+"epss_pct": 0.99987,
+"name": "Oracle WebLogic Server - Remote Command Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-10271.yaml"
+},
+"CVE-2017-10974": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.81159,
+"epss_pct": 0.99606,
+"name": "Yaws 1.91 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-10974.yaml"
+},
+"CVE-2017-11107": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02069,
+"epss_pct": 0.80074,
+"name": "phpLDAPadmin <= 1.2.3 - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11107.yaml"
+},
+"CVE-2017-11165": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-200",
+"epss": 0.6413,
+"epss_pct": 0.99166,
+"name": "DataTaker DT80 dEX 1.50.012 - Information Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11165.yaml"
+},
+"CVE-2017-11444": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.13098,
+"epss_pct": 0.96074,
+"name": "Subrion CMS <4.1.5.10 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11444.yaml"
+},
+"CVE-2017-11512": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.79604,
+"epss_pct": 0.99575,
+"name": "ManageEngine ServiceDesk 9.3.9328 - Arbitrary File Retrieval",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11512.yaml"
+},
+"CVE-2017-11586": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02286,
+"epss_pct": 0.81969,
+"name": "FineCMS <5.0.9 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11586.yaml"
+},
+"CVE-2017-11610": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-276",
+"epss": 0.87378,
+"epss_pct": 0.99742,
+"name": "XML-RPC Server - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11610.yaml"
+},
+"CVE-2017-11629": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01937,
+"epss_pct": 0.78652,
+"name": "FineCMS <=5.0.10 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11629.yaml"
+},
+"CVE-2017-12138": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.03406,
+"epss_pct": 0.88018,
+"name": "XOOPS Core 2.5.8 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12138.yaml"
+},
+"CVE-2017-12149": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.90713,
+"epss_pct": 0.99795,
+"name": "Jboss Application Server - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12149.yaml"
+},
+"CVE-2017-12542": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.99294,
+"epss_pct": 0.99936,
+"name": "HPE Integrated Lights-out 4 (ILO4) <2.53 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12542.yaml"
+},
+"CVE-2017-12544": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04515,
+"epss_pct": 0.90837,
+"name": "HPE System Management - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12544.yaml"
+},
+"CVE-2017-12583": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03253,
+"epss_pct": 0.87462,
+"name": "DokuWiki - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12583.yaml"
+},
+"CVE-2017-12611": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.87123,
+"epss_pct": 0.99735,
+"name": "Apache Struts2 S2-053 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12611.yaml"
+},
+"CVE-2017-12615": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.99607,
+"epss_pct": 0.99946,
+"name": "Apache Tomcat Servers - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12615.yaml"
+},
+"CVE-2017-12617": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.99988,
+"epss_pct": 0.99984,
+"name": "Apache Tomcat - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12617.yaml"
+},
+"CVE-2017-12629": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-611",
+"epss": 0.91896,
+"epss_pct": 0.9981,
+"name": "Apache Solr <= 7.1 - XML Entity Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12629.yaml"
+},
+"CVE-2017-12635": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.99838,
+"epss_pct": 0.9996,
+"name": "Apache CouchDB 1.7.0 / 2.x < 2.1.1 - Remote Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12635.yaml"
+},
+"CVE-2017-12637": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.95111,
+"epss_pct": 0.99857,
+"name": "SAP NetWeaver Application Server Java 7.5 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12637.yaml"
+},
+"CVE-2017-12794": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.23566,
+"epss_pct": 0.97633,
+"name": "Django Debug Page - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12794.yaml"
+},
+"CVE-2017-14135": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.21842,
+"epss_pct": 0.97469,
+"name": "OpenDreambox 2.0.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14135.yaml"
+},
+"CVE-2017-14186": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03718,
+"epss_pct": 0.88996,
+"name": "FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14186.yaml"
+},
+"CVE-2017-14524": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.0294,
+"epss_pct": 0.86146,
+"name": "OpenText Documentum Administrator 7.2.0180.0055 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14524.yaml"
+},
+"CVE-2017-14535": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.50069,
+"epss_pct": 0.98819,
+"name": "Trixbox - 2.8.0.4 OS Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14535.yaml"
+},
+"CVE-2017-14537": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.39278,
+"epss_pct": 0.98495,
+"name": "Trixbox 2.8.0 - Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14537.yaml"
+},
+"CVE-2017-14622": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02892,
+"epss_pct": 0.85929,
+"name": "WordPress 2kb Amazon Affiliates Store <2.1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14622.yaml"
+},
+"CVE-2017-14651": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03836,
+"epss_pct": 0.89355,
+"name": "WSO2 Data Analytics Server 3.1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14651.yaml"
+},
+"CVE-2017-14725": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02187,
+"epss_pct": 0.81145,
+"name": "WordPress < 4.8.2 - Authenticated Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14725.yaml"
+},
+"CVE-2017-14849": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.54389,
+"epss_pct": 0.98936,
+"name": "Node.js <8.6.0 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14849.yaml"
+},
+"CVE-2017-14942": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-552",
+"epss": 0.60857,
+"epss_pct": 0.99088,
+"name": "Intelbras WRN 150 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14942.yaml"
+},
+"CVE-2017-15287": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06147,
+"epss_pct": 0.9295,
+"name": "Dreambox WebControl 2.0.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-15287.yaml"
+},
+"CVE-2017-15363": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.15333,
+"epss_pct": 0.96526,
+"name": "Luracast Restler 3.0.1 via TYPO3 Restler 1.7.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-15363.yaml"
+},
+"CVE-2017-15647": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.26619,
+"epss_pct": 0.9787,
+"name": "FiberHome Routers - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-15647.yaml"
+},
+"CVE-2017-15715": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.8572,
+"epss_pct": 0.99709,
+"name": "Apache httpd <=2.4.29 - Arbitrary File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-15715.yaml"
+},
+"CVE-2017-15944": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.98303,
+"epss_pct": 0.99912,
+"name": "Palo Alto Network PAN-OS - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-15944.yaml"
+},
+"CVE-2017-16806": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.91496,
+"epss_pct": 0.99805,
+"name": "Ulterius Server < 1.9.5.0 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-16806.yaml"
+},
+"CVE-2017-16877": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.14104,
+"epss_pct": 0.96296,
+"name": "Nextjs <2.4.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-16877.yaml"
+},
+"CVE-2017-16894": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.8703,
+"epss_pct": 0.99733,
+"name": "Laravel <5.5.21 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-16894.yaml"
+},
+"CVE-2017-17043": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05096,
+"epss_pct": 0.91758,
+"name": "WordPress Emag Marketplace Connector 1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17043.yaml"
+},
+"CVE-2017-17059": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03419,
+"epss_pct": 0.88054,
+"name": "WordPress amtyThumb Posts 8.1.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17059.yaml"
+},
+"CVE-2017-17092": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03473,
+"epss_pct": 0.88247,
+"name": "WordPress < 4.9.1 - Authenticated JavaScript File Upload",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17092.yaml"
+},
+"CVE-2017-17451": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05088,
+"epss_pct": 0.91748,
+"name": "WordPress Mailster <=1.5.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17451.yaml"
+},
+"CVE-2017-17562": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.96327,
+"epss_pct": 0.99876,
+"name": "Embedthis GoAhead <3.6.5 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17562.yaml"
+},
+"CVE-2017-17731": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.13194,
+"epss_pct": 0.96091,
+"name": "DedeCMS 5.7 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17731.yaml"
+},
+"CVE-2017-17736": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-425",
+"epss": 0.68956,
+"epss_pct": 0.99297,
+"name": "Kentico - Installer Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17736.yaml"
+},
+"CVE-2017-17762": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-611",
+"epss": 0.04648,
+"epss_pct": 0.91079,
+"name": "Episerver 7 - Blind XML External Entity Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17762.yaml"
+},
+"CVE-2017-18024": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04531,
+"epss_pct": 0.90869,
+"name": "AvantFAX 3.3.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18024.yaml"
+},
+"CVE-2017-18349": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.3897,
+"epss_pct": 0.98482,
+"name": "Fastjson Insecure Deserialization - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18349.yaml"
+},
+"CVE-2017-18362": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.8682,
+"epss_pct": 0.9973,
+"name": "Kaseya VSA 2017 ConnectWise ManagedITSync - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18362.yaml"
+},
+"CVE-2017-18487": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01458,
+"epss_pct": 0.7166,
+"name": "AdPush < 1.44 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18487.yaml"
+},
+"CVE-2017-18490": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01458,
+"epss_pct": 0.71661,
+"name": "Contact Form Multi by BestWebSoft < 1.2.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18490.yaml"
+},
+"CVE-2017-18491": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01458,
+"epss_pct": 0.7166,
+"name": "Contact Form by BestWebSoft < 4.0.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18491.yaml"
+},
+"CVE-2017-18492": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01458,
+"epss_pct": 0.7166,
+"name": "Contact Form to DB by BestWebSoft < 1.5.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18492.yaml"
+},
+"CVE-2017-18493": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.014,
+"epss_pct": 0.70579,
+"name": "Custom Admin Page by BestWebSoft < 0.1.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18493.yaml"
+},
+"CVE-2017-18494": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.014,
+"epss_pct": 0.70579,
+"name": "Custom Search by BestWebSoft < 1.36 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18494.yaml"
+},
+"CVE-2017-18496": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.014,
+"epss_pct": 0.70579,
+"name": "Htaccess by BestWebSoft < 1.7.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18496.yaml"
+},
+"CVE-2017-18500": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0141,
+"epss_pct": 0.7077,
+"name": "Social Buttons Pack by BestWebSof < 1.1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18500.yaml"
+},
+"CVE-2017-18501": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0141,
+"epss_pct": 0.70769,
+"name": "Social Login by BestWebSoft < 0.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18501.yaml"
+},
+"CVE-2017-18502": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01652,
+"epss_pct": 0.74852,
+"name": "Subscriber by BestWebSoft < 1.3.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18502.yaml"
+},
+"CVE-2017-18505": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01652,
+"epss_pct": 0.74852,
+"name": "BestWebSoft's Twitter < 2.55 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18505.yaml"
+},
+"CVE-2017-18516": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01688,
+"epss_pct": 0.7541,
+"name": "LinkedIn by BestWebSoft < 1.0.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18516.yaml"
+},
+"CVE-2017-18517": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01621,
+"epss_pct": 0.74379,
+"name": "Pinterest by BestWebSoft < 1.0.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18517.yaml"
+},
+"CVE-2017-18518": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01621,
+"epss_pct": 0.74379,
+"name": "SMTP by BestWebSoft < 1.1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18518.yaml"
+},
+"CVE-2017-18527": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01688,
+"epss_pct": 0.75409,
+"name": "Pagination by BestWebSoft < 1.0.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18527.yaml"
+},
+"CVE-2017-18528": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01757,
+"epss_pct": 0.76367,
+"name": "PDF & Print by BestWebSoft < 1.9.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18528.yaml"
+},
+"CVE-2017-18529": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01621,
+"epss_pct": 0.7438,
+"name": "PromoBar by BestWebSoft < 1.1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18529.yaml"
+},
+"CVE-2017-18530": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01384,
+"epss_pct": 0.70258,
+"name": "Rating by BestWebSoft < 0.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18530.yaml"
+},
+"CVE-2017-18532": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01441,
+"epss_pct": 0.71343,
+"name": "Realty by BestWebSoft < 1.1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18532.yaml"
+},
+"CVE-2017-18536": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0203,
+"epss_pct": 0.79669,
+"name": "WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18536.yaml"
+},
+"CVE-2017-18537": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01621,
+"epss_pct": 0.7438,
+"name": "Visitors Online by BestWebSoft < 1.0.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18537.yaml"
+},
+"CVE-2017-18542": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01388,
+"epss_pct": 0.70332,
+"name": "Zendesk Help Center by BestWebSoft < 1.0.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18542.yaml"
+},
+"CVE-2017-18556": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01384,
+"epss_pct": 0.70259,
+"name": "Google Analytics by BestWebSoft < 1.7.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18556.yaml"
+},
+"CVE-2017-18557": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01384,
+"epss_pct": 0.70259,
+"name": "Google Maps by BestWebSoft < 1.3.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18557.yaml"
+},
+"CVE-2017-18558": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01384,
+"epss_pct": 0.70259,
+"name": "Testimonials by BestWebSoft < 0.1.9 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18558.yaml"
+},
+"CVE-2017-18562": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01384,
+"epss_pct": 0.7026,
+"name": "Error Log Viewer by BestWebSoft < 1.0.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18562.yaml"
+},
+"CVE-2017-18564": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0139,
+"epss_pct": 0.70396,
+"name": "Sender by BestWebSoft < 1.2.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18564.yaml"
+},
+"CVE-2017-18565": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0139,
+"epss_pct": 0.70397,
+"name": "Updater by BestWebSoft < 1.35 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18565.yaml"
+},
+"CVE-2017-18566": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0139,
+"epss_pct": 0.70396,
+"name": "User Role by BestWebSoft < 1.5.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18566.yaml"
+},
+"CVE-2017-18580": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.12092,
+"epss_pct": 0.95847,
+"name": "WordPress Shortcodes Ultimate <= 5.0.0 - Authenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18580.yaml"
+},
+"CVE-2017-18590": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01404,
+"epss_pct": 0.70665,
+"name": "Timesheet Plugin < 0.1.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18590.yaml"
+},
+"CVE-2017-18598": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01933,
+"epss_pct": 0.78597,
+"name": "WordPress Qards - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18598.yaml"
+},
+"CVE-2017-18638": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.15301,
+"epss_pct": 0.96522,
+"name": "Graphite <=1.1.5 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18638.yaml"
+},
+"CVE-2017-20192": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01026,
+"epss_pct": 0.6117,
+"name": "Formidable Forms < 2.05.02 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-20192.yaml"
+},
+"CVE-2017-20194": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01128,
+"epss_pct": 0.64055,
+"name": "Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-20194.yaml"
+},
+"CVE-2017-3131": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.07681,
+"epss_pct": 0.94162,
+"name": "FortiOS 5.4.0 to 5.6.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-3131.yaml"
+},
+"CVE-2017-3132": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.08112,
+"epss_pct": 0.94418,
+"name": "Fortinet FortiOS < 5.6.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-3132.yaml"
+},
+"CVE-2017-3133": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.10677,
+"epss_pct": 0.95481,
+"name": "Fortinet FortiOS < 5.6.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-3133.yaml"
+},
+"CVE-2017-3506": {
+"cvss": 7.4,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"epss": 0.96281,
+"epss_pct": 0.99875,
+"name": "Oracle Fusion Middleware Weblogic Server - Remote OS Command Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-3506.yaml"
+},
+"CVE-2017-3528": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.14622,
+"epss_pct": 0.96401,
+"name": "Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-3528.yaml"
+},
+"CVE-2017-3881": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.98975,
+"epss_pct": 0.99928,
+"name": "Cisco IOS 12.2(55)SE11 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2017/CVE-2017-3881.yaml"
+},
+"CVE-2017-4011": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03271,
+"epss_pct": 0.87529,
+"name": "McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-4011.yaml"
+},
+"CVE-2017-5521": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-200",
+"epss": 0.89353,
+"epss_pct": 0.99771,
+"name": "NETGEAR Routers - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5521.yaml"
+},
+"CVE-2017-5631": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04487,
+"epss_pct": 0.9079,
+"name": "KMCIS CaseAware - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5631.yaml"
+},
+"CVE-2017-5638": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.99999,
+"epss_pct": 0.99994,
+"name": "Apache Struts 2 - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5638.yaml"
+},
+"CVE-2017-5645": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.89792,
+"epss_pct": 0.99779,
+"name": "Apache Log4j Server - Deserialization Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2017/CVE-2017-5645.yaml"
+},
+"CVE-2017-5689": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.92189,
+"epss_pct": 0.99814,
+"name": "Intel Active Management - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5689.yaml"
+},
+"CVE-2017-5868": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-93",
+"epss": 0.04622,
+"epss_pct": 0.91036,
+"name": "OpenVPN Access Server 2.1.4 - CRLF Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5868.yaml"
+},
+"CVE-2017-5871": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02676,
+"epss_pct": 0.84735,
+"name": "Odoo <= 8.0-20160726 & 9.0 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5871.yaml"
+},
+"CVE-2017-5982": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.7763,
+"epss_pct": 0.99527,
+"name": "Kodi 17.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5982.yaml"
+},
+"CVE-2017-5983": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.16373,
+"epss_pct": 0.96735,
+"name": "JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5983.yaml"
+},
+"CVE-2017-6090": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.96234,
+"epss_pct": 0.99873,
+"name": "PhpColl 2.5.1 Arbitrary File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-6090.yaml"
+},
+"CVE-2017-6478": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02574,
+"epss_pct": 0.84074,
+"name": "MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-6478.yaml"
+},
+"CVE-2017-7269": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-119",
+"epss": 0.99823,
+"epss_pct": 0.99958,
+"name": "Windows Server 2003 & IIS 6.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7269.yaml"
+},
+"CVE-2017-7391": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.08242,
+"epss_pct": 0.94489,
+"name": "Magmi 0.7.22 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7391.yaml"
+},
+"CVE-2017-7504": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.41019,
+"epss_pct": 0.98558,
+"name": "JBossMQ HTTP Invocation Layer (HTTPServerILServlet) - Unauthenticated Java Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7504.yaml"
+},
+"CVE-2017-7615": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-640",
+"epss": 0.90856,
+"epss_pct": 0.99797,
+"name": "MantisBT <=2.30 - Arbitrary Password Reset/Admin Access",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7615.yaml"
+},
+"CVE-2017-7855": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0201,
+"epss_pct": 0.79479,
+"name": "IceWarp WebMail 11.3.1.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7855.yaml"
+},
+"CVE-2017-7921": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.99998,
+"epss_pct": 0.9999,
+"name": "Hikvision - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7921.yaml"
+},
+"CVE-2017-7925": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.51418,
+"epss_pct": 0.98857,
+"name": "Dahua Security - Configuration File Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7925.yaml"
+},
+"CVE-2017-8046": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.7453,
+"epss_pct": 0.99458,
+"name": "Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-8046.yaml"
+},
+"CVE-2017-8225": {
+"cvss": 9.8,
+"cwe": "CWE-200",
+"epss": 0.35359,
+"epss_pct": 0.98331,
+"name": "GoAhead Camera - Credential Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-8225.yaml"
+},
+"CVE-2017-8229": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-255",
+"epss": 0.73959,
+"epss_pct": 0.99441,
+"name": "Amcrest IP Camera Web Management - Data Exposure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-8229.yaml"
+},
+"CVE-2017-8917": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.99826,
+"epss_pct": 0.99958,
+"name": "Joomla! <3.7.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-8917.yaml"
+},
+"CVE-2017-9140": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.09724,
+"epss_pct": 0.95165,
+"name": "Reflected XSS - Telerik Reporting Module",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9140.yaml"
+},
+"CVE-2017-9288": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04018,
+"epss_pct": 0.8984,
+"name": "WordPress Raygun4WP <=1.8.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9288.yaml"
+},
+"CVE-2017-9416": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.05651,
+"epss_pct": 0.92422,
+"name": "Odoo 8.0/9.0/10.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9416.yaml"
+},
+"CVE-2017-9506": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.71601,
+"epss_pct": 0.99372,
+"name": "Atlassian Jira IconURIServlet - Cross-Site Scripting/Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9506.yaml"
+},
+"CVE-2017-9791": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.98908,
+"epss_pct": 0.99924,
+"name": "Apache Struts2 S2-053 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9791.yaml"
+},
+"CVE-2017-9805": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.99396,
+"epss_pct": 0.99938,
+"name": "Apache Struts2 S2-052 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9805.yaml"
+},
+"CVE-2017-9822": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.94789,
+"epss_pct": 0.99852,
+"name": "DotNetNuke 5.0.0 - 9.3.0 - Cookie Deserialization Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9822.yaml"
+},
+"CVE-2017-9833": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.68464,
+"epss_pct": 0.99282,
+"name": "BOA Web Server 0.94.14 - Arbitrary File Access",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9833.yaml"
+},
+"CVE-2017-9841": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.99999,
+"epss_pct": 0.99994,
+"name": "PHPUnit - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9841.yaml"
+},
+"CVE-2017-9965": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.04612,
+"epss_pct": 0.91019,
+"name": "Schneider Electric Pelco VideoXpert Enterprise 2.0 - Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9965.yaml"
+},
+"CVE-2018-0127": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.77484,
+"epss_pct": 0.99524,
+"name": "Cisco RV132W/RV134W Router - Information Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-0127.yaml"
+},
+"CVE-2018-0171": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.9949,
+"epss_pct": 0.99941,
+"name": "Cisco Smart Install - Configuration Download",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2018/CVE-2018-0171.yaml"
+},
+"CVE-2018-0296": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"epss": 0.99913,
+"epss_pct": 0.99966,
+"name": "Cisco ASA - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-0296.yaml"
+},
+"CVE-2018-1000129": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.24674,
+"epss_pct": 0.97729,
+"name": "Jolokia 1.3.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000129.yaml"
+},
+"CVE-2018-1000130": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.72696,
+"epss_pct": 0.99404,
+"name": "Jolokia Agent - JNDI Code Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000130.yaml"
+},
+"CVE-2018-1000226": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-732",
+"epss": 0.12484,
+"epss_pct": 0.9593,
+"name": "Cobbler - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000226.yaml"
+},
+"CVE-2018-1000533": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.72967,
+"epss_pct": 0.99412,
+"name": "GitList < 0.6.0 Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000533.yaml"
+},
+"CVE-2018-1000600": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-200",
+"epss": 0.90894,
+"epss_pct": 0.99797,
+"name": "Jenkins GitHub Plugin <=1.29.1 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000600.yaml"
+},
+"CVE-2018-1000671": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.03982,
+"epss_pct": 0.89759,
+"name": "Sympa version =>6.2.16 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000671.yaml"
+},
+"CVE-2018-1000856": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01424,
+"epss_pct": 0.71036,
+"name": "DomainMOD 4.11.01 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000856.yaml"
+},
+"CVE-2018-1000861": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.98326,
+"epss_pct": 0.99913,
+"name": "Jenkins - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000861.yaml"
+},
+"CVE-2018-10088": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-119",
+"epss": 0.39715,
+"epss_pct": 0.98516,
+"name": "XiongMai uc-httpd 1.0.0 - Buffer Overflow",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10088.yaml"
+},
+"CVE-2018-10093": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.6819,
+"epss_pct": 0.99274,
+"name": "AudioCodes 420HD - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10093.yaml"
+},
+"CVE-2018-10095": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.86988,
+"epss_pct": 0.99732,
+"name": "Dolibarr <7.0.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10095.yaml"
+},
+"CVE-2018-10141": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03883,
+"epss_pct": 0.8948,
+"name": "Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10141.yaml"
+},
+"CVE-2018-10201": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.44417,
+"epss_pct": 0.98668,
+"name": "Ncomputing vSPace Pro 10 and 11 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10201.yaml"
+},
+"CVE-2018-10230": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02663,
+"epss_pct": 0.84644,
+"name": "Zend Server <9.13 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10230.yaml"
+},
+"CVE-2018-10245": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"name": "AWStats <= 7.5 - Full Path Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10245.yaml"
+},
+"CVE-2018-10383": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01912,
+"epss_pct": 0.78348,
+"name": "Lantronix SecureLinx Spider (SLS) 2.2+ - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10383.yaml"
+},
+"CVE-2018-10562": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99952,
+"epss_pct": 0.99973,
+"name": "Dasan GPON Devices - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10562.yaml"
+},
+"CVE-2018-10735": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.42556,
+"epss_pct": 0.98608,
+"name": "NagiosXI <= 5.4.12 `commandline.php` SQL injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10735.yaml"
+},
+"CVE-2018-10736": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.42556,
+"epss_pct": 0.98609,
+"name": "NagiosXI <= 5.4.12 - SQL injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10736.yaml"
+},
+"CVE-2018-10737": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.42556,
+"epss_pct": 0.98609,
+"name": "NagiosXI <= 5.4.12 logbook.php SQL injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10737.yaml"
+},
+"CVE-2018-10738": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.42556,
+"epss_pct": 0.98608,
+"name": "NagiosXI <= 5.4.12 menuaccess.php - SQL injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10738.yaml"
+},
+"CVE-2018-10822": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.39268,
+"epss_pct": 0.98495,
+"name": "D-Link Routers - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10822.yaml"
+},
+"CVE-2018-10823": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.77699,
+"epss_pct": 0.9953,
+"name": "D-Link Routers - Remote Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10823.yaml"
+},
+"CVE-2018-10942": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.12744,
+"epss_pct": 0.95984,
+"name": "Prestashop AttributeWizardPro Module - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10942.yaml"
+},
+"CVE-2018-10956": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.54967,
+"epss_pct": 0.98951,
+"name": "IPConfigure Orchid Core VMS 2.0.5 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10956.yaml"
+},
+"CVE-2018-11133": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.08743,
+"epss_pct": 0.94771,
+"name": "Quest KACE SMA /common/run_cross_report.php 'fmt' XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11133.yaml"
+},
+"CVE-2018-11138": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.92061,
+"epss_pct": 0.99812,
+"name": "Quest KACE System Management Appliance 8.0.318 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11138.yaml"
+},
+"CVE-2018-11222": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-20",
+"epss": 0.06534,
+"epss_pct": 0.93305,
+"name": "Pandora FMS <=7.0NG.722 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11222.yaml"
+},
+"CVE-2018-11227": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04733,
+"epss_pct": 0.91209,
+"name": "Monstra CMS <=3.0.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11227.yaml"
+},
+"CVE-2018-11231": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.09054,
+"epss_pct": 0.9491,
+"name": "Opencart Divido - Sql Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11231.yaml"
+},
+"CVE-2018-11409": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.98314,
+"epss_pct": 0.99913,
+"name": "Splunk <=7.0.1 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11409.yaml"
+},
+"CVE-2018-11473": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02273,
+"epss_pct": 0.81855,
+"name": "Monstra CMS 3.0.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11473.yaml"
+},
+"CVE-2018-11511": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.11176,
+"epss_pct": 0.95632,
+"name": "ASUSTOR ADM 3.1.0.RFQ3 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11511.yaml"
+},
+"CVE-2018-11686": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.52542,
+"epss_pct": 0.98882,
+"name": "FlexPaper/FlowPaper 2.3.6 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11686.yaml"
+},
+"CVE-2018-11709": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.036,
+"epss_pct": 0.88634,
+"name": "WordPress wpForo Forum <= 1.4.11 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11709.yaml"
+},
+"CVE-2018-11759": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.90647,
+"epss_pct": 0.99794,
+"name": "Apache Tomcat JK Connect <=1.2.44 - Manager Access",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11759.yaml"
+},
+"CVE-2018-11776": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.99991,
+"epss_pct": 0.99985,
+"name": "Apache Struts2 S2-057 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11776.yaml"
+},
+"CVE-2018-11784": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.94494,
+"epss_pct": 0.99846,
+"name": "Apache Tomcat - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11784.yaml"
+},
+"CVE-2018-12031": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.17313,
+"epss_pct": 0.96884,
+"name": "Eaton Intelligent Power Manager 1.6 - Directory Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12031.yaml"
+},
+"CVE-2018-12054": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.38988,
+"epss_pct": 0.98482,
+"name": "Schools Alert Management Script - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12054.yaml"
+},
+"CVE-2018-1207": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.90333,
+"epss_pct": 0.99789,
+"name": "Dell iDRAC7/8 Devices - Remote Code Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1207.yaml"
+},
+"CVE-2018-12095": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05634,
+"epss_pct": 0.92404,
+"name": "OEcms 3.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12095.yaml"
+},
+"CVE-2018-1217": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.45957,
+"epss_pct": 0.98716,
+"name": "Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager - Invalid Access Control",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1217.yaml"
+},
+"CVE-2018-12296": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-732",
+"epss": 0.10905,
+"epss_pct": 0.9555,
+"name": "Seagate NAS OS 4.3.15.1 - Server Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12296.yaml"
+},
+"CVE-2018-12300": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.03127,
+"epss_pct": 0.86938,
+"name": "Seagate NAS OS 4.3.15.1 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12300.yaml"
+},
+"CVE-2018-12455": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.05867,
+"epss_pct": 0.92675,
+"name": "Intelbras NPLUG 1.0.0.14 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12455.yaml"
+},
+"CVE-2018-12613": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.9835,
+"epss_pct": 0.99914,
+"name": "PhpMyAdmin <4.8.2 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12613.yaml"
+},
+"CVE-2018-12634": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-200",
+"epss": 0.56401,
+"epss_pct": 0.98983,
+"name": "CirCarLife Scada <4.3 - System Log Exposure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12634.yaml"
+},
+"CVE-2018-12675": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.0315,
+"epss_pct": 0.8703,
+"name": "SV3C HD Camera L Series - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12675.yaml"
+},
+"CVE-2018-1271": {
+"cvss": 5.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.34505,
+"epss_pct": 0.98298,
+"name": "Spring MVC Framework - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1271.yaml"
+},
+"CVE-2018-1273": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.97002,
+"epss_pct": 0.99886,
+"name": "Spring Data Commons - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1273.yaml"
+},
+"CVE-2018-12909": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.16118,
+"epss_pct": 0.9669,
+"name": "Webgrind <= 1.5 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12909.yaml"
+},
+"CVE-2018-12998": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.99293,
+"epss_pct": 0.99936,
+"name": "Zoho manageengine - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12998.yaml"
+},
+"CVE-2018-13317": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00991,
+"epss_pct": 0.60093,
+"name": "TOTOLINK A3002RU 1.0.8 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-13317.yaml"
+},
+"CVE-2018-1335": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.93972,
+"epss_pct": 0.99838,
+"name": "Apache Tika < 1.1.8 - Header Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1335.yaml"
+},
+"CVE-2018-13379": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.99999,
+"epss_pct": 0.99994,
+"name": "Fortinet FortiOS - Credentials Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-13379.yaml"
+},
+"CVE-2018-13380": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.62474,
+"epss_pct": 0.99123,
+"name": "Fortinet FortiOS - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-13380.yaml"
+},
+"CVE-2018-13980": {
+"cvss": 5.5,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.06902,
+"epss_pct": 0.93604,
+"name": "Zeta Producer Desktop CMS <14.2.1 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-13980.yaml"
+},
+"CVE-2018-14013": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.07436,
+"epss_pct": 0.94006,
+"name": "Synacor Zimbra Collaboration Suite Collaboration <8.8.11 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14013.yaml"
+},
+"CVE-2018-14064": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.3757,
+"epss_pct": 0.98426,
+"name": "VelotiSmart Wifi - Directory Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14064.yaml"
+},
+"CVE-2018-14474": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02257,
+"epss_pct": 0.81733,
+"name": "Orange Forum 1.4.0 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14474.yaml"
+},
+"CVE-2018-14574": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.2549,
+"epss_pct": 0.97799,
+"name": "Django - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14574.yaml"
+},
+"CVE-2018-14728": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.76511,
+"epss_pct": 0.99502,
+"name": "Responsive filemanager 9.13.1 Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14728.yaml"
+},
+"CVE-2018-14912": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.9288,
+"epss_pct": 0.99823,
+"name": "cgit < 1.2.1 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14912.yaml"
+},
+"CVE-2018-14916": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
+"cwe": "CWE-732",
+"epss": 0.17195,
+"epss_pct": 0.96869,
+"name": "Loytec LGATE-902 <6.4.2 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14916.yaml"
+},
+"CVE-2018-14918": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.17982,
+"epss_pct": 0.96973,
+"name": "LOYTEC LGATE-902 6.3.2 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14918.yaml"
+},
+"CVE-2018-14931": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02398,
+"epss_pct": 0.82841,
+"name": "Polarisft Intellect Core Banking Software Version 9.7.1 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14931.yaml"
+},
+"CVE-2018-14933": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.94884,
+"epss_pct": 0.99853,
+"name": "NUUO NVRmini - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14933.yaml"
+},
+"CVE-2018-15138": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.12851,
+"epss_pct": 0.96011,
+"name": "LG-Ericsson iPECS NMS 30M - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15138.yaml"
+},
+"CVE-2018-15517": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
+"cwe": "CWE-918",
+"epss": 0.44101,
+"epss_pct": 0.98659,
+"name": "D-Link Central WifiManager - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15517.yaml"
+},
+"CVE-2018-15535": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.45242,
+"epss_pct": 0.98695,
+"name": "Responsive FileManager <9.13.4 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15535.yaml"
+},
+"CVE-2018-15745": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.97709,
+"epss_pct": 0.999,
+"name": "Argus Surveillance DVR 4.0.0.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15745.yaml"
+},
+"CVE-2018-15811": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-326",
+"epss": 0.74048,
+"epss_pct": 0.99444,
+"name": "DotNetNuke 9.2 - 9.2.1 - Weak Encryption & Cookie Deserialization",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15811.yaml"
+},
+"CVE-2018-15917": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06483,
+"epss_pct": 0.93261,
+"name": "Jorani Leave Management System 0.6.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15917.yaml"
+},
+"CVE-2018-15961": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.9995,
+"epss_pct": 0.99972,
+"name": "Adobe ColdFusion - Unrestricted File Upload Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15961.yaml"
+},
+"CVE-2018-16059": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.29816,
+"epss_pct": 0.98067,
+"name": "WirelessHART Fieldgate SWG70 3.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16059.yaml"
+},
+"CVE-2018-16133": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.39279,
+"epss_pct": 0.98495,
+"name": "Cybrotech CyBroHttpServer 1.0.3 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16133.yaml"
+},
+"CVE-2018-16139": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02285,
+"epss_pct": 0.8195,
+"name": "BIBLIOsoft BIBLIOpac 2008 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16139.yaml"
+},
+"CVE-2018-16159": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.49918,
+"epss_pct": 0.98814,
+"name": "WordPress Gift Voucher <4.1.8 - Blind SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16159.yaml"
+},
+"CVE-2018-16167": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.74745,
+"epss_pct": 0.99465,
+"name": "LogonTracer <=1.2.0 - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16167.yaml"
+},
+"CVE-2018-16283": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.6307,
+"epss_pct": 0.99139,
+"name": "WordPress Plugin Wechat Broadcast 1.2.0 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16283.yaml"
+},
+"CVE-2018-16288": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.35828,
+"epss_pct": 0.98351,
+"name": "LG SuperSign EZ CMS 2.5 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16288.yaml"
+},
+"CVE-2018-16299": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.44358,
+"epss_pct": 0.98667,
+"name": "WordPress Localize My Post 1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16299.yaml"
+},
+"CVE-2018-16363": {
+"name": "WordPress File Manager < 3.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16363.yaml"
+},
+"CVE-2018-16668": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.09512,
+"epss_pct": 0.95089,
+"name": "CirCarLife <4.3 - Improper Authentication",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16668.yaml"
+},
+"CVE-2018-16670": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.24568,
+"epss_pct": 0.97719,
+"name": "CirCarLife <4.3 - Improper Authentication",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16670.yaml"
+},
+"CVE-2018-16671": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.08851,
+"epss_pct": 0.94828,
+"name": "CirCarLife <4.3 - Improper Authentication",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16671.yaml"
+},
+"CVE-2018-16716": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-22",
+"epss": 0.0857,
+"epss_pct": 0.94676,
+"name": "NCBI ToolBox - Directory Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16716.yaml"
+},
+"CVE-2018-16761": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02201,
+"epss_pct": 0.81283,
+"name": "Eventum <3.4.0 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16761.yaml"
+},
+"CVE-2018-16763": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.82937,
+"epss_pct": 0.99649,
+"name": "FUEL CMS 1.4.1 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16763.yaml"
+},
+"CVE-2018-16836": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.61437,
+"epss_pct": 0.99101,
+"name": "Rubedo CMS <=3.4.0 - Directory Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16836.yaml"
+},
+"CVE-2018-16979": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-113",
+"epss": 0.0302,
+"epss_pct": 0.86498,
+"name": "Monstra CMS 3.0.4 - HTTP Header Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16979.yaml"
+},
+"CVE-2018-17082": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04103,
+"epss_pct": 0.90031,
+"name": "Apache2 - Transfer-Encoding Chunked XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17082.yaml"
+},
+"CVE-2018-17153": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.86586,
+"epss_pct": 0.99724,
+"name": "Western Digital MyCloud NAS - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17153.yaml"
+},
+"CVE-2018-17173": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.56237,
+"epss_pct": 0.98977,
+"name": "LG Supersign EZ CMS - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17173.yaml"
+},
+"CVE-2018-17207": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.60086,
+"epss_pct": 0.99067,
+"name": "WordPress Duplicator Plugin < 1.2.42 - Arbitrary Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17207.yaml"
+},
+"CVE-2018-17246": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.82251,
+"epss_pct": 0.99633,
+"name": "Kibana - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17246.yaml"
+},
+"CVE-2018-17254": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.82976,
+"epss_pct": 0.9965,
+"name": "Joomla! JCK Editor SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17254.yaml"
+},
+"CVE-2018-17283": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.66347,
+"epss_pct": 0.99222,
+"name": "Zoho ManageEngine OpManager - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17283.yaml"
+},
+"CVE-2018-17422": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.03717,
+"epss_pct": 0.88992,
+"name": "DotCMS < 5.0.2 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17422.yaml"
+},
+"CVE-2018-17431": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.83912,
+"epss_pct": 0.99672,
+"name": "Comodo Unified Threat Management Web Console - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17431.yaml"
+},
+"CVE-2018-18069": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.13207,
+"epss_pct": 0.96094,
+"name": "WordPress sitepress-multilingual-cms 3.6.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18069.yaml"
+},
+"CVE-2018-18264": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.70372,
+"epss_pct": 0.99336,
+"name": "Kubernetes Dashboard <1.10.1 - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18264.yaml"
+},
+"CVE-2018-18323": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.70736,
+"epss_pct": 0.99348,
+"name": "Centos Web Panel 0.9.8.480 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18323.yaml"
+},
+"CVE-2018-18325": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-326",
+"epss": 0.74048,
+"epss_pct": 0.99445,
+"name": "DotNetNuke 9.2 - 9.2.2 - Weak Encryption & Cookie Deserialization",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18325.yaml"
+},
+"CVE-2018-18570": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02465,
+"epss_pct": 0.83334,
+"name": "Planon <Live Build 41 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18570.yaml"
+},
+"CVE-2018-18608": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02754,
+"epss_pct": 0.85191,
+"name": "DedeCMS 5.7 SP2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18608.yaml"
+},
+"CVE-2018-18775": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.07905,
+"epss_pct": 0.94297,
+"name": "Microstrategy Web 7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18775.yaml"
+},
+"CVE-2018-18777": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.22768,
+"epss_pct": 0.97562,
+"name": "Microstrategy Web 7 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18777.yaml"
+},
+"CVE-2018-18778": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.70791,
+"epss_pct": 0.9935,
+"name": "ACME mini_httpd <1.30 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18778.yaml"
+},
+"CVE-2018-18809": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.79064,
+"epss_pct": 0.99567,
+"name": "TIBCO JasperReports Library - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18809.yaml"
+},
+"CVE-2018-18925": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-384",
+"epss": 0.31133,
+"epss_pct": 0.98138,
+"name": "Gogs (Go Git Service) 0.11.66 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18925.yaml"
+},
+"CVE-2018-19127": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.20766,
+"epss_pct": 0.97362,
+"name": "PHPCMS 2008 - Remote Code Execution via Template Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19127.yaml"
+},
+"CVE-2018-19136": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06623,
+"epss_pct": 0.93377,
+"name": "DomainMOD 4.11.01 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19136.yaml"
+},
+"CVE-2018-19137": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02878,
+"epss_pct": 0.85858,
+"name": "DomainMOD 4.11.01 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19137.yaml"
+},
+"CVE-2018-19207": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-425",
+"epss": 0.88065,
+"epss_pct": 0.99754,
+"name": "WP GDPR Compliance < 1.4.3 - Unauthenticated Call Any Action or Update Any Option",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19207.yaml"
+},
+"CVE-2018-19276": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.98714,
+"epss_pct": 0.99922,
+"name": "OpenMRS Platform < 2.24.0 - Insecure Object Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19276.yaml"
+},
+"CVE-2018-19287": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.08863,
+"epss_pct": 0.94834,
+"name": "WordPress Ninja Forms <3.3.18 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19287.yaml"
+},
+"CVE-2018-19326": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.09759,
+"epss_pct": 0.95179,
+"name": "Zyxel VMG1312-B10D 5.13AAXA.8 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19326.yaml"
+},
+"CVE-2018-19365": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
+"cwe": "CWE-22",
+"epss": 0.22292,
+"epss_pct": 0.97509,
+"name": "Wowza Streaming Engine Manager 4.7.4.01 - Directory Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19365.yaml"
+},
+"CVE-2018-19386": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.09044,
+"epss_pct": 0.94907,
+"name": "SolarWinds Database Performance Analyzer 11.1.457 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19386.yaml"
+},
+"CVE-2018-19410": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.97939,
+"epss_pct": 0.99905,
+"name": "PRTG Network Monitor - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19410.yaml"
+},
+"CVE-2018-19439": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.20457,
+"epss_pct": 0.97315,
+"name": "Oracle Secure Global Desktop Administration Console 4.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19439.yaml"
+},
+"CVE-2018-19458": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.32885,
+"epss_pct": 0.98231,
+"name": "PHP Proxy 3.0.3 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19458.yaml"
+},
+"CVE-2018-19518": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-88",
+"epss": 0.9523,
+"epss_pct": 0.99859,
+"name": "PHP imap - Remote Command Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2018/CVE-2018-19518.yaml"
+},
+"CVE-2018-19749": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03316,
+"epss_pct": 0.87708,
+"name": "DomainMOD 4.11.01 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19749.yaml"
+},
+"CVE-2018-19751": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03316,
+"epss_pct": 0.87707,
+"name": "DomainMOD 4.11.01 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19751.yaml"
+},
+"CVE-2018-19752": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03316,
+"epss_pct": 0.87708,
+"name": "DomainMOD 4.11.01 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19752.yaml"
+},
+"CVE-2018-19753": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.16564,
+"epss_pct": 0.96777,
+"name": "Tarantella Enterprise <3.11 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19753.yaml"
+},
+"CVE-2018-19877": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.18563,
+"epss_pct": 0.97045,
+"name": "Adiscon LogAnalyzer <4.1.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19877.yaml"
+},
+"CVE-2018-19892": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01514,
+"epss_pct": 0.72701,
+"name": "DomainMOD 4.11.01 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19892.yaml"
+},
+"CVE-2018-19914": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03316,
+"epss_pct": 0.87707,
+"name": "DomainMOD 4.11.01 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19914.yaml"
+},
+"CVE-2018-19915": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04008,
+"epss_pct": 0.89822,
+"name": "DomainMOD <=4.11.01 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-19915.yaml"
+},
+"CVE-2018-20009": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04428,
+"epss_pct": 0.9068,
+"name": "DomainMOD 4.11.01 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20009.yaml"
+},
+"CVE-2018-20010": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04428,
+"epss_pct": 0.9068,
+"name": "DomainMOD 4.11.01 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20010.yaml"
+},
+"CVE-2018-20011": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04428,
+"epss_pct": 0.9068,
+"name": "DomainMOD 4.11.01 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20011.yaml"
+},
+"CVE-2018-20062": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.9953,
+"epss_pct": 0.99943,
+"name": "ThinkPHP 5.0.23 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20062.yaml"
+},
+"CVE-2018-20462": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0397,
+"epss_pct": 0.89731,
+"name": "WordPress JSmol2WP <=1.07 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20462.yaml"
+},
+"CVE-2018-20463": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.13187,
+"epss_pct": 0.96089,
+"name": "WordPress JSmol2WP <=1.07 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20463.yaml"
+},
+"CVE-2018-20470": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.4606,
+"epss_pct": 0.98719,
+"name": "Tyto Sahi pro 7.x/8.x - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20470.yaml"
+},
+"CVE-2018-20526": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.73056,
+"epss_pct": 0.99414,
+"name": "Roxy Fileman 1.4.5 - Unrestricted File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20526.yaml"
+},
+"CVE-2018-20608": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.12063,
+"epss_pct": 0.95842,
+"name": "Imcat 4.4 - Phpinfo Configuration",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20608.yaml"
+},
+"CVE-2018-20824": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.37986,
+"epss_pct": 0.98443,
+"name": "Atlassian Jira WallboardServlet <7.13.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20824.yaml"
+},
+"CVE-2018-20985": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.07671,
+"epss_pct": 0.94156,
+"name": "WordPress Payeezy Pay <=2.97 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-20985.yaml"
+},
+"CVE-2018-2392": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"cwe": "CWE-611",
+"epss": 0.41051,
+"epss_pct": 0.98559,
+"name": "SAP Internet Graphics Server (IGS) - XML External Entity Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-2392.yaml"
+},
+"CVE-2018-25031": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
+"cwe": "CWE-20",
+"epss": 0.42326,
+"epss_pct": 0.98601,
+"name": "Swagger UI < 3.38.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2018/CVE-2018-25031.yaml"
+},
+"CVE-2018-25114": {
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+"cwe": "CWE-94",
+"epss": 0.0282,
+"epss_pct": 0.85575,
+"name": "osCommerce 2.3.4.1 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-25114.yaml"
+},
+"CVE-2018-2628": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.99448,
+"epss_pct": 0.9994,
+"name": "Oracle WebLogic Server Deserialization - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2018/CVE-2018-2628.yaml"
+},
+"CVE-2018-2791": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
+"epss": 0.38811,
+"epss_pct": 0.98478,
+"name": "Oracle Fusion Middleware WebCenter Sites - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-2791.yaml"
+},
+"CVE-2018-2893": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.71196,
+"epss_pct": 0.99362,
+"name": "Oracle WebLogic Server - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2018/CVE-2018-2893.yaml"
+},
+"CVE-2018-2894": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.50224,
+"epss_pct": 0.98823,
+"name": "Oracle WebLogic Server - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-2894.yaml"
+},
+"CVE-2018-3167": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.17118,
+"epss_pct": 0.96858,
+"name": "Oracle E-Business Suite - Blind SSRF",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-3167.yaml"
+},
+"CVE-2018-3238": {
+"cvss": 6.9,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N",
+"epss": 0.04579,
+"epss_pct": 0.90963,
+"name": "Oracle Fusion Middleware WebCenter Sites 11.1.1.8.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-3238.yaml"
+},
+"CVE-2018-3714": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.08632,
+"epss_pct": 0.94709,
+"name": "node-srv - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-3714.yaml"
+},
+"CVE-2018-3760": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.26717,
+"epss_pct": 0.97879,
+"name": "Ruby On Rails - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-3760.yaml"
+},
+"CVE-2018-3810": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.91141,
+"epss_pct": 0.998,
+"name": "Oturia WordPress Smart Google Code Inserter <3.5 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-3810.yaml"
+},
+"CVE-2018-5230": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.37611,
+"epss_pct": 0.98428,
+"name": "Atlassian Jira Confluence - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-5230.yaml"
+},
+"CVE-2018-5233": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03286,
+"epss_pct": 0.87593,
+"name": "Grav CMS <1.3.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-5233.yaml"
+},
+"CVE-2018-5316": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03685,
+"epss_pct": 0.88899,
+"name": "WordPress SagePay Server Gateway for WooCommerce <1.0.9 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-5316.yaml"
+},
+"CVE-2018-5715": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06914,
+"epss_pct": 0.93615,
+"name": "SugarCRM 3.5.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-5715.yaml"
+},
+"CVE-2018-6008": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.36823,
+"epss_pct": 0.98392,
+"name": "Joomla! Jtag Members Directory 5.3.7 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6008.yaml"
+},
+"CVE-2018-6184": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.0906,
+"epss_pct": 0.94913,
+"name": "Zeit Next.js < 4.2.3 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6184.yaml"
+},
+"CVE-2018-6200": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.03474,
+"epss_pct": 0.88255,
+"name": "vBulletin - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6200.yaml"
+},
+"CVE-2018-6530": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.96682,
+"epss_pct": 0.99881,
+"name": "D-Link - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6530.yaml"
+},
+"CVE-2018-6605": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.57702,
+"epss_pct": 0.99013,
+"name": "Joomla! Component Zh BaiduMap 3.0.0.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6605.yaml"
+},
+"CVE-2018-6882": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.2542,
+"epss_pct": 0.97794,
+"name": "Zimbra Collaboration Suite - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6882.yaml"
+},
+"CVE-2018-6910": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-668",
+"epss": 0.18838,
+"epss_pct": 0.97077,
+"name": "DedeCMS 5.7 - Path Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6910.yaml"
+},
+"CVE-2018-6961": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.86252,
+"epss_pct": 0.99718,
+"name": "VMware NSX SD-WAN Edge - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-6961.yaml"
+},
+"CVE-2018-7192": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02041,
+"epss_pct": 0.79786,
+"name": "osTicket < 1.10.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7192.yaml"
+},
+"CVE-2018-7193": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02444,
+"epss_pct": 0.83172,
+"name": "osTicket < 1.10.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7193.yaml"
+},
+"CVE-2018-7196": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02444,
+"epss_pct": 0.83172,
+"name": "osTicket < 1.10.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7196.yaml"
+},
+"CVE-2018-7251": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-200",
+"epss": 0.7183,
+"epss_pct": 0.99378,
+"name": "Anchor CMS 0.12.3 - Error Log Exposure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7251.yaml"
+},
+"CVE-2018-7282": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.10095,
+"epss_pct": 0.95298,
+"name": "TITool PrintMonitor - Blind SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7282.yaml"
+},
+"CVE-2018-7314": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.57752,
+"epss_pct": 0.99014,
+"name": "Joomla! Component PrayerCenter 3.0.2 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7314.yaml"
+},
+"CVE-2018-7422": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.6225,
+"epss_pct": 0.99119,
+"name": "WordPress Site Editor <=1.1.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7422.yaml"
+},
+"CVE-2018-7467": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.10169,
+"epss_pct": 0.9532,
+"name": "AxxonSoft Axxon Next - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7467.yaml"
+},
+"CVE-2018-7490": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.69423,
+"epss_pct": 0.99307,
+"name": "uWSGI PHP Plugin Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7490.yaml"
+},
+"CVE-2018-7600": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.99991,
+"epss_pct": 0.99985,
+"name": "Drupal - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7600.yaml"
+},
+"CVE-2018-7602": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.99236,
+"epss_pct": 0.99935,
+"name": "Drupal - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7602.yaml"
+},
+"CVE-2018-7653": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.07854,
+"epss_pct": 0.94265,
+"name": "YzmCMS v3.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7653.yaml"
+},
+"CVE-2018-7662": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.47085,
+"epss_pct": 0.98746,
+"name": "CouchCMS <= 2.0 - Path Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7662.yaml"
+},
+"CVE-2018-7700": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-352",
+"epss": 0.74519,
+"epss_pct": 0.99457,
+"name": "DedeCMS 5.7SP2 - Cross-Site Request Forgery/Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7700.yaml"
+},
+"CVE-2018-7719": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.47514,
+"epss_pct": 0.98756,
+"name": "Acrolinx Server <5.2.5 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7719.yaml"
+},
+"CVE-2018-7765": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02917,
+"epss_pct": 0.86048,
+"name": "Schneider Electric U.motion Builder - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7765.yaml"
+},
+"CVE-2018-7841": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.72675,
+"epss_pct": 0.99403,
+"name": "Schneider Electric U.motion Builder - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-7841.yaml"
+},
+"CVE-2018-8006": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.57227,
+"epss_pct": 0.99002,
+"name": "Apache ActiveMQ <=5.15.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8006.yaml"
+},
+"CVE-2018-8011": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"cwe": "CWE-119",
+"epss": 0.56037,
+"epss_pct": 0.98973,
+"name": "Apache HTTP Server - NULL Pointer Dereference",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2018/CVE-2018-8011.yaml"
+},
+"CVE-2018-8024": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05251,
+"epss_pct": 0.91954,
+"name": "Apache Spark UI - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8024.yaml"
+},
+"CVE-2018-8033": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.25743,
+"epss_pct": 0.97816,
+"name": "Apache OFBiz - XML External Entity Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8033.yaml"
+},
+"CVE-2018-8715": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.2279,
+"epss_pct": 0.97563,
+"name": "AppWeb - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8715.yaml"
+},
+"CVE-2018-8719": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-532",
+"epss": 0.15905,
+"epss_pct": 0.96651,
+"name": "WordPress WP Security Audit Log 3.1.1 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8719.yaml"
+},
+"CVE-2018-8727": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.08005,
+"epss_pct": 0.94348,
+"name": "Mirasys DVMS Workstation <=5.12.6 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8727.yaml"
+},
+"CVE-2018-8770": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.59208,
+"epss_pct": 0.99047,
+"name": "Cobub Razor 0.8.0 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8770.yaml"
+},
+"CVE-2018-8823": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.51043,
+"epss_pct": 0.98846,
+"name": "PrestaShop Responsive Mega Menu Module - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-8823.yaml"
+},
+"CVE-2018-9118": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.46931,
+"epss_pct": 0.98741,
+"name": "WordPress 99 Robots WP Background Takeover Advertisements <=4.1.4 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-9118.yaml"
+},
+"CVE-2018-9161": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.57335,
+"epss_pct": 0.99005,
+"name": "PrismaWEB - Credentials Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-9161.yaml"
+},
+"CVE-2018-9205": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.55714,
+"epss_pct": 0.98966,
+"name": "Drupal avatar_uploader v7.x-1.0-beta8 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-9205.yaml"
+},
+"CVE-2018-9206": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.97255,
+"epss_pct": 0.9989,
+"name": "Blueimp jQuery-File-Upload v9.22.0 - Unrestricted File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-9206.yaml"
+},
+"CVE-2018-9845": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-178",
+"epss": 0.13132,
+"epss_pct": 0.96081,
+"name": "Etherpad Lite <1.6.4 - Admin Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-9845.yaml"
+},
+"CVE-2018-9995": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.82608,
+"epss_pct": 0.99642,
+"name": "TBK DVR4104/DVR4216 Devices - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-9995.yaml"
+},
+"CVE-2019-0192": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.77508,
+"epss_pct": 0.99524,
+"name": "Apache Solr - Deserialization of Untrusted Data",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-0192.yaml"
+},
+"CVE-2019-0193": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.83547,
+"epss_pct": 0.99663,
+"name": "Apache Solr DataImportHandler <8.2.0 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-0193.yaml"
+},
+"CVE-2019-0221": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.45571,
+"epss_pct": 0.98704,
+"name": "Apache Tomcat - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-0221.yaml"
+},
+"CVE-2019-0230": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-1321",
+"epss": 0.97112,
+"epss_pct": 0.99887,
+"name": "Apache Struts <=2.5.20 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-0230.yaml"
+},
+"CVE-2019-0232": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99652,
+"epss_pct": 0.99948,
+"name": "Apache Tomcat `CGIServlet` enableCmdLineArguments - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-0232.yaml"
+},
+"CVE-2019-0604": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.99913,
+"epss_pct": 0.99966,
+"name": "Microsoft SharePoint - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2019/CVE-2019-0604.yaml"
+},
+"CVE-2019-1003000": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.98375,
+"epss_pct": 0.99914,
+"name": "Jenkins Script Security Plugin <=1.49 - Sandbox Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1003000.yaml"
+},
+"CVE-2019-1003030": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-693",
+"epss": 0.96868,
+"epss_pct": 0.99884,
+"name": "Jenkins Pipeline Groovy Plugin <=2.63 - Insecure Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1003030.yaml"
+},
+"CVE-2019-10068": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.95074,
+"epss_pct": 0.99855,
+"name": "Kentico CMS Insecure Deserialization Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10068.yaml"
+},
+"CVE-2019-10092": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.81466,
+"epss_pct": 0.99612,
+"name": "Apache HTTP Server <=2.4.39 - HTML Injection/Partial Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10092.yaml"
+},
+"CVE-2019-10098": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.73981,
+"epss_pct": 0.99442,
+"name": "Apache HTTP server v2.4.0 to v2.4.39 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10098.yaml"
+},
+"CVE-2019-1010287": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.043,
+"epss_pct": 0.9044,
+"name": "Timesheet Next Gen <=1.5.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1010287.yaml"
+},
+"CVE-2019-1010290": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.04059,
+"epss_pct": 0.89929,
+"name": "Babel - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1010290.yaml"
+},
+"CVE-2019-10232": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.23211,
+"epss_pct": 0.97604,
+"name": "Teclib GLPI <= 9.3.3 - Unauthenticated SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10232.yaml"
+},
+"CVE-2019-10405": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.65753,
+"epss_pct": 0.99209,
+"name": "Jenkins <=2.196 - Cookie Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10405.yaml"
+},
+"CVE-2019-10475": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.57735,
+"epss_pct": 0.99014,
+"name": "Jenkins build-metrics 1.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10475.yaml"
+},
+"CVE-2019-10647": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.06643,
+"epss_pct": 0.93389,
+"name": "ZZZCMS ZZZPHP 1.6.3 \u2013 Remote PHP Code Execution (RCE)",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2019-10647.yaml"
+},
+"CVE-2019-10692": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.78699,
+"epss_pct": 0.99557,
+"name": "WordPress Google Maps <7.11.18 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10692.yaml"
+},
+"CVE-2019-10717": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
+"cwe": "CWE-22",
+"epss": 0.05399,
+"epss_pct": 0.92115,
+"name": "BlogEngine.NET 3.3.7.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10717.yaml"
+},
+"CVE-2019-10758": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.84845,
+"epss_pct": 0.99694,
+"name": "mongo-express Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-10758.yaml"
+},
+"CVE-2019-11013": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.23978,
+"epss_pct": 0.97672,
+"name": "Nimble Streamer <=3.5.4-9 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11013.yaml"
+},
+"CVE-2019-11043": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-119",
+"epss": 0.9978,
+"epss_pct": 0.99955,
+"name": "PHP-FPM Path Info Buffer Underflow - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11043.yaml"
+},
+"CVE-2019-11248": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
+"epss": 0.7506,
+"epss_pct": 0.99471,
+"name": "Debug Endpoint pprof - Exposure Detection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11248.yaml"
+},
+"CVE-2019-11253": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"cwe": "CWE-400",
+"epss": 0.25939,
+"epss_pct": 0.97831,
+"name": "Kubernetes API Server - YAML Parsing DoS (Billion Laughs)",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11253.yaml"
+},
+"CVE-2019-11370": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03977,
+"epss_pct": 0.89748,
+"name": "Carel pCOWeb <B1.2.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11370.yaml"
+},
+"CVE-2019-11507": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04055,
+"epss_pct": 0.89924,
+"name": "Pulse Secure Pulse Connect Secure - Cross-Site Scripting (Reflected)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11507.yaml"
+},
+"CVE-2019-11510": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.99999,
+"epss_pct": 0.99995,
+"name": "Pulse Connect Secure SSL VPN Arbitrary File Read",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11510.yaml"
+},
+"CVE-2019-11580": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.95355,
+"epss_pct": 0.99862,
+"name": "Atlassian Crowd and Crowd Data Center - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11580.yaml"
+},
+"CVE-2019-11581": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.84621,
+"epss_pct": 0.99687,
+"name": "Atlassian Jira Server-Side Template Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11581.yaml"
+},
+"CVE-2019-11869": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05331,
+"epss_pct": 0.92037,
+"name": "WordPress Yuzo <5.12.94 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11869.yaml"
+},
+"CVE-2019-11886": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-352",
+"epss": 0.0189,
+"epss_pct": 0.78084,
+"name": "Yellow Pencil Visual Theme Customizer < 7.2.1 - Privilege Escalation",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-11886.yaml"
+},
+"CVE-2019-12276": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.53705,
+"epss_pct": 0.98919,
+"name": "GrandNode 4.40 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12276.yaml"
+},
+"CVE-2019-12314": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.8422,
+"epss_pct": 0.99678,
+"name": "Deltek Maconomy 2.2.5 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12314.yaml"
+},
+"CVE-2019-12461": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.09916,
+"epss_pct": 0.95237,
+"name": "WebPort 1.19.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12461.yaml"
+},
+"CVE-2019-12581": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.064,
+"epss_pct": 0.93178,
+"name": "Zyxel ZyWal/USG/UAG Devices - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12581.yaml"
+},
+"CVE-2019-12583": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
+"cwe": "CWE-425",
+"epss": 0.43926,
+"epss_pct": 0.98655,
+"name": "Zyxel ZyWall UAG/USG - Account Creation Access",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12583.yaml"
+},
+"CVE-2019-12593": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.40965,
+"epss_pct": 0.98555,
+"name": "IceWarp Mail Server <=10.4.4 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12593.yaml"
+},
+"CVE-2019-12725": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.89849,
+"epss_pct": 0.9978,
+"name": "Zeroshell 3.9.0 - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12725.yaml"
+},
+"CVE-2019-12935": {
+"cvss": 7.4,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
+"cwe": "CWE-79",
+"epss": 0.02734,
+"epss_pct": 0.85062,
+"name": "Shopware < 5.5.8 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12935.yaml"
+},
+"CVE-2019-12962": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.09052,
+"epss_pct": 0.94911,
+"name": "LiveZilla Server 8.0.1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12962.yaml"
+},
+"CVE-2019-12985": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.39544,
+"epss_pct": 0.98507,
+"name": "Citrix SD-WAN Center - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12985.yaml"
+},
+"CVE-2019-12986": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.39544,
+"epss_pct": 0.98507,
+"name": "Citrix SD-WAN Center - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12986.yaml"
+},
+"CVE-2019-12987": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.42551,
+"epss_pct": 0.98607,
+"name": "Citrix SD-WAN Center - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12987.yaml"
+},
+"CVE-2019-12988": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.42551,
+"epss_pct": 0.98607,
+"name": "Citrix SD-WAN Center - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12988.yaml"
+},
+"CVE-2019-12989": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.94131,
+"epss_pct": 0.9984,
+"name": "Citrix SD-WAN and NetScaler SD-WAN - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12989.yaml"
+},
+"CVE-2019-12990": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.39335,
+"epss_pct": 0.98498,
+"name": "Citrix SD-WAN Center - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12990.yaml"
+},
+"CVE-2019-13101": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.67091,
+"epss_pct": 0.99244,
+"name": "D-Link DIR-600M - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-13101.yaml"
+},
+"CVE-2019-13372": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.8249,
+"epss_pct": 0.9964,
+"name": "D-Link Central WiFi Manager CWM(100) - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-13372.yaml"
+},
+"CVE-2019-13392": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04019,
+"epss_pct": 0.89841,
+"name": "MindPalette NateMail 3.0.15 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-13392.yaml"
+},
+"CVE-2019-13396": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.62572,
+"epss_pct": 0.99126,
+"name": "FlightPath - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-13396.yaml"
+},
+"CVE-2019-13462": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-89",
+"epss": 0.1131,
+"epss_pct": 0.95664,
+"name": "Lansweeper Unauthenticated SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-13462.yaml"
+},
+"CVE-2019-13608": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-611",
+"epss": 0.30041,
+"epss_pct": 0.98078,
+"name": "Citrix StoreFront Server - XML External Entity",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-13608.yaml"
+},
+"CVE-2019-14205": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.63375,
+"epss_pct": 0.99148,
+"name": "WordPress Nevma Adaptive Images <0.6.67 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14205.yaml"
+},
+"CVE-2019-14206": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-22",
+"epss": 0.04728,
+"epss_pct": 0.91202,
+"name": "Nevma Adaptive Images - Arbitrary File Deletion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14206.yaml"
+},
+"CVE-2019-14223": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.04474,
+"epss_pct": 0.90768,
+"name": "Alfresco Share - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14223.yaml"
+},
+"CVE-2019-14251": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.07849,
+"epss_pct": 0.94261,
+"name": "T24 Web Server - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14251.yaml"
+},
+"CVE-2019-14287": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-755",
+"epss": 0.63764,
+"epss_pct": 0.9916,
+"name": "Sudo <= 1.8.27 - Security Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2019/CVE-2019-14287.yaml"
+},
+"CVE-2019-14312": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.20586,
+"epss_pct": 0.97334,
+"name": "Aptana Jaxer 1.0.3.4547 - Local File inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14312.yaml"
+},
+"CVE-2019-14322": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.55803,
+"epss_pct": 0.98968,
+"name": "Pallets Werkzeug <0.15.5 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14322.yaml"
+},
+"CVE-2019-14470": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.82962,
+"epss_pct": 0.99649,
+"name": "WordPress UserPro 4.9.32 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14470.yaml"
+},
+"CVE-2019-14530": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.65529,
+"epss_pct": 0.99205,
+"name": "OpenEMR <5.0.2 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14530.yaml"
+},
+"CVE-2019-14696": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.15682,
+"epss_pct": 0.96605,
+"name": "Open-School 3.0/Community Edition 2.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14696.yaml"
+},
+"CVE-2019-14750": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.10902,
+"epss_pct": 0.95549,
+"name": "osTicket < 1.12.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14750.yaml"
+},
+"CVE-2019-14789": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01611,
+"epss_pct": 0.74222,
+"name": "Custom 404 Pro < 3.2.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14789.yaml"
+},
+"CVE-2019-14793": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.01706,
+"epss_pct": 0.75656,
+"name": "Meta Box <= 4.16.2 - Arbitrary File Deletion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14793.yaml"
+},
+"CVE-2019-14950": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01211,
+"epss_pct": 0.66314,
+"name": "WP Live Chat Support <= 8.0.27 \u2014 Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14950.yaml"
+},
+"CVE-2019-14974": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.28433,
+"epss_pct": 0.97986,
+"name": "SugarCRM Enterprise 9.0.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14974.yaml"
+},
+"CVE-2019-15043": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"cwe": "CWE-306",
+"epss": 0.63388,
+"epss_pct": 0.99148,
+"name": "Grafana - Improper Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15043.yaml"
+},
+"CVE-2019-15107": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99766,
+"epss_pct": 0.99954,
+"name": "Webmin <= 1.920 - Unauthenticated Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15107.yaml"
+},
+"CVE-2019-15501": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.07416,
+"epss_pct": 0.93998,
+"name": "L-Soft LISTSERV <16.5-2018a - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15501.yaml"
+},
+"CVE-2019-15642": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.34798,
+"epss_pct": 0.98311,
+"name": "Webmin < 1.920 - Authenticated Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15642.yaml"
+},
+"CVE-2019-15713": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02192,
+"epss_pct": 0.81187,
+"name": "WordPress My Calendar <= 3.1.9 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15713.yaml"
+},
+"CVE-2019-15774": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01731,
+"epss_pct": 0.75993,
+"name": "ND Booking < 2.5 - Unauthenticated Options Change",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15774.yaml"
+},
+"CVE-2019-15811": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0699,
+"epss_pct": 0.9368,
+"name": "DomainMOD <=4.13.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15811.yaml"
+},
+"CVE-2019-15823": {
+"name": "WPS Hide Login <= 1.5.2.2  - Login Page Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15823.yaml"
+},
+"CVE-2019-15829": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01318,
+"epss_pct": 0.68796,
+"name": "Gallery Photoblocks < 1.1.43 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15829.yaml"
+},
+"CVE-2019-15858": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.18463,
+"epss_pct": 0.97033,
+"name": "WordPress Woody Ad Snippets <2.2.5 - Cross-Site Scripting/Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15858.yaml"
+},
+"CVE-2019-15859": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-200",
+"epss": 0.31487,
+"epss_pct": 0.98155,
+"name": "Socomec DIRIS A-40 Devices Password Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15859.yaml"
+},
+"CVE-2019-15889": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.11375,
+"epss_pct": 0.95677,
+"name": "WordPress Download Manager <2.9.94 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-15889.yaml"
+},
+"CVE-2019-16057": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.87065,
+"epss_pct": 0.99734,
+"name": "D-Link DNS-320 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16057.yaml"
+},
+"CVE-2019-16072": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.25853,
+"epss_pct": 0.97824,
+"name": "Enigma NMS < 65.0.0 - Authenticated OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16072.yaml"
+},
+"CVE-2019-16097": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-862",
+"epss": 0.22443,
+"epss_pct": 0.97523,
+"name": "Harbor <=1.82.0 - Privilege Escalation",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16097.yaml"
+},
+"CVE-2019-16123": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.16619,
+"epss_pct": 0.96784,
+"name": "PilusCart <=1.4.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16123.yaml"
+},
+"CVE-2019-16278": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.99033,
+"epss_pct": 0.99929,
+"name": "nostromo 1.9.6 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16278.yaml"
+},
+"CVE-2019-16313": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-798",
+"epss": 0.46109,
+"epss_pct": 0.98721,
+"name": "ifw8 Router ROM v4.31 - Credential Discovery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16313.yaml"
+},
+"CVE-2019-16332": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05672,
+"epss_pct": 0.92442,
+"name": "WordPress API Bearer Auth <20190907 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16332.yaml"
+},
+"CVE-2019-16469": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-917",
+"epss": 0.17186,
+"epss_pct": 0.96867,
+"name": "Adobe Experience Manager - Expression Language Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16469.yaml"
+},
+"CVE-2019-16525": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05524,
+"epss_pct": 0.9225,
+"name": "WordPress Checklist <1.1.9 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16525.yaml"
+},
+"CVE-2019-1653": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.99876,
+"epss_pct": 0.99962,
+"name": "Cisco Small Business WAN VPN Routers - Sensitive Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1653.yaml"
+},
+"CVE-2019-16662": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.97702,
+"epss_pct": 0.99899,
+"name": "rConfig 3.9.2 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16662.yaml"
+},
+"CVE-2019-16759": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.99728,
+"epss_pct": 0.99952,
+"name": "vBulletin 5.0.0-5.5.4 - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16759.yaml"
+},
+"CVE-2019-16920": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99996,
+"epss_pct": 0.99988,
+"name": "D-Link Routers - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16920.yaml"
+},
+"CVE-2019-16931": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03342,
+"epss_pct": 0.87799,
+"name": "WordPress Visualizer <3.3.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16931.yaml"
+},
+"CVE-2019-16932": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
+"cwe": "CWE-918",
+"epss": 0.39137,
+"epss_pct": 0.98487,
+"name": "Visualizer <3.3.1 - Blind Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16932.yaml"
+},
+"CVE-2019-16996": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.12443,
+"epss_pct": 0.9592,
+"name": "Metinfo 7.0.0 beta - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16996.yaml"
+},
+"CVE-2019-16997": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.49398,
+"epss_pct": 0.98802,
+"name": "Metinfo 7.0.0 beta - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16997.yaml"
+},
+"CVE-2019-17228": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-345",
+"epss": 0.01153,
+"epss_pct": 0.64725,
+"name": "Motors Car Dealer & Classified Ads <= 1.4.0 - Unauthenticated settings import/export",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17228.yaml"
+},
+"CVE-2019-17230": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"epss": 0.02362,
+"epss_pct": 0.82583,
+"name": "WordPress OneTone theme <= 3.0.6 \u2013 Unauthenticated Options Changes",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17230.yaml"
+},
+"CVE-2019-17231": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"epss": 0.01216,
+"epss_pct": 0.66453,
+"name": "WordPress OneTone theme <= 3.0.6 \u2013 Unauthenticated Stored XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17231.yaml"
+},
+"CVE-2019-17232": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-306",
+"epss": 0.03518,
+"epss_pct": 0.88386,
+"name": "WordPress Ultimate FAQs <= 1.8.24 \u2013 Unauthenticated Options Import and Export",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17232.yaml"
+},
+"CVE-2019-17233": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"epss": 0.01843,
+"epss_pct": 0.77502,
+"name": "WordPress Ultimate FAQs <= 1.8.24 \u2013 Unauthenticated HTML Content Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17233.yaml"
+},
+"CVE-2019-17270": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.58879,
+"epss_pct": 0.99039,
+"name": "Yachtcontrol Webapplication 1.0 - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17270.yaml"
+},
+"CVE-2019-17382": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-639",
+"epss": 0.5415,
+"epss_pct": 0.98931,
+"name": "Zabbix <=4.4 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17382.yaml"
+},
+"CVE-2019-17418": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.49299,
+"epss_pct": 0.98799,
+"name": "MetInfo 7.0.0 beta - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17418.yaml"
+},
+"CVE-2019-17444": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-521",
+"epss": 0.69445,
+"epss_pct": 0.99309,
+"name": "Jfrog Artifactory <6.17.0 - Default Admin Password",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17444.yaml"
+},
+"CVE-2019-17503": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-425",
+"epss": 0.48303,
+"epss_pct": 0.98775,
+"name": "Kirona Dynamic Resource Scheduler - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17503.yaml"
+},
+"CVE-2019-17506": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.56386,
+"epss_pct": 0.98982,
+"name": "D-Link DIR-868L/817LW - Information Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17506.yaml"
+},
+"CVE-2019-17538": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.11302,
+"epss_pct": 0.95662,
+"name": "Jiangnan Online Judge 0.8.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17538.yaml"
+},
+"CVE-2019-17558": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.98567,
+"epss_pct": 0.99919,
+"name": "Apache Solr <=8.3.1 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17558.yaml"
+},
+"CVE-2019-17564": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.36513,
+"epss_pct": 0.98379,
+"name": "Apache Dubbo 2.5.x-2.7.4 - Insecure Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17564.yaml"
+},
+"CVE-2019-17574": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-639",
+"epss": 0.09432,
+"epss_pct": 0.95055,
+"name": "Popup-Maker < 1.8.12 - Broken Authentication",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17574.yaml"
+},
+"CVE-2019-17662": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.96758,
+"epss_pct": 0.99882,
+"name": "ThinVNC 1.0b1 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17662.yaml"
+},
+"CVE-2019-17671": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.36503,
+"epss_pct": 0.98377,
+"name": "WordPress <= 5.2.4 - Unauthenticated View Private/Draft Posts",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-17671.yaml"
+},
+"CVE-2019-1821": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.98051,
+"epss_pct": 0.99907,
+"name": "Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1821.yaml"
+},
+"CVE-2019-18217": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"cwe": "CWE-835",
+"epss": 0.19507,
+"epss_pct": 0.9718,
+"name": "ProFTPD < 1.3.6b - Remote Unauthenticated DoS",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2019/CVE-2019-18217.yaml"
+},
+"CVE-2019-18371": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.55872,
+"epss_pct": 0.9897,
+"name": "Xiaomi Mi WiFi R3G Routers - Local file Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-18371.yaml"
+},
+"CVE-2019-18393": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.13419,
+"epss_pct": 0.96146,
+"name": "Ignite Realtime Openfire <4.42 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-18393.yaml"
+},
+"CVE-2019-18394": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.32304,
+"epss_pct": 0.98199,
+"name": "Ignite Realtime Openfire <=4.4.2 - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-18394.yaml"
+},
+"CVE-2019-18665": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.14855,
+"epss_pct": 0.96446,
+"name": "DOMOS 5.5 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-18665.yaml"
+},
+"CVE-2019-18818": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-640",
+"epss": 0.97639,
+"epss_pct": 0.99898,
+"name": "strapi CMS <3.0.0-beta.17.5 - Admin Password Reset",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-18818.yaml"
+},
+"CVE-2019-18922": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.23856,
+"epss_pct": 0.9766,
+"name": "Allied Telesis AT-GS950/8 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-18922.yaml"
+},
+"CVE-2019-18952": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.45361,
+"epss_pct": 0.98699,
+"name": "Xfilesharing 2.5.1 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-18952.yaml"
+},
+"CVE-2019-18957": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04857,
+"epss_pct": 0.91404,
+"name": "MicroStrategy Library <11.1.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-18957.yaml"
+},
+"CVE-2019-1898": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.41657,
+"epss_pct": 0.98581,
+"name": "Cisco RV110W RV130W RV215W Router - Information leakage",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1898.yaml"
+},
+"CVE-2019-19134": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05726,
+"epss_pct": 0.92504,
+"name": "WordPress Hero Maps Premium <=2.2.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19134.yaml"
+},
+"CVE-2019-19368": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.25889,
+"epss_pct": 0.97828,
+"name": "Rumpus FTP Web File Manager 8.2.9.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19368.yaml"
+},
+"CVE-2019-19411": {
+"cvss": 3.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-665",
+"epss": 0.01238,
+"epss_pct": 0.66987,
+"name": "Huawei Firewall - Local File Inclusion",
+"severity": "low",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19411.yaml"
+},
+"CVE-2019-1943": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.09687,
+"epss_pct": 0.95152,
+"name": "Cisco Small Business 200,300 and 500 Series Switches - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-1943.yaml"
+},
+"CVE-2019-19781": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.99999,
+"epss_pct": 0.99998,
+"name": "Citrix ADC and Gateway - Directory Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19781.yaml"
+},
+"CVE-2019-19822": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.08669,
+"epss_pct": 0.9473,
+"name": "TOTOLINK/Realtek Routers - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19822.yaml"
+},
+"CVE-2019-19823": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.06411,
+"epss_pct": 0.93194,
+"name": "TOTOLINK/Realtek Routers - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19823.yaml"
+},
+"CVE-2019-19824": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.25135,
+"epss_pct": 0.97772,
+"name": "TOTOLINK Realtek SD Routers - Remote Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19824.yaml"
+},
+"CVE-2019-19825": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.29557,
+"epss_pct": 0.98053,
+"name": "TOTOLINK/Realtek Routers - CAPTCHA Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19825.yaml"
+},
+"CVE-2019-19908": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.21232,
+"epss_pct": 0.97414,
+"name": "phpMyChat-Plus 1.98 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19908.yaml"
+},
+"CVE-2019-19985": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.71399,
+"epss_pct": 0.99367,
+"name": "WordPress Email Subscribers & Newsletters <4.2.3 - Arbitrary File Retrieval",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-19985.yaml"
+},
+"CVE-2019-20085": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.96071,
+"epss_pct": 0.99872,
+"name": "TVT NVMS 1000 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20085.yaml"
+},
+"CVE-2019-20141": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05008,
+"epss_pct": 0.9163,
+"name": "WordPress Laborator Neon Theme 2.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20141.yaml"
+},
+"CVE-2019-20176": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"cwe": "CWE-400",
+"epss": 0.04365,
+"epss_pct": 0.90565,
+"name": "Pure-FTPd < 1.0.50 - DoS via Resource Exhaustion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2019/CVE-2019-20176.yaml"
+},
+"CVE-2019-20183": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.07625,
+"epss_pct": 0.94127,
+"name": "Simple Employee Records System 1.0 - Unrestricted File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20183.yaml"
+},
+"CVE-2019-20210": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03243,
+"epss_pct": 0.8742,
+"name": "WordPress CTHthemes - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20210.yaml"
+},
+"CVE-2019-20224": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.4968,
+"epss_pct": 0.98809,
+"name": "Pandora FMS 7.0NG - Remote Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20224.yaml"
+},
+"CVE-2019-20504": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.0955,
+"epss_pct": 0.95105,
+"name": "Dell KACE Systems Management Appliance (K1000) 6.4.120756 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20504.yaml"
+},
+"CVE-2019-20933": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.30921,
+"epss_pct": 0.98124,
+"name": "InfluxDB <1.7.6 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20933.yaml"
+},
+"CVE-2019-25141": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.04498,
+"epss_pct": 0.9081,
+"name": "Easy WP SMTP <= 1.3.9 - Missing Authorization to Arbitrary Options Update",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-25141.yaml"
+},
+"CVE-2019-25152": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"epss": 0.01364,
+"epss_pct": 0.69847,
+"name": "Abandoned Cart Lite for WooCommerce < 5.2.0 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-25152.yaml"
+},
+"CVE-2019-25213": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-264",
+"epss": 0.02772,
+"epss_pct": 0.85296,
+"name": "WordPress Advanced Access Manager - Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-25213.yaml"
+},
+"CVE-2019-25246": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"epss": 0.18903,
+"epss_pct": 0.97087,
+"name": "BEWARD N100 H.264 VGA IP Camera M2.1.6 - Arbitrary File Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-25246.yaml"
+},
+"CVE-2019-2578": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"epss": 0.72402,
+"epss_pct": 0.99396,
+"name": "Oracle Fusion Middleware WebCenter Sites 12.2.1.3.0 - Broken Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2578.yaml"
+},
+"CVE-2019-2579": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.05969,
+"epss_pct": 0.92772,
+"name": "Oracle Fusion Middleware WebCenter Sites 12.2.1.3.0 - SQL Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2579.yaml"
+},
+"CVE-2019-2588": {
+"cvss": 4.9,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.36787,
+"epss_pct": 0.98391,
+"name": "Oracle Business Intelligence - Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2588.yaml"
+},
+"CVE-2019-2616": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"epss": 0.92183,
+"epss_pct": 0.99814,
+"name": "Oracle Business Intelligence/XML Publisher - XML External Entity Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2616.yaml"
+},
+"CVE-2019-2725": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.99964,
+"epss_pct": 0.99976,
+"name": "Oracle WebLogic Server - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2725.yaml"
+},
+"CVE-2019-2729": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-284",
+"epss": 0.8883,
+"epss_pct": 0.99764,
+"name": "Oracle WebLogic Server Administration Console - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2729.yaml"
+},
+"CVE-2019-2767": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"epss": 0.05238,
+"epss_pct": 0.91937,
+"name": "Oracle Business Intelligence Publisher - XML External Entity Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-2767.yaml"
+},
+"CVE-2019-3396": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.99913,
+"epss_pct": 0.99966,
+"name": "Atlassian Confluence Server - Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3396.yaml"
+},
+"CVE-2019-3398": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.96837,
+"epss_pct": 0.99883,
+"name": "Atlassian Confluence Download Attachments - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3398.yaml"
+},
+"CVE-2019-3401": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-863",
+"epss": 0.12719,
+"epss_pct": 0.95977,
+"name": "Atlassian Jira <7.13.3/8.0.0-8.1.1 - Incorrect Authorization",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3401.yaml"
+},
+"CVE-2019-3402": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.08947,
+"epss_pct": 0.9487,
+"name": "Jira < 8.1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3402.yaml"
+},
+"CVE-2019-3403": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-863",
+"epss": 0.52637,
+"epss_pct": 0.98885,
+"name": "Jira - Incorrect Authorization",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3403.yaml"
+},
+"CVE-2019-3799": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.85295,
+"epss_pct": 0.997,
+"name": "Spring Cloud Config Server - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3799.yaml"
+},
+"CVE-2019-3911": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03813,
+"epss_pct": 0.89291,
+"name": "LabKey Server Community Edition <18.3.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3911.yaml"
+},
+"CVE-2019-3912": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.04825,
+"epss_pct": 0.91349,
+"name": "LabKey Server Community Edition <18.3.0 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3912.yaml"
+},
+"CVE-2019-3929": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.98952,
+"epss_pct": 0.99926,
+"name": "Barco/AWIND OEM Presentation Platform - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-3929.yaml"
+},
+"CVE-2019-4061": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-200",
+"epss": 0.22547,
+"epss_pct": 0.9754,
+"name": "IBM BigFix Platform - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-4061.yaml"
+},
+"CVE-2019-4716": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.86441,
+"epss_pct": 0.99722,
+"name": "IBM Planning Analytics - Authentication Bypass & Remote Code Execution Version Detection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-4716.yaml"
+},
+"CVE-2019-5127": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.45302,
+"epss_pct": 0.98696,
+"name": "YouPHPTube Encoder 2.3 - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-5127.yaml"
+},
+"CVE-2019-5128": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.30174,
+"epss_pct": 0.98087,
+"name": "YouPHPTube Encoder - Arbitrary File Write",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-5128.yaml"
+},
+"CVE-2019-5129": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.38531,
+"epss_pct": 0.98466,
+"name": "YouPHPTube Encoder 2.3 - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-5129.yaml"
+},
+"CVE-2019-5418": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.98507,
+"epss_pct": 0.99916,
+"name": "Rails File Content Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-5418.yaml"
+},
+"CVE-2019-5434": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.57022,
+"epss_pct": 0.98996,
+"name": "Revive Adserver 4.2 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-5434.yaml"
+},
+"CVE-2019-5544": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-787",
+"epss": 0.97258,
+"epss_pct": 0.9989,
+"name": "VMware ESXi SLP - Heap Overflow DoS",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2019/CVE-2019-5544.yaml"
+},
+"CVE-2019-5591": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.18422,
+"epss_pct": 0.97028,
+"name": "FortiOS - Insecure LDAP Configuration Detection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-5591.yaml"
+},
+"CVE-2019-6112": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.09221,
+"epss_pct": 0.94979,
+"name": "WordPress Sell Media 2.4.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6112.yaml"
+},
+"CVE-2019-6340": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.92017,
+"epss_pct": 0.99812,
+"name": "Drupal - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6340.yaml"
+},
+"CVE-2019-6443": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
+"cwe": "CWE-125",
+"epss": 0.66881,
+"epss_pct": 0.99236,
+"name": "NTPsec > 1.1.3 - 'ctl_getitem' Out-of-Bounds Read",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2019/CVE-2019-6443.yaml"
+},
+"CVE-2019-6703": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.26076,
+"epss_pct": 0.97838,
+"name": "Total Donations Plugin for WordPress < 2.0.6 - Arbitrary Options Update",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6703.yaml"
+},
+"CVE-2019-6715": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.19396,
+"epss_pct": 0.9716,
+"name": "W3 Total Cache 0.9.2.6-0.9.3 - Unauthenticated File Read / Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6715.yaml"
+},
+"CVE-2019-6793": {
+"cvss": 7.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L",
+"cwe": "CWE-918",
+"epss": 0.03506,
+"epss_pct": 0.88352,
+"name": "GitLab Enterprise Edition - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6793.yaml"
+},
+"CVE-2019-6799": {
+"cvss": 5.9,
+"cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.14829,
+"epss_pct": 0.9644,
+"name": "phpMyAdmin <4.8.5 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6799.yaml"
+},
+"CVE-2019-6802": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-74",
+"epss": 0.03802,
+"epss_pct": 0.89253,
+"name": "Pypiserver <1.2.5 - Carriage Return Line Feed Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6802.yaml"
+},
+"CVE-2019-7139": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.17657,
+"epss_pct": 0.9693,
+"name": "Magento - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7139.yaml"
+},
+"CVE-2019-7192": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-863",
+"epss": 0.88213,
+"epss_pct": 0.99756,
+"name": "QNAP QTS and Photo Station 6.0.3 - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7192.yaml"
+},
+"CVE-2019-7194": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.83124,
+"epss_pct": 0.99652,
+"name": "QNAP Photo Station < 6.0.3 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7194.yaml"
+},
+"CVE-2019-7195": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.89681,
+"epss_pct": 0.99777,
+"name": "QNAP Photo Station - Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7195.yaml"
+},
+"CVE-2019-7219": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05038,
+"epss_pct": 0.91667,
+"name": "Zarafa WebApp <=2.0.1.47791 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7219.yaml"
+},
+"CVE-2019-7238": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.77146,
+"epss_pct": 0.99517,
+"name": "Sonatype Nexus Repository Manager  <3.15.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7238.yaml"
+},
+"CVE-2019-7254": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.82292,
+"epss_pct": 0.99635,
+"name": "eMerge E3 1.00-06 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7254.yaml"
+},
+"CVE-2019-7255": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.55807,
+"epss_pct": 0.98968,
+"name": "Linear eMerge E3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7255.yaml"
+},
+"CVE-2019-7256": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.97136,
+"epss_pct": 0.99888,
+"name": "eMerge E3 1.00-06 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7256.yaml"
+},
+"CVE-2019-7275": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.09087,
+"epss_pct": 0.94925,
+"name": "Optergy Proton/Enterprise Building Management System - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7275.yaml"
+},
+"CVE-2019-7276": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.93384,
+"epss_pct": 0.99832,
+"name": "Optergy Proton/Enterprise - Unauthenticated RCE via Backdoor Console",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7276.yaml"
+},
+"CVE-2019-7315": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.11198,
+"epss_pct": 0.95638,
+"name": "Genie Access WIP3BVAF IP Camera - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7315.yaml"
+},
+"CVE-2019-7481": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.99906,
+"epss_pct": 0.99965,
+"name": "SonicWall SRA 4600 VPN - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7481.yaml"
+},
+"CVE-2019-7543": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03161,
+"epss_pct": 0.8708,
+"name": "KindEditor 4.1.11 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7543.yaml"
+},
+"CVE-2019-7609": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.95338,
+"epss_pct": 0.9986,
+"name": "Kibana Timelion - Arbitrary Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7609.yaml"
+},
+"CVE-2019-8086": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-611",
+"epss": 0.22541,
+"epss_pct": 0.9754,
+"name": "Adobe Experience Manager - XML External Entity Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8086.yaml"
+},
+"CVE-2019-8390": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.09836,
+"epss_pct": 0.95208,
+"name": "qdPM 9.1 - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8390.yaml"
+},
+"CVE-2019-8442": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.59832,
+"epss_pct": 0.99063,
+"name": "Jira - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8442.yaml"
+},
+"CVE-2019-8446": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-863",
+"epss": 0.1755,
+"epss_pct": 0.96916,
+"name": "Jira Improper Authorization",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8446.yaml"
+},
+"CVE-2019-8449": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.84771,
+"epss_pct": 0.99691,
+"name": "Jira <8.4.0 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8449.yaml"
+},
+"CVE-2019-8451": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.94453,
+"epss_pct": 0.99845,
+"name": "Jira <8.4.0 - Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8451.yaml"
+},
+"CVE-2019-8903": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.72058,
+"epss_pct": 0.99385,
+"name": "Totaljs <3.2.3 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8903.yaml"
+},
+"CVE-2019-8937": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.10633,
+"epss_pct": 0.95465,
+"name": "HotelDruid 2.3.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8937.yaml"
+},
+"CVE-2019-8943": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-22",
+"epss": 0.92642,
+"epss_pct": 0.9982,
+"name": "WordPress Core 5.0.0 - Crop-image Shell Upload",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8943.yaml"
+},
+"CVE-2019-8982": {
+"cvss": 9.6,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.27963,
+"epss_pct": 0.97959,
+"name": "Wavemaker Studio 6.6 - Local File Inclusion/Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8982.yaml"
+},
+"CVE-2019-9041": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-917",
+"epss": 0.31421,
+"epss_pct": 0.98151,
+"name": "ZZZCMS 1.6.1 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9041.yaml"
+},
+"CVE-2019-9082": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.97419,
+"epss_pct": 0.99894,
+"name": "ThinkPHP < 3.2.4 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9082.yaml"
+},
+"CVE-2019-9193": {
+"epss": 0.91655,
+"epss_pct": 0.99806,
+"name": "PostgreSQL 9.3-12.3 Authenticated Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2019/CVE-2019-9193.yaml"
+},
+"CVE-2019-9194": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.9673,
+"epss_pct": 0.99881,
+"name": "elFinder <= 2.1.47 - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9194.yaml"
+},
+"CVE-2019-9618": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.43796,
+"epss_pct": 0.9865,
+"name": "WordPress GraceMedia Media Player 1.0 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9618.yaml"
+},
+"CVE-2019-9621": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.81037,
+"epss_pct": 0.99602,
+"name": "Zimbra Collaboration Suite - SSRF",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9621.yaml"
+},
+"CVE-2019-9632": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.39885,
+"epss_pct": 0.98521,
+"name": "ESAFENET CDG - Arbitrary File Download",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9632.yaml"
+},
+"CVE-2019-9670": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-611",
+"epss": 0.99986,
+"epss_pct": 0.99983,
+"name": "Synacor Zimbra Collaboration <8.7.11p10 - XML External Entity Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9670.yaml"
+},
+"CVE-2019-9726": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.16342,
+"epss_pct": 0.9673,
+"name": "Homematic CCU3 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9726.yaml"
+},
+"CVE-2019-9733": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.52948,
+"epss_pct": 0.98897,
+"name": "JFrog Artifactory 6.7.3 - Admin Login Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9733.yaml"
+},
+"CVE-2019-9757": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-611",
+"epss": 0.37336,
+"epss_pct": 0.98416,
+"name": "LabKey Server 19.1.0 - XML External Entity (XXE)",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9757.yaml"
+},
+"CVE-2019-9762": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.06041,
+"epss_pct": 0.92848,
+"name": "PHPSHE 1.7 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9762.yaml"
+},
+"CVE-2019-9874": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.83736,
+"epss_pct": 0.99669,
+"name": "Sitecore Experience Platform - Deserialization of Untrusted Data",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9874.yaml"
+},
+"CVE-2019-9879": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.46614,
+"epss_pct": 0.98735,
+"name": "WPGraphQL 0.2.3 - User Creation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9879.yaml"
+},
+"CVE-2019-9880": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-306",
+"epss": 0.34761,
+"epss_pct": 0.98308,
+"name": "WPEngine WPGraphQL 0.2.3 - Unauthenticated User Information Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9880.yaml"
+},
+"CVE-2019-9881": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-306",
+"epss": 0.18832,
+"epss_pct": 0.97077,
+"name": "WPEngine WPGraphQL 0.2.3 - Unauthenticated Comment Posting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9881.yaml"
+},
+"CVE-2019-9912": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03151,
+"epss_pct": 0.87034,
+"name": "WP Google Maps < 7.10.43 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9912.yaml"
+},
+"CVE-2019-9915": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.03626,
+"epss_pct": 0.88705,
+"name": "GetSimple CMS 3.3.13 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9915.yaml"
+},
+"CVE-2019-9922": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.1059,
+"epss_pct": 0.95452,
+"name": "Joomla! Harmis Messenger 1.2.2 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9922.yaml"
+},
+"CVE-2019-9955": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.2118,
+"epss_pct": 0.97409,
+"name": "Zyxel - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9955.yaml"
+},
+"CVE-2019-9978": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.72946,
+"epss_pct": 0.99411,
+"name": "WordPress Social Warfare <3.5.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9978.yaml"
+},
+"CVE-2020-0618": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.99022,
+"epss_pct": 0.99928,
+"name": "Microsoft SQL Server Reporting Services - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-0618.yaml"
+},
+"CVE-2020-0646": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-91",
+"epss": 0.99222,
+"epss_pct": 0.99933,
+"name": "Microsoft .NET Framework - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2020/CVE-2020-0646.yaml"
+},
+"CVE-2020-0796": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-119",
+"epss": 0.9981,
+"epss_pct": 0.99957,
+"name": "Microsoft SMBv3 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-0796.yaml"
+},
+"CVE-2020-10148": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.9198,
+"epss_pct": 0.99811,
+"name": "SolarWinds Orion API - Auth Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10148.yaml"
+},
+"CVE-2020-10189": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.99941,
+"epss_pct": 0.99971,
+"name": "ManageEngine Desktop Central Java Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10189.yaml"
+},
+"CVE-2020-10199": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-917",
+"epss": 0.99064,
+"epss_pct": 0.99929,
+"name": "Sonatype Nexus Repository Manager 3 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10199.yaml"
+},
+"CVE-2020-10204": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.38166,
+"epss_pct": 0.9845,
+"name": "Sonatype Nexus Repository Manager 3 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10204.yaml"
+},
+"CVE-2020-10220": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.99683,
+"epss_pct": 0.99949,
+"name": "rConfig 3.9 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10220.yaml"
+},
+"CVE-2020-10221": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.80221,
+"epss_pct": 0.99587,
+"name": "rConfig <= 3.9.4 - Authenticated OS Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10221.yaml"
+},
+"CVE-2020-10257": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.08877,
+"epss_pct": 0.9484,
+"name": "ThemeREX Addons - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10257.yaml"
+},
+"CVE-2020-10532": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-288",
+"epss": 0.02785,
+"epss_pct": 0.85385,
+"name": "WatchGuard Fireware AD Helper Component - Credentials Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10532.yaml"
+},
+"CVE-2020-10546": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.8733,
+"epss_pct": 0.99741,
+"name": "rConfig 3.9.4 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10546.yaml"
+},
+"CVE-2020-10547": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.33266,
+"epss_pct": 0.98246,
+"name": "rConfig 3.9.4 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10547.yaml"
+},
+"CVE-2020-10548": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.37732,
+"epss_pct": 0.98435,
+"name": "rConfig 3.9.4 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10548.yaml"
+},
+"CVE-2020-10549": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.32124,
+"epss_pct": 0.98189,
+"name": "rConfig <=3.9.4 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10549.yaml"
+},
+"CVE-2020-10770": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.69724,
+"epss_pct": 0.99318,
+"name": "Keycloak <= 12.0.1 - request_uri Blind Server-Side Request Forgery (SSRF)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10770.yaml"
+},
+"CVE-2020-10973": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.07552,
+"epss_pct": 0.94077,
+"name": "WAVLINK - Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10973.yaml"
+},
+"CVE-2020-10987": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.7981,
+"epss_pct": 0.99579,
+"name": "Tenda AC15 AC1900 version 15.03.05.19 - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10987.yaml"
+},
+"CVE-2020-11034": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"epss": 0.07574,
+"epss_pct": 0.94091,
+"name": "GLPI <9.4.6 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11034.yaml"
+},
+"CVE-2020-11110": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.09619,
+"epss_pct": 0.9513,
+"name": "Grafana <= 6.7.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11110.yaml"
+},
+"CVE-2020-11441": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-93",
+"epss": 0.02406,
+"epss_pct": 0.82902,
+"name": "phpMyAdmin 5.0.2 - CRLF Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11441.yaml"
+},
+"CVE-2020-11450": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.17841,
+"epss_pct": 0.96952,
+"name": "MicroStrategy Web 10.4 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11450.yaml"
+},
+"CVE-2020-11455": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.97179,
+"epss_pct": 0.99889,
+"name": "LimeSurvey 4.1.11 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11455.yaml"
+},
+"CVE-2020-11514": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.09106,
+"epss_pct": 0.94932,
+"name": "Rank Math SEO <= 1.0.40.2 - Privilege Escalation via Unprotected REST API Endpoint",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11514.yaml"
+},
+"CVE-2020-11515": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02072,
+"epss_pct": 0.80104,
+"name": "Rank Math SEO <= 1.0.40.2 - Redirect Creation via Unprotected REST API Endpoint",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11515.yaml"
+},
+"CVE-2020-11529": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.10879,
+"epss_pct": 0.95542,
+"name": "Grav < 1.7 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11529.yaml"
+},
+"CVE-2020-11530": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.95657,
+"epss_pct": 0.99866,
+"name": "WordPress Chop Slider 3 - Blind SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11530.yaml"
+},
+"CVE-2020-11546": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.32841,
+"epss_pct": 0.98229,
+"name": "SuperWebmailer 7.21.0.01526 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11546.yaml"
+},
+"CVE-2020-11547": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.52059,
+"epss_pct": 0.98872,
+"name": "PRTG Network Monitor <20.1.57.1745 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11547.yaml"
+},
+"CVE-2020-11710": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.33127,
+"epss_pct": 0.98241,
+"name": "Kong Admin <=2.03 - Admin API Access",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11710.yaml"
+},
+"CVE-2020-11732": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.04917,
+"epss_pct": 0.91492,
+"name": "Media Library Assistant < 2.82 - Unauthenticated Limited Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11732.yaml"
+},
+"CVE-2020-11738": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.97822,
+"epss_pct": 0.999,
+"name": "WordPress Duplicator 1.3.24 & 1.3.26 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11738.yaml"
+},
+"CVE-2020-11798": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.48771,
+"epss_pct": 0.98789,
+"name": "Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11798.yaml"
+},
+"CVE-2020-11853": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.7699,
+"epss_pct": 0.99514,
+"name": "Micro Focus Operations Bridge Manager <=2020.05 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11853.yaml"
+},
+"CVE-2020-11854": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.74449,
+"epss_pct": 0.99454,
+"name": "Micro Focus UCMDB - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11854.yaml"
+},
+"CVE-2020-11930": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04457,
+"epss_pct": 0.90742,
+"name": "WordPress GTranslate <2.8.52 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11930.yaml"
+},
+"CVE-2020-11975": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.29885,
+"epss_pct": 0.9807,
+"name": "Apache Unomi - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11975.yaml"
+},
+"CVE-2020-11978": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99189,
+"epss_pct": 0.99932,
+"name": "Apache Airflow <=1.10.10 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11978.yaml"
+},
+"CVE-2020-11981": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.36537,
+"epss_pct": 0.9838,
+"name": "Apache Airflow <=1.10.10 - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-11981.yaml"
+},
+"CVE-2020-11984": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-120",
+"epss": 0.90039,
+"epss_pct": 0.99785,
+"name": "Apache HTTP Server - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11984.yaml"
+},
+"CVE-2020-11991": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-611",
+"epss": 0.72456,
+"epss_pct": 0.99397,
+"name": "Apache Cocoon 2.1.12 - XML Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11991.yaml"
+},
+"CVE-2020-12054": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03611,
+"epss_pct": 0.88663,
+"name": "WordPress Catch Breadcrumb <1.5.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12054.yaml"
+},
+"CVE-2020-12116": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.97418,
+"epss_pct": 0.99894,
+"name": "Zoho ManageEngine OpManger - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12116.yaml"
+},
+"CVE-2020-12124": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.7465,
+"epss_pct": 0.99462,
+"name": "WAVLINK WN530H4 live_api.cgi - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12124.yaml"
+},
+"CVE-2020-12127": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.07401,
+"epss_pct": 0.93986,
+"name": "WAVLINK WN530H4 M30H4.V5030.190403 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12127.yaml"
+},
+"CVE-2020-12256": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.95752,
+"epss_pct": 0.99866,
+"name": "rConfig 3.9.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12256.yaml"
+},
+"CVE-2020-12259": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.96179,
+"epss_pct": 0.99872,
+"name": "rConfig 3.9.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12259.yaml"
+},
+"CVE-2020-12262": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01711,
+"epss_pct": 0.75729,
+"name": "Intelbras TIP200/TIP200LITE/TIP300 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12262.yaml"
+},
+"CVE-2020-12447": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.13704,
+"epss_pct": 0.96218,
+"name": "Onkyo TX-NR585 Web Interface - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12447.yaml"
+},
+"CVE-2020-12478": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.08392,
+"epss_pct": 0.94574,
+"name": "TeamPass 2.1.27.36 - Improper Authentication",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12478.yaml"
+},
+"CVE-2020-12641": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.84456,
+"epss_pct": 0.99683,
+"name": "Roundcube Webmail - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12641.yaml"
+},
+"CVE-2020-12720": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.88948,
+"epss_pct": 0.99768,
+"name": "vBulletin SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12720.yaml"
+},
+"CVE-2020-12800": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.78751,
+"epss_pct": 0.99559,
+"name": "WordPress Contact Form 7 <1.3.3.3 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12800.yaml"
+},
+"CVE-2020-12832": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.07131,
+"epss_pct": 0.93796,
+"name": "WordPress Simple File List - Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12832.yaml"
+},
+"CVE-2020-13117": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.68794,
+"epss_pct": 0.99292,
+"name": "Wavlink Multiple AP - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13117.yaml"
+},
+"CVE-2020-13121": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02956,
+"epss_pct": 0.86212,
+"name": "Submitty <= 20.04.01 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13121.yaml"
+},
+"CVE-2020-13125": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"epss": 0.02307,
+"epss_pct": 0.82145,
+"name": "Ultimate Addons for Elementor <= 1.24.1 - Registration Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13125.yaml"
+},
+"CVE-2020-13158": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.53973,
+"epss_pct": 0.98926,
+"name": "Artica Proxy Community Edition <4.30.000000 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13158.yaml"
+},
+"CVE-2020-13167": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.95415,
+"epss_pct": 0.99862,
+"name": "Netsweeper <=6.4.3 - Python Code Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13167.yaml"
+},
+"CVE-2020-13258": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02063,
+"epss_pct": 0.8001,
+"name": "Contentful <=2020-05-21 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13258.yaml"
+},
+"CVE-2020-13379": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
+"cwe": "CWE-918",
+"epss": 0.99856,
+"epss_pct": 0.9996,
+"name": "Grafana 3.0.1-7.0.1 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13379.yaml"
+},
+"CVE-2020-13405": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.13614,
+"epss_pct": 0.96193,
+"name": "Microweber <1.1.20 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13405.yaml"
+},
+"CVE-2020-13483": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04511,
+"epss_pct": 0.90833,
+"name": "Bitrix24 <=20.0.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13483.yaml"
+},
+"CVE-2020-13638": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.76601,
+"epss_pct": 0.99505,
+"name": "rConfig 3.9 - Authentication Bypass(Admin Login)",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13638.yaml"
+},
+"CVE-2020-13640": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.12605,
+"epss_pct": 0.95953,
+"name": "wpDiscuz <= 5.3.5 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13640.yaml"
+},
+"CVE-2020-13700": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-639",
+"epss": 0.13463,
+"epss_pct": 0.96159,
+"name": "WordPress acf-to-rest-api <=3.1.0 - Insecure Direct Object Reference",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13700.yaml"
+},
+"CVE-2020-13820": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04178,
+"epss_pct": 0.90193,
+"name": "Extreme Management Center 8.4.1.24 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13820.yaml"
+},
+"CVE-2020-13851": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.91095,
+"epss_pct": 0.99799,
+"name": "Artica Pandora FMS 7.44 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13851.yaml"
+},
+"CVE-2020-13886": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.05198,
+"epss_pct": 0.91888,
+"name": "Intelbras TIP 200/200 LITE/300 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13886.yaml"
+},
+"CVE-2020-13927": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-1188",
+"epss": 0.99778,
+"epss_pct": 0.99955,
+"name": "Airflow Experimental <1.10.11 - REST API Auth Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13927.yaml"
+},
+"CVE-2020-13935": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"epss": 0.86608,
+"epss_pct": 0.99724,
+"name": "Apache Tomcat WebSocket Frame Payload Length Validation Denial of Service",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2020/CVE-2020-13935.yaml"
+},
+"CVE-2020-13937": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-922",
+"epss": 0.78331,
+"epss_pct": 0.99547,
+"name": "Apache Kylin - Exposed Configuration File",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13937.yaml"
+},
+"CVE-2020-13942": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.68398,
+"epss_pct": 0.9928,
+"name": "Apache Unomi <1.5.2 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13942.yaml"
+},
+"CVE-2020-13945": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-522",
+"epss": 0.72976,
+"epss_pct": 0.99412,
+"name": "Apache APISIX - Insufficiently Protected Credentials",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13945.yaml"
+},
+"CVE-2020-14092": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.9453,
+"epss_pct": 0.99846,
+"name": "WordPress PayPal Pro <1.1.65 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14092.yaml"
+},
+"CVE-2020-14144": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.95357,
+"epss_pct": 0.99862,
+"name": "Gitea 1.1.0 - 1.12.5 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14144.yaml"
+},
+"CVE-2020-14179": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.76042,
+"epss_pct": 0.99493,
+"name": "Atlassian Jira Server/Data Center <8.5.8/8.6.0 - 8.11.1 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14179.yaml"
+},
+"CVE-2020-14181": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.99603,
+"epss_pct": 0.99945,
+"name": "Jira Server and Data Center - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14181.yaml"
+},
+"CVE-2020-14408": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03003,
+"epss_pct": 0.86429,
+"name": "Agentejo Cockpit 0.10.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14408.yaml"
+},
+"CVE-2020-14413": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03442,
+"epss_pct": 0.88143,
+"name": "NeDi 1.9C - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14413.yaml"
+},
+"CVE-2020-14644": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.94548,
+"epss_pct": 0.99847,
+"name": "Oracle WebLogic Server - Remote Code Execution (Insecure Deserialization)",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2020/CVE-2020-14644.yaml"
+},
+"CVE-2020-14750": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.9927,
+"epss_pct": 0.99935,
+"name": "Oracle WebLogic Server - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14750.yaml"
+},
+"CVE-2020-14864": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.97233,
+"epss_pct": 0.99889,
+"name": "Oracle Fusion - Directory Traversal/Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14864.yaml"
+},
+"CVE-2020-14882": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.99997,
+"epss_pct": 0.99989,
+"name": "Oracle Weblogic Server - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14882.yaml"
+},
+"CVE-2020-14883": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.97929,
+"epss_pct": 0.99906,
+"name": "Oracle Fusion Middleware WebLogic Server Administration Console - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14883.yaml"
+},
+"CVE-2020-15050": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.50734,
+"epss_pct": 0.98839,
+"name": "Suprema BioStar <2.8.2 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15050.yaml"
+},
+"CVE-2020-15081": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-548",
+"epss": 0.01648,
+"epss_pct": 0.74801,
+"name": "PrestaShop < 1.7.6.6 - Information Exposure via Upload Directory",
+"severity": "low",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15081.yaml"
+},
+"CVE-2020-15129": {
+"cvss": 4.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.08011,
+"epss_pct": 0.94351,
+"name": "Traefik - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15129.yaml"
+},
+"CVE-2020-15148": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.78759,
+"epss_pct": 0.99559,
+"name": "Yii 2 < 2.0.38 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15148.yaml"
+},
+"CVE-2020-15227": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.34424,
+"epss_pct": 0.98295,
+"name": "Nette Framework - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15227.yaml"
+},
+"CVE-2020-15415": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.8448,
+"epss_pct": 0.99683,
+"name": "DrayTek Vigor - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15415.yaml"
+},
+"CVE-2020-15500": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.12224,
+"epss_pct": 0.95875,
+"name": "TileServer GL <=3.0.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15500.yaml"
+},
+"CVE-2020-15505": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-706",
+"epss": 0.99737,
+"epss_pct": 0.99952,
+"name": "MobileIron Core & Connector <= v10.6 & Sentry <= v9.8 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15505.yaml"
+},
+"CVE-2020-15568": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-913",
+"epss": 0.28984,
+"epss_pct": 0.98023,
+"name": "TerraMaster TOS <.1.29 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15568.yaml"
+},
+"CVE-2020-15718": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06354,
+"epss_pct": 0.93146,
+"name": "RosarioSIS 6.7.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15718.yaml"
+},
+"CVE-2020-15867": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.87416,
+"epss_pct": 0.99743,
+"name": "Gogs 0.5.5 - 0.12.2 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15867.yaml"
+},
+"CVE-2020-15895": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02848,
+"epss_pct": 0.85714,
+"name": "D-Link DIR-816L 2.x - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15895.yaml"
+},
+"CVE-2020-15906": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-307",
+"epss": 0.2716,
+"epss_pct": 0.97909,
+"name": "Tiki Wiki CMS GroupWare - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15906.yaml"
+},
+"CVE-2020-15920": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.98239,
+"epss_pct": 0.99911,
+"name": "Mida eFramework <=2.9.0 - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15920.yaml"
+},
+"CVE-2020-16139": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"epss": 0.7977,
+"epss_pct": 0.99577,
+"name": "Cisco Unified IP Conference Station 7937G - Denial-of-Service",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-16139.yaml"
+},
+"CVE-2020-16248": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.02698,
+"epss_pct": 0.84865,
+"name": "Prometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-16248.yaml"
+},
+"CVE-2020-16846": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99585,
+"epss_pct": 0.99944,
+"name": "SaltStack <=3002 - Shell Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-16846.yaml"
+},
+"CVE-2020-16952": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
+"cwe": "CWE-346",
+"epss": 0.71095,
+"epss_pct": 0.99359,
+"name": "Microsoft SharePoint - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-16952.yaml"
+},
+"CVE-2020-17362": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02873,
+"epss_pct": 0.85834,
+"name": "Nova Lite < 1.3.9 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17362.yaml"
+},
+"CVE-2020-17453": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.26225,
+"epss_pct": 0.97848,
+"name": "WSO2 Carbon Management Console <=5.10 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17453.yaml"
+},
+"CVE-2020-17456": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.73635,
+"epss_pct": 0.9943,
+"name": "SEOWON INTECH SLC-130 & SLR-120S - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17456.yaml"
+},
+"CVE-2020-17463": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.89689,
+"epss_pct": 0.99777,
+"name": "Fuel CMS 1.4.7 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17463.yaml"
+},
+"CVE-2020-17496": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.8774,
+"epss_pct": 0.99748,
+"name": "vBulletin 5.5.4 - 5.6.2- Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17496.yaml"
+},
+"CVE-2020-17505": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.82165,
+"epss_pct": 0.99631,
+"name": "Artica Web Proxy 4.30 - OS Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17505.yaml"
+},
+"CVE-2020-17506": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.93967,
+"epss_pct": 0.99837,
+"name": "Artica Web Proxy 4.30 - Authentication Bypass/SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17506.yaml"
+},
+"CVE-2020-17518": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
+"epss": 0.50038,
+"epss_pct": 0.98817,
+"name": "Apache Flink 1.5.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17518.yaml"
+},
+"CVE-2020-17519": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-552",
+"epss": 0.97856,
+"epss_pct": 0.99902,
+"name": "Apache Flink - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17519.yaml"
+},
+"CVE-2020-17526": {
+"cvss": 7.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.23336,
+"epss_pct": 0.97613,
+"name": "Apache Airflow <1.10.14 - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17526.yaml"
+},
+"CVE-2020-17530": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-917",
+"epss": 0.95931,
+"epss_pct": 0.99869,
+"name": "Apache Struts 2.0.0-2.5.25 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17530.yaml"
+},
+"CVE-2020-18268": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02687,
+"epss_pct": 0.84801,
+"name": "Z-Blog <=1.5.2 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-18268.yaml"
+},
+"CVE-2020-19282": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03162,
+"epss_pct": 0.87085,
+"name": "Jeesns 1.4.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19282.yaml"
+},
+"CVE-2020-19283": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02633,
+"epss_pct": 0.84462,
+"name": "Jeesns 1.4.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19283.yaml"
+},
+"CVE-2020-19295": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03509,
+"epss_pct": 0.88362,
+"name": "Jeesns 1.4.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19295.yaml"
+},
+"CVE-2020-19360": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.19722,
+"epss_pct": 0.97208,
+"name": "FHEM 6.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19360.yaml"
+},
+"CVE-2020-19363": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.03613,
+"epss_pct": 0.88669,
+"name": "Vtiger CRM v7.2.0 - Directory Listing",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19363.yaml"
+},
+"CVE-2020-1938": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.9927,
+"epss_pct": 0.99935,
+"name": "Ghostcat - Apache Tomcat - AJP File Read/Inclusion Vulnerability",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-1938.yaml"
+},
+"CVE-2020-1943": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.97309,
+"epss_pct": 0.99891,
+"name": "Apache OFBiz <=16.11.07 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-1943.yaml"
+},
+"CVE-2020-19515": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01789,
+"epss_pct": 0.76775,
+"name": "qdPM 9.1 - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19515.yaml"
+},
+"CVE-2020-1956": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.97337,
+"epss_pct": 0.99892,
+"name": "Apache Kylin 3.0.1 - Command Injection Vulnerability",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-1956.yaml"
+},
+"CVE-2020-19625": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.13143,
+"epss_pct": 0.96081,
+"name": "Gridx 1.3 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19625.yaml"
+},
+"CVE-2020-20285": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01407,
+"epss_pct": 0.70721,
+"name": "ZZcms - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20285.yaml"
+},
+"CVE-2020-20300": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.08752,
+"epss_pct": 0.94776,
+"name": "WeiPHP 5.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20300.yaml"
+},
+"CVE-2020-2036": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-79",
+"epss": 0.2389,
+"epss_pct": 0.97663,
+"name": "Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2036.yaml"
+},
+"CVE-2020-20601": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.07598,
+"epss_pct": 0.94111,
+"name": "ThinkCMF X2.2.2 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20601.yaml"
+},
+"CVE-2020-20627": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-306",
+"epss": 0.01881,
+"epss_pct": 0.77979,
+"name": "GiveWP - Missing Authorization to Settings Update",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20627.yaml"
+},
+"CVE-2020-2096": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.9279,
+"epss_pct": 0.99821,
+"name": "Jenkins Gitlab Hook <=1.4.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2096.yaml"
+},
+"CVE-2020-20982": {
+"cvss": 9.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
+"cwe": "CWE-79",
+"epss": 0.06191,
+"epss_pct": 0.92991,
+"name": "shadoweb wdja v1.5.1 - Cross-Site Scripting",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20982.yaml"
+},
+"CVE-2020-20988": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01331,
+"epss_pct": 0.69102,
+"name": "DomainMOD 4.13.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20988.yaml"
+},
+"CVE-2020-2103": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-200",
+"epss": 0.07044,
+"epss_pct": 0.93727,
+"name": "Jenkins <=2.218 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2103.yaml"
+},
+"CVE-2020-21224": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-88",
+"epss": 0.38745,
+"epss_pct": 0.98475,
+"name": "Inspur ClusterEngine 4.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-21224.yaml"
+},
+"CVE-2020-2140": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.75975,
+"epss_pct": 0.99491,
+"name": "Jenkin Audit Trail <=3.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2140.yaml"
+},
+"CVE-2020-21998": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01319,
+"epss_pct": 0.68824,
+"name": "HomeAutomation 3.3.2 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-21998.yaml"
+},
+"CVE-2020-22165": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.06348,
+"epss_pct": 0.93143,
+"name": "PHPGurukul Hospital Management System 4.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22165.yaml"
+},
+"CVE-2020-22208": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.10017,
+"epss_pct": 0.95272,
+"name": "74cms - ajax_street.php 'x' SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22208.yaml"
+},
+"CVE-2020-22209": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.08579,
+"epss_pct": 0.9468,
+"name": "74cms - ajax_common.php SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22209.yaml"
+},
+"CVE-2020-22210": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.08579,
+"epss_pct": 0.9468,
+"name": "74cms - ajax_officebuilding.php SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22210.yaml"
+},
+"CVE-2020-22211": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.0794,
+"epss_pct": 0.94319,
+"name": "74cms - ajax_street.php 'key' SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22211.yaml"
+},
+"CVE-2020-22840": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.13817,
+"epss_pct": 0.96243,
+"name": "b2evolution CMS <6.11.6 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22840.yaml"
+},
+"CVE-2020-23015": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02689,
+"epss_pct": 0.84811,
+"name": "OPNsense <=20.1.5 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23015.yaml"
+},
+"CVE-2020-23517": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.07051,
+"epss_pct": 0.93732,
+"name": "Aryanic HighMail (High CMS) - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23517.yaml"
+},
+"CVE-2020-23575": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.36765,
+"epss_pct": 0.98389,
+"name": "Kyocera Printer d-COPIA253MF - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23575.yaml"
+},
+"CVE-2020-23697": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01885,
+"epss_pct": 0.78033,
+"name": "Monstra CMS 3.0.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23697.yaml"
+},
+"CVE-2020-23814": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01188,
+"epss_pct": 0.65687,
+"name": "XXL-JOB v2.2.0 \u2014 Stored Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23814.yaml"
+},
+"CVE-2020-23972": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-434",
+"epss": 0.31444,
+"epss_pct": 0.98153,
+"name": "Joomla! Component GMapFP 3.5 - Arbitrary File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23972.yaml"
+},
+"CVE-2020-24148": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
+"cwe": "CWE-918",
+"epss": 0.14745,
+"epss_pct": 0.96426,
+"name": "Import XML & RSS Feeds WordPress Plugin <= 2.0.1 Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24148.yaml"
+},
+"CVE-2020-24186": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.94616,
+"epss_pct": 0.99849,
+"name": "WordPress wpDiscuz <=7.0.4 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24186.yaml"
+},
+"CVE-2020-24223": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.14552,
+"epss_pct": 0.96388,
+"name": "Mara CMS  7.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24223.yaml"
+},
+"CVE-2020-24285": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.04412,
+"epss_pct": 0.90646,
+"name": "INTELBRAS TELEFONE IP TIP200 60.61.75.22 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24285.yaml"
+},
+"CVE-2020-24312": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-552",
+"epss": 0.15906,
+"epss_pct": 0.9665,
+"name": "WordPress Plugin File Manager (wp-file-manager) Backup Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24312.yaml"
+},
+"CVE-2020-24391": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.74519,
+"epss_pct": 0.99457,
+"name": "Mongo-Express - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24391.yaml"
+},
+"CVE-2020-24550": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.04719,
+"epss_pct": 0.91187,
+"name": "EpiServer Find <13.2.7 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24550.yaml"
+},
+"CVE-2020-24571": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.17959,
+"epss_pct": 0.96967,
+"name": "NexusDB <4.50.23 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24571.yaml"
+},
+"CVE-2020-24579": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.09997,
+"epss_pct": 0.95265,
+"name": "D-Link DSL 2888a - Authentication Bypass/Remote Command Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24579.yaml"
+},
+"CVE-2020-24589": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
+"cwe": "CWE-611",
+"epss": 0.26282,
+"epss_pct": 0.9785,
+"name": "WSO2 API Manager <=3.1.0 - Blind XML External Entity Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24589.yaml"
+},
+"CVE-2020-24701": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06788,
+"epss_pct": 0.93514,
+"name": "OX Appsuite - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24701.yaml"
+},
+"CVE-2020-24881": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.73267,
+"epss_pct": 0.99418,
+"name": "OsTicket < 1.14.3 - Server Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24881.yaml"
+},
+"CVE-2020-24902": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02852,
+"epss_pct": 0.85734,
+"name": "Quixplorer <=2.4.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24902.yaml"
+},
+"CVE-2020-24903": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02932,
+"epss_pct": 0.86111,
+"name": "Cute Editor for ASP.NET 6.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24903.yaml"
+},
+"CVE-2020-24912": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0634,
+"epss_pct": 0.93136,
+"name": "QCube Cross-Site-Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24912.yaml"
+},
+"CVE-2020-24949": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.67516,
+"epss_pct": 0.99255,
+"name": "PHP-Fusion 9.03.50 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24949.yaml"
+},
+"CVE-2020-25078": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.97901,
+"epss_pct": 0.99904,
+"name": "D-Link DCS-2530L/DCS-2670L - Administrator Password Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25078.yaml"
+},
+"CVE-2020-25200": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-203",
+"epss": 0.0747,
+"epss_pct": 0.94025,
+"name": "Pritunl VPN Server 1.29.2145.25 - Username Enumeration",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25200.yaml"
+},
+"CVE-2020-25213": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.97328,
+"epss_pct": 0.99893,
+"name": "WordPress File Manager Plugin - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25213.yaml"
+},
+"CVE-2020-25223": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.96693,
+"epss_pct": 0.99881,
+"name": "Sophos UTM Preauth - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25223.yaml"
+},
+"CVE-2020-25495": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.08981,
+"epss_pct": 0.94886,
+"name": "Xinuo Openserver 5/6 - Cross-Site scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25495.yaml"
+},
+"CVE-2020-25506": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99968,
+"epss_pct": 0.99976,
+"name": "D-Link DNS-320 - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25506.yaml"
+},
+"CVE-2020-2551": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.93168,
+"epss_pct": 0.99827,
+"name": "Oracle WebLogic Server - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2551.yaml"
+},
+"CVE-2020-25540": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.75332,
+"epss_pct": 0.99477,
+"name": "ThinkAdmin 6 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25540.yaml"
+},
+"CVE-2020-25780": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.09884,
+"epss_pct": 0.95225,
+"name": "Commvault CommCell - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25780.yaml"
+},
+"CVE-2020-25864": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06085,
+"epss_pct": 0.92899,
+"name": "HashiCorp Consul/Consul Enterprise <=1.9.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25864.yaml"
+},
+"CVE-2020-26073": {
+"epss": 0.12583,
+"epss_pct": 0.95947,
+"name": "Cisco SD-WAN vManage Software - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26073.yaml"
+},
+"CVE-2020-26153": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04378,
+"epss_pct": 0.90592,
+"name": "Event Espresso Core-Reg 4.10.7.p - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26153.yaml"
+},
+"CVE-2020-26214": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.65933,
+"epss_pct": 0.99215,
+"name": "Alerta < 8.1.0 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26214.yaml"
+},
+"CVE-2020-26217": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.85001,
+"epss_pct": 0.99696,
+"name": "XStream <1.4.14 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26217.yaml"
+},
+"CVE-2020-26248": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
+"cwe": "CWE-89",
+"epss": 0.12388,
+"epss_pct": 0.95911,
+"name": "PrestaShop Product Comments <4.2.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26248.yaml"
+},
+"CVE-2020-26258": {
+"cvss": 7.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.81817,
+"epss_pct": 0.9962,
+"name": "XStream <1.4.15 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26258.yaml"
+},
+"CVE-2020-26413": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.34931,
+"epss_pct": 0.98316,
+"name": "Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26413.yaml"
+},
+"CVE-2020-26836": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02338,
+"epss_pct": 0.82405,
+"name": "SAP Solution Manager - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26836.yaml"
+},
+"CVE-2020-26876": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.10551,
+"epss_pct": 0.95443,
+"name": "WordPress WP Courses Plugin Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26876.yaml"
+},
+"CVE-2020-26879": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.45083,
+"epss_pct": 0.9869,
+"name": "Ruckus vRioT IoT Controller - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26879.yaml"
+},
+"CVE-2020-26919": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.57195,
+"epss_pct": 0.99002,
+"name": "NETGEAR ProSAFE Plus - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26919.yaml"
+},
+"CVE-2020-26935": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.67081,
+"epss_pct": 0.99243,
+"name": "phpMyAdmin < 5.0.3 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26935.yaml"
+},
+"CVE-2020-26948": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.87154,
+"epss_pct": 0.99736,
+"name": "Emby < 4.5.0 - Server Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26948.yaml"
+},
+"CVE-2020-27191": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.09595,
+"epss_pct": 0.95124,
+"name": "LionWiki <3.2.12 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27191.yaml"
+},
+"CVE-2020-2733": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.18645,
+"epss_pct": 0.97055,
+"name": "JD Edwards EnterpriseOne Tools 9.2 - Information Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2733.yaml"
+},
+"CVE-2020-27361": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-668",
+"epss": 0.06769,
+"epss_pct": 0.93504,
+"name": "Akkadian Provisioning Manager 4.50.02 - Sensitive Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27361.yaml"
+},
+"CVE-2020-27467": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.15737,
+"epss_pct": 0.96619,
+"name": "Processwire CMS <2.7.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27467.yaml"
+},
+"CVE-2020-27481": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.10027,
+"epss_pct": 0.95274,
+"name": "Good Layers LMS Plugin <= 2.1.4 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27481.yaml"
+},
+"CVE-2020-27615": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.52261,
+"epss_pct": 0.98877,
+"name": "WordPress Loginizer < 1.6.4 \u2013 Unauthenticated SQL Injection via `log` Parameter",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27615.yaml"
+},
+"CVE-2020-27735": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0579,
+"epss_pct": 0.92572,
+"name": "Wing FTP 6.4.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27735.yaml"
+},
+"CVE-2020-27838": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.17943,
+"epss_pct": 0.96966,
+"name": "KeyCloak - Information Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27838.yaml"
+},
+"CVE-2020-27866": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.08656,
+"epss_pct": 0.94723,
+"name": "NETGEAR - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27866.yaml"
+},
+"CVE-2020-27982": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05342,
+"epss_pct": 0.92049,
+"name": "IceWarp WebMail 11.4.5.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27982.yaml"
+},
+"CVE-2020-27986": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.16389,
+"epss_pct": 0.96739,
+"name": "SonarQube - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27986.yaml"
+},
+"CVE-2020-28185": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.18253,
+"epss_pct": 0.97006,
+"name": "TerraMaster TOS < 4.2.06 - User Enumeration",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28185.yaml"
+},
+"CVE-2020-28188": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.96598,
+"epss_pct": 0.99878,
+"name": "TerraMaster TOS - Unauthenticated Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28188.yaml"
+},
+"CVE-2020-28208": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-203",
+"epss": 0.10817,
+"epss_pct": 0.95526,
+"name": "Rocket.Chat <3.9.1 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28208.yaml"
+},
+"CVE-2020-28351": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.15987,
+"epss_pct": 0.96665,
+"name": "Mitel ShoreTel 19.46.1802.0 Devices - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28351.yaml"
+},
+"CVE-2020-28429": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.63305,
+"epss_pct": 0.99146,
+"name": "geojson2kml - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28429.yaml"
+},
+"CVE-2020-28653": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.787,
+"epss_pct": 0.99558,
+"name": "ManageEngine OpManager SumPDU 12.1 - 12.5.232 - Java Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28653.yaml"
+},
+"CVE-2020-2883": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.94928,
+"epss_pct": 0.99853,
+"name": "Oracle WebLogic Server - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2020/CVE-2020-2883.yaml"
+},
+"CVE-2020-28871": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.85785,
+"epss_pct": 0.99711,
+"name": "Monitorr 1.7.6m - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28871.yaml"
+},
+"CVE-2020-28976": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.27771,
+"epss_pct": 0.97948,
+"name": "WordPress Canto 1.3.0 - Blind Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28976.yaml"
+},
+"CVE-2020-29047": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.16017,
+"epss_pct": 0.96674,
+"name": "WP Hotel Booking < 1.10.4 - PHP Object Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29047.yaml"
+},
+"CVE-2020-29164": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06198,
+"epss_pct": 0.93,
+"name": "PacsOne Server <7.1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29164.yaml"
+},
+"CVE-2020-29214": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04499,
+"epss_pct": 0.90811,
+"name": "Alumni Management System 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29214.yaml"
+},
+"CVE-2020-29227": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.16822,
+"epss_pct": 0.96816,
+"name": "Car Rental Management System 1.0 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29227.yaml"
+},
+"CVE-2020-29279": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.52881,
+"epss_pct": 0.98894,
+"name": "74CMS - Remote File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29279.yaml"
+},
+"CVE-2020-29390": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.39565,
+"epss_pct": 0.98508,
+"name": "Zeroshell 3.9.3 - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29390.yaml"
+},
+"CVE-2020-29395": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.12883,
+"epss_pct": 0.9602,
+"name": "Wordpress EventON Calendar 3.0.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29395.yaml"
+},
+"CVE-2020-29453": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.23948,
+"epss_pct": 0.9767,
+"name": "Jira Server Pre-Auth - Arbitrary File Retrieval (WEB-INF, META-INF)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29453.yaml"
+},
+"CVE-2020-29583": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-522",
+"epss": 0.90155,
+"epss_pct": 0.99787,
+"name": "ZyXel USG - Hardcoded Credentials",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29583.yaml"
+},
+"CVE-2020-29597": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.71006,
+"epss_pct": 0.99356,
+"name": "IncomCMS 2.0 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29597.yaml"
+},
+"CVE-2020-3187": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-22",
+"epss": 0.96595,
+"epss_pct": 0.99878,
+"name": "Cisco Adaptive Security Appliance Software/Cisco Firepower Threat Defense - Directory Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-3187.yaml"
+},
+"CVE-2020-3452": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.99992,
+"epss_pct": 0.99986,
+"name": "Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-3452.yaml"
+},
+"CVE-2020-35131": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.51299,
+"epss_pct": 0.98855,
+"name": "Cockpit CMS 0.6.1 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35131.yaml"
+},
+"CVE-2020-35234": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-532",
+"epss": 0.64603,
+"epss_pct": 0.99179,
+"name": "SMTP WP Plugin Directory Listing",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35234.yaml"
+},
+"CVE-2020-35338": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.12111,
+"epss_pct": 0.95852,
+"name": "Wireless Multiplex Terminal Playout Server <=20.2.8 - Default Credential Detection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35338.yaml"
+},
+"CVE-2020-35359": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"cwe": "CWE-770",
+"epss": 0.04744,
+"epss_pct": 0.91229,
+"name": "Pure-FTPd 1.0.48 - Denial of Service",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-35359.yaml"
+},
+"CVE-2020-35476": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.8533,
+"epss_pct": 0.997,
+"name": "OpenTSDB <=2.4.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35476.yaml"
+},
+"CVE-2020-35580": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.13975,
+"epss_pct": 0.96275,
+"name": "SearchBlox <9.2.2 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35580.yaml"
+},
+"CVE-2020-35598": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.21,
+"epss_pct": 0.9739,
+"name": "Advanced Comment System 1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35598.yaml"
+},
+"CVE-2020-35713": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.32704,
+"epss_pct": 0.9822,
+"name": "Belkin Linksys RE6500 <1.0.012.001 - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35713.yaml"
+},
+"CVE-2020-35729": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.88099,
+"epss_pct": 0.99754,
+"name": "Klog Server <=2.41 - Unauthenticated Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35729.yaml"
+},
+"CVE-2020-35736": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.15402,
+"epss_pct": 0.96538,
+"name": "GateOne 1.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35736.yaml"
+},
+"CVE-2020-35749": {
+"cvss": 7.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.30479,
+"epss_pct": 0.98102,
+"name": "WordPress Simple Job Board <2.9.4 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35749.yaml"
+},
+"CVE-2020-35774": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.85649,
+"epss_pct": 0.99707,
+"name": "twitter-server Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35774.yaml"
+},
+"CVE-2020-3580": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.85575,
+"epss_pct": 0.99707,
+"name": "Cisco ASA/FTD Software - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-3580.yaml"
+},
+"CVE-2020-35846": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.93292,
+"epss_pct": 0.99829,
+"name": "Agentejo Cockpit < 0.11.2 - NoSQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35846.yaml"
+},
+"CVE-2020-35847": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.98165,
+"epss_pct": 0.99909,
+"name": "Agentejo Cockpit <0.11.2 - NoSQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35847.yaml"
+},
+"CVE-2020-35848": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.74591,
+"epss_pct": 0.99459,
+"name": "Agentejo Cockpit <0.12.0 - NoSQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35848.yaml"
+},
+"CVE-2020-35951": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:H",
+"cwe": "CWE-306",
+"epss": 0.76328,
+"epss_pct": 0.99499,
+"name": "Wordpress Quiz and Survey Master <7.0.1 - Arbitrary File Deletion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35951.yaml"
+},
+"CVE-2020-35984": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01104,
+"epss_pct": 0.63443,
+"name": "Rukovoditel <= 2.7.2 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35984.yaml"
+},
+"CVE-2020-35985": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01111,
+"epss_pct": 0.63641,
+"name": "Rukovoditel <= 2.7.2 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35985.yaml"
+},
+"CVE-2020-35986": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01109,
+"epss_pct": 0.63579,
+"name": "Rukovoditel <= 2.7.2 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35986.yaml"
+},
+"CVE-2020-35987": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01109,
+"epss_pct": 0.6358,
+"name": "Rukovoditel <= 2.7.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35987.yaml"
+},
+"CVE-2020-36112": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.18052,
+"epss_pct": 0.96979,
+"name": "CSE Bookstore 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36112.yaml"
+},
+"CVE-2020-36155": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.08975,
+"epss_pct": 0.94883,
+"name": "Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User Meta",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36155.yaml"
+},
+"CVE-2020-36289": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-863",
+"epss": 0.99209,
+"epss_pct": 0.99932,
+"name": "Jira Server and Data Center - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36289.yaml"
+},
+"CVE-2020-36333": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
+"cwe": "CWE-285",
+"epss": 0.04105,
+"epss_pct": 0.90038,
+"name": "ThemeGrill Demo Importer < 1.6.2 - Database Reset",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36333.yaml"
+},
+"CVE-2020-36365": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02985,
+"epss_pct": 0.86346,
+"name": "Smartstore <4.1.0 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36365.yaml"
+},
+"CVE-2020-36510": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0259,
+"epss_pct": 0.84189,
+"name": "WordPress 15Zine <3.3.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36510.yaml"
+},
+"CVE-2020-36705": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.06944,
+"epss_pct": 0.93642,
+"name": "Adning Advertising <= 1.5.5 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36705.yaml"
+},
+"CVE-2020-36708": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.65342,
+"epss_pct": 0.99199,
+"name": "WordPress Epsilon Framework Themes <=2.4.8 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36708.yaml"
+},
+"CVE-2020-36719": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.04304,
+"epss_pct": 0.90447,
+"name": "ListingPro < 2.6.1 - Arbitrary Plugin Installation/Activation/Deactivation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36719.yaml"
+},
+"CVE-2020-36723": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01608,
+"epss_pct": 0.74179,
+"name": "ListingPro < 2.6.1 - Sensitive Data Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36723.yaml"
+},
+"CVE-2020-36728": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"epss": 0.03159,
+"epss_pct": 0.87072,
+"name": "WordPress Plugin Adning Advertising < 1.5.6 - Arbitrary File Upload",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36728.yaml"
+},
+"CVE-2020-36731": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01342,
+"epss_pct": 0.69347,
+"name": "Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36731.yaml"
+},
+"CVE-2020-36836": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.01407,
+"epss_pct": 0.70706,
+"name": "WordPress WP Fastest Cache <= 0.9.0.2 - Authenticated Arbitrary File Deletion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36836.yaml"
+},
+"CVE-2020-36884": {
+"cwe": "CWE-918",
+"epss": 0.01135,
+"epss_pct": 0.64246,
+"name": "BrightSign Digital Signage 8.2.26 - Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36884.yaml"
+},
+"CVE-2020-37123": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.03135,
+"epss_pct": 0.86969,
+"name": "Pinger 1.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-37123.yaml"
+},
+"CVE-2020-3952": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.90384,
+"epss_pct": 0.9979,
+"name": "VMware vCenter Server LDAP Broken Access Control",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-3952.yaml"
+},
+"CVE-2020-4427": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.70031,
+"epss_pct": 0.99325,
+"name": "IBM Data Risk Manager - Authentication Bypass via SAML",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-4427.yaml"
+},
+"CVE-2020-4429": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.71363,
+"epss_pct": 0.99365,
+"name": "IBM Data Risk Manager - Hardcoded Credentials",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2020/CVE-2020-4429.yaml"
+},
+"CVE-2020-4463": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
+"cwe": "CWE-611",
+"epss": 0.3159,
+"epss_pct": 0.9816,
+"name": "IBM Maximo Asset Management Information Disclosure - XML External Entity Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-4463.yaml"
+},
+"CVE-2020-5191": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0552,
+"epss_pct": 0.92247,
+"name": "PHPGurukul Hospital Management System - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5191.yaml"
+},
+"CVE-2020-5192": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.1681,
+"epss_pct": 0.96813,
+"name": "Hospital Management System 4.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5192.yaml"
+},
+"CVE-2020-5284": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.44334,
+"epss_pct": 0.98665,
+"name": "Next.js <9.3.2 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5284.yaml"
+},
+"CVE-2020-5307": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.15652,
+"epss_pct": 0.96599,
+"name": "PHPGurukul Dairy Farm Shop Management System 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5307.yaml"
+},
+"CVE-2020-5405": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
+"epss": 0.6876,
+"epss_pct": 0.9929,
+"name": "Spring Cloud Config - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5405.yaml"
+},
+"CVE-2020-5410": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.95586,
+"epss_pct": 0.99864,
+"name": "Spring Cloud Config Server - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5410.yaml"
+},
+"CVE-2020-5412": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.10214,
+"epss_pct": 0.95333,
+"name": "Spring Cloud Netflix - Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5412.yaml"
+},
+"CVE-2020-5722": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.84406,
+"epss_pct": 0.99681,
+"name": "Grandstream UCM6200 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5722.yaml"
+},
+"CVE-2020-5766": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.07233,
+"epss_pct": 0.93874,
+"name": "SRS Simple Hits Counter 1.0.3-1.0.4 - Unauthenticated Blind SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5766.yaml"
+},
+"CVE-2020-5775": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.06531,
+"epss_pct": 0.93299,
+"name": "Canvas LMS v2020-07-29 - Blind Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5775.yaml"
+},
+"CVE-2020-5776": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-352",
+"epss": 0.14725,
+"epss_pct": 0.96424,
+"name": "MAGMI - Cross-Site Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5776.yaml"
+},
+"CVE-2020-5777": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.23303,
+"epss_pct": 0.97609,
+"name": "Magento Mass Importer  <0.7.24 - Remote Auth Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5777.yaml"
+},
+"CVE-2020-5847": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.95844,
+"epss_pct": 0.99869,
+"name": "UnRaid <=6.80 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5847.yaml"
+},
+"CVE-2020-5902": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.99999,
+"epss_pct": 1.0,
+"name": "F5 BIG-IP TMUI - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5902.yaml"
+},
+"CVE-2020-6171": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04798,
+"epss_pct": 0.91312,
+"name": "CLink Office 2.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6171.yaml"
+},
+"CVE-2020-6207": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.98266,
+"epss_pct": 0.99911,
+"name": "SAP Solution Manager 7.2 - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6207.yaml"
+},
+"CVE-2020-6287": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.94719,
+"epss_pct": 0.99852,
+"name": "SAP NetWeaver AS JAVA 7.30-7.50 - Remote Admin Addition",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6287.yaml"
+},
+"CVE-2020-6308": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.61736,
+"epss_pct": 0.99109,
+"name": "SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6308.yaml"
+},
+"CVE-2020-6637": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.20058,
+"epss_pct": 0.97252,
+"name": "OpenSIS 7.3 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6637.yaml"
+},
+"CVE-2020-6950": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.10124,
+"epss_pct": 0.95308,
+"name": "Eclipse Mojarra - Local File Read",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6950.yaml"
+},
+"CVE-2020-7107": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02195,
+"epss_pct": 0.8123,
+"name": "WordPress Ultimate FAQ <1.8.30 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7107.yaml"
+},
+"CVE-2020-7136": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-288",
+"epss": 0.79522,
+"epss_pct": 0.99573,
+"name": "HPE Smart Update Manager < 8.5.6 - Remote Unauthorized Access",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7136.yaml"
+},
+"CVE-2020-7209": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.98751,
+"epss_pct": 0.99923,
+"name": "LinuxKI Toolset <= 6.01 - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7209.yaml"
+},
+"CVE-2020-7247": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-755",
+"epss": 0.98972,
+"epss_pct": 0.99927,
+"name": "OpenSMTPD 6.4.0-6.6.1 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2020/CVE-2020-7247.yaml"
+},
+"CVE-2020-7318": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01024,
+"epss_pct": 0.61143,
+"name": "McAfee ePolicy Orchestrator <5.10.9 Update 9 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7318.yaml"
+},
+"CVE-2020-7796": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.84418,
+"epss_pct": 0.99682,
+"name": "Zimbra Collaboration Suite < 8.8.15 Patch 7 - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7796.yaml"
+},
+"CVE-2020-7943": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.07884,
+"epss_pct": 0.94291,
+"name": "Puppet Server/PuppetDB - Sensitive Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7943.yaml"
+},
+"CVE-2020-7961": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.99905,
+"epss_pct": 0.99964,
+"name": "Liferay Portal Unauthenticated < 7.2.1 CE GA2 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7961.yaml"
+},
+"CVE-2020-7980": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.82544,
+"epss_pct": 0.99641,
+"name": "Satellian Intellian Aptus Web <= 1.24 - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7980.yaml"
+},
+"CVE-2020-8115": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.07055,
+"epss_pct": 0.93735,
+"name": "Revive Adserver <=5.0.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8115.yaml"
+},
+"CVE-2020-8163": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.82047,
+"epss_pct": 0.99628,
+"name": "Ruby on Rails <5.0.1 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8163.yaml"
+},
+"CVE-2020-8191": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.26136,
+"epss_pct": 0.97841,
+"name": "Citrix ADC/Gateway - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8191.yaml"
+},
+"CVE-2020-8193": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"epss": 0.88411,
+"epss_pct": 0.99759,
+"name": "Citrix - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8193.yaml"
+},
+"CVE-2020-8194": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
+"cwe": "CWE-94",
+"epss": 0.10695,
+"epss_pct": 0.95486,
+"name": "Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8194.yaml"
+},
+"CVE-2020-8209": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.48656,
+"epss_pct": 0.98784,
+"name": "Citrix XenMobile Server - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8209.yaml"
+},
+"CVE-2020-8497": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.05275,
+"epss_pct": 0.91982,
+"name": "Artica Pandora FMS <=7.42 - Arbitrary File Read",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8497.yaml"
+},
+"CVE-2020-8512": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.14834,
+"epss_pct": 0.96442,
+"name": "IceWarp WebMail Server <=11.4.4.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8512.yaml"
+},
+"CVE-2020-8515": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99993,
+"epss_pct": 0.99986,
+"name": "DrayTek - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8515.yaml"
+},
+"CVE-2020-8615": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
+"cwe": "CWE-352",
+"epss": 0.0883,
+"epss_pct": 0.94815,
+"name": "Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8615.yaml"
+},
+"CVE-2020-8641": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.10808,
+"epss_pct": 0.95521,
+"name": "Lotus Core CMS 1.0.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8641.yaml"
+},
+"CVE-2020-8644": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.86689,
+"epss_pct": 0.99726,
+"name": "playSMS <1.4.3 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8644.yaml"
+},
+"CVE-2020-8654": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.9118,
+"epss_pct": 0.998,
+"name": "EyesOfNetwork 5.1-5.3 - SQL Injection/Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8654.yaml"
+},
+"CVE-2020-8656": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.846,
+"epss_pct": 0.99686,
+"name": "EyesOfNetwork - Hardcoded API Key & SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8656.yaml"
+},
+"CVE-2020-8657": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.91874,
+"epss_pct": 0.99809,
+"name": "EyesOfNetwork - Hardcoded API Key",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8657.yaml"
+},
+"CVE-2020-8771": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.46454,
+"epss_pct": 0.98731,
+"name": "WordPress Time Capsule < 1.21.16 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8771.yaml"
+},
+"CVE-2020-8772": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.88049,
+"epss_pct": 0.99753,
+"name": "WordPress InfiniteWP <1.9.4.5 - Authorization Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8772.yaml"
+},
+"CVE-2020-8813": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.73779,
+"epss_pct": 0.99436,
+"name": "Cacti v1.2.8 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8813.yaml"
+},
+"CVE-2020-8982": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.27149,
+"epss_pct": 0.97907,
+"name": "Citrix ShareFile StorageZones <=5.10.x - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8982.yaml"
+},
+"CVE-2020-9036": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03587,
+"epss_pct": 0.88591,
+"name": "Jeedom <=4.0.38 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9036.yaml"
+},
+"CVE-2020-9039": {
+"name": "Couchbase Server - Broken Access Control",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9039.yaml"
+},
+"CVE-2020-9043": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-200",
+"epss": 0.08173,
+"epss_pct": 0.94455,
+"name": "WordPress wpCentral <1.5.1 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9043.yaml"
+},
+"CVE-2020-9047": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-347",
+"epss": 0.0777,
+"epss_pct": 0.94215,
+"name": "exacqVision Web Service - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9047.yaml"
+},
+"CVE-2020-9054": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99988,
+"epss_pct": 0.99983,
+"name": "Zyxel NAS Firmware 5.21- Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9054.yaml"
+},
+"CVE-2020-9274": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-824",
+"epss": 0.05957,
+"epss_pct": 0.92761,
+"name": "Pure-FTPd \u2264 1.0.49 - DoS via Uninitialized Pointer",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-9274.yaml"
+},
+"CVE-2020-9314": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01282,
+"epss_pct": 0.68041,
+"name": "Oracle iPlanet Web Server 7.0.x - Image Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9314.yaml"
+},
+"CVE-2020-9315": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.81814,
+"epss_pct": 0.9962,
+"name": "Oracle iPlanet Web Server 7.0.x - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9315.yaml"
+},
+"CVE-2020-9344": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05198,
+"epss_pct": 0.91888,
+"name": "Jira Subversion ALM for Enterprise <8.8.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9344.yaml"
+},
+"CVE-2020-9365": {
+"name": "Pure-FTPd 1.0.24 - Security Vulnerability",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-9365.yaml"
+},
+"CVE-2020-9376": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-74",
+"epss": 0.16586,
+"epss_pct": 0.96779,
+"name": "D-Link DIR-610 Devices - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9376.yaml"
+},
+"CVE-2020-9402": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.22513,
+"epss_pct": 0.97536,
+"name": "Django SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2020/CVE-2020-9402.yaml"
+},
+"CVE-2020-9425": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-670",
+"epss": 0.19037,
+"epss_pct": 0.97104,
+"name": "rConfig <3.9.4 - Sensitive Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9425.yaml"
+},
+"CVE-2020-9480": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.2937,
+"epss_pct": 0.98043,
+"name": "Apache Spark - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9480.yaml"
+},
+"CVE-2020-9483": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.34613,
+"epss_pct": 0.98303,
+"name": "SkyWalking SQLI",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9483.yaml"
+},
+"CVE-2020-9484": {
+"cvss": 7.0,
+"cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.56636,
+"epss_pct": 0.98988,
+"name": "Apache Tomcat Remote Command Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9484.yaml"
+},
+"CVE-2020-9496": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-502",
+"epss": 0.98926,
+"epss_pct": 0.99925,
+"name": "Apache OFBiz 17.12.03 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9496.yaml"
+},
+"CVE-2020-9547": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.18383,
+"epss_pct": 0.97021,
+"name": "FasterXML jackson-databind - Deserialization Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9547.yaml"
+},
+"CVE-2020-9548": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.18345,
+"epss_pct": 0.97018,
+"name": "FasterXML Jackson Databind <=2.9.10.4 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9548.yaml"
+},
+"CVE-2020-9757": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.72821,
+"epss_pct": 0.99408,
+"name": "Craft CMS < 3.3.0 - Server-Side Template Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9757.yaml"
+},
+"CVE-2021-1472": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.71834,
+"epss_pct": 0.99378,
+"name": "Cisco Small Business RV Series - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-1472.yaml"
+},
+"CVE-2021-1497": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99928,
+"epss_pct": 0.99968,
+"name": "Cisco HyperFlex HX Data Platform - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-1497.yaml"
+},
+"CVE-2021-1498": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99999,
+"epss_pct": 0.9999,
+"name": "Cisco HyperFlex HX Data Platform - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-1498.yaml"
+},
+"CVE-2021-1499": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-306",
+"epss": 0.80426,
+"epss_pct": 0.99591,
+"name": "Cisco HyperFlex HX Data Platform - Arbitrary File Upload",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-1499.yaml"
+},
+"CVE-2021-20021": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.83425,
+"epss_pct": 0.99659,
+"name": "SonicWall Email Security <= 10.0.9.x - Unauthenticated Admin Account Creation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20021.yaml"
+},
+"CVE-2021-20031": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.13041,
+"epss_pct": 0.9606,
+"name": "SonicWall SonicOS 7.0 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20031.yaml"
+},
+"CVE-2021-20038": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.99912,
+"epss_pct": 0.99966,
+"name": "SonicWall SMA100 Stack - Buffer Overflow/Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20038.yaml"
+},
+"CVE-2021-20086": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-1321",
+"epss": 0.06104,
+"epss_pct": 0.92914,
+"name": "Odoo Apps - Cross-Site Scripting via Prototype Pollution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20086.yaml"
+},
+"CVE-2021-20090": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.99983,
+"epss_pct": 0.99981,
+"name": "Buffalo WSR-2533DHPL2 - Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20090.yaml"
+},
+"CVE-2021-20091": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.08796,
+"epss_pct": 0.948,
+"name": "Buffalo WSR-2533DHPL2 - Configuration File Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20091.yaml"
+},
+"CVE-2021-20092": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.0817,
+"epss_pct": 0.94452,
+"name": "Buffalo WSR-2533DHPL2 - Improper Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20092.yaml"
+},
+"CVE-2021-20114": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-425",
+"epss": 0.05973,
+"epss_pct": 0.92775,
+"name": "TCExam <= 14.8.1 - Sensitive Information Exposure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20114.yaml"
+},
+"CVE-2021-20123": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.90234,
+"epss_pct": 0.99788,
+"name": "Draytek VigorConnect 1.6.0-B - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20123.yaml"
+},
+"CVE-2021-20124": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.96308,
+"epss_pct": 0.99875,
+"name": "Draytek VigorConnect 6.0-B3 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20124.yaml"
+},
+"CVE-2021-20137": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02557,
+"epss_pct": 0.83958,
+"name": "Gryphon Tower - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20137.yaml"
+},
+"CVE-2021-20150": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.4006,
+"epss_pct": 0.98528,
+"name": "Trendnet AC2600 TEW-827DRU - Credentials Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20150.yaml"
+},
+"CVE-2021-20158": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.10861,
+"epss_pct": 0.95537,
+"name": "Trendnet AC2600 TEW-827DRU 2.08B01 - Admin Password Change",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20158.yaml"
+},
+"CVE-2021-20167": {
+"cvss": 8.0,
+"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.07783,
+"epss_pct": 0.94221,
+"name": "Netgear RAX43 1.0.3.96 - Command Injection/Authentication Bypass Buffer Overrun",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20167.yaml"
+},
+"CVE-2021-20323": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.37246,
+"epss_pct": 0.98414,
+"name": "Keycloak 10.0.0 - 18.0.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20323.yaml"
+},
+"CVE-2021-20617": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.07871,
+"epss_pct": 0.94276,
+"name": "Acmailer - Improper Access Control to OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20617.yaml"
+},
+"CVE-2021-20792": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03378,
+"epss_pct": 0.87921,
+"name": "WordPress Quiz and Survey Master <7.1.14 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20792.yaml"
+},
+"CVE-2021-20837": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.88144,
+"epss_pct": 0.99755,
+"name": "MovableType - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20837.yaml"
+},
+"CVE-2021-21087": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.37095,
+"epss_pct": 0.98409,
+"name": "Adobe ColdFusion - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21087.yaml"
+},
+"CVE-2021-21234": {
+"cvss": 7.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.21173,
+"epss_pct": 0.97407,
+"name": "Spring Boot Actuator Logview Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21234.yaml"
+},
+"CVE-2021-21246": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.49051,
+"epss_pct": 0.98794,
+"name": "OneDev < 4.0.3 - User Access Token Leak",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21246.yaml"
+},
+"CVE-2021-21287": {
+"cvss": 7.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.24784,
+"epss_pct": 0.9774,
+"name": "MinIO Browser API - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21287.yaml"
+},
+"CVE-2021-21307": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.89189,
+"epss_pct": 0.99769,
+"name": "Lucee Admin - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21307.yaml"
+},
+"CVE-2021-21311": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.90461,
+"epss_pct": 0.99792,
+"name": "Adminer <4.7.9 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21311.yaml"
+},
+"CVE-2021-21315": {
+"cvss": 7.8,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.90675,
+"epss_pct": 0.99794,
+"name": "Node.JS System Information Library <5.3.1 - Remote Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21315.yaml"
+},
+"CVE-2021-21345": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.72324,
+"epss_pct": 0.99393,
+"name": "XStream < 1.4.16 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21345.yaml"
+},
+"CVE-2021-2135": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.0837,
+"epss_pct": 0.94559,
+"name": "Oracle WebLogic Server - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-2135.yaml"
+},
+"CVE-2021-21351": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.82136,
+"epss_pct": 0.9963,
+"name": "XStream <1.4.16 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21351.yaml"
+},
+"CVE-2021-21389": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-863",
+"epss": 0.13521,
+"epss_pct": 0.96169,
+"name": "BuddyPress REST API  <7.2.1 - Privilege Escalation/Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21389.yaml"
+},
+"CVE-2021-21402": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.79855,
+"epss_pct": 0.9958,
+"name": "Jellyfin <10.7.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21402.yaml"
+},
+"CVE-2021-21479": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.10116,
+"epss_pct": 0.95305,
+"name": "SCIMono <0.0.19 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21479.yaml"
+},
+"CVE-2021-21745": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
+"cwe": "CWE-352",
+"epss": 0.55709,
+"epss_pct": 0.98965,
+"name": "ZTE MF971R - Referer authentication bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21745.yaml"
+},
+"CVE-2021-21799": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.12293,
+"epss_pct": 0.95894,
+"name": "Advantech R-SeeNet 2.4.12 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21799.yaml"
+},
+"CVE-2021-21800": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.14115,
+"epss_pct": 0.963,
+"name": "Advantech R-SeeNet 2.4.12 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21800.yaml"
+},
+"CVE-2021-21801": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.63415,
+"epss_pct": 0.99148,
+"name": "Advantech R-SeeNet - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21801.yaml"
+},
+"CVE-2021-21802": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.099,
+"epss_pct": 0.95228,
+"name": "Advantech R-SeeNet - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21802.yaml"
+},
+"CVE-2021-21803": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.07902,
+"epss_pct": 0.94296,
+"name": "Advantech R-SeeNet - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21803.yaml"
+},
+"CVE-2021-21805": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.69842,
+"epss_pct": 0.9932,
+"name": "Advantech R-SeeNet 2.4.12 - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21805.yaml"
+},
+"CVE-2021-21816": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.32385,
+"epss_pct": 0.98204,
+"name": "D-Link DIR-3040 1.13B03 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21816.yaml"
+},
+"CVE-2021-21881": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.36234,
+"epss_pct": 0.98365,
+"name": "Lantronix PremierWave 2050 8.9.0.0R4 - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21881.yaml"
+},
+"CVE-2021-21972": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.99865,
+"epss_pct": 0.99961,
+"name": "VMware vSphere Client (HTML5) - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21972.yaml"
+},
+"CVE-2021-21973": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.8764,
+"epss_pct": 0.99746,
+"name": "VMware vSphere - Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21973.yaml"
+},
+"CVE-2021-21975": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.7829,
+"epss_pct": 0.99546,
+"name": "vRealize Operations Manager API - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21975.yaml"
+},
+"CVE-2021-21978": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.99005,
+"epss_pct": 0.99928,
+"name": "VMware View Planner <4.6 SP1- Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21978.yaml"
+},
+"CVE-2021-21985": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.99999,
+"epss_pct": 0.99992,
+"name": "VMware vSphere Client (HTML5) - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21985.yaml"
+},
+"CVE-2021-22005": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.99999,
+"epss_pct": 0.99998,
+"name": "VMware vCenter Server - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22005.yaml"
+},
+"CVE-2021-22017": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.49177,
+"epss_pct": 0.98797,
+"name": "vCenter Server - Improper Access Control",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22017.yaml"
+},
+"CVE-2021-22053": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.13035,
+"epss_pct": 0.96061,
+"name": "Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22053.yaml"
+},
+"CVE-2021-22054": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.97369,
+"epss_pct": 0.99893,
+"name": "VMWare Workspace ONE UEM - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22054.yaml"
+},
+"CVE-2021-22122": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.1052,
+"epss_pct": 0.95431,
+"name": "FortiWeb - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22122.yaml"
+},
+"CVE-2021-22145": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-209",
+"epss": 0.76249,
+"epss_pct": 0.99498,
+"name": "Elasticsearch 7.10.0-7.13.3 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22145.yaml"
+},
+"CVE-2021-22175": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.53372,
+"epss_pct": 0.98909,
+"name": "GitLab CI Lint API - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22175.yaml"
+},
+"CVE-2021-22205": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.99731,
+"epss_pct": 0.99952,
+"name": "GitLab CE/EE - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22205.yaml"
+},
+"CVE-2021-22214": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.27806,
+"epss_pct": 0.9795,
+"name": "Gitlab CE/EE 10.5 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22214.yaml"
+},
+"CVE-2021-22502": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.9674,
+"epss_pct": 0.99882,
+"name": "Micro Focus Operations Bridge Reporter - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22502.yaml"
+},
+"CVE-2021-22707": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.64612,
+"epss_pct": 0.9918,
+"name": "EVlink City < R8 V3.4.0.1 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22707.yaml"
+},
+"CVE-2021-22873": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.69561,
+"epss_pct": 0.99312,
+"name": "Revive Adserver <5.1.0 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22873.yaml"
+},
+"CVE-2021-22881": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.87301,
+"epss_pct": 0.9974,
+"name": "Ruby on Rails - Open Redirect via Host Header Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22881.yaml"
+},
+"CVE-2021-22911": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.95242,
+"epss_pct": 0.99859,
+"name": "Rocket.Chat <=3.13 - NoSQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22911.yaml"
+},
+"CVE-2021-22986": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.99898,
+"epss_pct": 0.99964,
+"name": "F5 iControl REST - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22986.yaml"
+},
+"CVE-2021-23241": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.13436,
+"epss_pct": 0.96149,
+"name": "MERCUSYS Mercury X18G 1.0.5 Router - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-23241.yaml"
+},
+"CVE-2021-23337": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.21333,
+"epss_pct": 0.97423,
+"name": "Lodash Template - Server-Side Template Injection (RCE)",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-23337.yaml"
+},
+"CVE-2021-23394": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.19083,
+"epss_pct": 0.97113,
+"name": "elFinder < 2.1.58 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-23394.yaml"
+},
+"CVE-2021-24139": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.05547,
+"epss_pct": 0.92281,
+"name": "10Web Photo Gallery < 1.5.55 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24139.yaml"
+},
+"CVE-2021-24145": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.87314,
+"epss_pct": 0.9974,
+"name": "WordPress Modern Events Calendar Lite <5.16.5 - Authenticated Arbitrary File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24145.yaml"
+},
+"CVE-2021-24146": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
+"epss": 0.31043,
+"epss_pct": 0.98131,
+"name": "WordPress Modern Events Calendar Lite <5.16.5 - Sensitive Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24146.yaml"
+},
+"CVE-2021-24150": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.04337,
+"epss_pct": 0.90507,
+"name": "WordPress Like Button Rating <2.6.32 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24150.yaml"
+},
+"CVE-2021-24155": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.84112,
+"epss_pct": 0.99675,
+"name": "WordPress BackupGuard <1.6.0 - Authenticated Arbitrary File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24155.yaml"
+},
+"CVE-2021-24165": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01643,
+"epss_pct": 0.74725,
+"name": "WordPress Ninja Forms <3.4.34 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24165.yaml"
+},
+"CVE-2021-24169": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.10348,
+"epss_pct": 0.95377,
+"name": "WordPress Advanced Order Export For WooCommerce <3.1.8 - Authenticated Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24169.yaml"
+},
+"CVE-2021-24170": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.04788,
+"epss_pct": 0.91298,
+"name": "User Profile Picture < 2.5.0 - Sensitive Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24170.yaml"
+},
+"CVE-2021-24175": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.14462,
+"epss_pct": 0.9637,
+"name": "The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24175.yaml"
+},
+"CVE-2021-24176": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02044,
+"epss_pct": 0.79815,
+"name": "WordPress JH 404 Logger <=1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24176.yaml"
+},
+"CVE-2021-24210": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.03066,
+"epss_pct": 0.86691,
+"name": "WordPress PhastPress <1.111 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24210.yaml"
+},
+"CVE-2021-24212": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.07908,
+"epss_pct": 0.94299,
+"name": "WooCommerce Help Scout - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24212.yaml"
+},
+"CVE-2021-24213": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0137,
+"epss_pct": 0.69983,
+"name": "GiveWP <= 2.9.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24213.yaml"
+},
+"CVE-2021-24214": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0163,
+"epss_pct": 0.74514,
+"name": "WordPress OpenID Connect Generic Client 3.8.0-3.8.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24214.yaml"
+},
+"CVE-2021-24215": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.09733,
+"epss_pct": 0.95171,
+"name": "Controlled Admin Access WordPress Plugin <= 1.4.0 - Improper Access Control & Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24215.yaml"
+},
+"CVE-2021-24219": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"epss": 0.02059,
+"epss_pct": 0.79964,
+"name": "All Thrive Themes and Plugins - Unauthenticated Option Update",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24219.yaml"
+},
+"CVE-2021-24220": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.03946,
+"epss_pct": 0.89663,
+"name": "Multiple Thrive Themes < 2.0.0 -  Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24220.yaml"
+},
+"CVE-2021-24226": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.05404,
+"epss_pct": 0.92118,
+"name": "AccessAlly <3.5.7 - Sensitive Information Leakage",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24226.yaml"
+},
+"CVE-2021-24227": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.05927,
+"epss_pct": 0.92727,
+"name": "Patreon WordPress  <1.7.0 - Unauthenticated Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24227.yaml"
+},
+"CVE-2021-24235": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02927,
+"epss_pct": 0.86091,
+"name": "WordPress Goto Tour & Travel Theme <2.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24235.yaml"
+},
+"CVE-2021-24236": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.0714,
+"epss_pct": 0.93807,
+"name": "WordPress Imagements <=1.2.5 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24236.yaml"
+},
+"CVE-2021-24237": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06275,
+"epss_pct": 0.93075,
+"name": "WordPress Realteo <=1.2.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24237.yaml"
+},
+"CVE-2021-24239": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01602,
+"epss_pct": 0.74085,
+"name": "WordPress Pie Register <3.7.0.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24239.yaml"
+},
+"CVE-2021-24245": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05721,
+"epss_pct": 0.92497,
+"name": "WordPress Stop Spammers <2021.9 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24245.yaml"
+},
+"CVE-2021-24274": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.17638,
+"epss_pct": 0.96928,
+"name": "WordPress Supsystic Ultimate Maps <1.2.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24274.yaml"
+},
+"CVE-2021-24275": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.18165,
+"epss_pct": 0.96991,
+"name": "Popup by Supsystic <1.10.5 - Cross-Site scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24275.yaml"
+},
+"CVE-2021-24276": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.16044,
+"epss_pct": 0.96679,
+"name": "WordPress Supsystic Contact Form <1.7.15 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24276.yaml"
+},
+"CVE-2021-24278": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-863",
+"epss": 0.07359,
+"epss_pct": 0.93958,
+"name": "WordPress Contact Form 7 <2.3.4 - Arbitrary Nonce Generation",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24278.yaml"
+},
+"CVE-2021-24284": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.4214,
+"epss_pct": 0.98594,
+"name": "WordPress Kaswara Modern VC Addons <=3.0.1 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24284.yaml"
+},
+"CVE-2021-24285": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.14697,
+"epss_pct": 0.96418,
+"name": "WordPress Car Seller - Auto Classifieds Script - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24285.yaml"
+},
+"CVE-2021-24286": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.13942,
+"epss_pct": 0.96271,
+"name": "WordPress Plugin Redirect 404 to Parent 1.3.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24286.yaml"
+},
+"CVE-2021-24287": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.10358,
+"epss_pct": 0.95382,
+"name": "WordPress Select All Categories and Taxonomies <1.3.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24287.yaml"
+},
+"CVE-2021-24288": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01939,
+"epss_pct": 0.78672,
+"name": "WordPress AcyMailing <7.5.0 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24288.yaml"
+},
+"CVE-2021-24291": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.1445,
+"epss_pct": 0.96369,
+"name": "WordPress Photo Gallery by 10Web <1.5.69 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24291.yaml"
+},
+"CVE-2021-24295": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.04691,
+"epss_pct": 0.91144,
+"name": "Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4 - Unauthenticated Blind SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24295.yaml"
+},
+"CVE-2021-24298": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03451,
+"epss_pct": 0.88169,
+"name": "WordPress Simple Giveaways <2.36.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24298.yaml"
+},
+"CVE-2021-24300": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.10587,
+"epss_pct": 0.95452,
+"name": "WordPress WooCommerce <1.13.22 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24300.yaml"
+},
+"CVE-2021-24316": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06442,
+"epss_pct": 0.93229,
+"name": "WordPress Mediumish Theme <=1.0.47 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24316.yaml"
+},
+"CVE-2021-24320": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.10769,
+"epss_pct": 0.95509,
+"name": "WordPress Bello Directory & Listing Theme <1.6.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24320.yaml"
+},
+"CVE-2021-24335": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03884,
+"epss_pct": 0.89482,
+"name": "WordPress Car Repair Services & Auto Mechanic Theme <4.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24335.yaml"
+},
+"CVE-2021-24340": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.29776,
+"epss_pct": 0.98064,
+"name": "WordPress Statistics <13.0.8 - Blind SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24340.yaml"
+},
+"CVE-2021-24342": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01975,
+"epss_pct": 0.7905,
+"name": "WordPress JNews Theme <8.0.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24342.yaml"
+},
+"CVE-2021-24347": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-178",
+"epss": 0.5408,
+"epss_pct": 0.98929,
+"name": "WordPress SP Project & Document Manager <4.22 - Authenticated Shell Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24347.yaml"
+},
+"CVE-2021-24351": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02483,
+"epss_pct": 0.83449,
+"name": "WordPress The Plus Addons for Elementor <4.1.12 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24351.yaml"
+},
+"CVE-2021-24358": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02295,
+"epss_pct": 0.82045,
+"name": "Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24358.yaml"
+},
+"CVE-2021-24364": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01975,
+"epss_pct": 0.7905,
+"name": "WordPress Jannah Theme <5.4.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24364.yaml"
+},
+"CVE-2021-24370": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.47091,
+"epss_pct": 0.98747,
+"name": "WordPress Fancy Product Designer <4.6.9 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24370.yaml"
+},
+"CVE-2021-24387": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03677,
+"epss_pct": 0.88876,
+"name": "WordPress Pro Real Estate 7 Theme <3.1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24387.yaml"
+},
+"CVE-2021-24389": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03753,
+"epss_pct": 0.89099,
+"name": "WordPress FoodBakery <2.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24389.yaml"
+},
+"CVE-2021-24406": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02915,
+"epss_pct": 0.86041,
+"name": "WordPress wpForo Forum < 1.9.7 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24406.yaml"
+},
+"CVE-2021-24407": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02591,
+"epss_pct": 0.84196,
+"name": "WordPress Jannah Theme <5.4.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24407.yaml"
+},
+"CVE-2021-24409": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01793,
+"epss_pct": 0.76842,
+"name": "Prismatic < 2.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24409.yaml"
+},
+"CVE-2021-24435": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01714,
+"epss_pct": 0.75781,
+"name": "WordPress Titan Framework plugin <= 1.12.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24435.yaml"
+},
+"CVE-2021-24436": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01905,
+"epss_pct": 0.78263,
+"name": "WordPress W3 Total Cache <2.1.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24436.yaml"
+},
+"CVE-2021-24442": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.45996,
+"epss_pct": 0.98717,
+"name": "Wordpress Polls Widget < 1.5.3 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24442.yaml"
+},
+"CVE-2021-24452": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01917,
+"epss_pct": 0.78417,
+"name": "WordPress W3 Total Cache <2.1.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24452.yaml"
+},
+"CVE-2021-24472": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.56614,
+"epss_pct": 0.98987,
+"name": "Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Remote File Inclusion/Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24472.yaml"
+},
+"CVE-2021-24488": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.11241,
+"epss_pct": 0.95647,
+"name": "WordPress Post Grid <2.1.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24488.yaml"
+},
+"CVE-2021-24495": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03343,
+"epss_pct": 0.87802,
+"name": "Wordpress Marmoset Viewer <1.9.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24495.yaml"
+},
+"CVE-2021-24498": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03536,
+"epss_pct": 0.88438,
+"name": "WordPress Calendar Event Multi View <1.4.01 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24498.yaml"
+},
+"CVE-2021-24499": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.60113,
+"epss_pct": 0.99067,
+"name": "WordPress Workreap - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24499.yaml"
+},
+"CVE-2021-24510": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02721,
+"epss_pct": 0.84986,
+"name": "WordPress MF Gig Calendar <=1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24510.yaml"
+},
+"CVE-2021-24522": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01552,
+"epss_pct": 0.73345,
+"name": "ProfilePress < 3.1.11 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24522.yaml"
+},
+"CVE-2021-24527": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.07634,
+"epss_pct": 0.94132,
+"name": "Profile Builder < 3.4.9 - Improper Authentication",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24527.yaml"
+},
+"CVE-2021-24554": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.0654,
+"epss_pct": 0.9331,
+"name": "WordPress Paytm Donation <=1.3.2 - Authenticated SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24554.yaml"
+},
+"CVE-2021-24627": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.06561,
+"epss_pct": 0.93326,
+"name": "G Auto-Hyperlink <= 1.0.1 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24627.yaml"
+},
+"CVE-2021-24644": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.05028,
+"epss_pct": 0.91655,
+"name": "Images to WebP < 1.9 - Authenticated Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24644.yaml"
+},
+"CVE-2021-24647": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.0968,
+"epss_pct": 0.95149,
+"name": "Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24647.yaml"
+},
+"CVE-2021-24657": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01582,
+"epss_pct": 0.73786,
+"name": "Limit Login Attempts WordPress - Stored Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24657.yaml"
+},
+"CVE-2021-24666": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.08883,
+"epss_pct": 0.94844,
+"name": "WordPress Podlove Podcast Publisher <3.5.6 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24666.yaml"
+},
+"CVE-2021-24681": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00893,
+"epss_pct": 0.56981,
+"name": "Duplicate Page WordPress - Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24681.yaml"
+},
+"CVE-2021-24731": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.06566,
+"epss_pct": 0.93331,
+"name": "Pie Register < 3.7.1.6 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24731.yaml"
+},
+"CVE-2021-24746": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02244,
+"epss_pct": 0.81634,
+"name": "WordPress Sassy Social Share Plugin <3.3.40 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24746.yaml"
+},
+"CVE-2021-24750": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.38298,
+"epss_pct": 0.98456,
+"name": "WordPress Visitor Statistics (Real Time Traffic) <4.8 -SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24750.yaml"
+},
+"CVE-2021-24762": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.86782,
+"epss_pct": 0.99729,
+"name": "WordPress Perfect Survey <1.5.2 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24762.yaml"
+},
+"CVE-2021-24786": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.17348,
+"epss_pct": 0.96889,
+"name": "Download Monitor < 4.4.5 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24786.yaml"
+},
+"CVE-2021-24791": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.05124,
+"epss_pct": 0.91789,
+"name": "Header Footer Code Manager < 1.1.14 - Admin+ SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24791.yaml"
+},
+"CVE-2021-24827": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.13285,
+"epss_pct": 0.9611,
+"name": "WordPress Asgaros Forum <1.15.13 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24827.yaml"
+},
+"CVE-2021-24838": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02208,
+"epss_pct": 0.81337,
+"name": "WordPress AnyComment <0.3.5 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24838.yaml"
+},
+"CVE-2021-24849": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.0848,
+"epss_pct": 0.94628,
+"name": "WCFM WooCommerce Multivendor Marketplace < 3.4.12 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24849.yaml"
+},
+"CVE-2021-24862": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.73293,
+"epss_pct": 0.99419,
+"name": "WordPress RegistrationMagic <5.0.1.6 - Authenticated SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24862.yaml"
+},
+"CVE-2021-24875": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01555,
+"epss_pct": 0.73406,
+"name": "WordPress eCommerce Product Catalog <3.0.39 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24875.yaml"
+},
+"CVE-2021-24876": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01165,
+"epss_pct": 0.65078,
+"name": "Registrations for The Events Calendar < 2.7.5 - Authenticated Reflected Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24876.yaml"
+},
+"CVE-2021-24878": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01165,
+"epss_pct": 0.65079,
+"name": "SupportCandy < 2.2.7 - Reflected Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24878.yaml"
+},
+"CVE-2021-24891": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.25136,
+"epss_pct": 0.97772,
+"name": "WordPress Elementor Website Builder <3.1.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24891.yaml"
+},
+"CVE-2021-24910": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01567,
+"epss_pct": 0.73566,
+"name": "WordPress Transposh Translation <1.0.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24910.yaml"
+},
+"CVE-2021-24915": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.127,
+"epss_pct": 0.95974,
+"name": "Contest Gallery < 13.1.0.6 - SQL injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24915.yaml"
+},
+"CVE-2021-24916": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-284",
+"epss": 0.01729,
+"epss_pct": 0.75957,
+"name": "WordPress Qubely < 1.8.6 - Unauthenticated Email Sending",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24916.yaml"
+},
+"CVE-2021-24917": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-863",
+"epss": 0.71532,
+"epss_pct": 0.99371,
+"name": "WordPress WPS Hide Login <1.9.1 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24917.yaml"
+},
+"CVE-2021-24926": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.12857,
+"epss_pct": 0.96013,
+"name": "WordPress Domain Check <1.0.17 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24926.yaml"
+},
+"CVE-2021-24931": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.78812,
+"epss_pct": 0.9956,
+"name": "WordPress Secure Copy Content Protection and Content Locking <2.8.2 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24931.yaml"
+},
+"CVE-2021-24934": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01397,
+"epss_pct": 0.70508,
+"name": "Visual CSS Style Editor < 7.5.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24934.yaml"
+},
+"CVE-2021-24940": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01439,
+"epss_pct": 0.71305,
+"name": "WordPress Persian Woocommerce <=5.8.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24940.yaml"
+},
+"CVE-2021-24943": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.07474,
+"epss_pct": 0.94027,
+"name": "Registrations for the Events Calendar < 2.7.6 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24943.yaml"
+},
+"CVE-2021-24946": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.728,
+"epss_pct": 0.99407,
+"name": "WordPress Modern Events Calendar <6.1.5 - Blind SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24946.yaml"
+},
+"CVE-2021-24947": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.03089,
+"epss_pct": 0.86776,
+"name": "WordPress Responsive Vector Maps < 6.4.2 - Arbitrary File Read",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24947.yaml"
+},
+"CVE-2021-24956": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01439,
+"epss_pct": 0.71305,
+"name": "Blog2Social < 6.8.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24956.yaml"
+},
+"CVE-2021-24970": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.05898,
+"epss_pct": 0.92697,
+"name": "WordPress All-In-One Video Gallery <2.5.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24970.yaml"
+},
+"CVE-2021-24979": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01868,
+"epss_pct": 0.7783,
+"name": "Paid Memberships Pro < 2.6.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24979.yaml"
+},
+"CVE-2021-24987": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01938,
+"epss_pct": 0.78654,
+"name": "WordPress Super Socializer <7.13.30 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24987.yaml"
+},
+"CVE-2021-24991": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01188,
+"epss_pct": 0.657,
+"name": "WooCommerce PDF Invoices & Packing Slips WordPress Plugin < 2.10.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24991.yaml"
+},
+"CVE-2021-24997": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-862",
+"epss": 0.02753,
+"epss_pct": 0.85188,
+"name": "WordPress Guppy <=1.1 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24997.yaml"
+},
+"CVE-2021-25003": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.56148,
+"epss_pct": 0.98975,
+"name": "WordPress WPCargo Track & Trace <6.9.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25003.yaml"
+},
+"CVE-2021-25008": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02258,
+"epss_pct": 0.8174,
+"name": "The Code Snippets WordPress Plugin < 2.14.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25008.yaml"
+},
+"CVE-2021-25016": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01798,
+"epss_pct": 0.76903,
+"name": "Chaty < 2.8.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25016.yaml"
+},
+"CVE-2021-25028": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01932,
+"epss_pct": 0.78581,
+"name": "WordPress Event Tickets < 5.2.2 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25028.yaml"
+},
+"CVE-2021-25032": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-352",
+"epss": 0.06691,
+"epss_pct": 0.93426,
+"name": "PublishPress Capabilities < 2.3.1 - Missing Authorization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25032.yaml"
+},
+"CVE-2021-25033": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02303,
+"epss_pct": 0.82117,
+"name": "Noptin < 1.6.5 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25033.yaml"
+},
+"CVE-2021-25052": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-352",
+"epss": 0.02985,
+"epss_pct": 0.86346,
+"name": "WordPress Button Generator <2.3.3 - Remote File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25052.yaml"
+},
+"CVE-2021-25055": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0201,
+"epss_pct": 0.7948,
+"name": "WordPress FeedWordPress < 2022.0123 - Authenticated Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25055.yaml"
+},
+"CVE-2021-25063": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0208,
+"epss_pct": 0.8018,
+"name": "WordPress Contact Form 7 Skins <=2.5.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25063.yaml"
+},
+"CVE-2021-25065": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01217,
+"epss_pct": 0.66468,
+"name": "Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25065.yaml"
+},
+"CVE-2021-25067": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01096,
+"epss_pct": 0.63218,
+"name": "Landing Page Builder < 1.4.9.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25067.yaml"
+},
+"CVE-2021-25074": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02161,
+"epss_pct": 0.80925,
+"name": "WordPress WebP Converter for Media < 4.0.3 - Unauthenticated Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25074.yaml"
+},
+"CVE-2021-25075": {
+"cvss": 3.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
+"cwe": "CWE-862",
+"epss": 0.01364,
+"epss_pct": 0.69845,
+"name": "WordPress Duplicate Page or Post <1.5.1 - Cross-Site Scripting",
+"severity": "low",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25075.yaml"
+},
+"CVE-2021-25078": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02288,
+"epss_pct": 0.81982,
+"name": "Affiliates Manager < 2.9.0 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25078.yaml"
+},
+"CVE-2021-25079": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0682,
+"epss_pct": 0.93539,
+"name": "Contact Form Entries < 1.2.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25079.yaml"
+},
+"CVE-2021-25082": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-98",
+"epss": 0.05229,
+"epss_pct": 0.91929,
+"name": "WordPress Popup Builder < 4.0.7 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25082.yaml"
+},
+"CVE-2021-25085": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01651,
+"epss_pct": 0.74844,
+"name": "WOOF WordPress plugin - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25085.yaml"
+},
+"CVE-2021-25094": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.83354,
+"epss_pct": 0.99656,
+"name": "Wordpress Tatsubuilder <= 3.3.11 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25094.yaml"
+},
+"CVE-2021-25099": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02145,
+"epss_pct": 0.80784,
+"name": "WordPress GiveWP <2.17.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25099.yaml"
+},
+"CVE-2021-25104": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01418,
+"epss_pct": 0.70915,
+"name": "WordPress Ocean Extra <1.9.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25104.yaml"
+},
+"CVE-2021-25111": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01908,
+"epss_pct": 0.78309,
+"name": "WordPress English Admin <1.5.2 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25111.yaml"
+},
+"CVE-2021-25112": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02187,
+"epss_pct": 0.81143,
+"name": "WordPress WHMCS Bridge <6.4b - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25112.yaml"
+},
+"CVE-2021-25114": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.81828,
+"epss_pct": 0.99621,
+"name": "WordPress Paid Memberships Pro <2.6.7 - Blind SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25114.yaml"
+},
+"CVE-2021-25118": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.05632,
+"epss_pct": 0.92401,
+"name": "Yoast SEO 16.7-17.2 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25118.yaml"
+},
+"CVE-2021-25120": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02909,
+"epss_pct": 0.86014,
+"name": "Easy Social Feed < 6.2.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25120.yaml"
+},
+"CVE-2021-25161": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.16372,
+"epss_pct": 0.96733,
+"name": "Aruba Instant Access Point (IAP) - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25161.yaml"
+},
+"CVE-2021-25281": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.7313,
+"epss_pct": 0.99416,
+"name": "SaltStack Salt <3002.5 - Auth Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25281.yaml"
+},
+"CVE-2021-25296": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.72182,
+"epss_pct": 0.99389,
+"name": "Nagios XI 5.5.6-5.7.5 - Authenticated Remote Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25296.yaml"
+},
+"CVE-2021-25297": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.56659,
+"epss_pct": 0.98989,
+"name": "Nagios 5.5.6-5.7.5 - Authenticated Remote Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25297.yaml"
+},
+"CVE-2021-25298": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.75148,
+"epss_pct": 0.99473,
+"name": "Nagios XI 5.5.6-5.7.5 - Authenticated Remote Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25298.yaml"
+},
+"CVE-2021-25299": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.9776,
+"epss_pct": 0.99901,
+"name": "Nagios XI 5.7.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25299.yaml"
+},
+"CVE-2021-25646": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-732",
+"epss": 0.99001,
+"epss_pct": 0.99928,
+"name": "Apache Druid - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25646.yaml"
+},
+"CVE-2021-25864": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.09331,
+"epss_pct": 0.95018,
+"name": "Hue Magic 3.0.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25864.yaml"
+},
+"CVE-2021-25899": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.12245,
+"epss_pct": 0.95883,
+"name": "Void Aural Rec Monitor 9.0.0.1 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25899.yaml"
+},
+"CVE-2021-26072": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.38845,
+"epss_pct": 0.98479,
+"name": "Atlassian Confluence < 5.8.6 - Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26072.yaml"
+},
+"CVE-2021-26084": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-917",
+"epss": 0.99999,
+"epss_pct": 0.99992,
+"name": "Confluence Server - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26084.yaml"
+},
+"CVE-2021-26085": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-425",
+"epss": 0.99937,
+"epss_pct": 0.9997,
+"name": "Atlassian Confluence Server - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26085.yaml"
+},
+"CVE-2021-26086": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.99999,
+"epss_pct": 0.99991,
+"name": "Atlassian Jira Limited - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26086.yaml"
+},
+"CVE-2021-26247": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.07124,
+"epss_pct": 0.93791,
+"name": "Cacti - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26247.yaml"
+},
+"CVE-2021-26294": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.16899,
+"epss_pct": 0.96826,
+"name": "AfterLogic Aurora and WebMail Pro < 7.7.9 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26294.yaml"
+},
+"CVE-2021-26295": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.97822,
+"epss_pct": 0.99901,
+"name": "Apache OFBiz <17.12.06 - Arbitrary Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26295.yaml"
+},
+"CVE-2021-26475": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.07326,
+"epss_pct": 0.93938,
+"name": "EPrints 3.4.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26475.yaml"
+},
+"CVE-2021-26598": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.10528,
+"epss_pct": 0.95435,
+"name": "ImpressCMS <1.4.3 - Incorrect Authorization",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26598.yaml"
+},
+"CVE-2021-26599": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.20968,
+"epss_pct": 0.97386,
+"name": "ImpressCMS < 1.4.3 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26599.yaml"
+},
+"CVE-2021-26702": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03072,
+"epss_pct": 0.86713,
+"name": "EPrints 3.4.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26702.yaml"
+},
+"CVE-2021-26710": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.075,
+"epss_pct": 0.94045,
+"name": "Redwood Report2Web 4.3.4.5 & 4.5.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26710.yaml"
+},
+"CVE-2021-26723": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.12578,
+"epss_pct": 0.95947,
+"name": "Jenzabar 9.2x-9.2.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26723.yaml"
+},
+"CVE-2021-26812": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.97461,
+"epss_pct": 0.99896,
+"name": "Moodle Jitsi Meet 2.7-2.8.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26812.yaml"
+},
+"CVE-2021-26855": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-918",
+"epss": 0.99996,
+"epss_pct": 0.99989,
+"name": "Microsoft Exchange Server SSRF Vulnerability",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26855.yaml"
+},
+"CVE-2021-26947": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0141,
+"epss_pct": 0.70768,
+"name": "Odoo <= 15.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26947.yaml"
+},
+"CVE-2021-27124": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.05721,
+"epss_pct": 0.92497,
+"name": "Doctor Appointment System 1.0 - SQL Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27124.yaml"
+},
+"CVE-2021-27132": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.16062,
+"epss_pct": 0.96682,
+"name": "Sercomm VD625 Smart Modems - CRLF Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27132.yaml"
+},
+"CVE-2021-27309": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01977,
+"epss_pct": 0.79069,
+"name": "Clansphere CMS 2011.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27309.yaml"
+},
+"CVE-2021-27310": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02816,
+"epss_pct": 0.85548,
+"name": "Clansphere CMS 2011.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27310.yaml"
+},
+"CVE-2021-27314": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.12394,
+"epss_pct": 0.95911,
+"name": "Doctor Appointment System 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27314.yaml"
+},
+"CVE-2021-27315": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.07826,
+"epss_pct": 0.94244,
+"name": "Doctor Appointment System 1.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27315.yaml"
+},
+"CVE-2021-27316": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.07826,
+"epss_pct": 0.94245,
+"name": "Doctor Appointment System 1.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27316.yaml"
+},
+"CVE-2021-27319": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.07826,
+"epss_pct": 0.94245,
+"name": "Doctor Appointment System 1.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27319.yaml"
+},
+"CVE-2021-27320": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.09299,
+"epss_pct": 0.95007,
+"name": "Doctor Appointment System 1.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27320.yaml"
+},
+"CVE-2021-27330": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06196,
+"epss_pct": 0.92996,
+"name": "Triconsole Datepicker Calendar <3.77 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27330.yaml"
+},
+"CVE-2021-27358": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"cwe": "CWE-306",
+"epss": 0.83042,
+"epss_pct": 0.99651,
+"name": "Grafana Unauthenticated Snapshot Creation",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27358.yaml"
+},
+"CVE-2021-27519": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.07604,
+"epss_pct": 0.94113,
+"name": "FUDForum 3.1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27519.yaml"
+},
+"CVE-2021-27520": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06396,
+"epss_pct": 0.93176,
+"name": "FUDForum 3.1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27520.yaml"
+},
+"CVE-2021-27561": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.82865,
+"epss_pct": 0.99647,
+"name": "YeaLink DM 3.6.0.20 - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27561.yaml"
+},
+"CVE-2021-27651": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.53841,
+"epss_pct": 0.98923,
+"name": "Pega Infinity - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27651.yaml"
+},
+"CVE-2021-27670": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.61274,
+"epss_pct": 0.99097,
+"name": "Appspace 6.2.4 - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27670.yaml"
+},
+"CVE-2021-27850": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.93471,
+"epss_pct": 0.99834,
+"name": "Apache Tapestry - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27850.yaml"
+},
+"CVE-2021-27856": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.05598,
+"epss_pct": 0.92352,
+"name": "FatPipe WARP/IPVPN/MPVPN - Backdoor Account",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27856.yaml"
+},
+"CVE-2021-27858": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.02703,
+"epss_pct": 0.84889,
+"name": "FatPipe WARP/IPVPN/MPVPN - Authorization Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27858.yaml"
+},
+"CVE-2021-27877": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
+"epss": 0.6491,
+"epss_pct": 0.99188,
+"name": "Veritas Backup Exec - Broken Authentication",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2021/CVE-2021-27877.yaml"
+},
+"CVE-2021-27905": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.93053,
+"epss_pct": 0.99826,
+"name": "Apache Solr <=8.8.1 - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27905.yaml"
+},
+"CVE-2021-27909": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04067,
+"epss_pct": 0.89947,
+"name": "Mautic <3.3.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27909.yaml"
+},
+"CVE-2021-27931": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
+"cwe": "CWE-611",
+"epss": 0.18132,
+"epss_pct": 0.9699,
+"name": "LumisXP <10.0.0 - Blind XML External Entity Attack",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27931.yaml"
+},
+"CVE-2021-27964": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.47519,
+"epss_pct": 0.98756,
+"name": "SonLogger - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27964.yaml"
+},
+"CVE-2021-28149": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.1592,
+"epss_pct": 0.96654,
+"name": "Hongdian H8922 3.0.5 Devices - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28149.yaml"
+},
+"CVE-2021-28150": {
+"cvss": 5.5,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-425",
+"epss": 0.02794,
+"epss_pct": 0.85428,
+"name": "Hongdian H8922 3.0.5 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28150.yaml"
+},
+"CVE-2021-28151": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.27912,
+"epss_pct": 0.97957,
+"name": "Hongdian H8922 3.0.5 - Remote Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28151.yaml"
+},
+"CVE-2021-28164": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.82371,
+"epss_pct": 0.99637,
+"name": "Eclipse Jetty - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28164.yaml"
+},
+"CVE-2021-28169": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.7848,
+"epss_pct": 0.99551,
+"name": "Eclipse Jetty ConcatServlet - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28169.yaml"
+},
+"CVE-2021-28377": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.08389,
+"epss_pct": 0.94572,
+"name": "Joomla! ChronoForums 2.0.11 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28377.yaml"
+},
+"CVE-2021-28480": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.71425,
+"epss_pct": 0.99367,
+"name": "Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28480.yaml"
+},
+"CVE-2021-28481": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.36486,
+"epss_pct": 0.98377,
+"name": "Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28481.yaml"
+},
+"CVE-2021-28799": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-285",
+"epss": 0.7825,
+"epss_pct": 0.99544,
+"name": "QNAP HBS 3 - Broken Access Control",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28799.yaml"
+},
+"CVE-2021-28918": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-704",
+"epss": 0.16657,
+"epss_pct": 0.96791,
+"name": "Netmask NPM Package - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28918.yaml"
+},
+"CVE-2021-28937": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-312",
+"epss": 0.04155,
+"epss_pct": 0.90146,
+"name": "Acexy Wireless-N WiFi Repeater REV 1.0 - Repeater Password Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28937.yaml"
+},
+"CVE-2021-29006": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.05603,
+"epss_pct": 0.92359,
+"name": "rConfig 3.9.6 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29006.yaml"
+},
+"CVE-2021-29156": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-74",
+"epss": 0.76385,
+"epss_pct": 0.995,
+"name": "LDAP Injection In OpenAM",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29156.yaml"
+},
+"CVE-2021-29200": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.5537,
+"epss_pct": 0.9896,
+"name": "Apache OFBiz < 17.12.07 - Arbitrary Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29200.yaml"
+},
+"CVE-2021-29203": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.68293,
+"epss_pct": 0.99277,
+"name": "HPE Edgeline Infrastructure Manager <1.22 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29203.yaml"
+},
+"CVE-2021-29441": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-290",
+"epss": 0.87747,
+"epss_pct": 0.99748,
+"name": "Nacos <1.4.1 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29441.yaml"
+},
+"CVE-2021-29442": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.6663,
+"epss_pct": 0.99231,
+"name": "Nacos <1.4.1 - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29442.yaml"
+},
+"CVE-2021-29484": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
+"cwe": "CWE-79",
+"epss": 0.07935,
+"epss_pct": 0.94315,
+"name": "Ghost CMS <=4.32 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29484.yaml"
+},
+"CVE-2021-29490": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.69856,
+"epss_pct": 0.9932,
+"name": "Jellyfin 10.7.2 - Server Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29490.yaml"
+},
+"CVE-2021-29505": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.77232,
+"epss_pct": 0.99518,
+"name": "XStream <1.4.17 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29505.yaml"
+},
+"CVE-2021-29622": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.1956,
+"epss_pct": 0.97187,
+"name": "Prometheus - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29622.yaml"
+},
+"CVE-2021-29625": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.09572,
+"epss_pct": 0.95113,
+"name": "Adminer <=4.8.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29625.yaml"
+},
+"CVE-2021-3002": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04278,
+"epss_pct": 0.90401,
+"name": "Seo Panel 4.8.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3002.yaml"
+},
+"CVE-2021-30047": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"epss": 0.03213,
+"epss_pct": 0.87296,
+"name": "vsftpd < 3.0.3 - DoS",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2021/CVE-2021-30047.yaml"
+},
+"CVE-2021-30049": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0247,
+"epss_pct": 0.83368,
+"name": "SysAid Technologies 20.3.64 b14 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30049.yaml"
+},
+"CVE-2021-3007": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.75313,
+"epss_pct": 0.99476,
+"name": "Laminas Project laminas-http - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3007.yaml"
+},
+"CVE-2021-30116": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-522",
+"epss": 0.85735,
+"epss_pct": 0.9971,
+"name": "Kaseya VSA < 9.5.7 - Credential Disclosure via Windows Agent",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30116.yaml"
+},
+"CVE-2021-30118": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.60348,
+"epss_pct": 0.99074,
+"name": "Kaseya VSA < 9.5.7 - Arbitrary File Upload to Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30118.yaml"
+},
+"CVE-2021-30128": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.81209,
+"epss_pct": 0.99607,
+"name": "Apache OFBiz <17.12.07 - Arbitrary Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30128.yaml"
+},
+"CVE-2021-30134": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01261,
+"epss_pct": 0.67554,
+"name": "Php-mod/curl Library <2.3.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30134.yaml"
+},
+"CVE-2021-30151": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04158,
+"epss_pct": 0.90153,
+"name": "Sidekiq <=6.2.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30151.yaml"
+},
+"CVE-2021-3017": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.63023,
+"epss_pct": 0.99138,
+"name": "Intelbras WIN 300/WRN 342 - Credentials Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3017.yaml"
+},
+"CVE-2021-30175": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.08548,
+"epss_pct": 0.94666,
+"name": "ZEROF Web Server 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30175.yaml"
+},
+"CVE-2021-3018": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.19506,
+"epss_pct": 0.97179,
+"name": "IPeakCMS 3.5 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3018.yaml"
+},
+"CVE-2021-3019": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.16622,
+"epss_pct": 0.96786,
+"name": "ffay lanproxy Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3019.yaml"
+},
+"CVE-2021-30203": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00596,
+"epss_pct": 0.46104,
+"name": "Dzzoffice 2.02.1 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30203.yaml"
+},
+"CVE-2021-30213": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02721,
+"epss_pct": 0.8499,
+"name": "Knowage Suite 7.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30213.yaml"
+},
+"CVE-2021-30461": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.36632,
+"epss_pct": 0.98384,
+"name": "VoipMonitor <24.61 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30461.yaml"
+},
+"CVE-2021-30497": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.9658,
+"epss_pct": 0.99879,
+"name": "Ivanti Avalanche 6.3.2 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30497.yaml"
+},
+"CVE-2021-3110": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.20695,
+"epss_pct": 0.97352,
+"name": "PrestaShop 1.7.7.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3110.yaml"
+},
+"CVE-2021-31195": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
+"cwe": "CWE-79",
+"epss": 0.73676,
+"epss_pct": 0.99432,
+"name": "Microsoft Exchange Server - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31195.yaml"
+},
+"CVE-2021-3122": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.8727,
+"epss_pct": 0.99738,
+"name": "NCR Command Center Agent 16.3 - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2021/CVE-2021-3122.yaml"
+},
+"CVE-2021-31249": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-74",
+"epss": 0.18003,
+"epss_pct": 0.96976,
+"name": "CHIYU TCP/IP Converter - Carriage Return Line Feed Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31249.yaml"
+},
+"CVE-2021-31250": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.79605,
+"epss_pct": 0.99575,
+"name": "CHIYU TCP/IP Converter - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31250.yaml"
+},
+"CVE-2021-3129": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.99943,
+"epss_pct": 0.99972,
+"name": "Laravel with Ignition <= v8.4.2 Debug Mode - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3129.yaml"
+},
+"CVE-2021-31316": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.13029,
+"epss_pct": 0.96059,
+"name": "CentOS Web Panel - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31316.yaml"
+},
+"CVE-2021-31324": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.34062,
+"epss_pct": 0.98281,
+"name": "CentOS Web Panel - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31324.yaml"
+},
+"CVE-2021-3152": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.02231,
+"epss_pct": 0.81525,
+"name": "Home Assistant HACS - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3152.yaml"
+},
+"CVE-2021-31537": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.07781,
+"epss_pct": 0.94221,
+"name": "SIS Informatik REWE GO SP17 <7.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31537.yaml"
+},
+"CVE-2021-3156": {
+"cvss": 7.8,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-193",
+"epss": 0.99969,
+"epss_pct": 0.99977,
+"name": "Sudo Baron Samedit - Local Privilege Escalation",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2021/CVE-2021-3156.yaml"
+},
+"CVE-2021-31581": {
+"cvss": 4.4,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.01217,
+"epss_pct": 0.66467,
+"name": "Akkadian Provisioning Manager - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31581.yaml"
+},
+"CVE-2021-31589": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.28207,
+"epss_pct": 0.97974,
+"name": "BeyondTrust Secure Remote Access Base <=6.0.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31589.yaml"
+},
+"CVE-2021-31602": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.51653,
+"epss_pct": 0.98863,
+"name": "Hitachi Vantara Pentaho/Business Intelligence Server - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31602.yaml"
+},
+"CVE-2021-31682": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.10509,
+"epss_pct": 0.95429,
+"name": "WebCTRL OEM <= 6.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31682.yaml"
+},
+"CVE-2021-31755": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-787",
+"epss": 0.86777,
+"epss_pct": 0.99729,
+"name": "Tenda Router AC11 - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31755.yaml"
+},
+"CVE-2021-31805": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-917",
+"epss": 0.85433,
+"epss_pct": 0.99704,
+"name": "Apache Struts2 S2-062 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31805.yaml"
+},
+"CVE-2021-31856": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.75384,
+"epss_pct": 0.99478,
+"name": "Layer5 Meshery 0.5.2 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31856.yaml"
+},
+"CVE-2021-31862": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03985,
+"epss_pct": 0.89765,
+"name": "SysAid 20.4.74 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31862.yaml"
+},
+"CVE-2021-32030": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.99393,
+"epss_pct": 0.99938,
+"name": "ASUS GT-AC2900 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32030.yaml"
+},
+"CVE-2021-32172": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.66433,
+"epss_pct": 0.99224,
+"name": "Maian Cart <=3.8 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32172.yaml"
+},
+"CVE-2021-3223": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.18512,
+"epss_pct": 0.9704,
+"name": "Node RED Dashboard <2.26.2 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3223.yaml"
+},
+"CVE-2021-32305": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.8719,
+"epss_pct": 0.99736,
+"name": "Websvn <2.6.1 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32305.yaml"
+},
+"CVE-2021-3239": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"name": "E-Learning System 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3239.yaml"
+},
+"CVE-2021-32478": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01128,
+"epss_pct": 0.64055,
+"name": "Moodle 3.8-3.10.3 - Reflected XSS & Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32478.yaml"
+},
+"CVE-2021-32618": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.03289,
+"epss_pct": 0.87608,
+"name": "Python Flask-Security - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32618.yaml"
+},
+"CVE-2021-32648": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
+"epss": 0.90418,
+"epss_pct": 0.99791,
+"name": "OctoberCMS - Account Takeover",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32648.yaml"
+},
+"CVE-2021-32682": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.69934,
+"epss_pct": 0.99322,
+"name": "elFinder 2.1.58 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32682.yaml"
+},
+"CVE-2021-32789": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.17227,
+"epss_pct": 0.96875,
+"name": "WooCommerce Blocks 2.5 to 5.5 - Unauthenticated SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32789.yaml"
+},
+"CVE-2021-32819": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"epss": 0.59844,
+"epss_pct": 0.99063,
+"name": "Nodejs Squirrelly - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32819.yaml"
+},
+"CVE-2021-32820": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"epss": 0.17988,
+"epss_pct": 0.96972,
+"name": "Express-handlebars - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32820.yaml"
+},
+"CVE-2021-32853": {
+"cvss": 9.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
+"cwe": "CWE-79",
+"epss": 0.03125,
+"epss_pct": 0.86931,
+"name": "Erxes <0.23.0 - Cross-Site Scripting",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32853.yaml"
+},
+"CVE-2021-3287": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.51332,
+"epss_pct": 0.98855,
+"name": "Zoho ManageEngine OpManager < 12.5.329 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3287.yaml"
+},
+"CVE-2021-3293": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.20658,
+"epss_pct": 0.97345,
+"name": "emlog 5.3.1 Path Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3293.yaml"
+},
+"CVE-2021-3297": {
+"cvss": 7.8,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.20514,
+"epss_pct": 0.97328,
+"name": "Zyxel NBG2105 V1.00(AAGU.2)C0 - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3297.yaml"
+},
+"CVE-2021-33044": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.99871,
+"epss_pct": 0.99961,
+"name": "Dahua IPC/VTH/VTO - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33044.yaml"
+},
+"CVE-2021-33045": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.99556,
+"epss_pct": 0.99944,
+"name": "Dahua IPC/VTH/VTO - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33045.yaml"
+},
+"CVE-2021-33221": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.56076,
+"epss_pct": 0.98974,
+"name": "CommScope Ruckus IoT Controller - Information Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33221.yaml"
+},
+"CVE-2021-33357": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.17446,
+"epss_pct": 0.96904,
+"name": "RaspAP <=2.6.5 - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33357.yaml"
+},
+"CVE-2021-33544": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.953,
+"epss_pct": 0.99859,
+"name": "Geutebruck - Remote Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33544.yaml"
+},
+"CVE-2021-33558": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.12307,
+"epss_pct": 0.95898,
+"name": "Boa 0.94.13 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33558.yaml"
+},
+"CVE-2021-33564": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-88",
+"epss": 0.72143,
+"epss_pct": 0.99387,
+"name": "Ruby Dragonfly <1.4.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33564.yaml"
+},
+"CVE-2021-33690": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.69075,
+"epss_pct": 0.993,
+"name": "SAP NetWeaver Development Infrastructure - Server Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33690.yaml"
+},
+"CVE-2021-3374": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.14424,
+"epss_pct": 0.96364,
+"name": "Rstudio Shiny Server <1.5.16 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3374.yaml"
+},
+"CVE-2021-33766": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"epss": 0.98136,
+"epss_pct": 0.9991,
+"name": "Microsoft Exchange - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33766.yaml"
+},
+"CVE-2021-3377": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.08,
+"epss_pct": 0.94347,
+"name": "npm ansi_up v4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3377.yaml"
+},
+"CVE-2021-3378": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.97512,
+"epss_pct": 0.99896,
+"name": "FortiLogger 4.4.2.2 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3378.yaml"
+},
+"CVE-2021-33807": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.16139,
+"epss_pct": 0.96694,
+"name": "Cartadis Gespage 8.2.1 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33807.yaml"
+},
+"CVE-2021-33829": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03189,
+"epss_pct": 0.87184,
+"name": "Drupal 7 CKEditor XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33829.yaml"
+},
+"CVE-2021-33851": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01318,
+"epss_pct": 0.68813,
+"name": "WordPress Customize Login Image <3.5.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33851.yaml"
+},
+"CVE-2021-33904": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.09972,
+"epss_pct": 0.95258,
+"name": "Accela Civic Platform <=21.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33904.yaml"
+},
+"CVE-2021-34187": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.16181,
+"epss_pct": 0.96702,
+"name": "Chamilo model.ajax.php - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34187.yaml"
+},
+"CVE-2021-34370": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.09996,
+"epss_pct": 0.95265,
+"name": "Accela Civic Platform <=21.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34370.yaml"
+},
+"CVE-2021-34427": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.57982,
+"epss_pct": 0.99019,
+"name": "Eclipse BIRT Viewer - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34427.yaml"
+},
+"CVE-2021-34429": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.99298,
+"epss_pct": 0.99936,
+"name": "Eclipse Jetty - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34429.yaml"
+},
+"CVE-2021-34473": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-918",
+"epss": 0.99999,
+"epss_pct": 0.99997,
+"name": "Exchange Server - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34473.yaml"
+},
+"CVE-2021-34621": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.68862,
+"epss_pct": 0.99293,
+"name": "WordPress ProfilePress  3.0.0-3.1.3 - Admin User Creation Weakness",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34621.yaml"
+},
+"CVE-2021-34622": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.0412,
+"epss_pct": 0.90065,
+"name": "WordPress ProfilePress <= 3.1.3 - Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34622.yaml"
+},
+"CVE-2021-34624": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.06744,
+"epss_pct": 0.93484,
+"name": "WordPress ProfilePress 3.0-3.1.3 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34624.yaml"
+},
+"CVE-2021-34630": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01572,
+"epss_pct": 0.7365,
+"name": "GTranslate < 2.8.65 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34630.yaml"
+},
+"CVE-2021-34640": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02313,
+"epss_pct": 0.82199,
+"name": "WordPress Securimage-WP-Fixed <=3.5.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34640.yaml"
+},
+"CVE-2021-34643": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0235,
+"epss_pct": 0.82497,
+"name": "WordPress Skaut Bazar <1.3.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34643.yaml"
+},
+"CVE-2021-34805": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.26823,
+"epss_pct": 0.97885,
+"name": "FAUST iServer 9.0.018.018.4 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34805.yaml"
+},
+"CVE-2021-35042": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.44369,
+"epss_pct": 0.98667,
+"name": "Django QuerySet.order_by - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2021/CVE-2021-35042.yaml"
+},
+"CVE-2021-35064": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.70753,
+"epss_pct": 0.99349,
+"name": "Kramer VIAware - Privilege Escalation and Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35064.yaml"
+},
+"CVE-2021-35211": {
+"name": "SolarWinds Serv-U FTP - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2021/CVE-2021-35211.yaml"
+},
+"CVE-2021-35250": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.12804,
+"epss_pct": 0.95998,
+"name": "SolarWinds Serv-U 15.3 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35250.yaml"
+},
+"CVE-2021-35265": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03436,
+"epss_pct": 0.88119,
+"name": "MaxSite CMS > V106 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35265.yaml"
+},
+"CVE-2021-35323": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05621,
+"epss_pct": 0.92393,
+"name": "Bludit 3.13.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35323.yaml"
+},
+"CVE-2021-35336": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-1188",
+"epss": 0.10107,
+"epss_pct": 0.95302,
+"name": "Tieline IP Audio Gateway <=2.6.4.8 - Unauthorized Remote Admin Panel Access",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35336.yaml"
+},
+"CVE-2021-35380": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.38954,
+"epss_pct": 0.98482,
+"name": "TermTalk Server 3.24.0.2 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35380.yaml"
+},
+"CVE-2021-35394": {
+"epss": 0.99861,
+"epss_pct": 0.9996,
+"name": "RealTek AP Router SDK - Arbitrary Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2021/CVE-2021-35394.yaml"
+},
+"CVE-2021-35395": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.97961,
+"epss_pct": 0.99906,
+"name": "RealTek Jungle SDK - Arbitrary Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35395.yaml"
+},
+"CVE-2021-35464": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.99999,
+"epss_pct": 0.99993,
+"name": "ForgeRock OpenAM <7.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35464.yaml"
+},
+"CVE-2021-35488": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02628,
+"epss_pct": 0.84417,
+"name": "Thruk 2.40-2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35488.yaml"
+},
+"CVE-2021-35587": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.96284,
+"epss_pct": 0.99875,
+"name": "Oracle Access Manager - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35587.yaml"
+},
+"CVE-2021-3577": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.60158,
+"epss_pct": 0.99068,
+"name": "Motorola Baby Monitors - Remote Command Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3577.yaml"
+},
+"CVE-2021-36260": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99869,
+"epss_pct": 0.99961,
+"name": "Hikvision IP camera/NVR - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36260.yaml"
+},
+"CVE-2021-36356": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.54393,
+"epss_pct": 0.98936,
+"name": "Kramer VIAware - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36356.yaml"
+},
+"CVE-2021-36380": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.97599,
+"epss_pct": 0.99897,
+"name": "Sunhillo SureLine <8.7.0.1.1 - Unauthenticated OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36380.yaml"
+},
+"CVE-2021-36450": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.64294,
+"epss_pct": 0.99171,
+"name": "Verint Workforce Optimization 15.2.8.10048 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36450.yaml"
+},
+"CVE-2021-3654": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.26792,
+"epss_pct": 0.97884,
+"name": "Nova noVNC - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3654.yaml"
+},
+"CVE-2021-36580": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01588,
+"epss_pct": 0.7387,
+"name": "IceWarp Mail Server - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36580.yaml"
+},
+"CVE-2021-36646": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00705,
+"epss_pct": 0.50814,
+"name": "KodExplorer - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36646.yaml"
+},
+"CVE-2021-36748": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.15415,
+"epss_pct": 0.96538,
+"name": "PrestaHome Blog for PrestaShop <1.7.8 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36748.yaml"
+},
+"CVE-2021-36749": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-863",
+"epss": 0.81038,
+"epss_pct": 0.99602,
+"name": "Apache Druid - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36749.yaml"
+},
+"CVE-2021-36754": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"cwe": "CWE-119",
+"epss": 0.64857,
+"epss_pct": 0.99187,
+"name": "PowerDNS Authoritative Server - Denial of Service",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2021/CVE-2021-36754.yaml"
+},
+"CVE-2021-36873": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01225,
+"epss_pct": 0.66714,
+"name": "WordPress iQ Block Country <=1.2.11 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36873.yaml"
+},
+"CVE-2021-36888": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-284",
+"epss": 0.0674,
+"epss_pct": 0.93477,
+"name": "WordPress Image Hover Ultimate - Unauthenticated Settings Update",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36888.yaml"
+},
+"CVE-2021-37216": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03186,
+"epss_pct": 0.87176,
+"name": "QSAN Storage Manager <3.3.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37216.yaml"
+},
+"CVE-2021-37291": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.06535,
+"epss_pct": 0.93305,
+"name": "KevinLAB BEMS 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37291.yaml"
+},
+"CVE-2021-37292": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.0655,
+"epss_pct": 0.93319,
+"name": "KevinLAB BEMS (Building Energy Management System) - Backdoor Account",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37292.yaml"
+},
+"CVE-2021-37304": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-732",
+"epss": 0.04013,
+"epss_pct": 0.89833,
+"name": "Jeecg Boot <= 2.4.5 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37304.yaml"
+},
+"CVE-2021-37305": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-732",
+"epss": 0.0352,
+"epss_pct": 0.88392,
+"name": "Jeecg Boot <= 2.4.5 - Sensitive Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37305.yaml"
+},
+"CVE-2021-37415": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.99825,
+"epss_pct": 0.99958,
+"name": "Zoho ManageEngine ServiceDesk Plus - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37415.yaml"
+},
+"CVE-2021-37416": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02934,
+"epss_pct": 0.86122,
+"name": "Zoho ManageEngine ADSelfService Plus <=6103 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37416.yaml"
+},
+"CVE-2021-37538": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.74489,
+"epss_pct": 0.99455,
+"name": "PrestaShop SmartBlog <4.0.6 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37538.yaml"
+},
+"CVE-2021-37573": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03398,
+"epss_pct": 0.87987,
+"name": "Tiny Java Web Server - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37573.yaml"
+},
+"CVE-2021-37580": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.40058,
+"epss_pct": 0.98527,
+"name": "Apache ShenYu Admin JWT - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37580.yaml"
+},
+"CVE-2021-37589": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.32662,
+"epss_pct": 0.98217,
+"name": "Virtua Software Cobranca <12R - Blind SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37589.yaml"
+},
+"CVE-2021-37598": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-863",
+"epss": 0.0235,
+"epss_pct": 0.82493,
+"name": "WP Cerber < 8.9.3 - Broken Access Control",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37598.yaml"
+},
+"CVE-2021-37704": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.06132,
+"epss_pct": 0.92937,
+"name": "phpfastcache - phpinfo Resource Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37704.yaml"
+},
+"CVE-2021-37833": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04878,
+"epss_pct": 0.91434,
+"name": "Hotel Druid 3.0.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37833.yaml"
+},
+"CVE-2021-38146": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.11733,
+"epss_pct": 0.95761,
+"name": "Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Download",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38146.yaml"
+},
+"CVE-2021-38147": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.53008,
+"epss_pct": 0.98897,
+"name": "Wipro Holmes Orchestrator 20.4.1 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38147.yaml"
+},
+"CVE-2021-38154": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-732",
+"epss": 0.04,
+"epss_pct": 0.89802,
+"name": "Canon Devices - Authentication Bypass in Catwalk Server",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38154.yaml"
+},
+"CVE-2021-38156": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.88939,
+"epss_pct": 0.99767,
+"name": "Nagios XI < 5.8.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38156.yaml"
+},
+"CVE-2021-3831": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-80",
+"epss": 0.01812,
+"epss_pct": 0.7709,
+"name": "Gnuboard 5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3831.yaml"
+},
+"CVE-2021-38314": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.28961,
+"epss_pct": 0.98021,
+"name": "WordPress Redux Framework <=4.2.11 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38314.yaml"
+},
+"CVE-2021-38540": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.80938,
+"epss_pct": 0.996,
+"name": "Apache Airflow - Unauthenticated Variable Import",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38540.yaml"
+},
+"CVE-2021-38647": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.99933,
+"epss_pct": 0.99969,
+"name": "Microsoft Open Management Infrastructure - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38647.yaml"
+},
+"CVE-2021-38702": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06929,
+"epss_pct": 0.93631,
+"name": "Cyberoam NetGenie Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38702.yaml"
+},
+"CVE-2021-38704": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03521,
+"epss_pct": 0.88394,
+"name": "ClinicCases 7.3.3 Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38704.yaml"
+},
+"CVE-2021-38751": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
+"cwe": "CWE-116",
+"epss": 0.02468,
+"epss_pct": 0.83348,
+"name": "ExponentCMS <= 2.6 - Host Header Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38751.yaml"
+},
+"CVE-2021-39141": {
+"cvss": 8.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.16118,
+"epss_pct": 0.96689,
+"name": "XStream 1.4.18 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39141.yaml"
+},
+"CVE-2021-39144": {
+"cvss": 8.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.98124,
+"epss_pct": 0.99909,
+"name": "XStream 1.4.18 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39144.yaml"
+},
+"CVE-2021-39146": {
+"cvss": 8.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.143,
+"epss_pct": 0.96338,
+"name": "XStream 1.4.18 - Arbitrary Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39146.yaml"
+},
+"CVE-2021-39152": {
+"cvss": 8.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.11377,
+"epss_pct": 0.95679,
+"name": "XStream <1.4.18 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39152.yaml"
+},
+"CVE-2021-39165": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.09752,
+"epss_pct": 0.95176,
+"name": "Cachet <=2.3.18 - SQL Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39165.yaml"
+},
+"CVE-2021-39211": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.04699,
+"epss_pct": 0.91158,
+"name": "GLPI 9.2/<9.5.6 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39211.yaml"
+},
+"CVE-2021-39226": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-287",
+"epss": 0.99933,
+"epss_pct": 0.99969,
+"name": "Grafana Snapshot - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39226.yaml"
+},
+"CVE-2021-39312": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.77944,
+"epss_pct": 0.99538,
+"name": "WordPress True Ranker <2.2.4 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39312.yaml"
+},
+"CVE-2021-39316": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.65763,
+"epss_pct": 0.99209,
+"name": "WordPress DZS Zoomsounds <=6.50 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39316.yaml"
+},
+"CVE-2021-39320": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02324,
+"epss_pct": 0.82285,
+"name": "WordPress Under Construction <1.19 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39320.yaml"
+},
+"CVE-2021-39322": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02349,
+"epss_pct": 0.82487,
+"name": "WordPress Easy Social Icons Plugin < 3.0.9 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39322.yaml"
+},
+"CVE-2021-39327": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.71688,
+"epss_pct": 0.99375,
+"name": "WordPress BulletProof Security 5.1 Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39327.yaml"
+},
+"CVE-2021-39341": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
+"epss": 0.21929,
+"epss_pct": 0.97479,
+"name": "OptinMonster Plugin < 2.6.5 - Unprotected REST-API",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39341.yaml"
+},
+"CVE-2021-39350": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02248,
+"epss_pct": 0.81659,
+"name": "FV Flowplayer Video Player WordPress plugin - Authenticated Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39350.yaml"
+},
+"CVE-2021-39411": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00914,
+"epss_pct": 0.57625,
+"name": "Hospital Management System 1.0 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39411.yaml"
+},
+"CVE-2021-39433": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.08687,
+"epss_pct": 0.94741,
+"name": "BIQS IT Biqs-drive v1.83 Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39433.yaml"
+},
+"CVE-2021-39501": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.03588,
+"epss_pct": 0.88593,
+"name": "EyouCMS 1.5.4 Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39501.yaml"
+},
+"CVE-2021-40149": {
+"cvss": 5.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-552",
+"epss": 0.07443,
+"epss_pct": 0.94011,
+"name": "Reolink E1 Zoom Camera <=3.0.0.716 - Private Key Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40149.yaml"
+},
+"CVE-2021-40150": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-552",
+"epss": 0.03729,
+"epss_pct": 0.89031,
+"name": "Reolink E1 Zoom Camera <=3.0.0.716 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40150.yaml"
+},
+"CVE-2021-40272": {
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01047,
+"epss_pct": 0.61814,
+"name": "IRTS OP5 Monitor - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40272.yaml"
+},
+"CVE-2021-40323": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.86829,
+"epss_pct": 0.9973,
+"name": "Cobbler <3.3.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40323.yaml"
+},
+"CVE-2021-40438": {
+"cvss": 9.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.99999,
+"epss_pct": 0.99997,
+"name": "Apache <= 2.4.48 Mod_Proxy - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40438.yaml"
+},
+"CVE-2021-40524": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"cwe": "CWE-434",
+"epss": 0.04285,
+"epss_pct": 0.90411,
+"name": "Pure-FTPd 1.0.23 < 1.0.50 - Arbitrary File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2021/CVE-2021-40524.yaml"
+},
+"CVE-2021-40539": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-706",
+"epss": 0.9896,
+"epss_pct": 0.99926,
+"name": "Zoho ManageEngine ADSelfService Plus v6113 - Unauthenticated Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40539.yaml"
+},
+"CVE-2021-40542": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03156,
+"epss_pct": 0.87057,
+"name": "Opensis-Classic 8.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40542.yaml"
+},
+"CVE-2021-40651": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.17945,
+"epss_pct": 0.96965,
+"name": "OS4Ed OpenSIS Community 8.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40651.yaml"
+},
+"CVE-2021-40655": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-863",
+"epss": 0.86659,
+"epss_pct": 0.99726,
+"name": "D-Link DIR-605 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40655.yaml"
+},
+"CVE-2021-40661": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.05063,
+"epss_pct": 0.91711,
+"name": "IND780 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40661.yaml"
+},
+"CVE-2021-4073": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.07,
+"epss_pct": 0.93695,
+"name": "RegistrationMagic <= 5.0.1.7 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4073.yaml"
+},
+"CVE-2021-40822": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.19259,
+"epss_pct": 0.97138,
+"name": "Geoserver - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40822.yaml"
+},
+"CVE-2021-40856": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-706",
+"epss": 0.50125,
+"epss_pct": 0.98819,
+"name": "Auerswald COMfortel 1400/2600/3600 IP - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40856.yaml"
+},
+"CVE-2021-40859": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.71979,
+"epss_pct": 0.99382,
+"name": "Auerswald COMpact 5500R 7.8A and 8.0B Devices Backdoor",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40859.yaml"
+},
+"CVE-2021-40868": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.09071,
+"epss_pct": 0.94917,
+"name": "Cloudron 6.2 Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40868.yaml"
+},
+"CVE-2021-40870": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-23",
+"epss": 0.93019,
+"epss_pct": 0.99824,
+"name": "Aviatrix Controller 6.x before 6.5-1804.1922 - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40870.yaml"
+},
+"CVE-2021-40875": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-425",
+"epss": 0.48417,
+"epss_pct": 0.98777,
+"name": "Gurock TestRail Application files.md5 Exposure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40875.yaml"
+},
+"CVE-2021-40960": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.0992,
+"epss_pct": 0.95243,
+"name": "Galera WebTemplate 1.0 Directory Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40960.yaml"
+},
+"CVE-2021-40968": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02239,
+"epss_pct": 0.81598,
+"name": "Spotweb <= 1.5.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40968.yaml"
+},
+"CVE-2021-40969": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02239,
+"epss_pct": 0.81599,
+"name": "Spotweb <= 1.5.1 - Cross Site Scripting (Reflected)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40969.yaml"
+},
+"CVE-2021-40970": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02239,
+"epss_pct": 0.81598,
+"name": "Spotweb <= 1.5.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40970.yaml"
+},
+"CVE-2021-40971": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02239,
+"epss_pct": 0.81599,
+"name": "Spotweb <= 1.5.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40971.yaml"
+},
+"CVE-2021-40972": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0225,
+"epss_pct": 0.81672,
+"name": "Spotweb <= 1.5.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40972.yaml"
+},
+"CVE-2021-40973": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0225,
+"epss_pct": 0.81672,
+"name": "Spotweb <= 1.5.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40973.yaml"
+},
+"CVE-2021-40978": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.15103,
+"epss_pct": 0.96482,
+"name": "MKdocs 1.2.2 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40978.yaml"
+},
+"CVE-2021-41097": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
+"cwe": "CWE-1321",
+"name": "Aurelia-Path < 1.1.7 - Prototype Pollution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41097.yaml"
+},
+"CVE-2021-41174": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.85404,
+"epss_pct": 0.99704,
+"name": "Grafana 8.0.0 <= v.8.2.2 - Angularjs Rendering Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41174.yaml"
+},
+"CVE-2021-41192": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-1188",
+"epss": 0.08017,
+"epss_pct": 0.94355,
+"name": "Redash Setup Configuration - Default Secrets Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41192.yaml"
+},
+"CVE-2021-41266": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.48414,
+"epss_pct": 0.98777,
+"name": "MinIO Operator Console Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41266.yaml"
+},
+"CVE-2021-41277": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.97178,
+"epss_pct": 0.99889,
+"name": "Metabase - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41277.yaml"
+},
+"CVE-2021-41282": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.87113,
+"epss_pct": 0.99735,
+"name": "pfSense - Arbitrary File Write",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41282.yaml"
+},
+"CVE-2021-41291": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.82689,
+"epss_pct": 0.99642,
+"name": "ECOA Building Automation System - Directory Traversal Content Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41291.yaml"
+},
+"CVE-2021-41293": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.20623,
+"epss_pct": 0.97338,
+"name": "ECOA Building Automation System - Arbitrary File Retrieval",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41293.yaml"
+},
+"CVE-2021-41349": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
+"epss": 0.93325,
+"epss_pct": 0.99831,
+"name": "Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41349.yaml"
+},
+"CVE-2021-41381": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.52926,
+"epss_pct": 0.98895,
+"name": "Payara Micro Community 5.2021.6 Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41381.yaml"
+},
+"CVE-2021-41419": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.08517,
+"epss_pct": 0.94648,
+"name": "QVIS NVR/DVR - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41419.yaml"
+},
+"CVE-2021-41432": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01711,
+"epss_pct": 0.75733,
+"name": "FlatPress 1.2.1 - Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41432.yaml"
+},
+"CVE-2021-41460": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.06429,
+"epss_pct": 0.93209,
+"name": "ECShop 4.1.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41460.yaml"
+},
+"CVE-2021-41467": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03601,
+"epss_pct": 0.88637,
+"name": "JustWriting - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41467.yaml"
+},
+"CVE-2021-41569": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-829",
+"epss": 0.07845,
+"epss_pct": 0.94258,
+"name": "SAS/Internet 9.4 1520 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41569.yaml"
+},
+"CVE-2021-41648": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.10169,
+"epss_pct": 0.9532,
+"name": "PuneethReddyHC action.php SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41648.yaml"
+},
+"CVE-2021-41649": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.5177,
+"epss_pct": 0.98865,
+"name": "PuneethReddyHC Online Shopping System homeaction.php SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41649.yaml"
+},
+"CVE-2021-41653": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.76045,
+"epss_pct": 0.99493,
+"name": "TP-Link - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41653.yaml"
+},
+"CVE-2021-41691": {
+"epss": 0.01792,
+"epss_pct": 0.7683,
+"name": "openSIS Student Information System 8.0 SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41691.yaml"
+},
+"CVE-2021-41749": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.18122,
+"epss_pct": 0.96987,
+"name": "CraftCMS SEOmatic - Server-Side Template Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41749.yaml"
+},
+"CVE-2021-41773": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.99992,
+"epss_pct": 0.99986,
+"name": "Apache 2.4.49 - Path Traversal and Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41773.yaml"
+},
+"CVE-2021-41826": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.12056,
+"epss_pct": 0.9584,
+"name": "PlaceOS 1.2109.1 - Open Redirection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41826.yaml"
+},
+"CVE-2021-41878": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.09912,
+"epss_pct": 0.95235,
+"name": "i-Panel Administration System 2.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41878.yaml"
+},
+"CVE-2021-4191": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.80004,
+"epss_pct": 0.99583,
+"name": "GitLab GraphQL API User Enumeration",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4191.yaml"
+},
+"CVE-2021-41951": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.77892,
+"epss_pct": 0.99537,
+"name": "Resourcespace - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41951.yaml"
+},
+"CVE-2021-42013": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.99964,
+"epss_pct": 0.99975,
+"name": "Apache 2.4.49/2.4.50 - Path Traversal and Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42013.yaml"
+},
+"CVE-2021-42063": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.22224,
+"epss_pct": 0.97504,
+"name": "SAP Knowledge Warehouse <=7.5.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42063.yaml"
+},
+"CVE-2021-42071": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.69882,
+"epss_pct": 0.99321,
+"name": "Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42071.yaml"
+},
+"CVE-2021-42192": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-863",
+"epss": 0.10066,
+"epss_pct": 0.95288,
+"name": "KONGA 0.14.9 - Privilege Escalation",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42192.yaml"
+},
+"CVE-2021-42237": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.97904,
+"epss_pct": 0.99904,
+"name": "Sitecore Experience Platform Pre-Auth RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42237.yaml"
+},
+"CVE-2021-42258": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.74426,
+"epss_pct": 0.99453,
+"name": "BillQuick Web Suite SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42258.yaml"
+},
+"CVE-2021-42359": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"epss": 0.03839,
+"epss_pct": 0.89362,
+"name": "WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Arbitrary Post Deletion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42359.yaml"
+},
+"CVE-2021-42551": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02671,
+"epss_pct": 0.84698,
+"name": "NetBiblio WebOPAC - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42551.yaml"
+},
+"CVE-2021-42565": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05832,
+"epss_pct": 0.92631,
+"name": "myfactory FMS - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42565.yaml"
+},
+"CVE-2021-42566": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05832,
+"epss_pct": 0.92631,
+"name": "myfactory FMS - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42566.yaml"
+},
+"CVE-2021-42567": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.08064,
+"epss_pct": 0.94382,
+"name": "Apereo CAS Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42567.yaml"
+},
+"CVE-2021-42627": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.6307,
+"epss_pct": 0.9914,
+"name": "D-Link DIR-615 - Unauthorized Access",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42627.yaml"
+},
+"CVE-2021-42663": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
+"cwe": "CWE-79",
+"epss": 0.03852,
+"epss_pct": 0.89393,
+"name": "Sourcecodester Online Event Booking and Reservation System 2.3.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42663.yaml"
+},
+"CVE-2021-42667": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.16046,
+"epss_pct": 0.96679,
+"name": "Online Event Booking and Reservation System 2.3.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42667.yaml"
+},
+"CVE-2021-42887": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.44291,
+"epss_pct": 0.98664,
+"name": "TOTOLINK EX1200T 4.1.2cu.5215 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42887.yaml"
+},
+"CVE-2021-43062": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.12936,
+"epss_pct": 0.96029,
+"name": "Fortinet FortiMail 7.0.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43062.yaml"
+},
+"CVE-2021-43287": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.28039,
+"epss_pct": 0.97963,
+"name": "Pre-Auth Takeover of Build Pipelines in GoCD",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43287.yaml"
+},
+"CVE-2021-43421": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.42781,
+"epss_pct": 0.98616,
+"name": "Studio-42 elFinder <2.1.60 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43421.yaml"
+},
+"CVE-2021-43495": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.09052,
+"epss_pct": 0.94911,
+"name": "AlquistManager Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43495.yaml"
+},
+"CVE-2021-43496": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.15689,
+"epss_pct": 0.96608,
+"name": "Clustering Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43496.yaml"
+},
+"CVE-2021-43510": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.07515,
+"epss_pct": 0.94052,
+"name": "Sourcecodester Simple Client Management System 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43510.yaml"
+},
+"CVE-2021-43574": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02422,
+"epss_pct": 0.83021,
+"name": "Atmail 6.5.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43574.yaml"
+},
+"CVE-2021-43725": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02573,
+"epss_pct": 0.84064,
+"name": "Spotweb <= 1.5.1 - Cross Site Scripting (Reflected)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43725.yaml"
+},
+"CVE-2021-43734": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.10728,
+"epss_pct": 0.95496,
+"name": "kkFileview v4.0.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43734.yaml"
+},
+"CVE-2021-4374": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.16408,
+"epss_pct": 0.96747,
+"name": "WordPress Automatic Plugin - Unauthenticated Options Change",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4374.yaml"
+},
+"CVE-2021-43778": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.52658,
+"epss_pct": 0.98886,
+"name": "GLPI plugin Barcode < 2.6.1 - Path Traversal Vulnerability.",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43778.yaml"
+},
+"CVE-2021-43798": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.88503,
+"epss_pct": 0.9976,
+"name": "Grafana v8.x - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43798.yaml"
+},
+"CVE-2021-4380": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.04528,
+"epss_pct": 0.90864,
+"name": "Pinterest Automatic < 4.14.4 - Unauthenticated Arbitrary Options Update",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4380.yaml"
+},
+"CVE-2021-43810": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04996,
+"epss_pct": 0.91616,
+"name": "Admidio - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43810.yaml"
+},
+"CVE-2021-43831": {
+"cvss": 7.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.03794,
+"epss_pct": 0.89225,
+"name": "Gradio < 2.5.0 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43831.yaml"
+},
+"CVE-2021-44077": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.93298,
+"epss_pct": 0.99829,
+"name": "Zoho ManageEngine ServiceDesk Plus - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44077.yaml"
+},
+"CVE-2021-44138": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.14115,
+"epss_pct": 0.96299,
+"name": "Caucho Resin >=4.0.52 <=4.0.56 - Directory traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44138.yaml"
+},
+"CVE-2021-44139": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.05643,
+"epss_pct": 0.92415,
+"name": "Alibaba Sentinel - Server-side request forgery (SSRF)",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44139.yaml"
+},
+"CVE-2021-44152": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.58555,
+"epss_pct": 0.99032,
+"name": "Reprise License Manager 14.2 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44152.yaml"
+},
+"CVE-2021-44228": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.99999,
+"epss_pct": 1.0,
+"name": "Apache Log4j2 Remote Code Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44228.yaml"
+},
+"CVE-2021-44260": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.07382,
+"epss_pct": 0.93974,
+"name": "WAVLINK AC1200 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44260.yaml"
+},
+"CVE-2021-4436": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.06646,
+"epss_pct": 0.93391,
+"name": "3DPrint Lite < 1.9.1.5 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4436.yaml"
+},
+"CVE-2021-44427": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.50641,
+"epss_pct": 0.98834,
+"name": "Rosario Student Information System Unauthenticated SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44427.yaml"
+},
+"CVE-2021-44451": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-522",
+"epss": 0.07863,
+"epss_pct": 0.9427,
+"name": "Apache Superset <=1.3.2 - Default Login",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44451.yaml"
+},
+"CVE-2021-4448": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-862",
+"epss": 0.01381,
+"epss_pct": 0.70207,
+"name": "Kaswara Modern VC Addons <= 3.0.1 - Missing Authorization",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4448.yaml"
+},
+"CVE-2021-4449": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.05439,
+"epss_pct": 0.92156,
+"name": "ZoomSounds Plugin - Unauthenticated Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4449.yaml"
+},
+"CVE-2021-44515": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.99871,
+"epss_pct": 0.99962,
+"name": "Zoho ManageEngine Desktop Central - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44515.yaml"
+},
+"CVE-2021-44521": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.55006,
+"epss_pct": 0.98953,
+"name": "Apache Cassandra Load UDF RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2021/CVE-2021-44521.yaml"
+},
+"CVE-2021-44528": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.04182,
+"epss_pct": 0.90205,
+"name": "Open Redirect in Host Authorization Middleware",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44528.yaml"
+},
+"CVE-2021-44529": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.99105,
+"epss_pct": 0.99931,
+"name": "Ivanti EPM Cloud Services Appliance Code Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44529.yaml"
+},
+"CVE-2021-4462": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.0319,
+"epss_pct": 0.87193,
+"name": "Employee Records System 1.0 - Unauthenticated File Upload RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4462.yaml"
+},
+"CVE-2021-4463": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.01452,
+"epss_pct": 0.71534,
+"name": "Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4463.yaml"
+},
+"CVE-2021-44848": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-203",
+"epss": 0.22966,
+"epss_pct": 0.97584,
+"name": "Thinfinity VirtualUI User Enumeration",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44848.yaml"
+},
+"CVE-2021-45027": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.01927,
+"epss_pct": 0.78518,
+"name": "Oliver 5 Library Server <8.00.008.053 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45027.yaml"
+},
+"CVE-2021-45043": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.33133,
+"epss_pct": 0.98241,
+"name": "HD-Network Realtime Monitoring System 2.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45043.yaml"
+},
+"CVE-2021-45046": {
+"cvss": 9.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-917",
+"epss": 0.99977,
+"epss_pct": 0.99979,
+"name": "Apache Log4j2 - Remote Code Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45046.yaml"
+},
+"CVE-2021-45092": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.39973,
+"epss_pct": 0.98523,
+"name": "Thinfinity Iframe Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45092.yaml"
+},
+"CVE-2021-45232": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.85943,
+"epss_pct": 0.99713,
+"name": "Apache APISIX Dashboard <2.10.1 - API Unauthorized Access",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45232.yaml"
+},
+"CVE-2021-45328": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.00948,
+"epss_pct": 0.5872,
+"name": "Gitea < 1.4.3 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45328.yaml"
+},
+"CVE-2021-45380": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0253,
+"epss_pct": 0.83782,
+"name": "AppCMS - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45380.yaml"
+},
+"CVE-2021-45382": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.97836,
+"epss_pct": 0.99901,
+"name": "D-Link - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45382.yaml"
+},
+"CVE-2021-45420": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-200",
+"epss": 0.18957,
+"epss_pct": 0.97094,
+"name": "Emerson Dixell XWEB-500 - Arbitrary File Write",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45420.yaml"
+},
+"CVE-2021-45422": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03241,
+"epss_pct": 0.87412,
+"name": "Reprise License Manager 14.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45422.yaml"
+},
+"CVE-2021-45428": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-639",
+"epss": 0.56931,
+"epss_pct": 0.98995,
+"name": "Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45428.yaml"
+},
+"CVE-2021-45467": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.70745,
+"epss_pct": 0.99349,
+"name": "Control Web Panel (CWP) - File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45467.yaml"
+},
+"CVE-2021-45793": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.04519,
+"epss_pct": 0.90845,
+"name": "Slims9 Bulian 9.4.2 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45793.yaml"
+},
+"CVE-2021-45811": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.02454,
+"epss_pct": 0.83258,
+"name": "osTicket 1.15.x - SQL Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45811.yaml"
+},
+"CVE-2021-45967": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.208,
+"epss_pct": 0.97367,
+"name": "Pascom CPS Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45967.yaml"
+},
+"CVE-2021-45968": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.10385,
+"epss_pct": 0.95391,
+"name": "Pascom CPS - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45968.yaml"
+},
+"CVE-2021-46005": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02915,
+"epss_pct": 0.8604,
+"name": "Sourcecodester Car Rental Management System 1.0 - Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46005.yaml"
+},
+"CVE-2021-46068": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02736,
+"epss_pct": 0.85077,
+"name": "Vehicle Service Management System - Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46068.yaml"
+},
+"CVE-2021-46069": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02736,
+"epss_pct": 0.85077,
+"name": "Vehicle Service Management System 1.0 - Stored Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46069.yaml"
+},
+"CVE-2021-46071": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02736,
+"epss_pct": 0.85078,
+"name": "ehicle Service Management System 1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46071.yaml"
+},
+"CVE-2021-46072": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02736,
+"epss_pct": 0.85077,
+"name": "Vehicle Service Management System 1.0 - Stored Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46072.yaml"
+},
+"CVE-2021-46073": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02759,
+"epss_pct": 0.85222,
+"name": "Vehicle Service Management System 1.0 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46073.yaml"
+},
+"CVE-2021-46104": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.04231,
+"epss_pct": 0.90308,
+"name": "webp_server_go 0.4.0 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46104.yaml"
+},
+"CVE-2021-46107": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.07408,
+"epss_pct": 0.93991,
+"name": "Ligeo Archives Ligeo Basics - Server Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46107.yaml"
+},
+"CVE-2021-46371": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.04305,
+"epss_pct": 0.90449,
+"name": "AntD Admin - Sensitive Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46371.yaml"
+},
+"CVE-2021-46379": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.15701,
+"epss_pct": 0.96611,
+"name": "D-Link DIR850 ET850-1.08TRb03 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46379.yaml"
+},
+"CVE-2021-46381": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.57984,
+"epss_pct": 0.99019,
+"name": "D-Link DAP-1620 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46381.yaml"
+},
+"CVE-2021-46387": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.21028,
+"epss_pct": 0.97394,
+"name": "Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46387.yaml"
+},
+"CVE-2021-46417": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.59753,
+"epss_pct": 0.99061,
+"name": "Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46417.yaml"
+},
+"CVE-2021-46418": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
+"epss": 0.23945,
+"epss_pct": 0.97669,
+"name": "Telesquare TLR-2855KS6 - Arbitrary File Creation",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46418.yaml"
+},
+"CVE-2021-46419": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
+"epss": 0.71384,
+"epss_pct": 0.99367,
+"name": "Telesquare TLR-2855KS6 - Arbitrary File Deletion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46419.yaml"
+},
+"CVE-2021-46422": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.94342,
+"epss_pct": 0.99843,
+"name": "SDT-CW3B1 1.1.0 - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46422.yaml"
+},
+"CVE-2021-46424": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.36459,
+"epss_pct": 0.98375,
+"name": "Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Delete",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46424.yaml"
+},
+"CVE-2021-46704": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.21901,
+"epss_pct": 0.97475,
+"name": "GenieACS => 1.2.8 - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46704.yaml"
+},
+"CVE-2021-47795": {
+"cvss": 6.2,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.02615,
+"epss_pct": 0.84342,
+"name": "GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-47795.yaml"
+},
+"CVE-2022-0087": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02601,
+"epss_pct": 0.84248,
+"name": "Keystone 6 Login Page - Open Redirect and Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0087.yaml"
+},
+"CVE-2022-0140": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.0384,
+"epss_pct": 0.89366,
+"name": "WordPress Visual Form Builder <3.0.8 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0140.yaml"
+},
+"CVE-2022-0147": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0156,
+"epss_pct": 0.73466,
+"name": "WordPress Cookie Information/Free GDPR Consent Solution <2.0.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0147.yaml"
+},
+"CVE-2022-0148": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01572,
+"epss_pct": 0.73654,
+"name": "WordPress All-in-one Floating Contact Form <2.0.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0148.yaml"
+},
+"CVE-2022-0149": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02337,
+"epss_pct": 0.82393,
+"name": "WooCommerce Stored Exporter WordPress Plugin < 2.7.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0149.yaml"
+},
+"CVE-2022-0150": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01718,
+"epss_pct": 0.75827,
+"name": "WordPress Accessibility Helper <0.6.0.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0150.yaml"
+},
+"CVE-2022-0165": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.0428,
+"epss_pct": 0.90404,
+"name": "WordPress Page Builder KingComposer <=2.9.6 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0165.yaml"
+},
+"CVE-2022-0169": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.74615,
+"epss_pct": 0.9946,
+"name": "Photo Gallery by 10Web < 1.6.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0169.yaml"
+},
+"CVE-2022-0188": {
+"name": "CMP WordPress < 4.0.19 - Broken Access Control",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0188.yaml"
+},
+"CVE-2022-0189": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02228,
+"epss_pct": 0.815,
+"name": "WordPress RSS Aggregator < 4.20 - Authenticated Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0189.yaml"
+},
+"CVE-2022-0201": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03368,
+"epss_pct": 0.87889,
+"name": "WordPress Permalink Manager <2.2.15 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0201.yaml"
+},
+"CVE-2022-0206": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01458,
+"epss_pct": 0.71667,
+"name": "WordPress NewStatPress <1.3.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0206.yaml"
+},
+"CVE-2022-0208": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02038,
+"epss_pct": 0.79744,
+"name": "WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0208.yaml"
+},
+"CVE-2022-0212": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02291,
+"epss_pct": 0.82012,
+"name": "WordPress Spider Calendar <=1.5.65 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0212.yaml"
+},
+"CVE-2022-0218": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.70511,
+"epss_pct": 0.99341,
+"name": "HTML Email Template Designer < 3.1 - Missing Authorization on Rest Route",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0218.yaml"
+},
+"CVE-2022-0220": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-116",
+"epss": 0.02329,
+"epss_pct": 0.82322,
+"name": "WordPress GDPR & CCPA <1.9.27 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0220.yaml"
+},
+"CVE-2022-0228": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.05887,
+"epss_pct": 0.92692,
+"name": "Popup Builder < 4.0.7 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0228.yaml"
+},
+"CVE-2022-0234": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01752,
+"epss_pct": 0.76295,
+"name": "WordPress WOOCS < 1.3.7.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0234.yaml"
+},
+"CVE-2022-0250": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01615,
+"epss_pct": 0.74284,
+"name": "Redirection for Contact Form 7 < 2.5.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0250.yaml"
+},
+"CVE-2022-0271": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02254,
+"epss_pct": 0.81708,
+"name": "LearnPress <4.1.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0271.yaml"
+},
+"CVE-2022-0281": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.1201,
+"epss_pct": 0.95831,
+"name": "Microweber Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0281.yaml"
+},
+"CVE-2022-0288": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02389,
+"epss_pct": 0.8278,
+"name": "WordPress Ad Inserter <2.7.10 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0288.yaml"
+},
+"CVE-2022-0342": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.8442,
+"epss_pct": 0.99682,
+"name": "Zyxel - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0342.yaml"
+},
+"CVE-2022-0346": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02397,
+"epss_pct": 0.82835,
+"name": "WordPress XML Sitemap Generator for Google <2.0.4 - Cross-Site Scripting/Remote Code Execution",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0346.yaml"
+},
+"CVE-2022-0349": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.34359,
+"epss_pct": 0.98291,
+"name": "WordPress NotificationX <2.3.9 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0349.yaml"
+},
+"CVE-2022-0378": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03866,
+"epss_pct": 0.89438,
+"name": "Microweber Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0378.yaml"
+},
+"CVE-2022-0381": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03865,
+"epss_pct": 0.89435,
+"name": "WordPress Embed Swagger <=1.0.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0381.yaml"
+},
+"CVE-2022-0412": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.73998,
+"epss_pct": 0.99443,
+"name": "WordPress TI WooCommerce Wishlist <1.40.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0412.yaml"
+},
+"CVE-2022-0415": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.65237,
+"epss_pct": 0.99194,
+"name": "Gogs <0.12.6 - Remote Command Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0415.yaml"
+},
+"CVE-2022-0422": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0812,
+"epss_pct": 0.94423,
+"name": "WordPress White Label CMS <2.2.9 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0422.yaml"
+},
+"CVE-2022-0424": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.03005,
+"epss_pct": 0.86437,
+"name": "Popup by Supsystic < 1.10.9 - Subscriber Email Addresses Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0424.yaml"
+},
+"CVE-2022-0429": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01157,
+"epss_pct": 0.64834,
+"name": "WP Cerber Security, Anti-spam & Malware Scan < 8.9.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0429.yaml"
+},
+"CVE-2022-0432": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-1321",
+"epss": 0.04429,
+"epss_pct": 0.90682,
+"name": "Mastodon Prototype Pollution Vulnerability",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0432.yaml"
+},
+"CVE-2022-0434": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.14783,
+"epss_pct": 0.9643,
+"name": "WordPress Page Views Count <2.4.15 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0434.yaml"
+},
+"CVE-2022-0437": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.15054,
+"epss_pct": 0.96477,
+"name": "karma-runner DOM-based Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0437.yaml"
+},
+"CVE-2022-0439": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04156,
+"epss_pct": 0.90148,
+"name": "Email Subscribers & Newsletters <= 5.3.1 - Authenticated SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0439.yaml"
+},
+"CVE-2022-0441": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.85334,
+"epss_pct": 0.99701,
+"name": "MasterStudy LMS <2.7.6 - Improper Access Control",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0441.yaml"
+},
+"CVE-2022-0479": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.43807,
+"epss_pct": 0.9865,
+"name": "Popup Builder Plugin - SQL Injection and Cross-Site Scripting",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0479.yaml"
+},
+"CVE-2022-0482": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"epss": 0.43746,
+"epss_pct": 0.98647,
+"name": "Easy!Appointments <1.4.3 - Broken Access Control",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0482.yaml"
+},
+"CVE-2022-0533": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01809,
+"epss_pct": 0.7705,
+"name": "Ditty (formerly Ditty News Ticker) < 3.0.15 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0533.yaml"
+},
+"CVE-2022-0535": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01262,
+"epss_pct": 0.67577,
+"name": "WordPress E2Pdf <1.16.45 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0535.yaml"
+},
+"CVE-2022-0540": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.88057,
+"epss_pct": 0.99753,
+"name": "Atlassian Jira Seraph - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0540.yaml"
+},
+"CVE-2022-0543": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.99351,
+"epss_pct": 0.99937,
+"name": "Redis Sandbox Escape - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2022/CVE-2022-0543.yaml"
+},
+"CVE-2022-0591": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-918",
+"epss": 0.20249,
+"epss_pct": 0.97282,
+"name": "Formcraft3 <3.8.28 - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0591.yaml"
+},
+"CVE-2022-0592": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.10431,
+"epss_pct": 0.95402,
+"name": "MapSVG < 6.2.20 - Unauthenticated SQLi",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0592.yaml"
+},
+"CVE-2022-0594": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-863",
+"epss": 0.02013,
+"epss_pct": 0.79502,
+"name": "WordPress Shareaholic <9.7.6 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0594.yaml"
+},
+"CVE-2022-0595": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.13575,
+"epss_pct": 0.96184,
+"name": "WordPress Contact Form 7 <1.3.6.3 - Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0595.yaml"
+},
+"CVE-2022-0597": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.03019,
+"epss_pct": 0.86496,
+"name": "Microweber < 1.2.11 - Open Redirection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0597.yaml"
+},
+"CVE-2022-0599": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01669,
+"epss_pct": 0.75113,
+"name": "WordPress Mapping Multiple URLs Redirect Same Page <=5.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0599.yaml"
+},
+"CVE-2022-0651": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.32212,
+"epss_pct": 0.98194,
+"name": "WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0651.yaml"
+},
+"CVE-2022-0653": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02703,
+"epss_pct": 0.84886,
+"name": "Wordpress Profile Builder Plugin Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0653.yaml"
+},
+"CVE-2022-0656": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-552",
+"epss": 0.07879,
+"epss_pct": 0.94287,
+"name": "uDraw <3.3.3 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0656.yaml"
+},
+"CVE-2022-0658": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.08631,
+"epss_pct": 0.94708,
+"name": "CommonsBooking < 2.6.8 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0658.yaml"
+},
+"CVE-2022-0660": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-209",
+"epss": 0.06923,
+"epss_pct": 0.93627,
+"name": "Microweber <1.2.11 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0660.yaml"
+},
+"CVE-2022-0666": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-93",
+"epss": 0.44259,
+"epss_pct": 0.98663,
+"name": "Microweber < 1.2.11 - CRLF Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0666.yaml"
+},
+"CVE-2022-0678": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02273,
+"epss_pct": 0.81849,
+"name": "Microweber <1.2.11 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0678.yaml"
+},
+"CVE-2022-0679": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.4783,
+"epss_pct": 0.98763,
+"name": "WordPress Narnoo Distributor <=2.5.1 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0679.yaml"
+},
+"CVE-2022-0692": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.03378,
+"epss_pct": 0.87923,
+"name": "Rudloff alltube prior to 3.0.1 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0692.yaml"
+},
+"CVE-2022-0693": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.07097,
+"epss_pct": 0.93764,
+"name": "WordPress Master Elements <=8.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0693.yaml"
+},
+"CVE-2022-0735": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-863",
+"epss": 0.13227,
+"epss_pct": 0.96098,
+"name": "GitLab CE/EE - Information Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0735.yaml"
+},
+"CVE-2022-0747": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.14882,
+"epss_pct": 0.96449,
+"name": "Infographic Maker iList < 4.3.8 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0747.yaml"
+},
+"CVE-2022-0760": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.10825,
+"epss_pct": 0.95529,
+"name": "WordPress Simple Link Directory <7.7.2 - SQL injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0760.yaml"
+},
+"CVE-2022-0765": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03932,
+"epss_pct": 0.89628,
+"name": "WordPress Loco Translate < 2.6.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0765.yaml"
+},
+"CVE-2022-0769": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.0854,
+"epss_pct": 0.9466,
+"name": "Users Ultra <= 3.1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0769.yaml"
+},
+"CVE-2022-0773": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.43259,
+"epss_pct": 0.98629,
+"name": "Documentor <= 1.5.3 - Unauthenticated SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0773.yaml"
+},
+"CVE-2022-0776": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03679,
+"epss_pct": 0.88883,
+"name": "RevealJS postMessage <4.3.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0776.yaml"
+},
+"CVE-2022-0781": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.1305,
+"epss_pct": 0.96062,
+"name": "WordPress Nirweb Support <2.8.2 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0781.yaml"
+},
+"CVE-2022-0783": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.07771,
+"epss_pct": 0.94216,
+"name": "Multiple Shipping Address Woocommerce < 2.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0783.yaml"
+},
+"CVE-2022-0784": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.10079,
+"epss_pct": 0.95291,
+"name": "WordPress Title Experiments Free <9.0.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0784.yaml"
+},
+"CVE-2022-0785": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.09276,
+"epss_pct": 0.94999,
+"name": "WordPress Daily Prayer Time <2022.03.01 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0785.yaml"
+},
+"CVE-2022-0786": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.13271,
+"epss_pct": 0.96106,
+"name": "WordPress KiviCare <2.3.9 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0786.yaml"
+},
+"CVE-2022-0787": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.08631,
+"epss_pct": 0.94708,
+"name": "Limit Login Attempts (Spam Protection) < 5.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0787.yaml"
+},
+"CVE-2022-0788": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.07949,
+"epss_pct": 0.94324,
+"name": "WordPress WP Fundraising Donation and Crowdfunding Platform <1.5.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0788.yaml"
+},
+"CVE-2022-0814": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.09381,
+"epss_pct": 0.95037,
+"name": "Ubigeo de Peru < 3.6.4 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0814.yaml"
+},
+"CVE-2022-0817": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.11586,
+"epss_pct": 0.95725,
+"name": "WordPress BadgeOS <=3.7.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0817.yaml"
+},
+"CVE-2022-0824": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.96977,
+"epss_pct": 0.99886,
+"name": "Webmin <1.990 - Improper Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0824.yaml"
+},
+"CVE-2022-0826": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.09127,
+"epss_pct": 0.94938,
+"name": "WordPress WP Video Gallery <=1.7.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0826.yaml"
+},
+"CVE-2022-0827": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.09127,
+"epss_pct": 0.94938,
+"name": "WordPress Best Books <=2.6.3 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0827.yaml"
+},
+"CVE-2022-0846": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.08785,
+"epss_pct": 0.94793,
+"name": "SpeakOut Email Petitions < 2.14.15.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0846.yaml"
+},
+"CVE-2022-0864": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.07415,
+"epss_pct": 0.93997,
+"name": "UpdraftPlus < 1.22.9 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0864.yaml"
+},
+"CVE-2022-0867": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.1345,
+"epss_pct": 0.96152,
+"name": "WordPress ARPrice <3.6.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0867.yaml"
+},
+"CVE-2022-0869": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02642,
+"epss_pct": 0.8451,
+"name": "nitely/spirit 0.12.3 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0869.yaml"
+},
+"CVE-2022-0870": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.03422,
+"epss_pct": 0.88059,
+"name": "Gogs <0.12.5 - Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0870.yaml"
+},
+"CVE-2022-0873": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.009,
+"epss_pct": 0.57177,
+"name": "WordPress Gmedia Photo Gallery Plugin < 1.20.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0873.yaml"
+},
+"CVE-2022-0879": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01195,
+"epss_pct": 0.65872,
+"name": "Caldera Forms < 1.9.7 - Reflected Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0879.yaml"
+},
+"CVE-2022-0885": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.09436,
+"epss_pct": 0.95057,
+"name": "Member Hero <=1.0.9 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0885.yaml"
+},
+"CVE-2022-0899": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01323,
+"epss_pct": 0.68898,
+"name": "Header Footer Code Manager < 1.1.24 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0899.yaml"
+},
+"CVE-2022-0928": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02389,
+"epss_pct": 0.82777,
+"name": "Microweber < 1.2.12 - Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0928.yaml"
+},
+"CVE-2022-0948": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.09879,
+"epss_pct": 0.95223,
+"name": "WordPress Order Listener for WooCommerce <3.2.2 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0948.yaml"
+},
+"CVE-2022-0949": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.0767,
+"epss_pct": 0.94156,
+"name": "WordPress Stop Bad Bots <6.930 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0949.yaml"
+},
+"CVE-2022-0952": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-352",
+"epss": 0.11419,
+"epss_pct": 0.95689,
+"name": "WordPress Sitemap by click5 <1.0.36 - Missing Authorization",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0952.yaml"
+},
+"CVE-2022-0954": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03197,
+"epss_pct": 0.87221,
+"name": "Microweber <1.2.11 - Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0954.yaml"
+},
+"CVE-2022-0963": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01877,
+"epss_pct": 0.77932,
+"name": "Microweber <1.2.12 - Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0963.yaml"
+},
+"CVE-2022-0968": {
+"cvss": 5.5,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
+"cwe": "CWE-190",
+"epss": 0.03731,
+"epss_pct": 0.89036,
+"name": "Microweber <1.2.12 - Integer Overflow",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0968.yaml"
+},
+"CVE-2022-1007": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01868,
+"epss_pct": 0.7783,
+"name": "WordPress Advanced Booking Calendar <1.7.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1007.yaml"
+},
+"CVE-2022-1013": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.07681,
+"epss_pct": 0.94162,
+"name": "WordPress Personal Dictionary <1.3.4 - Blind SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1013.yaml"
+},
+"CVE-2022-1020": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-352",
+"epss": 0.25937,
+"epss_pct": 0.9783,
+"name": "WordPress WooCommerce <3.1.2 - Arbitrary Function Call",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1020.yaml"
+},
+"CVE-2022-1026": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-522",
+"epss": 0.14733,
+"epss_pct": 0.96426,
+"name": "Kyocera Net View Address Book Exposure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1026.yaml"
+},
+"CVE-2022-1029": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00866,
+"epss_pct": 0.56175,
+"name": "Limit Login Attempts - Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1029.yaml"
+},
+"CVE-2022-1040": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.99796,
+"epss_pct": 0.99957,
+"name": "Sophos Firewall <=18.5 MR3 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1040.yaml"
+},
+"CVE-2022-1054": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.04213,
+"epss_pct": 0.90269,
+"name": "WordPress RSVP and Event Management <2.7.8 - Missing Authorization",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1054.yaml"
+},
+"CVE-2022-1057": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.07942,
+"epss_pct": 0.9432,
+"name": "WordPress Pricing Deals for WooCommerce <=2.0.2.02 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1057.yaml"
+},
+"CVE-2022-1058": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.53177,
+"epss_pct": 0.98902,
+"name": "Gitea <1.16.5 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1058.yaml"
+},
+"CVE-2022-1119": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.19958,
+"epss_pct": 0.97243,
+"name": "WordPress Simple File List <3.2.8 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1119.yaml"
+},
+"CVE-2022-1162": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.76177,
+"epss_pct": 0.99497,
+"name": "GitLab CE/EE - Hard-Coded Credentials",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1162.yaml"
+},
+"CVE-2022-1168": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01847,
+"epss_pct": 0.77558,
+"name": "WordPress WP JobSearch <1.5.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1168.yaml"
+},
+"CVE-2022-1170": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01789,
+"epss_pct": 0.76777,
+"name": "JobMonster < 4.5.2.9 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1170.yaml"
+},
+"CVE-2022-1221": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02176,
+"epss_pct": 0.81055,
+"name": "WordPress Gwyn's Imagemap Selector <=0.3.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1221.yaml"
+},
+"CVE-2022-1281": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.43036,
+"epss_pct": 0.98623,
+"name": "Photo Gallery WordPress v1.6.3 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1281.yaml"
+},
+"CVE-2022-1329": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.92658,
+"epss_pct": 0.9982,
+"name": "Elementor Website Builder - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1329.yaml"
+},
+"CVE-2022-1386": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.71427,
+"epss_pct": 0.99367,
+"name": "WordPress Fusion Builder <3.6.2 - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1386.yaml"
+},
+"CVE-2022-1388": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.99958,
+"epss_pct": 0.99974,
+"name": "F5 BIG-IP iControl - REST Auth Bypass RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1388.yaml"
+},
+"CVE-2022-1390": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.21881,
+"epss_pct": 0.97473,
+"name": "WordPress Admin Word Count Column 2.2 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1390.yaml"
+},
+"CVE-2022-1391": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.15064,
+"epss_pct": 0.96477,
+"name": "WordPress Cab fare calculator < 1.0.4 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1391.yaml"
+},
+"CVE-2022-1392": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.1129,
+"epss_pct": 0.95659,
+"name": "WordPress Videos sync PDF <=1.7.4 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1392.yaml"
+},
+"CVE-2022-1398": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.03054,
+"epss_pct": 0.86647,
+"name": "External Media without Import <=1.1.2 - Authenticated Blind Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1398.yaml"
+},
+"CVE-2022-1439": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03258,
+"epss_pct": 0.87486,
+"name": "Microweber <1.2.15 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1439.yaml"
+},
+"CVE-2022-1442": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.08843,
+"epss_pct": 0.94821,
+"name": "WordPress Metform <=2.1.3 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1442.yaml"
+},
+"CVE-2022-1453": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.07158,
+"epss_pct": 0.93821,
+"name": "RSVPMaker <= 9.2.5 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1453.yaml"
+},
+"CVE-2022-1574": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-352",
+"epss": 0.12018,
+"epss_pct": 0.95831,
+"name": "WordPress HTML2WP <=1.0.0 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1574.yaml"
+},
+"CVE-2022-1580": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-639",
+"epss": 0.01386,
+"epss_pct": 0.70301,
+"name": "Site Offline WP Plugin < 1.5.3 - Authorization Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1580.yaml"
+},
+"CVE-2022-1595": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.02903,
+"epss_pct": 0.85984,
+"name": "WordPress HC Custom WP-Admin URL <=1.4 - Admin Login URL Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1595.yaml"
+},
+"CVE-2022-1597": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03017,
+"epss_pct": 0.86487,
+"name": "WordPress WPQA <5.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1597.yaml"
+},
+"CVE-2022-1598": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.05383,
+"epss_pct": 0.92098,
+"name": "WordPress WPQA <5.5 - Improper Access Control",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1598.yaml"
+},
+"CVE-2022-1609": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.64075,
+"epss_pct": 0.99165,
+"name": "The School Management < 9.9.7 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1609.yaml"
+},
+"CVE-2022-1692": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.10648,
+"epss_pct": 0.95469,
+"name": "CP Image Store with Slideshow <= 1.0.67 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1692.yaml"
+},
+"CVE-2022-1711": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.05945,
+"epss_pct": 0.92745,
+"name": "draw.io < 18.0.5 - Server Side Request Forgery (SSRF)",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1711.yaml"
+},
+"CVE-2022-1713": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.09581,
+"epss_pct": 0.95118,
+"name": "Drawio <18.0.4 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1713.yaml"
+},
+"CVE-2022-1724": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01849,
+"epss_pct": 0.77582,
+"name": "WordPress Simple Membership <4.1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1724.yaml"
+},
+"CVE-2022-1756": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01941,
+"epss_pct": 0.78693,
+"name": "Newsletter < 7.4.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1756.yaml"
+},
+"CVE-2022-1768": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.12624,
+"epss_pct": 0.95955,
+"name": "WordPress RSVPMaker <=9.3.2 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1768.yaml"
+},
+"CVE-2022-1815": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.05389,
+"epss_pct": 0.92103,
+"name": "Drawio <18.1.2 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1815.yaml"
+},
+"CVE-2022-1883": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.0676,
+"epss_pct": 0.93494,
+"name": "Terraboard <2.2.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1883.yaml"
+},
+"CVE-2022-1903": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.08771,
+"epss_pct": 0.94786,
+"name": "ARMember < 3.4.8 - Unauthenticated Admin Account Takeover",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1903.yaml"
+},
+"CVE-2022-1904": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01452,
+"epss_pct": 0.71559,
+"name": "WordPress Easy Pricing Tables <3.2.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1904.yaml"
+},
+"CVE-2022-1906": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01117,
+"epss_pct": 0.63773,
+"name": "WordPress Copyright Proof <=4.16 - Cross-Site-Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1906.yaml"
+},
+"CVE-2022-1910": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01379,
+"epss_pct": 0.70169,
+"name": "WordPress Shortcodes and Extra Features for Phlox <2.9.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1910.yaml"
+},
+"CVE-2022-1916": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01913,
+"epss_pct": 0.7836,
+"name": "WordPress Active Products Tables for WooCommerce <1.0.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1916.yaml"
+},
+"CVE-2022-1933": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01566,
+"epss_pct": 0.73553,
+"name": "WordPress CDI <5.1.9 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1933.yaml"
+},
+"CVE-2022-1937": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01686,
+"epss_pct": 0.75382,
+"name": "WordPress Awin Data Feed <=1.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1937.yaml"
+},
+"CVE-2022-1946": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01735,
+"epss_pct": 0.76048,
+"name": "WordPress Gallery <2.0.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1946.yaml"
+},
+"CVE-2022-1950": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.05513,
+"epss_pct": 0.9224,
+"name": "Youzify < 1.2.0 - Unauthenticated SQLi",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1950.yaml"
+},
+"CVE-2022-1952": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.23487,
+"epss_pct": 0.97628,
+"name": "WordPress eaSYNC Booking <1.1.16 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1952.yaml"
+},
+"CVE-2022-2034": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-639",
+"epss": 0.02528,
+"epss_pct": 0.83763,
+"name": "WordPress Sensei LMS <4.5.0 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2034.yaml"
+},
+"CVE-2022-2130": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.03076,
+"epss_pct": 0.86724,
+"name": "Microweber < 1.2.17 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2130.yaml"
+},
+"CVE-2022-21371": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.92649,
+"epss_pct": 0.9982,
+"name": "Oracle WebLogic Server Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-21371.yaml"
+},
+"CVE-2022-21500": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.71703,
+"epss_pct": 0.99375,
+"name": "Oracle E-Business Suite <=12.2 - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-21500.yaml"
+},
+"CVE-2022-21587": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.98342,
+"epss_pct": 0.99914,
+"name": "Oracle E-Business Suite 12.2.3 -12.2.11 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-21587.yaml"
+},
+"CVE-2022-21661": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.97795,
+"epss_pct": 0.999,
+"name": "WordPress <5.8.3 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-21661.yaml"
+},
+"CVE-2022-2168": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0127,
+"epss_pct": 0.67753,
+"name": "WordPress Download Manager < 3.2.44 - Authenticated Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2168.yaml"
+},
+"CVE-2022-21705": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.0865,
+"epss_pct": 0.9472,
+"name": "October CMS - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-21705.yaml"
+},
+"CVE-2022-2174": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02999,
+"epss_pct": 0.86407,
+"name": "microweber 1.2.18 - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2174.yaml"
+},
+"CVE-2022-2185": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.76884,
+"epss_pct": 0.99511,
+"name": "GitLab CE/EE - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2185.yaml"
+},
+"CVE-2022-2187": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01428,
+"epss_pct": 0.71104,
+"name": "WordPress Contact Form 7 Captcha <0.1.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2187.yaml"
+},
+"CVE-2022-2219": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01619,
+"epss_pct": 0.74359,
+"name": "Unyson < 2.7.27 - Cross Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2219.yaml"
+},
+"CVE-2022-22242": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02634,
+"epss_pct": 0.84466,
+"name": "Juniper Web Device Manager - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22242.yaml"
+},
+"CVE-2022-22536": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-444",
+"epss": 0.97945,
+"epss_pct": 0.99905,
+"name": "SAP Memory Pipes (MPI) Desynchronization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22536.yaml"
+},
+"CVE-2022-22733": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.37594,
+"epss_pct": 0.98426,
+"name": "Apache ShardingSphere ElasticJob-UI privilege escalation",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22733.yaml"
+},
+"CVE-2022-22897": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.1439,
+"epss_pct": 0.96358,
+"name": "PrestaShop AP Pagebuilder <= 2.4.4 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22897.yaml"
+},
+"CVE-2022-2290": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02849,
+"epss_pct": 0.85722,
+"name": "Trilium <0.52.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2290.yaml"
+},
+"CVE-2022-22947": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.98253,
+"epss_pct": 0.99911,
+"name": "Spring Cloud Gateway Code Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22947.yaml"
+},
+"CVE-2022-22954": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.99997,
+"epss_pct": 0.99989,
+"name": "VMware Workspace ONE Access - Server-Side Template Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22954.yaml"
+},
+"CVE-2022-22956": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.50694,
+"epss_pct": 0.98836,
+"name": "VMware Workspace ONE Access - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22956.yaml"
+},
+"CVE-2022-22963": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.99939,
+"epss_pct": 0.99971,
+"name": "Spring Cloud - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22963.yaml"
+},
+"CVE-2022-22965": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.99638,
+"epss_pct": 0.99948,
+"name": "Spring - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22965.yaml"
+},
+"CVE-2022-22972": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.56305,
+"epss_pct": 0.98979,
+"name": "VMware Workspace ONE Access/Identity Manager/vRealize Automation - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22972.yaml"
+},
+"CVE-2022-23102": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.05265,
+"epss_pct": 0.91969,
+"name": "SINEMA Remote Connect Server < V2.0 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23102.yaml"
+},
+"CVE-2022-23131": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-290",
+"epss": 0.95683,
+"epss_pct": 0.99865,
+"name": "Zabbix - SAML SSO Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23131.yaml"
+},
+"CVE-2022-23134": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"epss": 0.84657,
+"epss_pct": 0.99689,
+"name": "Zabbix Setup Configuration Authentication Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23134.yaml"
+},
+"CVE-2022-2314": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.1652,
+"epss_pct": 0.96766,
+"name": "WordPress VR Calendar <=2.3.2 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2314.yaml"
+},
+"CVE-2022-23178": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.75159,
+"epss_pct": 0.99473,
+"name": "Crestron Device - Credentials Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23178.yaml"
+},
+"CVE-2022-23347": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.13844,
+"epss_pct": 0.96247,
+"name": "BigAnt Server v5.6.06 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23347.yaml"
+},
+"CVE-2022-23348": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-916",
+"epss": 0.03273,
+"epss_pct": 0.8754,
+"name": "BigAnt Server 5.6.06 - Improper Access Control",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23348.yaml"
+},
+"CVE-2022-23397": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01028,
+"epss_pct": 0.61222,
+"name": "Cedar Gate EZ-NET <= 6.8.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23397.yaml"
+},
+"CVE-2022-23544": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"epss": 0.01607,
+"epss_pct": 0.74163,
+"name": "MeterSphere < 2.5.0 SSRF",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23544.yaml"
+},
+"CVE-2022-2373": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.01857,
+"epss_pct": 0.77703,
+"name": "WordPress Simply Schedule Appointments <1.5.7.7 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2373.yaml"
+},
+"CVE-2022-2376": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.01489,
+"epss_pct": 0.72248,
+"name": "WordPress Directorist <7.3.1 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2376.yaml"
+},
+"CVE-2022-23779": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.1514,
+"epss_pct": 0.96489,
+"name": "Zoho ManageEngine - Internal Hostname Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23779.yaml"
+},
+"CVE-2022-2379": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.0331,
+"epss_pct": 0.87685,
+"name": "WordPress Easy Student Results <=2.2.8 - Improper Authorization",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2379.yaml"
+},
+"CVE-2022-23808": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.07936,
+"epss_pct": 0.94316,
+"name": "phpMyAdmin < 5.1.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23808.yaml"
+},
+"CVE-2022-2383": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06332,
+"epss_pct": 0.93129,
+"name": "WordPress Feed Them Social <3.0.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2383.yaml"
+},
+"CVE-2022-23854": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.45957,
+"epss_pct": 0.98716,
+"name": "AVEVA InTouch Access Anywhere Secure Gateway - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23854.yaml"
+},
+"CVE-2022-23881": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.56509,
+"epss_pct": 0.98985,
+"name": "ZZZCMS zzzphp 2.1.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23881.yaml"
+},
+"CVE-2022-23898": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.07734,
+"epss_pct": 0.94195,
+"name": "MCMS 5.2.5 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23898.yaml"
+},
+"CVE-2022-23944": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"epss": 0.79007,
+"epss_pct": 0.99567,
+"name": "Apache ShenYu Admin Unauth Access",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23944.yaml"
+},
+"CVE-2022-24086": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.99199,
+"epss_pct": 0.99932,
+"name": "Adobe Commerce (Magento) - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24086.yaml"
+},
+"CVE-2022-24112": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-290",
+"epss": 0.96001,
+"epss_pct": 0.9987,
+"name": "Apache APISIX - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24112.yaml"
+},
+"CVE-2022-24124": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.55295,
+"epss_pct": 0.98958,
+"name": "Casdoor 1.13.0 - Unauthenticated SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24124.yaml"
+},
+"CVE-2022-24129": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
+"cwe": "CWE-918",
+"epss": 0.06139,
+"epss_pct": 0.92943,
+"name": "Shibboleth OIDC OP <3.0.4 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24129.yaml"
+},
+"CVE-2022-2414": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-611",
+"epss": 0.85608,
+"epss_pct": 0.99707,
+"name": "FreeIPA - XML Entity Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2414.yaml"
+},
+"CVE-2022-24181": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0608,
+"epss_pct": 0.92889,
+"name": "PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24181.yaml"
+},
+"CVE-2022-24223": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.61965,
+"epss_pct": 0.99113,
+"name": "Atom CMS v2.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24223.yaml"
+},
+"CVE-2022-24260": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.49992,
+"epss_pct": 0.98816,
+"name": "VoipMonitor - Pre-Auth SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24260.yaml"
+},
+"CVE-2022-24264": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.06711,
+"epss_pct": 0.93442,
+"name": "Cuppa CMS v1.0 - SQL injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24264.yaml"
+},
+"CVE-2022-24265": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.06711,
+"epss_pct": 0.93442,
+"name": "Cuppa CMS v1.0 - SQL injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24265.yaml"
+},
+"CVE-2022-24266": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.05707,
+"epss_pct": 0.92476,
+"name": "Cuppa CMS v1.0 - SQL injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24266.yaml"
+},
+"CVE-2022-24288": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.7788,
+"epss_pct": 0.99536,
+"name": "Apache Airflow OS Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24288.yaml"
+},
+"CVE-2022-24384": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0409,
+"epss_pct": 0.90001,
+"name": "SmarterTools SmarterTrack - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24384.yaml"
+},
+"CVE-2022-2461": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-862",
+"epss": 0.03852,
+"epss_pct": 0.89392,
+"name": "Transposh WordPress Translation <= 1.0.8 - Unauthenticated Settings Change",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2461.yaml"
+},
+"CVE-2022-2462": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.03225,
+"epss_pct": 0.87349,
+"name": "WordPress Transposh <=1.0.8.1 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2462.yaml"
+},
+"CVE-2022-24627": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.26389,
+"epss_pct": 0.97857,
+"name": "AudioCodes Device Manager Express - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24627.yaml"
+},
+"CVE-2022-24637": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.99055,
+"epss_pct": 0.99929,
+"name": "Open Web Analytics 1.7.3 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24637.yaml"
+},
+"CVE-2022-2467": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04493,
+"epss_pct": 0.908,
+"name": "Garage Management System 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2467.yaml"
+},
+"CVE-2022-24681": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03619,
+"epss_pct": 0.88687,
+"name": "ManageEngine ADSelfService Plus <6121 - Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24681.yaml"
+},
+"CVE-2022-24682": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-116",
+"epss": 0.30931,
+"epss_pct": 0.98124,
+"name": "Zimbra Collaboration Suite < 8.8.15 - Improper Encoding",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24682.yaml"
+},
+"CVE-2022-24706": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-1188",
+"epss": 0.92414,
+"epss_pct": 0.99817,
+"name": "CouchDB Erlang Distribution - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2022/CVE-2022-24706.yaml"
+},
+"CVE-2022-24716": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.89378,
+"epss_pct": 0.99772,
+"name": "Icinga Web 2 - Arbitrary File Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24716.yaml"
+},
+"CVE-2022-24816": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.98518,
+"epss_pct": 0.99917,
+"name": "GeoServer <1.2.2 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24816.yaml"
+},
+"CVE-2022-24819": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-359",
+"epss": 0.03198,
+"epss_pct": 0.87229,
+"name": "XWiki < 12.10.11, 13.4.4 & 13.9-rc-1 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24819.yaml"
+},
+"CVE-2022-24856": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.10479,
+"epss_pct": 0.95418,
+"name": "Flyte Console <0.52.0 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24856.yaml"
+},
+"CVE-2022-2486": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.29763,
+"epss_pct": 0.98064,
+"name": "Wavlink WN535K2/WN535K3 - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2486.yaml"
+},
+"CVE-2022-2487": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.79513,
+"epss_pct": 0.99573,
+"name": "Wavlink WN535K2/WN535K3 - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2487.yaml"
+},
+"CVE-2022-2488": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.32947,
+"epss_pct": 0.98234,
+"name": "Wavlink WN535K2/WN535K3 - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2488.yaml"
+},
+"CVE-2022-24899": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04478,
+"epss_pct": 0.90773,
+"name": "Contao <4.13.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24899.yaml"
+},
+"CVE-2022-24900": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"epss": 0.0841,
+"epss_pct": 0.94583,
+"name": "Piano LED Visualizer 1.3 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24900.yaml"
+},
+"CVE-2022-24990": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.83553,
+"epss_pct": 0.99663,
+"name": "TerraMaster TOS < 4.2.30 Server Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24990.yaml"
+},
+"CVE-2022-25061": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.58701,
+"epss_pct": 0.99036,
+"name": "TP-Link TL-WR840N - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25061.yaml"
+},
+"CVE-2022-25082": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.15673,
+"epss_pct": 0.96603,
+"name": "TOTOLink - Unauthenticated Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25082.yaml"
+},
+"CVE-2022-25125": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.06981,
+"epss_pct": 0.93673,
+"name": "MCMS 5.2.4 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25125.yaml"
+},
+"CVE-2022-25148": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.8093,
+"epss_pct": 0.996,
+"name": "WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25148.yaml"
+},
+"CVE-2022-25149": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.77956,
+"epss_pct": 0.99539,
+"name": "WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25149.yaml"
+},
+"CVE-2022-25216": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.13835,
+"epss_pct": 0.96245,
+"name": "DVDFab 12 Player/PlayerFab - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25216.yaml"
+},
+"CVE-2022-25226": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.11027,
+"epss_pct": 0.95589,
+"name": "ThinVNC - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25226.yaml"
+},
+"CVE-2022-25237": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-285",
+"epss": 0.56724,
+"epss_pct": 0.9899,
+"name": "Bonita Web 2021.2 - Authentication/Authorization Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25237.yaml"
+},
+"CVE-2022-25322": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.08346,
+"epss_pct": 0.94547,
+"name": "ZEROF Web Server 2.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25322.yaml"
+},
+"CVE-2022-25323": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03245,
+"epss_pct": 0.87428,
+"name": "ZEROF Web Server 2.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25323.yaml"
+},
+"CVE-2022-2535": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-639",
+"epss": 0.01909,
+"epss_pct": 0.78315,
+"name": "SearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2535.yaml"
+},
+"CVE-2022-25356": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-91",
+"epss": 0.05879,
+"epss_pct": 0.92685,
+"name": "Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25356.yaml"
+},
+"CVE-2022-25369": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-425",
+"epss": 0.40739,
+"epss_pct": 0.9855,
+"name": "Dynamicweb 9.5.0 - 9.12.7 Unauthenticated Admin User Creation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25369.yaml"
+},
+"CVE-2022-2544": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-425",
+"epss": 0.04267,
+"epss_pct": 0.90381,
+"name": "WordPress Ninja Job Board < 1.3.3 - Direct Request",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2544.yaml"
+},
+"CVE-2022-2546": {
+"cvss": 4.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01204,
+"epss_pct": 0.66083,
+"name": "WordPress All-in-One WP Migration <=7.62 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2546.yaml"
+},
+"CVE-2022-25481": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-668",
+"epss": 0.04748,
+"epss_pct": 0.91235,
+"name": "ThinkPHP 5.0.24 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25481.yaml"
+},
+"CVE-2022-25485": {
+"cvss": 7.8,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-829",
+"epss": 0.07927,
+"epss_pct": 0.94309,
+"name": "Cuppa CMS v1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25485.yaml"
+},
+"CVE-2022-25486": {
+"cvss": 7.8,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-829",
+"epss": 0.09966,
+"epss_pct": 0.95256,
+"name": "Cuppa CMS v1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25486.yaml"
+},
+"CVE-2022-25487": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.53839,
+"epss_pct": 0.98923,
+"name": "Atom CMS v2.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25487.yaml"
+},
+"CVE-2022-25488": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.07148,
+"epss_pct": 0.93812,
+"name": "Atom CMS v2.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25488.yaml"
+},
+"CVE-2022-25489": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01459,
+"epss_pct": 0.71682,
+"name": "Atom CMS v2.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25489.yaml"
+},
+"CVE-2022-25497": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-552",
+"epss": 0.03642,
+"epss_pct": 0.88773,
+"name": "Cuppa CMS v1.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25497.yaml"
+},
+"CVE-2022-2551": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-425",
+"epss": 0.16673,
+"epss_pct": 0.96795,
+"name": "WordPress Duplicator <1.4.7 - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2551.yaml"
+},
+"CVE-2022-2552": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.11298,
+"epss_pct": 0.9566,
+"name": "Duplicator < 1.4.7.1 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2552.yaml"
+},
+"CVE-2022-25568": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-1188",
+"epss": 0.06885,
+"epss_pct": 0.9359,
+"name": "MotionEye Config Info Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25568.yaml"
+},
+"CVE-2022-2599": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01331,
+"epss_pct": 0.69089,
+"name": "WordPress Anti-Malware Security and Brute-Force Firewall <4.21.83 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2599.yaml"
+},
+"CVE-2022-26134": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-917",
+"epss": 0.99999,
+"epss_pct": 0.99993,
+"name": "Confluence - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26134.yaml"
+},
+"CVE-2022-26138": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.9817,
+"epss_pct": 0.9991,
+"name": "Atlassian Questions For Confluence - Hardcoded Credentials",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26138.yaml"
+},
+"CVE-2022-26143": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.87212,
+"epss_pct": 0.99737,
+"name": "Mitel MiCollab - Information Disclosure & Denial of Service",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26143.yaml"
+},
+"CVE-2022-26148": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-312",
+"epss": 0.53439,
+"epss_pct": 0.98912,
+"name": "Grafana & Zabbix Integration - Credentials Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26148.yaml"
+},
+"CVE-2022-26159": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-425",
+"epss": 0.13372,
+"epss_pct": 0.96137,
+"name": "Ametys CMS Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26159.yaml"
+},
+"CVE-2022-26233": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.15028,
+"epss_pct": 0.9647,
+"name": "Barco Control Room Management Suite <=2.9 Build 0275 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26233.yaml"
+},
+"CVE-2022-26263": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.41722,
+"epss_pct": 0.98582,
+"name": "Yonyou U8 13.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26263.yaml"
+},
+"CVE-2022-2627": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01018,
+"epss_pct": 0.609,
+"name": "WordPress Newspaper < 12 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2627.yaml"
+},
+"CVE-2022-26271": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-552",
+"epss": 0.04515,
+"epss_pct": 0.90838,
+"name": "74cmsSE v3.4.1 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26271.yaml"
+},
+"CVE-2022-2633": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
+"cwe": "CWE-610",
+"epss": 0.27193,
+"epss_pct": 0.97909,
+"name": "All-In-One Video Gallery <=2.6.0 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2633.yaml"
+},
+"CVE-2022-26352": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.91553,
+"epss_pct": 0.99805,
+"name": "DotCMS - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26352.yaml"
+},
+"CVE-2022-26564": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02759,
+"epss_pct": 0.85223,
+"name": "HotelDruid Hotel Management Software 3.0.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26564.yaml"
+},
+"CVE-2022-26585": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.05475,
+"epss_pct": 0.92196,
+"name": "Mingsoft MCMS v5.2.7 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26585.yaml"
+},
+"CVE-2022-26833": {
+"cvss": 9.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.37639,
+"epss_pct": 0.98428,
+"name": "Open Automation Software OAS Platform V16.00.0121 - Missing Authentication",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26833.yaml"
+},
+"CVE-2022-26960": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-22",
+"epss": 0.50993,
+"epss_pct": 0.98845,
+"name": "elFinder <=2.1.60 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26960.yaml"
+},
+"CVE-2022-27043": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.06299,
+"epss_pct": 0.93099,
+"name": "Yearning - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27043.yaml"
+},
+"CVE-2022-27228": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.20776,
+"epss_pct": 0.97363,
+"name": "Bitrix Site Manager - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27228.yaml"
+},
+"CVE-2022-2733": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.95839,
+"epss_pct": 0.99869,
+"name": "Openemr < 7.0.0.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2733.yaml"
+},
+"CVE-2022-2756": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.03109,
+"epss_pct": 0.86854,
+"name": "Kavita <0.5.4.1 - Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2756.yaml"
+},
+"CVE-2022-27593": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
+"cwe": "CWE-610",
+"epss": 0.87908,
+"epss_pct": 0.99752,
+"name": "QNAP QTS Photo Station External Reference - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27593.yaml"
+},
+"CVE-2022-27849": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.04619,
+"epss_pct": 0.91031,
+"name": "WordPress Simple Ajax Chat <20220116 - Sensitive Information Disclosure vulnerability",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27849.yaml"
+},
+"CVE-2022-27924": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.85398,
+"epss_pct": 0.99703,
+"name": "Zimbra Collaboration Suite - Memcached Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27924.yaml"
+},
+"CVE-2022-27926": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.17634,
+"epss_pct": 0.96928,
+"name": "Zimbra Collaboration (ZCS) - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27926.yaml"
+},
+"CVE-2022-27927": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.13829,
+"epss_pct": 0.96245,
+"name": "Microfinance Management System 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27927.yaml"
+},
+"CVE-2022-27984": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.0678,
+"epss_pct": 0.93509,
+"name": "Cuppa CMS v1.0 - SQL injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27984.yaml"
+},
+"CVE-2022-27985": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.06598,
+"epss_pct": 0.93359,
+"name": "Cuppa CMS v1.0 - SQL injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27985.yaml"
+},
+"CVE-2022-28032": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.05922,
+"epss_pct": 0.9272,
+"name": "Atom CMS v2.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28032.yaml"
+},
+"CVE-2022-28033": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.05412,
+"epss_pct": 0.92128,
+"name": "Atom.CMS 2.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28033.yaml"
+},
+"CVE-2022-28079": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.28512,
+"epss_pct": 0.97991,
+"name": "College Management System 1.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28079.yaml"
+},
+"CVE-2022-28080": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.56907,
+"epss_pct": 0.98994,
+"name": "Royal Event - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28080.yaml"
+},
+"CVE-2022-28117": {
+"cvss": 4.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-918",
+"epss": 0.22903,
+"epss_pct": 0.97577,
+"name": "Navigate CMS 2.9.4 - Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28117.yaml"
+},
+"CVE-2022-28219": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-611",
+"epss": 0.97193,
+"epss_pct": 0.99889,
+"name": "Zoho ManageEngine ADAudit Plus <7600 - XML Entity Injection/Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28219.yaml"
+},
+"CVE-2022-28290": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01436,
+"epss_pct": 0.71244,
+"name": "WordPress Country Selector <1.6.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28290.yaml"
+},
+"CVE-2022-28363": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0492,
+"epss_pct": 0.91495,
+"name": "Reprise License Manager 14.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28363.yaml"
+},
+"CVE-2022-28365": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-425",
+"epss": 0.09149,
+"epss_pct": 0.94949,
+"name": "Reprise License Manager 14.2 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28365.yaml"
+},
+"CVE-2022-28508": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05324,
+"epss_pct": 0.92031,
+"name": "MantisBT < 2.25.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28508.yaml"
+},
+"CVE-2022-2863": {
+"cvss": 4.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.20668,
+"epss_pct": 0.97346,
+"name": "WordPress WPvivid Backup <0.9.76 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2863.yaml"
+},
+"CVE-2022-28666": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-287",
+"epss": 0.0137,
+"epss_pct": 0.69983,
+"name": "Custom Product Tabs for WooCommerce < 1.7.8 - Unauthenticated Toggle Content Setting Update",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28666.yaml"
+},
+"CVE-2022-28923": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01431,
+"epss_pct": 0.71155,
+"name": "Caddy 2.4.6 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28923.yaml"
+},
+"CVE-2022-28955": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.39733,
+"epss_pct": 0.98517,
+"name": "D-Link DIR-816L - Improper Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28955.yaml"
+},
+"CVE-2022-28987": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-203",
+"epss": 0.10365,
+"epss_pct": 0.95386,
+"name": "Zoho ManageEngine ADSelfService Plus 6121 - Username Enumeration",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28987.yaml"
+},
+"CVE-2022-29004": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02944,
+"epss_pct": 0.86165,
+"name": "Diary Management System 1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29004.yaml"
+},
+"CVE-2022-29005": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02178,
+"epss_pct": 0.81072,
+"name": "Online Birth Certificate System 1.2 - Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29005.yaml"
+},
+"CVE-2022-29006": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.19253,
+"epss_pct": 0.97137,
+"name": "Directory Management System 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29006.yaml"
+},
+"CVE-2022-29007": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.19253,
+"epss_pct": 0.97137,
+"name": "Dairy Farm Shop Management System 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29007.yaml"
+},
+"CVE-2022-29009": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.22909,
+"epss_pct": 0.97577,
+"name": "Cyber Cafe Management System 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29009.yaml"
+},
+"CVE-2022-29013": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.76905,
+"epss_pct": 0.99512,
+"name": "Razer Sila Gaming Router - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29013.yaml"
+},
+"CVE-2022-29014": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.11816,
+"epss_pct": 0.95781,
+"name": "Razer Sila Gaming Router 2.0.441_api-2.0.418 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29014.yaml"
+},
+"CVE-2022-29078": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.32808,
+"epss_pct": 0.98228,
+"name": "Node.js Embedded JavaScript 3.1.6 - Template Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29078.yaml"
+},
+"CVE-2022-29081": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.83543,
+"epss_pct": 0.99662,
+"name": "Zoho ManageEngine - Access Control Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29081.yaml"
+},
+"CVE-2022-29153": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-918",
+"epss": 0.08676,
+"epss_pct": 0.94733,
+"name": "HashiCorp Consul/Consul Enterprise - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29153.yaml"
+},
+"CVE-2022-29272": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.04038,
+"epss_pct": 0.89884,
+"name": "Nagios XI <5.8.5 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29272.yaml"
+},
+"CVE-2022-29298": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.46803,
+"epss_pct": 0.98738,
+"name": "SolarView Compact 6.00 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29298.yaml"
+},
+"CVE-2022-29303": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.97997,
+"epss_pct": 0.99906,
+"name": "SolarView Compact 6.00 - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29303.yaml"
+},
+"CVE-2022-29316": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03321,
+"epss_pct": 0.87723,
+"name": "Complete Online Job Search System 1.0 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29316.yaml"
+},
+"CVE-2022-29349": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0175,
+"epss_pct": 0.76249,
+"name": "kkFileView 4.0.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29349.yaml"
+},
+"CVE-2022-29383": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.48537,
+"epss_pct": 0.9878,
+"name": "NETGEAR ProSafe SSL VPN firmware - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29383.yaml"
+},
+"CVE-2022-29455": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.23678,
+"epss_pct": 0.97648,
+"name": "WordPress Elementor Website Builder <= 3.5.5 - DOM Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29455.yaml"
+},
+"CVE-2022-29464": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.99999,
+"epss_pct": 0.99994,
+"name": "WSO2 Management - Arbitrary File Upload & Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29464.yaml"
+},
+"CVE-2022-29495": {
+"name": "WordPress Popup Builder <= 4.1.11 - Cross-Site Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29495.yaml"
+},
+"CVE-2022-29548": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.41078,
+"epss_pct": 0.9856,
+"name": "WSO2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29548.yaml"
+},
+"CVE-2022-29775": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.60667,
+"epss_pct": 0.99081,
+"name": "iSpy 7.2.2.0 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29775.yaml"
+},
+"CVE-2022-30073": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01603,
+"epss_pct": 0.74094,
+"name": "WBCE CMS 1.5.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30073.yaml"
+},
+"CVE-2022-30489": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0416,
+"epss_pct": 0.90155,
+"name": "Wavlink WN-535G3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30489.yaml"
+},
+"CVE-2022-30512": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.09706,
+"epss_pct": 0.95161,
+"name": "School Dormitory Management System 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30512.yaml"
+},
+"CVE-2022-30513": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03635,
+"epss_pct": 0.88732,
+"name": "School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30513.yaml"
+},
+"CVE-2022-30514": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03635,
+"epss_pct": 0.88732,
+"name": "School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30514.yaml"
+},
+"CVE-2022-30525": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99944,
+"epss_pct": 0.99972,
+"name": "Zyxel Firewall - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30525.yaml"
+},
+"CVE-2022-3062": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.44095,
+"epss_pct": 0.98658,
+"name": "Simple File List < 4.4.12 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3062.yaml"
+},
+"CVE-2022-30776": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04291,
+"epss_pct": 0.90423,
+"name": "Atmail 6.5.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30776.yaml"
+},
+"CVE-2022-30777": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02296,
+"epss_pct": 0.8205,
+"name": "Parallels H-Sphere 3.6.1713 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30777.yaml"
+},
+"CVE-2022-31101": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-89",
+"epss": 0.2317,
+"epss_pct": 0.97601,
+"name": "Prestashop Blockwishlist 2.1.0 SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31101.yaml"
+},
+"CVE-2022-31126": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.52137,
+"epss_pct": 0.98875,
+"name": "Roxy-WI - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31126.yaml"
+},
+"CVE-2022-31137": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.90387,
+"epss_pct": 0.9979,
+"name": "Roxy-WI < 6.1.1.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31137.yaml"
+},
+"CVE-2022-31161": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.26819,
+"epss_pct": 0.97884,
+"name": "Roxy-WI - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31161.yaml"
+},
+"CVE-2022-31181": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.06479,
+"epss_pct": 0.93257,
+"name": "PrestaShop - SQL Injection to Eval Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31181.yaml"
+},
+"CVE-2022-3124": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-862",
+"epss": 0.06504,
+"epss_pct": 0.93277,
+"name": "Frontend File Manager < 21.3 - Unauthenticated File Renaming",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3124.yaml"
+},
+"CVE-2022-31260": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-306",
+"epss": 0.01862,
+"epss_pct": 0.77758,
+"name": "ResourceSpace - Metadata Export",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31260.yaml"
+},
+"CVE-2022-31268": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.10694,
+"epss_pct": 0.95484,
+"name": "Gitblit 1.9.3 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31268.yaml"
+},
+"CVE-2022-31269": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
+"cwe": "CWE-798",
+"epss": 0.06987,
+"epss_pct": 0.93678,
+"name": "Linear eMerge E3-Series - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31269.yaml"
+},
+"CVE-2022-31299": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05045,
+"epss_pct": 0.9169,
+"name": "Haraj 3.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31299.yaml"
+},
+"CVE-2022-31373": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05458,
+"epss_pct": 0.92173,
+"name": "SolarView Compact 6.00 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31373.yaml"
+},
+"CVE-2022-3142": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.11416,
+"epss_pct": 0.95687,
+"name": "NEX-Forms Plugin < 7.9.7 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3142.yaml"
+},
+"CVE-2022-31470": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.52721,
+"epss_pct": 0.98889,
+"name": "Axigen WebMail - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31470.yaml"
+},
+"CVE-2022-31474": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.63761,
+"epss_pct": 0.99159,
+"name": "BackupBuddy - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31474.yaml"
+},
+"CVE-2022-31499": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.64589,
+"epss_pct": 0.99178,
+"name": "Nortek Linear eMerge E3-Series <0.32-08f - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31499.yaml"
+},
+"CVE-2022-31656": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.2294,
+"epss_pct": 0.97582,
+"name": "VMware - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31656.yaml"
+},
+"CVE-2022-31678": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
+"cwe": "CWE-611",
+"epss": 0.08717,
+"epss_pct": 0.94752,
+"name": "VMWare Cloud Foundation NSX-V - XML External Entity (XXE)",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31678.yaml"
+},
+"CVE-2022-31704": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.81011,
+"epss_pct": 0.99602,
+"name": "VMware vRealize Log Insight - Improper Access Control to RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31704.yaml"
+},
+"CVE-2022-31706": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.87077,
+"epss_pct": 0.99734,
+"name": "VMware vRealize Log Insight - Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31706.yaml"
+},
+"CVE-2022-31711": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.21657,
+"epss_pct": 0.97454,
+"name": "VMware vRealize Log Insight < v8.10.2 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31711.yaml"
+},
+"CVE-2022-31793": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.15852,
+"epss_pct": 0.96638,
+"name": "muhttpd <=1.1.5 - Local Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2022/CVE-2022-31793.yaml"
+},
+"CVE-2022-31798": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-384",
+"epss": 0.08513,
+"epss_pct": 0.94645,
+"name": "Nortek Linear eMerge E3-Series - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31798.yaml"
+},
+"CVE-2022-31814": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.87798,
+"epss_pct": 0.99749,
+"name": "pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31814.yaml"
+},
+"CVE-2022-31845": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-668",
+"epss": 0.08698,
+"epss_pct": 0.94745,
+"name": "WAVLINK WN535 G3 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31845.yaml"
+},
+"CVE-2022-31846": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-668",
+"epss": 0.07429,
+"epss_pct": 0.94003,
+"name": "WAVLINK WN535 G3 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31846.yaml"
+},
+"CVE-2022-31847": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-425",
+"epss": 0.06555,
+"epss_pct": 0.93322,
+"name": "WAVLINK WN579 X3 M79X3.V5030.180719 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31847.yaml"
+},
+"CVE-2022-31854": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.3283,
+"epss_pct": 0.98229,
+"name": "Codoforum 5.1 - Arbitrary File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31854.yaml"
+},
+"CVE-2022-31974": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.05042,
+"epss_pct": 0.91685,
+"name": "Online Fire Reporting System v1.0 - SQL injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31974.yaml"
+},
+"CVE-2022-31975": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04906,
+"epss_pct": 0.91479,
+"name": "Online Fire Reporting System v1.0 - SQL injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31975.yaml"
+},
+"CVE-2022-31976": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.07224,
+"epss_pct": 0.93869,
+"name": "Online Fire Reporting System v1.0 - SQL injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31976.yaml"
+},
+"CVE-2022-31977": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.07224,
+"epss_pct": 0.93869,
+"name": "Online Fire Reporting System v1.0 - SQL injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31977.yaml"
+},
+"CVE-2022-31978": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.07224,
+"epss_pct": 0.9387,
+"name": "Online Fire Reporting System v1.0 - SQL injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31978.yaml"
+},
+"CVE-2022-31984": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04906,
+"epss_pct": 0.91479,
+"name": "Online Fire Reporting System v1.0 - SQL injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31984.yaml"
+},
+"CVE-2022-32007": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04563,
+"epss_pct": 0.90935,
+"name": "Complete Online Job Search System 1.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32007.yaml"
+},
+"CVE-2022-32015": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04563,
+"epss_pct": 0.90936,
+"name": "Complete Online Job Search System 1.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32015.yaml"
+},
+"CVE-2022-32018": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04563,
+"epss_pct": 0.90935,
+"name": "Complete Online Job Search System 1.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32018.yaml"
+},
+"CVE-2022-32022": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04923,
+"epss_pct": 0.915,
+"name": "Car Rental Management System 1.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32022.yaml"
+},
+"CVE-2022-32024": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04563,
+"epss_pct": 0.90935,
+"name": "Car Rental Management System 1.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32024.yaml"
+},
+"CVE-2022-32025": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04563,
+"epss_pct": 0.90935,
+"name": "Car Rental Management System 1.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32025.yaml"
+},
+"CVE-2022-32026": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.05308,
+"epss_pct": 0.92015,
+"name": "Car Rental Management System 1.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32026.yaml"
+},
+"CVE-2022-32028": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.05059,
+"epss_pct": 0.91705,
+"name": "Car Rental Management System 1.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32028.yaml"
+},
+"CVE-2022-32094": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.07635,
+"epss_pct": 0.94133,
+"name": "Hospital Management System 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32094.yaml"
+},
+"CVE-2022-32195": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02407,
+"epss_pct": 0.82903,
+"name": "Open edX <2022-06-06 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32195.yaml"
+},
+"CVE-2022-3236": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.98905,
+"epss_pct": 0.99924,
+"name": "Sophos Firewall <= 19.0 MR1 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3236.yaml"
+},
+"CVE-2022-32409": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.12593,
+"epss_pct": 0.9595,
+"name": "Portal do Software Publico Brasileiro i3geo 7.0.5 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32409.yaml"
+},
+"CVE-2022-3242": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"epss": 0.0152,
+"epss_pct": 0.7278,
+"name": "Microweber <1.3.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3242.yaml"
+},
+"CVE-2022-32429": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.75556,
+"epss_pct": 0.9948,
+"name": "MSNSwitch Firmware MNT.2408 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32429.yaml"
+},
+"CVE-2022-32430": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.04645,
+"epss_pct": 0.91073,
+"name": "Lin CMS Spring Boot - Default JWT Token",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32430.yaml"
+},
+"CVE-2022-32444": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02396,
+"epss_pct": 0.82828,
+"name": "u5cms v8.3.5 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32444.yaml"
+},
+"CVE-2022-3254": {
+"name": "AWP Classifieds <= 4.2.1 - Unauthenticated SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3254.yaml"
+},
+"CVE-2022-32770": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04448,
+"epss_pct": 0.90727,
+"name": "WWBN AVideo 11.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32770.yaml"
+},
+"CVE-2022-32771": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04226,
+"epss_pct": 0.90296,
+"name": "WWBN AVideo 11.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32771.yaml"
+},
+"CVE-2022-32772": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03871,
+"epss_pct": 0.89449,
+"name": "WWBN AVideo 11.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32772.yaml"
+},
+"CVE-2022-33119": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01551,
+"epss_pct": 0.73339,
+"name": "NUUO NVRsolo Video Recorder 03.06.02 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33119.yaml"
+},
+"CVE-2022-33174": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-863",
+"epss": 0.14116,
+"epss_pct": 0.963,
+"name": "Powertek Firmware <3.30.30 - Authorization Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33174.yaml"
+},
+"CVE-2022-33198": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.03225,
+"epss_pct": 0.87353,
+"name": "WordPress Accordions  - Unauthenticated Settings Update",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33198.yaml"
+},
+"CVE-2022-33891": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.93076,
+"epss_pct": 0.99826,
+"name": "Apache Spark UI - Remote Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33891.yaml"
+},
+"CVE-2022-33901": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.02599,
+"epss_pct": 0.8424,
+"name": "WordPress MultiSafepay for WooCommerce <=4.13.1 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33901.yaml"
+},
+"CVE-2022-33965": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04334,
+"epss_pct": 0.90502,
+"name": "WordPress Visitor Statistics <=5.7 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33965.yaml"
+},
+"CVE-2022-34045": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.03193,
+"epss_pct": 0.87206,
+"name": "WAVLINK WN530HG4 - Improper Access Control",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34045.yaml"
+},
+"CVE-2022-34046": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-863",
+"epss": 0.20351,
+"epss_pct": 0.97297,
+"name": "WAVLINK WN533A8 - Improper Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34046.yaml"
+},
+"CVE-2022-34047": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-668",
+"epss": 0.21387,
+"epss_pct": 0.97427,
+"name": "WAVLINK WN530HG4 - Improper Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34047.yaml"
+},
+"CVE-2022-34048": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06461,
+"epss_pct": 0.93242,
+"name": "Wavlink WN-533A8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34048.yaml"
+},
+"CVE-2022-34049": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-552",
+"epss": 0.0264,
+"epss_pct": 0.845,
+"name": "WAVLINK WN530HG4 - Improper Access Control",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34049.yaml"
+},
+"CVE-2022-34093": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02804,
+"epss_pct": 0.85484,
+"name": "Software Publico Brasileiro i3geo v7.0.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34093.yaml"
+},
+"CVE-2022-34094": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02804,
+"epss_pct": 0.85484,
+"name": "Software Publico Brasileiro i3geo v7.0.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34094.yaml"
+},
+"CVE-2022-34121": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-829",
+"epss": 0.03624,
+"epss_pct": 0.88699,
+"name": "CuppaCMS v1.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34121.yaml"
+},
+"CVE-2022-34265": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.73274,
+"epss_pct": 0.99418,
+"name": "Django - SQL injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2022/CVE-2022-34265.yaml"
+},
+"CVE-2022-34267": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.42162,
+"epss_pct": 0.98594,
+"name": "RWS WorldServer - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34267.yaml"
+},
+"CVE-2022-34305": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06562,
+"epss_pct": 0.93328,
+"name": "Apache Tomcat Examples Web Application - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34305.yaml"
+},
+"CVE-2022-34328": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02299,
+"epss_pct": 0.82076,
+"name": "PMB 7.3.10 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34328.yaml"
+},
+"CVE-2022-34487": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-264",
+"epss": 0.03225,
+"epss_pct": 0.87353,
+"name": "ShortCode Addons - Unauthenticated Options Update",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34487.yaml"
+},
+"CVE-2022-34534": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.02457,
+"epss_pct": 0.83278,
+"name": "Digital Watchdog DW Spectrum Server 4.2.0.32842 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34534.yaml"
+},
+"CVE-2022-34576": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.0364,
+"epss_pct": 0.88752,
+"name": "WAVLINK WN535 G3 - Improper Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34576.yaml"
+},
+"CVE-2022-34590": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04475,
+"epss_pct": 0.90769,
+"name": "Hospital Management System 1.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34590.yaml"
+},
+"CVE-2022-34753": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.71284,
+"epss_pct": 0.99363,
+"name": "SpaceLogic C-Bus Home Controller <=1.31.460 - Remote Command Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34753.yaml"
+},
+"CVE-2022-3477": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.03583,
+"epss_pct": 0.88581,
+"name": "WordPress tagDiv Composer < 3.5 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3477.yaml"
+},
+"CVE-2022-3481": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
+"cwe": "CWE-20",
+"epss": 0.03725,
+"epss_pct": 0.89014,
+"name": "NotificationX Dropshipping < 4.4 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3481.yaml"
+},
+"CVE-2022-3484": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00912,
+"epss_pct": 0.57542,
+"name": "WordPress WPB Show Core - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3484.yaml"
+},
+"CVE-2022-3506": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0119,
+"epss_pct": 0.65731,
+"name": "WordPress Related Posts <2.1.3 - Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3506.yaml"
+},
+"CVE-2022-35151": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01361,
+"epss_pct": 0.69791,
+"name": "kkFileView 4.1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35151.yaml"
+},
+"CVE-2022-35405": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.99927,
+"epss_pct": 0.99968,
+"name": "Zoho ManageEngine - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35405.yaml"
+},
+"CVE-2022-35413": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.14054,
+"epss_pct": 0.9629,
+"name": "WAPPLES Web Application Firewall <=6.0 - Hardcoded Credentials",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35413.yaml"
+},
+"CVE-2022-35416": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02886,
+"epss_pct": 0.85893,
+"name": "H3C SSL VPN <=2022-07-10 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35416.yaml"
+},
+"CVE-2022-35493": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01854,
+"epss_pct": 0.77658,
+"name": "eShop 3.0.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35493.yaml"
+},
+"CVE-2022-35507": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H",
+"cwe": "CWE-74",
+"epss": 0.01391,
+"epss_pct": 0.70407,
+"name": "Proxmox - CRLF Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35507.yaml"
+},
+"CVE-2022-35653": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.04458,
+"epss_pct": 0.90744,
+"name": "Moodle LTI module Reflected - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35653.yaml"
+},
+"CVE-2022-3578": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00956,
+"epss_pct": 0.58959,
+"name": "WordPress ProfileGrid <5.1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3578.yaml"
+},
+"CVE-2022-3590": {
+"cvss": 5.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-367",
+"epss": 0.0315,
+"epss_pct": 0.87031,
+"name": "WordPress <= 6.2 - Server Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3590.yaml"
+},
+"CVE-2022-35914": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.99662,
+"epss_pct": 0.99948,
+"name": "GLPI <=10.0.2 - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35914.yaml"
+},
+"CVE-2022-36446": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-116",
+"epss": 0.96049,
+"epss_pct": 0.99871,
+"name": "Webmin <1.997 - Authenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36446.yaml"
+},
+"CVE-2022-36537": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.95335,
+"epss_pct": 0.9986,
+"name": "ZK Framework - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36537.yaml"
+},
+"CVE-2022-36553": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.90902,
+"epss_pct": 0.99797,
+"name": "Hytec Inter HWL-2511-SS - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36553.yaml"
+},
+"CVE-2022-36642": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.12591,
+"epss_pct": 0.9595,
+"name": "Omnia MPX 1.5.0+r1 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36642.yaml"
+},
+"CVE-2022-36804": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.99077,
+"epss_pct": 0.9993,
+"name": "Atlassian Bitbucket - Remote Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36804.yaml"
+},
+"CVE-2022-36883": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-862",
+"epss": 0.06453,
+"epss_pct": 0.93236,
+"name": "Jenkins Git <=4.11.3 - Missing Authorization",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36883.yaml"
+},
+"CVE-2022-36923": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.071,
+"epss_pct": 0.9377,
+"name": "Zoho ManageEngine - getUserAPIKey Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36923.yaml"
+},
+"CVE-2022-37042": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.91893,
+"epss_pct": 0.99809,
+"name": "Zimbra Collaboration Suite 8.8.15/9.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37042.yaml"
+},
+"CVE-2022-37061": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99607,
+"epss_pct": 0.99946,
+"name": "FLIR AX8 1.46.16 - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37061.yaml"
+},
+"CVE-2022-37122": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.23061,
+"epss_pct": 0.97591,
+"name": "Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37122.yaml"
+},
+"CVE-2022-37153": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01647,
+"epss_pct": 0.74783,
+"name": "Artica Proxy 4.30.000000 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37153.yaml"
+},
+"CVE-2022-37190": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-732",
+"epss": 0.45769,
+"epss_pct": 0.98711,
+"name": "Cuppa CMS v1.0 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37190.yaml"
+},
+"CVE-2022-37191": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-829",
+"epss": 0.02798,
+"epss_pct": 0.85449,
+"name": "Cuppa CMS v1.0 - Authenticated Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37191.yaml"
+},
+"CVE-2022-37299": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.03104,
+"epss_pct": 0.86836,
+"name": "Shirne CMS 1.2.0 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37299.yaml"
+},
+"CVE-2022-3766": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06132,
+"epss_pct": 0.92937,
+"name": "phpMyFAQ < 3.1.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3766.yaml"
+},
+"CVE-2022-3768": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03663,
+"epss_pct": 0.88841,
+"name": "WordPress WPSmartContracts <1.3.12 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3768.yaml"
+},
+"CVE-2022-37932": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.02641,
+"epss_pct": 0.84503,
+"name": "HP Switch - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37932.yaml"
+},
+"CVE-2022-3800": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.02344,
+"epss_pct": 0.82451,
+"name": "IBAX - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3800.yaml"
+},
+"CVE-2022-3805": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
+"cwe": "CWE-79",
+"epss": 0.01594,
+"epss_pct": 0.73967,
+"name": "Jeg Elementor Kit < 2.5.7 - Unauthenticated Settings Update",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3805.yaml"
+},
+"CVE-2022-38130": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.54072,
+"epss_pct": 0.98929,
+"name": "KeySight RF - smsRestoreDatabaseZip UNC path to Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38130.yaml"
+},
+"CVE-2022-38131": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01403,
+"epss_pct": 0.70633,
+"name": "RStudio Connect - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38131.yaml"
+},
+"CVE-2022-38295": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01134,
+"epss_pct": 0.64204,
+"name": "Cuppa CMS v1.0 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38295.yaml"
+},
+"CVE-2022-38296": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.04053,
+"epss_pct": 0.8992,
+"name": "Cuppa CMS v1.0 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38296.yaml"
+},
+"CVE-2022-38463": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02669,
+"epss_pct": 0.84689,
+"name": "ServiceNow - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38463.yaml"
+},
+"CVE-2022-38467": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0081,
+"epss_pct": 0.54395,
+"name": "CRM Perks Forms < 1.1.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38467.yaml"
+},
+"CVE-2022-38553": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02426,
+"epss_pct": 0.83051,
+"name": "Academy Learning Management System <5.9.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38553.yaml"
+},
+"CVE-2022-38627": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04305,
+"epss_pct": 0.90449,
+"name": "Nortek Linear eMerge E3-Series - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38627.yaml"
+},
+"CVE-2022-38637": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04917,
+"epss_pct": 0.91491,
+"name": "Hospital Management System 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38637.yaml"
+},
+"CVE-2022-3869": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01302,
+"epss_pct": 0.68459,
+"name": "Froxlor < 0.10.38.2. - HTML Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3869.yaml"
+},
+"CVE-2022-38794": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.03928,
+"epss_pct": 0.89612,
+"name": "Zaver - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38794.yaml"
+},
+"CVE-2022-38812": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.02603,
+"epss_pct": 0.8426,
+"name": "AeroCMS 0.1.1 - SQL Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38812.yaml"
+},
+"CVE-2022-38817": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.03206,
+"epss_pct": 0.87264,
+"name": "Dapr Dashboard 0.1.0-0.10.0 - Improper Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38817.yaml"
+},
+"CVE-2022-38840": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-611",
+"epss": 0.09803,
+"epss_pct": 0.95198,
+"name": "G\u00fcralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE)",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38840.yaml"
+},
+"CVE-2022-38870": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.03066,
+"epss_pct": 0.86691,
+"name": "Free5gc 3.2.1 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38870.yaml"
+},
+"CVE-2022-39048": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01089,
+"epss_pct": 0.62989,
+"name": "ServiceNow - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39048.yaml"
+},
+"CVE-2022-3908": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00897,
+"epss_pct": 0.57074,
+"name": "WordPress Helloprint <1.4.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3908.yaml"
+},
+"CVE-2022-39195": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06314,
+"epss_pct": 0.93114,
+"name": "LISTSERV 17 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39195.yaml"
+},
+"CVE-2022-39258": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01472,
+"epss_pct": 0.7195,
+"name": "Mailcow Dockerized Swagger UI - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39258.yaml"
+},
+"CVE-2022-3933": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00869,
+"epss_pct": 0.56251,
+"name": "WordPress Essential Real Estate <3.9.6 - Authenticated Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3933.yaml"
+},
+"CVE-2022-3934": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00869,
+"epss_pct": 0.5625,
+"name": "WordPress FlatPM <3.0.13 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3934.yaml"
+},
+"CVE-2022-3980": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-611",
+"epss": 0.08413,
+"epss_pct": 0.94585,
+"name": "Sophos Mobile managed on-premises - XML External Entity Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3980.yaml"
+},
+"CVE-2022-3982": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.04493,
+"epss_pct": 0.90801,
+"name": "WordPress Booking Calendar <3.2.2 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3982.yaml"
+},
+"CVE-2022-39952": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.99809,
+"epss_pct": 0.99957,
+"name": "Fortinet FortiNAC - Arbitrary File Write",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39952.yaml"
+},
+"CVE-2022-39960": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.2568,
+"epss_pct": 0.9781,
+"name": "Jira Netic Group Export <1.0.3 - Missing Authorization",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39960.yaml"
+},
+"CVE-2022-39986": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.99034,
+"epss_pct": 0.99929,
+"name": "RaspAP 2.8.7 - Unauthenticated Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39986.yaml"
+},
+"CVE-2022-40022": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.92472,
+"epss_pct": 0.99817,
+"name": "Symmetricom SyncServer Unauthenticated - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40022.yaml"
+},
+"CVE-2022-40032": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.20693,
+"epss_pct": 0.97352,
+"name": "Simple Task Managing System v1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40032.yaml"
+},
+"CVE-2022-40047": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01199,
+"epss_pct": 0.65955,
+"name": "Flatpress < v1.2.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40047.yaml"
+},
+"CVE-2022-40083": {
+"cvss": 9.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
+"cwe": "CWE-601",
+"epss": 0.02473,
+"epss_pct": 0.83378,
+"name": "Labstack Echo 4.8.0 - Open Redirect",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40083.yaml"
+},
+"CVE-2022-40127": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.85653,
+"epss_pct": 0.99707,
+"name": "AirFlow < 2.4.0 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40127.yaml"
+},
+"CVE-2022-40359": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01479,
+"epss_pct": 0.7207,
+"name": "Kae's File Manager <=1.4.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40359.yaml"
+},
+"CVE-2022-40443": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.02224,
+"epss_pct": 0.81472,
+"name": "ZZCMS 2022 - Path Information Disclosure",
+"severity": "low",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40443.yaml"
+},
+"CVE-2022-4049": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04756,
+"epss_pct": 0.91246,
+"name": "WP User <= 7.0 - Unauthenticated SQLi",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4049.yaml"
+},
+"CVE-2022-4050": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04756,
+"epss_pct": 0.91246,
+"name": "WordPress JoomSport <5.2.8 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4050.yaml"
+},
+"CVE-2022-4057": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-425",
+"epss": 0.0146,
+"epss_pct": 0.71722,
+"name": "Autoptimize < 3.1.0 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4057.yaml"
+},
+"CVE-2022-4059": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04795,
+"epss_pct": 0.91306,
+"name": "Cryptocurrency Widgets Pack < 2.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4059.yaml"
+},
+"CVE-2022-4060": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.42723,
+"epss_pct": 0.98615,
+"name": "WordPress User Post Gallery <=2.19 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4060.yaml"
+},
+"CVE-2022-40624": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.17107,
+"epss_pct": 0.96857,
+"name": "pfSense pfBlockerNG - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40624.yaml"
+},
+"CVE-2022-4063": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.09519,
+"epss_pct": 0.95091,
+"name": "WordPress InPost Gallery <2.1.4.1 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4063.yaml"
+},
+"CVE-2022-40684": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.99984,
+"epss_pct": 0.99982,
+"name": "Fortinet - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40684.yaml"
+},
+"CVE-2022-40734": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.04197,
+"epss_pct": 0.90231,
+"name": "Laravel Filemanager v2.5.1 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40734.yaml"
+},
+"CVE-2022-40843": {
+"cvss": 4.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.28802,
+"epss_pct": 0.98009,
+"name": "Tenda AC1200 V-W15Ev2 - Authentication Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40843.yaml"
+},
+"CVE-2022-40879": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01157,
+"epss_pct": 0.64842,
+"name": "kkFileView 4.1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40879.yaml"
+},
+"CVE-2022-40881": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.29722,
+"epss_pct": 0.98062,
+"name": "SolarView 6.00 - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40881.yaml"
+},
+"CVE-2022-4117": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04955,
+"epss_pct": 0.91559,
+"name": "WordPress IWS Geo Form Fields <=1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4117.yaml"
+},
+"CVE-2022-41352": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.95478,
+"epss_pct": 0.99863,
+"name": "Zimbra Collaboration - Unrestricted File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41352.yaml"
+},
+"CVE-2022-4140": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-552",
+"epss": 0.02941,
+"epss_pct": 0.86148,
+"name": "WordPress Welcart e-Commerce <2.8.5 - Arbitrary File Access",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4140.yaml"
+},
+"CVE-2022-41412": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.04088,
+"epss_pct": 0.89998,
+"name": "perfSONAR 4.x <= 4.4.4 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41412.yaml"
+},
+"CVE-2022-41441": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05187,
+"epss_pct": 0.91874,
+"name": "ReQlogic v11.3 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41441.yaml"
+},
+"CVE-2022-41473": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01054,
+"epss_pct": 0.62007,
+"name": "RPCMS 3.0.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41473.yaml"
+},
+"CVE-2022-41678": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.8581,
+"epss_pct": 0.99712,
+"name": "Apache ActiveMQ < 5.16.5/5.17.3 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41678.yaml"
+},
+"CVE-2022-41697": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-204",
+"epss": 0.20041,
+"epss_pct": 0.9725,
+"name": "Ghost CMS - User Enumeration",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41697.yaml"
+},
+"CVE-2022-41800": {
+"cvss": 8.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
+"cwe": "CWE-77",
+"epss": 0.76866,
+"epss_pct": 0.9951,
+"name": "F5 BIG-IP Appliance Mode - Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41800.yaml"
+},
+"CVE-2022-41840": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.05212,
+"epss_pct": 0.9191,
+"name": "Welcart eCommerce <=2.7.7 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41840.yaml"
+},
+"CVE-2022-42094": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02505,
+"epss_pct": 0.836,
+"name": "Backdrop CMS version 1.23.0 - Stored Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42094.yaml"
+},
+"CVE-2022-42095": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01947,
+"epss_pct": 0.78753,
+"name": "Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42095.yaml"
+},
+"CVE-2022-42096": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0196,
+"epss_pct": 0.78894,
+"name": "Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42096.yaml"
+},
+"CVE-2022-42118": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0093,
+"epss_pct": 0.58118,
+"name": "Liferay Portal - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42118.yaml"
+},
+"CVE-2022-42149": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.02334,
+"epss_pct": 0.82369,
+"name": "kkFileView 4.0 - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42149.yaml"
+},
+"CVE-2022-4223": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.80069,
+"epss_pct": 0.99584,
+"name": "pgAdmin < 6.17 - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4223.yaml"
+},
+"CVE-2022-42233": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.42704,
+"epss_pct": 0.98614,
+"name": "Tenda 11N - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42233.yaml"
+},
+"CVE-2022-42475": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.99474,
+"epss_pct": 0.99941,
+"name": "Fortinet SSL-VPN - Heap-Based Buffer Overflow",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2022/CVE-2022-42475.yaml"
+},
+"CVE-2022-4260": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00851,
+"epss_pct": 0.55668,
+"name": "WordPress WP-Ban <1.69.1 - Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4260.yaml"
+},
+"CVE-2022-42746": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01129,
+"epss_pct": 0.64085,
+"name": "CandidATS 3.0.0 - Cross-Site Scripting.",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42746.yaml"
+},
+"CVE-2022-42747": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01082,
+"epss_pct": 0.62808,
+"name": "CandidATS 3.0.0 - Cross-Site Scripting.",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42747.yaml"
+},
+"CVE-2022-42748": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01082,
+"epss_pct": 0.62809,
+"name": "CandidATS 3.0.0 - Cross-Site Scripting.",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42748.yaml"
+},
+"CVE-2022-42749": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01082,
+"epss_pct": 0.62809,
+"name": "CandidATS 3.0.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42749.yaml"
+},
+"CVE-2022-42889": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.99931,
+"epss_pct": 0.99968,
+"name": "Text4Shell - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2022/CVE-2022-42889.yaml"
+},
+"CVE-2022-4295": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00897,
+"epss_pct": 0.57074,
+"name": "Show all comments < 7.0.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4295.yaml"
+},
+"CVE-2022-4301": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00902,
+"epss_pct": 0.5724,
+"name": "WordPress Sunshine Photo Cart <2.9.15 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4301.yaml"
+},
+"CVE-2022-43014": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01366,
+"epss_pct": 0.69899,
+"name": "OpenCATS 0.9.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43014.yaml"
+},
+"CVE-2022-43015": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01366,
+"epss_pct": 0.69899,
+"name": "OpenCATS 0.9.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43015.yaml"
+},
+"CVE-2022-43016": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01425,
+"epss_pct": 0.71061,
+"name": "OpenCATS 0.9.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43016.yaml"
+},
+"CVE-2022-43017": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01425,
+"epss_pct": 0.71061,
+"name": "OpenCATS 0.9.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43017.yaml"
+},
+"CVE-2022-43018": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01425,
+"epss_pct": 0.71061,
+"name": "OpenCATS 0.9.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43018.yaml"
+},
+"CVE-2022-4305": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.38625,
+"epss_pct": 0.9847,
+"name": "Login as User or Customer < 3.3 - Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4305.yaml"
+},
+"CVE-2022-4306": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00841,
+"epss_pct": 0.55347,
+"name": "WordPress Panda Pods Repeater Field <1.5.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4306.yaml"
+},
+"CVE-2022-43140": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-918",
+"epss": 0.0197,
+"epss_pct": 0.78996,
+"name": "kkFileView 4.1.0 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43140.yaml"
+},
+"CVE-2022-43164": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00918,
+"epss_pct": 0.57734,
+"name": "Rukovoditel <= 3.2.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43164.yaml"
+},
+"CVE-2022-43165": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00918,
+"epss_pct": 0.57733,
+"name": "Rukovoditel <= 3.2.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43165.yaml"
+},
+"CVE-2022-43166": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00918,
+"epss_pct": 0.57734,
+"name": "Rukovoditel <= 3.2.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43166.yaml"
+},
+"CVE-2022-43167": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00976,
+"epss_pct": 0.59657,
+"name": "Rukovoditel <= 3.2.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43167.yaml"
+},
+"CVE-2022-43169": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00918,
+"epss_pct": 0.57734,
+"name": "Rukovoditel <= 3.2.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43169.yaml"
+},
+"CVE-2022-43170": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00918,
+"epss_pct": 0.57734,
+"name": "Rukovoditel <= 3.2.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43170.yaml"
+},
+"CVE-2022-43185": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01009,
+"epss_pct": 0.60651,
+"name": "Rukovoditel <= 3.2.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43185.yaml"
+},
+"CVE-2022-4320": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00891,
+"epss_pct": 0.56883,
+"name": "WordPress Events Calendar <1.4.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4320.yaml"
+},
+"CVE-2022-4321": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01193,
+"epss_pct": 0.65809,
+"name": "PDF Generator for WordPress < 1.1.2 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4321.yaml"
+},
+"CVE-2022-4325": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00902,
+"epss_pct": 0.5724,
+"name": "WordPress Post Status Notifier Lite <1.10.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4325.yaml"
+},
+"CVE-2022-4328": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.04427,
+"epss_pct": 0.90678,
+"name": "WooCommerce Checkout Field Manager < 18.0 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4328.yaml"
+},
+"CVE-2022-4375": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.0289,
+"epss_pct": 0.85918,
+"name": "Mingsoft MCMS - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4375.yaml"
+},
+"CVE-2022-43769": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.9767,
+"epss_pct": 0.99899,
+"name": "Hitachi Pentaho Business Analytics Server - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43769.yaml"
+},
+"CVE-2022-43939": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
+"cwe": "CWE-647",
+"epss": 0.92266,
+"epss_pct": 0.99815,
+"name": "Hitachi Pentaho Business Analytics Server - Bypass Authorization",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43939.yaml"
+},
+"CVE-2022-44290": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03587,
+"epss_pct": 0.88589,
+"name": "WebTareas 2.4p5 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44290.yaml"
+},
+"CVE-2022-44291": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03587,
+"epss_pct": 0.8859,
+"name": "WebTareas 2.4p5 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44291.yaml"
+},
+"CVE-2022-44356": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.02734,
+"epss_pct": 0.8506,
+"name": "WAVLINK Quantum D4G (WL-WN531G3) - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44356.yaml"
+},
+"CVE-2022-4447": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04756,
+"epss_pct": 0.91247,
+"name": "WordPress Fontsy <=1.8.6 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4447.yaml"
+},
+"CVE-2022-44588": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02249,
+"epss_pct": 0.81667,
+"name": "Cryptocurrency Widgets Pack <= 1.8.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44588.yaml"
+},
+"CVE-2022-44727": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02486,
+"epss_pct": 0.83469,
+"name": "PrestaShop lgcookieslaw - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44727.yaml"
+},
+"CVE-2022-44877": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99995,
+"epss_pct": 0.99987,
+"name": "CentOS Web Panel 7 <0.9.8.1147 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44877.yaml"
+},
+"CVE-2022-44944": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01037,
+"epss_pct": 0.61515,
+"name": "Rukovoditel <= 3.2.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44944.yaml"
+},
+"CVE-2022-44946": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01037,
+"epss_pct": 0.61515,
+"name": "Rukovoditel <= 3.2.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44946.yaml"
+},
+"CVE-2022-44947": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00961,
+"epss_pct": 0.59109,
+"name": "Rukovoditel <= 3.2.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44947.yaml"
+},
+"CVE-2022-44948": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00903,
+"epss_pct": 0.57285,
+"name": "Rukovoditel <= 3.2.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44948.yaml"
+},
+"CVE-2022-44949": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00937,
+"epss_pct": 0.58369,
+"name": "Rukovoditel <= 3.2.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44949.yaml"
+},
+"CVE-2022-44950": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00937,
+"epss_pct": 0.58369,
+"name": "Rukovoditel <= 3.2.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44950.yaml"
+},
+"CVE-2022-44951": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00937,
+"epss_pct": 0.5837,
+"name": "Rukovoditel <= 3.2.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44951.yaml"
+},
+"CVE-2022-44952": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00903,
+"epss_pct": 0.57285,
+"name": "Rukovoditel <= 3.2.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44952.yaml"
+},
+"CVE-2022-44957": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01037,
+"epss_pct": 0.61515,
+"name": "WebTareas 2.4p5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44957.yaml"
+},
+"CVE-2022-45037": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01024,
+"epss_pct": 0.61099,
+"name": "WBCE CMS v1.5.4 - Cross Site Scripting (Stored)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45037.yaml"
+},
+"CVE-2022-45038": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01024,
+"epss_pct": 0.61098,
+"name": "WBCE CMS v1.5.4 - Cross Site Scripting (Stored)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45038.yaml"
+},
+"CVE-2022-45269": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.03092,
+"epss_pct": 0.8679,
+"name": "Linx Sphere - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45269.yaml"
+},
+"CVE-2022-45354": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.38083,
+"epss_pct": 0.98448,
+"name": "Download Monitor <= 4.7.60 - Sensitive Information Exposure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45354.yaml"
+},
+"CVE-2022-45362": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.41762,
+"epss_pct": 0.98584,
+"name": "WordPress Paytm Payment Gateway <=2.7.0 - Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45362.yaml"
+},
+"CVE-2022-45365": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.48879,
+"epss_pct": 0.9879,
+"name": "Stock Ticker <= 3.23.2 - Cross-Site-Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45365.yaml"
+},
+"CVE-2022-45699": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.76604,
+"epss_pct": 0.99505,
+"name": "APsystems ECU-R Firmware - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45699.yaml"
+},
+"CVE-2022-45805": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02327,
+"epss_pct": 0.82306,
+"name": "WordPress Paytm Payment Gateway <=2.7.3 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45805.yaml"
+},
+"CVE-2022-45808": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L",
+"cwe": "CWE-89",
+"epss": 0.04269,
+"epss_pct": 0.90384,
+"name": "LearnPress Plugin < 4.2.0 - Unauthenticated Time-Based Blind SQLi",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45808.yaml"
+},
+"CVE-2022-45835": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.37673,
+"epss_pct": 0.98429,
+"name": "WordPress PhonePe Payment Solutions <=1.0.15 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45835.yaml"
+},
+"CVE-2022-45836": {
+"name": "WordPress Download Manager <= 3.2.59 - Reflected XSS",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45836.yaml"
+},
+"CVE-2022-45917": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.0199,
+"epss_pct": 0.7922,
+"name": "ILIAS eLearning <7.16 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45917.yaml"
+},
+"CVE-2022-45933": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.51696,
+"epss_pct": 0.98863,
+"name": "KubeView <=0.1.31 - Information Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45933.yaml"
+},
+"CVE-2022-46020": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.38953,
+"epss_pct": 0.98482,
+"name": "WBCE CMS v1.5.4 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46020.yaml"
+},
+"CVE-2022-46071": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.0431,
+"epss_pct": 0.90458,
+"name": "Helmet Store Showroom v1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46071.yaml"
+},
+"CVE-2022-46073": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01235,
+"epss_pct": 0.66945,
+"name": "Helmet Store Showroom - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46073.yaml"
+},
+"CVE-2022-46169": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.99826,
+"epss_pct": 0.99958,
+"name": "Cacti <=1.2.22 - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46169.yaml"
+},
+"CVE-2022-46381": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01739,
+"epss_pct": 0.76098,
+"name": "Linear eMerge E3-Series - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46381.yaml"
+},
+"CVE-2022-46443": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.37729,
+"epss_pct": 0.98434,
+"name": "Bangresto - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46443.yaml"
+},
+"CVE-2022-46888": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01543,
+"epss_pct": 0.73183,
+"name": "NexusPHP <1.7.33 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46888.yaml"
+},
+"CVE-2022-46934": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01084,
+"epss_pct": 0.62855,
+"name": "kkFileView 4.1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46934.yaml"
+},
+"CVE-2022-47002": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-863",
+"epss": 0.06253,
+"epss_pct": 0.93054,
+"name": "Masa CMS - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47002.yaml"
+},
+"CVE-2022-47003": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-863",
+"epss": 0.03614,
+"epss_pct": 0.88672,
+"name": "Mura CMS <10.0.580 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47003.yaml"
+},
+"CVE-2022-47075": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.59407,
+"epss_pct": 0.99052,
+"name": "Smart Office Web 20.28 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47075.yaml"
+},
+"CVE-2022-47501": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.1018,
+"epss_pct": 0.95324,
+"name": "Apache OFBiz < 18.12.07 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47501.yaml"
+},
+"CVE-2022-47615": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.05063,
+"epss_pct": 0.91712,
+"name": "LearnPress Plugin < 4.2.0 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47615.yaml"
+},
+"CVE-2022-47945": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.28254,
+"epss_pct": 0.97977,
+"name": "Thinkphp Lang - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47945.yaml"
+},
+"CVE-2022-47966": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.99753,
+"epss_pct": 0.99953,
+"name": "ManageEngine - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47966.yaml"
+},
+"CVE-2022-47986": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.99968,
+"epss_pct": 0.99976,
+"name": "IBM Aspera Faspex <=4.4.2 PL1 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47986.yaml"
+},
+"CVE-2022-48012": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0137,
+"epss_pct": 0.69963,
+"name": "OpenCATS 0.9.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48012.yaml"
+},
+"CVE-2022-48164": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.03096,
+"epss_pct": 0.86807,
+"name": "Wavlink WL-WN533A8 M33A8.V5030.190716 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48164.yaml"
+},
+"CVE-2022-48165": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-284",
+"epss": 0.03284,
+"epss_pct": 0.87584,
+"name": "Wavlink - Improper Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48165.yaml"
+},
+"CVE-2022-48166": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.02823,
+"epss_pct": 0.85588,
+"name": "Wavlink WL-WN530HG4 M30HG4.V5030.201217 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48166.yaml"
+},
+"CVE-2022-48197": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06608,
+"epss_pct": 0.93366,
+"name": "Yahoo User Interface library (YUI2) TreeView v2.8.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48197.yaml"
+},
+"CVE-2022-48323": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.56787,
+"epss_pct": 0.98992,
+"name": "Sunflower Simple and Personal 1.0.1.43315 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48323.yaml"
+},
+"CVE-2022-4897": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00858,
+"epss_pct": 0.55924,
+"name": "WordPress BackupBuddy <8.8.3 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4897.yaml"
+},
+"CVE-2022-4940": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-862",
+"epss": 0.01084,
+"epss_pct": 0.62877,
+"name": "WCFM Membership <= 2.10.0 - Broken Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4940.yaml"
+},
+"CVE-2022-4971": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.16223,
+"epss_pct": 0.96711,
+"name": "Sassy Social Share <= 3.3.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4971.yaml"
+},
+"CVE-2023-0037": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03911,
+"epss_pct": 0.89549,
+"name": "WordPress 10Web Map Builder < 1.0.73 - Unauthenticated SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0037.yaml"
+},
+"CVE-2023-0099": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01726,
+"epss_pct": 0.75919,
+"name": "Simple URLs < 115 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0099.yaml"
+},
+"CVE-2023-0126": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.72699,
+"epss_pct": 0.99404,
+"name": "SonicWall SMA1000 LFI",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0126.yaml"
+},
+"CVE-2023-0159": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.55459,
+"epss_pct": 0.98962,
+"name": "Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0159.yaml"
+},
+"CVE-2023-0236": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01347,
+"epss_pct": 0.69461,
+"name": "WordPress Tutor LMS <2.0.10 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0236.yaml"
+},
+"CVE-2023-0261": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04356,
+"epss_pct": 0.90544,
+"name": "WordPress WP TripAdvisor Review Slider <10.8 - Authenticated SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0261.yaml"
+},
+"CVE-2023-0297": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.95915,
+"epss_pct": 0.99868,
+"name": "PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE)",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0297.yaml"
+},
+"CVE-2023-0334": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00881,
+"epss_pct": 0.56631,
+"name": "ShortPixel Adaptive Images < 3.6.3 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0334.yaml"
+},
+"CVE-2023-0448": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.42928,
+"epss_pct": 0.98621,
+"name": "WP Helper Lite < 4.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0448.yaml"
+},
+"CVE-2023-0514": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0085,
+"epss_pct": 0.55633,
+"name": "Membership Database <= 1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0514.yaml"
+},
+"CVE-2023-0527": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06118,
+"epss_pct": 0.92925,
+"name": "Online Security Guards Hiring System - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0527.yaml"
+},
+"CVE-2023-0552": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.24263,
+"epss_pct": 0.97692,
+"name": "WordPress Pie Register <3.8.2.3 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0552.yaml"
+},
+"CVE-2023-0562": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.44268,
+"epss_pct": 0.98663,
+"name": "Bank Locker Management System v1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0562.yaml"
+},
+"CVE-2023-0563": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.37608,
+"epss_pct": 0.98428,
+"name": "Bank Locker Management System - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0563.yaml"
+},
+"CVE-2023-0600": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04234,
+"epss_pct": 0.90315,
+"name": "WP Visitor Statistics (Real Time Traffic) < 6.9 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0600.yaml"
+},
+"CVE-2023-0602": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00886,
+"epss_pct": 0.56742,
+"name": "Twittee Text Tweet <= 1.0.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0602.yaml"
+},
+"CVE-2023-0630": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.05141,
+"epss_pct": 0.9181,
+"name": "Slimstat Analytics < 4.9.3.3 Subscriber - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0630.yaml"
+},
+"CVE-2023-0669": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.99999,
+"epss_pct": 0.99996,
+"name": "Fortra GoAnywhere MFT - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0669.yaml"
+},
+"CVE-2023-0676": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01532,
+"epss_pct": 0.72982,
+"name": "phpIPAM 1.5.1 - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0676.yaml"
+},
+"CVE-2023-0678": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.37304,
+"epss_pct": 0.98416,
+"name": "PHPIPAM <v1.5.1 - Missing Authorization",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0678.yaml"
+},
+"CVE-2023-0777": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.15207,
+"epss_pct": 0.96502,
+"name": "modoboa  2.0.4 - Admin TakeOver",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0777.yaml"
+},
+"CVE-2023-0876": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.00713,
+"epss_pct": 0.51114,
+"name": "WordPress Meta SEO <= 4.5.2 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0876.yaml"
+},
+"CVE-2023-0900": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03229,
+"epss_pct": 0.87363,
+"name": "AP Pricing Tables Lite <= 1.1.6 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0900.yaml"
+},
+"CVE-2023-0942": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01213,
+"epss_pct": 0.66382,
+"name": "WordPress Japanized for WooCommerce <2.5.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0942.yaml"
+},
+"CVE-2023-0947": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.03637,
+"epss_pct": 0.88743,
+"name": "Flatpress < 1.3 - Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0947.yaml"
+},
+"CVE-2023-0948": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0085,
+"epss_pct": 0.55633,
+"name": "WordPress Japanized for WooCommerce <2.5.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0948.yaml"
+},
+"CVE-2023-0968": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01252,
+"epss_pct": 0.67339,
+"name": "WordPress Watu Quiz <3.3.9.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0968.yaml"
+},
+"CVE-2023-1020": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.0499,
+"epss_pct": 0.9161,
+"name": "Steveas WP Live Chat Shoutbox <= 1.4.2 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1020.yaml"
+},
+"CVE-2023-1080": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0126,
+"epss_pct": 0.67537,
+"name": "WordPress GN Publisher <1.5.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1080.yaml"
+},
+"CVE-2023-1119": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01244,
+"epss_pct": 0.67148,
+"name": "WP-Optimize WordPress plugin < 3.2.13 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1119.yaml"
+},
+"CVE-2023-1177": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.6968,
+"epss_pct": 0.99316,
+"name": "Mlflow <2.2.1 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1177.yaml"
+},
+"CVE-2023-1263": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01414,
+"epss_pct": 0.70848,
+"name": "Coming Soon & Maintenance < 4.1.7 - Unauthenticated Post/Page Access",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1263.yaml"
+},
+"CVE-2023-1315": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01059,
+"epss_pct": 0.62136,
+"name": "osTicket < v1.16.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1315.yaml"
+},
+"CVE-2023-1317": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01015,
+"epss_pct": 0.60835,
+"name": "osTicket < v1.16.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1317.yaml"
+},
+"CVE-2023-1318": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01015,
+"epss_pct": 0.60835,
+"name": "osTicket < v1.16.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1318.yaml"
+},
+"CVE-2023-1362": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-1021",
+"epss": 0.01411,
+"epss_pct": 0.70787,
+"name": "unilogies/bumsys < v2.0.2 - Clickjacking",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1362.yaml"
+},
+"CVE-2023-1389": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99999,
+"epss_pct": 0.99992,
+"name": "TP-Link Archer AX21 (AX1800) - Unauthenticated Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1389.yaml"
+},
+"CVE-2023-1408": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03229,
+"epss_pct": 0.87363,
+"name": "Video List Manager <= 1.7 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1408.yaml"
+},
+"CVE-2023-1454": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.35825,
+"epss_pct": 0.98351,
+"name": "Jeecg-boot 3.5.0 qurestSql - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1454.yaml"
+},
+"CVE-2023-1496": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01585,
+"epss_pct": 0.73835,
+"name": "Imgproxy < 3.14.0 - Cross-site Scripting (XSS)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1496.yaml"
+},
+"CVE-2023-1546": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0085,
+"epss_pct": 0.55634,
+"name": "MyCryptoCheckout < 2.124 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1546.yaml"
+},
+"CVE-2023-1671": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.99999,
+"epss_pct": 0.99991,
+"name": "Sophos Web Appliance - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1671.yaml"
+},
+"CVE-2023-1698": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.82037,
+"epss_pct": 0.99627,
+"name": "WAGO - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1698.yaml"
+},
+"CVE-2023-1719": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-665",
+"epss": 0.04973,
+"epss_pct": 0.91584,
+"name": "Bitrix Component - Cross-Site Scripting",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1719.yaml"
+},
+"CVE-2023-1730": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.40586,
+"epss_pct": 0.98548,
+"name": "SupportCandy < 3.1.5 - Unauthenticated SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1730.yaml"
+},
+"CVE-2023-1780": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00998,
+"epss_pct": 0.60307,
+"name": "Companion Sitemap Generator < 4.5.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1780.yaml"
+},
+"CVE-2023-1835": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00925,
+"epss_pct": 0.57951,
+"name": "Ninja Forms < 3.6.22 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1835.yaml"
+},
+"CVE-2023-1880": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01644,
+"epss_pct": 0.74735,
+"name": "Phpmyfaq v3.1.11 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1880.yaml"
+},
+"CVE-2023-1890": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01067,
+"epss_pct": 0.62402,
+"name": "Tablesome < 1.0.9 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1890.yaml"
+},
+"CVE-2023-1892": {
+"cvss": 9.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
+"cwe": "CWE-79",
+"epss": 0.02742,
+"epss_pct": 0.8512,
+"name": "Sidekiq < 7.0.8 - Cross-Site Scripting",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1892.yaml"
+},
+"CVE-2023-1893": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00718,
+"epss_pct": 0.51322,
+"name": "Login Configurator <=2.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-1893.yaml"
+},
+"CVE-2023-20073": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.90106,
+"epss_pct": 0.99786,
+"name": "Cisco VPN Routers - Unauthenticated Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-20073.yaml"
+},
+"CVE-2023-2009": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00824,
+"epss_pct": 0.54828,
+"name": "Pretty Url <= 1.5.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2009.yaml"
+},
+"CVE-2023-20198": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.99571,
+"epss_pct": 0.99945,
+"name": "Cisco IOS XE Web UI - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-20198.yaml"
+},
+"CVE-2023-2023": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0171,
+"epss_pct": 0.75719,
+"name": "Custom 404 Pro < 3.7.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2023.yaml"
+},
+"CVE-2023-2059": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-28",
+"epss": 0.02406,
+"epss_pct": 0.82898,
+"name": "DedeCMS 5.7.87 - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2059.yaml"
+},
+"CVE-2023-20864": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.70423,
+"epss_pct": 0.99339,
+"name": "VMware Aria Operations for Logs - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-20864.yaml"
+},
+"CVE-2023-20887": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.98281,
+"epss_pct": 0.99913,
+"name": "VMware VRealize Network Insight - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-20887.yaml"
+},
+"CVE-2023-20888": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.82282,
+"epss_pct": 0.99635,
+"name": "VMware Aria Operations for Networks - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-20888.yaml"
+},
+"CVE-2023-20889": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-77",
+"epss": 0.79258,
+"epss_pct": 0.9957,
+"name": "VMware Aria Operations for Networks - Code Injection Information Disclosure Vulnerability",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-20889.yaml"
+},
+"CVE-2023-2122": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0085,
+"epss_pct": 0.55632,
+"name": "Image Optimizer by 10web < 1.0.26 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2122.yaml"
+},
+"CVE-2023-2130": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04122,
+"epss_pct": 0.90071,
+"name": "Purchase Order Management v1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2130.yaml"
+},
+"CVE-2023-2178": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00773,
+"epss_pct": 0.53191,
+"name": "Aajoda Testimonials < 2.2.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2178.yaml"
+},
+"CVE-2023-21839": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.999,
+"epss_pct": 0.99964,
+"name": "Oracle WebLogic Server - Unauthorized Access",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2023/CVE-2023-21839.yaml"
+},
+"CVE-2023-22047": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.7698,
+"epss_pct": 0.99513,
+"name": "Oracle Peoplesoft - Unauthenticated File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22047.yaml"
+},
+"CVE-2023-22232": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"epss": 0.81875,
+"epss_pct": 0.99622,
+"name": "Adobe Connect < 12.1.5 - Local File Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22232.yaml"
+},
+"CVE-2023-2224": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00909,
+"epss_pct": 0.57473,
+"name": "Seo By 10Web < 1.2.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2224.yaml"
+},
+"CVE-2023-2227": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-285",
+"epss": 0.44029,
+"epss_pct": 0.98656,
+"name": "Modoboa < 2.1.0 - Improper Authorization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2227.yaml"
+},
+"CVE-2023-22432": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.02402,
+"epss_pct": 0.82867,
+"name": "Web2py URL - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22432.yaml"
+},
+"CVE-2023-22463": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.69667,
+"epss_pct": 0.99315,
+"name": "KubePi JwtSigKey - Admin Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22463.yaml"
+},
+"CVE-2023-22478": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.03573,
+"epss_pct": 0.88548,
+"name": "KubePi <= v1.6.4 LoginLogsSearch - Unauthorized Access",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22478.yaml"
+},
+"CVE-2023-22480": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.66768,
+"epss_pct": 0.99232,
+"name": "KubeOperator Foreground `kubeconfig` - File Download",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22480.yaml"
+},
+"CVE-2023-22515": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.99156,
+"epss_pct": 0.99931,
+"name": "Atlassian Confluence - Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22515.yaml"
+},
+"CVE-2023-22518": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-863",
+"epss": 0.99999,
+"epss_pct": 0.99996,
+"name": "Atlassian Confluence Server - Improper Authorization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22518.yaml"
+},
+"CVE-2023-2252": {
+"cvss": 2.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.01342,
+"epss_pct": 0.69362,
+"name": "Directorist < 7.5.4 - Local File Inclusion",
+"severity": "low",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2252.yaml"
+},
+"CVE-2023-22527": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.99984,
+"epss_pct": 0.99982,
+"name": "Atlassian Confluence - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22527.yaml"
+},
+"CVE-2023-2256": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00952,
+"epss_pct": 0.58851,
+"name": "WordPress Product Addons & Fields for WooCommerce < 32.0.7 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2256.yaml"
+},
+"CVE-2023-22620": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-863",
+"epss": 0.0392,
+"epss_pct": 0.89588,
+"name": "SecurePoint UTM 12.x Session ID Leak",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22620.yaml"
+},
+"CVE-2023-22621": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.76825,
+"epss_pct": 0.9951,
+"name": "Strapi Versions <=4.5.5 - SSTI to Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22621.yaml"
+},
+"CVE-2023-22629": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.12322,
+"epss_pct": 0.95903,
+"name": "TitanFTP move-file Function \u2264 1.94.1205 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-22629.yaml"
+},
+"CVE-2023-2272": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0085,
+"epss_pct": 0.55634,
+"name": "Tiempo.com <= 0.1.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2272.yaml"
+},
+"CVE-2023-22893": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.04158,
+"epss_pct": 0.90151,
+"name": "Strapi Versions <=4.5.6 - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22893.yaml"
+},
+"CVE-2023-22897": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-908",
+"epss": 0.04074,
+"epss_pct": 0.89963,
+"name": "Securepoint UTM - Leaking Remote Memory Contents",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22897.yaml"
+},
+"CVE-2023-22952": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.80274,
+"epss_pct": 0.99589,
+"name": "SugarCRM Unauthenticated - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-22952.yaml"
+},
+"CVE-2023-23063": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.02431,
+"epss_pct": 0.8309,
+"name": "Cellinx NVT Web Server - Local File Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23063.yaml"
+},
+"CVE-2023-2309": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"epss": 0.00845,
+"epss_pct": 0.55459,
+"name": "wpForo Forum <= 2.1.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2309.yaml"
+},
+"CVE-2023-23161": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0591,
+"epss_pct": 0.92707,
+"name": "Art Gallery Management System Project v1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23161.yaml"
+},
+"CVE-2023-23333": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.99291,
+"epss_pct": 0.99935,
+"name": "SolarView Compact 6.00 - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23333.yaml"
+},
+"CVE-2023-23488": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.9246,
+"epss_pct": 0.99817,
+"name": "WordPress Paid Memberships Pro <2.9.8 - Blind SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23488.yaml"
+},
+"CVE-2023-23489": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.11172,
+"epss_pct": 0.95631,
+"name": "WordPress Easy Digital Downloads 3.1.0.2/3.1.0.3 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23489.yaml"
+},
+"CVE-2023-23491": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01179,
+"epss_pct": 0.6546,
+"name": "Quick Event Manager < 9.7.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23491.yaml"
+},
+"CVE-2023-23492": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.57123,
+"epss_pct": 0.99,
+"name": "Login with Phone Number - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23492.yaml"
+},
+"CVE-2023-2356": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-23",
+"epss": 0.04153,
+"epss_pct": 0.90142,
+"name": "Mlflow <2.3.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2356.yaml"
+},
+"CVE-2023-23752": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.99827,
+"epss_pct": 0.99959,
+"name": "Joomla! Webservice - Password Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23752.yaml"
+},
+"CVE-2023-23897": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
+"cwe": "CWE-352",
+"epss": 0.0161,
+"epss_pct": 0.74206,
+"name": "Ozette Plugins - Cross-Site Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-23897.yaml"
+},
+"CVE-2023-24000": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.0257,
+"epss_pct": 0.8405,
+"name": "WordPress GamiPress <= 2.5.7 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24000.yaml"
+},
+"CVE-2023-24243": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.03995,
+"epss_pct": 0.89785,
+"name": "CData RSB Connect v22.0.8336 - Server Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24243.yaml"
+},
+"CVE-2023-24278": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02908,
+"epss_pct": 0.8601,
+"name": "Squidex <7.4.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24278.yaml"
+},
+"CVE-2023-24322": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.31714,
+"epss_pct": 0.98166,
+"name": "mojoPortal 2.7.0.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24322.yaml"
+},
+"CVE-2023-2437": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.06801,
+"epss_pct": 0.93525,
+"name": "UserPro <= 5.1.1 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2437.yaml"
+},
+"CVE-2023-24488": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.80907,
+"epss_pct": 0.99599,
+"name": "Citrix Gateway and Citrix ADC - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24488.yaml"
+},
+"CVE-2023-24489": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.9729,
+"epss_pct": 0.99891,
+"name": "Citrix ShareFile StorageZones Controller - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24489.yaml"
+},
+"CVE-2023-24657": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03904,
+"epss_pct": 0.89529,
+"name": "phpIPAM - 1.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24657.yaml"
+},
+"CVE-2023-24733": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01169,
+"epss_pct": 0.65174,
+"name": "PMB 7.4.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24733.yaml"
+},
+"CVE-2023-24735": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.0108,
+"epss_pct": 0.62724,
+"name": "PMB 7.4.6 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24735.yaml"
+},
+"CVE-2023-24737": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01169,
+"epss_pct": 0.65174,
+"name": "PMB v7.4.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-24737.yaml"
+},
+"CVE-2023-2479": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.22014,
+"epss_pct": 0.97487,
+"name": "Appium Desktop Server - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2479.yaml"
+},
+"CVE-2023-25135": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.23926,
+"epss_pct": 0.97668,
+"name": "vBulletin <= 5.6.9 - Pre-authentication Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25135.yaml"
+},
+"CVE-2023-25157": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.85247,
+"epss_pct": 0.99699,
+"name": "GeoServer OGC Filter - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25157.yaml"
+},
+"CVE-2023-2518": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01092,
+"epss_pct": 0.63065,
+"name": "WordPress Easy Forms for Mailchimp Plugin < 6.8.9 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2518.yaml"
+},
+"CVE-2023-25194": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.9581,
+"epss_pct": 0.99868,
+"name": "Apache Druid Kafka Connect - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25194.yaml"
+},
+"CVE-2023-25280": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.97864,
+"epss_pct": 0.99903,
+"name": "D-Link DIR820LA1_FW105B03 'ping_addr' - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25280.yaml"
+},
+"CVE-2023-25346": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01524,
+"epss_pct": 0.72856,
+"name": "ChurchCRM 4.5.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25346.yaml"
+},
+"CVE-2023-25573": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.51609,
+"epss_pct": 0.98862,
+"name": "Metersphere - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25573.yaml"
+},
+"CVE-2023-25717": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.98069,
+"epss_pct": 0.99907,
+"name": "Ruckus Wireless Admin - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25717.yaml"
+},
+"CVE-2023-25826": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.42765,
+"epss_pct": 0.98616,
+"name": "OpenTSDB <= 2.4.1 - Unauthenticated RCE via Gnuplot Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-25826.yaml"
+},
+"CVE-2023-26035": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.80462,
+"epss_pct": 0.99592,
+"name": "ZoneMinder Snapshots - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26035.yaml"
+},
+"CVE-2023-26067": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.37835,
+"epss_pct": 0.98438,
+"name": "Lexmark Printers - Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26067.yaml"
+},
+"CVE-2023-2624": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"epss": 0.01156,
+"epss_pct": 0.64811,
+"name": "KiviCare WordPress Plugin - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2624.yaml"
+},
+"CVE-2023-26255": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.47199,
+"epss_pct": 0.9875,
+"name": "STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26255.yaml"
+},
+"CVE-2023-26256": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.11615,
+"epss_pct": 0.95733,
+"name": "STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26256.yaml"
+},
+"CVE-2023-26258": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-863",
+"epss": 0.37715,
+"epss_pct": 0.98431,
+"name": "Arcserve UDP <= 9.0.6034 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26258.yaml"
+},
+"CVE-2023-26347": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-284",
+"epss": 0.10072,
+"epss_pct": 0.95289,
+"name": "Adobe Coldfusion - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26347.yaml"
+},
+"CVE-2023-26360": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-284",
+"epss": 0.97339,
+"epss_pct": 0.99892,
+"name": "Adobe ColdFusion - Local File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26360.yaml"
+},
+"CVE-2023-2640": {
+"cvss": 7.8,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-863",
+"epss": 0.16052,
+"epss_pct": 0.96681,
+"name": "GameOver(lay) - Local Privilege Escalation in Ubuntu Kernel",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-2640.yaml"
+},
+"CVE-2023-26469": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.82949,
+"epss_pct": 0.99649,
+"name": "Jorani 1.0.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26469.yaml"
+},
+"CVE-2023-2648": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.28478,
+"epss_pct": 0.97989,
+"name": "Weaver E-Office 9.5 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2648.yaml"
+},
+"CVE-2023-26802": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.4871,
+"epss_pct": 0.98785,
+"name": "DCBI-Netlog-LAB v1.0 - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26802.yaml"
+},
+"CVE-2023-26842": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01397,
+"epss_pct": 0.70515,
+"name": "ChurchCRM 4.5.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26842.yaml"
+},
+"CVE-2023-26843": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0142,
+"epss_pct": 0.70963,
+"name": "ChurchCRM 4.5.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-26843.yaml"
+},
+"CVE-2023-27008": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01499,
+"epss_pct": 0.7244,
+"name": "ATutor < 2.2.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27008.yaml"
+},
+"CVE-2023-27032": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03015,
+"epss_pct": 0.86478,
+"name": "PrestaShop AdvancedPopupCreator - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27032.yaml"
+},
+"CVE-2023-27034": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.58743,
+"epss_pct": 0.99037,
+"name": "Jms Blog - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27034.yaml"
+},
+"CVE-2023-27159": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.36171,
+"epss_pct": 0.98362,
+"name": "Appwrite <=1.2.1 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27159.yaml"
+},
+"CVE-2023-27163": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-918",
+"epss": 0.06591,
+"epss_pct": 0.93352,
+"name": "Request-Baskets <= 1.2.1 - Server Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27163.yaml"
+},
+"CVE-2023-27179": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-434",
+"epss": 0.60793,
+"epss_pct": 0.99086,
+"name": "GDidees CMS v3.9.1 - Arbitrary File Download",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27179.yaml"
+},
+"CVE-2023-27292": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01027,
+"epss_pct": 0.61205,
+"name": "OpenCATS - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27292.yaml"
+},
+"CVE-2023-2732": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.67511,
+"epss_pct": 0.99255,
+"name": "MStore API <= 3.9.2 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2732.yaml"
+},
+"CVE-2023-2734": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.03805,
+"epss_pct": 0.89262,
+"name": "MStore API <= 3.9.1 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2734.yaml"
+},
+"CVE-2023-27350": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.99999,
+"epss_pct": 0.99995,
+"name": "PaperCut - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27350.yaml"
+},
+"CVE-2023-27351": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
+"cwe": "CWE-287",
+"epss": 0.78052,
+"epss_pct": 0.9954,
+"name": "PaperCut NG - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27351.yaml"
+},
+"CVE-2023-27372": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.99682,
+"epss_pct": 0.99949,
+"name": "SPIP - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27372.yaml"
+},
+"CVE-2023-2745": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-22",
+"epss": 0.79527,
+"epss_pct": 0.99574,
+"name": "WordPress Core <=6.2 - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2745.yaml"
+},
+"CVE-2023-27482": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.71974,
+"epss_pct": 0.99382,
+"name": "Home Assistant Supervisor - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27482.yaml"
+},
+"CVE-2023-27524": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-1188",
+"epss": 0.97405,
+"epss_pct": 0.99893,
+"name": "Apache Superset - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27524.yaml"
+},
+"CVE-2023-27584": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-321",
+"epss": 0.33638,
+"epss_pct": 0.98263,
+"name": "Dragonfly2 < 2.1.0-beta.1 - Hardcoded JWT Secret",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27584.yaml"
+},
+"CVE-2023-27587": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-209",
+"epss": 0.03857,
+"epss_pct": 0.8941,
+"name": "ReadToMyShoe - Generation of Error Message Containing Sensitive Information",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27587.yaml"
+},
+"CVE-2023-27624": {
+"cvss": 5.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.00619,
+"epss_pct": 0.47209,
+"name": "WordPress Redirect After Login <= 0.1.9 - Admin Stored XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27624.yaml"
+},
+"CVE-2023-27637": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03299,
+"epss_pct": 0.87646,
+"name": "PrestaShop `tshirtecommerce` Module - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27637.yaml"
+},
+"CVE-2023-27638": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03299,
+"epss_pct": 0.87646,
+"name": "tshirtecommerce PrestaShop Module - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27638.yaml"
+},
+"CVE-2023-27639": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.03551,
+"epss_pct": 0.88483,
+"name": "PrestaShop TshirteCommerce - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27639.yaml"
+},
+"CVE-2023-27640": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.03573,
+"epss_pct": 0.88548,
+"name": "PrestaShop tshirtecommerce - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27640.yaml"
+},
+"CVE-2023-27641": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01092,
+"epss_pct": 0.63064,
+"name": "L-Soft LISTSERV 16.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27641.yaml"
+},
+"CVE-2023-2766": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-552",
+"epss": 0.54232,
+"epss_pct": 0.98933,
+"name": "Weaver OA 9.5 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2766.yaml"
+},
+"CVE-2023-2779": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05991,
+"epss_pct": 0.92796,
+"name": "Super Socializer < 7.13.52 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2779.yaml"
+},
+"CVE-2023-2780": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-29",
+"epss": 0.06363,
+"epss_pct": 0.93153,
+"name": "Mlflow <2.3.1 - Local File Inclusion Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2780.yaml"
+},
+"CVE-2023-27847": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04715,
+"epss_pct": 0.91183,
+"name": "PrestaShop xipblog - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27847.yaml"
+},
+"CVE-2023-27922": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01198,
+"epss_pct": 0.65928,
+"name": "Newsletter < 7.6.9 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-27922.yaml"
+},
+"CVE-2023-2796": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.42674,
+"epss_pct": 0.98614,
+"name": "EventON <= 2.1 - Missing Authorization",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2796.yaml"
+},
+"CVE-2023-28121": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.8651,
+"epss_pct": 0.99722,
+"name": "WooCommerce Payments - Unauthorized Admin Access",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-28121.yaml"
+},
+"CVE-2023-2813": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01011,
+"epss_pct": 0.60728,
+"name": "Wordpress Multiple Themes - Reflected Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2813.yaml"
+},
+"CVE-2023-2822": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03301,
+"epss_pct": 0.87656,
+"name": "Ellucian Ethos Identity CAS - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2822.yaml"
+},
+"CVE-2023-2825": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.71641,
+"epss_pct": 0.99373,
+"name": "GitLab 16.0.0 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2825.yaml"
+},
+"CVE-2023-28343": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.84752,
+"epss_pct": 0.99691,
+"name": "Altenergy Power Control Software C1.2.5 - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-28343.yaml"
+},
+"CVE-2023-28432": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.83957,
+"epss_pct": 0.99673,
+"name": "MinIO Cluster Deployment - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-28432.yaml"
+},
+"CVE-2023-28662": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.42186,
+"epss_pct": 0.98595,
+"name": "Wordpress Gift Cards <= 4.3.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-28662.yaml"
+},
+"CVE-2023-28665": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00887,
+"epss_pct": 0.56775,
+"name": "Woo Bulk Price Update <2.2.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-28665.yaml"
+},
+"CVE-2023-28787": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.0196,
+"epss_pct": 0.78901,
+"name": "Quiz and Survey Master <= 8.1.4 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-28787.yaml"
+},
+"CVE-2023-29084": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.98167,
+"epss_pct": 0.99909,
+"name": "ManageEngine ADManager Plus - Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29084.yaml"
+},
+"CVE-2023-29204": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01756,
+"epss_pct": 0.76349,
+"name": "XWiki - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29204.yaml"
+},
+"CVE-2023-29298": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.99757,
+"epss_pct": 0.99954,
+"name": "Adobe ColdFusion - Access Control Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29298.yaml"
+},
+"CVE-2023-29300": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.99989,
+"epss_pct": 0.99984,
+"name": "Adobe ColdFusion - Pre-Auth Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29300.yaml"
+},
+"CVE-2023-29357": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.99984,
+"epss_pct": 0.99982,
+"name": "Microsoft SharePoint - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29357.yaml"
+},
+"CVE-2023-29439": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01747,
+"epss_pct": 0.76208,
+"name": "FooGallery plugin <= 2.2.35 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29439.yaml"
+},
+"CVE-2023-2948": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.96731,
+"epss_pct": 0.99882,
+"name": "OpenEMR < 7.0.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2948.yaml"
+},
+"CVE-2023-29489": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.65533,
+"epss_pct": 0.99205,
+"name": "cPanel < 11.109.9999.116 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29489.yaml"
+},
+"CVE-2023-2949": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01472,
+"epss_pct": 0.71949,
+"name": "OpenEMR < 7.0.1 - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2949.yaml"
+},
+"CVE-2023-29506": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01721,
+"epss_pct": 0.75862,
+"name": "XWiki >= 13.10.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29506.yaml"
+},
+"CVE-2023-29623": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0125,
+"epss_pct": 0.67294,
+"name": "Purchase Order Management v1.0 - Cross Site Scripting (Reflected)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29623.yaml"
+},
+"CVE-2023-2982": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-288",
+"epss": 0.46242,
+"epss_pct": 0.98724,
+"name": "Miniorange Social Login and Register <= 7.6.3 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2982.yaml"
+},
+"CVE-2023-29827": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.05552,
+"epss_pct": 0.92287,
+"name": "Embedded JavaScript(EJS) 3.1.6 - Template Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29827.yaml"
+},
+"CVE-2023-2986": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.42814,
+"epss_pct": 0.98618,
+"name": "Abandoned Cart Lite for WooCommerce - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-2986.yaml"
+},
+"CVE-2023-29887": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.04736,
+"epss_pct": 0.91219,
+"name": "Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29887.yaml"
+},
+"CVE-2023-29919": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-276",
+"epss": 0.60221,
+"epss_pct": 0.9907,
+"name": "SolarView Compact <= 6.00 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29919.yaml"
+},
+"CVE-2023-29922": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-1188",
+"epss": 0.02998,
+"epss_pct": 0.86403,
+"name": "PowerJob V4.3.1 - Authentication Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29922.yaml"
+},
+"CVE-2023-29923": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-276",
+"epss": 0.09545,
+"epss_pct": 0.95103,
+"name": "PowerJob <=4.3.2 - Unauthenticated Access",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29923.yaml"
+},
+"CVE-2023-30013": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.25889,
+"epss_pct": 0.97828,
+"name": "TOTOLink - Unauthenticated Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30013.yaml"
+},
+"CVE-2023-30019": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.02214,
+"epss_pct": 0.81385,
+"name": "Imgproxy <= 3.14.0 - Server-side request forgery (SSRF)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30019.yaml"
+},
+"CVE-2023-30150": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03849,
+"epss_pct": 0.89385,
+"name": "PrestaShop leocustomajax 1.0 & 1.0.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30150.yaml"
+},
+"CVE-2023-30192": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02678,
+"epss_pct": 0.84744,
+"name": "PrestaShop 'possearchproducts' <= 1.7 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30192.yaml"
+},
+"CVE-2023-30194": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.32413,
+"epss_pct": 0.98205,
+"name": "Prestashop posstaticfooter <= 1.0.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30194.yaml"
+},
+"CVE-2023-30210": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01173,
+"epss_pct": 0.65295,
+"name": "OURPHP <= 7.2.0 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30210.yaml"
+},
+"CVE-2023-30212": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.08115,
+"epss_pct": 0.94418,
+"name": "OURPHP <= 7.2.0 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30212.yaml"
+},
+"CVE-2023-30256": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.08731,
+"epss_pct": 0.94762,
+"name": "Webkul QloApps 1.5.2 - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30256.yaml"
+},
+"CVE-2023-30258": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.9425,
+"epss_pct": 0.99842,
+"name": "MagnusBilling - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30258.yaml"
+},
+"CVE-2023-30534": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-502",
+"epss": 0.02569,
+"epss_pct": 0.84037,
+"name": "Cacti < 1.2.25 Insecure Deserialization",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30534.yaml"
+},
+"CVE-2023-30625": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.85825,
+"epss_pct": 0.99713,
+"name": "Rudder Server < 1.3.0-rc.1 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30625.yaml"
+},
+"CVE-2023-3077": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.05505,
+"epss_pct": 0.92231,
+"name": "MStore API < 3.9.8 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3077.yaml"
+},
+"CVE-2023-30777": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.38768,
+"epss_pct": 0.98476,
+"name": "Advanced Custom Fields < 6.1.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30777.yaml"
+},
+"CVE-2023-30868": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03995,
+"epss_pct": 0.89788,
+"name": "Tree Page View Plugin < 1.6.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30868.yaml"
+},
+"CVE-2023-30869": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.031,
+"epss_pct": 0.86823,
+"name": "Easy Digital Downloads - Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30869.yaml"
+},
+"CVE-2023-30943": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"epss": 0.06583,
+"epss_pct": 0.93347,
+"name": "Moodle - Cross-Site Scripting/Remote Code Execution",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30943.yaml"
+},
+"CVE-2023-31059": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.05574,
+"epss_pct": 0.92318,
+"name": "Repetier Server - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31059.yaml"
+},
+"CVE-2023-3139": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.00734,
+"epss_pct": 0.51895,
+"name": "Protect WP Admin < 4.0 - Unauthenticated Protection Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3139.yaml"
+},
+"CVE-2023-31446": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.61081,
+"epss_pct": 0.99094,
+"name": "Cassia Gateway Firmware - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31446.yaml"
+},
+"CVE-2023-31465": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.46304,
+"epss_pct": 0.98726,
+"name": "TimeKeeper by FSMLabs - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31465.yaml"
+},
+"CVE-2023-31478": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.29699,
+"epss_pct": 0.98061,
+"name": "GL.iNET SSID Key Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31478.yaml"
+},
+"CVE-2023-31548": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01248,
+"epss_pct": 0.67267,
+"name": "ChurchCRM v4.5.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31548.yaml"
+},
+"CVE-2023-3169": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01279,
+"epss_pct": 0.67965,
+"name": "tagDiv Composer < 4.2 - Stored Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3169.yaml"
+},
+"CVE-2023-3188": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.01356,
+"epss_pct": 0.69684,
+"name": "Owncast - Server Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3188.yaml"
+},
+"CVE-2023-3197": {
+"name": "WordPress MStore API <= 4.0.1 - Unauthenticated SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3197.yaml"
+},
+"CVE-2023-32068": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.5507,
+"epss_pct": 0.98953,
+"name": "XWiki - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32068.yaml"
+},
+"CVE-2023-32077": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.03534,
+"epss_pct": 0.88431,
+"name": "Netmaker - Hardcoded DNS Secret Key",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32077.yaml"
+},
+"CVE-2023-32117": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"epss": 0.07133,
+"epss_pct": 0.93798,
+"name": "Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32117.yaml"
+},
+"CVE-2023-3219": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-639",
+"epss": 0.07521,
+"epss_pct": 0.94054,
+"name": "EventON Lite < 2.1.2 - Arbitrary File Download",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3219.yaml"
+},
+"CVE-2023-32235": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.39078,
+"epss_pct": 0.98485,
+"name": "Ghost CMS < 5.42.1 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32235.yaml"
+},
+"CVE-2023-32243": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.75531,
+"epss_pct": 0.99479,
+"name": "WordPress Elementor Lite 5.7.1 - Arbitrary Password Reset",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32243.yaml"
+},
+"CVE-2023-32315": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.99999,
+"epss_pct": 0.99992,
+"name": "Openfire Administration Console - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32315.yaml"
+},
+"CVE-2023-32563": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.89099,
+"epss_pct": 0.99768,
+"name": "Ivanti Avalanche - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32563.yaml"
+},
+"CVE-2023-32590": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L",
+"cwe": "CWE-89",
+"epss": 0.01808,
+"epss_pct": 0.77041,
+"name": "Subscribe to Category <= 2.7.4 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32590.yaml"
+},
+"CVE-2023-3277": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.02888,
+"epss_pct": 0.85906,
+"name": "MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3277.yaml"
+},
+"CVE-2023-33193": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-444",
+"epss": 0.01699,
+"epss_pct": 0.75556,
+"name": "Emby Server - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33193.yaml"
+},
+"CVE-2023-33246": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.96604,
+"epss_pct": 0.99879,
+"name": "RocketMQ <= 5.1.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-33246.yaml"
+},
+"CVE-2023-33338": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03632,
+"epss_pct": 0.88724,
+"name": "Old Age Home Management System v1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33338.yaml"
+},
+"CVE-2023-33405": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.31265,
+"epss_pct": 0.98144,
+"name": "BlogEngine CMS - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33405.yaml"
+},
+"CVE-2023-33439": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03307,
+"epss_pct": 0.87676,
+"name": "Faculty Evaluation System v1.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33439.yaml"
+},
+"CVE-2023-33440": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.14507,
+"epss_pct": 0.96379,
+"name": "Faculty Evaluation System v1.0 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33440.yaml"
+},
+"CVE-2023-3345": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.0197,
+"epss_pct": 0.78991,
+"name": "LMS by Masteriyo < 1.6.8 - Information Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3345.yaml"
+},
+"CVE-2023-33510": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-668",
+"epss": 0.04042,
+"epss_pct": 0.89895,
+"name": "Jeecg P3 Biz Chat - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33510.yaml"
+},
+"CVE-2023-33568": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-552",
+"epss": 0.1494,
+"epss_pct": 0.96457,
+"name": "Dolibarr Unauthenticated Contacts Database Theft",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33568.yaml"
+},
+"CVE-2023-33629": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-787",
+"epss": 0.04353,
+"epss_pct": 0.9054,
+"name": "H3C Magic R300-2100M - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33629.yaml"
+},
+"CVE-2023-3368": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.69671,
+"epss_pct": 0.99315,
+"name": "Chamilo LMS <= v1.11.20 Unauthenticated Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3368.yaml"
+},
+"CVE-2023-3380": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.0388,
+"epss_pct": 0.89474,
+"name": "WAVLINK WN579X3 - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3380.yaml"
+},
+"CVE-2023-33831": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.22707,
+"epss_pct": 0.97556,
+"name": "FUXA - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33831.yaml"
+},
+"CVE-2023-3388": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.84461,
+"epss_pct": 0.99683,
+"name": "Beautiful Cookie Consent Banner < 2.10.2 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3388.yaml"
+},
+"CVE-2023-33960": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01257,
+"epss_pct": 0.67468,
+"name": "OpenProject < 12.5.4 - Project Identifiers Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33960.yaml"
+},
+"CVE-2023-34020": {
+"cvss": 4.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
+"cwe": "CWE-601",
+"epss": 0.00963,
+"epss_pct": 0.59187,
+"name": "Uncanny Toolkit for LearnDash - Open Redirection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34020.yaml"
+},
+"CVE-2023-34039": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-327",
+"epss": 0.6799,
+"epss_pct": 0.99267,
+"name": "VMWare Aria Operations - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2023/CVE-2023-34039.yaml"
+},
+"CVE-2023-34048": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-787",
+"epss": 0.99428,
+"epss_pct": 0.9994,
+"name": "VMware vCenter Server - Out-of-Bounds Write",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34048.yaml"
+},
+"CVE-2023-34092": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-50",
+"epss": 0.03126,
+"epss_pct": 0.86936,
+"name": "Vite Dev Server - Information Exposure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34092.yaml"
+},
+"CVE-2023-34105": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"epss": 0.08689,
+"epss_pct": 0.9474,
+"name": "SRS - Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34105.yaml"
+},
+"CVE-2023-34124": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.49077,
+"epss_pct": 0.98795,
+"name": "SonicWall GMS and Analytics Web Services - Shell Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34124.yaml"
+},
+"CVE-2023-34133": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.72579,
+"epss_pct": 0.99399,
+"name": "SonicWall GMS and Analytics - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34133.yaml"
+},
+"CVE-2023-34192": {
+"cvss": 9.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
+"cwe": "CWE-79",
+"epss": 0.77266,
+"epss_pct": 0.99519,
+"name": "Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34192.yaml"
+},
+"CVE-2023-34259": {
+"cvss": 4.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.60482,
+"epss_pct": 0.99078,
+"name": "Kyocera TASKalfa printer - Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34259.yaml"
+},
+"CVE-2023-34362": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.99934,
+"epss_pct": 0.99969,
+"name": "MOVEit Transfer - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34362.yaml"
+},
+"CVE-2023-3452": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-98",
+"epss": 0.06958,
+"epss_pct": 0.93651,
+"name": "WordPress Canto Plugin <= 3.0.4 - File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3452.yaml"
+},
+"CVE-2023-34537": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01438,
+"epss_pct": 0.71282,
+"name": "Hoteldruid 3.0.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34537.yaml"
+},
+"CVE-2023-34598": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.47238,
+"epss_pct": 0.98751,
+"name": "Gibbon v25.0.0 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34598.yaml"
+},
+"CVE-2023-34599": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01853,
+"epss_pct": 0.77632,
+"name": "Gibbon v25.0.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34599.yaml"
+},
+"CVE-2023-3460": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.72306,
+"epss_pct": 0.99392,
+"name": "Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3460.yaml"
+},
+"CVE-2023-34659": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.1248,
+"epss_pct": 0.9593,
+"name": "JeecgBoot 3.5.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34659.yaml"
+},
+"CVE-2023-34751": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04228,
+"epss_pct": 0.90301,
+"name": "bloofoxCMS v0.5.2.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34751.yaml"
+},
+"CVE-2023-34752": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04383,
+"epss_pct": 0.90602,
+"name": "bloofoxCMS v0.5.2.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34752.yaml"
+},
+"CVE-2023-34753": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04228,
+"epss_pct": 0.90301,
+"name": "bloofoxCMS v0.5.2.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34753.yaml"
+},
+"CVE-2023-34754": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03449,
+"epss_pct": 0.88164,
+"name": "Bloofox v0.5.2.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34754.yaml"
+},
+"CVE-2023-34755": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04228,
+"epss_pct": 0.903,
+"name": "bloofoxCMS v0.5.2.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34755.yaml"
+},
+"CVE-2023-34756": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04228,
+"epss_pct": 0.90301,
+"name": "Bloofox v0.5.2.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34756.yaml"
+},
+"CVE-2023-3479": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01293,
+"epss_pct": 0.6827,
+"name": "Hestiacp <= 1.7.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3479.yaml"
+},
+"CVE-2023-34843": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.07176,
+"epss_pct": 0.93839,
+"name": "Traggo Server - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34843.yaml"
+},
+"CVE-2023-34960": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.99325,
+"epss_pct": 0.99936,
+"name": "Chamilo Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34960.yaml"
+},
+"CVE-2023-34990": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.24901,
+"epss_pct": 0.97748,
+"name": "FortiWLM - Directory Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34990.yaml"
+},
+"CVE-2023-34992": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.80061,
+"epss_pct": 0.99584,
+"name": "Fortinet FortiSIEM - Unauthenticated Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-34992.yaml"
+},
+"CVE-2023-34993": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.18148,
+"epss_pct": 0.96989,
+"name": "Fortinet FortiWLM Unauthenticated Command Injection Vulnerability",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34993.yaml"
+},
+"CVE-2023-35078": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.99999,
+"epss_pct": 0.99995,
+"name": "Ivanti Endpoint Manager Mobile (EPMM) - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35078.yaml"
+},
+"CVE-2023-35082": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.99999,
+"epss_pct": 0.99996,
+"name": "MobileIron Core - Remote Unauthenticated API Access",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35082.yaml"
+},
+"CVE-2023-35155": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01496,
+"epss_pct": 0.72369,
+"name": "XWiki - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35155.yaml"
+},
+"CVE-2023-35156": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02081,
+"epss_pct": 0.80195,
+"name": "XWiki >= 6.0-rc-1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35156.yaml"
+},
+"CVE-2023-35158": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-87",
+"epss": 0.02048,
+"epss_pct": 0.79852,
+"name": "XWiki - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35158.yaml"
+},
+"CVE-2023-35159": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02182,
+"epss_pct": 0.81104,
+"name": "XWiki >= 3.4-milestone-1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35159.yaml"
+},
+"CVE-2023-35160": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02268,
+"epss_pct": 0.81813,
+"name": "XWiki >= 2.5-milestone-2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35160.yaml"
+},
+"CVE-2023-35161": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02377,
+"epss_pct": 0.82681,
+"name": "XWiki >= 6.2-milestone-1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35161.yaml"
+},
+"CVE-2023-35162": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02377,
+"epss_pct": 0.82681,
+"name": "XWiki < 14.10.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35162.yaml"
+},
+"CVE-2023-3519": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.99749,
+"epss_pct": 0.99953,
+"name": "Citrix NetScaler ADC and NetScaler Gateway - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3519.yaml"
+},
+"CVE-2023-3521": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00919,
+"epss_pct": 0.57767,
+"name": "FOSSBilling < 0.5.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3521.yaml"
+},
+"CVE-2023-35708": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-89",
+"epss": 0.96682,
+"epss_pct": 0.9988,
+"name": "MOVEit Transfer - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35708.yaml"
+},
+"CVE-2023-3578": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.0357,
+"epss_pct": 0.88538,
+"name": "DedeCMS 5.7.109 - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3578.yaml"
+},
+"CVE-2023-35813": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.86685,
+"epss_pct": 0.99726,
+"name": "Sitecore - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35813.yaml"
+},
+"CVE-2023-35843": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.08875,
+"epss_pct": 0.94838,
+"name": "NocoDB version <= 0.106.1 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35843.yaml"
+},
+"CVE-2023-35844": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.06344,
+"epss_pct": 0.93138,
+"name": "Lightdash version <= 0.510.3 Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35844.yaml"
+},
+"CVE-2023-35885": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-565",
+"epss": 0.74888,
+"epss_pct": 0.99467,
+"name": "Cloudpanel 2 < 2.3.1 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35885.yaml"
+},
+"CVE-2023-36144": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.36507,
+"epss_pct": 0.98377,
+"name": "Intelbras Switch - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36144.yaml"
+},
+"CVE-2023-36284": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.03157,
+"epss_pct": 0.8706,
+"name": "QloApps 1.6.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36284.yaml"
+},
+"CVE-2023-36287": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01199,
+"epss_pct": 0.65947,
+"name": "Webkul QloApps 1.6.0 - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36287.yaml"
+},
+"CVE-2023-36289": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01169,
+"epss_pct": 0.65168,
+"name": "Webkul QloApps 1.6.0 - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36289.yaml"
+},
+"CVE-2023-36306": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05313,
+"epss_pct": 0.92022,
+"name": "Adiscon LogAnalyzer v.4.1.13 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36306.yaml"
+},
+"CVE-2023-36346": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05252,
+"epss_pct": 0.91956,
+"name": "POS Codekop v2.0 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36346.yaml"
+},
+"CVE-2023-36347": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.34054,
+"epss_pct": 0.98281,
+"name": "POS Codekop v2.0 - Broken Authentication",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36347.yaml"
+},
+"CVE-2023-3643": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.75363,
+"epss_pct": 0.99478,
+"name": "CAREL Boss Mini <= 1.4.0 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3643.yaml"
+},
+"CVE-2023-36844": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-473",
+"epss": 0.91357,
+"epss_pct": 0.99803,
+"name": "Juniper Devices - Remote Code Execution",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36844.yaml"
+},
+"CVE-2023-36845": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-473",
+"epss": 0.94595,
+"epss_pct": 0.99848,
+"name": "Juniper J-Web - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36845.yaml"
+},
+"CVE-2023-36934": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-89",
+"epss": 0.95184,
+"epss_pct": 0.99858,
+"name": "MOVEit Transfer - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36934.yaml"
+},
+"CVE-2023-3710": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.33094,
+"epss_pct": 0.9824,
+"name": "Honeywell PM43 Printers - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3710.yaml"
+},
+"CVE-2023-3722": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
+"cwe": "CWE-434",
+"epss": 0.0386,
+"epss_pct": 0.89416,
+"name": "Avaya Aura Device Services - OS Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3722.yaml"
+},
+"CVE-2023-37265": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.07356,
+"epss_pct": 0.93955,
+"name": "CasaOS  < 0.4.4 - Authentication Bypass via Internal IP",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37265.yaml"
+},
+"CVE-2023-37266": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.06844,
+"epss_pct": 0.93556,
+"name": "CasaOS  < 0.4.4 - Authentication Bypass via Random JWT Token",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37266.yaml"
+},
+"CVE-2023-37270": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.045,
+"epss_pct": 0.90813,
+"name": "Piwigo 13.7.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37270.yaml"
+},
+"CVE-2023-37462": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.91492,
+"epss_pct": 0.99804,
+"name": "XWiki Platform - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37462.yaml"
+},
+"CVE-2023-37474": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.4492,
+"epss_pct": 0.98684,
+"name": "Copyparty <= 1.8.2 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37474.yaml"
+},
+"CVE-2023-37580": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.46709,
+"epss_pct": 0.98738,
+"name": "Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37580.yaml"
+},
+"CVE-2023-37582": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.90427,
+"epss_pct": 0.99792,
+"name": "Apache RocketMQ - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-37582.yaml"
+},
+"CVE-2023-37599": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-668",
+"epss": 0.03632,
+"epss_pct": 0.88724,
+"name": "Issabel PBX 4.0.0-6 - Directory Listing",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37599.yaml"
+},
+"CVE-2023-37629": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.23311,
+"epss_pct": 0.97611,
+"name": "Online Piggery Management System v1.0 - Unauthenticated File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37629.yaml"
+},
+"CVE-2023-37645": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-668",
+"epss": 0.24931,
+"epss_pct": 0.97751,
+"name": "EyouCms v1.6.3 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37645.yaml"
+},
+"CVE-2023-3765": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-36",
+"epss": 0.6755,
+"epss_pct": 0.99256,
+"name": "MLflow Absolute Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3765.yaml"
+},
+"CVE-2023-37679": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.99434,
+"epss_pct": 0.9994,
+"name": "NextGen Mirth Connect - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37679.yaml"
+},
+"CVE-2023-37728": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01164,
+"epss_pct": 0.65038,
+"name": "IceWarp Webmail Server v10.2.1 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37728.yaml"
+},
+"CVE-2023-37979": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.09707,
+"epss_pct": 0.95162,
+"name": "Ninja Forms < 3.6.26 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37979.yaml"
+},
+"CVE-2023-37988": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01317,
+"epss_pct": 0.68776,
+"name": "Contact Form Generator <= 2.5.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37988.yaml"
+},
+"CVE-2023-37999": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.03349,
+"epss_pct": 0.87824,
+"name": "HT Mega \u2013 Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37999.yaml"
+},
+"CVE-2023-38035": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-863",
+"epss": 0.99954,
+"epss_pct": 0.99973,
+"name": "Ivanti Sentry - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38035.yaml"
+},
+"CVE-2023-38040": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01983,
+"epss_pct": 0.79145,
+"name": "Revive Adserver 5.4.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38040.yaml"
+},
+"CVE-2023-38192": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01107,
+"epss_pct": 0.63532,
+"name": "SuperWebMailer 9.00.0.01710 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38192.yaml"
+},
+"CVE-2023-38194": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01131,
+"epss_pct": 0.64139,
+"name": "SuperWebMailer - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38194.yaml"
+},
+"CVE-2023-38203": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.96716,
+"epss_pct": 0.99881,
+"name": "Adobe ColdFusion - Deserialization of Untrusted Data",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38203.yaml"
+},
+"CVE-2023-38205": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.99742,
+"epss_pct": 0.99953,
+"name": "Adobe ColdFusion - Access Control Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38205.yaml"
+},
+"CVE-2023-3836": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.7367,
+"epss_pct": 0.99432,
+"name": "Dahua Smart Park Management - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3836.yaml"
+},
+"CVE-2023-3843": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05955,
+"epss_pct": 0.92758,
+"name": "mooDating 1.2 - Cross-site scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3843.yaml"
+},
+"CVE-2023-38433": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"cwe": "CWE-798",
+"epss": 0.03722,
+"epss_pct": 0.89007,
+"name": "Fujitsu IP Series - Hardcoded Credentials",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38433.yaml"
+},
+"CVE-2023-3844": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05955,
+"epss_pct": 0.92757,
+"name": "MooDating 1.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3844.yaml"
+},
+"CVE-2023-3845": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05955,
+"epss_pct": 0.92758,
+"name": "MooDating 1.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3845.yaml"
+},
+"CVE-2023-3846": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05955,
+"epss_pct": 0.92757,
+"name": "MooDating 1.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3846.yaml"
+},
+"CVE-2023-3847": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05955,
+"epss_pct": 0.92757,
+"name": "MooDating 1.2 - Cross-Site scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3847.yaml"
+},
+"CVE-2023-3848": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06004,
+"epss_pct": 0.92808,
+"name": "MooDating 1.2 - Cross-site scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3848.yaml"
+},
+"CVE-2023-3849": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.06004,
+"epss_pct": 0.92808,
+"name": "mooDating 1.2 - Cross-site scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3849.yaml"
+},
+"CVE-2023-38501": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.09321,
+"epss_pct": 0.95014,
+"name": "CopyParty v1.8.6 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38501.yaml"
+},
+"CVE-2023-38646": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.98677,
+"epss_pct": 0.99921,
+"name": "Metabase < 0.46.6.1 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38646.yaml"
+},
+"CVE-2023-38875": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00824,
+"epss_pct": 0.54828,
+"name": "PHP Login System 2.0.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38875.yaml"
+},
+"CVE-2023-38879": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.03663,
+"epss_pct": 0.88839,
+"name": "openSIS v9.0 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38879.yaml"
+},
+"CVE-2023-38950": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.84702,
+"epss_pct": 0.9969,
+"name": "ZKTeco BioTime v8.5.5 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38950.yaml"
+},
+"CVE-2023-38952": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-552",
+"epss": 0.0266,
+"epss_pct": 0.84625,
+"name": "ZKTeco BioTime <= 9.0.1 - Privilege Escalation",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38952.yaml"
+},
+"CVE-2023-38964": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01101,
+"epss_pct": 0.63369,
+"name": "Academy LMS 6.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38964.yaml"
+},
+"CVE-2023-38992": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.73579,
+"epss_pct": 0.99428,
+"name": "Jeecg-Boot v3.5.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38992.yaml"
+},
+"CVE-2023-39002": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01212,
+"epss_pct": 0.66349,
+"name": "OPNsense - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39002.yaml"
+},
+"CVE-2023-39007": {
+"cvss": 9.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
+"cwe": "CWE-79",
+"epss": 0.02608,
+"epss_pct": 0.84298,
+"name": "OPNsense - Cross-Site Scripting to RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39007.yaml"
+},
+"CVE-2023-39026": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.17919,
+"epss_pct": 0.9696,
+"name": "FileMage Gateway - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39026.yaml"
+},
+"CVE-2023-39108": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.03361,
+"epss_pct": 0.87864,
+"name": "rConfig 3.9.4 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39108.yaml"
+},
+"CVE-2023-39109": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.03361,
+"epss_pct": 0.87864,
+"name": "rConfig 3.9.4 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39109.yaml"
+},
+"CVE-2023-39110": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.03651,
+"epss_pct": 0.888,
+"name": "rConfig 3.9.4 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39110.yaml"
+},
+"CVE-2023-39121": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02513,
+"epss_pct": 0.83654,
+"name": "Emlog 2.1.9 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39121.yaml"
+},
+"CVE-2023-39141": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.03367,
+"epss_pct": 0.87885,
+"name": "Aria2 WebUI - Path traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39141.yaml"
+},
+"CVE-2023-39143": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.80623,
+"epss_pct": 0.99595,
+"name": "PaperCut < 22.1.3 - Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39143.yaml"
+},
+"CVE-2023-3936": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00902,
+"epss_pct": 0.57241,
+"name": "Blog2Social < 7.2.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3936.yaml"
+},
+"CVE-2023-39361": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.87688,
+"epss_pct": 0.99747,
+"name": "Cacti 1.2.24 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39361.yaml"
+},
+"CVE-2023-39560": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04684,
+"epss_pct": 0.91133,
+"name": "ECTouch v2 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39560.yaml"
+},
+"CVE-2023-39598": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0139,
+"epss_pct": 0.70398,
+"name": "IceWarp Email Client - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39598.yaml"
+},
+"CVE-2023-39600": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01215,
+"epss_pct": 0.66423,
+"name": "IceWarp 11.4.6.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39600.yaml"
+},
+"CVE-2023-39650": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04065,
+"epss_pct": 0.89943,
+"name": "PrestaShop Theme Volty CMS Blog - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39650.yaml"
+},
+"CVE-2023-39676": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01332,
+"epss_pct": 0.69105,
+"name": "PrestaShop fieldpopupnewsletter Module - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39676.yaml"
+},
+"CVE-2023-39677": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.30806,
+"epss_pct": 0.98116,
+"name": "PrestaShop MyPrestaModules - PhpInfo Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39677.yaml"
+},
+"CVE-2023-39700": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0148,
+"epss_pct": 0.72096,
+"name": "IceWarp Mail Server v10.4.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39700.yaml"
+},
+"CVE-2023-39796": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.06146,
+"epss_pct": 0.9295,
+"name": "WBCE 1.6.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39796.yaml"
+},
+"CVE-2023-3990": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01421,
+"epss_pct": 0.70964,
+"name": "Mingsoft MCMS < 5.3.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3990.yaml"
+},
+"CVE-2023-40000": {
+"cvss": 8.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.54872,
+"epss_pct": 0.9895,
+"name": "LiteSpeed Cache <= 5.7 - Unauthenticated Stored XSS",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40000.yaml"
+},
+"CVE-2023-40044": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.9015,
+"epss_pct": 0.99787,
+"name": "WS_FTP Server - Insecure Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40044.yaml"
+},
+"CVE-2023-40208": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00726,
+"epss_pct": 0.51572,
+"name": "Stock Ticker <= 3.23.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40208.yaml"
+},
+"CVE-2023-40211": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.02071,
+"epss_pct": 0.80092,
+"name": "Post Grid <= 2.2.50 - Information Exposure via REST API",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40211.yaml"
+},
+"CVE-2023-40355": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01081,
+"epss_pct": 0.62756,
+"name": "Axigen WebMail - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40355.yaml"
+},
+"CVE-2023-40504": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.88728,
+"epss_pct": 0.99764,
+"name": "LG Simple Editor <= v3.21.0 - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40504.yaml"
+},
+"CVE-2023-40600": {
+"name": "EWWW Image Optimizer <= 7.2.0 - Unauthenticated Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40600.yaml"
+},
+"CVE-2023-40748": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03318,
+"epss_pct": 0.87715,
+"name": "PHPJabbers Food Delivery Script - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40748.yaml"
+},
+"CVE-2023-40749": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03682,
+"epss_pct": 0.88892,
+"name": "PHPJabbers Food Delivery Script v3.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40749.yaml"
+},
+"CVE-2023-40750": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01034,
+"epss_pct": 0.61432,
+"name": "PHPJabbers Yacht Listing Script v1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40750.yaml"
+},
+"CVE-2023-40751": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01088,
+"epss_pct": 0.62967,
+"name": "PHPJabbers Fundraising Script v1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40751.yaml"
+},
+"CVE-2023-40752": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01043,
+"epss_pct": 0.6168,
+"name": "PHPJabbers Make an Offer Widget v1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40752.yaml"
+},
+"CVE-2023-40753": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01109,
+"epss_pct": 0.63581,
+"name": "PHPJabbers Ticket Support Script v3.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40753.yaml"
+},
+"CVE-2023-40755": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01254,
+"epss_pct": 0.67369,
+"name": "PHPJabbers Callback Widget v1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40755.yaml"
+},
+"CVE-2023-40779": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01355,
+"epss_pct": 0.69653,
+"name": "IceWarp Mail Server Deep Castle 2 v.13.0.1.2 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40779.yaml"
+},
+"CVE-2023-40924": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.02885,
+"epss_pct": 0.85891,
+"name": "SolarView Compact < 6.00 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40924.yaml"
+},
+"CVE-2023-40931": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.11278,
+"epss_pct": 0.95655,
+"name": "Nagios XI v5.11.0 - SQL Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40931.yaml"
+},
+"CVE-2023-4110": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01792,
+"epss_pct": 0.76816,
+"name": "PHPJabbers Availability Booking Calendar 5.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4110.yaml"
+},
+"CVE-2023-41109": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.64754,
+"epss_pct": 0.99184,
+"name": "SmartNode SN200 Analog Telephone Adapter (ATA) & VoIP Gateway - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41109.yaml"
+},
+"CVE-2023-4111": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02535,
+"epss_pct": 0.83809,
+"name": "PHPJabbers Bus Reservation System 1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4111.yaml"
+},
+"CVE-2023-4112": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.08422,
+"epss_pct": 0.94589,
+"name": "PHPJabbers Shuttle Booking Software 1.0 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4112.yaml"
+},
+"CVE-2023-4113": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.08422,
+"epss_pct": 0.94589,
+"name": "PHPJabbers Service Booking Script 1.0 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4113.yaml"
+},
+"CVE-2023-4114": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.08312,
+"epss_pct": 0.94531,
+"name": "PHP Jabbers Night Club Booking 1.0 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4114.yaml"
+},
+"CVE-2023-4115": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.08422,
+"epss_pct": 0.94589,
+"name": "PHPJabbers Cleaning Business 1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4115.yaml"
+},
+"CVE-2023-4116": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.08422,
+"epss_pct": 0.94589,
+"name": "PHPJabbers Taxi Booking 2.0 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4116.yaml"
+},
+"CVE-2023-41265": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-444",
+"epss": 0.88215,
+"epss_pct": 0.99756,
+"name": "Qlik Sense Enterprise - HTTP Request Smuggling",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41265.yaml"
+},
+"CVE-2023-41266": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-20",
+"epss": 0.84843,
+"epss_pct": 0.99694,
+"name": "Qlik Sense Enterprise - Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41266.yaml"
+},
+"CVE-2023-4136": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0142,
+"epss_pct": 0.70954,
+"name": "CrafterCMS Engine - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4136.yaml"
+},
+"CVE-2023-4148": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00812,
+"epss_pct": 0.54454,
+"name": "Ditty < 3.1.25 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4148.yaml"
+},
+"CVE-2023-4151": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00645,
+"epss_pct": 0.48416,
+"name": "Store Locator WordPress < 1.4.13 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4151.yaml"
+},
+"CVE-2023-41538": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01139,
+"epss_pct": 0.64339,
+"name": "PHPJabbers PHP Forum Script 3.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41538.yaml"
+},
+"CVE-2023-41597": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01224,
+"epss_pct": 0.66669,
+"name": "EyouCms v1.6.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41597.yaml"
+},
+"CVE-2023-41599": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.11215,
+"epss_pct": 0.95643,
+"name": "JFinalCMS v5.0.0 - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41599.yaml"
+},
+"CVE-2023-41621": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01146,
+"epss_pct": 0.64506,
+"name": "Emlog Pro v2.1.14 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41621.yaml"
+},
+"CVE-2023-41642": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01071,
+"epss_pct": 0.62507,
+"name": "RealGimm by GruppoSCAI v1.1.37p38 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41642.yaml"
+},
+"CVE-2023-4168": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.45972,
+"epss_pct": 0.98717,
+"name": "Adlisting Classified Ads 2.14.0 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4168.yaml"
+},
+"CVE-2023-4169": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.4923,
+"epss_pct": 0.98797,
+"name": "Ruijie RG-EW1200G Router - Password Reset",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4169.yaml"
+},
+"CVE-2023-4173": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05449,
+"epss_pct": 0.92166,
+"name": "mooSocial 3.1.8 - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4173.yaml"
+},
+"CVE-2023-4174": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.09138,
+"epss_pct": 0.94942,
+"name": "mooSocial 3.1.6 - Reflected Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4174.yaml"
+},
+"CVE-2023-41763": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.90353,
+"epss_pct": 0.99789,
+"name": "Skype for Business 2019 (SfB) - Blind Server-side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41763.yaml"
+},
+"CVE-2023-41892": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.92555,
+"epss_pct": 0.99819,
+"name": "CraftCMS < 4.4.15 - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41892.yaml"
+},
+"CVE-2023-41954": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
+"cwe": "CWE-269",
+"epss": 0.01397,
+"epss_pct": 0.70506,
+"name": "ProfilePress <= 4.13.1 \u2014 Unauthenticated Privilege Escalation",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41954.yaml"
+},
+"CVE-2023-4220": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-434",
+"epss": 0.76084,
+"epss_pct": 0.99494,
+"name": "Chamilo LMS <= 1.11.24 - Remote Code Execution",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4220.yaml"
+},
+"CVE-2023-42343": {
+"epss": 0.0059,
+"epss_pct": 0.45854,
+"name": "OpenCMS - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-42343.yaml"
+},
+"CVE-2023-42344": {
+"name": "OpenCMS - XML external entity (XXE)",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-42344.yaml"
+},
+"CVE-2023-42442": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.55861,
+"epss_pct": 0.98969,
+"name": "JumpServer > 3.6.4 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-42442.yaml"
+},
+"CVE-2023-42793": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-288",
+"epss": 0.99979,
+"epss_pct": 0.99981,
+"name": "JetBrains TeamCity < 2023.05.4 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-42793.yaml"
+},
+"CVE-2023-4284": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
+"cwe": "CWE-79",
+"epss": 0.00759,
+"epss_pct": 0.5273,
+"name": "WordPress Post Timeline Plugin < 2.2.6 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4284.yaml"
+},
+"CVE-2023-43177": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-913",
+"epss": 0.81801,
+"epss_pct": 0.9962,
+"name": "CrushFTP < 10.5.1 - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43177.yaml"
+},
+"CVE-2023-43187": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-91",
+"epss": 0.45401,
+"epss_pct": 0.98699,
+"name": "NodeBB XML-RPC Request xmlrpc.php - XML Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43187.yaml"
+},
+"CVE-2023-43208": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.82708,
+"epss_pct": 0.99643,
+"name": "NextGen Healthcare Mirth Connect - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43208.yaml"
+},
+"CVE-2023-43261": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-532",
+"epss": 0.59609,
+"epss_pct": 0.99058,
+"name": "Milesight Routers - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43261.yaml"
+},
+"CVE-2023-43323": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"epss": 0.0186,
+"epss_pct": 0.77734,
+"name": "mooSocial 3.1.8 - External Service Interaction",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43323.yaml"
+},
+"CVE-2023-43325": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01857,
+"epss_pct": 0.77703,
+"name": "MooSocial 3.1.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43325.yaml"
+},
+"CVE-2023-43326": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01615,
+"epss_pct": 0.74288,
+"name": "MooSocial 3.1.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43326.yaml"
+},
+"CVE-2023-43373": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03753,
+"epss_pct": 0.89098,
+"name": "Hoteldruid v3.0.5 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43373.yaml"
+},
+"CVE-2023-43374": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03272,
+"epss_pct": 0.87535,
+"name": "Hoteldruid v3.0.5 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43374.yaml"
+},
+"CVE-2023-43472": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.36582,
+"epss_pct": 0.98382,
+"name": "MLFlow < 2.8.1 - Sensitive Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43472.yaml"
+},
+"CVE-2023-43654": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.355,
+"epss_pct": 0.98334,
+"name": "PyTorch TorchServe SSRF",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43654.yaml"
+},
+"CVE-2023-43662": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.08147,
+"epss_pct": 0.94436,
+"name": "ShokoServer System - Local File Inclusion (LFI)",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43662.yaml"
+},
+"CVE-2023-43795": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.67715,
+"epss_pct": 0.99261,
+"name": "GeoServer WPS - Server Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43795.yaml"
+},
+"CVE-2023-44012": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01258,
+"epss_pct": 0.67479,
+"name": "mojoPortal v.2.7.0.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44012.yaml"
+},
+"CVE-2023-4415": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.58296,
+"epss_pct": 0.99026,
+"name": "Ruijie RG-EW1200G Router Background - Login Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4415.yaml"
+},
+"CVE-2023-44352": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.84811,
+"epss_pct": 0.99692,
+"name": "Adobe Coldfusion - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44352.yaml"
+},
+"CVE-2023-44353": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.80178,
+"epss_pct": 0.99586,
+"name": "Adobe ColdFusion WDDX Deserialization Gadgets",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44353.yaml"
+},
+"CVE-2023-44393": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01277,
+"epss_pct": 0.67942,
+"name": "Piwigo - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44393.yaml"
+},
+"CVE-2023-4450": {
+"epss": 0.11503,
+"epss_pct": 0.95708,
+"name": "JeecgBoot JimuReport - Template injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4450.yaml"
+},
+"CVE-2023-4451": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02499,
+"epss_pct": 0.83553,
+"name": "Cockpit - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4451.yaml"
+},
+"CVE-2023-44812": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01897,
+"epss_pct": 0.78183,
+"name": "mooSocial v.3.1.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44812.yaml"
+},
+"CVE-2023-44813": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01754,
+"epss_pct": 0.76322,
+"name": "mooSocial v.3.1.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44813.yaml"
+},
+"CVE-2023-4490": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-89",
+"epss": 0.03122,
+"epss_pct": 0.86921,
+"name": "WordPress Job Portal < 2.0.6 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4490.yaml"
+},
+"CVE-2023-44982": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01425,
+"epss_pct": 0.71046,
+"name": "WordPress Perfect Images (WP Retina 2x) < 6.4.6 - Sensitive Information Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44982.yaml"
+},
+"CVE-2023-45038": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.01243,
+"epss_pct": 0.67135,
+"name": "QNAP Music Station < 5.4.0 - Authentication Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45038.yaml"
+},
+"CVE-2023-45136": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.05124,
+"epss_pct": 0.9179,
+"name": "XWiki < 14.10.14 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45136.yaml"
+},
+"CVE-2023-4521": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.39294,
+"epss_pct": 0.98496,
+"name": "Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4521.yaml"
+},
+"CVE-2023-45249": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.53255,
+"epss_pct": 0.98904,
+"name": "Acronis Cyber Infrastructure - Default Password",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2023/CVE-2023-45249.yaml"
+},
+"CVE-2023-45375": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.38457,
+"epss_pct": 0.98463,
+"name": "PrestaShop PireosPay - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45375.yaml"
+},
+"CVE-2023-4542": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.85443,
+"epss_pct": 0.99704,
+"name": "D-Link DAR-8000-10 - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4542.yaml"
+},
+"CVE-2023-4547": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.61308,
+"epss_pct": 0.99099,
+"name": "SPA-Cart eCommerce CMS 1.9.0.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4547.yaml"
+},
+"CVE-2023-45542": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01635,
+"epss_pct": 0.74597,
+"name": "MooSocial 3.1.8 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45542.yaml"
+},
+"CVE-2023-45648": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-444",
+"epss": 0.05848,
+"epss_pct": 0.92648,
+"name": "Apache Tomcat - HTTP Request Smuggling",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45648.yaml"
+},
+"CVE-2023-45671": {
+"cvss": 4.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01425,
+"epss_pct": 0.71062,
+"name": "Frigate < 0.13.0 Beta 3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45671.yaml"
+},
+"CVE-2023-4568": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-287",
+"epss": 0.03568,
+"epss_pct": 0.88534,
+"name": "PaperCut NG Unauthenticated XMLRPC Functionality",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4568.yaml"
+},
+"CVE-2023-45826": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.01872,
+"epss_pct": 0.77878,
+"name": "Leantime < 2.4 - Authenticated SQL Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45826.yaml"
+},
+"CVE-2023-45852": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.14003,
+"epss_pct": 0.96281,
+"name": "Viessmann Vitogate 300 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45852.yaml"
+},
+"CVE-2023-45855": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.0333,
+"epss_pct": 0.87756,
+"name": "qdPM 9.2 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45855.yaml"
+},
+"CVE-2023-45878": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.63113,
+"epss_pct": 0.99142,
+"name": "Gibbon LMS <= v25.0.01 - File Upload to RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45878.yaml"
+},
+"CVE-2023-4596": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.14321,
+"epss_pct": 0.96343,
+"name": "WordPress Plugin Forminator 1.24.6 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4596.yaml"
+},
+"CVE-2023-4634": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-73",
+"epss": 0.82585,
+"epss_pct": 0.99641,
+"name": "Media Library Assistant < 3.09 - Remote Code Execution/Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4634.yaml"
+},
+"CVE-2023-46347": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.49885,
+"epss_pct": 0.98813,
+"name": "PrestaShop Step by Step products Pack - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46347.yaml"
+},
+"CVE-2023-46359": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.87495,
+"epss_pct": 0.99744,
+"name": "cPH2 Charging Station v1.87.0 - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46359.yaml"
+},
+"CVE-2023-46455": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-22",
+"epss": 0.46966,
+"epss_pct": 0.98743,
+"name": "GL.iNet <= 4.3.7 - Arbitrary File Write",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46455.yaml"
+},
+"CVE-2023-46574": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.65412,
+"epss_pct": 0.99201,
+"name": "TOTOLINK A3700R - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46574.yaml"
+},
+"CVE-2023-46604": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.99723,
+"epss_pct": 0.99951,
+"name": "Apache ActiveMQ - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2023/CVE-2023-46604.yaml"
+},
+"CVE-2023-4666": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.03283,
+"epss_pct": 0.87576,
+"name": "Form-Maker < 1.15.20 - Unauthenticated Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4666.yaml"
+},
+"CVE-2023-46732": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02191,
+"epss_pct": 0.8117,
+"name": "XWiki < 14.10.14 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46732.yaml"
+},
+"CVE-2023-46747": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.96515,
+"epss_pct": 0.99877,
+"name": "F5 BIG-IP - Unauthenticated RCE via AJP Smuggling",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46747.yaml"
+},
+"CVE-2023-46805": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
+"cwe": "CWE-287",
+"epss": 0.99986,
+"epss_pct": 0.99983,
+"name": "Ivanti ICS - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46805.yaml"
+},
+"CVE-2023-46818": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.15856,
+"epss_pct": 0.9664,
+"name": "ISPConfig - PHP Code Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46818.yaml"
+},
+"CVE-2023-47105": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
+"cwe": "CWE-78",
+"epss": 0.01669,
+"epss_pct": 0.7511,
+"name": "Chaosblade < 1.7.4 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47105.yaml"
+},
+"CVE-2023-47115": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.01448,
+"epss_pct": 0.71474,
+"name": "Label Studio - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47115.yaml"
+},
+"CVE-2023-47117": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.04055,
+"epss_pct": 0.89923,
+"name": "Label Studio - Sensitive Information Exposure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47117.yaml"
+},
+"CVE-2023-4714": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.0521,
+"epss_pct": 0.91908,
+"name": "PlayTube 3.0.1 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4714.yaml"
+},
+"CVE-2023-47211": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
+"cwe": "CWE-22",
+"epss": 0.47024,
+"epss_pct": 0.98745,
+"name": "ManageEngine OpManager - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47211.yaml"
+},
+"CVE-2023-47218": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
+"cwe": "CWE-77",
+"epss": 0.8992,
+"epss_pct": 0.99782,
+"name": "QNAP QTS and QuTS Hero - OS Command Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47218.yaml"
+},
+"CVE-2023-47246": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.98851,
+"epss_pct": 0.99924,
+"name": "SysAid Server - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47246.yaml"
+},
+"CVE-2023-47248": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.14528,
+"epss_pct": 0.96382,
+"name": "PyArrow Flight RPC - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47248.yaml"
+},
+"CVE-2023-47253": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.14308,
+"epss_pct": 0.9634,
+"name": "Qualitor <= 8.20 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47253.yaml"
+},
+"CVE-2023-47643": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.03002,
+"epss_pct": 0.86422,
+"name": "SuiteCRM Unauthenticated Graphql Introspection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47643.yaml"
+},
+"CVE-2023-47684": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00838,
+"epss_pct": 0.55271,
+"name": "Essential Grid <= 3.1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47684.yaml"
+},
+"CVE-2023-47873": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.02276,
+"epss_pct": 0.81881,
+"name": "WordPress WP Child Theme Generator < 1.1.3 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47873.yaml"
+},
+"CVE-2023-48022": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.83942,
+"epss_pct": 0.99672,
+"name": "Anyscale Ray - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48022.yaml"
+},
+"CVE-2023-48023": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"epss": 0.35296,
+"epss_pct": 0.98328,
+"name": "Anyscale Ray 2.6.3 and 2.8.0 - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48023.yaml"
+},
+"CVE-2023-48084": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.3374,
+"epss_pct": 0.98268,
+"name": "Nagios XI < 5.11.3 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48084.yaml"
+},
+"CVE-2023-48241": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-285",
+"epss": 0.7282,
+"epss_pct": 0.99408,
+"name": "XWiki < 4.10.15 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48241.yaml"
+},
+"CVE-2023-48728": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02268,
+"epss_pct": 0.81812,
+"name": "WWBN AVideo 11.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48728.yaml"
+},
+"CVE-2023-48777": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.041,
+"epss_pct": 0.90021,
+"name": "WordPress Elementor 3.18.1 - File Upload/Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48777.yaml"
+},
+"CVE-2023-48788": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.98446,
+"epss_pct": 0.99914,
+"name": "Fortinet Forticlient Endpoint Management Server - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-48788.yaml"
+},
+"CVE-2023-48795": {
+"cvss": 5.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-354",
+"epss": 0.93305,
+"epss_pct": 0.9983,
+"name": "OpenSSH Terrapin Attack - Detection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2023/CVE-2023-48795.yaml"
+},
+"CVE-2023-49070": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.95368,
+"epss_pct": 0.99862,
+"name": "Apache OFBiz < 18.12.10 - Arbitrary Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49070.yaml"
+},
+"CVE-2023-49103": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.78428,
+"epss_pct": 0.9955,
+"name": "OwnCloud - Phpinfo Configuration",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49103.yaml"
+},
+"CVE-2023-49105": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.43205,
+"epss_pct": 0.98628,
+"name": "OwnCloud - WebDAV API Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-49105.yaml"
+},
+"CVE-2023-4911": {
+"cvss": 7.8,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.81422,
+"epss_pct": 0.9961,
+"name": "Looney Tunables Linux - Local Privilege Escalation",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-4911.yaml"
+},
+"CVE-2023-49230": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.0205,
+"epss_pct": 0.79871,
+"name": "Peplink Balance Two before 8.4.0 - Unauthenticated Config Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49230.yaml"
+},
+"CVE-2023-49293": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-80",
+"epss": 0.00997,
+"epss_pct": 0.60266,
+"name": "Vite dev server - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49293.yaml"
+},
+"CVE-2023-49438": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01079,
+"epss_pct": 0.62711,
+"name": "Python Flask-Security-Too <=5.3.2 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49438.yaml"
+},
+"CVE-2023-49489": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0072,
+"epss_pct": 0.51383,
+"name": "KodeExplorer 4.51 - Reflective Cross Site Scripting (XSS)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49489.yaml"
+},
+"CVE-2023-49494": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01147,
+"epss_pct": 0.64542,
+"name": "DedeCMS v5.7.111 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49494.yaml"
+},
+"CVE-2023-4966": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.99999,
+"epss_pct": 0.99998,
+"name": "Citrix Bleed - Leaking Session Tokens",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4966.yaml"
+},
+"CVE-2023-4973": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01835,
+"epss_pct": 0.77398,
+"name": "Academy LMS 6.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4973.yaml"
+},
+"CVE-2023-4974": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04886,
+"epss_pct": 0.91446,
+"name": "Academy LMS 6.2 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4974.yaml"
+},
+"CVE-2023-49785": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-79",
+"epss": 0.83163,
+"epss_pct": 0.99653,
+"name": "ChatGPT-Next-Web - SSRF/XSS",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49785.yaml"
+},
+"CVE-2023-5003": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.25855,
+"epss_pct": 0.97824,
+"name": "Active Directory Integration WP Plugin < 4.1.10 - Log Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5003.yaml"
+},
+"CVE-2023-50094": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.1354,
+"epss_pct": 0.96177,
+"name": "reNgine 2.2.0 - Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50094.yaml"
+},
+"CVE-2023-50290": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.68446,
+"epss_pct": 0.99281,
+"name": "Apache Solr - Host Environment Variables Leak via Metrics API",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50290.yaml"
+},
+"CVE-2023-50578": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.0224,
+"epss_pct": 0.81607,
+"name": "Mingsoft MCMS 5.2.9 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50578.yaml"
+},
+"CVE-2023-50719": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-359",
+"epss": 0.83548,
+"epss_pct": 0.99663,
+"name": "XWiki < 4.10.15 - Sensitive Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50719.yaml"
+},
+"CVE-2023-50720": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.59119,
+"epss_pct": 0.99044,
+"name": "XWiki < 4.10.15 - Email Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50720.yaml"
+},
+"CVE-2023-5074": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.67914,
+"epss_pct": 0.99265,
+"name": "D-Link D-View 8 v2.0.1.28 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5074.yaml"
+},
+"CVE-2023-50839": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02041,
+"epss_pct": 0.79785,
+"name": "JS Help Desk <= 2.8.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50839.yaml"
+},
+"CVE-2023-5089": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.02217,
+"epss_pct": 0.81412,
+"name": "Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5089.yaml"
+},
+"CVE-2023-50917": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.38007,
+"epss_pct": 0.98444,
+"name": "MajorDoMo thumb.php - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50917.yaml"
+},
+"CVE-2023-50968": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.63373,
+"epss_pct": 0.99148,
+"name": "Apache OFBiz < 18.12.11 - Server Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50968.yaml"
+},
+"CVE-2023-51409": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.63077,
+"epss_pct": 0.99141,
+"name": "Jordy Meow AI Engine - Unrestricted File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-51409.yaml"
+},
+"CVE-2023-51449": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.28336,
+"epss_pct": 0.97982,
+"name": "Gradio Hugging Face - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-51449.yaml"
+},
+"CVE-2023-51467": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.96001,
+"epss_pct": 0.9987,
+"name": "Apache OFBiz < 18.12.11 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-51467.yaml"
+},
+"CVE-2023-51713": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"cwe": "CWE-125",
+"epss": 0.04249,
+"epss_pct": 0.90344,
+"name": "ProFTPD < 1.3.8a - DoS via Out-of-Bounds Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-51713.yaml"
+},
+"CVE-2023-5203": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02202,
+"epss_pct": 0.81292,
+"name": "WP Sessions Time Monitoring Full Automatic <= 1.0.8 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5203.yaml"
+},
+"CVE-2023-5204": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.06888,
+"epss_pct": 0.93591,
+"name": "WordPress AI ChatBot (WPBot) <= 4.8.9 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5204.yaml"
+},
+"CVE-2023-52085": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-22",
+"epss": 0.30166,
+"epss_pct": 0.98087,
+"name": "Winter CMS Local File Inclusion - (LFI)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-52085.yaml"
+},
+"CVE-2023-52163": {
+"name": "Digiever DS-2105 Pro - Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-52163.yaml"
+},
+"CVE-2023-5222": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-259",
+"epss": 0.74525,
+"epss_pct": 0.99458,
+"name": "Viessmann Vitogate 300 - Hardcoded Password",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5222.yaml"
+},
+"CVE-2023-52251": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.85025,
+"epss_pct": 0.99697,
+"name": "Kafka UI 0.7.1 Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-52251.yaml"
+},
+"CVE-2023-5244": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01061,
+"epss_pct": 0.62203,
+"name": "Microweber < V.2.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5244.yaml"
+},
+"CVE-2023-5360": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.81695,
+"epss_pct": 0.99617,
+"name": "WordPress Royal Elementor Addons Plugin <= 1.3.78 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5360.yaml"
+},
+"CVE-2023-5375": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.35128,
+"epss_pct": 0.98323,
+"name": "Mosparo < 1.0.2 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5375.yaml"
+},
+"CVE-2023-5556": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01222,
+"epss_pct": 0.66591,
+"name": "Structurizr on-premises - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5556.yaml"
+},
+"CVE-2023-5558": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00908,
+"epss_pct": 0.57456,
+"name": "LearnPress < 4.2.5.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5558.yaml"
+},
+"CVE-2023-5559": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
+"epss": 0.02788,
+"epss_pct": 0.85398,
+"name": "10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5559.yaml"
+},
+"CVE-2023-5561": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.03862,
+"epss_pct": 0.89427,
+"name": "WordPress Core - Post Author Email Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5561.yaml"
+},
+"CVE-2023-5652": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.63711,
+"epss_pct": 0.99158,
+"name": "WP Hotel Booking <= 2.0.7 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5652.yaml"
+},
+"CVE-2023-5815": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.04262,
+"epss_pct": 0.90367,
+"name": "News & Blog Designer Pack \u2013 WordPress Blog Plugin <= 3.4.1 - Unauthenticated Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5815.yaml"
+},
+"CVE-2023-5830": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.60782,
+"epss_pct": 0.99085,
+"name": "ColumbiaSoft DocumentLocator - Improper Authentication",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5830.yaml"
+},
+"CVE-2023-5863": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01096,
+"epss_pct": 0.63229,
+"name": "phpMyFAQ < 3.2.0 - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5863.yaml"
+},
+"CVE-2023-5914": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.73142,
+"epss_pct": 0.99416,
+"name": "Citrix StoreFront - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5914.yaml"
+},
+"CVE-2023-5974": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.0315,
+"epss_pct": 0.87029,
+"name": "WordPress WPB Show Core <= 2.2 - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5974.yaml"
+},
+"CVE-2023-5991": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.03313,
+"epss_pct": 0.87697,
+"name": "Hotel Booking Lite < 4.8.5 - Arbitrary File Download & Deletion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5991.yaml"
+},
+"CVE-2023-6000": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01999,
+"epss_pct": 0.79324,
+"name": "WordPress Popup Builder <= 4.2.3 - Unauthenticated Stored XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6000.yaml"
+},
+"CVE-2023-6018": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.47594,
+"epss_pct": 0.98758,
+"name": "Mlflow - Arbitrary File Write",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6018.yaml"
+},
+"CVE-2023-6020": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.14652,
+"epss_pct": 0.96406,
+"name": "Ray Static File - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6020.yaml"
+},
+"CVE-2023-6021": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.37076,
+"epss_pct": 0.98407,
+"name": "Ray API - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6021.yaml"
+},
+"CVE-2023-6023": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.02975,
+"epss_pct": 0.86299,
+"name": "VertaAI ModelDB - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6023.yaml"
+},
+"CVE-2023-6030": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.00821,
+"epss_pct": 0.5476,
+"name": "LogDash Activity Log <= 1.1.3 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6030.yaml"
+},
+"CVE-2023-6038": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.0434,
+"epss_pct": 0.90515,
+"name": "H2O ImportFiles - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6038.yaml"
+},
+"CVE-2023-6063": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.73708,
+"epss_pct": 0.99434,
+"name": "WP Fastest Cache 1.2.2 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6063.yaml"
+},
+"CVE-2023-6065": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.18552,
+"epss_pct": 0.97045,
+"name": "Quttera Web Malware Scanner <= 3.4.1.48 - Sensitive Data Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6065.yaml"
+},
+"CVE-2023-6114": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-552",
+"epss": 0.30894,
+"epss_pct": 0.98121,
+"name": "Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6114.yaml"
+},
+"CVE-2023-6246": {
+"cvss": 7.8,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.04794,
+"epss_pct": 0.91305,
+"name": "glibc's syslog - Local Privilege Escalation",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-6246.yaml"
+},
+"CVE-2023-6266": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-552",
+"epss": 0.02072,
+"epss_pct": 0.80109,
+"name": "WordPress Backup Migration <= 1.3.6 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6266.yaml"
+},
+"CVE-2023-6275": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02379,
+"epss_pct": 0.82692,
+"name": "TOTVS Fluig Platform - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6275.yaml"
+},
+"CVE-2023-6329": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.64996,
+"epss_pct": 0.9919,
+"name": "Control iD iDSecure - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6329.yaml"
+},
+"CVE-2023-6360": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.63141,
+"epss_pct": 0.99143,
+"name": "WordPress My Calendar <3.4.22 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6360.yaml"
+},
+"CVE-2023-6379": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01752,
+"epss_pct": 0.76293,
+"name": "OpenCMS 14 & 15 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6379.yaml"
+},
+"CVE-2023-6380": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01594,
+"epss_pct": 0.73966,
+"name": "OpenCms 14 & 15 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6380.yaml"
+},
+"CVE-2023-6389": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.26798,
+"epss_pct": 0.97884,
+"name": "WordPress Toolbar <= 2.2.6 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6389.yaml"
+},
+"CVE-2023-6421": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.02437,
+"epss_pct": 0.83127,
+"name": "WordPress Download Manager - File Password Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6421.yaml"
+},
+"CVE-2023-6444": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.02463,
+"epss_pct": 0.8332,
+"name": "Seriously Simple Podcasting < 3.0.0 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6444.yaml"
+},
+"CVE-2023-6505": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.39867,
+"epss_pct": 0.9852,
+"name": "Prime Mover < 1.9.3 - Sensitive Data Exposure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6505.yaml"
+},
+"CVE-2023-6549": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-125",
+"epss": 0.57633,
+"epss_pct": 0.99011,
+"name": "Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6549.yaml"
+},
+"CVE-2023-6553": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.97846,
+"epss_pct": 0.99902,
+"name": "Worpress Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6553.yaml"
+},
+"CVE-2023-6567": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.51394,
+"epss_pct": 0.98856,
+"name": "LearnPress <= 4.2.5.7 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6567.yaml"
+},
+"CVE-2023-6568": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01662,
+"epss_pct": 0.75014,
+"name": "Mlflow - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6568.yaml"
+},
+"CVE-2023-6592": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-548",
+"epss": 0.00913,
+"epss_pct": 0.57571,
+"name": "WordPress FastDup <= 2.1.9  Sensitive Information Exposure - Directory Listing",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6592.yaml"
+},
+"CVE-2023-6623": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.50673,
+"epss_pct": 0.98836,
+"name": "Essential Blocks < 4.4.3 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6623.yaml"
+},
+"CVE-2023-6634": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.08544,
+"epss_pct": 0.94662,
+"name": "LearnPress < 4.2.5.8 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6634.yaml"
+},
+"CVE-2023-6655": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-89",
+"epss": 0.03766,
+"epss_pct": 0.89138,
+"name": "Hongjing e-HR 2020 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6655.yaml"
+},
+"CVE-2023-6697": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0104,
+"epss_pct": 0.61596,
+"name": "WP Go Maps (formerly WP Google Maps) < 9.0.29 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6697.yaml"
+},
+"CVE-2023-6750": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-200",
+"epss": 0.01961,
+"epss_pct": 0.78911,
+"name": "WordPress WP Clone <= 2.4.2 - Database Backup Exposure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6750.yaml"
+},
+"CVE-2023-6786": {
+"epss": 0.00513,
+"epss_pct": 0.41654,
+"name": "Payment Gateway for Telcell < 2.0.4 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6786.yaml"
+},
+"CVE-2023-6825": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
+"cwe": "CWE-22",
+"epss": 0.06009,
+"epss_pct": 0.92811,
+"name": "WordPress File Manager <= 7.2.1 - Directory Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6825.yaml"
+},
+"CVE-2023-6831": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
+"epss": 0.0329,
+"epss_pct": 0.87611,
+"name": "mlflow - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6831.yaml"
+},
+"CVE-2023-6875": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.90339,
+"epss_pct": 0.99789,
+"name": "WordPress POST SMTP Mailer <= 2.8.7 - Authorization Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6875.yaml"
+},
+"CVE-2023-6895": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.89138,
+"epss_pct": 0.99769,
+"name": "Hikvision IP ping.php - Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6895.yaml"
+},
+"CVE-2023-6909": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-29",
+"epss": 0.89716,
+"epss_pct": 0.99777,
+"name": "Mlflow <2.9.2 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6909.yaml"
+},
+"CVE-2023-6933": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.68047,
+"epss_pct": 0.9927,
+"name": "Better Search Replace < 1.4.5 - PHP Object Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6933.yaml"
+},
+"CVE-2023-6970": {
+"name": "WP Recipe Maker <= 9.1.0 - Reflected XSS via Referer Header",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6970.yaml"
+},
+"CVE-2023-6977": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-29",
+"epss": 0.03924,
+"epss_pct": 0.89601,
+"name": "Mlflow <2.8.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6977.yaml"
+},
+"CVE-2023-6989": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.56567,
+"epss_pct": 0.98986,
+"name": "Shield Security WP Plugin <= 18.5.9 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6989.yaml"
+},
+"CVE-2023-7028": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.94647,
+"epss_pct": 0.99849,
+"name": "GitLab - Account Takeover via Password Reset",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7028.yaml"
+},
+"CVE-2023-7116": {
+"cvss": 6.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-78",
+"epss": 0.09026,
+"epss_pct": 0.94902,
+"name": "WeiYe-Jing datax-web <= 2.1.2 - OS Command Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7116.yaml"
+},
+"CVE-2023-7164": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.02261,
+"epss_pct": 0.81758,
+"name": "WordPress BackWPup < 4.0.4 - Backup File Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7164.yaml"
+},
+"CVE-2023-7165": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-548",
+"epss": 0.01915,
+"epss_pct": 0.78388,
+"name": "JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7165.yaml"
+},
+"CVE-2023-7246": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00813,
+"epss_pct": 0.54479,
+"name": "System Dashboard < 2.8.10 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7246.yaml"
+},
+"CVE-2023-7327": {
+"epss": 0.02111,
+"epss_pct": 0.80494,
+"name": "Ozeki 10 SMS Gateway 10.3.208 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7327.yaml"
+},
+"CVE-2023-7337": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.01317,
+"epss_pct": 0.68775,
+"name": "JS Help Desk <= 2.8.2 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7337.yaml"
+},
+"CVE-2024-0012": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.99717,
+"epss_pct": 0.9995,
+"name": "PAN-OS Management Web Interface - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0012.yaml"
+},
+"CVE-2024-0195": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.19403,
+"epss_pct": 0.97163,
+"name": "SpiderFlow Crawler Platform - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0195.yaml"
+},
+"CVE-2024-0200": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-470",
+"epss": 0.71725,
+"epss_pct": 0.99375,
+"name": "Github Enterprise - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0200.yaml"
+},
+"CVE-2024-0204": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-425",
+"epss": 0.95086,
+"epss_pct": 0.99857,
+"name": "Fortra GoAnywhere MFT - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0204.yaml"
+},
+"CVE-2024-0235": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.37957,
+"epss_pct": 0.98441,
+"name": "EventON (Free < 2.2.8, Premium < 4.5.5) - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0235.yaml"
+},
+"CVE-2024-0250": {
+"epss": 0.01254,
+"epss_pct": 0.6738,
+"name": "Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0250.yaml"
+},
+"CVE-2024-0305": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.66932,
+"epss_pct": 0.99238,
+"name": "Ncast busiFacade - Remote Command Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0305.yaml"
+},
+"CVE-2024-0337": {
+"epss": 0.00891,
+"epss_pct": 0.56919,
+"name": "Travelpayouts <= 1.1.16 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0337.yaml"
+},
+"CVE-2024-0352": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.72917,
+"epss_pct": 0.9941,
+"name": "Likeshop < 2.5.7.20210311 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0352.yaml"
+},
+"CVE-2024-0593": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.00909,
+"epss_pct": 0.57486,
+"name": "WordPress Simple Job Board - Unauthorized Data Access",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0593.yaml"
+},
+"CVE-2024-0692": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.92245,
+"epss_pct": 0.99815,
+"name": "SolarWinds Security Event Manager - Unauthenticated RCE",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0692.yaml"
+},
+"CVE-2024-0705": {
+"name": "Stripe Payment Plugin for WooCommerce <= 3.7.9 - Unauthenticated SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0705.yaml"
+},
+"CVE-2024-0799": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.04342,
+"epss_pct": 0.90517,
+"name": "Arcserve Unified Data Protection - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0799.yaml"
+},
+"CVE-2024-0801": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"cwe": "CWE-75",
+"epss": 0.41843,
+"epss_pct": 0.98585,
+"name": "Arcserve Unified Data Protection - Unauthenticated DoS in ASNative.dll",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0801.yaml"
+},
+"CVE-2024-0881": {
+"cwe": "CWE-284",
+"epss": 0.16906,
+"epss_pct": 0.96828,
+"name": "Combo Blocks < 2.2.76 - Improper Access Control",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0881.yaml"
+},
+"CVE-2024-0939": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.43777,
+"epss_pct": 0.98648,
+"name": "Smart S210 Management Platform - Arbitary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0939.yaml"
+},
+"CVE-2024-0986": {
+"cvss": 4.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-78",
+"epss": 0.58153,
+"epss_pct": 0.99024,
+"name": "Issabel Authenticated - Remote Code Execution",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0986.yaml"
+},
+"CVE-2024-10081": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
+"cwe": "CWE-288",
+"epss": 0.39122,
+"epss_pct": 0.98487,
+"name": "CodeChecker <= 6.24.1 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10081.yaml"
+},
+"CVE-2024-10146": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00585,
+"epss_pct": 0.45618,
+"name": "Simple File List < 6.1.13 - Reflected Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10146.yaml"
+},
+"CVE-2024-10152": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.00618,
+"epss_pct": 0.47166,
+"name": "Simple Certain Time to Show Content - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10152.yaml"
+},
+"CVE-2024-1021": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.34713,
+"epss_pct": 0.98307,
+"name": "Rebuild <= 3.5.5 - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1021.yaml"
+},
+"CVE-2024-10400": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.8312,
+"epss_pct": 0.99651,
+"name": "Tutor LMS <= 2.7.6 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10400.yaml"
+},
+"CVE-2024-10443": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.28006,
+"epss_pct": 0.97962,
+"name": "Synology BeeStation BST150-4T - Unauthenticated Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-10443.yaml"
+},
+"CVE-2024-10486": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.00861,
+"epss_pct": 0.55997,
+"name": "Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10486.yaml"
+},
+"CVE-2024-10516": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-98",
+"epss": 0.06479,
+"epss_pct": 0.93257,
+"name": "Swift Performance Lite < 2.3.7.2 - Local PHP File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10516.yaml"
+},
+"CVE-2024-10571": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.04809,
+"epss_pct": 0.91327,
+"name": "Chartify \u2013 WordPress Chart Plugin < 2.9.6 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10571.yaml"
+},
+"CVE-2024-1061": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.11215,
+"epss_pct": 0.95642,
+"name": "WordPress HTML5 Video Player - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1061.yaml"
+},
+"CVE-2024-10708": {
+"cvss": 4.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.0203,
+"epss_pct": 0.79665,
+"name": "System Dashboard < 2.8.15 - Admin+ Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10708.yaml"
+},
+"CVE-2024-1071": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.89431,
+"epss_pct": 0.99773,
+"name": "WordPress Ultimate Member 2.1.3 - 2.8.2 \u2013 SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1071.yaml"
+},
+"CVE-2024-10763": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-98",
+"epss": 0.03655,
+"epss_pct": 0.88812,
+"name": "WordPress Campress Theme <= 1.35 - Unauthenticated Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10763.yaml"
+},
+"CVE-2024-10783": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.02369,
+"epss_pct": 0.82624,
+"name": "WordPress Plugin MainWP Child - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10783.yaml"
+},
+"CVE-2024-10812": {
+"epss": 0.00568,
+"epss_pct": 0.44771,
+"name": "GPT Academic v1.3.9 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10812.yaml"
+},
+"CVE-2024-10908": {
+"epss": 0.00762,
+"epss_pct": 0.52832,
+"name": "FastChat - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10908.yaml"
+},
+"CVE-2024-10914": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-707",
+"epss": 0.96183,
+"epss_pct": 0.99874,
+"name": "D-Link NAS - Command Injection via Name Parameter",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10914.yaml"
+},
+"CVE-2024-10915": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.79407,
+"epss_pct": 0.99572,
+"name": "D-Link NAS - Command Injection via Group Parameter",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10915.yaml"
+},
+"CVE-2024-10924": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.82025,
+"epss_pct": 0.99627,
+"name": "Really Simple Security < 9.1.2 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10924.yaml"
+},
+"CVE-2024-11044": {
+"epss": 0.00807,
+"epss_pct": 0.54301,
+"name": "Stable Diffusion Webui 1.10.0 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11044.yaml"
+},
+"CVE-2024-11238": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
+"cwe": "CWE-22",
+"epss": 0.05747,
+"epss_pct": 0.92526,
+"name": "Landray EKP - Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11238.yaml"
+},
+"CVE-2024-11303": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.01783,
+"epss_pct": 0.76708,
+"name": "Korenix JetPort 5601v3 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11303.yaml"
+},
+"CVE-2024-11305": {
+"cvss": 6.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-74",
+"epss": 0.0367,
+"epss_pct": 0.88857,
+"name": "Altenergy Power Control Software - SQL Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11305.yaml"
+},
+"CVE-2024-11320": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.91046,
+"epss_pct": 0.99799,
+"name": "Pandora v7.0NG.777.3 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11320.yaml"
+},
+"CVE-2024-11396": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-359",
+"epss": 0.02015,
+"epss_pct": 0.79513,
+"name": "Event Monster <= 1.4.3 - Information Exposure Via Visitors List Export",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11396.yaml"
+},
+"CVE-2024-11587": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0091,
+"epss_pct": 0.57489,
+"name": "idcCMS V1.60 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11587.yaml"
+},
+"CVE-2024-11680": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.91458,
+"epss_pct": 0.99804,
+"name": "ProjectSend <= r1605 - Improper Authorization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11680.yaml"
+},
+"CVE-2024-11728": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.13515,
+"epss_pct": 0.96169,
+"name": "KiviCare Clinic & Patient Management System (EHR) <= 3.6.4 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11728.yaml"
+},
+"CVE-2024-11740": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-94",
+"epss": 0.01888,
+"epss_pct": 0.78063,
+"name": "Download Manager < 3.3.04 - Unauthenticated Arbitrary Shortcode Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11740.yaml"
+},
+"CVE-2024-1183": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
+"cwe": "CWE-601",
+"epss": 0.01799,
+"epss_pct": 0.7692,
+"name": "Gradio - Server Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1183.yaml"
+},
+"CVE-2024-11868": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-284",
+"epss": 0.01131,
+"epss_pct": 0.6415,
+"name": "LearnPress < 4.2.7.4 - Course Material - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11868.yaml"
+},
+"CVE-2024-11921": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00803,
+"epss_pct": 0.54151,
+"name": "Give WP Plugin < 3.19.0 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11921.yaml"
+},
+"CVE-2024-11972": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.54475,
+"epss_pct": 0.98938,
+"name": "Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11972.yaml"
+},
+"CVE-2024-12008": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-532",
+"epss": 0.02269,
+"epss_pct": 0.81821,
+"name": "W3 Total Cache < 2.8.2 - Log File Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12008.yaml"
+},
+"CVE-2024-12025": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.02572,
+"epss_pct": 0.84056,
+"name": "WordPress Collapsing Categories <= 3.0.8 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12025.yaml"
+},
+"CVE-2024-1208": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.05285,
+"epss_pct": 0.91993,
+"name": "LearnDash LMS < 4.10.3 - Sensitive Information Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1208.yaml"
+},
+"CVE-2024-1209": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.02419,
+"epss_pct": 0.82999,
+"name": "LearnDash LMS < 4.10.2 - Sensitive Information Exposure via assignments",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1209.yaml"
+},
+"CVE-2024-1210": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.02027,
+"epss_pct": 0.79638,
+"name": "LearnDash LMS < 4.10.2 - Sensitive Information Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1210.yaml"
+},
+"CVE-2024-1212": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.95388,
+"epss_pct": 0.99862,
+"name": "Progress Kemp LoadMaster - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1212.yaml"
+},
+"CVE-2024-12209": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-98",
+"epss": 0.23364,
+"epss_pct": 0.97616,
+"name": "WP Umbrella Update Backup Restore & Monitoring <= 2.17.0 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12209.yaml"
+},
+"CVE-2024-12356": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.87991,
+"epss_pct": 0.99753,
+"name": "Privileged Remote Access & Remote Support - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-12356.yaml"
+},
+"CVE-2024-12585": {
+"name": "PropertyHive < 2.1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12585.yaml"
+},
+"CVE-2024-12638": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.00548,
+"epss_pct": 0.43704,
+"name": "Bulk Me Now! Plugin <= 2.0 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12638.yaml"
+},
+"CVE-2024-12724": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00573,
+"epss_pct": 0.45008,
+"name": "WP DeskLite - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12724.yaml"
+},
+"CVE-2024-12732": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00573,
+"epss_pct": 0.45008,
+"name": "AffiliateImporterEb <= 1.0.6 - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12732.yaml"
+},
+"CVE-2024-12734": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00573,
+"epss_pct": 0.45008,
+"name": "Advance Post Prefix WordPress plugin - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12734.yaml"
+},
+"CVE-2024-12737": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00589,
+"epss_pct": 0.45809,
+"name": "WP BASE Booking - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12737.yaml"
+},
+"CVE-2024-12749": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.00582,
+"epss_pct": 0.45475,
+"name": "WordPress Competition Form Plugin <= 2.0 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12749.yaml"
+},
+"CVE-2024-12824": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-620",
+"epss": 0.02303,
+"epss_pct": 0.82112,
+"name": "Nokri \u2013 Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12824.yaml"
+},
+"CVE-2024-12849": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.46858,
+"epss_pct": 0.9874,
+"name": "Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12849.yaml"
+},
+"CVE-2024-12873": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00583,
+"epss_pct": 0.4548,
+"name": "Custom Field Manager WordPress - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12873.yaml"
+},
+"CVE-2024-12878": {
+"name": "Lazy Blocks <= 3.8.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12878.yaml"
+},
+"CVE-2024-12987": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.98084,
+"epss_pct": 0.99908,
+"name": "DrayTek Vigor - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12987.yaml"
+},
+"CVE-2024-13055": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.00537,
+"epss_pct": 0.43106,
+"name": "Dyn Business Panel Plugin <= 1.0.0 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13055.yaml"
+},
+"CVE-2024-13094": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.00571,
+"epss_pct": 0.44916,
+"name": "WP Triggers Lite - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13094.yaml"
+},
+"CVE-2024-13097": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00693,
+"epss_pct": 0.50409,
+"name": "WP Finance Plugin <= 1.3.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13097.yaml"
+},
+"CVE-2024-13098": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00708,
+"epss_pct": 0.50951,
+"name": "WordPress Email Newsletter - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13098.yaml"
+},
+"CVE-2024-13099": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00693,
+"epss_pct": 0.50409,
+"name": "Widget4Call WordPress - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13099.yaml"
+},
+"CVE-2024-13112": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00594,
+"epss_pct": 0.45995,
+"name": "WP MediaTagger <= 4.1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13112.yaml"
+},
+"CVE-2024-13114": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00584,
+"epss_pct": 0.45547,
+"name": "WP Projects Portfolio <= 3.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13114.yaml"
+},
+"CVE-2024-13126": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-552",
+"epss": 0.00465,
+"epss_pct": 0.38471,
+"name": "WordPress Download Manager < 3.3.07 - Unauthenticated Data Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13126.yaml"
+},
+"CVE-2024-13159": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-36",
+"epss": 0.99992,
+"epss_pct": 0.99986,
+"name": "Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcardRecursive",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13159.yaml"
+},
+"CVE-2024-13160": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-36",
+"epss": 0.91247,
+"epss_pct": 0.99801,
+"name": "Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcard",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13160.yaml"
+},
+"CVE-2024-13161": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-36",
+"epss": 0.90081,
+"epss_pct": 0.99786,
+"name": "Ivanti EPM - Credential Coercion Vulnerability in GetHashForSingleFile",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13161.yaml"
+},
+"CVE-2024-13219": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00581,
+"epss_pct": 0.45425,
+"name": "Privacy Policy Genius - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13219.yaml"
+},
+"CVE-2024-13220": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00581,
+"epss_pct": 0.45425,
+"name": "WordPress Google Map Professional - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13220.yaml"
+},
+"CVE-2024-13221": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00594,
+"epss_pct": 0.45995,
+"name": "Fantastic ElasticSearch Plugin <= 4.1.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13221.yaml"
+},
+"CVE-2024-13222": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00584,
+"epss_pct": 0.45545,
+"name": "WordPress User Messages <= 1.2.4 - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13222.yaml"
+},
+"CVE-2024-13224": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00594,
+"epss_pct": 0.45994,
+"name": "SlideDeck 1 Lite Content Slider - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13224.yaml"
+},
+"CVE-2024-13225": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00594,
+"epss_pct": 0.45995,
+"name": "ECT Home Page Products - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13225.yaml"
+},
+"CVE-2024-13226": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00594,
+"epss_pct": 0.45995,
+"name": "A5 Custom Login Page - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13226.yaml"
+},
+"CVE-2024-13322": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.01735,
+"epss_pct": 0.76041,
+"name": "Ads Pro Plugin <= 4.88 - Unauthenticated SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13322.yaml"
+},
+"CVE-2024-13325": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00584,
+"epss_pct": 0.45546,
+"name": "Glossy WordPress - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13325.yaml"
+},
+"CVE-2024-13326": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00584,
+"epss_pct": 0.45546,
+"name": "iBuildApp <= 0.2.0 - Reflected Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13326.yaml"
+},
+"CVE-2024-13327": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00584,
+"epss_pct": 0.45546,
+"name": "Musicbox WordPress - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13327.yaml"
+},
+"CVE-2024-13328": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00584,
+"epss_pct": 0.45545,
+"name": "Giga Messenger WordPress - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13328.yaml"
+},
+"CVE-2024-13330": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.00573,
+"epss_pct": 0.45002,
+"name": "JustRows WordPress - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13330.yaml"
+},
+"CVE-2024-13331": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00584,
+"epss_pct": 0.45546,
+"name": "WP Dream Carousel < 1.0.1b - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13331.yaml"
+},
+"CVE-2024-13352": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.0055,
+"epss_pct": 0.43852,
+"name": "Legull WordPress - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13352.yaml"
+},
+"CVE-2024-13492": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00573,
+"epss_pct": 0.45011,
+"name": "Guten Free Options - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13492.yaml"
+},
+"CVE-2024-13496": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02231,
+"epss_pct": 0.81522,
+"name": "GamiPress <= 2.8.9 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13496.yaml"
+},
+"CVE-2024-13543": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00576,
+"epss_pct": 0.45141,
+"name": "Zarinpal Paid Download - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13543.yaml"
+},
+"CVE-2024-13569": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.00533,
+"epss_pct": 0.42901,
+"name": "WordPress Front End Users - Reflected XSS",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13569.yaml"
+},
+"CVE-2024-13570": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00576,
+"epss_pct": 0.45141,
+"name": "WordPress Stray Random Quotes <= 1.9.9 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13570.yaml"
+},
+"CVE-2024-13609": {
+"cvss": 5.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01607,
+"epss_pct": 0.7417,
+"name": "WordPress 1 Click Migration Plugin < 2.3 - Information Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13609.yaml"
+},
+"CVE-2024-13619": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00573,
+"epss_pct": 0.45009,
+"name": "LifterLMS < 8.0.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13619.yaml"
+},
+"CVE-2024-13624": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
+"cwe": "CWE-79",
+"epss": 0.00668,
+"epss_pct": 0.49379,
+"name": "WordPress WPMovieLibrary Plugin <= 2.1.4.8 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13624.yaml"
+},
+"CVE-2024-13625": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.00562,
+"epss_pct": 0.44463,
+"name": "Tube Video Ads Lite - Reflected XSS",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13625.yaml"
+},
+"CVE-2024-13627": {
+"cvss": 4.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.00821,
+"epss_pct": 0.54758,
+"name": "OWL Carousel Slider - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13627.yaml"
+},
+"CVE-2024-13628": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0064,
+"epss_pct": 0.48173,
+"name": "WP Pricing Table - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13628.yaml"
+},
+"CVE-2024-13630": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00589,
+"epss_pct": 0.45808,
+"name": "NewsTicker <= 1.0 - Reflected Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13630.yaml"
+},
+"CVE-2024-13634": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00609,
+"epss_pct": 0.46714,
+"name": "Post Sync Plugin <= 1.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13634.yaml"
+},
+"CVE-2024-13726": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.01948,
+"epss_pct": 0.78774,
+"name": "Themes Coder Ecommerce <= 1.3.4 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13726.yaml"
+},
+"CVE-2024-13727": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0062,
+"epss_pct": 0.47252,
+"name": "MemberSpace WordPress - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13727.yaml"
+},
+"CVE-2024-1380": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.50192,
+"epss_pct": 0.98821,
+"name": "Relevanssi (A Better Search) <= 4.22.0 - Query Log Export",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1380.yaml"
+},
+"CVE-2024-13853": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.006,
+"epss_pct": 0.46327,
+"name": "WordPress SEO Tools Plugin 4.0.7 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13853.yaml"
+},
+"CVE-2024-13888": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.00745,
+"epss_pct": 0.52242,
+"name": "WPMobile.App <= 11.56 - Open Redirect",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13888.yaml"
+},
+"CVE-2024-13979": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03106,
+"epss_pct": 0.86841,
+"name": "St. Joe ERP system - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13979.yaml"
+},
+"CVE-2024-13985": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.14607,
+"epss_pct": 0.96397,
+"name": "Dahua EIMS - Unauthenticated Remote Code Execution via capture_handle",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13985.yaml"
+},
+"CVE-2024-14015": {
+"name": "Studiocart <= 2.9.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-14015.yaml"
+},
+"CVE-2024-1483": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-29",
+"epss": 0.02718,
+"epss_pct": 0.84975,
+"name": "Mlflow < 2.9.2 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1483.yaml"
+},
+"CVE-2024-1512": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.77729,
+"epss_pct": 0.99531,
+"name": "MasterStudy LMS WordPress Plugin <= 3.2.5 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1512.yaml"
+},
+"CVE-2024-1561": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-29",
+"epss": 0.09314,
+"epss_pct": 0.95011,
+"name": "Gradio 4.3-4.12 - Local File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1561.yaml"
+},
+"CVE-2024-1698": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.77585,
+"epss_pct": 0.99526,
+"name": "NotificationX <= 2.8.2 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1698.yaml"
+},
+"CVE-2024-1708": {
+"cvss": 8.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.9549,
+"epss_pct": 0.99864,
+"name": "ConnectWise ScreenConnect <= 23.9.7 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1708.yaml"
+},
+"CVE-2024-1709": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.9998,
+"epss_pct": 0.9998,
+"name": "ConnectWise ScreenConnect 23.9.7 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1709.yaml"
+},
+"CVE-2024-1728": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.85393,
+"epss_pct": 0.99703,
+"name": "Gradio > 4.19.1 UploadButton - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1728.yaml"
+},
+"CVE-2024-1751": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.03109,
+"epss_pct": 0.86854,
+"name": "Tutor LMS <= 2.1.10 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1751.yaml"
+},
+"CVE-2024-20404": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.22644,
+"epss_pct": 0.97552,
+"name": "Cisco Finesse - Server-Side Request Forgery (SSRF)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-20404.yaml"
+},
+"CVE-2024-20419": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-620",
+"epss": 0.80635,
+"epss_pct": 0.99595,
+"name": "Cisco SSM On-Prem <= 8-202206 - Password Reset Account Takeover",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-20419.yaml"
+},
+"CVE-2024-20439": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-912",
+"epss": 0.92062,
+"epss_pct": 0.99812,
+"name": "Hardcoded Admin Credentials For Cisco Smart Licensing Utility API",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-20439.yaml"
+},
+"CVE-2024-20440": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-532",
+"epss": 0.51897,
+"epss_pct": 0.98867,
+"name": "Cisco Smart Licensing Utility UnAuthenticated Logs Exposure Leaking Plaintext Credentials",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-20440.yaml"
+},
+"CVE-2024-2053": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-23",
+"epss": 0.44579,
+"epss_pct": 0.98675,
+"name": "Artica Proxy - Unauthenticated LFI",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2053.yaml"
+},
+"CVE-2024-20767": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
+"cwe": "CWE-284",
+"epss": 0.98514,
+"epss_pct": 0.99916,
+"name": "Adobe ColdFusion - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-20767.yaml"
+},
+"CVE-2024-21136": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"epss": 0.01783,
+"epss_pct": 0.76701,
+"name": "Oracle Retail Xstore Suite - Pre-authenticated Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21136.yaml"
+},
+"CVE-2024-21485": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01487,
+"epss_pct": 0.7222,
+"name": "Dash Framework - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21485.yaml"
+},
+"CVE-2024-21633": {
+"cvss": 7.8,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.0132,
+"epss_pct": 0.6885,
+"name": "MobSF - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21633.yaml"
+},
+"CVE-2024-21641": {
+"cvss": 4.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01067,
+"epss_pct": 0.62405,
+"name": "Flarum < 1.8.5 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21641.yaml"
+},
+"CVE-2024-21644": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-284",
+"epss": 0.42443,
+"epss_pct": 0.98604,
+"name": "pyLoad Flask Config - Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21644.yaml"
+},
+"CVE-2024-21645": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-74",
+"epss": 0.24698,
+"epss_pct": 0.97731,
+"name": "pyload - Log Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21645.yaml"
+},
+"CVE-2024-21650": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-95",
+"epss": 0.9348,
+"epss_pct": 0.99833,
+"name": "XWiki < 4.10.20 - Remote code execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21650.yaml"
+},
+"CVE-2024-21683": {
+"cvss": 8.3,
+"cvss_vector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.88267,
+"epss_pct": 0.99758,
+"name": "Atlassian Confluence Data Center and Server - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21683.yaml"
+},
+"CVE-2024-21887": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.99999,
+"epss_pct": 1.0,
+"name": "Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21887.yaml"
+},
+"CVE-2024-21893": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.99999,
+"epss_pct": 0.99999,
+"name": "Ivanti SAML - Server Side Request Forgery (SSRF)",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21893.yaml"
+},
+"CVE-2024-22024": {
+"epss": 0.94721,
+"epss_pct": 0.99852,
+"name": "Ivanti Connect Secure - XXE",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22024.yaml"
+},
+"CVE-2024-22120": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.76618,
+"epss_pct": 0.99505,
+"name": "Zabbix Server - Time-Based Blind SQL injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-22120.yaml"
+},
+"CVE-2024-22207": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-1188",
+"epss": 0.0229,
+"epss_pct": 0.82007,
+"name": "Fastify Swagger-UI - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22207.yaml"
+},
+"CVE-2024-22319": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.764,
+"epss_pct": 0.99501,
+"name": "IBM Operational Decision Manager - JNDI Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22319.yaml"
+},
+"CVE-2024-22320": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.73398,
+"epss_pct": 0.99424,
+"name": "IBM Operational Decision Manager - Java Deserialization",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22320.yaml"
+},
+"CVE-2024-22476": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.35723,
+"epss_pct": 0.98346,
+"name": "Intel Neural Compressor <2.5.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22476.yaml"
+},
+"CVE-2024-22729": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.70779,
+"epss_pct": 0.9935,
+"name": "Netis MW5360 V1.0.1.3031 - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22729.yaml"
+},
+"CVE-2024-22927": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01028,
+"epss_pct": 0.6122,
+"name": "eyoucms v.1.6.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22927.yaml"
+},
+"CVE-2024-23055": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00918,
+"epss_pct": 0.57754,
+"name": "Plone Docker - Host Header Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-23055.yaml"
+},
+"CVE-2024-23108": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.78375,
+"epss_pct": 0.99548,
+"name": "Fortinet FortiSIEM - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2024/CVE-2024-23108.yaml"
+},
+"CVE-2024-2330": {
+"cvss": 6.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-89",
+"epss": 0.17622,
+"epss_pct": 0.96926,
+"name": "NS-ASG Application Security Gateway 6.3 - Sql Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2330.yaml"
+},
+"CVE-2024-23334": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.76875,
+"epss_pct": 0.99511,
+"name": "aiohttp - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-23334.yaml"
+},
+"CVE-2024-2340": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.27997,
+"epss_pct": 0.97962,
+"name": "Avada < 7.11.7 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2340.yaml"
+},
+"CVE-2024-23692": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-1336",
+"epss": 0.99471,
+"epss_pct": 0.99941,
+"name": "Rejetto HTTP File Server - Template injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-23692.yaml"
+},
+"CVE-2024-2389": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.93037,
+"epss_pct": 0.99824,
+"name": "Progress Kemp Flowmon - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2389.yaml"
+},
+"CVE-2024-23897": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.99999,
+"epss_pct": 0.99995,
+"name": "Jenkins < 2.441 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2024/CVE-2024-23897.yaml"
+},
+"CVE-2024-23917": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.5373,
+"epss_pct": 0.98921,
+"name": "JetBrains TeamCity > 2023.11.3 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-23917.yaml"
+},
+"CVE-2024-24112": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03348,
+"epss_pct": 0.87819,
+"name": "Exrick XMall - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24112.yaml"
+},
+"CVE-2024-24116": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.28411,
+"epss_pct": 0.97985,
+"name": "Ruijie RG-NBS2009G-P - Improper Authentication",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24116.yaml"
+},
+"CVE-2024-24131": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00924,
+"epss_pct": 0.57917,
+"name": "SuperWebMailer 9.31.0.01799 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24131.yaml"
+},
+"CVE-2024-24328": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.06172,
+"epss_pct": 0.92978,
+"name": "TotoLink Router setMacFilterRules - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24328.yaml"
+},
+"CVE-2024-24329": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.06172,
+"epss_pct": 0.92978,
+"name": "TotoLink Router setPortForwardRules - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24329.yaml"
+},
+"CVE-2024-24565": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.03084,
+"epss_pct": 0.8676,
+"name": "CrateDB Database - Arbitrary File Read",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24565.yaml"
+},
+"CVE-2024-2473": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01235,
+"epss_pct": 0.66939,
+"name": "WPS Hide Login <= 1.9.15.2 - Login Page Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2473.yaml"
+},
+"CVE-2024-24759": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
+"cwe": "CWE-918",
+"epss": 0.04936,
+"epss_pct": 0.91524,
+"name": "MindsDB -DNS Rebinding SSRF Protection Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24759.yaml"
+},
+"CVE-2024-24763": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
+"cwe": "CWE-601",
+"epss": 0.01057,
+"epss_pct": 0.62063,
+"name": "JumpServer < 3.10.0 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24763.yaml"
+},
+"CVE-2024-24809": {
+"cvss": 8.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L",
+"cwe": "CWE-27",
+"epss": 0.54413,
+"epss_pct": 0.98936,
+"name": "Traccar - Unrestricted File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24809.yaml"
+},
+"CVE-2024-24882": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.02094,
+"epss_pct": 0.80335,
+"name": "Masteriyo LMS <= 1.7.2 - Unauthenticated Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24882.yaml"
+},
+"CVE-2024-24919": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.99978,
+"epss_pct": 0.99979,
+"name": "Check Point Quantum Gateway - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24919.yaml"
+},
+"CVE-2024-25600": {
+"epss": 0.88234,
+"epss_pct": 0.99756,
+"name": "Unauthenticated Remote Code Execution \u2013 Bricks <= 1.9.6",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-25600.yaml"
+},
+"CVE-2024-25608": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.0096,
+"epss_pct": 0.59068,
+"name": "Liferay Portal - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-25608.yaml"
+},
+"CVE-2024-25723": {
+"epss": 0.70785,
+"epss_pct": 0.9935,
+"name": "ZenML ZenML Server - Improper Authentication",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-25723.yaml"
+},
+"CVE-2024-25735": {
+"epss": 0.50622,
+"epss_pct": 0.98833,
+"name": "WyreStorm Apollo VX20 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-25735.yaml"
+},
+"CVE-2024-25852": {
+"epss": 0.16519,
+"epss_pct": 0.96765,
+"name": "Linksys RE7000 - Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-25852.yaml"
+},
+"CVE-2024-2621": {
+"cvss": 6.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-89",
+"epss": 0.0194,
+"epss_pct": 0.78688,
+"name": "Fujian Kelixin Communication - Command Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2621.yaml"
+},
+"CVE-2024-26291": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-285",
+"epss": 0.01083,
+"epss_pct": 0.62825,
+"name": "Avid NEXIS Agent - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-26291.yaml"
+},
+"CVE-2024-26331": {
+"epss": 0.51284,
+"epss_pct": 0.98853,
+"name": "ReCrystallize Server - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-26331.yaml"
+},
+"CVE-2024-2667": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.05794,
+"epss_pct": 0.92582,
+"name": "InstaWP Connect <= 0.1.0.22 - Unauthenticated Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2667.yaml"
+},
+"CVE-2024-27115": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:I/V:C/RE:M/U:Red",
+"cwe": "CWE-434",
+"epss": 0.0459,
+"epss_pct": 0.90981,
+"name": "SOPlanning - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27115.yaml"
+},
+"CVE-2024-27198": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-288",
+"epss": 0.99938,
+"epss_pct": 0.9997,
+"name": "TeamCity < 2023.11.4 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27198.yaml"
+},
+"CVE-2024-27199": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-23",
+"epss": 0.99991,
+"epss_pct": 0.99985,
+"name": "TeamCity < 2023.11.4 - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27199.yaml"
+},
+"CVE-2024-27292": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-706",
+"epss": 0.69486,
+"epss_pct": 0.9931,
+"name": "Docassemble - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27292.yaml"
+},
+"CVE-2024-27348": {
+"cwe": "CWE-77",
+"epss": 0.9921,
+"epss_pct": 0.99933,
+"name": "Apache HugeGraph-Server - Remote Command Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27348.yaml"
+},
+"CVE-2024-27443": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.23632,
+"epss_pct": 0.97639,
+"name": "Zimbra Collaboration - Cross-Site Scripting (XSS)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27443.yaml"
+},
+"CVE-2024-27497": {
+"epss": 0.26657,
+"epss_pct": 0.97874,
+"name": "Linksys E2000 1.0.06 position.js Improper Authentication",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27497.yaml"
+},
+"CVE-2024-27564": {
+"epss": 0.40637,
+"epss_pct": 0.98548,
+"name": "ChatGPT\u4e2a\u4eba\u4e13\u7528\u7248 - Server Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27564.yaml"
+},
+"CVE-2024-2771": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.02333,
+"epss_pct": 0.82349,
+"name": "Contact Form Plugin by Fluent Forms < 5.1.17 - Unauthenticated Limited Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2771.yaml"
+},
+"CVE-2024-27718": {
+"epss": 0.01101,
+"epss_pct": 0.6336,
+"name": "Smart s200 Management Platform v.S200 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27718.yaml"
+},
+"CVE-2024-2782": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-862",
+"epss": 0.0123,
+"epss_pct": 0.66818,
+"name": "WordPress FluentForms <= 5.1.16 - Broken Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2782.yaml"
+},
+"CVE-2024-27954": {
+"cvss": 9.8,
+"cwe": "CWE-918",
+"epss": 0.72953,
+"epss_pct": 0.99411,
+"name": "WordPress Automatic Plugin <3.92.1 - Arbitrary File Download and SSRF",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27954.yaml"
+},
+"CVE-2024-27956": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L",
+"cwe": "CWE-89",
+"epss": 0.93971,
+"epss_pct": 0.99838,
+"name": "WordPress Automatic Plugin <= 3.92.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27956.yaml"
+},
+"CVE-2024-28000": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.68266,
+"epss_pct": 0.99276,
+"name": "WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28000.yaml"
+},
+"CVE-2024-28200": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-287",
+"epss": 0.01946,
+"epss_pct": 0.78744,
+"name": "N-able N-central < 2024.2 - Authentication Bypass Detection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28200.yaml"
+},
+"CVE-2024-28253": {
+"cvss": 9.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
+"cwe": "CWE-94",
+"epss": 0.12527,
+"epss_pct": 0.95936,
+"name": "OpenMetaData - SpEL Injection in PUT /api/v1/policies",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28253.yaml"
+},
+"CVE-2024-28255": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.73255,
+"epss_pct": 0.99418,
+"name": "OpenMetadata - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28255.yaml"
+},
+"CVE-2024-28397": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-94",
+"epss": 0.04548,
+"epss_pct": 0.9091,
+"name": "pyload-ng js2py - Remote Code Execution",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28397.yaml"
+},
+"CVE-2024-2862": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-640",
+"epss": 0.51001,
+"epss_pct": 0.98845,
+"name": "LG LED Assistant - Unauthenticated Password Reset",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2862.yaml"
+},
+"CVE-2024-28623": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01317,
+"epss_pct": 0.68786,
+"name": "RiteCMS 3.0.0 - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28623.yaml"
+},
+"CVE-2024-2863": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.63999,
+"epss_pct": 0.99163,
+"name": "LG LED Assistant - Thumbnail Path Traversal File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2863.yaml"
+},
+"CVE-2024-28734": {
+"epss": 0.01791,
+"epss_pct": 0.76802,
+"name": "Coda v.2024Q1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28734.yaml"
+},
+"CVE-2024-2876": {
+"epss": 0.80596,
+"epss_pct": 0.99594,
+"name": "Wordpress Email Subscribers by Icegram Express - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2876.yaml"
+},
+"CVE-2024-2879": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.18402,
+"epss_pct": 0.97023,
+"name": "WordPress Plugin LayerSlider 7.9.11-7.10.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2879.yaml"
+},
+"CVE-2024-28986": {
+"cvss": 9.8,
+"cwe": "CWE-502",
+"name": "SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28986.yaml"
+},
+"CVE-2024-28987": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-798",
+"epss": 0.93208,
+"epss_pct": 0.99827,
+"name": "SolarWinds Web Help Desk - Hardcoded Credential",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28987.yaml"
+},
+"CVE-2024-28995": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.99614,
+"epss_pct": 0.99946,
+"name": "SolarWinds Serv-U - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28995.yaml"
+},
+"CVE-2024-29028": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.01049,
+"epss_pct": 0.61848,
+"name": "Memos 0.13.2 - Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29028.yaml"
+},
+"CVE-2024-29029": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"name": "Memos 0.13.2 - Cross-Site Scripting & SSRF",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29029.yaml"
+},
+"CVE-2024-29030": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"name": "Memos 0.13.2 - Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29030.yaml"
+},
+"CVE-2024-29059": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-209",
+"epss": 0.98624,
+"epss_pct": 0.99921,
+"name": ".NET Framework - Leaking ObjRefs via HTTP .NET Remoting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29059.yaml"
+},
+"CVE-2024-29137": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.00617,
+"epss_pct": 0.47108,
+"name": "WordPress Tourfic Plugin <= 2.11.7 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29137.yaml"
+},
+"CVE-2024-29138": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00617,
+"epss_pct": 0.47108,
+"name": "WordPress Restrict User Access <= 2.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29138.yaml"
+},
+"CVE-2024-29198": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.02199,
+"epss_pct": 0.81263,
+"name": "GeoServer Demo Request Endpoint - Server Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29198.yaml"
+},
+"CVE-2024-29269": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.06294,
+"epss_pct": 0.93096,
+"name": "Telesquare TLR-2005KSH - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29269.yaml"
+},
+"CVE-2024-29272": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-434",
+"epss": 0.09366,
+"epss_pct": 0.95032,
+"name": "VvvebJs < 1.7.5 - Arbitrary File Upload",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29272.yaml"
+},
+"CVE-2024-2928": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-29",
+"epss": 0.21847,
+"epss_pct": 0.9747,
+"name": "MLflow < 2.11.3 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2928.yaml"
+},
+"CVE-2024-2961": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
+"cwe": "CWE-787",
+"epss": 0.8833,
+"epss_pct": 0.99758,
+"name": "PHP - LFR to Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2024/CVE-2024-2961.yaml"
+},
+"CVE-2024-29792": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0074,
+"epss_pct": 0.52094,
+"name": "Unlimited Elements for Elementor <= 1.5.93 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29792.yaml"
+},
+"CVE-2024-29824": {
+"cvss": 9.6,
+"cvss_vector": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.99951,
+"epss_pct": 0.99974,
+"name": "Ivanti EPM - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29824.yaml"
+},
+"CVE-2024-29868": {
+"cwe": "CWE-338",
+"epss": 0.05995,
+"epss_pct": 0.92799,
+"name": "Apache StreamPipes <= 0.93.0 - Use of Cryptographically Weak PRNG in Recovery Token Generation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29868.yaml"
+},
+"CVE-2024-29882": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01086,
+"epss_pct": 0.62914,
+"name": "HTTP API DOM - XSS on JSONP callback",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2024/CVE-2024-29882.yaml"
+},
+"CVE-2024-29889": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
+"cwe": "CWE-89",
+"epss": 0.6296,
+"epss_pct": 0.99137,
+"name": "GLPI 10.0.10-10.0.14 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29889.yaml"
+},
+"CVE-2024-29895": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.98455,
+"epss_pct": 0.99916,
+"name": "Cacti cmd_realtime.php - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29895.yaml"
+},
+"CVE-2024-29931": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00753,
+"epss_pct": 0.52514,
+"name": "WP Go Maps <= 9.0.29 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29931.yaml"
+},
+"CVE-2024-29972": {
+"cvss": 9.88,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.89326,
+"epss_pct": 0.9977,
+"name": "Zyxel NAS326 Firmware < V5.21(AAZF.17)C0 - NsaRescueAngel Backdoor Account",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29972.yaml"
+},
+"CVE-2024-29973": {
+"cvss": 9.88,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.86089,
+"epss_pct": 0.99715,
+"name": "Zyxel NAS326 Firmware < V5.21(AAZF.17)C0 - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29973.yaml"
+},
+"CVE-2024-30163": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.08676,
+"epss_pct": 0.94735,
+"name": "IPS Community Suite - Unauthenticated SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30163.yaml"
+},
+"CVE-2024-30188": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
+"epss": 0.05987,
+"epss_pct": 0.9279,
+"name": "Apache DolphinScheduler >= 3.1.0, < 3.2.2 Resource File Read And Write",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30188.yaml"
+},
+"CVE-2024-30194": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00721,
+"epss_pct": 0.51414,
+"name": "Sunshine Photo Cart <= 3.1.1 - Reflected Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30194.yaml"
+},
+"CVE-2024-30269": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.15875,
+"epss_pct": 0.96644,
+"name": "DataEase <= 2.4.1 - Sensitive Information Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30269.yaml"
+},
+"CVE-2024-3032": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.00816,
+"epss_pct": 0.54577,
+"name": "WordPress Themify Builder < 7.5.8 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3032.yaml"
+},
+"CVE-2024-30464": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-862",
+"epss": 0.01504,
+"epss_pct": 0.72525,
+"name": "WPZOOM Social Icons Widget <= 4.2.15 - Missing Authorization",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30464.yaml"
+},
+"CVE-2024-30490": {
+"name": "ProfileGrid <= 5.7.8 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30490.yaml"
+},
+"CVE-2024-30498": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L",
+"cwe": "CWE-89",
+"epss": 0.02248,
+"epss_pct": 0.81663,
+"name": "CRM Perks Forms <= 1.1.4 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30498.yaml"
+},
+"CVE-2024-30502": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02248,
+"epss_pct": 0.81662,
+"name": "WP Travel Engine <= 5.7.9 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30502.yaml"
+},
+"CVE-2024-30568": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.46918,
+"epss_pct": 0.98741,
+"name": "Netgear R6850 V1.1.0.88 - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30568.yaml"
+},
+"CVE-2024-30569": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01907,
+"epss_pct": 0.78291,
+"name": "Netgear R6850 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30569.yaml"
+},
+"CVE-2024-30570": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01221,
+"epss_pct": 0.6657,
+"name": "Netgear R6850 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30570.yaml"
+},
+"CVE-2024-3080": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.43456,
+"epss_pct": 0.98642,
+"name": "ASUS DSL-AC88U - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3080.yaml"
+},
+"CVE-2024-3094": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-506",
+"epss": 0.85974,
+"epss_pct": 0.99714,
+"name": "XZ - Embedded Malicious Code",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-3094.yaml"
+},
+"CVE-2024-3097": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.38023,
+"epss_pct": 0.98445,
+"name": "NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3097.yaml"
+},
+"CVE-2024-31223": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-497",
+"epss": 0.01105,
+"epss_pct": 0.63461,
+"name": "Fides Privacy Center \u2264 2.39.1 - Server-Side URL Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31223.yaml"
+},
+"CVE-2024-3136": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.05018,
+"epss_pct": 0.91643,
+"name": "MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3136.yaml"
+},
+"CVE-2024-31621": {
+"cvss": 7.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
+"cwe": "CWE-94",
+"epss": 0.59867,
+"epss_pct": 0.99064,
+"name": "Flowise 1.6.5 - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31621.yaml"
+},
+"CVE-2024-31750": {
+"epss": 0.1927,
+"epss_pct": 0.97141,
+"name": "F-logic DataCube3 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31750.yaml"
+},
+"CVE-2024-31839": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.08038,
+"epss_pct": 0.9437,
+"name": "CHAOS 5.0.1 'sendCommandHandler' - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31839.yaml"
+},
+"CVE-2024-31848": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.08086,
+"epss_pct": 0.94399,
+"name": "CData API Server < 23.4.8844 - Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31848.yaml"
+},
+"CVE-2024-31849": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.06076,
+"epss_pct": 0.92883,
+"name": "CData Connect < 23.4.8846 - Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31849.yaml"
+},
+"CVE-2024-31850": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
+"cwe": "CWE-22",
+"epss": 0.03037,
+"epss_pct": 0.8657,
+"name": "CData Arc < 23.4.8839 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31850.yaml"
+},
+"CVE-2024-31851": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
+"cwe": "CWE-22",
+"epss": 0.02885,
+"epss_pct": 0.85891,
+"name": "CData Sync < 23.4.8843 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31851.yaml"
+},
+"CVE-2024-31982": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-95",
+"epss": 0.3428,
+"epss_pct": 0.98288,
+"name": "XWiki < 4.10.20 - Remote code execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31982.yaml"
+},
+"CVE-2024-32113": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.99442,
+"epss_pct": 0.9994,
+"name": "Apache OFBiz Directory Traversal - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32113.yaml"
+},
+"CVE-2024-32114": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-1188",
+"epss": 0.07148,
+"epss_pct": 0.93811,
+"name": "Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32114.yaml"
+},
+"CVE-2024-32128": {
+"name": "WordPress Realtyna Organic IDX Plugin <= 4.14.4 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32128.yaml"
+},
+"CVE-2024-32231": {
+"epss": 0.0117,
+"epss_pct": 0.652,
+"name": "Stash < 0.26.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32231.yaml"
+},
+"CVE-2024-32238": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-522",
+"epss": 0.52948,
+"epss_pct": 0.98896,
+"name": "H3C ER8300G2-X - Password Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32238.yaml"
+},
+"CVE-2024-3231": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00678,
+"epss_pct": 0.49828,
+"name": "Popup4Phone <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3231.yaml"
+},
+"CVE-2024-3234": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.03726,
+"epss_pct": 0.89017,
+"name": "Chuanhu Chat - Directory Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3234.yaml"
+},
+"CVE-2024-32399": {
+"cvss": 7.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L",
+"cwe": "CWE-22",
+"epss": 0.0316,
+"epss_pct": 0.87073,
+"name": "RaidenMAILD Mail Server v.4.9.4 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32399.yaml"
+},
+"CVE-2024-32640": {
+"name": "Mura/Masa CMS - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32640.yaml"
+},
+"CVE-2024-32651": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-1336",
+"epss": 0.83601,
+"epss_pct": 0.99665,
+"name": "Change Detection - Server Side Template Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32651.yaml"
+},
+"CVE-2024-32709": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L",
+"cwe": "CWE-89",
+"epss": 0.05803,
+"epss_pct": 0.92594,
+"name": "WP-Recall <= 16.26.5 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32709.yaml"
+},
+"CVE-2024-3272": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.98038,
+"epss_pct": 0.99907,
+"name": "D-Link Network Attached Storage - Backdoor Account",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3272.yaml"
+},
+"CVE-2024-3273": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.99997,
+"epss_pct": 0.99988,
+"name": "D-Link Network Attached Storage - Command Injection and Backdoor Account",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3273.yaml"
+},
+"CVE-2024-32735": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.06765,
+"epss_pct": 0.93498,
+"name": "CyberPower - Missing Authentication",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32735.yaml"
+},
+"CVE-2024-32736": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.05408,
+"epss_pct": 0.92124,
+"name": "CyberPower < v2.8.3 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32736.yaml"
+},
+"CVE-2024-32737": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.05408,
+"epss_pct": 0.92123,
+"name": "CyberPower - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32737.yaml"
+},
+"CVE-2024-32738": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.04553,
+"epss_pct": 0.90921,
+"name": "CyberPower - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32738.yaml"
+},
+"CVE-2024-32739": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.05408,
+"epss_pct": 0.92124,
+"name": "CyberPower < v2.8.3 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32739.yaml"
+},
+"CVE-2024-3274": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.33484,
+"epss_pct": 0.98257,
+"name": "D-LINK DNS-320L,DNS-320LW and DNS-327L - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3274.yaml"
+},
+"CVE-2024-32825": {
+"name": "Simply Static - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32825.yaml"
+},
+"CVE-2024-32870": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.00751,
+"epss_pct": 0.52442,
+"name": "iTop Hub Connector - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32870.yaml"
+},
+"CVE-2024-32964": {
+"cvss": 9.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H",
+"cwe": "CWE-918",
+"epss": 0.52964,
+"epss_pct": 0.98897,
+"name": "Lobe Chat <= v0.150.5 - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32964.yaml"
+},
+"CVE-2024-3300": {
+"cvss": 9.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.02761,
+"epss_pct": 0.85235,
+"name": "Delmia Apriso - Pre-Authentication Unsafe .NET Object Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3300.yaml"
+},
+"CVE-2024-33113": {
+"epss": 0.03419,
+"epss_pct": 0.88053,
+"name": "D-LINK DIR-845L bsc_sms_inbox.php file - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33113.yaml"
+},
+"CVE-2024-33288": {
+"name": "Prison Management System - SQL Injection Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33288.yaml"
+},
+"CVE-2024-33326": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0081,
+"epss_pct": 0.5438,
+"name": "LumisXP - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33326.yaml"
+},
+"CVE-2024-33575": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01121,
+"epss_pct": 0.63884,
+"name": "User Meta WP Plugin < 3.1 - Sensitive Information Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33575.yaml"
+},
+"CVE-2024-33605": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.06175,
+"epss_pct": 0.92981,
+"name": "Sharp Multifunction Printers - Directory Listing",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33605.yaml"
+},
+"CVE-2024-33610": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-284",
+"epss": 0.45842,
+"epss_pct": 0.98712,
+"name": "Sharp Multifunction Printers - Cookie Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33610.yaml"
+},
+"CVE-2024-33724": {
+"name": "SOPlanning 1.52.00 Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33724.yaml"
+},
+"CVE-2024-3378": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.22002,
+"epss_pct": 0.97485,
+"name": "iboss Secure Web Gateway - Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3378.yaml"
+},
+"CVE-2024-33832": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-918",
+"epss": 0.0072,
+"epss_pct": 0.51378,
+"name": "OneNav v0.9.35-20240318 - Server-Side Request Forgery (SSRF)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33832.yaml"
+},
+"CVE-2024-33939": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-288",
+"epss": 0.00934,
+"epss_pct": 0.58286,
+"name": "Masteriyo LMS <= 1.7.3 - Insecure Direct Object Reference",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33939.yaml"
+},
+"CVE-2024-3400": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.99999,
+"epss_pct": 1.0,
+"name": "GlobalProtect - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3400.yaml"
+},
+"CVE-2024-34061": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01281,
+"epss_pct": 0.68012,
+"name": "Changedetection.io <=v0.45.21 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34061.yaml"
+},
+"CVE-2024-3408": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.77951,
+"epss_pct": 0.99539,
+"name": "D-Tale 3.10.0 - 3.15.1 - Authentication Bypass & Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3408.yaml"
+},
+"CVE-2024-34102": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-611",
+"epss": 0.99994,
+"epss_pct": 0.99987,
+"name": "Adobe Commerce & Magento - CosmicSting",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34102.yaml"
+},
+"CVE-2024-34257": {
+"epss": 0.03817,
+"epss_pct": 0.893,
+"name": "TOTOLINK EX1800T TOTOLINK EX1800T - Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34257.yaml"
+},
+"CVE-2024-34351": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.05453,
+"epss_pct": 0.92169,
+"name": "Next.js - Server Side Request Forgery (SSRF)",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34351.yaml"
+},
+"CVE-2024-34470": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.06699,
+"epss_pct": 0.93435,
+"name": "HSC Mailinspector 5.2.17-3 through 5.2.18 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34470.yaml"
+},
+"CVE-2024-3469": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00637,
+"epss_pct": 0.48052,
+"name": "GP Premium <= 2.4.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3469.yaml"
+},
+"CVE-2024-3495": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.13618,
+"epss_pct": 0.96194,
+"name": "Wordpress Country State City Dropdown <=2.7.2 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3495.yaml"
+},
+"CVE-2024-34982": {
+"epss": 0.04675,
+"epss_pct": 0.91122,
+"name": "LyLme-Spage - Arbitary File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34982.yaml"
+},
+"CVE-2024-35219": {
+"cvss": 8.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.03592,
+"epss_pct": 0.88612,
+"name": "OpenAPI Generator <= 7.5.0 - Arbitrary File Read/Delete",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35219.yaml"
+},
+"CVE-2024-35286": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.65367,
+"epss_pct": 0.992,
+"name": "Mitel MiCollab <= 9.8.0.33 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35286.yaml"
+},
+"CVE-2024-3552": {
+"epss": 0.67288,
+"epss_pct": 0.99248,
+"name": "Web Directory Free < 1.7.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3552.yaml"
+},
+"CVE-2024-35584": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.05857,
+"epss_pct": 0.92662,
+"name": "openSIS < 9.1 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35584.yaml"
+},
+"CVE-2024-35627": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00957,
+"epss_pct": 0.59002,
+"name": "TileServer API - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35627.yaml"
+},
+"CVE-2024-35693": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0059,
+"epss_pct": 0.45837,
+"name": "WordPress 12 Step Meeting List Plugin <= 3.14.33 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35693.yaml"
+},
+"CVE-2024-35694": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.00668,
+"epss_pct": 0.494,
+"name": "Wordpress WPMobile.App >= 11.42 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35694.yaml"
+},
+"CVE-2024-3605": {
+"name": "WP Hotel Booking <= 2.1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3605.yaml"
+},
+"CVE-2024-36104": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-22",
+"epss": 0.87883,
+"epss_pct": 0.9975,
+"name": "Apache OFBiz - Directory Traversal & Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36104.yaml"
+},
+"CVE-2024-36117": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
+"cwe": "CWE-22",
+"epss": 0.03145,
+"epss_pct": 0.87007,
+"name": "Reposilite >= 3.3.0, < 3.5.12 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36117.yaml"
+},
+"CVE-2024-36401": {
+"epss": 0.99813,
+"epss_pct": 0.99957,
+"name": "GeoServer RCE in Evaluating Property Name Expressions",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36401.yaml"
+},
+"CVE-2024-36404": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-95",
+"epss": 0.76065,
+"epss_pct": 0.99494,
+"name": "GeoServer and GeoTools - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36404.yaml"
+},
+"CVE-2024-36412": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.05692,
+"epss_pct": 0.92464,
+"name": "SuiteCRM - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36412.yaml"
+},
+"CVE-2024-36420": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.01776,
+"epss_pct": 0.76629,
+"name": "Flowise 1.4.3 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36420.yaml"
+},
+"CVE-2024-36527": {
+"name": "Puppeteer Renderer - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36527.yaml"
+},
+"CVE-2024-3656": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-200",
+"epss": 0.02862,
+"epss_pct": 0.85778,
+"name": "Keycloak < 24.0.5 - Broken Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3656.yaml"
+},
+"CVE-2024-36675": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
+"cwe": "CWE-918",
+"epss": 0.01438,
+"epss_pct": 0.71284,
+"name": "LyLme spage v1.9.5 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36675.yaml"
+},
+"CVE-2024-36683": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.00963,
+"epss_pct": 0.5918,
+"name": "PrestaShop productsalert - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36683.yaml"
+},
+"CVE-2024-3673": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
+"epss": 0.05578,
+"epss_pct": 0.92322,
+"name": "Web Directory Free < 1.7.3 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3673.yaml"
+},
+"CVE-2024-36837": {
+"epss": 0.08306,
+"epss_pct": 0.94527,
+"name": "CRMEB v.5.2.2 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36837.yaml"
+},
+"CVE-2024-36857": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.02054,
+"epss_pct": 0.79921,
+"name": "Jan v0.4.12 'readFileSync' - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36857.yaml"
+},
+"CVE-2024-36858": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.03035,
+"epss_pct": 0.86562,
+"name": "Jan v0.4.12 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36858.yaml"
+},
+"CVE-2024-36991": {
+"epss": 0.13006,
+"epss_pct": 0.96046,
+"name": "Splunk Enterprise - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36991.yaml"
+},
+"CVE-2024-37014": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.63037,
+"epss_pct": 0.99139,
+"name": "Langflow <= 1.0.12 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37014.yaml"
+},
+"CVE-2024-37032": {
+"epss": 0.89633,
+"epss_pct": 0.99776,
+"name": "Ollama - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37032.yaml"
+},
+"CVE-2024-37152": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.02348,
+"epss_pct": 0.82483,
+"name": "Argo CD Unauthenticated Access to sensitive setting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37152.yaml"
+},
+"CVE-2024-37259": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00624,
+"epss_pct": 0.47511,
+"name": "WP Extended < 3.0.0 - Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37259.yaml"
+},
+"CVE-2024-37261": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00624,
+"epss_pct": 0.47511,
+"name": "WP-Lister Lite for Amazon <= 2.6.16 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37261.yaml"
+},
+"CVE-2024-37393": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.03304,
+"epss_pct": 0.87662,
+"name": "SecurEnvoy Two Factor Authentication - LDAP Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37393.yaml"
+},
+"CVE-2024-3742": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-312",
+"epss": 0.01418,
+"epss_pct": 0.70917,
+"name": "Electrolink FM/DAB/TV Transmitter (controlloLogin.js) - Credentials Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3742.yaml"
+},
+"CVE-2024-3753": {
+"cvss": 5.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.00801,
+"epss_pct": 0.54068,
+"name": "Hostel < 1.1.5.3 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3753.yaml"
+},
+"CVE-2024-37656": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
+"cwe": "CWE-601",
+"epss": 0.0049,
+"epss_pct": 0.40199,
+"name": "GnuBoard5 5.5.16 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37656.yaml"
+},
+"CVE-2024-37728": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.01852,
+"epss_pct": 0.77616,
+"name": "OfficeWeb365 Indexs Interface - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37728.yaml"
+},
+"CVE-2024-37843": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.53242,
+"epss_pct": 0.98904,
+"name": "Craft CMS <=v3.7.31 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37843.yaml"
+},
+"CVE-2024-37881": {
+"epss": 0.01184,
+"epss_pct": 0.65588,
+"name": "SiteGuard WP Plugin <= 1.7.6 - Login Page Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37881.yaml"
+},
+"CVE-2024-3822": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00741,
+"epss_pct": 0.52105,
+"name": "Base64 Encoder/Decoder <= 0.9.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3822.yaml"
+},
+"CVE-2024-38288": {
+"epss": 0.03216,
+"epss_pct": 0.87311,
+"name": "TurboMeeting - Post-Authentication Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38288.yaml"
+},
+"CVE-2024-38289": {
+"epss": 0.40874,
+"epss_pct": 0.98553,
+"name": "TurboMeeting - Boolean-based SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38289.yaml"
+},
+"CVE-2024-38353": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-338",
+"epss": 0.01158,
+"epss_pct": 0.64861,
+"name": "CodiMD <2.5.4 - Insecure Filename Randomization",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38353.yaml"
+},
+"CVE-2024-38472": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.6947,
+"epss_pct": 0.99309,
+"name": "Apache HTTPd Windows UNC - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38472.yaml"
+},
+"CVE-2024-38473": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
+"cwe": "CWE-116",
+"epss": 0.25878,
+"epss_pct": 0.97826,
+"name": "Apache HTTP Server - ACL Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38473.yaml"
+},
+"CVE-2024-38475": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-116",
+"epss": 0.99957,
+"epss_pct": 0.99974,
+"name": "Sonicwall - Pre-Authentication Arbitrary File Read",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38475.yaml"
+},
+"CVE-2024-3848": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-29",
+"epss": 0.43284,
+"epss_pct": 0.98631,
+"name": "Mlflow < 2.11.0 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3848.yaml"
+},
+"CVE-2024-3850": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.009,
+"epss_pct": 0.57183,
+"name": "Uniview NVR301-04S2-P4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3850.yaml"
+},
+"CVE-2024-38514": {
+"cvss": 7.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-918",
+"epss": 0.02186,
+"epss_pct": 0.81134,
+"name": "NextChat - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38514.yaml"
+},
+"CVE-2024-38526": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L",
+"epss": 0.03832,
+"epss_pct": 0.89341,
+"name": "Polyfill Supply Chain Attack Malicious Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2024/CVE-2024-38526.yaml"
+},
+"CVE-2024-38653": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-611",
+"epss": 0.91984,
+"epss_pct": 0.99811,
+"name": "Ivanti Avalanche SmartDeviceServer - XML External Entity",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38653.yaml"
+},
+"CVE-2024-38773": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02004,
+"epss_pct": 0.7938,
+"name": "FormLift for Infusionsoft Web Forms <= 7.5.17 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38773.yaml"
+},
+"CVE-2024-38816": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.14718,
+"epss_pct": 0.96421,
+"name": "WebMvc.fn/WebFlux.fn - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38816.yaml"
+},
+"CVE-2024-38819": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.54862,
+"epss_pct": 0.98949,
+"name": "Spring Framework Path Traversal in Functional Web Frameworks",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38819.yaml"
+},
+"CVE-2024-38856": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.99427,
+"epss_pct": 0.99938,
+"name": "Apache OFBiz - Improper Authorization & Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38856.yaml"
+},
+"CVE-2024-3922": {
+"epss": 0.53196,
+"epss_pct": 0.98902,
+"name": "Dokan Pro <= 3.10.3 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3922.yaml"
+},
+"CVE-2024-39250": {
+"epss": 0.04927,
+"epss_pct": 0.91509,
+"name": "EfroTech Timetrax v8.3 - Sql Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39250.yaml"
+},
+"CVE-2024-39646": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.00624,
+"epss_pct": 0.47468,
+"name": "WordPress Custom 404 Pro <= 3.11.1 - Reflected XSS",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39646.yaml"
+},
+"CVE-2024-39713": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.03201,
+"epss_pct": 0.87237,
+"name": "Rocket.Chat - Server-Side Request Forgery (SSRF)",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39713.yaml"
+},
+"CVE-2024-39887": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.04433,
+"epss_pct": 0.9069,
+"name": "Apache Superset < 4.0.2 - SQL Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39887.yaml"
+},
+"CVE-2024-39903": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
+"cwe": "CWE-22",
+"epss": 0.02884,
+"epss_pct": 0.85886,
+"name": "Solara <1.35.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39903.yaml"
+},
+"CVE-2024-39907": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.29183,
+"epss_pct": 0.98033,
+"name": "1Panel SQL Injection - Authenticated",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39907.yaml"
+},
+"CVE-2024-39914": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.23237,
+"epss_pct": 0.97606,
+"name": "FOG Project < 1.5.10.34 - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39914.yaml"
+},
+"CVE-2024-40348": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
+"cwe": "CWE-22",
+"epss": 0.0829,
+"epss_pct": 0.94518,
+"name": "Bazarr < 1.4.3 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-40348.yaml"
+},
+"CVE-2024-4040": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.99539,
+"epss_pct": 0.99943,
+"name": "CrushFTP VFS - Sandbox Escape LFR",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4040.yaml"
+},
+"CVE-2024-40422": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-22",
+"epss": 0.11323,
+"epss_pct": 0.95665,
+"name": "Devika v1 - Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-40422.yaml"
+},
+"CVE-2024-40711": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.90369,
+"epss_pct": 0.9979,
+"name": "Veeam Backup & Replication - Unauthenticated",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-40711.yaml"
+},
+"CVE-2024-41107": {
+"epss": 0.1776,
+"epss_pct": 0.96943,
+"name": "Apache CloudStack - SAML Signature Exclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41107.yaml"
+},
+"CVE-2024-41628": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.06517,
+"epss_pct": 0.93286,
+"name": "Cluster Control CMON API - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41628.yaml"
+},
+"CVE-2024-41667": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.03536,
+"epss_pct": 0.88439,
+"name": "OpenAM<=15.0.3 FreeMarker - Template Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41667.yaml"
+},
+"CVE-2024-41713": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.9811,
+"epss_pct": 0.99909,
+"name": "Mitel MiCollab - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41713.yaml"
+},
+"CVE-2024-4180": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-79",
+"epss": 0.01834,
+"epss_pct": 0.77395,
+"name": "The Events Calendar < 6.4.0.1 - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4180.yaml"
+},
+"CVE-2024-41810": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"epss": 0.01176,
+"epss_pct": 0.65368,
+"name": "Twisted - Open Redirect & XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41810.yaml"
+},
+"CVE-2024-41955": {
+"cvss": 5.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:N",
+"cwe": "CWE-601",
+"epss": 0.01,
+"epss_pct": 0.60382,
+"name": "Open Redirect in Login Redirect - MobSF",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41955.yaml"
+},
+"CVE-2024-42009": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
+"cwe": "CWE-79",
+"epss": 0.82882,
+"epss_pct": 0.99648,
+"name": "Roundcube Webmail - Cross-Site Scripting",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-42009.yaml"
+},
+"CVE-2024-42323": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.08322,
+"epss_pct": 0.94536,
+"name": "Apache HertzBeat < 1.6.0 - SnakeYAML Deserialization Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-42323.yaml"
+},
+"CVE-2024-4257": {
+"cvss": 6.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-89",
+"epss": 0.12051,
+"epss_pct": 0.9584,
+"name": "BlueNet Technology Clinical Browsing System 1.2.1 - Sql Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4257.yaml"
+},
+"CVE-2024-42640": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
+"cwe": "CWE-94",
+"epss": 0.45374,
+"epss_pct": 0.98699,
+"name": "Angular-Base64-Upload - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-42640.yaml"
+},
+"CVE-2024-42852": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00768,
+"epss_pct": 0.53029,
+"name": "AcuToWeb server/10.5.0.7577c8b - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-42852.yaml"
+},
+"CVE-2024-4295": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.10161,
+"epss_pct": 0.95316,
+"name": "Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via Hash",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4295.yaml"
+},
+"CVE-2024-43144": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02002,
+"epss_pct": 0.79354,
+"name": "Cost Calculator Builder <= 3.2.15 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43144.yaml"
+},
+"CVE-2024-43160": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.04624,
+"epss_pct": 0.9104,
+"name": "BerqWP <= 1.7.6 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43160.yaml"
+},
+"CVE-2024-4322": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-29",
+"epss": 0.30987,
+"epss_pct": 0.98128,
+"name": "LoLLMS WebUI < 9.8 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4322.yaml"
+},
+"CVE-2024-4325": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.37366,
+"epss_pct": 0.98418,
+"name": "Gradio - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4325.yaml"
+},
+"CVE-2024-43283": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01104,
+"epss_pct": 0.63454,
+"name": "Contest Gallery - Broken Access Control",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43283.yaml"
+},
+"CVE-2024-43360": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.06222,
+"epss_pct": 0.93024,
+"name": "ZoneMinder - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43360.yaml"
+},
+"CVE-2024-4340": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"epss": 0.03237,
+"epss_pct": 0.87394,
+"name": "sqlparse - Denial of Service",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-4340.yaml"
+},
+"CVE-2024-43425": {
+"cvss": 9.8,
+"epss": 0.83122,
+"epss_pct": 0.99651,
+"name": "Moodle - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43425.yaml"
+},
+"CVE-2024-43441": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-302",
+"epss": 0.69439,
+"epss_pct": 0.99308,
+"name": "Apache HugeGraph-Server <1.5.0 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43441.yaml"
+},
+"CVE-2024-4348": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01828,
+"epss_pct": 0.77313,
+"name": "osCommerce v4.0 - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4348.yaml"
+},
+"CVE-2024-4358": {
+"epss": 0.97482,
+"epss_pct": 0.99895,
+"name": "Progress Telerik Report Server - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4358.yaml"
+},
+"CVE-2024-43917": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.22955,
+"epss_pct": 0.97583,
+"name": "WordPress TI WooCommerce Wishlist Plugin <= 2.8.2 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43917.yaml"
+},
+"CVE-2024-43919": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.44475,
+"epss_pct": 0.98671,
+"name": "YARPP <= 5.30.10 - Missing Authorization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43919.yaml"
+},
+"CVE-2024-43965": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02019,
+"epss_pct": 0.79553,
+"name": "SendGrid for WordPress <= 1.4 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43965.yaml"
+},
+"CVE-2024-43971": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00624,
+"epss_pct": 0.47468,
+"name": "Sunshine Photo Cart <= 3.2.5 - Reflected Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43971.yaml"
+},
+"CVE-2024-4399": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-918",
+"epss": 0.01821,
+"epss_pct": 0.7722,
+"name": "WordPress CAS Theme <= 1.0.0 - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4399.yaml"
+},
+"CVE-2024-44000": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-532",
+"epss": 0.82143,
+"epss_pct": 0.9963,
+"name": "LiteSpeed Cache <= 6.4.1 - Sensitive Information Exposure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44000.yaml"
+},
+"CVE-2024-4434": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.36925,
+"epss_pct": 0.98401,
+"name": "LearnPress WordPress LMS Plugin <= 4.2.6.5 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4434.yaml"
+},
+"CVE-2024-44349": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.05778,
+"epss_pct": 0.92558,
+"name": "AnteeoWMS < v4.7.34 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44349.yaml"
+},
+"CVE-2024-4439": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-80",
+"epss": 0.70822,
+"epss_pct": 0.99351,
+"name": "WordPress Core <6.5.2 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4439.yaml"
+},
+"CVE-2024-4443": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.10355,
+"epss_pct": 0.95383,
+"name": "Business Directory Plugin <= 6.4.2 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4443.yaml"
+},
+"CVE-2024-4455": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0101,
+"epss_pct": 0.60686,
+"name": "YITH WooCommerce Ajax Search <= 2.4.0 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4455.yaml"
+},
+"CVE-2024-44762": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-209",
+"epss": 0.02566,
+"epss_pct": 0.84018,
+"name": "Usermin 2.100 - Username Enumeration",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44762.yaml"
+},
+"CVE-2024-44849": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.46287,
+"epss_pct": 0.98726,
+"name": "Qualitor <= 8.24 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44849.yaml"
+},
+"CVE-2024-45195": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-425",
+"epss": 0.99983,
+"epss_pct": 0.99981,
+"name": "Apache OFBiz - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45195.yaml"
+},
+"CVE-2024-45216": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.91714,
+"epss_pct": 0.99807,
+"name": "Apache Solr - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45216.yaml"
+},
+"CVE-2024-45241": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.13623,
+"epss_pct": 0.96197,
+"name": "CentralSquare CryWolf - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45241.yaml"
+},
+"CVE-2024-45293": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-611",
+"epss": 0.02799,
+"epss_pct": 0.8546,
+"name": "TablePress < 2.4.3 - XXE Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45293.yaml"
+},
+"CVE-2024-45309": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.24531,
+"epss_pct": 0.97717,
+"name": "OneDev.io < 11.0.9 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45309.yaml"
+},
+"CVE-2024-45388": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-20",
+"epss": 0.5585,
+"epss_pct": 0.98968,
+"name": "Hoverfly < 1.10.3 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45388.yaml"
+},
+"CVE-2024-45409": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-347",
+"epss": 0.10684,
+"epss_pct": 0.95483,
+"name": "GitLab - SAML Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-45409.yaml"
+},
+"CVE-2024-45440": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-209",
+"epss": 0.09269,
+"epss_pct": 0.94996,
+"name": "Drupal 11.x-dev - Full Path Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45440.yaml"
+},
+"CVE-2024-45488": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.50603,
+"epss_pct": 0.98833,
+"name": "SafeGuard for Privileged Passwords < 7.5.2 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45488.yaml"
+},
+"CVE-2024-45507": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.93229,
+"epss_pct": 0.99827,
+"name": "Apache OFBiz - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45507.yaml"
+},
+"CVE-2024-45519": {
+"epss": 0.99907,
+"epss_pct": 0.99965,
+"name": "Zimbra Collaboration Suite < 9.0.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2024/CVE-2024-45519.yaml"
+},
+"CVE-2024-45591": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.03417,
+"epss_pct": 0.88049,
+"name": "XWiki Platform - Unauthorized Document History Access",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45591.yaml"
+},
+"CVE-2024-45622": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.36679,
+"epss_pct": 0.98387,
+"name": "ASIS - SQL Injection Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45622.yaml"
+},
+"CVE-2024-4577": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99987,
+"epss_pct": 0.99983,
+"name": "PHP CGI - Argument Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4577.yaml"
+},
+"CVE-2024-4620": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.03345,
+"epss_pct": 0.87811,
+"name": "ArForms < 6.6 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4620.yaml"
+},
+"CVE-2024-46310": {
+"epss": 0.02482,
+"epss_pct": 0.83443,
+"name": "FXServer < v9601 - Information Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46310.yaml"
+},
+"CVE-2024-46506": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.62045,
+"epss_pct": 0.99114,
+"name": "NetAlertX 23.01.14\u201324.x < 24.10.12 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46506.yaml"
+},
+"CVE-2024-46507": {
+"name": "Yeti Platform < 2.1.12 - Server-Side Template Injection to RCE",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46507.yaml"
+},
+"CVE-2024-46627": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-284",
+"epss": 0.04099,
+"epss_pct": 0.9002,
+"name": "DATAGERRY - REST API Auth Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46627.yaml"
+},
+"CVE-2024-46938": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.46063,
+"epss_pct": 0.98719,
+"name": "Sitecore Experience Platform <= 10.4 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46938.yaml"
+},
+"CVE-2024-46986": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.37358,
+"epss_pct": 0.98418,
+"name": "Camaleon CMS < 2.8.1 Arbitrary File Write to RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46986.yaml"
+},
+"CVE-2024-47062": {
+"epss": 0.04457,
+"epss_pct": 0.9074,
+"name": "Navidrome < 0.53.0 - Authenticated SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-47062.yaml"
+},
+"CVE-2024-47073": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-347",
+"epss": 0.0125,
+"epss_pct": 0.67316,
+"name": "DataEase v2.10.2 - JWT Signature Verification Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-47073.yaml"
+},
+"CVE-2024-47176": {
+"cvss": 8.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
+"cwe": "CWE-1327",
+"epss": 0.50605,
+"epss_pct": 0.98833,
+"name": "CUPS - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2024/CVE-2024-47176.yaml"
+},
+"CVE-2024-47308": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
+"cwe": "CWE-862",
+"epss": 0.01744,
+"epss_pct": 0.76167,
+"name": "Templately <= 3.1.2 - Broken Access Control",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-47308.yaml"
+},
+"CVE-2024-47374": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.0138,
+"epss_pct": 0.70189,
+"name": "LiteSpeed Cache <= 6.5.0.2 - Stored XSS",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-47374.yaml"
+},
+"CVE-2024-47533": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.04003,
+"epss_pct": 0.89809,
+"name": "Cobbler 'XML-RPC' - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-47533.yaml"
+},
+"CVE-2024-47575": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.9495,
+"epss_pct": 0.99854,
+"name": "FortiManager Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-47575.yaml"
+},
+"CVE-2024-48208": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
+"cwe": "CWE-125",
+"epss": 0.01575,
+"epss_pct": 0.73698,
+"name": "Pure-FTPd < 1.0.52 - Buffer Overflow",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2024/CVE-2024-48208.yaml"
+},
+"CVE-2024-48248": {
+"epss": 0.94356,
+"epss_pct": 0.99845,
+"name": "NAKIVO Backup and Replication Solution - Unauthenticated Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48248.yaml"
+},
+"CVE-2024-48259": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-89",
+"epss": 0.00907,
+"epss_pct": 0.57406,
+"name": "Cloudlog - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48259.yaml"
+},
+"CVE-2024-48307": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.44349,
+"epss_pct": 0.98666,
+"name": "JeecgBoot v3.7.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48307.yaml"
+},
+"CVE-2024-4836": {
+"epss": 0.02651,
+"epss_pct": 0.8456,
+"name": "Edito CMS - Sensitive Data Leak",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4836.yaml"
+},
+"CVE-2024-48360": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.03939,
+"epss_pct": 0.89646,
+"name": "Qualitor <= v8.24 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48360.yaml"
+},
+"CVE-2024-4841": {
+"cvss": 4.0,
+"cvss_vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-29",
+"epss": 0.00668,
+"epss_pct": 0.49409,
+"name": "LoLLMS WebUI - Subfolder Prediction via Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4841.yaml"
+},
+"CVE-2024-48455": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.06427,
+"epss_pct": 0.93209,
+"name": "Netis Wifi Router - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48455.yaml"
+},
+"CVE-2024-48651": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-863",
+"epss": 0.02204,
+"epss_pct": 0.81311,
+"name": "ProFTPD \u2264 1.3.8b - Privilege Escalation via mod_sql",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2024/CVE-2024-48651.yaml"
+},
+"CVE-2024-48766": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.69697,
+"epss_pct": 0.99317,
+"name": "NetAlert X - Arbitary File Read",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48766.yaml"
+},
+"CVE-2024-4879": {
+"epss": 0.99976,
+"epss_pct": 0.99979,
+"name": "ServiceNow UI Macros - Template Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4879.yaml"
+},
+"CVE-2024-4885": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.99288,
+"epss_pct": 0.99935,
+"name": "Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4885.yaml"
+},
+"CVE-2024-48914": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
+"cwe": "CWE-20",
+"epss": 0.60416,
+"epss_pct": 0.99076,
+"name": "Vendure - Arbitrary File Read",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48914.yaml"
+},
+"CVE-2024-4898": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.04156,
+"epss_pct": 0.90147,
+"name": "WordPress InstaWP Connect <= 0.1.0.38 - Unauthenticated User Creation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4898.yaml"
+},
+"CVE-2024-49357": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.23843,
+"epss_pct": 0.97657,
+"name": "ZimaOS <= v1.2.4 - Sensitive Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-49357.yaml"
+},
+"CVE-2024-49380": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.02705,
+"epss_pct": 0.84893,
+"name": "Plenti < v0.7.2 - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-49380.yaml"
+},
+"CVE-2024-4940": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01021,
+"epss_pct": 0.60997,
+"name": "Gradio - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4940.yaml"
+},
+"CVE-2024-4956": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.18245,
+"epss_pct": 0.97006,
+"name": "Sonatype Nexus Repository Manager 3 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4956.yaml"
+},
+"CVE-2024-49757": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.02518,
+"epss_pct": 0.837,
+"name": "Zitadel - User Registration Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-49757.yaml"
+},
+"CVE-2024-50334": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-288",
+"epss": 0.01035,
+"epss_pct": 0.61463,
+"name": "Scoold < 1.64.0 - Authentication Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50334.yaml"
+},
+"CVE-2024-50340": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-74",
+"epss": 0.6322,
+"epss_pct": 0.99145,
+"name": "Symfony Profiler - Remote Access via Injected Arguments",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50340.yaml"
+},
+"CVE-2024-50477": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.08184,
+"epss_pct": 0.9446,
+"name": "WordPress Stacks Mobile App Builder <=5.2.3 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50477.yaml"
+},
+"CVE-2024-50498": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.53135,
+"epss_pct": 0.98901,
+"name": "WP Query Console <= 1.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50498.yaml"
+},
+"CVE-2024-5057": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02588,
+"epss_pct": 0.84161,
+"name": "WordPress Easy Digital Downloads <= 3.2.12 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5057.yaml"
+},
+"CVE-2024-50603": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.98545,
+"epss_pct": 0.99919,
+"name": "Aviatrix Controller - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50603.yaml"
+},
+"CVE-2024-50623": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.98607,
+"epss_pct": 0.9992,
+"name": "Cleo Harmony < 5.8.0.21 - Arbitary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50623.yaml"
+},
+"CVE-2024-5082": {
+"epss": 0.01943,
+"epss_pct": 0.78711,
+"name": "Nexus Repository 2 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5082.yaml"
+},
+"CVE-2024-5084": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.50653,
+"epss_pct": 0.98834,
+"name": "Hash Form <= 1.1.0 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5084.yaml"
+},
+"CVE-2024-50857": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01216,
+"epss_pct": 0.66441,
+"name": "GestioIP - Reflected Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50857.yaml"
+},
+"CVE-2024-50967": {
+"cwe": "CWE-200",
+"epss": 0.01677,
+"epss_pct": 0.75225,
+"name": "DATAGERRY - Improper Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50967.yaml"
+},
+"CVE-2024-51211": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02256,
+"epss_pct": 0.81719,
+"name": "openSIS Classic v9.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51211.yaml"
+},
+"CVE-2024-51228": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.0379,
+"epss_pct": 0.8921,
+"name": "TOTOLINK CX-A3002RU - Remote Code Execution",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51228.yaml"
+},
+"CVE-2024-51378": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.94734,
+"epss_pct": 0.99852,
+"name": "CyberPanel - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51378.yaml"
+},
+"CVE-2024-51482": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.34979,
+"epss_pct": 0.98318,
+"name": "ZoneMinder v1.37.* <= 1.37.64 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51482.yaml"
+},
+"CVE-2024-51483": {
+"cwe": "CWE-22",
+"epss": 0.02274,
+"epss_pct": 0.81865,
+"name": "Changedetection.io <= 0.47.4 - Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51483.yaml"
+},
+"CVE-2024-51567": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.86518,
+"epss_pct": 0.99723,
+"name": "CyberPanel v2.3.6 Pre-Auth Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51567.yaml"
+},
+"CVE-2024-51568": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.4546,
+"epss_pct": 0.98701,
+"name": "CyberPanel - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51568.yaml"
+},
+"CVE-2024-51739": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01232,
+"epss_pct": 0.66864,
+"name": "iTop - User Enumeration via REST Endpoint",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51739.yaml"
+},
+"CVE-2024-51977": {
+"epss": 0.72618,
+"epss_pct": 0.99401,
+"name": "Brother MFC-L9570CDW - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51977.yaml"
+},
+"CVE-2024-51978": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-1391",
+"epss": 0.18699,
+"epss_pct": 0.97062,
+"name": "Brother Printers \u2013 Authentication Bypass via Default Admin Password",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51978.yaml"
+},
+"CVE-2024-5217": {
+"epss": 0.99628,
+"epss_pct": 0.99947,
+"name": "ServiceNow - Incomplete Input Validation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5217.yaml"
+},
+"CVE-2024-5230": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.18768,
+"epss_pct": 0.9707,
+"name": "FleetCart 4.1.1 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5230.yaml"
+},
+"CVE-2024-52433": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.03049,
+"epss_pct": 0.86611,
+"name": "My Geo Posts Free <= 1.2 - PHP Object Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-52433.yaml"
+},
+"CVE-2024-5276": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.90067,
+"epss_pct": 0.99785,
+"name": "Fortra FileCatalyst Workflow <= v5.1.6 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5276.yaml"
+},
+"CVE-2024-52762": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00736,
+"epss_pct": 0.51948,
+"name": "Ganglia Web Interface (v3.7.3 - v3.7.6) - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-52762.yaml"
+},
+"CVE-2024-52763": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00615,
+"epss_pct": 0.47021,
+"name": "Ganglia Web Interface (v3.7.3 - v3.7.5) - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-52763.yaml"
+},
+"CVE-2024-52875": {
+"cwe": "CWE-74",
+"epss": 0.29558,
+"epss_pct": 0.98054,
+"name": "Kerio Control v9.2.5 - CRLF Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-52875.yaml"
+},
+"CVE-2024-5315": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-89",
+"epss": 0.34522,
+"epss_pct": 0.98299,
+"name": "Dolibarr ERP CMS `list.php` - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5315.yaml"
+},
+"CVE-2024-5333": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-639",
+"epss": 0.01092,
+"epss_pct": 0.63066,
+"name": "WordPress Events Calendar 6.8.2.1 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5333.yaml"
+},
+"CVE-2024-5334": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-73",
+"epss": 0.02073,
+"epss_pct": 0.80116,
+"name": "Devika - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5334.yaml"
+},
+"CVE-2024-53704": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.95132,
+"epss_pct": 0.99858,
+"name": "SSL VPN Session Hijacking",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-53704.yaml"
+},
+"CVE-2024-53900": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-89",
+"epss": 0.03988,
+"epss_pct": 0.89772,
+"name": "Mongoose < 8.8.3 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-53900.yaml"
+},
+"CVE-2024-53991": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.26788,
+"epss_pct": 0.97882,
+"name": "Discourse Backup File Disclosure Via Default Nginx Configuration",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-53991.yaml"
+},
+"CVE-2024-53995": {
+"cvss": 4.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.0097,
+"epss_pct": 0.59447,
+"name": "SickChill - Open Redirect",
+"severity": "low",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-53995.yaml"
+},
+"CVE-2024-5420": {
+"cvss": 8.3,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L",
+"cwe": "CWE-79",
+"epss": 0.055,
+"epss_pct": 0.92223,
+"name": "SEH utnserver Pro/ProMAX/INU-100 20.1.22 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5420.yaml"
+},
+"CVE-2024-5421": {
+"cvss": 8.7,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L",
+"cwe": "CWE-78",
+"epss": 0.03692,
+"epss_pct": 0.88919,
+"name": "SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5421.yaml"
+},
+"CVE-2024-54330": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.01461,
+"epss_pct": 0.71731,
+"name": "Hurrakify <= 2.4 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-54330.yaml"
+},
+"CVE-2024-54385": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.05213,
+"epss_pct": 0.91912,
+"name": "Radio Player <= 2.0.82 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-54385.yaml"
+},
+"CVE-2024-54763": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-284",
+"epss": 0.00768,
+"epss_pct": 0.5302,
+"name": "ipTIME A2004 - Unauthorized Access",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-54763.yaml"
+},
+"CVE-2024-54764": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-284",
+"epss": 0.01035,
+"epss_pct": 0.61463,
+"name": "ipTIME A2004 - Unauthorized Access",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-54764.yaml"
+},
+"CVE-2024-54767": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-203",
+"epss": 0.01823,
+"epss_pct": 0.77249,
+"name": "AVM FRITZ!Box 7530 AX - Unauthorized Access",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-54767.yaml"
+},
+"CVE-2024-5483": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01008,
+"epss_pct": 0.60632,
+"name": "LearnPress < 4.2.6.8.1 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5483.yaml"
+},
+"CVE-2024-5488": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.03744,
+"epss_pct": 0.89074,
+"name": "SEOPress < 7.9 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5488.yaml"
+},
+"CVE-2024-55218": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00699,
+"epss_pct": 0.50607,
+"name": "IceWarp Server 10.2.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55218.yaml"
+},
+"CVE-2024-5522": {
+"cvss": 9.8,
+"cwe": "CWE-89",
+"epss": 0.02618,
+"epss_pct": 0.84355,
+"name": "WordPress HTML5 Video Player < 2.5.27 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5522.yaml"
+},
+"CVE-2024-55415": {
+"epss": 0.15543,
+"epss_pct": 0.96575,
+"name": "DevDojo Voyager <=1.8.0 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55415.yaml"
+},
+"CVE-2024-55416": {
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N",
+"epss": 0.20273,
+"epss_pct": 0.97287,
+"name": "DevDojo Voyager <=1.8.0 - Cross-Site Scripting",
+"severity": "low",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55416.yaml"
+},
+"CVE-2024-55417": {
+"epss": 0.13066,
+"epss_pct": 0.96067,
+"name": "DevDojo Voyager <= 1.8.0 - Arbitrary File Write vulnerability",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55417.yaml"
+},
+"CVE-2024-55457": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-22",
+"epss": 0.03059,
+"epss_pct": 0.86666,
+"name": "MasterSAM Star Gate v11 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55457.yaml"
+},
+"CVE-2024-55550": {
+"cvss": 4.4,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.37848,
+"epss_pct": 0.98438,
+"name": "Mitel MiCollab - Arbitary File Read",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55550.yaml"
+},
+"CVE-2024-55556": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.44126,
+"epss_pct": 0.9866,
+"name": "InvoiceShelf <= 1.3.0 - PHP Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-55556.yaml"
+},
+"CVE-2024-55591": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.98259,
+"epss_pct": 0.99911,
+"name": "Fortinet - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55591.yaml"
+},
+"CVE-2024-55890": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-95",
+"epss": 0.02303,
+"epss_pct": 0.82114,
+"name": "D-Tale <= 3.16.0 - Pre-Auth RCE via Pandas Query Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55890.yaml"
+},
+"CVE-2024-55956": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-276",
+"epss": 0.94037,
+"epss_pct": 0.99839,
+"name": "Cleo Harmony < 5.8.0.24 - File Upload Vulnerability",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55956.yaml"
+},
+"CVE-2024-56064": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.30783,
+"epss_pct": 0.98114,
+"name": "WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload to RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-56064.yaml"
+},
+"CVE-2024-56145": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+"cwe": "CWE-94",
+"epss": 0.97446,
+"epss_pct": 0.99894,
+"name": "Craft CMS - Remote Code Execution via Template Path Manipulation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-56145.yaml"
+},
+"CVE-2024-56159": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-219",
+"epss": 0.01495,
+"epss_pct": 0.72358,
+"name": "Astro - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-56159.yaml"
+},
+"CVE-2024-56325": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-288",
+"epss": 0.79369,
+"epss_pct": 0.99572,
+"name": "Apache Pinot < 1.3.0 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-56325.yaml"
+},
+"CVE-2024-56331": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.01829,
+"epss_pct": 0.77319,
+"name": "Uptime-Kuma - Local File Inclusion (LFI)",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-56331.yaml"
+},
+"CVE-2024-56511": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-289",
+"epss": 0.44458,
+"epss_pct": 0.9867,
+"name": "DataEase < 2.10.4 - Authentication Bypass via Whitelist Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-56511.yaml"
+},
+"CVE-2024-56512": {
+"epss": 0.0313,
+"epss_pct": 0.86951,
+"name": "Apache NiFi - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-56512.yaml"
+},
+"CVE-2024-57045": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-200",
+"epss": 0.32222,
+"epss_pct": 0.98194,
+"name": "D-Link DIR-859 - Information Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57045.yaml"
+},
+"CVE-2024-57046": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.02084,
+"epss_pct": 0.80222,
+"name": "Netgear DGN2200 - Improper Authentication",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57046.yaml"
+},
+"CVE-2024-57049": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.03211,
+"epss_pct": 0.86579,
+"name": "TP-Link Archer C20 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57049.yaml"
+},
+"CVE-2024-57241": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.01135,
+"epss_pct": 0.6422,
+"name": "DedeCMS - Open Redirect via download.php",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57241.yaml"
+},
+"CVE-2024-57514": {
+"cvss": 4.8,
+"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00885,
+"epss_pct": 0.56727,
+"name": "TP-Link Archer A20 v3 Router - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57514.yaml"
+},
+"CVE-2024-5765": {
+"cwe": "CWE-89",
+"epss": 0.27232,
+"epss_pct": 0.97911,
+"name": "WpStickyBar <= 2.1.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5765.yaml"
+},
+"CVE-2024-57726": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.66601,
+"epss_pct": 0.9923,
+"name": "SimpleHelp <= 5.5.7 - Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57726.yaml"
+},
+"CVE-2024-57727": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.95151,
+"epss_pct": 0.99859,
+"name": "SimpleHelp <= 5.5.7 - Unauthenticated Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57727.yaml"
+},
+"CVE-2024-58136": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.8464,
+"epss_pct": 0.99688,
+"name": "Yii2 PHP Framework < 2.0.52 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-58136.yaml"
+},
+"CVE-2024-5827": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.03424,
+"epss_pct": 0.88069,
+"name": "Vanna - SQL injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5827.yaml"
+},
+"CVE-2024-5910": {
+"cvss": 9.3,
+"cwe": "CWE-306",
+"epss": 0.91783,
+"epss_pct": 0.99808,
+"name": "Palo Alto Expedition - Admin Account Takeover",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5910.yaml"
+},
+"CVE-2024-5932": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.74283,
+"epss_pct": 0.9945,
+"name": "GiveWP - PHP Object Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5932.yaml"
+},
+"CVE-2024-5936": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.30074,
+"epss_pct": 0.9808,
+"name": "PrivateGPT < 0.5.0 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5936.yaml"
+},
+"CVE-2024-5947": {
+"epss": 0.02418,
+"epss_pct": 0.82993,
+"name": "Deep Sea Electronics DSE855 - Authentication Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5947.yaml"
+},
+"CVE-2024-5975": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"epss": 0.01958,
+"epss_pct": 0.78873,
+"name": "CZ Loan Management <= 1.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5975.yaml"
+},
+"CVE-2024-6028": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.11755,
+"epss_pct": 0.95764,
+"name": "Quiz Maker <= 6.5.8.3 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6028.yaml"
+},
+"CVE-2024-6049": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-32",
+"epss": 0.04235,
+"epss_pct": 0.90317,
+"name": "Lawo AG vsm LTC Time Sync (vTimeSync) - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6049.yaml"
+},
+"CVE-2024-6095": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.0265,
+"epss_pct": 0.84555,
+"name": "LocalAI - Partial Local File Read",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6095.yaml"
+},
+"CVE-2024-6159": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.02758,
+"epss_pct": 0.85214,
+"name": "Push Notification for Post and BuddyPress <= 1.93 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6159.yaml"
+},
+"CVE-2024-6188": {
+"epss": 0.02036,
+"epss_pct": 0.7972,
+"name": "TrakSYS 11.x.x - Sensitive Data Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6188.yaml"
+},
+"CVE-2024-6205": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04134,
+"epss_pct": 0.90104,
+"name": "PayPlus Payment Gateway < 6.6.9 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6205.yaml"
+},
+"CVE-2024-6220": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.35708,
+"epss_pct": 0.98345,
+"name": "WordPress Keydatas \u2264 2.5.2 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6220.yaml"
+},
+"CVE-2024-6235": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.21168,
+"epss_pct": 0.97407,
+"name": "NetScaler Console - Sensitive Information Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6235.yaml"
+},
+"CVE-2024-6250": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-36",
+"epss": 0.01941,
+"epss_pct": 0.7869,
+"name": "LOLLMS WebUI - Absolute Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6250.yaml"
+},
+"CVE-2024-6265": {
+"name": "UsersWP <= 1.2.10 - Unauthenticated SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6265.yaml"
+},
+"CVE-2024-6289": {
+"epss": 0.00904,
+"epss_pct": 0.57293,
+"name": "WPS Hide Login < 1.9.16.4 - Hidden Login Page Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6289.yaml"
+},
+"CVE-2024-6366": {
+"epss": 0.28993,
+"epss_pct": 0.98023,
+"name": "User Profile Builder < 3.11.8 - File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6366.yaml"
+},
+"CVE-2024-6396": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-29",
+"epss": 0.53113,
+"epss_pct": 0.989,
+"name": "Aimhubio Aim Server 3.19.3 - Arbitrary File Overwrite",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6396.yaml"
+},
+"CVE-2024-6420": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
+"epss": 0.018,
+"epss_pct": 0.76932,
+"name": "Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6420.yaml"
+},
+"CVE-2024-6460": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.04826,
+"epss_pct": 0.91353,
+"name": "WordPress Grow by Tradedoubler Plugin < 2.0.22 - Unauthenticated Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6460.yaml"
+},
+"CVE-2024-6517": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00665,
+"epss_pct": 0.49296,
+"name": "Contact Form 7 Math Captcha <= 2.0.1 - Cross-site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6517.yaml"
+},
+"CVE-2024-6555": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.00927,
+"epss_pct": 0.58004,
+"name": "WP Popups - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6555.yaml"
+},
+"CVE-2024-6569": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.00856,
+"epss_pct": 0.55846,
+"name": "Campaign Monitor for WordPress - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6569.yaml"
+},
+"CVE-2024-6586": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
+"cwe": "CWE-201",
+"epss": 0.01933,
+"epss_pct": 0.78599,
+"name": "Lightdash v0.1024.6 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6586.yaml"
+},
+"CVE-2024-6587": {
+"epss": 0.35316,
+"epss_pct": 0.98329,
+"name": "LiteLLM - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6587.yaml"
+},
+"CVE-2024-6646": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.45681,
+"epss_pct": 0.98707,
+"name": "Netgear-WN604 downloadFile.php - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6646.yaml"
+},
+"CVE-2024-6651": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
+"cwe": "CWE-79",
+"epss": 0.15012,
+"epss_pct": 0.96467,
+"name": "WordPress File Upload Plugin < 4.24.8 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6651.yaml"
+},
+"CVE-2024-6670": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.93,
+"epss_pct": 0.99824,
+"name": "WhatsUp Gold HasErrors SQL Injection - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6670.yaml"
+},
+"CVE-2024-6671": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.18988,
+"epss_pct": 0.97097,
+"name": "WhatsUp Gold GetStatisticalMonitorList SQL Injection - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6671.yaml"
+},
+"CVE-2024-6690": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.0052,
+"epss_pct": 0.42114,
+"name": "WP Content Copy Protection & No Right Click - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6690.yaml"
+},
+"CVE-2024-6746": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-24",
+"epss": 0.03305,
+"epss_pct": 0.8767,
+"name": "EasySpider 0.6.2 - Arbitrary File Read",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6746.yaml"
+},
+"CVE-2024-6753": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00822,
+"epss_pct": 0.54781,
+"name": "Social Auto Poster <= 5.3.14 - Stored Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6753.yaml"
+},
+"CVE-2024-6781": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.62442,
+"epss_pct": 0.99123,
+"name": "Calibre <= 7.14.0 Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6781.yaml"
+},
+"CVE-2024-6782": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-863",
+"epss": 0.84116,
+"epss_pct": 0.99675,
+"name": "Calibre <= 7.14.0 Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6782.yaml"
+},
+"CVE-2024-6842": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.31102,
+"epss_pct": 0.98136,
+"name": "AnythingLLM - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6842.yaml"
+},
+"CVE-2024-6845": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.01104,
+"epss_pct": 0.63445,
+"name": "SmartSearchWP < 2.4.6 - OpenAI Key Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6845.yaml"
+},
+"CVE-2024-6846": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"epss": 0.01252,
+"epss_pct": 0.67351,
+"name": "SmartSearchWP <= 2.4.4 - Unauthenticated Log Purge",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6846.yaml"
+},
+"CVE-2024-6886": {
+"cvss": 6.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L",
+"cwe": "CWE-79",
+"epss": 0.32968,
+"epss_pct": 0.98236,
+"name": "Gitea 1.22.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6886.yaml"
+},
+"CVE-2024-6892": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"epss": 0.0075,
+"epss_pct": 0.52408,
+"name": "Journyx 11.5.4 - Reflected Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6892.yaml"
+},
+"CVE-2024-6893": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-611",
+"epss": 0.32916,
+"epss_pct": 0.98233,
+"name": "Journyx - XML External Entities Injection (XXE)",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6893.yaml"
+},
+"CVE-2024-6911": {
+"cvss": 8.7,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
+"cwe": "CWE-552",
+"epss": 0.04944,
+"epss_pct": 0.91538,
+"name": "PerkinElmer ProcessPlus <= 1.11.6507.0 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6911.yaml"
+},
+"CVE-2024-6922": {
+"epss": 0.30172,
+"epss_pct": 0.98087,
+"name": "Automation Anywhere Automation 360 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6922.yaml"
+},
+"CVE-2024-6924": {
+"epss": 0.03292,
+"epss_pct": 0.87622,
+"name": "TrueBooker <= 1.0.2 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6924.yaml"
+},
+"CVE-2024-6926": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.03292,
+"epss_pct": 0.87622,
+"name": "Viral Signup <= 2.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6926.yaml"
+},
+"CVE-2024-6928": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.03292,
+"epss_pct": 0.87622,
+"name": "Opti Marketing <= 2.0.9 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6928.yaml"
+},
+"CVE-2024-7008": {
+"epss": 0.25607,
+"epss_pct": 0.97806,
+"name": "Calibre <= 7.15.0 - Reflected Cross-Site Scripting (XSS)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7008.yaml"
+},
+"CVE-2024-7029": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.38739,
+"epss_pct": 0.98475,
+"name": "AVTECH IP Camera - Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7029.yaml"
+},
+"CVE-2024-7097": {
+"epss": 0.00665,
+"epss_pct": 0.49273,
+"name": "WSO2 User Registration - Arbitrary Account Creation",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7097.yaml"
+},
+"CVE-2024-7120": {
+"cvss": 6.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-78",
+"epss": 0.934,
+"epss_pct": 0.99832,
+"name": "Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90 - Command Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7120.yaml"
+},
+"CVE-2024-7188": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-89",
+"epss": 0.07016,
+"epss_pct": 0.93705,
+"name": "Bylancer Quicklancer 2.4 G - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7188.yaml"
+},
+"CVE-2024-7313": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01551,
+"epss_pct": 0.73337,
+"name": "Shield Security Plugin < 20.0.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7313.yaml"
+},
+"CVE-2024-7314": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-280",
+"epss": 0.51468,
+"epss_pct": 0.98858,
+"name": "AJ-Report < 1.4.1 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7314.yaml"
+},
+"CVE-2024-7332": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-259",
+"epss": 0.20737,
+"epss_pct": 0.97357,
+"name": "TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnerability",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7332.yaml"
+},
+"CVE-2024-7339": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.32028,
+"epss_pct": 0.98183,
+"name": "TVT DVR Sensitive Device - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7339.yaml"
+},
+"CVE-2024-7340": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.05015,
+"epss_pct": 0.91641,
+"name": "W&B Weave Server - Remote Arbitrary File Leak",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7340.yaml"
+},
+"CVE-2024-7354": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00702,
+"epss_pct": 0.50738,
+"name": "Ninja Forms 3.8.6-3.8.10 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7354.yaml"
+},
+"CVE-2024-7399": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.91941,
+"epss_pct": 0.9981,
+"name": "Samsung MagicINFO 9 Server 21.1050.0 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7399.yaml"
+},
+"CVE-2024-7591": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.43844,
+"epss_pct": 0.98651,
+"name": "Kemp LoadMaster Load Balancer - Unauthenticated Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7591.yaml"
+},
+"CVE-2024-7593": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.9999,
+"epss_pct": 0.99984,
+"name": "Ivanti vTM - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7593.yaml"
+},
+"CVE-2024-7714": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-284",
+"epss": 0.00848,
+"epss_pct": 0.55568,
+"name": "AI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX Calls",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7714.yaml"
+},
+"CVE-2024-7786": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.01745,
+"epss_pct": 0.76184,
+"name": "Sensei LMS < 4.24.2 - Email Template Leak",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7786.yaml"
+},
+"CVE-2024-7854": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.04317,
+"epss_pct": 0.90471,
+"name": "Woo Inquiry <= 0.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7854.yaml"
+},
+"CVE-2024-7928": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.16882,
+"epss_pct": 0.96824,
+"name": "FastAdmin < V1.3.4.20220530 - Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7928.yaml"
+},
+"CVE-2024-7954": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-284",
+"epss": 0.90053,
+"epss_pct": 0.99785,
+"name": "SPIP Porte Plume Plugin - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7954.yaml"
+},
+"CVE-2024-8021": {
+"epss": 0.00731,
+"epss_pct": 0.51782,
+"name": "Gradio - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8021.yaml"
+},
+"CVE-2024-8181": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
+"epss": 0.4505,
+"epss_pct": 0.98689,
+"name": "Flowise <= 1.8.2 Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8181.yaml"
+},
+"CVE-2024-8252": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-98",
+"name": "WordPress Clean Login <= 1.14.5 Authenticated (Contributor+) - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8252.yaml"
+},
+"CVE-2024-8353": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.2872,
+"epss_pct": 0.98002,
+"name": "GiveWP Donation Plugin <= 3.16.1 - Unauthenticated PHP Object Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8353.yaml"
+},
+"CVE-2024-8425": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.04082,
+"epss_pct": 0.89983,
+"name": "WooCommerce Ultimate Gift Card \u2264 2.6.0 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8425.yaml"
+},
+"CVE-2024-8484": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.03792,
+"epss_pct": 0.8922,
+"name": "REST API TO MiniProgram <= 4.7.1 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8484.yaml"
+},
+"CVE-2024-8503": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.8023,
+"epss_pct": 0.99587,
+"name": "VICIdial - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8503.yaml"
+},
+"CVE-2024-8517": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-646",
+"epss": 0.94614,
+"epss_pct": 0.99848,
+"name": "SPIP BigUp Plugin - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8517.yaml"
+},
+"CVE-2024-8522": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.62882,
+"epss_pct": 0.99134,
+"name": "LearnPress < 4.2.7.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8522.yaml"
+},
+"CVE-2024-8529": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.11831,
+"epss_pct": 0.95787,
+"name": "LearnPress < 4.2.7.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8529.yaml"
+},
+"CVE-2024-8625": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02323,
+"epss_pct": 0.82272,
+"name": "WordPress TS Poll < 2.4.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8625.yaml"
+},
+"CVE-2024-8673": {
+"cvss": 3.5,
+"cwe": "CWE-79",
+"epss": 0.01792,
+"epss_pct": 0.76824,
+"name": "Z-Downloads < 1.11.7 - Cross-Site Scripting",
+"severity": "low",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8673.yaml"
+},
+"CVE-2024-8698": {
+"cvss": 7.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L",
+"cwe": "CWE-347",
+"epss": 0.0203,
+"epss_pct": 0.79663,
+"name": "Keycloak - SAML Core Package Signature Validation Flaw",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8698.yaml"
+},
+"CVE-2024-8752": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.11759,
+"epss_pct": 0.95765,
+"name": "WebIQ 2.15.9 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8752.yaml"
+},
+"CVE-2024-8852": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-532",
+"epss": 0.01207,
+"epss_pct": 0.66159,
+"name": "All-in-One WP Migration < 7.87 - Unauthenticated Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8852.yaml"
+},
+"CVE-2024-8856": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.94004,
+"epss_pct": 0.99838,
+"name": "WP Time Capsule Plugin - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8856.yaml"
+},
+"CVE-2024-8859": {
+"epss": 0.02669,
+"epss_pct": 0.84684,
+"name": "Mlflow < 2.17.0 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8859.yaml"
+},
+"CVE-2024-8877": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.77265,
+"epss_pct": 0.99519,
+"name": "Riello Netman 204 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8877.yaml"
+},
+"CVE-2024-8883": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
+"cwe": "CWE-601",
+"epss": 0.02076,
+"epss_pct": 0.8014,
+"name": "Keycloak - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8883.yaml"
+},
+"CVE-2024-8911": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02904,
+"epss_pct": 0.85986,
+"name": "LatePoint <= 5.0.11 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8911.yaml"
+},
+"CVE-2024-8943": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.0308,
+"epss_pct": 0.86739,
+"name": "LatePoint <= 5.0.12 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8943.yaml"
+},
+"CVE-2024-8963": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-22",
+"epss": 0.98607,
+"epss_pct": 0.9992,
+"name": "Ivanti Cloud Services Appliance - Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8963.yaml"
+},
+"CVE-2024-9007": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01006,
+"epss_pct": 0.60571,
+"name": "123Solar 1.8.4.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9007.yaml"
+},
+"CVE-2024-9014": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-522",
+"epss": 0.09685,
+"epss_pct": 0.95153,
+"name": "pgAdmin 4 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9014.yaml"
+},
+"CVE-2024-9047": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.93339,
+"epss_pct": 0.99831,
+"name": "WordPress File Upload <= 4.24.11 - Arbitrary File Read",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9047.yaml"
+},
+"CVE-2024-9061": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-94",
+"epss": 0.52266,
+"epss_pct": 0.98877,
+"name": "WP Popup Builder Popup Forms and Marketing Lead Generation <= 1.3.5 - Arbitrary Shortcode Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9061.yaml"
+},
+"CVE-2024-9161": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
+"cwe": "CWE-862",
+"epss": 0.02131,
+"epss_pct": 0.8066,
+"name": "Rank Math SEO < 1.0.229 - Unauthenticated User and Term Metadata Insert/Update/Deletion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9161.yaml"
+},
+"CVE-2024-9166": {
+"cwe": "CWE-78",
+"epss": 0.01578,
+"epss_pct": 0.73734,
+"name": "TitanNit Web Control 2.01/Atemio 7600 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9166.yaml"
+},
+"CVE-2024-9186": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.02291,
+"epss_pct": 0.82009,
+"name": "Automation By Autonami < 3.3.0 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9186.yaml"
+},
+"CVE-2024-9193": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-98",
+"epss": 0.03292,
+"epss_pct": 0.87621,
+"name": "WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9193.yaml"
+},
+"CVE-2024-9234": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.10446,
+"epss_pct": 0.95409,
+"name": "GutenKit <= 2.1.0 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9234.yaml"
+},
+"CVE-2024-9264": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.94864,
+"epss_pct": 0.99853,
+"name": "Grafana Post-Auth DuckDB - SQL Injection To File Read",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9264.yaml"
+},
+"CVE-2024-9362": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.04274,
+"epss_pct": 0.90392,
+"name": "Polyaxon - Unauthenticated Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9362.yaml"
+},
+"CVE-2024-9463": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/S",
+"cwe": "CWE-78",
+"epss": 0.98546,
+"epss_pct": 0.99919,
+"name": "PaloAlto Networks Expedition - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9463.yaml"
+},
+"CVE-2024-9465": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
+"cwe": "CWE-89",
+"epss": 0.99626,
+"epss_pct": 0.99946,
+"name": "Palo Alto Expedition - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9465.yaml"
+},
+"CVE-2024-9474": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.94701,
+"epss_pct": 0.9985,
+"name": "PAN-OS Management Web Interface - Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9474.yaml"
+},
+"CVE-2024-9487": {
+"epss": 0.25607,
+"epss_pct": 0.97806,
+"name": "GitHub Enterprise - SAML Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-9487.yaml"
+},
+"CVE-2024-9593": {
+"cvss": 8.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
+"cwe": "CWE-94",
+"epss": 0.12312,
+"epss_pct": 0.95898,
+"name": "Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9593.yaml"
+},
+"CVE-2024-9617": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-284",
+"epss": 0.0166,
+"epss_pct": 0.74969,
+"name": "Danswer - Insecure Direct Object Reference",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9617.yaml"
+},
+"CVE-2024-9643": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.03039,
+"epss_pct": 0.86575,
+"name": "Four-Faith F3x36 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9643.yaml"
+},
+"CVE-2024-9707": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.09078,
+"epss_pct": 0.9492,
+"name": "Hunk Companion <= 1.8.4 - Arbitrary Plugin Installation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9707.yaml"
+},
+"CVE-2024-9765": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.01554,
+"epss_pct": 0.73382,
+"name": "EKC Tournament Manager WordPress plugin - Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9765.yaml"
+},
+"CVE-2024-9772": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-94",
+"epss": 0.01458,
+"epss_pct": 0.7167,
+"name": "WordPress UIX Shortcodes <= 1.9.7 - Unauthenticated Shortcode Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9772.yaml"
+},
+"CVE-2024-9796": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02996,
+"epss_pct": 0.86393,
+"name": "WordPress WP-Advanced-Search <= 3.3.9 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9796.yaml"
+},
+"CVE-2024-9916": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-78",
+"epss": 0.73617,
+"epss_pct": 0.99429,
+"name": "HuangDou UTCMS V9 - OS Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9916.yaml"
+},
+"CVE-2024-9935": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.0749,
+"epss_pct": 0.94038,
+"name": "PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Arbitrary File Download",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9935.yaml"
+},
+"CVE-2024-9989": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-288",
+"epss": 0.0717,
+"epss_pct": 0.93831,
+"name": "Crypto <= 2.15 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9989.yaml"
+},
+"CVE-2025-0107": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.78532,
+"epss_pct": 0.99553,
+"name": "Palo Alto Networks Expedition - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0107.yaml"
+},
+"CVE-2025-0108": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.98455,
+"epss_pct": 0.99916,
+"name": "PAN-OS Management Interface - Path Confusion to Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0108.yaml"
+},
+"CVE-2025-0133": {
+"epss": 0.46401,
+"epss_pct": 0.98729,
+"name": "PAN-OS - Reflected Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0133.yaml"
+},
+"CVE-2025-0282": {
+"cvss": 9.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.99979,
+"epss_pct": 0.99979,
+"name": "Ivanti Connect Secure - Stack-based Buffer Overflow",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0282.yaml"
+},
+"CVE-2025-0520": {
+"cvss": 9.4,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L",
+"cwe": "CWE-434",
+"epss": 0.02547,
+"epss_pct": 0.83885,
+"name": "ShowDoc - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0520.yaml"
+},
+"CVE-2025-0674": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-288",
+"epss": 0.03583,
+"epss_pct": 0.88581,
+"name": "Elber ESE DVB-S/S2 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0674.yaml"
+},
+"CVE-2025-0868": {
+"epss": 0.16953,
+"epss_pct": 0.96838,
+"name": "DocsGPT - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0868.yaml"
+},
+"CVE-2025-10035": {
+"name": "GoAnywhere - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10035.yaml"
+},
+"CVE-2025-10090": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"epss": 0.01791,
+"epss_pct": 0.768,
+"name": "Jinher OA - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10090.yaml"
+},
+"CVE-2025-10162": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.03632,
+"epss_pct": 0.88723,
+"name": "WordPress OrderConvo < 14 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10162.yaml"
+},
+"CVE-2025-10204": {
+"cwe": "CWE-306",
+"name": "AC Smart II - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10204.yaml"
+},
+"CVE-2025-10210": {
+"cvss": 6.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-89",
+"epss": 0.01297,
+"epss_pct": 0.68362,
+"name": "ChanCMS <= 3.3.0 - SQL Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10210.yaml"
+},
+"CVE-2025-10211": {
+"cvss": 6.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-918",
+"epss": 0.00705,
+"epss_pct": 0.50816,
+"name": "ChanCMS <= 3.3.0 - Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10211.yaml"
+},
+"CVE-2025-1023": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02407,
+"epss_pct": 0.82906,
+"name": "ChurchCRM - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1023.yaml"
+},
+"CVE-2025-1025": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-434",
+"epss": 0.19493,
+"epss_pct": 0.97178,
+"name": "Cockpit < 2.4.1 - Arbitrary File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1025.yaml"
+},
+"CVE-2025-1035": {
+"cvss": 5.7,
+"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.09861,
+"epss_pct": 0.95216,
+"name": "KLog Server - Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1035.yaml"
+},
+"CVE-2025-10353": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.02482,
+"epss_pct": 0.83442,
+"name": "Melis Technology Melis Platform - Unrestricted File Upload & Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10353.yaml"
+},
+"CVE-2025-10897": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.01817,
+"epss_pct": 0.77166,
+"name": "WooCommerce Designer Pro <= 1.9.28 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10897.yaml"
+},
+"CVE-2025-1097": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.35534,
+"epss_pct": 0.98336,
+"name": "Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-tls-match-cn` Annotation",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1097.yaml"
+},
+"CVE-2025-1098": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.83498,
+"epss_pct": 0.99661,
+"name": "Ingress-Nginx Controller - Configuration Injection via Unsanitized Mirror Annotations",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1098.yaml"
+},
+"CVE-2025-11307": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-79",
+"epss": 0.01846,
+"epss_pct": 0.77538,
+"name": "WP Google Maps < 9.0.48 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11307.yaml"
+},
+"CVE-2025-11368": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.00976,
+"epss_pct": 0.59665,
+"name": "LearnPress < 4.3.0 - Arbitrary Callback Execution to Information Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11368.yaml"
+},
+"CVE-2025-11371": {
+"cvss": 6.2,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-552",
+"epss": 0.92094,
+"epss_pct": 0.99813,
+"name": "Gladinet CentreStack & TrioFox - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11371.yaml"
+},
+"CVE-2025-11580": {
+"name": "PowerJob List - Authorization Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11580.yaml"
+},
+"CVE-2025-11693": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-200",
+"epss": 0.02135,
+"epss_pct": 0.80706,
+"name": "Export WP Page to Static HTML <= 4.3.4 - Cookie Exposure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11693.yaml"
+},
+"CVE-2025-11700": {
+"name": "N-central - XML External Entities Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11700.yaml"
+},
+"CVE-2025-11749": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.74759,
+"epss_pct": 0.99466,
+"name": "WordPress AI Engine Plugin - Token Exposure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11749.yaml"
+},
+"CVE-2025-11750": {
+"name": "Dify - User Enumeration via \"Account not found\" Message",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11750.yaml"
+},
+"CVE-2025-11833": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.51005,
+"epss_pct": 0.98846,
+"name": "Post SMTP <= 3.6.0 - Email Log Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11833.yaml"
+},
+"CVE-2025-11953": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.9398,
+"epss_pct": 0.99838,
+"name": "React Native Community CLI - Unauthenticated OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11953.yaml"
+},
+"CVE-2025-12055": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.03572,
+"epss_pct": 0.88544,
+"name": "MPDV Mikrolab GmbH HYDRA X, MIP 2 & FEDRA 2 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-12055.yaml"
+},
+"CVE-2025-12101": {
+"name": "Citrix NetScaler ADC & Gateway - Reflected XSS / Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2025/CVE-2025-12101.yaml"
+},
+"CVE-2025-12139": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.02328,
+"epss_pct": 0.82314,
+"name": "Integrate Google Drive <= 1.5.3 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-12139.yaml"
+},
+"CVE-2025-1232": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-79",
+"epss": 0.01877,
+"epss_pct": 0.77931,
+"name": "Site Reviews < 7.2.5 - Unauthenticated Stored XSS",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1232.yaml"
+},
+"CVE-2025-12480": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.90532,
+"epss_pct": 0.99793,
+"name": "Triofox - Improper Access Control",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-12480.yaml"
+},
+"CVE-2025-12536": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.00797,
+"epss_pct": 0.53961,
+"name": "SureForms <= 1.13.1 - Sensitive Information Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-12536.yaml"
+},
+"CVE-2025-12841": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
+"cwe": "CWE-862",
+"epss": 0.00715,
+"epss_pct": 0.51209,
+"name": "WordPress Bookit < 2.5.1 - Unauthenticated Stripe Settings Update",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-12841.yaml"
+},
+"CVE-2025-1302": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.10395,
+"epss_pct": 0.95395,
+"name": "JSONPath Plus < 10.3.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1302.yaml"
+},
+"CVE-2025-1303": {
+"name": "Plugin Oficial \u2013 Getnet para WooCommerce <= 1.8.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1303.yaml"
+},
+"CVE-2025-13138": {
+"name": "WP Directory Kit <= 1.4.3 - Unauthenticated SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13138.yaml"
+},
+"CVE-2025-1323": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.02856,
+"epss_pct": 0.85751,
+"name": "WP-Recall \u2013 Plugin <= 16.26.10 - Unauthenticated SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1323.yaml"
+},
+"CVE-2025-13315": {
+"name": "Twonky Server 8.5.2 on Linux and Windows - Log File Exposure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13315.yaml"
+},
+"CVE-2025-13339": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.02246,
+"epss_pct": 0.81645,
+"name": "Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13339.yaml"
+},
+"CVE-2025-13342": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.02192,
+"epss_pct": 0.8118,
+"name": "DynamiApps Frontend Admin <= 3.28.20 - Unauthenticated Arbitrary Options Update",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13342.yaml"
+},
+"CVE-2025-1338": {
+"cwe": "CWE-78",
+"epss": 0.51397,
+"epss_pct": 0.98856,
+"name": "NUUO Camera <=20250203 - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1338.yaml"
+},
+"CVE-2025-13390": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.04593,
+"epss_pct": 0.90986,
+"name": "WP Directory Kit <= 1.4.4 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13390.yaml"
+},
+"CVE-2025-13418": {
+"cvss": 6.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00611,
+"epss_pct": 0.46848,
+"name": "Responsive Pricing Table <= 5.1.12 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13418.yaml"
+},
+"CVE-2025-13486": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"name": "Advanced Custom Fields Extended < 0.9.2 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13486.yaml"
+},
+"CVE-2025-13528": {
+"cwe": "CWE-862",
+"epss": 0.00729,
+"epss_pct": 0.51703,
+"name": "Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13528.yaml"
+},
+"CVE-2025-1361": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.01287,
+"epss_pct": 0.68138,
+"name": "IP2Location Country Blocker < 2.38.9 - Unauthenticated Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1361.yaml"
+},
+"CVE-2025-13652": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.01101,
+"epss_pct": 0.63368,
+"name": "WordPress CBX Bookmark & Favorite Plugin <= 2.0.4 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13652.yaml"
+},
+"CVE-2025-13773": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.03766,
+"epss_pct": 0.89139,
+"name": "WordPress Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13773.yaml"
+},
+"CVE-2025-13801": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"name": "Yoco Payments <= 3.8.8 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13801.yaml"
+},
+"CVE-2025-13920": {
+"cvss": 6.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.00669,
+"epss_pct": 0.49449,
+"name": "WP Directory Kit < 1.5.0 - Unauthenticated Email Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13920.yaml"
+},
+"CVE-2025-13956": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.00906,
+"epss_pct": 0.57362,
+"name": "LearnPress < 4.3.2 - Broken Access Control",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13956.yaml"
+},
+"CVE-2025-14047": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-862",
+"epss": 0.00902,
+"epss_pct": 0.57237,
+"name": "User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14047.yaml"
+},
+"CVE-2025-14124": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
+"cwe": "CWE-89",
+"epss": 0.01594,
+"epss_pct": 0.7397,
+"name": "Team WordPress Plugin (TLP Team) <= 5.0.9 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14124.yaml"
+},
+"CVE-2025-14155": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.00782,
+"epss_pct": 0.53454,
+"name": "Premium Addons for Elementor - Unauthenticated Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14155.yaml"
+},
+"CVE-2025-14340": {
+"cvss": 9.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
+"cwe": "CWE-79",
+"epss": 0.01002,
+"epss_pct": 0.60462,
+"name": "Payara Server - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14340.yaml"
+},
+"CVE-2025-14437": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-532",
+"epss": 0.01944,
+"epss_pct": 0.78728,
+"name": "WordPress Hummingbird <= 3.18.0 - Sensitive Information Exposure via Log File",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14437.yaml"
+},
+"CVE-2025-14528": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.03991,
+"epss_pct": 0.89779,
+"name": "D-Link DIR-803 - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14528.yaml"
+},
+"CVE-2025-14611": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-321",
+"name": "Gladinet CentreStack & Triofox - Hardcoded Credentials",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14611.yaml"
+},
+"CVE-2025-14726": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
+"epss": 0.0083,
+"epss_pct": 0.55027,
+"name": "WordPress Widgets for Social Photo Feed <= 1.8 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14726.yaml"
+},
+"CVE-2025-14847": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-908",
+"epss": 0.83218,
+"epss_pct": 0.99655,
+"name": "MongoDB Server - Information Disclosure (MongoBleed)",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2025/CVE-2025-14847.yaml"
+},
+"CVE-2025-14998": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-639",
+"epss": 0.0181,
+"epss_pct": 0.77069,
+"name": "Branda WordPress plugin - Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14998.yaml"
+},
+"CVE-2025-15403": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.01422,
+"epss_pct": 0.70987,
+"name": "RegistrationMagic <= 6.0.7.1 - Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-15403.yaml"
+},
+"CVE-2025-1550": {
+"epss": 0.02581,
+"epss_pct": 0.8412,
+"name": "Keras Model.load_model - Arbitrary Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-1550.yaml"
+},
+"CVE-2025-15503": {
+"cwe": "CWE-434",
+"epss": 0.01949,
+"epss_pct": 0.78786,
+"name": "Sangfor OSM - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-15503.yaml"
+},
+"CVE-2025-1562": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.03021,
+"epss_pct": 0.86506,
+"name": "Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit - Broken Access Control",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1562.yaml"
+},
+"CVE-2025-1595": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01094,
+"epss_pct": 0.63171,
+"name": "EasyCVR <=2.1.2 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1595.yaml"
+},
+"CVE-2025-1661": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.56382,
+"epss_pct": 0.98982,
+"name": "HUSKY \u2013 Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1661.yaml"
+},
+"CVE-2025-1743": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.01628,
+"epss_pct": 0.74473,
+"name": "Pichome 2.1.0 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1743.yaml"
+},
+"CVE-2025-1974": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-653",
+"epss": 0.99525,
+"epss_pct": 0.99943,
+"name": "Ingress-Nginx Controller - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1974.yaml"
+},
+"CVE-2025-2010": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.01737,
+"epss_pct": 0.76072,
+"name": "WordPress JobWP Plugin <= 2.3.9 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2010.yaml"
+},
+"CVE-2025-2011": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.46373,
+"epss_pct": 0.98728,
+"name": "Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2011.yaml"
+},
+"CVE-2025-20188": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.27136,
+"epss_pct": 0.97906,
+"name": "Cisco IOS XE WLC - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-20188.yaml"
+},
+"CVE-2025-20281": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.97093,
+"epss_pct": 0.99886,
+"name": "Cisco ISE - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-20281.yaml"
+},
+"CVE-2025-20282": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.27003,
+"epss_pct": 0.97894,
+"name": "Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-20282.yaml"
+},
+"CVE-2025-20362": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-862",
+"epss": 0.87085,
+"epss_pct": 0.99734,
+"name": "Cisco Secure Firewall ASA & FTD - Authentication Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-20362.yaml"
+},
+"CVE-2025-2075": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.02656,
+"epss_pct": 0.84601,
+"name": "Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2075.yaml"
+},
+"CVE-2025-2127": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00966,
+"epss_pct": 0.59252,
+"name": "JoomlaUX JUX Real Estate 3.4.0 - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2127.yaml"
+},
+"CVE-2025-2129": {
+"cvss": 5.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-1188",
+"epss": 0.01056,
+"epss_pct": 0.62056,
+"name": "Mage AI - Insecure Default Authentication Setup",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2129.yaml"
+},
+"CVE-2025-2221": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.01691,
+"epss_pct": 0.75441,
+"name": "WordPress WPCOM Member <= 1.7.6 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2221.yaml"
+},
+"CVE-2025-22214": {
+"name": "Landray EIS SQL\u6ce8\u5165\u6f0f\u6d1e",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-22214.yaml"
+},
+"CVE-2025-22457": {
+"cvss": 9.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.9998,
+"epss_pct": 0.99981,
+"name": "Ivanti Connect Secure - Stack-based Buffer Overflow",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-22457.yaml"
+},
+"CVE-2025-2264": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.34548,
+"epss_pct": 0.983,
+"name": "Sante PACS Server.exe - Path Traversal Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2264.yaml"
+},
+"CVE-2025-22785": {
+"name": "Course Booking System <= 6.0.6 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-22785.yaml"
+},
+"CVE-2025-2294": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.78202,
+"epss_pct": 0.99544,
+"name": "Kubio AI Page Builder <= 2.5.1 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2294.yaml"
+},
+"CVE-2025-22952": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.02899,
+"epss_pct": 0.85965,
+"name": "Elestio Memos <= v0.24.0 - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-22952.yaml"
+},
+"CVE-2025-23061": {
+"cvss": 9.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.07284,
+"epss_pct": 0.93913,
+"name": "Mongoose - NoSQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-23061.yaml"
+},
+"CVE-2025-23211": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.03593,
+"epss_pct": 0.88613,
+"name": "Tandoor Recipes < 1.5.24 - Jinja2 SSTI RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-23211.yaml"
+},
+"CVE-2025-24016": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.9384,
+"epss_pct": 0.99837,
+"name": "Wazuh - Unsafe Deserialization Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24016.yaml"
+},
+"CVE-2025-24354": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.00875,
+"epss_pct": 0.56468,
+"name": "Imgproxy < 3.27.2 - Server-Side Request Forgery (SSRF)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24354.yaml"
+},
+"CVE-2025-24514": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.32618,
+"epss_pct": 0.98215,
+"name": "Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-url` Annotation",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24514.yaml"
+},
+"CVE-2025-24582": {
+"name": "12 Step Meeting List < 3.16.6 - Unauthenticated Sensitive Information Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24582.yaml"
+},
+"CVE-2025-2473": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02442,
+"epss_pct": 0.83157,
+"name": "Company Visitor Management System 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2473.yaml"
+},
+"CVE-2025-24752": {
+"epss": 0.01198,
+"epss_pct": 0.65941,
+"name": "Essential Addons for Elementor < 6.0.15 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-24752.yaml"
+},
+"CVE-2025-24786": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.02675,
+"epss_pct": 0.84732,
+"name": "WhoDB < 0.45.0 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24786.yaml"
+},
+"CVE-2025-24799": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.86348,
+"epss_pct": 0.9972,
+"name": "GLPI < 10.0.17 - Pre-Auth SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24799.yaml"
+},
+"CVE-2025-24813": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.99927,
+"epss_pct": 0.99967,
+"name": "Apache Tomcat Path Equivalence - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24813.yaml"
+},
+"CVE-2025-24893": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-95",
+"epss": 0.99864,
+"epss_pct": 0.9996,
+"name": "XWiki Platform - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24893.yaml"
+},
+"CVE-2025-24963": {
+"cvss": 5.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.02384,
+"epss_pct": 0.82724,
+"name": "Vitest Browser Mode - Local File Read",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24963.yaml"
+},
+"CVE-2025-25034": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+"cwe": "CWE-502",
+"epss": 0.04516,
+"epss_pct": 0.90839,
+"name": "SugarCRM - Unauthenticated Remote Code Execution via PHP Object Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25034.yaml"
+},
+"CVE-2025-25037": {
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H",
+"cwe": "CWE-200",
+"epss": 0.01454,
+"epss_pct": 0.71589,
+"name": "Aquatronica Controller System <= 5.1.6 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25037.yaml"
+},
+"CVE-2025-2505": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-98",
+"epss": 0.04802,
+"epss_pct": 0.91316,
+"name": "WordPress Age Gate <= 3.5.3 - Unauthenticated Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2505.yaml"
+},
+"CVE-2025-25062": {
+"cvss": 4.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01721,
+"epss_pct": 0.75862,
+"name": "Backdrop CMS - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-25062.yaml"
+},
+"CVE-2025-25231": {
+"name": "Omnissa Workspace ONE UEM - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25231.yaml"
+},
+"CVE-2025-25256": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.60344,
+"epss_pct": 0.99074,
+"name": "Fortinet FortiSIEM - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2025/CVE-2025-25256.yaml"
+},
+"CVE-2025-25257": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.99772,
+"epss_pct": 0.99954,
+"name": "Fortinet FortiWeb - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25257.yaml"
+},
+"CVE-2025-25291": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-347",
+"epss": 0.2026,
+"epss_pct": 0.97284,
+"name": "GitLab - SAML Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-25291.yaml"
+},
+"CVE-2025-25296": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01898,
+"epss_pct": 0.78187,
+"name": "Label Studio < 1.16.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25296.yaml"
+},
+"CVE-2025-2539": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-327",
+"epss": 0.01624,
+"epss_pct": 0.74418,
+"name": "File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2539.yaml"
+},
+"CVE-2025-25570": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.02056,
+"epss_pct": 0.79936,
+"name": "Vue Vben Admin - Default Credentials",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25570.yaml"
+},
+"CVE-2025-2558": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-98",
+"name": "WordPress The Wound Theme <= 0.0.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2558.yaml"
+},
+"CVE-2025-2563": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.46384,
+"epss_pct": 0.98728,
+"name": "User Registration & Membership <= 4.1.1 - Unauthenticated Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2563.yaml"
+},
+"CVE-2025-2609": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01101,
+"epss_pct": 0.63361,
+"name": "MagnusBilling Login Logs - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2609.yaml"
+},
+"CVE-2025-2610": {
+"cvss": 7.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0092,
+"epss_pct": 0.57801,
+"name": "MagnusBilling Alarm Module - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2610.yaml"
+},
+"CVE-2025-2611": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.05991,
+"epss_pct": 0.92795,
+"name": "ICTBroadcast - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2611.yaml"
+},
+"CVE-2025-26319": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.55869,
+"epss_pct": 0.98969,
+"name": "FlowiseAI Flowise <= 2.2.6 - Arbitrary File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-26319.yaml"
+},
+"CVE-2025-2636": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.10241,
+"epss_pct": 0.95342,
+"name": "InstaWP Connect < 0.1.0.86 - Local PHP File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2636.yaml"
+},
+"CVE-2025-26399": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.895,
+"epss_pct": 0.99774,
+"name": "SolarWinds Web Help Desk < 12.8.7 - AjaxProxy Deserialization RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-26399.yaml"
+},
+"CVE-2025-26793": {
+"epss": 0.02369,
+"epss_pct": 0.82626,
+"name": "FREEDOM Administration - Default Login",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-26793.yaml"
+},
+"CVE-2025-27007": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-266",
+"epss": 0.5148,
+"epss_pct": 0.9886,
+"name": "OttoKit < 1.0.83 - SureTriggers allows Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27007.yaml"
+},
+"CVE-2025-2709": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00938,
+"epss_pct": 0.58416,
+"name": "Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2709.yaml"
+},
+"CVE-2025-2710": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00938,
+"epss_pct": 0.58418,
+"name": "Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2710.yaml"
+},
+"CVE-2025-2711": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00938,
+"epss_pct": 0.58416,
+"name": "Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2711.yaml"
+},
+"CVE-2025-27112": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-287",
+"epss": 0.00963,
+"epss_pct": 0.59202,
+"name": "Navidrome <=0.54.5 - Authentication Bypass in Subsonic API",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27112.yaml"
+},
+"CVE-2025-2712": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00825,
+"epss_pct": 0.54867,
+"name": "Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2712.yaml"
+},
+"CVE-2025-27134": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-284",
+"epss": 0.02065,
+"epss_pct": 0.80034,
+"name": "Joplin 3.3.3 Server - Privilege Escalation",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27134.yaml"
+},
+"CVE-2025-27218": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-94",
+"epss": 0.65003,
+"epss_pct": 0.9919,
+"name": "Sitecore Experience Manager (XM)/Experience Platform (XP) 10.4 - Insecure Deserialization",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27218.yaml"
+},
+"CVE-2025-27222": {
+"name": "TRUfusion Enterprise <= 7.10.4.0 - Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27222.yaml"
+},
+"CVE-2025-27223": {
+"name": "TRUfusion Enterprise <= 7.10.4.0 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27223.yaml"
+},
+"CVE-2025-27225": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-288",
+"epss": 0.17222,
+"epss_pct": 0.96874,
+"name": "TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27225.yaml"
+},
+"CVE-2025-2746": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.59052,
+"epss_pct": 0.99043,
+"name": "Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0011)",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2746.yaml"
+},
+"CVE-2025-2747": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.92488,
+"epss_pct": 0.99818,
+"name": "Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006)",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2747.yaml"
+},
+"CVE-2025-2748": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
+"cwe": "CWE-79",
+"epss": 0.60586,
+"epss_pct": 0.99079,
+"name": "Kentico Xperience CMS - Unauthenticated Stored XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2748.yaml"
+},
+"CVE-2025-27505": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.01103,
+"epss_pct": 0.63419,
+"name": "GeoServer - Missing Authorization on REST API Index",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27505.yaml"
+},
+"CVE-2025-27506": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00685,
+"epss_pct": 0.50113,
+"name": "NocoDB < 0.258.0 - Reflected XSS in Password Reset",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27506.yaml"
+},
+"CVE-2025-2775": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L",
+"cwe": "CWE-611",
+"epss": 0.42952,
+"epss_pct": 0.98622,
+"name": "SysAid On-Prem <= 23.3.40 - XML External Entity",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2775.yaml"
+},
+"CVE-2025-2776": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L",
+"cwe": "CWE-611",
+"epss": 0.64397,
+"epss_pct": 0.99175,
+"name": "SysAid On-Prem <= 23.3.40 - XML External Entity",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2776.yaml"
+},
+"CVE-2025-2777": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L",
+"cwe": "CWE-611",
+"epss": 0.72202,
+"epss_pct": 0.99389,
+"name": "SysAid On-Prem <= 23.3.40 - XML External Entity",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2777.yaml"
+},
+"CVE-2025-27817": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.65905,
+"epss_pct": 0.99214,
+"name": "Apache Kafka Client - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27817.yaml"
+},
+"CVE-2025-27888": {
+"epss": 0.01726,
+"epss_pct": 0.75918,
+"name": "Apache Druid - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27888.yaml"
+},
+"CVE-2025-27892": {
+"cvss": 6.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L",
+"cwe": "CWE-89",
+"epss": 0.119,
+"epss_pct": 0.95804,
+"name": "Shopware < 6.5.8.13 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27892.yaml"
+},
+"CVE-2025-27915": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03918,
+"epss_pct": 0.89583,
+"name": "Zimbra - Cross-Site Scripting via ICS Files",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27915.yaml"
+},
+"CVE-2025-28228": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-522",
+"epss": 0.01754,
+"epss_pct": 0.76321,
+"name": "Electrolink FM/DAB/TV Transmitter - Credentials Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-28228.yaml"
+},
+"CVE-2025-28242": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-384",
+"name": "DAEnetIP4 METO v1.25 - Session Hijacking",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-28242.yaml"
+},
+"CVE-2025-28367": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
+"cwe": "CWE-284",
+"epss": 0.02092,
+"epss_pct": 0.80318,
+"name": "mojoPortal <=2.9.0.1 - Directory Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-28367.yaml"
+},
+"CVE-2025-28906": {
+"cvss": 5.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.00498,
+"epss_pct": 0.40679,
+"name": "Skitter Slideshow <= 2.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-28906.yaml"
+},
+"CVE-2025-2907": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.01372,
+"epss_pct": 0.70014,
+"name": "Order Delivery Date Pro for WooCommerce < 12.3.1 - Arbitrary Option Update",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2907.yaml"
+},
+"CVE-2025-29085": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.29346,
+"epss_pct": 0.98041,
+"name": "Vipshop Saturn Console <= 3.5.1 - SQL Injection via ClusterKey Component",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-29085.yaml"
+},
+"CVE-2025-29306": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.4628,
+"epss_pct": 0.98725,
+"name": "FoxCMS v.1.2.5 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-29306.yaml"
+},
+"CVE-2025-29635": {
+"cvss": 7.2,
+"cwe": "CWE-78",
+"epss": 0.87823,
+"epss_pct": 0.9975,
+"name": "D-Link DIR-823X set_prohibiting - Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-29635.yaml"
+},
+"CVE-2025-29925": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-285",
+"name": "XWiki REST API - Private Pages Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-29925.yaml"
+},
+"CVE-2025-29927": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-287",
+"epss": 0.99225,
+"epss_pct": 0.99934,
+"name": "Next.js Middleware Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-29927.yaml"
+},
+"CVE-2025-30208": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
+"cwe": "CWE-284",
+"epss": 0.74969,
+"epss_pct": 0.99469,
+"name": "Vite - Arbitrary File Read",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-30208.yaml"
+},
+"CVE-2025-30220": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L",
+"cwe": "CWE-611",
+"epss": 0.46131,
+"epss_pct": 0.98721,
+"name": "GeoServer WFS - XXE Processing Vulnerability",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-30220.yaml"
+},
+"CVE-2025-30406": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.94252,
+"epss_pct": 0.99843,
+"name": "Gladinet CentreStack < 16.4.10315.56368 Use of Hard-coded Key Leads to Unauthenticated RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-30406.yaml"
+},
+"CVE-2025-30567": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.02786,
+"epss_pct": 0.8539,
+"name": "WordPress WP01 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-30567.yaml"
+},
+"CVE-2025-3102": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-697",
+"epss": 0.7568,
+"epss_pct": 0.99482,
+"name": "SureTriggers \u2013 All-in-One Automation Platform \u2264 1.0.78 - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3102.yaml"
+},
+"CVE-2025-31125": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.58462,
+"epss_pct": 0.99031,
+"name": "Vite Development Server - Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31125.yaml"
+},
+"CVE-2025-31131": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.05382,
+"epss_pct": 0.92094,
+"name": "Yeswiki < 4.5.2 - Unauthenticated Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31131.yaml"
+},
+"CVE-2025-31161": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.99951,
+"epss_pct": 0.99973,
+"name": "CrushFTP - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31161.yaml"
+},
+"CVE-2025-31324": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.99512,
+"epss_pct": 0.99942,
+"name": "SAP NetWeaver Visual Composer Metadata Uploader - Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31324.yaml"
+},
+"CVE-2025-31486": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.40175,
+"epss_pct": 0.98533,
+"name": "Vite server.fs.deny Bypass - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31486.yaml"
+},
+"CVE-2025-31489": {
+"epss": 0.02428,
+"epss_pct": 0.83073,
+"name": "MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31489.yaml"
+},
+"CVE-2025-32257": {
+"name": "1 Click WordPress Migration <= 2.2 - Unauthenticated Information Disclsoure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32257.yaml"
+},
+"CVE-2025-32355": {
+"name": "Rocket TRUfusion Enterprise - Server Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32355.yaml"
+},
+"CVE-2025-32395": {
+"cvss": 6.0,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
+"cwe": "CWE-200",
+"epss": 0.01725,
+"epss_pct": 0.75912,
+"name": "Vite - Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32395.yaml"
+},
+"CVE-2025-32429": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.84036,
+"epss_pct": 0.99674,
+"name": "XWiki Platform - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32429.yaml"
+},
+"CVE-2025-32430": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H",
+"cwe": "CWE-79",
+"epss": 0.00634,
+"epss_pct": 0.4791,
+"name": "XWiki Platform - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32430.yaml"
+},
+"CVE-2025-32432": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L",
+"cwe": "CWE-94",
+"epss": 0.99837,
+"epss_pct": 0.99959,
+"name": "CraftCMS - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32432.yaml"
+},
+"CVE-2025-32433": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.98594,
+"epss_pct": 0.99919,
+"name": "Erlang/OTP SSH - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-32433.yaml"
+},
+"CVE-2025-32463": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-426",
+"epss": 0.59417,
+"epss_pct": 0.99053,
+"name": "Sudo - Local Privilege Escalation via chroot",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-32463.yaml"
+},
+"CVE-2025-3248": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.99996,
+"epss_pct": 0.99988,
+"name": "Langflow AI - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3248.yaml"
+},
+"CVE-2025-32614": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-98",
+"epss": 0.0187,
+"epss_pct": 0.77861,
+"name": "EventON Lite <= 2.4 - Authenticated Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32614.yaml"
+},
+"CVE-2025-32778": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.19326,
+"epss_pct": 0.97147,
+"name": "Web-Check < 2.0.1 Screenshot API - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32778.yaml"
+},
+"CVE-2025-32813": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.43894,
+"epss_pct": 0.98653,
+"name": "Infoblox NetMRI < 7.6.1 - Unauthenticated Command Injection in get_saml_request",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32813.yaml"
+},
+"CVE-2025-32814": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.36408,
+"epss_pct": 0.98373,
+"name": "NetMRI Unauthenticated SQL Injection via skipjackUsername",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32814.yaml"
+},
+"CVE-2025-32815": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
+"cwe": "CWE-287",
+"epss": 0.40935,
+"epss_pct": 0.98555,
+"name": "NetMRI < 7.6.1 - Authentication Bypass via Hardcoded Credentials",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32815.yaml"
+},
+"CVE-2025-32966": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.04396,
+"epss_pct": 0.90625,
+"name": "DataEase 2.10.4-2.10.7 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32966.yaml"
+},
+"CVE-2025-32969": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.77774,
+"epss_pct": 0.99533,
+"name": "XWiki REST API Query - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32969.yaml"
+},
+"CVE-2025-32970": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"name": "XWiki WYSIWYG API - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32970.yaml"
+},
+"CVE-2025-34023": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.01452,
+"epss_pct": 0.71554,
+"name": "Karel IP Phone IP1211 Web Management Panel - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34023.yaml"
+},
+"CVE-2025-34026": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-288",
+"epss": 0.8194,
+"epss_pct": 0.99625,
+"name": "Versa Concerto Actuator Endpoint - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34026.yaml"
+},
+"CVE-2025-34027": {
+"cwe": "CWE-367",
+"epss": 0.4522,
+"epss_pct": 0.98694,
+"name": "Versa Concerto API Path Based - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34027.yaml"
+},
+"CVE-2025-34028": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.97657,
+"epss_pct": 0.99899,
+"name": "Commvault - SSRF via /commandcenter/deployWebpackage.do",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34028.yaml"
+},
+"CVE-2025-34030": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
+"cwe": "CWE-78",
+"epss": 0.60298,
+"epss_pct": 0.99072,
+"name": "sar2html <=3.2.2 Plot Parameter - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34030.yaml"
+},
+"CVE-2025-34031": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N",
+"cwe": "CWE-22",
+"epss": 0.02809,
+"epss_pct": 0.85506,
+"name": "Moodle Jmol Filter 6.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34031.yaml"
+},
+"CVE-2025-34032": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-80",
+"epss": 0.00684,
+"epss_pct": 0.50065,
+"name": "Moodle LMS Jmol Plugin <= 6.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34032.yaml"
+},
+"CVE-2025-34035": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
+"cwe": "CWE-78",
+"epss": 0.12334,
+"epss_pct": 0.95903,
+"name": "EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 Root Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34035.yaml"
+},
+"CVE-2025-34038": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"name": "Fanwei e-cology - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34038.yaml"
+},
+"CVE-2025-34040": {
+"epss": 0.14813,
+"epss_pct": 0.96437,
+"name": "Zhiyuan OA Platform - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34040.yaml"
+},
+"CVE-2025-34045": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"name": "WeiPHP 5.0 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34045.yaml"
+},
+"CVE-2025-34073": {
+"name": "Maltrail <=0.54 Username Parameter - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34073.yaml"
+},
+"CVE-2025-34077": {
+"epss": 0.14307,
+"epss_pct": 0.9634,
+"name": "WordPress Pie Register <= 3.7.1.4 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34077.yaml"
+},
+"CVE-2025-34141": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01852,
+"epss_pct": 0.77623,
+"name": "ETQ Reliance - Reflected XSS via SQLConverterServlet",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34141.yaml"
+},
+"CVE-2025-34143": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.30353,
+"epss_pct": 0.98096,
+"name": "ETQ Reliance - Authentication Bypass via Trailing Space",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34143.yaml"
+},
+"CVE-2025-3415": {
+"epss": 0.00956,
+"epss_pct": 0.58952,
+"name": "Grafana - Exposes DingDing API Keys",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3415.yaml"
+},
+"CVE-2025-34152": {
+"name": "Shenzhen Aitemi M300 Wi-Fi Repeater \u2013 Unauthenticated Remote Command Execution via `time` Parameter",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34152.yaml"
+},
+"CVE-2025-34291": {
+"cvss": 9.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
+"cwe": "CWE-942",
+"epss": 0.83629,
+"epss_pct": 0.99666,
+"name": "Langflow AI <= 1.6.9 - CORS Misconfiguration",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34291.yaml"
+},
+"CVE-2025-34299": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.72667,
+"epss_pct": 0.99402,
+"name": "Monsta FTP <= 2.11.2 - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34299.yaml"
+},
+"CVE-2025-34300": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.50696,
+"epss_pct": 0.98836,
+"name": "SawtoothSoftware Lighthouse Studio < 9.16.14 - Pre-Auth Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34300.yaml"
+},
+"CVE-2025-34509": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
+"cwe": "CWE-798",
+"epss": 0.54577,
+"epss_pct": 0.98941,
+"name": "Sitecore Experience Manager (XM) and Experience Platform (XP) - Hardcoded Credentials",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34509.yaml"
+},
+"CVE-2025-3472": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-94",
+"epss": 0.01933,
+"epss_pct": 0.78596,
+"name": "Ocean Extra <= 2.4.6 - Unauthenticated Shortcode Execution",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3472.yaml"
+},
+"CVE-2025-3515": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.0509,
+"epss_pct": 0.91751,
+"name": "Contact Form 7 Drag and Drop Multiple File Upload - Arbitrary File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3515.yaml"
+},
+"CVE-2025-3605": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-639",
+"epss": 0.06937,
+"epss_pct": 0.93636,
+"name": "WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3605.yaml"
+},
+"CVE-2025-36604": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.62645,
+"epss_pct": 0.99128,
+"name": "Dell UnityVSA < 5.5 - Remote Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-36604.yaml"
+},
+"CVE-2025-36845": {
+"name": "Eveo URVE Web Manager - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-36845.yaml"
+},
+"CVE-2025-37164": {
+"name": "HPE OneView - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-37164.yaml"
+},
+"CVE-2025-4008": {
+"cvss": 7.5,
+"cwe": "CWE-77",
+"epss": 0.93256,
+"epss_pct": 0.99829,
+"name": "MeteoBridge <= 6.1 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4008.yaml"
+},
+"CVE-2025-4009": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:N/AU:Y/V:C",
+"epss": 0.7144,
+"epss_pct": 0.99368,
+"name": "Evertz SDVN 3080ipx-10G - Unauthenticated Arbitrary Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4009.yaml"
+},
+"CVE-2025-40536": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-693",
+"epss": 0.81624,
+"epss_pct": 0.99615,
+"name": "SolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-40536.yaml"
+},
+"CVE-2025-40551": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.83622,
+"epss_pct": 0.99665,
+"name": "SolarWinds Web Help Desk < 2026.1 - Unauthenticated JNDI Injection RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-40551.yaml"
+},
+"CVE-2025-40552": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-1390",
+"epss": 0.49734,
+"epss_pct": 0.98809,
+"name": "SolarWinds Web Help Desk - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-40552.yaml"
+},
+"CVE-2025-40554": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-1390",
+"epss": 0.58447,
+"epss_pct": 0.9903,
+"name": "SolarWinds Web Help Desk - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-40554.yaml"
+},
+"CVE-2025-40630": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.00471,
+"epss_pct": 0.38911,
+"name": "IceWarp Mail Server \u226411.4.0 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-40630.yaml"
+},
+"CVE-2025-4078": {
+"name": "Wangshen SecGate 3600 Path Traversal Vulnerability",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4078.yaml"
+},
+"CVE-2025-4123": {
+"cvss": 7.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L",
+"epss": 0.97007,
+"epss_pct": 0.99886,
+"name": "Grafana - XSS / Open Redirect / SSRF via Client Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4123.yaml"
+},
+"CVE-2025-41242": {
+"cvss": 5.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.02054,
+"epss_pct": 0.79919,
+"name": "Spring Framework - Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-41242.yaml"
+},
+"CVE-2025-41243": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.03548,
+"epss_pct": 0.88475,
+"name": "Spring Cloud Gateway Server Webflux - Broken Access Control",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-41243.yaml"
+},
+"CVE-2025-41393": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00692,
+"epss_pct": 0.50365,
+"name": "Ricoh Web Image Monitor - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-41393.yaml"
+},
+"CVE-2025-41646": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-704",
+"epss": 0.49051,
+"epss_pct": 0.98795,
+"name": "RevPi Webstatus <= v2.4.5 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-41646.yaml"
+},
+"CVE-2025-4210": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-285",
+"epss": 0.01841,
+"epss_pct": 0.77483,
+"name": "Casdoor - Authorization Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4210.yaml"
+},
+"CVE-2025-4302": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.00888,
+"epss_pct": 0.56815,
+"name": "Stop User Enumeration WordPress plugin - Authentication Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4302.yaml"
+},
+"CVE-2025-4322": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-620",
+"epss": 0.15647,
+"epss_pct": 0.96597,
+"name": "Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4322.yaml"
+},
+"CVE-2025-4334": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.02138,
+"epss_pct": 0.80728,
+"name": "Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4334.yaml"
+},
+"CVE-2025-4380": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-98",
+"epss": 0.39708,
+"epss_pct": 0.98516,
+"name": "Ads Pro Plugin <= 4.89 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4380.yaml"
+},
+"CVE-2025-4388": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.03794,
+"epss_pct": 0.89223,
+"name": "Liferay Portal - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4388.yaml"
+},
+"CVE-2025-4396": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.02667,
+"epss_pct": 0.84677,
+"name": "Relevanssi <= 4.24.4 (Free) - Unauthenticated SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4396.yaml"
+},
+"CVE-2025-44136": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.02507,
+"epss_pct": 0.83616,
+"name": "MapTiler Tileserver-php v2.0 - Unauthenticated XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-44136.yaml"
+},
+"CVE-2025-44137": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.0136,
+"epss_pct": 0.69759,
+"name": "MapTiler Tileserver-php v2.0 - Unauthenticated File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-44137.yaml"
+},
+"CVE-2025-44148": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.60579,
+"epss_pct": 0.99079,
+"name": "MailEnable Mail Service < v10 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-44148.yaml"
+},
+"CVE-2025-44177": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
+"cwe": "CWE-22",
+"epss": 0.04173,
+"epss_pct": 0.90182,
+"name": "White Star Software ProTop - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-44177.yaml"
+},
+"CVE-2025-4427": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-288",
+"epss": 0.99927,
+"epss_pct": 0.99967,
+"name": "Ivanti Endpoint Manager Mobile - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4427.yaml"
+},
+"CVE-2025-4524": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.10373,
+"epss_pct": 0.95388,
+"name": "WordPress Madara Theme < 2.2.2.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4524.yaml"
+},
+"CVE-2025-4576": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00588,
+"epss_pct": 0.4574,
+"name": "Liferay Portal & DXP - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4576.yaml"
+},
+"CVE-2025-45854": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.03012,
+"epss_pct": 0.86463,
+"name": "JEHC-BPM - Remote Code Execute",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-45854.yaml"
+},
+"CVE-2025-45985": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.07163,
+"epss_pct": 0.93825,
+"name": "Blink Router - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-45985.yaml"
+},
+"CVE-2025-4632": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.24295,
+"epss_pct": 0.97696,
+"name": "Samsung MagicINFO 9 Server - File Upload & Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4632.yaml"
+},
+"CVE-2025-46349": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"epss": 0.00625,
+"epss_pct": 0.47544,
+"name": "YesWiki Reflected XSS via File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46349.yaml"
+},
+"CVE-2025-4652": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00493,
+"epss_pct": 0.40346,
+"name": "Broadstreet WordPress plugin - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4652.yaml"
+},
+"CVE-2025-46549": {
+"name": "YesWiki <= 4.5.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46549.yaml"
+},
+"CVE-2025-46550": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00535,
+"epss_pct": 0.43029,
+"name": "YesWiki < 4.5.4 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46550.yaml"
+},
+"CVE-2025-46554": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-285",
+"name": "XWiki REST API - Attachments Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46554.yaml"
+},
+"CVE-2025-46565": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.01157,
+"epss_pct": 0.64814,
+"name": "Vite Dev Server - Information Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46565.yaml"
+},
+"CVE-2025-46817": {
+"name": "Redis < 8.2.1 lua script - Integer Overflow",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2025/CVE-2025-46817.yaml"
+},
+"CVE-2025-46818": {
+"name": "Redis Lua Sandbox < 8.2.2 - Cross-User Escape",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2025/CVE-2025-46818.yaml"
+},
+"CVE-2025-46819": {
+"name": "Redis  < 8.2.1 Lua Long-String Delimiter - Out-of-Bounds Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2025/CVE-2025-46819.yaml"
+},
+"CVE-2025-46822": {
+"epss": 0.04028,
+"epss_pct": 0.89859,
+"name": "Java-springboot-codebase 1.1 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46822.yaml"
+},
+"CVE-2025-47188": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"epss": 0.50237,
+"epss_pct": 0.98823,
+"name": "Mitel 6000 - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47188.yaml"
+},
+"CVE-2025-47204": {
+"epss": 0.00438,
+"epss_pct": 0.36579,
+"name": "Bootstrap Multiselect <= 1.1.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47204.yaml"
+},
+"CVE-2025-47423": {
+"cvss": 5.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
+"cwe": "CWE-24",
+"epss": 0.01996,
+"epss_pct": 0.79291,
+"name": "Personal Weather Station Dashboard 12 - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47423.yaml"
+},
+"CVE-2025-47445": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-23",
+"epss": 0.05145,
+"epss_pct": 0.9182,
+"name": "WordPress Eventin (Themewinter) \u2264 4.0.26 - Arbitrary File Download",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47445.yaml"
+},
+"CVE-2025-47539": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.27878,
+"epss_pct": 0.97955,
+"name": "Eventin <= 4.0.26 - Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47539.yaml"
+},
+"CVE-2025-47577": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.04643,
+"epss_pct": 0.91068,
+"name": "TI WooCommerce Wishlist <= 2.9.2 - Arbitrary File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47577.yaml"
+},
+"CVE-2025-47646": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-640",
+"epss": 0.24936,
+"epss_pct": 0.97753,
+"name": "PSW Front-end Login & Registration 1.13 - Weak Password Recovery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47646.yaml"
+},
+"CVE-2025-47783": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"name": "Label Studio < 1.18.0 - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47783.yaml"
+},
+"CVE-2025-47812": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.92823,
+"epss_pct": 0.99822,
+"name": "Wing FTP Server <= 7.4.3 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47812.yaml"
+},
+"CVE-2025-47813": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:NH",
+"cwe": "CWE-209",
+"epss": 0.59403,
+"epss_pct": 0.99051,
+"name": "Wing FTP Server <= 7.4.3 - Path Disclosure via Overlong UID Cookie",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47813.yaml"
+},
+"CVE-2025-47916": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-1336",
+"epss": 0.83732,
+"epss_pct": 0.99668,
+"name": "Invision Community <=5.0.6 Unauthenticated RCE via Template Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47916.yaml"
+},
+"CVE-2025-48157": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-98",
+"epss": 0.02188,
+"epss_pct": 0.81149,
+"name": "WordPress Formality Plugin <= 1.5.9 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-48157.yaml"
+},
+"CVE-2025-48281": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.01388,
+"epss_pct": 0.7033,
+"name": "MyStyle Custom Product Designer <= 3.21.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-48281.yaml"
+},
+"CVE-2025-48703": {
+"cvss": 9.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.99655,
+"epss_pct": 0.99949,
+"name": "CWP (Control Web Panel) < 0.9.8.1205 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-48703.yaml"
+},
+"CVE-2025-48827": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-424",
+"epss": 0.75844,
+"epss_pct": 0.99487,
+"name": "vBulletin 5.0.0-6.0.3 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-48827.yaml"
+},
+"CVE-2025-48828": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-424",
+"epss": 0.5764,
+"epss_pct": 0.99012,
+"name": "vBulletin replaceAdTemplate - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-48828.yaml"
+},
+"CVE-2025-48954": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
+"cwe": "CWE-79",
+"epss": 0.00685,
+"epss_pct": 0.50125,
+"name": "Discourse OAuth Social Login - Cross-site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-48954.yaml"
+},
+"CVE-2025-49001": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.2288,
+"epss_pct": 0.97572,
+"name": "DataEase < 2.10.10 - JWT Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49001.yaml"
+},
+"CVE-2025-49002": {
+"cwe": "CWE-290",
+"epss": 0.47001,
+"epss_pct": 0.98745,
+"name": "DataEase - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49002.yaml"
+},
+"CVE-2025-49029": {
+"epss": 0.02197,
+"epss_pct": 0.81248,
+"name": "WordPress Custom Login And Signup Widget Plugin <= 1.0 - Arbitrary Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49029.yaml"
+},
+"CVE-2025-49113": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.99032,
+"epss_pct": 0.99928,
+"name": "Roundcube Webmail - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49113.yaml"
+},
+"CVE-2025-49132": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.53389,
+"epss_pct": 0.98909,
+"name": "Pterodactyl Panel - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49132.yaml"
+},
+"CVE-2025-49493": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
+"cwe": "CWE-611",
+"epss": 0.03404,
+"epss_pct": 0.88007,
+"name": "Akamai CloudTest < 60 2025.06.02 - XML External Entity (XXE)",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49493.yaml"
+},
+"CVE-2025-49533": {
+"name": "Adobe Experience Manager Forms - Insecure Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49533.yaml"
+},
+"CVE-2025-49596": {
+"cwe": "CWE-306",
+"epss": 0.44713,
+"epss_pct": 0.98678,
+"name": "MCP Inspector < 0.14.0 UnauthenticatedRemote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49596.yaml"
+},
+"CVE-2025-49706": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-287",
+"epss": 0.98841,
+"epss_pct": 0.99925,
+"name": "Microsoft SharePoint Server - Authentication Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49706.yaml"
+},
+"CVE-2025-49825": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.07804,
+"epss_pct": 0.94234,
+"name": "Teleport - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49825.yaml"
+},
+"CVE-2025-49844": {
+"name": "Redis Lua Parser < 8.2.2 - Use After Free",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2025/CVE-2025-49844.yaml"
+},
+"CVE-2025-50578": {
+"name": "Heimdall - Host Header Injection & Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-50578.yaml"
+},
+"CVE-2025-50738": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-200",
+"name": "Memos < 0.25.0 - Stored Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-50738.yaml"
+},
+"CVE-2025-5086": {
+"cvss": 9.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.90018,
+"epss_pct": 0.99784,
+"name": "Dassault Syst\u00e8mes DELMIA Apriso (up to 2025) - Insecure Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5086.yaml"
+},
+"CVE-2025-51482": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.01862,
+"epss_pct": 0.77763,
+"name": "Letta Letta 0.7.12 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51482.yaml"
+},
+"CVE-2025-51501": {
+"name": "Microweber CMS2.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51501.yaml"
+},
+"CVE-2025-51502": {
+"name": "Microweber CMS 2.0 - Reflected XSS in Admin Page Creation",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51502.yaml"
+},
+"CVE-2025-51586": {
+"cwe": "CWE-359",
+"name": "PrestaShop - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51586.yaml"
+},
+"CVE-2025-51990": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"name": "XWiki \u2013 Stored Cross-Site Scripting (XSS)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51990.yaml"
+},
+"CVE-2025-51991": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.03605,
+"epss_pct": 0.88648,
+"name": "XWiki <= 17.3.0 - Server-Side Template Injection (SSTI)",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51991.yaml"
+},
+"CVE-2025-52207": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L",
+"cwe": "CWE-23",
+"epss": 0.01499,
+"epss_pct": 0.72447,
+"name": "MikoPBX - Unrestricted File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52207.yaml"
+},
+"CVE-2025-52472": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.02207,
+"epss_pct": 0.81329,
+"name": "XWiki - HQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52472.yaml"
+},
+"CVE-2025-52488": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.35197,
+"epss_pct": 0.98326,
+"name": "DNN (DotNetNuke) - Unicode Path Normalization NTLM Hash Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52488.yaml"
+},
+"CVE-2025-52665": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.40972,
+"epss_pct": 0.98555,
+"name": "UniFi Access - Broken Access Control",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52665.yaml"
+},
+"CVE-2025-52691": {
+"name": "SmarterMail - Unrestricted File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52691.yaml"
+},
+"CVE-2025-52694": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.38542,
+"epss_pct": 0.98467,
+"name": "Advantech WISE-IoTSuite/SaaS - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52694.yaml"
+},
+"CVE-2025-5287": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.02355,
+"epss_pct": 0.82534,
+"name": "Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5287.yaml"
+},
+"CVE-2025-52970": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-223",
+"epss": 0.09825,
+"epss_pct": 0.95204,
+"name": "Fortinet FortiWeb - Authentication Bypass to Admin Privilege",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52970.yaml"
+},
+"CVE-2025-5301": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.45502,
+"epss_pct": 0.98701,
+"name": "ONLYOFFICE Docs (DocumentServer) - Reflected Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5301.yaml"
+},
+"CVE-2025-53118": {
+"name": "Securden Unified PAM - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53118.yaml"
+},
+"CVE-2025-53364": {
+"name": "Parse Server - GraphQL Schema Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53364.yaml"
+},
+"CVE-2025-5350": {
+"cvss": 5.9,
+"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.00574,
+"epss_pct": 0.45078,
+"name": "WSO2 - Server Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5350.yaml"
+},
+"CVE-2025-53533": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00556,
+"epss_pct": 0.44117,
+"name": "Pi-hole Reflected XSS in 404-Error Page",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53533.yaml"
+},
+"CVE-2025-53558": {
+"name": "ZTE ZXHN-F660T/F660A - Default Credentials",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53558.yaml"
+},
+"CVE-2025-53624": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
+"cwe": "CWE-200",
+"epss": 0.01908,
+"epss_pct": 0.78299,
+"name": "Docusaurus Gists Plugin < 4.0.0 - GitHub Personal Access Token Exposure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53624.yaml"
+},
+"CVE-2025-53770": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.99998,
+"epss_pct": 0.9999,
+"name": "Microsoft SharePoint Server - Remote Code Execution (ToolShell)",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53770.yaml"
+},
+"CVE-2025-53771": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-287",
+"epss": 0.999,
+"epss_pct": 0.99964,
+"name": "Microsoft SharePoint Server - Authentication Bypass (ToolShell)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53771.yaml"
+},
+"CVE-2025-53833": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-1336",
+"epss": 0.09342,
+"epss_pct": 0.9502,
+"name": "LaRecipe < 2.8.1 Remote Code Execution via SSTI",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53833.yaml"
+},
+"CVE-2025-53887": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.00884,
+"epss_pct": 0.56702,
+"name": "Directus < 11.9.0 - Version Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53887.yaml"
+},
+"CVE-2025-5394": {
+"name": "Unauthenticated Arbitrary Plugin Upload in Alone Theme",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5394.yaml"
+},
+"CVE-2025-54068": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-502",
+"epss": 0.96473,
+"epss_pct": 0.99876,
+"name": "Laravel Livewire v3 - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54068.yaml"
+},
+"CVE-2025-54123": {
+"name": "Hoverfly <= 1.11.3 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54123.yaml"
+},
+"CVE-2025-54125": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-359",
+"name": "XWiki XML View - Sensitive Information Exposure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54125.yaml"
+},
+"CVE-2025-54236": {
+"name": "Adobe Commerce - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54236.yaml"
+},
+"CVE-2025-54249": {
+"name": "Adobe Experience Manager \u2264 6.5.23.0 \u2013 SSRF",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54249.yaml"
+},
+"CVE-2025-54251": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-91",
+"epss": 0.01724,
+"epss_pct": 0.75903,
+"name": "Adobe Experience Manager \u2264 6.5.23.0 - XML Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54251.yaml"
+},
+"CVE-2025-54309": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.94709,
+"epss_pct": 0.9985,
+"name": "CrushFTP - Authentication Bypass Race Condition",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-54309.yaml"
+},
+"CVE-2025-54589": {
+"cvss": 6.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.02373,
+"epss_pct": 0.82657,
+"name": "Copyparty <=1.18.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54589.yaml"
+},
+"CVE-2025-54597": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00565,
+"epss_pct": 0.44613,
+"name": "Heimdall Application Dashboard < 2.7.3 - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54597.yaml"
+},
+"CVE-2025-54726": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.01514,
+"epss_pct": 0.72707,
+"name": "WordPress JS Archive List <= 6.1.5 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54726.yaml"
+},
+"CVE-2025-54782": {
+"cvss": 9.4,
+"cvss_vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
+"epss": 0.49994,
+"epss_pct": 0.98816,
+"name": "NestJS DevTools Integration - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54782.yaml"
+},
+"CVE-2025-54793": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.00614,
+"epss_pct": 0.46998,
+"name": "Astro SSR - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54793.yaml"
+},
+"CVE-2025-54988": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-611",
+"epss": 0.15038,
+"epss_pct": 0.96472,
+"name": "Apache Tika - XXE Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54988.yaml"
+},
+"CVE-2025-55150": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.01701,
+"epss_pct": 0.75587,
+"name": "Stirling-PDF < 1.1.0 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55150.yaml"
+},
+"CVE-2025-55161": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
+"cwe": "CWE-918",
+"epss": 0.01982,
+"epss_pct": 0.79134,
+"name": "Stirling-PDF SSRF via Markdown",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55161.yaml"
+},
+"CVE-2025-55169": {
+"name": "WeGIA - Directory Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55169.yaml"
+},
+"CVE-2025-55182": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.99802,
+"epss_pct": 0.99956,
+"name": "React Server Components - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55182.yaml"
+},
+"CVE-2025-55184": {
+"name": "React Server Components - Denial of Service",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55184.yaml"
+},
+"CVE-2025-55190": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-200",
+"epss": 0.0534,
+"epss_pct": 0.92048,
+"name": "ArgoCD Project API Token Repository Credentials Exposure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55190.yaml"
+},
+"CVE-2025-55303": {
+"cvss": 6.4,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N",
+"cwe": "CWE-79",
+"epss": 0.00637,
+"epss_pct": 0.48043,
+"name": "Astro - Unauthorized Third-Party Image Access",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55303.yaml"
+},
+"CVE-2025-55523": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"name": "Agent-Zero 0.8.0 - 0.9.4 - Arbitrary File Download",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55523.yaml"
+},
+"CVE-2025-5569": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.01451,
+"epss_pct": 0.71522,
+"name": "IdeaCMS <= 1.7 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5569.yaml"
+},
+"CVE-2025-55746": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L",
+"cwe": "CWE-73",
+"epss": 0.01334,
+"epss_pct": 0.69166,
+"name": "Directus - Unauthenticated File Modification",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55746.yaml"
+},
+"CVE-2025-55747": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-23",
+"epss": 0.01668,
+"epss_pct": 0.75097,
+"name": "XWiki Platform - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55747.yaml"
+},
+"CVE-2025-55748": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-23",
+"epss": 0.01771,
+"epss_pct": 0.76556,
+"name": "XWiki Platform - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55748.yaml"
+},
+"CVE-2025-55749": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-284",
+"epss": 0.01471,
+"epss_pct": 0.71946,
+"name": "XWiki - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55749.yaml"
+},
+"CVE-2025-5605": {
+"name": "WSO2 Management Console - Authentication Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5605.yaml"
+},
+"CVE-2025-56132": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-305",
+"epss": 0.00695,
+"epss_pct": 0.50478,
+"name": "LiquidFiles < 4.2 - User Enumeration via Password Reset",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-56132.yaml"
+},
+"CVE-2025-56266": {
+"name": "Avigilon ACM - Host Header Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-56266.yaml"
+},
+"CVE-2025-56520": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.00696,
+"epss_pct": 0.50497,
+"name": "Dify v1.6.0 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-56520.yaml"
+},
+"CVE-2025-56819": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.03196,
+"epss_pct": 0.87218,
+"name": "Datart v1.0.0-rc.3 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-56819.yaml"
+},
+"CVE-2025-5701": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.01888,
+"epss_pct": 0.78061,
+"name": "HyperComments <= 1.2.2 - Arbitrary Options Update",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5701.yaml"
+},
+"CVE-2025-5777": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-457",
+"epss": 0.99962,
+"epss_pct": 0.99976,
+"name": "Citrix NetScaler Memory Disclosure - CitrixBleed 2",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5777.yaml"
+},
+"CVE-2025-57788": {
+"name": "Commvault Unauthenticated Password Disclosure (WT-2025-0047)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-57788.yaml"
+},
+"CVE-2025-57789": {
+"name": "Commvault Initial Administrator Login Process Vulnerability",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-57789.yaml"
+},
+"CVE-2025-57808": {
+"name": "ESPHome - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-57808.yaml"
+},
+"CVE-2025-57819": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.88269,
+"epss_pct": 0.99758,
+"name": "FreePBX - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-57819.yaml"
+},
+"CVE-2025-57822": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.02495,
+"epss_pct": 0.83528,
+"name": "Next.js Middleware - Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-57822.yaml"
+},
+"CVE-2025-58044": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.00488,
+"epss_pct": 0.40052,
+"name": "JumpServer - Open Redirect via Referer Header",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58044.yaml"
+},
+"CVE-2025-58179": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.00829,
+"epss_pct": 0.54986,
+"name": "Astro Cloudflare Adapter - Server Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58179.yaml"
+},
+"CVE-2025-58226": {
+"name": "WordPress 3D FlipBook Plugin <= 1.16.17 - Sensitive Information Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58226.yaml"
+},
+"CVE-2025-58360": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
+"cwe": "CWE-611",
+"epss": 0.64874,
+"epss_pct": 0.99187,
+"name": "GeoServer - XML External Entity Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58360.yaml"
+},
+"CVE-2025-58434": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.49894,
+"epss_pct": 0.98814,
+"name": "Flowise <= 3.0.5 - Account Takeover",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58434.yaml"
+},
+"CVE-2025-58443": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-287",
+"epss": 0.18687,
+"epss_pct": 0.9706,
+"name": "FOGProject <= 1.5.10.1673 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58443.yaml"
+},
+"CVE-2025-58751": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.01224,
+"epss_pct": 0.66677,
+"name": "Vite Dev Server - Path Traversal",
+"severity": "low",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58751.yaml"
+},
+"CVE-2025-59049": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.01779,
+"epss_pct": 0.76662,
+"name": "Mockoon < 9.2.0 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59049.yaml"
+},
+"CVE-2025-59136": {
+"name": "WordPress Gerencianet Oficial <= 3.1.3 - Unauthenticated Order Status Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59136.yaml"
+},
+"CVE-2025-59287": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.99979,
+"epss_pct": 0.9998,
+"name": "Windows Server Update Service - Insecure Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59287.yaml"
+},
+"CVE-2025-59341": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-23",
+"epss": 0.01636,
+"epss_pct": 0.74622,
+"name": "esm.sh <= v136 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59341.yaml"
+},
+"CVE-2025-59342": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-24",
+"epss": 0.03031,
+"epss_pct": 0.86548,
+"name": "esm.sh <= v136 - Arbitrary File Write via Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59342.yaml"
+},
+"CVE-2025-5947": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-639",
+"epss": 0.04469,
+"epss_pct": 0.9076,
+"name": "Service Finder Bookings - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5947.yaml"
+},
+"CVE-2025-59474": {
+"name": "Jenkins Sidepanel - Unauthorized Agent/Queue Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59474.yaml"
+},
+"CVE-2025-59528": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.8737,
+"epss_pct": 0.99742,
+"name": "Flowise - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59528.yaml"
+},
+"CVE-2025-59582": {
+"name": "Ajax Load More < 7.6.1 - Unauthenticated Sensitive Information Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59582.yaml"
+},
+"CVE-2025-5961": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.5253,
+"epss_pct": 0.98882,
+"name": "WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5961.yaml"
+},
+"CVE-2025-59716": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-203",
+"epss": 0.00895,
+"epss_pct": 0.57026,
+"name": "ownCloud Guests - User Enumeration",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59716.yaml"
+},
+"CVE-2025-60188": {
+"name": "Atarim < 4.2.2 - Sensitive Information Exposure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-60188.yaml"
+},
+"CVE-2025-6058": {
+"epss": 0.05497,
+"epss_pct": 0.9222,
+"name": "WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6058.yaml"
+},
+"CVE-2025-61224": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01357,
+"epss_pct": 0.69695,
+"name": "DokuWiki <= 2025-05-14a Librarian - Reflected Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-61224.yaml"
+},
+"CVE-2025-61666": {
+"name": "Traccar(Windows) 6.1- 6.8.1 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-61666.yaml"
+},
+"CVE-2025-6174": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.0046,
+"epss_pct": 0.38138,
+"name": "WordPress Qwizcards < 3.95 - Cross-Site Scripting (Reflected)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6174.yaml"
+},
+"CVE-2025-61757": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.88201,
+"epss_pct": 0.99756,
+"name": "Oracle Identity Manager REST WebServices - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-61757.yaml"
+},
+"CVE-2025-61882": {
+"name": "Oracle E-Business Suite 12.2.3\u201312.2.14 \u2013 Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-61882.yaml"
+},
+"CVE-2025-61884": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.97788,
+"epss_pct": 0.99901,
+"name": "Oracle E-Business Suite - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-61884.yaml"
+},
+"CVE-2025-6197": {
+"name": "Open Redirect via Organization Switching",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6197.yaml"
+},
+"CVE-2025-62039": {
+"name": "AI ChatBot with ChatGPT by AYS <= 2.6.6 - Unauthenticated API Key Exposure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-62039.yaml"
+},
+"CVE-2025-6204": {
+"cvss": 9.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.77077,
+"epss_pct": 0.99516,
+"name": "DELMIA Apriso - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6204.yaml"
+},
+"CVE-2025-6205": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.72217,
+"epss_pct": 0.9939,
+"name": "DELMIA Apriso - Broken Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6205.yaml"
+},
+"CVE-2025-62126": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.00721,
+"epss_pct": 0.51408,
+"name": "WordPress Varnish/Nginx Proxy Caching <= 1.8.3 - Information Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-62126.yaml"
+},
+"CVE-2025-6216": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-640",
+"epss": 0.35127,
+"epss_pct": 0.98323,
+"name": "Allegra - Authentication Bypass via Predictable Password Reset Token",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-6216.yaml"
+},
+"CVE-2025-62168": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-209",
+"epss": 0.62871,
+"epss_pct": 0.99133,
+"name": "Squid Proxy - HTTP Authentication Credentials Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-62168.yaml"
+},
+"CVE-2025-62512": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-204",
+"epss": 0.00766,
+"epss_pct": 0.52976,
+"name": "Piwigo - User Enumeration via Password Reset",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-62512.yaml"
+},
+"CVE-2025-62522": {
+"name": "Vite - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-62522.yaml"
+},
+"CVE-2025-62613": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01083,
+"epss_pct": 0.62824,
+"name": "VDO.Ninja - DOM-Based Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-62613.yaml"
+},
+"CVE-2025-62780": {
+"cvss": 6.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00431,
+"epss_pct": 0.3596,
+"name": "ChangeDetection.io <= v0.50.33 - Stored XSS via Watch API",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-62780.yaml"
+},
+"CVE-2025-63387": {
+"cwe": "CWE-287",
+"epss": 0.30318,
+"epss_pct": 0.98094,
+"name": "Dify v1.9.1 - Broken Access Control",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-63387.yaml"
+},
+"CVE-2025-6389": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.76138,
+"epss_pct": 0.99497,
+"name": "Sneeit WP Social WordPress Plugin - Unauthenticated RCE via call_user_func",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6389.yaml"
+},
+"CVE-2025-6403": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-74",
+"epss": 0.01754,
+"epss_pct": 0.76322,
+"name": "Code-Projects School Fees Payment System 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6403.yaml"
+},
+"CVE-2025-64095": {
+"name": "DNN - Unrestricted Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-64095.yaml"
+},
+"CVE-2025-64328": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+"epss": 0.84618,
+"epss_pct": 0.99687,
+"name": "FreePBX  >= 17.0.2.36 && < 17.0.3 - Authenticated Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-64328.yaml"
+},
+"CVE-2025-64446": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-23",
+"epss": 0.91838,
+"epss_pct": 0.99809,
+"name": "FortiWeb - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-64446.yaml"
+},
+"CVE-2025-64500": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-647",
+"epss": 0.01325,
+"epss_pct": 0.68948,
+"name": "Symfony HttpFoundation - Access Control Bypass via PATH_INFO",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-64500.yaml"
+},
+"CVE-2025-64525": {
+"name": "Astro - Broken Access Control",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-64525.yaml"
+},
+"CVE-2025-64764": {
+"name": "Astro - Reflected XSS via server islands feature",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-64764.yaml"
+},
+"CVE-2025-66472": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-80",
+"epss": 0.00519,
+"epss_pct": 0.42066,
+"name": "XWiki DeleteApplication - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-66472.yaml"
+},
+"CVE-2025-66516": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-611",
+"epss": 0.80336,
+"epss_pct": 0.9959,
+"name": "Apache Tika - XML External Entity Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-66516.yaml"
+},
+"CVE-2025-66744": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.01478,
+"epss_pct": 0.72052,
+"name": "Yonyou YonBIP - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-66744.yaml"
+},
+"CVE-2025-67303": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-420",
+"epss": 0.01393,
+"epss_pct": 0.70435,
+"name": "ComfyUI-Manager < 3.38 - Configuration Overwrite",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-67303.yaml"
+},
+"CVE-2025-68043": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-862",
+"epss": 0.00588,
+"epss_pct": 0.45741,
+"name": "LottieFiles WordPress Plugin <= 3.0.0 - Missing Authorization",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-68043.yaml"
+},
+"CVE-2025-68493": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
+"cwe": "CWE-611",
+"epss": 0.39504,
+"epss_pct": 0.98506,
+"name": "Apache Struts XWork - XML External Entity Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-68493.yaml"
+},
+"CVE-2025-68509": {
+"name": "User Submitted Posts <= 20251121 - Unauthenticated Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-68509.yaml"
+},
+"CVE-2025-6851": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.00654,
+"epss_pct": 0.48802,
+"name": "WordPress Broken Link Notifier < 1.3.1 - Unauthenticated SSRF",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6851.yaml"
+},
+"CVE-2025-68602": {
+"cvss": 4.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.00498,
+"epss_pct": 0.40675,
+"name": "Accept Donations with PayPal <= 1.5.2 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-68602.yaml"
+},
+"CVE-2025-68613": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.99105,
+"epss_pct": 0.99932,
+"name": "n8n - Remote Code Execution via Expression Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-68613.yaml"
+},
+"CVE-2025-68645": {
+"name": "Zimbra Collaboration - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-68645.yaml"
+},
+"CVE-2025-68926": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.31362,
+"epss_pct": 0.98148,
+"name": "RustFS < 1.0.0-alpha.77 - Hardcoded gRPC Authentication Token",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-68926.yaml"
+},
+"CVE-2025-69200": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-202",
+"epss": 0.02191,
+"epss_pct": 0.81174,
+"name": "phpMyFAQ - Configuration Backup Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-69200.yaml"
+},
+"CVE-2025-6934": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.26442,
+"epss_pct": 0.9786,
+"name": "The Opal Estate Pro \u2013 Property Management <= 1.7.5 - Unauthenticated Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6934.yaml"
+},
+"CVE-2025-69411": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.01609,
+"epss_pct": 0.74189,
+"name": "ionCube Tester Plus <= 1.3 - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-69411.yaml"
+},
+"CVE-2025-6970": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.60994,
+"epss_pct": 0.9909,
+"name": "WordPress Events Manager <= 7.0.3 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6970.yaml"
+},
+"CVE-2025-6984": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01661,
+"epss_pct": 0.74992,
+"name": "langchain-ai langchain - XML External Entity Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-6984.yaml"
+},
+"CVE-2025-69971": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-321",
+"epss": 0.02036,
+"epss_pct": 0.79725,
+"name": "FUXA <= 1.2.7 - Hardcoded JWT Secret Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-69971.yaml"
+},
+"CVE-2025-71243": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.05126,
+"epss_pct": 0.91793,
+"name": "SPIP Saisies - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-71243.yaml"
+},
+"CVE-2025-71257": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
+"cwe": "CWE-287",
+"epss": 0.44576,
+"epss_pct": 0.98674,
+"name": "BMC FootPrints - Authentication Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-71257.yaml"
+},
+"CVE-2025-71258": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.1743,
+"epss_pct": 0.96902,
+"name": "BMC FootPrints 'searchWeb' - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-71258.yaml"
+},
+"CVE-2025-71259": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.12916,
+"epss_pct": 0.96025,
+"name": "BMC FootPrints 'feedUrl' - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-71259.yaml"
+},
+"CVE-2025-71260": {
+"name": "BMC FootPrints - Deserialization of Untrusted Data (RCE)",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-71260.yaml"
+},
+"CVE-2025-71324": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-73",
+"epss": 0.0157,
+"epss_pct": 0.73613,
+"name": "Flowise - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-71324.yaml"
+},
+"CVE-2025-71334": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-73",
+"epss": 0.0436,
+"epss_pct": 0.90554,
+"name": "Flowise - Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-71334.yaml"
+},
+"CVE-2025-7160": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.01707,
+"epss_pct": 0.75681,
+"name": "Zoo Management System 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-7160.yaml"
+},
+"CVE-2025-7901": {
+"name": "yangzongzhuan RuoYi - DOM Based XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-7901.yaml"
+},
+"CVE-2025-8085": {
+"name": "Ditty < 3.1.58 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-8085.yaml"
+},
+"CVE-2025-8110": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.82693,
+"epss_pct": 0.99643,
+"name": "Gogs <= 0.13.3 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-8110.yaml"
+},
+"CVE-2025-8191": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.01684,
+"epss_pct": 0.75339,
+"name": "Swagger UI >=3.14.1 < 3.38.0 - DOM Based Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-8191.yaml"
+},
+"CVE-2025-8266": {
+"name": "ChanCMS <= 3.1. - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-8266.yaml"
+},
+"CVE-2025-8286": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.01217,
+"epss_pct": 0.66461,
+"name": "G\u00fcralp Systems FMUS Series - Unauthenticated Access",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2025/CVE-2025-8286.yaml"
+},
+"CVE-2025-8848": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00417,
+"epss_pct": 0.34723,
+"name": "LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-8848.yaml"
+},
+"CVE-2025-8868": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.24317,
+"epss_pct": 0.97699,
+"name": "Chef Automate < 4.13.295 \u2014 SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-8868.yaml"
+},
+"CVE-2025-8943": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.71601,
+"epss_pct": 0.99372,
+"name": "Flowise < 3.0.1 - Remote Command Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-8943.yaml"
+},
+"CVE-2025-9196": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.00937,
+"epss_pct": 0.58389,
+"name": "Trinity Audio <= 5.21.0 - Information Exposure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-9196.yaml"
+},
+"CVE-2025-9209": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.02196,
+"epss_pct": 0.81236,
+"name": "RestroPress 3.0.0-3.2.1 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-9209.yaml"
+},
+"CVE-2025-9242": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.913,
+"epss_pct": 0.99801,
+"name": "WatchGuard IKEv2 Out-of-Bounds Write Vulnerability",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-9242.yaml"
+},
+"CVE-2025-9316": {
+"name": "N-central - Authentication Bypass",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-9316.yaml"
+},
+"CVE-2025-9744": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.01806,
+"epss_pct": 0.7701,
+"name": "Loan Management System 1.0 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-9744.yaml"
+},
+"CVE-2025-9808": {
+"name": "The Events Calendar <= 6.15.2 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-9808.yaml"
+},
+"CVE-2025-9985": {
+"name": "Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-9985.yaml"
+},
+"CVE-2026-0257": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-565",
+"epss": 0.93905,
+"epss_pct": 0.99837,
+"name": "Palo Alto Networks PAN-OS - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-0257.yaml"
+},
+"CVE-2026-0545": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-306",
+"epss": 0.04392,
+"epss_pct": 0.90619,
+"name": "MLflow Job API - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0545.yaml"
+},
+"CVE-2026-0558": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.01936,
+"epss_pct": 0.78636,
+"name": "LolLMS <= 2.2.0 - Unauthenticated File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0558.yaml"
+},
+"CVE-2026-0560": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.01765,
+"epss_pct": 0.76462,
+"name": "LolLMS < 2.2.0 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0560.yaml"
+},
+"CVE-2026-0594": {
+"name": "WordPress List Site Contributors < 1.1.8 - Reflected XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0594.yaml"
+},
+"CVE-2026-0717": {
+"epss": 0.0062,
+"epss_pct": 0.47304,
+"name": "LottieFiles for Gutenberg <= 3.0.0 - Unauthenticated Settings Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0717.yaml"
+},
+"CVE-2026-0740": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.62903,
+"epss_pct": 0.99135,
+"name": "Ninja Forms File Uploads <= 3.3.26 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0740.yaml"
+},
+"CVE-2026-0743": {
+"cvss": 4.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00576,
+"epss_pct": 0.45137,
+"name": "WP Content Permission <= 1.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0743.yaml"
+},
+"CVE-2026-0770": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.63417,
+"epss_pct": 0.99149,
+"name": "Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0770.yaml"
+},
+"CVE-2026-0829": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.00682,
+"epss_pct": 0.49962,
+"name": "Frontend File Manager Plugin <= 23.5 - Unauthenticated Arbitrary Email Sending",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0829.yaml"
+},
+"CVE-2026-0926": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-98",
+"epss": 0.09396,
+"epss_pct": 0.95045,
+"name": "Prodigy Commerce <= 3.3.0 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0926.yaml"
+},
+"CVE-2026-10520": {
+"name": "Ivanti Sentry - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-10520.yaml"
+},
+"CVE-2026-10580": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-285",
+"epss": 0.02948,
+"epss_pct": 0.86186,
+"name": "Hippoo Mobile App for WooCommerce <= 1.9.4 - Authentication Bypass to Admin Account Takeover",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-10580.yaml"
+},
+"CVE-2026-10768": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.01873,
+"epss_pct": 0.77888,
+"name": "Drupal LocalGov Workflows < 1.6.0 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-10768.yaml"
+},
+"CVE-2026-10795": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-347",
+"epss": 0.03578,
+"epss_pct": 0.88566,
+"name": "UpdraftPlus WP Backup & Migration Plugin - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-10795.yaml"
+},
+"CVE-2026-10823": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01524,
+"epss_pct": 0.72848,
+"name": "YMC Filter WordPress - Unauthenticated Post Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-10823.yaml"
+},
+"CVE-2026-1115": {
+"cvss": 9.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
+"cwe": "CWE-79",
+"epss": 0.0121,
+"epss_pct": 0.663,
+"name": "parisneo/lollms < 2.2.0 - Authenticated Stored XSS",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1115.yaml"
+},
+"CVE-2026-11387": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.02208,
+"epss_pct": 0.81336,
+"name": "SMS Alert \u2013 SMS & OTP for WooCommerce - Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-11387.yaml"
+},
+"CVE-2026-11801": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.00967,
+"epss_pct": 0.59355,
+"name": "WPAdverts <= 2.3.2 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-11801.yaml"
+},
+"CVE-2026-1207": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
+"cwe": "CWE-89",
+"epss": 0.12976,
+"epss_pct": 0.96039,
+"name": "Django RasterField - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1207.yaml"
+},
+"CVE-2026-12394": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.01492,
+"epss_pct": 0.72306,
+"name": "WordPress MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-12394.yaml"
+},
+"CVE-2026-1277": {
+"cvss": 4.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.00592,
+"epss_pct": 0.45935,
+"name": "URL Shortify <= 1.12.1 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1277.yaml"
+},
+"CVE-2026-12898": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
+"cwe": "CWE-22",
+"epss": 0.01352,
+"epss_pct": 0.69585,
+"name": "All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Write",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-12898.yaml"
+},
+"CVE-2026-1296": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.0046,
+"epss_pct": 0.38131,
+"name": "Frontend Post Submission Manager Lite <= 1.2.7 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1296.yaml"
+},
+"CVE-2026-13001": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-20",
+"epss": 0.03757,
+"epss_pct": 0.89112,
+"name": "Podlove Podcast Publisher <= 4.5.1 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-13001.yaml"
+},
+"CVE-2026-1306": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.04458,
+"epss_pct": 0.90742,
+"name": "WordPress midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1306.yaml"
+},
+"CVE-2026-1314": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.00892,
+"epss_pct": 0.56941,
+"name": "WordPress 3D FlipBook <= 1.16.17 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1314.yaml"
+},
+"CVE-2026-13147": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.00912,
+"epss_pct": 0.57542,
+"name": "WordPress Kirki < 6.0.12 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-13147.yaml"
+},
+"CVE-2026-1357": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.32714,
+"epss_pct": 0.98221,
+"name": "WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1357.yaml"
+},
+"CVE-2026-1368": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.01211,
+"epss_pct": 0.66315,
+"name": "Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1368.yaml"
+},
+"CVE-2026-13731": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00889,
+"epss_pct": 0.56833,
+"name": "WPBot <= 8.4.9 - Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-13731.yaml"
+},
+"CVE-2026-1405": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.03177,
+"epss_pct": 0.87139,
+"name": "WordPress Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1405.yaml"
+},
+"CVE-2026-14483": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.03639,
+"epss_pct": 0.88747,
+"name": "Realtyna Organic IDX/WPL <= 5.2.0 - Unauthenticated Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-14483.yaml"
+},
+"CVE-2026-14894": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.03484,
+"epss_pct": 0.88283,
+"name": "WordPress Super Forms <= 6.3.313 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-14894.yaml"
+},
+"CVE-2026-1492": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.24229,
+"epss_pct": 0.97689,
+"name": "WordPress User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1492.yaml"
+},
+"CVE-2026-15094": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00686,
+"epss_pct": 0.50152,
+"name": "WP Hotel Booking <= 2.3.2 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-15094.yaml"
+},
+"CVE-2026-15409": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.83658,
+"epss_pct": 0.99668,
+"name": "SonicWall SMA1000 - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-15409.yaml"
+},
+"CVE-2026-1557": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.01722,
+"epss_pct": 0.75872,
+"name": "WP Responsive Images <= 1.0 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1557.yaml"
+},
+"CVE-2026-15733": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.13545,
+"epss_pct": 0.96177,
+"name": "WGDashboard <= 4.3.2 - Authenticated OS Command Injection /etc/passwd Read",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-15733.yaml"
+},
+"CVE-2026-1581": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.01727,
+"epss_pct": 0.75932,
+"name": "wpForo Forum <= 2.4.14 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1581.yaml"
+},
+"CVE-2026-15826": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-704",
+"epss": 0.03911,
+"epss_pct": 0.89548,
+"name": "User Profile Builder 3.16.4 - Unauthenticated Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-15826.yaml"
+},
+"CVE-2026-1603": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-288",
+"epss": 0.8056,
+"epss_pct": 0.99593,
+"name": "Ivanti Endpoint Manager - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1603.yaml"
+},
+"CVE-2026-16232": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.72051,
+"epss_pct": 0.99385,
+"name": "Check Point Security Management Server - SmartConsole Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-16232.yaml"
+},
+"CVE-2026-16268": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.00437,
+"epss_pct": 0.36523,
+"name": "Newsletters < 4.16 - Unauthenticated SSRF via SNS Bounce Handler",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-16268.yaml"
+},
+"CVE-2026-1731": {
+"cwe": "CWE-78",
+"epss": 0.89396,
+"epss_pct": 0.99772,
+"name": "BeyondTrust Remote Support - Unauthenticated WebSocket RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-1731.yaml"
+},
+"CVE-2026-17505": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00804,
+"epss_pct": 0.54198,
+"name": "WordPress TranslatePress < 3.2.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-17505.yaml"
+},
+"CVE-2026-17532": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00817,
+"epss_pct": 0.54606,
+"name": "Seraphinite Accelerator <= 2.29.18 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-17532.yaml"
+},
+"CVE-2026-17594": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N",
+"cwe": "CWE-863",
+"epss": 0.00613,
+"epss_pct": 0.46937,
+"name": "Sonatype Nexus Repository < 3.95.0 - Privilege Escalation via Repository Format Mismatch",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-17594.yaml"
+},
+"CVE-2026-1830": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.08095,
+"epss_pct": 0.94406,
+"name": "Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1830.yaml"
+},
+"CVE-2026-18577": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-288",
+"epss": 0.54068,
+"epss_pct": 0.98928,
+"name": "N-able N-central < 2026.3.1.10 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-18577.yaml"
+},
+"CVE-2026-1890": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-862",
+"epss": 0.00682,
+"epss_pct": 0.49962,
+"name": "LeadConnector < 3.0.22 - Unauthenticated Arbitrary Data Write",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1890.yaml"
+},
+"CVE-2026-18963": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-640",
+"epss": 0.03239,
+"epss_pct": 0.87401,
+"name": "Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-18963.yaml"
+},
+"CVE-2026-19478": {
+"cvss": 9.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.06001,
+"epss_pct": 0.92806,
+"name": "GitLab CE/EE - GraphQL @gl_introduced Arbitrary Method Invocation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-19478.yaml"
+},
+"CVE-2026-19598": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-863",
+"epss": 0.02791,
+"epss_pct": 0.8541,
+"name": "Pods <= 3.3.9 - Unauthenticated Privilege Escalation via pods_admin AJAX Router",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-19598.yaml"
+},
+"CVE-2026-1980": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.00829,
+"epss_pct": 0.54985,
+"name": "WPBookit <= 1.0.8 - Unauthenticated Customer Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1980.yaml"
+},
+"CVE-2026-19900": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.02243,
+"epss_pct": 0.81624,
+"name": "LB-LINK Routers - Unauthenticated Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-19900.yaml"
+},
+"CVE-2026-20079": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-288",
+"epss": 0.35946,
+"epss_pct": 0.98356,
+"name": "Cisco Secure Firewall Management Center - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-20079.yaml"
+},
+"CVE-2026-20182": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.91522,
+"epss_pct": 0.99805,
+"name": "Cisco Catalyst SD-WAN Controller - vHub Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-20182.yaml"
+},
+"CVE-2026-2025": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01379,
+"epss_pct": 0.70164,
+"name": "Mail Mint < 1.19.5 - Unauthenticated Email Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2025.yaml"
+},
+"CVE-2026-20253": {
+"name": "Splunk Enterprise & Cloud Platform - Unrestricted File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-20253.yaml"
+},
+"CVE-2026-20896": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-290",
+"epss": 0.02755,
+"epss_pct": 0.85196,
+"name": "Gitea Docker Image <= 1.26.2 - Reverse Proxy Header Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-20896.yaml"
+},
+"CVE-2026-21445": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-306",
+"epss": 0.3371,
+"epss_pct": 0.98267,
+"name": "Langflow - Broken Access Control",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21445.yaml"
+},
+"CVE-2026-21484": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"epss": 0.00779,
+"epss_pct": 0.53383,
+"name": "AnythingLLM - Username Enumeration via Password Recovery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21484.yaml"
+},
+"CVE-2026-21643": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.94085,
+"epss_pct": 0.99839,
+"name": "Fortinet FortiClientEMS 7.4.4 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21643.yaml"
+},
+"CVE-2026-21858": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
+"cwe": "CWE-20",
+"epss": 0.78197,
+"epss_pct": 0.99543,
+"name": "n8n Webhooks - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21858.yaml"
+},
+"CVE-2026-21859": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.00772,
+"epss_pct": 0.5313,
+"name": "Mailpit < 1.28.3 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21859.yaml"
+},
+"CVE-2026-21877": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.05373,
+"epss_pct": 0.92083,
+"name": "n8n >= 0.123.0 and < 1.121.3 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21877.yaml"
+},
+"CVE-2026-21891": {
+"cvss": 9.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
+"cwe": "CWE-287",
+"epss": 0.02217,
+"epss_pct": 0.81411,
+"name": "ZimaOS - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21891.yaml"
+},
+"CVE-2026-22200": {
+"cwe": "CWE-74",
+"epss": 0.73606,
+"epss_pct": 0.99429,
+"name": "osTicket - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-22200.yaml"
+},
+"CVE-2026-22557": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.28116,
+"epss_pct": 0.97967,
+"name": "UniFi Network Application - Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-22557.yaml"
+},
+"CVE-2026-2262": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-284",
+"epss": 0.0239,
+"epss_pct": 0.82781,
+"name": "Easy Appointments <= 3.12.21 - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2262.yaml"
+},
+"CVE-2026-22683": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-862",
+"epss": 0.02609,
+"epss_pct": 0.84304,
+"name": "Windmill < 1.603.3 - Operator Authorization Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-22683.yaml"
+},
+"CVE-2026-22739": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
+"cwe": "CWE-22",
+"epss": 0.0122,
+"epss_pct": 0.66554,
+"name": "Spring Cloud Config Server - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-22739.yaml"
+},
+"CVE-2026-22778": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-209",
+"epss": 0.03723,
+"epss_pct": 0.89012,
+"name": "vLLM 0.8.3 - 0.14.0 - Information Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-22778.yaml"
+},
+"CVE-2026-22812": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.17326,
+"epss_pct": 0.96886,
+"name": "OpenCode < 1.0.216 - Unauthenticated Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-22812.yaml"
+},
+"CVE-2026-23482": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.01523,
+"epss_pct": 0.72835,
+"name": "Blinko < 1.8.4 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23482.yaml"
+},
+"CVE-2026-23483": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.00771,
+"epss_pct": 0.53128,
+"name": "Blinko <= 1.8.3 - Path Traversal via /plugins",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23483.yaml"
+},
+"CVE-2026-23486": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.00711,
+"epss_pct": 0.51074,
+"name": "Blinko <= 1.8.3 - User Information Leak",
+"severity": "low",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23486.yaml"
+},
+"CVE-2026-23491": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.04108,
+"epss_pct": 0.90044,
+"name": "InvoicePlane <= 1.6.3 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23491.yaml"
+},
+"CVE-2026-23536": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.01912,
+"epss_pct": 0.78353,
+"name": "Feast Feature Server <=0.58.0 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23536.yaml"
+},
+"CVE-2026-23550": {
+"name": "Modular DS - Broken Access Control",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23550.yaml"
+},
+"CVE-2026-23696": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.16017,
+"epss_pct": 0.96674,
+"name": "Windmill < 1.603.3 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23696.yaml"
+},
+"CVE-2026-23744": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.45026,
+"epss_pct": 0.98688,
+"name": "MCPJam Inspector - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23744.yaml"
+},
+"CVE-2026-23760": {
+"name": "SmarterTools SmarterMail - Admin Password Reset",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23760.yaml"
+},
+"CVE-2026-23829": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-93",
+"epss": 0.01441,
+"epss_pct": 0.71339,
+"name": "Mailpit < 1.28.2 - SMTP CRLF Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2026/CVE-2026-23829.yaml"
+},
+"CVE-2026-24061": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-88",
+"epss": 0.97878,
+"epss_pct": 0.99903,
+"name": "GNU Inetutils telnetd - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-24061.yaml"
+},
+"CVE-2026-24128": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00503,
+"epss_pct": 0.40977,
+"name": "XWiki Platform Distribution Flavor Main - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-24128.yaml"
+},
+"CVE-2026-2413": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.02331,
+"epss_pct": 0.82341,
+"name": "Ally \u2013 Web Accessibility & Usability <= 4.0.3 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2413.yaml"
+},
+"CVE-2026-2416": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.01392,
+"epss_pct": 0.70415,
+"name": "Geo Mashup <= 1.13.17 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2416.yaml"
+},
+"CVE-2026-24207": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-288",
+"epss": 0.02552,
+"epss_pct": 0.8392,
+"name": "NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-24207.yaml"
+},
+"CVE-2026-24423": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.87693,
+"epss_pct": 0.99747,
+"name": "SmarterMail - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-24423.yaml"
+},
+"CVE-2026-24477": {
+"name": "AnythingLLM - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-24477.yaml"
+},
+"CVE-2026-25231": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-284",
+"name": "FileRise <= 3.3.0 - Unauthenticated File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25231.yaml"
+},
+"CVE-2026-25512": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.18536,
+"epss_pct": 0.97043,
+"name": "Group-Office < 26.0.5 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25512.yaml"
+},
+"CVE-2026-25527": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.0092,
+"epss_pct": 0.57792,
+"name": "changedetection.io <= 0.52.9 - Unauthenticated Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25527.yaml"
+},
+"CVE-2026-25545": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.01769,
+"epss_pct": 0.76534,
+"name": "Astro SSR - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25545.yaml"
+},
+"CVE-2026-25555": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.01824,
+"epss_pct": 0.7726,
+"name": "OpenBullet2 <= 0.3.2 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25555.yaml"
+},
+"CVE-2026-25616": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00383,
+"epss_pct": 0.31299,
+"name": "Blesta <= 5.13.1 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25616.yaml"
+},
+"CVE-2026-25892": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"cwe": "CWE-20",
+"epss": 0.01586,
+"epss_pct": 0.73847,
+"name": "Adminer 4.6.2 - 5.4.1 Unauthenticated Persistent DoS",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25892.yaml"
+},
+"CVE-2026-25895": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.11195,
+"epss_pct": 0.95637,
+"name": "FUXA <= 1.2.9 - Unauthenticated Path Traversal to Arbitrary File Write",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25895.yaml"
+},
+"CVE-2026-2614": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.02982,
+"epss_pct": 0.86336,
+"name": "MLflow <= 3.9.0 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2614.yaml"
+},
+"CVE-2026-26190": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.36912,
+"epss_pct": 0.98399,
+"name": "Milvus - Unauthenticated Metrics API Access",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-26190.yaml"
+},
+"CVE-2026-26217": {
+"epss": 0.01914,
+"epss_pct": 0.7838,
+"name": "Crawl4AI < 0.8.0 - Local File Inclusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-26217.yaml"
+},
+"CVE-2026-26341": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+"cwe": "CWE-1392",
+"epss": 0.02663,
+"epss_pct": 0.84643,
+"name": "Tattile Camera < 1.181.5 - Default Login",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-26341.yaml"
+},
+"CVE-2026-2652": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
+"cwe": "CWE-306",
+"epss": 0.20783,
+"epss_pct": 0.97364,
+"name": "MLflow < 3.10.0 - Authentication Bypass on FastAPI Routes",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2652.yaml"
+},
+"CVE-2026-26980": {
+"cvss": 9.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
+"cwe": "CWE-89",
+"epss": 0.70208,
+"epss_pct": 0.9933,
+"name": "Ghost CMS Content API - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-26980.yaml"
+},
+"CVE-2026-2699": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-284",
+"epss": 0.59506,
+"epss_pct": 0.99055,
+"name": "Progress ShareFile Storage Zones Controller - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2699.yaml"
+},
+"CVE-2026-27174": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+"cwe": "CWE-94",
+"epss": 0.06996,
+"epss_pct": 0.93691,
+"name": "MajorDoMo - Unauthenticated RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27174.yaml"
+},
+"CVE-2026-27176": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00449,
+"epss_pct": 0.37433,
+"name": "MajorDoMo - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27176.yaml"
+},
+"CVE-2026-27483": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.11113,
+"epss_pct": 0.95619,
+"name": "MindsDB - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27483.yaml"
+},
+"CVE-2026-27542": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-266",
+"epss": 0.01737,
+"epss_pct": 0.7608,
+"name": "WooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27542.yaml"
+},
+"CVE-2026-27645": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00445,
+"epss_pct": 0.37143,
+"name": "Changedetection.io RSS Single Watch - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27645.yaml"
+},
+"CVE-2026-27760": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.34629,
+"epss_pct": 0.98303,
+"name": "OpenCATS - Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27760.yaml"
+},
+"CVE-2026-27771": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.01393,
+"epss_pct": 0.70438,
+"name": "Gitea Container Registry - Unauthorized Private Image Access",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27771.yaml"
+},
+"CVE-2026-27796": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01154,
+"epss_pct": 0.64751,
+"name": "Homarr < 1.54.0 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27796.yaml"
+},
+"CVE-2026-27826": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.13632,
+"epss_pct": 0.96201,
+"name": "mcp-atlassian < 0.17.0 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27826.yaml"
+},
+"CVE-2026-27833": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.01641,
+"epss_pct": 0.747,
+"name": "Piwigo < 16.3.0 - Unauthenticated Information Disclosure via History API",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27833.yaml"
+},
+"CVE-2026-27944": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.22162,
+"epss_pct": 0.97499,
+"name": "Nginx UI < 2.3.3 - Information Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27944.yaml"
+},
+"CVE-2026-27971": {
+"cvss": 9.2,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+"cwe": "CWE-502",
+"epss": 0.05416,
+"epss_pct": 0.92132,
+"name": "Qwik - Unauthenticated RCE via server$ Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27971.yaml"
+},
+"CVE-2026-28288": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-204",
+"epss": 0.00635,
+"epss_pct": 0.47987,
+"name": "Dify User Enumeration via Observable Response Discrepancy",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-28288.yaml"
+},
+"CVE-2026-28358": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-204",
+"epss": 0.00601,
+"epss_pct": 0.46361,
+"name": "NocoDB - User Enumeration",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-28358.yaml"
+},
+"CVE-2026-28409": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.03315,
+"epss_pct": 0.87703,
+"name": "WeGIA <= 3.6.4 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-28409.yaml"
+},
+"CVE-2026-28414": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-36",
+"epss": 0.03098,
+"epss_pct": 0.86814,
+"name": "Gradio - Absolute Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-28414.yaml"
+},
+"CVE-2026-28496": {
+"name": "FOSSBilling - Server-Side Template Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-28496.yaml"
+},
+"CVE-2026-29014": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.3949,
+"epss_pct": 0.98505,
+"name": "MetInfo CMS <= 8.1 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-29014.yaml"
+},
+"CVE-2026-29059": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
+"cwe": "CWE-22",
+"epss": 0.02945,
+"epss_pct": 0.86173,
+"name": "Windmill/Nextcloud Flow < 1.603.3 - Unauthenticated Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-29059.yaml"
+},
+"CVE-2026-29066": {
+"cvss": 6.2,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01025,
+"epss_pct": 0.61146,
+"name": "TinaCMS - Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-29066.yaml"
+},
+"CVE-2026-29183": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00625,
+"epss_pct": 0.47543,
+"name": "SiYuan Note - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-29183.yaml"
+},
+"CVE-2026-3001": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00473,
+"epss_pct": 0.39011,
+"name": "Gutenverse Plugin <= 3.4.6 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3001.yaml"
+},
+"CVE-2026-3018": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.01382,
+"epss_pct": 0.70221,
+"name": "WordPress Newsletters <= 4.13 - Unauthenticated SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3018.yaml"
+},
+"CVE-2026-3055": {
+"name": "Citrix NetScaler SAML IDP - Memory Overread",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3055.yaml"
+},
+"CVE-2026-30623": {
+"cwe": "CWE-77",
+"epss": 0.04997,
+"epss_pct": 0.91617,
+"name": "LiteLLM 1.18.10 - Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-30623.yaml"
+},
+"CVE-2026-30824": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.3625,
+"epss_pct": 0.98365,
+"name": "Flowise - NVIDIA NIM Endpoints Missing Authentication",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-30824.yaml"
+},
+"CVE-2026-30928": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01657,
+"epss_pct": 0.7492,
+"name": "Glances - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-30928.yaml"
+},
+"CVE-2026-30958": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-22",
+"epss": 0.01139,
+"epss_pct": 0.64334,
+"name": "OneUptime < 10.0.21 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-30958.yaml"
+},
+"CVE-2026-30965": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
+"cwe": "CWE-863",
+"epss": 0.01329,
+"epss_pct": 0.69039,
+"name": "Parse Server < 8.6.21 / 9.x < 9.5.2 - Session Token Exfiltration",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-30965.yaml"
+},
+"CVE-2026-31431": {
+"cvss": 7.8,
+"cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-787",
+"epss": 0.99907,
+"epss_pct": 0.99965,
+"name": "Copy Fail - Linux Kernel Local Privilege Escalation via AF_ALG",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-31431.yaml"
+},
+"CVE-2026-31807": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
+"cwe": "CWE-79",
+"epss": 0.00445,
+"epss_pct": 0.37137,
+"name": "SiYuan <= v3.5.9 - SVG Animate Element XSS",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31807.yaml"
+},
+"CVE-2026-31809": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
+"cwe": "CWE-79",
+"epss": 0.00505,
+"epss_pct": 0.41129,
+"name": "SiYuan <= v3.5.9 - Cross Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31809.yaml"
+},
+"CVE-2026-31816": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-74",
+"epss": 0.15339,
+"epss_pct": 0.96526,
+"name": "Budibase - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31816.yaml"
+},
+"CVE-2026-31831": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.01965,
+"epss_pct": 0.78941,
+"name": "Tautulli <= 2.16.1 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31831.yaml"
+},
+"CVE-2026-32230": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.00905,
+"epss_pct": 0.57325,
+"name": "Uptime-Kuma < v1.23.0 - Improper Access Control",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-32230.yaml"
+},
+"CVE-2026-32255": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.20776,
+"epss_pct": 0.97363,
+"name": "Kan <= 0.5.4 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-32255.yaml"
+},
+"CVE-2026-32475": {
+"cvss": 9.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.02374,
+"epss_pct": 0.82665,
+"name": "Elementor Pro <=4.2.1 - Unauthenticated Arbitrary File Upload via Form Handler",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-32475.yaml"
+},
+"CVE-2026-32583": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-862",
+"epss": 0.007,
+"epss_pct": 0.50644,
+"name": "Webnus Inc. Modern Events Calendar - Broken Access Control",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-32583.yaml"
+},
+"CVE-2026-32596": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.0155,
+"epss_pct": 0.73311,
+"name": "Glances - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-32596.yaml"
+},
+"CVE-2026-3296": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.03469,
+"epss_pct": 0.88234,
+"name": "Everest Forms WordPress Plugin <= 3.4.3 - PHP Object Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3296.yaml"
+},
+"CVE-2026-3300": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.39159,
+"epss_pct": 0.98488,
+"name": "Everest Forms Pro <= 1.9.12 - Unauthenticated RCE via Calculation Formula Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3300.yaml"
+},
+"CVE-2026-33017": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.96177,
+"epss_pct": 0.99872,
+"name": "Langflow < 1.9.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33017.yaml"
+},
+"CVE-2026-33032": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.36299,
+"epss_pct": 0.98367,
+"name": "Nginx UI - Broken Access Control",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33032.yaml"
+},
+"CVE-2026-33057": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.05289,
+"epss_pct": 0.91996,
+"name": "Mesop AI Sandbox <= 1.2.2 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33057.yaml"
+},
+"CVE-2026-3326": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.01866,
+"epss_pct": 0.778,
+"name": "XStore Theme < 9.7.3 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3326.yaml"
+},
+"CVE-2026-33340": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-306",
+"epss": 0.21629,
+"epss_pct": 0.97451,
+"name": "LoLLMs WEBUI - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33340.yaml"
+},
+"CVE-2026-3335": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-862",
+"epss": 0.01142,
+"epss_pct": 0.64408,
+"name": "Canto <= 3.1.1 - Missing Authorization to Unauthenticated File Upload",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3335.yaml"
+},
+"CVE-2026-33439": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.10005,
+"epss_pct": 0.95267,
+"name": "OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33439.yaml"
+},
+"CVE-2026-33453": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-915",
+"epss": 0.06157,
+"epss_pct": 0.92963,
+"name": "Apache Camel camel-coap - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-33453.yaml"
+},
+"CVE-2026-33476": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.03256,
+"epss_pct": 0.87473,
+"name": "SiYuan <= v3.6.1 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33476.yaml"
+},
+"CVE-2026-33478": {
+"name": "AVideo <= 26.0 - WWBN AVideo - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33478.yaml"
+},
+"CVE-2026-33497": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.19584,
+"epss_pct": 0.97189,
+"name": "Langflow < 1.7.0 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33497.yaml"
+},
+"CVE-2026-33534": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.01978,
+"epss_pct": 0.79083,
+"name": "EspoCRM <= 9.3.3 - Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33534.yaml"
+},
+"CVE-2026-33626": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.4525,
+"epss_pct": 0.98695,
+"name": "LMDeploy - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33626.yaml"
+},
+"CVE-2026-33868": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.00473,
+"epss_pct": 0.39086,
+"name": "Mastodon - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33868.yaml"
+},
+"CVE-2026-3395": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-94",
+"epss": 0.0388,
+"epss_pct": 0.89471,
+"name": "MaxSite CMS <=109.1 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3395.yaml"
+},
+"CVE-2026-3396": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.01473,
+"epss_pct": 0.71975,
+"name": "WCAPF WooCommerce Ajax Product Filter - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3396.yaml"
+},
+"CVE-2026-34036": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-98",
+"epss": 0.01464,
+"epss_pct": 0.71798,
+"name": "Dolibarr <=22.0.4 - Local File Inclusion",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34036.yaml"
+},
+"CVE-2026-34156": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-913",
+"epss": 0.34966,
+"epss_pct": 0.98317,
+"name": "NocoBase - VM Sandbox Escape to Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34156.yaml"
+},
+"CVE-2026-34197": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.9722,
+"epss_pct": 0.99889,
+"name": "Apache ActiveMQ - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34197.yaml"
+},
+"CVE-2026-34413": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.0311,
+"epss_pct": 0.86859,
+"name": "Xerte Online Toolkits <= 3.15 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34413.yaml"
+},
+"CVE-2026-34453": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-863",
+"epss": 0.01227,
+"epss_pct": 0.66747,
+"name": "SiYuan <= v3.6.1 - Bookmark Data Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34453.yaml"
+},
+"CVE-2026-34486": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.98616,
+"epss_pct": 0.9992,
+"name": "Apache Tomcat Tribes EncryptInterceptor Bypass - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34486.yaml"
+},
+"CVE-2026-34605": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00469,
+"epss_pct": 0.38756,
+"name": "SiYuan Note - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34605.yaml"
+},
+"CVE-2026-34847": {
+"cvss": 4.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.00401,
+"epss_pct": 0.33237,
+"name": "Hoppscotch <= 2026.2.1 - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34847.yaml"
+},
+"CVE-2026-34885": {
+"cvss": 8.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L",
+"cwe": "CWE-89",
+"epss": 0.01668,
+"epss_pct": 0.75093,
+"name": "WordPress Media Library Assistant <= 3.34 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34885.yaml"
+},
+"CVE-2026-34908": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-284",
+"epss": 0.85194,
+"epss_pct": 0.99698,
+"name": "UniFi OS - Authentication Bypass via Path Traversal (..%2f)",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34908.yaml"
+},
+"CVE-2026-34910": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"epss": 0.87468,
+"epss_pct": 0.99744,
+"name": "UniFi OS Server - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34910.yaml"
+},
+"CVE-2026-34976": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.02036,
+"epss_pct": 0.7972,
+"name": "Dgraph <=v25.3.0 - Admin Mutation Missing Authorization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34976.yaml"
+},
+"CVE-2026-35029": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-863",
+"epss": 0.26409,
+"epss_pct": 0.97858,
+"name": "LiteLLM - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-35029.yaml"
+},
+"CVE-2026-35037": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.00618,
+"epss_pct": 0.47169,
+"name": "Ech0 < 4.2.8 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-35037.yaml"
+},
+"CVE-2026-35273": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.95473,
+"epss_pct": 0.99863,
+"name": "Oracle PeopleSoft PeopleTools PSEMHUB - Pre-Auth Java Deserialization RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-35273.yaml"
+},
+"CVE-2026-35616": {
+"cwe": "CWE-284",
+"epss": 0.90749,
+"epss_pct": 0.99795,
+"name": "FortiClient EMS - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-35616.yaml"
+},
+"CVE-2026-3576": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-20",
+"epss": 0.12943,
+"epss_pct": 0.9603,
+"name": "Planyo Online Reservation System <= 3.0 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3576.yaml"
+},
+"CVE-2026-3584": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.07239,
+"epss_pct": 0.93879,
+"name": "WordPress Kali Forms <= 2.4.9 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3584.yaml"
+},
+"CVE-2026-38360": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.05982,
+"epss_pct": 0.92785,
+"name": "dash-uploader 0.1.0 - 0.7.0a2 - Unauthenticated Arbitrary File Write via Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-38360.yaml"
+},
+"CVE-2026-38361": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
+"cwe": "CWE-400",
+"epss": 0.02643,
+"epss_pct": 0.84517,
+"name": "dash-uploader 0.1.0 - 0.7.0a2 - Denial-of-Service via flowTotalChunks",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-38361.yaml"
+},
+"CVE-2026-3844": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.27701,
+"epss_pct": 0.97944,
+"name": "Breeze <= 2.4.4 - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3844.yaml"
+},
+"CVE-2026-3891": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.2506,
+"epss_pct": 0.97763,
+"name": "Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3891.yaml"
+},
+"CVE-2026-39339": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-284",
+"epss": 0.01351,
+"epss_pct": 0.69562,
+"name": "ChurchCRM - API Authentication Bypass via URL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-39339.yaml"
+},
+"CVE-2026-39352": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.01279,
+"epss_pct": 0.6797,
+"name": "Frappe Framework < 16.15.0 - Arbitrary File Read via render_include Path Traversal",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-39352.yaml"
+},
+"CVE-2026-39363": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
+"epss": 0.03396,
+"epss_pct": 0.87982,
+"name": "Vite Dev Server - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-39363.yaml"
+},
+"CVE-2026-39364": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.02095,
+"epss_pct": 0.80347,
+"name": "Vite Dev Server - Directory Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-39364.yaml"
+},
+"CVE-2026-39365": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.00914,
+"epss_pct": 0.57632,
+"name": "Vite Dev Server - Path Traversal in Optimized Deps .map Handling",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-39365.yaml"
+},
+"CVE-2026-39468": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.01221,
+"epss_pct": 0.66571,
+"name": "Meta Box <= 5.11.1 - Arbitrary File Deletion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-39468.yaml"
+},
+"CVE-2026-39808": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.92819,
+"epss_pct": 0.99821,
+"name": "Fortinet FortiSandbox - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-39808.yaml"
+},
+"CVE-2026-39987": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
+"cwe": "CWE-306",
+"epss": 0.97279,
+"epss_pct": 0.99891,
+"name": "Marimo <= 0.20.4 - Pre-Auth Terminal WebSocket RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-39987.yaml"
+},
+"CVE-2026-40105": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00549,
+"epss_pct": 0.43757,
+"name": "XWiki - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40105.yaml"
+},
+"CVE-2026-40151": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.00758,
+"epss_pct": 0.52679,
+"name": "PraisonAI AgentOS - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40151.yaml"
+},
+"CVE-2026-4020": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.39975,
+"epss_pct": 0.98523,
+"name": "Gravity SMTP WordPress Plugin - Sensitive Information Exposure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4020.yaml"
+},
+"CVE-2026-40217": {
+"cvss": 8.7,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+"cwe": "CWE-94",
+"epss": 0.15056,
+"epss_pct": 0.96477,
+"name": "LiteLLM < 1.25.0 - Remote Code Execution",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40217.yaml"
+},
+"CVE-2026-40242": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.00621,
+"epss_pct": 0.47323,
+"name": "Arcane <= 1.17.2 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40242.yaml"
+},
+"CVE-2026-40280": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.01559,
+"epss_pct": 0.73453,
+"name": "Gotenberg <= 8.30.1 - Server Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40280.yaml"
+},
+"CVE-2026-40308": {
+"cwe": "CWE-639",
+"epss": 0.00932,
+"epss_pct": 0.58209,
+"name": "My Calendar WordPress Plugin - Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40308.yaml"
+},
+"CVE-2026-40466": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.04783,
+"epss_pct": 0.91292,
+"name": "Apache ActiveMQ - Remote Code Execution via HTTP Discovery Transport Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40466.yaml"
+},
+"CVE-2026-4060": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.01422,
+"epss_pct": 0.70988,
+"name": "Geo Mashup <= 1.13.18 - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4060.yaml"
+},
+"CVE-2026-40878": {
+"cvss": 3.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
+"epss": 0.00805,
+"epss_pct": 0.54242,
+"name": "Mailcow < 2026-03b - Href Link Injection",
+"severity": "low",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40878.yaml"
+},
+"CVE-2026-40887": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
+"cwe": "CWE-89",
+"epss": 0.01762,
+"epss_pct": 0.7643,
+"name": "Vendure Core - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40887.yaml"
+},
+"CVE-2026-41042": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-20",
+"epss": 0.01512,
+"epss_pct": 0.72673,
+"name": "Apache Gravitino < 1.2.1 - Unauthenticated Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41042.yaml"
+},
+"CVE-2026-4106": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"epss": 0.00742,
+"epss_pct": 0.52163,
+"name": "HT Mega < 3.0.7 - Sensitive Information Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4106.yaml"
+},
+"CVE-2026-41176": {
+"cvss": 9.2,
+"cwe": "CWE-306",
+"epss": 0.32715,
+"epss_pct": 0.98221,
+"name": "Rclone RC - Broken Access Control",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41176.yaml"
+},
+"CVE-2026-41179": {
+"cvss": 9.2,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
+"cwe": "CWE-78",
+"epss": 0.08585,
+"epss_pct": 0.94684,
+"name": "RClone RC - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41179.yaml"
+},
+"CVE-2026-41432": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
+"cwe": "CWE-345",
+"epss": 0.0085,
+"epss_pct": 0.55635,
+"name": "New API < v0.12.10 - Stripe Webhook Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41432.yaml"
+},
+"CVE-2026-41492": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-200",
+"epss": 0.03082,
+"epss_pct": 0.86753,
+"name": "Dgraph <= 25.3.2 - Admin Token Disclosure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41492.yaml"
+},
+"CVE-2026-41640": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.01875,
+"epss_pct": 0.77911,
+"name": "NocoBase - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41640.yaml"
+},
+"CVE-2026-41641": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.01833,
+"epss_pct": 0.77375,
+"name": "NocoBase - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41641.yaml"
+},
+"CVE-2026-41940": {
+"name": "cPanel & WHM - Authentication Bypass via Session-File CRLF Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41940.yaml"
+},
+"CVE-2026-42031": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.01817,
+"epss_pct": 0.77163,
+"name": "CKAN DataStore SQL Search - SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42031.yaml"
+},
+"CVE-2026-42167": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.07389,
+"epss_pct": 0.93979,
+"name": "ProFTPD mod_sql - Preauth User Backdoor",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2026/CVE-2026-42167.yaml"
+},
+"CVE-2026-42208": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.8942,
+"epss_pct": 0.99773,
+"name": "LiteLLM - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42208.yaml"
+},
+"CVE-2026-42271": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.83594,
+"epss_pct": 0.99664,
+"name": "LiteLLM - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42271.yaml"
+},
+"CVE-2026-42281": {
+"cvss": 9.2,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N",
+"cwe": "CWE-918",
+"epss": 0.01623,
+"epss_pct": 0.74412,
+"name": "MagicMirror <= 2.35.0 - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42281.yaml"
+},
+"CVE-2026-42461": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.01283,
+"epss_pct": 0.68055,
+"name": "Arcane < 1.18.0 - Unauthenticated Template and Env Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42461.yaml"
+},
+"CVE-2026-42569": {
+"cvss": 9.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H",
+"epss": 0.01173,
+"epss_pct": 0.65293,
+"name": "phpVMS < 7.0.6 - Legacy Importer Authorization Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42569.yaml"
+},
+"CVE-2026-4257": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.41475,
+"epss_pct": 0.98573,
+"name": "WordPress Contact Form by Supsystic - Server-Side Template Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4257.yaml"
+},
+"CVE-2026-42589": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.03013,
+"epss_pct": 0.86468,
+"name": "Gotenberg - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42589.yaml"
+},
+"CVE-2026-42596": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-918",
+"epss": 0.01239,
+"epss_pct": 0.67004,
+"name": "Gotenberg < 8.31.0 - Server-Side Request Forgery",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42596.yaml"
+},
+"CVE-2026-42647": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L",
+"cwe": "CWE-89",
+"epss": 0.01323,
+"epss_pct": 0.68909,
+"name": "JoomSport <= 5.7.7 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42647.yaml"
+},
+"CVE-2026-42796": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.02747,
+"epss_pct": 0.85148,
+"name": "Arelle < 2.39.10 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42796.yaml"
+},
+"CVE-2026-42878": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.00552,
+"epss_pct": 0.43922,
+"name": "FacturaScripts - Unauthenticated phpinfo Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42878.yaml"
+},
+"CVE-2026-44177": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N",
+"cwe": "CWE-22",
+"epss": 0.0177,
+"epss_pct": 0.76552,
+"name": "Kirby CMS 5.3.0-5.4.0 - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-44177.yaml"
+},
+"CVE-2026-44262": {
+"cvss": 9.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
+"cwe": "CWE-94",
+"epss": 0.0586,
+"epss_pct": 0.92667,
+"name": "Scramble Laravel - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-44262.yaml"
+},
+"CVE-2026-44338": {
+"cvss": 7.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
+"cwe": "CWE-306",
+"epss": 0.28571,
+"epss_pct": 0.97994,
+"name": "PraisonAI - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-44338.yaml"
+},
+"CVE-2026-44381": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-89",
+"epss": 0.00666,
+"epss_pct": 0.49304,
+"name": "MISP < 2.5.37 - SQL Injection",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-44381.yaml"
+},
+"CVE-2026-44551": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-287",
+"epss": 0.01461,
+"epss_pct": 0.71726,
+"name": "Open WebUI 'LDAP Empty Password' - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-44551.yaml"
+},
+"CVE-2026-44578": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.38872,
+"epss_pct": 0.98479,
+"name": "Next.js WebSocket Upgrade Handler - SSRF",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-44578.yaml"
+},
+"CVE-2026-4480": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.1393,
+"epss_pct": 0.96269,
+"name": "Samba Printing Subsystem - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-4480.yaml"
+},
+"CVE-2026-44825": {
+"cvss": 8.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.02892,
+"epss_pct": 0.85929,
+"name": "Apache Solr 9.4.0-9.10.1 / 10.0.0 - Hardcoded Default Credentials",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-44825.yaml"
+},
+"CVE-2026-45298": {
+"cvss": 8.6,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.01491,
+"epss_pct": 0.72284,
+"name": "Dozzle - Server Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-45298.yaml"
+},
+"CVE-2026-45332": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.0134,
+"epss_pct": 0.69312,
+"name": "Automad < 2.0.0-beta.28 - Unauthenticated Admin Password Hash Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-45332.yaml"
+},
+"CVE-2026-45397": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.0075,
+"epss_pct": 0.52412,
+"name": "Open WebUI < 0.9.5 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-45397.yaml"
+},
+"CVE-2026-45695": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-88",
+"epss": 0.0161,
+"epss_pct": 0.7421,
+"name": "Kopia Server 0.23.0 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-45695.yaml"
+},
+"CVE-2026-4631": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.1548,
+"epss_pct": 0.96552,
+"name": "Cockpit Web Console < 360 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4631.yaml"
+},
+"CVE-2026-46339": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.03352,
+"epss_pct": 0.87834,
+"name": "9Router <= 0.4.36 - Unauthenticated RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-46339.yaml"
+},
+"CVE-2026-46364": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.01709,
+"epss_pct": 0.75701,
+"name": "phpMyFAQ <= 4.1.1 - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-46364.yaml"
+},
+"CVE-2026-46372": {
+"cvss": 8.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.00866,
+"epss_pct": 0.56159,
+"name": "SillyTavern - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-46372.yaml"
+},
+"CVE-2026-46442": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.3634,
+"epss_pct": 0.9837,
+"name": "Flowise < 3.1.2 - node-custom-function Unauthorized RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-46442.yaml"
+},
+"CVE-2026-46670": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.01654,
+"epss_pct": 0.74872,
+"name": "YesWiki < 4.6.4 - Unauthenticated SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-46670.yaml"
+},
+"CVE-2026-46725": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.02625,
+"epss_pct": 0.844,
+"name": "TYPO3 ceselector Extension - Insecure Deserialization",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-46725.yaml"
+},
+"CVE-2026-47668": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.03882,
+"epss_pct": 0.89478,
+"name": "DbGate - Remote Code Execution via Anonymous JWT",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-47668.yaml"
+},
+"CVE-2026-47670": {
+"cvss": 9.4,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
+"cwe": "CWE-77",
+"epss": 0.01714,
+"epss_pct": 0.75775,
+"name": "DbGate - Remote Code Execution via Dynamic Import Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-47670.yaml"
+},
+"CVE-2026-47717": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-201",
+"epss": 0.01204,
+"epss_pct": 0.6609,
+"name": "FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-47717.yaml"
+},
+"CVE-2026-48030": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.05849,
+"epss_pct": 0.92649,
+"name": "Pheditor 2.0.1-2.0.3 - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48030.yaml"
+},
+"CVE-2026-4810": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/U:Amber",
+"epss": 0.01818,
+"epss_pct": 0.7718,
+"name": "Google ADK-Python - Unauthenticated Builder Endpoint",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4810.yaml"
+},
+"CVE-2026-48282": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.42388,
+"epss_pct": 0.98602,
+"name": "Adobe ColdFusion - RDS Arbitrary File Write",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48282.yaml"
+},
+"CVE-2026-48313": {
+"name": "ColdFusion - Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48313.yaml"
+},
+"CVE-2026-48611": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.0386,
+"epss_pct": 0.89423,
+"name": "phpBB < 3.3.17 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48611.yaml"
+},
+"CVE-2026-48710": {
+"cvss": 6.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N",
+"cwe": "CWE-1289",
+"epss": 0.02099,
+"epss_pct": 0.80383,
+"name": "Starlette - Improper Validation of Unsafe Equivalence in Input",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48710.yaml"
+},
+"CVE-2026-48907": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-284",
+"epss": 0.781,
+"epss_pct": 0.99541,
+"name": "Joomla! JCE extension < 2.9.99.5 unauthenticated RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48907.yaml"
+},
+"CVE-2026-48908": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-284",
+"epss": 0.14824,
+"epss_pct": 0.96438,
+"name": "Joomla SP Page Builder <= 6.6.1 - Unauthenticated Arbitrary File Upload RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-48908.yaml"
+},
+"CVE-2026-48909": {
+"cvss": 9.5,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
+"cwe": "CWE-502",
+"epss": 0.04941,
+"epss_pct": 0.91533,
+"name": "Joomla SP LMS <= 4.1.3 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-48909.yaml"
+},
+"CVE-2026-48939": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.19727,
+"epss_pct": 0.97209,
+"name": "Joomla iCagenda < 3.9.10 - Unauthenticated Arbitrary File Upload RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48939.yaml"
+},
+"CVE-2026-49049": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-284",
+"epss": 0.00992,
+"epss_pct": 0.60105,
+"name": "JoomShaper Helix3 <=3.1.0 - Unauthenticated Arbitrary JSON File Write",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-49049.yaml"
+},
+"CVE-2026-49069": {
+"cvss": 7.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
+"cwe": "CWE-79",
+"epss": 0.01171,
+"epss_pct": 0.65241,
+"name": "WPZOOM Portfolio <= 1.4.21 - Reflected Cross-Site Scripting",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-49069.yaml"
+},
+"CVE-2026-49777": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-506",
+"epss": 0.01656,
+"epss_pct": 0.74903,
+"name": "WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-49777.yaml"
+},
+"CVE-2026-4987": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-20",
+"epss": 0.00955,
+"epss_pct": 0.58939,
+"name": "SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via form_id",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4987.yaml"
+},
+"CVE-2026-49952": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-323",
+"epss": 0.04717,
+"epss_pct": 0.91185,
+"name": "Discuz! X5.0 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-49952.yaml"
+},
+"CVE-2026-50160": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
+"cwe": "CWE-915",
+"epss": 0.01701,
+"epss_pct": 0.75587,
+"name": "Hoppscotch <= 2026.4.1 - Mass Assignment JWT_SECRET Overwrite",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-50160.yaml"
+},
+"CVE-2026-50229": {
+"cwe": "CWE-80",
+"epss": 0.04091,
+"epss_pct": 0.90004,
+"name": "Apache Tomcat - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-50229.yaml"
+},
+"CVE-2026-50230": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00406,
+"epss_pct": 0.33705,
+"name": "Lyrion Music Server <= 9.2.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-50230.yaml"
+},
+"CVE-2026-5027": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.31661,
+"epss_pct": 0.98165,
+"name": "Langflow <= 1.8.4 - Path Traversal to RCE via File Upload",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-5027.yaml"
+},
+"CVE-2026-5032": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.03057,
+"epss_pct": 0.86657,
+"name": "W3 Total Cache <= 2.9.3 - Unauthenticated Dynamic Security Token Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-5032.yaml"
+},
+"CVE-2026-5073": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-89",
+"epss": 0.01383,
+"epss_pct": 0.70238,
+"name": "WordPress ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-5073.yaml"
+},
+"CVE-2026-50751": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
+"epss": 0.83771,
+"epss_pct": 0.99669,
+"name": "Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-50751.yaml"
+},
+"CVE-2026-52773": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"name": "YesWiki Archived Revision - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-52773.yaml"
+},
+"CVE-2026-52774": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"name": "YesWiki Bazar Widget - Reflected XSS via 'id' Parameter",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-52774.yaml"
+},
+"CVE-2026-52806": {
+"cvss": 9.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-77",
+"epss": 0.07934,
+"epss_pct": 0.94314,
+"name": "Gogs <= 0.14.2 - Authenticated RCE via git rebase Argument Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-52806.yaml"
+},
+"CVE-2026-52815": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.01488,
+"epss_pct": 0.72234,
+"name": "Gogs < 0.14.3 - Unauthenticated Organization Teams Disclosure",
+"severity": "low",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-52815.yaml"
+},
+"CVE-2026-52824": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-1188",
+"name": "Kimai <= 2.57.0 - Default APP_SECRET Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-52824.yaml"
+},
+"CVE-2026-53519": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-22",
+"epss": 0.01928,
+"epss_pct": 0.78537,
+"name": "Nezha Dashboard < 2.0.13 - Path Traversal",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53519.yaml"
+},
+"CVE-2026-53576": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.03296,
+"epss_pct": 0.87633,
+"name": "Kestra <= 1.3.20 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53576.yaml"
+},
+"CVE-2026-53629": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"name": "GLPI - Blind SQL Injection in History Log Filter (LogBleed)",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53629.yaml"
+},
+"CVE-2026-53753": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.029,
+"epss_pct": 0.85969,
+"name": "Crawl4AI <= 0.8.6 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53753.yaml"
+},
+"CVE-2026-53755": {
+"cvss": 8.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
+"cwe": "CWE-918",
+"name": "crawl4ai < 0.8.9 - Server Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53755.yaml"
+},
+"CVE-2026-53787": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.05638,
+"epss_pct": 0.92408,
+"name": "Magento 2 Amasty Order Attributes < 4.0.0 - Unauthenticated Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53787.yaml"
+},
+"CVE-2026-53976": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-22",
+"epss": 0.01899,
+"epss_pct": 0.78201,
+"name": "OpenChamber <1.13.0 - Unauthenticated Arbitrary File Read",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53976.yaml"
+},
+"CVE-2026-54066": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.02386,
+"epss_pct": 0.82747,
+"name": "SiYuan <= 3.6.5 - Unauthenticated Path Traversal",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-54066.yaml"
+},
+"CVE-2026-54069": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-346",
+"epss": 0.00579,
+"epss_pct": 0.45319,
+"name": "SiYuan Note <= 3.6.5 - Authentication Bypass",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-54069.yaml"
+},
+"CVE-2026-54157": {
+"cwe": "CWE-918",
+"epss": 0.0183,
+"epss_pct": 0.77331,
+"name": "LobeHub LobeChat <= 2.1.56 - Server-Side Request Forgery",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-54157.yaml"
+},
+"CVE-2026-54236": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-532",
+"epss": 0.00927,
+"epss_pct": 0.58016,
+"name": "vLLM <= 0.23.0 - Anthropic Router Heap Address Information Leak",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-54236.yaml"
+},
+"CVE-2026-54836": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L",
+"cwe": "CWE-89",
+"epss": 0.01343,
+"epss_pct": 0.69372,
+"name": "YMC Filter - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-54836.yaml"
+},
+"CVE-2026-54917": {
+"cvss": 7.8,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N",
+"cwe": "CWE-22",
+"epss": 0.01219,
+"epss_pct": 0.66527,
+"name": "SeaweedFS <= 4.29 - Path Traversal File Write",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-54917.yaml"
+},
+"CVE-2026-55040": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-1390",
+"epss": 0.39652,
+"epss_pct": 0.98513,
+"name": "Microsoft SharePoint Server - JWT Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-55040.yaml"
+},
+"CVE-2026-55087": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"epss": 0.00523,
+"epss_pct": 0.42303,
+"name": "Etherpad 2.1.0 <= 3.0.0 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-55087.yaml"
+},
+"CVE-2026-55224": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
+"cwe": "CWE-22",
+"name": "MineAdmin < 3.2.0-alpha.2 - Plugin Path Traversal to RCE",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-55224.yaml"
+},
+"CVE-2026-55229": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-918",
+"epss": 0.01514,
+"epss_pct": 0.72698,
+"name": "Gotenberg < 8.34.0 - Local File Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-55229.yaml"
+},
+"CVE-2026-55450": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H",
+"epss": 0.0119,
+"epss_pct": 0.65747,
+"name": "Langflow < 1.9.1 - Unauthenticated File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-55450.yaml"
+},
+"CVE-2026-55592": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00284,
+"epss_pct": 0.20522,
+"name": "Dashy <= 4.3.6 - Reflected XSS via Workspace",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-55592.yaml"
+},
+"CVE-2026-5615": {
+"cvss": 4.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
+"cwe": "CWE-79",
+"epss": 0.00773,
+"epss_pct": 0.53175,
+"name": "VvvebJs <= 2.0.5 - Cross-Site Scripting",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-5615.yaml"
+},
+"CVE-2026-56265": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-798",
+"epss": 0.02639,
+"epss_pct": 0.84491,
+"name": "Crawl4AI < 0.8.7 - Hardcoded JWT Signing Key Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56265.yaml"
+},
+"CVE-2026-56270": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-306",
+"epss": 0.02048,
+"epss_pct": 0.79849,
+"name": "Flowise <= 3.0.13 - Unauthenticated OAuth Configuration Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56270.yaml"
+},
+"CVE-2026-56290": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.30375,
+"epss_pct": 0.98096,
+"name": "Page Builder CK <= 3.5.10 - Unauthenticated Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56290.yaml"
+},
+"CVE-2026-56291": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.14595,
+"epss_pct": 0.96396,
+"name": "Balbooa Forms < 2.4.1 - Unauthenticated Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56291.yaml"
+},
+"CVE-2026-56782": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.03559,
+"epss_pct": 0.88501,
+"name": "Gorse < 0.5.10 - Unauthenticated Database Dump",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56782.yaml"
+},
+"CVE-2026-5718": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.04175,
+"epss_pct": 0.90187,
+"name": "Drag and Drop Multiple File Upload - CF7 <= 1.3.9.6 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-5718.yaml"
+},
+"CVE-2026-57219": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-522",
+"epss": 0.01988,
+"epss_pct": 0.79206,
+"name": "RabbitMQ Management - OAuth 2 Client Secret Disclosure",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-57219.yaml"
+},
+"CVE-2026-57827": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-434",
+"epss": 0.02328,
+"epss_pct": 0.82312,
+"name": "RSFiles! for Joomla - Arbitrary File Upload",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-57827.yaml"
+},
+"CVE-2026-58138": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.09143,
+"epss_pct": 0.94945,
+"name": "Orkes Conductor 3.21.21-3.30.1 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-58138.yaml"
+},
+"CVE-2026-58455": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-78",
+"epss": 0.0804,
+"epss_pct": 0.94372,
+"name": "Dockwatch <= 0.6.567 - OS Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-58455.yaml"
+},
+"CVE-2026-58644": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.15873,
+"epss_pct": 0.96643,
+"name": "Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-58644.yaml"
+},
+"CVE-2026-59774": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"name": "Gitea 1.22.1-1.27.0 - Unauthenticated Arbitrary File Read",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-59774.yaml"
+},
+"CVE-2026-59801": {
+"name": "9Router - Unauthenticated LLM Provider API Exposure",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-59801.yaml"
+},
+"CVE-2026-60004": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.84554,
+"epss_pct": 0.99685,
+"name": "Gitea <= 1.27.0 - Pre-Auth Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-60004.yaml"
+},
+"CVE-2026-6118": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.02304,
+"epss_pct": 0.82122,
+"name": "AstrBot <= 4.22.1 - Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6118.yaml"
+},
+"CVE-2026-61511": {
+"cwe": "CWE-94",
+"epss": 0.70766,
+"epss_pct": 0.9935,
+"name": "vBulletin 6.x - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-61511.yaml"
+},
+"CVE-2026-61808": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"name": "LightRAG <= 1.5.4 - Missing Authentication",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-61808.yaml"
+},
+"CVE-2026-6203": {
+"cvss": 6.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
+"cwe": "CWE-601",
+"epss": 0.00663,
+"epss_pct": 0.49194,
+"name": "User Registration & Membership WordPress plugin - Open Redirect",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6203.yaml"
+},
+"CVE-2026-63030": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.97271,
+"epss_pct": 0.9989,
+"name": "WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route Confusion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-63030.yaml"
+},
+"CVE-2026-63077": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-502",
+"epss": 0.87709,
+"epss_pct": 0.99747,
+"name": "JetBrains TeamCity < 2026.1.3, 2025.11.7 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-63077.yaml"
+},
+"CVE-2026-6433": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"epss": 0.01195,
+"epss_pct": 0.65854,
+"name": "FlipperCode Custom CSS, JS & PHP <= 2.0.7 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6433.yaml"
+},
+"CVE-2026-64638": {
+"cvss": 8.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
+"cwe": "CWE-79",
+"epss": 0.31204,
+"epss_pct": 0.9814,
+"name": "WordPress Core < 7.0.3 - Preauth Reflected XSS (XSS2Shell)",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-64638.yaml"
+},
+"CVE-2026-64849": {
+"cvss": 9.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.1641,
+"epss_pct": 0.96749,
+"name": "MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-64849.yaml"
+},
+"CVE-2026-65442": {
+"cvss": 7.2,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.00419,
+"epss_pct": 0.34928,
+"name": "FormCraft3 <= 3.9.15 - Server-Side Request Forgery",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-65442.yaml"
+},
+"CVE-2026-65694": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.03394,
+"epss_pct": 0.8797,
+"name": "Microweber CMS <= 2.0.20 - Unauthenticated Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-65694.yaml"
+},
+"CVE-2026-65761": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.00928,
+"epss_pct": 0.58037,
+"name": "Joomla Easy Store - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-65761.yaml"
+},
+"CVE-2026-65919": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.01918,
+"epss_pct": 0.78428,
+"name": "Meshery <1.0.57 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-65919.yaml"
+},
+"CVE-2026-67208": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-306",
+"epss": 0.05285,
+"epss_pct": 0.91993,
+"name": "Juggle <= 1.6.0 - Unauthenticated Exposed H2 Database Console",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-67208.yaml"
+},
+"CVE-2026-6826": {
+"cvss": 6.9,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
+"cwe": "CWE-862",
+"epss": 0.01461,
+"epss_pct": 0.71739,
+"name": "Concrete CMS <9.5.1 - Unauthenticated File Usage Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6826.yaml"
+},
+"CVE-2026-6854": {
+"cwe": "CWE-89",
+"epss": 0.01577,
+"epss_pct": 0.73725,
+"name": "My Calendar < 3.7.9 - Unauthenticated SQL Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6854.yaml"
+},
+"CVE-2026-6875": {
+"cvss": 9.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.77584,
+"epss_pct": 0.99526,
+"name": "ServiceNow AI Platform - Pre-Auth JavaScript Sandbox Escape RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6875.yaml"
+},
+"CVE-2026-69084": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
+"cwe": "CWE-89",
+"epss": 0.01104,
+"epss_pct": 0.63441,
+"name": "SiYuan - SQL Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-69084.yaml"
+},
+"CVE-2026-69251": {
+"cvss": 9.0,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
+"cwe": "CWE-94",
+"epss": 0.01058,
+"epss_pct": 0.62111,
+"name": "Flowise < 3.1.3 - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-69251.yaml"
+},
+"CVE-2026-71209": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-287",
+"epss": 0.02005,
+"epss_pct": 0.79419,
+"name": "Audiobookshelf - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-71209.yaml"
+},
+"CVE-2026-71362": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
+"cwe": "CWE-863",
+"epss": 0.25136,
+"epss_pct": 0.97774,
+"name": "Adobe Commerce/Magento - Customer Session Identity Switch",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-71362.yaml"
+},
+"CVE-2026-72898": {
+"cvss": 10.0,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.82323,
+"epss_pct": 0.99636,
+"name": "Metabase - Unauthenticated SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-72898.yaml"
+},
+"CVE-2026-73034": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.01509,
+"epss_pct": 0.7262,
+"name": "DB-GPT <= 0.8.1 - Arbitrary File Write",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-73034.yaml"
+},
+"CVE-2026-73570": {
+"cvss": 8.9,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L",
+"cwe": "CWE-78",
+"epss": 0.20528,
+"epss_pct": 0.9733,
+"name": "Zimbra Collaboration Suite < 10.1.20 - OS Command Injection",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2026/CVE-2026-73570.yaml"
+},
+"CVE-2026-7467": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-269",
+"epss": 0.01242,
+"epss_pct": 0.67094,
+"name": "Read More & Accordion <= 3.5.7 - Authenticated Privilege Escalation",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-7467.yaml"
+},
+"CVE-2026-76904": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.01791,
+"epss_pct": 0.76809,
+"name": "GeoServer jsonArrayContains CQL Filter - SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-76904.yaml"
+},
+"CVE-2026-77806": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.04201,
+"epss_pct": 0.90239,
+"name": "SPIP < 4.4.22 - Unauthenticated RCE",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-77806.yaml"
+},
+"CVE-2026-7798": {
+"cvss": 5.4,
+"cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N",
+"cwe": "CWE-918",
+"epss": 0.00695,
+"epss_pct": 0.5048,
+"name": "WordPress FluentCRM <= 2.9.87 - Unauthenticated Blind SSRF",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-7798.yaml"
+},
+"CVE-2026-8037": {
+"name": "Progress ADC LoadMaster - Command Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8037.yaml"
+},
+"CVE-2026-8054": {
+"name": "dotCMS Core Publish Audit API - Unauthenticated SQL Injection",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8054.yaml"
+},
+"CVE-2026-8181": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-287",
+"epss": 0.14608,
+"epss_pct": 0.96397,
+"name": "WordPress Burst Statistics 3.4.0-3.4.1.1 - Authentication Bypass",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8181.yaml"
+},
+"CVE-2026-8236": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.00523,
+"epss_pct": 0.42303,
+"name": "Concrete CMS <9.5.1 - Unauthenticated File-Usage Internal Metadata Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8236.yaml"
+},
+"CVE-2026-8237": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.0064,
+"epss_pct": 0.48179,
+"name": "Concrete CMS <= 9.5.0 - Unauthenticated Conversation Message Disclosure (IDOR)",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8237.yaml"
+},
+"CVE-2026-8383": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.07623,
+"epss_pct": 0.94126,
+"name": "LearnPress < 4.3.7 - Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8383.yaml"
+},
+"CVE-2026-8385": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-200",
+"epss": 0.00801,
+"epss_pct": 0.54075,
+"name": "WordPress WP Go Maps < 10.0.10 - Unauthenticated Marker Data Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8385.yaml"
+},
+"CVE-2026-8386": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
+"cwe": "CWE-862",
+"epss": 0.007,
+"epss_pct": 0.50658,
+"name": "WP Go Maps < 10.0.10 - Unauthenticated Marker Information Disclosure",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8386.yaml"
+},
+"CVE-2026-8679": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-639",
+"epss": 0.01566,
+"epss_pct": 0.73555,
+"name": "WordPress AudioIgniter <= 2.0.2 - Unauthenticated IDOR",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8679.yaml"
+},
+"CVE-2026-8713": {
+"cvss": 9.1,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
+"cwe": "CWE-22",
+"epss": 0.02669,
+"epss_pct": 0.84689,
+"name": "Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8713.yaml"
+},
+"CVE-2026-8732": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-862",
+"epss": 0.21511,
+"epss_pct": 0.97439,
+"name": "WP Maps Pro (wp-google-map-gold) <= 6.1.0 - Unauthenticated Administrator Account Creation",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8732.yaml"
+},
+"CVE-2026-8839": {
+"cvss": 5.3,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
+"cwe": "CWE-639",
+"epss": 0.01018,
+"epss_pct": 0.60918,
+"name": "WordPress MapPress Maps <= 2.96.6 - Unauthenticated IDOR",
+"severity": "medium",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8839.yaml"
+},
+"CVE-2026-8857": {
+"cvss": 8.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.02098,
+"epss_pct": 0.80376,
+"name": "MediaWiki EasyTimeline - Code Injection RCE",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8857.yaml"
+},
+"CVE-2026-9082": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-89",
+"epss": 0.87892,
+"epss_pct": 0.99751,
+"name": "Drupal Core - Anonymous SQL Injection via PostgreSQL Entity Query",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9082.yaml"
+},
+"CVE-2026-9133": {
+"cvss": 7.7,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
+"cwe": "CWE-489",
+"epss": 0.01039,
+"epss_pct": 0.61565,
+"name": "Amazon rabbitmq-aws 0.1.0 through 0.2.0 - Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9133.yaml"
+},
+"CVE-2026-9198": {
+"cvss": 9.8,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
+"cwe": "CWE-94",
+"epss": 0.34734,
+"epss_pct": 0.98307,
+"name": "IBM Langflow - Remote Code Execution",
+"severity": "critical",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9198.yaml"
+},
+"CVE-2026-9282": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.02861,
+"epss_pct": 0.85774,
+"name": "W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9282.yaml"
+},
+"CVE-2026-9290": {
+"cvss": 7.5,
+"cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
+"cwe": "CWE-22",
+"epss": 0.02502,
+"epss_pct": 0.83577,
+"name": "WP User Manager \u2013 User Profile Builder & Membership - Local File Inclusion",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9290.yaml"
+},
+"CVE-2026-9506": {
+"cvss": 8.7,
+"cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
+"cwe": "CWE-22",
+"epss": 0.01238,
+"epss_pct": 0.66983,
+"name": "Bagisto <= 2.4.1 - Unauthenticated Arbitrary File Read",
+"severity": "high",
+"url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9506.yaml"
+}
+}
diff --git a/scripts/build_site.py b/scripts/build_site.py
index ec4552b5a00..4f85add01eb 100644
--- a/scripts/build_site.py
+++ b/scripts/build_site.py
@@ -18,6 +18,8 @@ REPO_META = ROOT / "repo_meta.json"
 REPO_META_OUTPUT = DOCS_DIR / "repo_meta.json"
 KEV_INPUT = ROOT / "kev.json"
 KEV_OUTPUT = DOCS_DIR / "kev.json"
+NUCLEI_INPUT = ROOT / "nuclei.json"
+NUCLEI_OUTPUT = DOCS_DIR / "nuclei.json"
 def load_blacklist() -> set[str]:
     if not BLACKLIST.exists():
         return set()
@@ -38,7 +40,7 @@ def normalise_block(text: str) -> str:
     return "\n".join(line for line in lines if line)
 
 
-SECTION_HEADERS = ("### Description", "### POC", "#### Reference", "#### Github")
+SECTION_HEADERS = ("### Description", "### POC", "#### Reference", "#### Github", "#### Nuclei")
 
 
 def parse_sections(content: str) -> Dict[str, str]:
@@ -131,6 +133,9 @@ def build_cve_list(blacklist: Collection[str]) -> tuple[List[Dict[str, object]],
         description = normalise_block(sections.get("### Description", ""))
         references = collect_links(sections.get("#### Reference", ""), blacklist=blacklist)
         github_links = collect_links(sections.get("#### Github", ""), blacklist=blacklist)
+        # Nuclei templates stay in their own list: they are runnable checks
+        # rather than somebody's repository, and the site labels them as such.
+        nuclei = collect_links(sections.get("#### Nuclei", ""), blacklist=blacklist)
 
         poc_entries: List[str] = []
         seen = set()
@@ -141,14 +146,17 @@ def build_cve_list(blacklist: Collection[str]) -> tuple[List[Dict[str, object]],
                 seen.add(key)
 
         cve_id = md_path.stem
-        if not poc_entries:
+        if not poc_entries and not nuclei:
             continue
 
-        cve_entries.append({
+        entry = {
             "cve": cve_id,
             "desc": description,
             "poc": poc_entries,
-        })
+        }
+        if nuclei:
+            entry["nuclei"] = nuclei
+        cve_entries.append(entry)
 
     return cve_entries, total
 
@@ -178,6 +186,21 @@ def build_kev(cve_entries: List[Dict[str, object]]) -> Dict[str, object]:
     return {cve: value for cve, value in stored.items() if cve in have}
 
 
+def build_nuclei(cve_entries: List[Dict[str, object]]) -> Dict[str, object]:
+    """Severity, CVSS, EPSS and CWE per CVE, limited to the ones indexed."""
+    try:
+        stored = json.loads(NUCLEI_INPUT.read_text(encoding="utf-8"))
+    except (OSError, json.JSONDecodeError):
+        return {}
+    have = {str(entry["cve"]) for entry in cve_entries}
+    keep = ("severity", "cvss", "cvss_vector", "epss", "epss_pct", "cwe")
+    return {
+        cve: {field: value[field] for field in keep if field in value}
+        for cve, value in stored.items()
+        if cve in have
+    }
+
+
 def build_trending(blacklist: Collection[str]) -> List[Dict[str, object]]:
     """The trending job's own output, minus anything the blacklist covers."""
     try:
@@ -212,6 +235,9 @@ def main() -> int:
     kev = build_kev(cve_payload)
     write_json(KEV_OUTPUT, kev)
 
+    nuclei = build_nuclei(cve_payload)
+    write_json(NUCLEI_OUTPUT, nuclei)
+
     trending_items = build_trending(blacklist)
     write_json(
         TRENDING_OUTPUT,
@@ -227,7 +253,8 @@ def main() -> int:
     print(
         f"Wrote {CVE_OUTPUT.name} ({len(cve_payload)} of {total_cves} CVEs), "
         f"{REPO_META_OUTPUT.name} ({len(repo_meta)} repositories), "
-        f"{KEV_OUTPUT.name} ({len(kev)} known-exploited) and {TRENDING_OUTPUT.name}"
+        f"{KEV_OUTPUT.name} ({len(kev)} known-exploited), "
+        f"{NUCLEI_OUTPUT.name} ({len(nuclei)} rated) and {TRENDING_OUTPUT.name}"
     )
     return 0
 
diff --git a/scripts/sync_nuclei.py b/scripts/sync_nuclei.py
new file mode 100644
index 00000000000..0107467609f
--- /dev/null
+++ b/scripts/sync_nuclei.py
@@ -0,0 +1,153 @@
+#!/usr/bin/env python3
+"""Fold ProjectDiscovery's nuclei templates into the index.
+
+A template is a runnable check for one CVE, which makes it a proof of concept
+in its own right, and it carries the severity, CVSS, EPSS and CWE the markdown
+entries never had. Both are picked up here: the template link joins the PoC
+list for its CVE, and the ratings land in nuclei.json for the site to read.
+"""
+
+from __future__ import annotations
+
+import argparse
+import io
+import json
+import re
+import tarfile
+import urllib.request
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parents[1]
+OUTPUT = ROOT / "nuclei.json"
+TARBALL = "https://codeload.github.com/projectdiscovery/nuclei-templates/tar.gz/refs/heads/main"
+BLOB = "https://github.com/projectdiscovery/nuclei-templates/blob/main/"
+SECTION = "#### Nuclei"
+EMPTY = "No nuclei template."
+TEMPLATE_NAME = re.compile(r"^CVE-\d{4}-\d{4,7}\.yaml$")
+USER_AGENT = "0xMarcio-cve-nuclei"
+
+# The fields wanted are plain scalars on their own line inside info:, so they
+# are read directly rather than pulling a YAML parser into a stdlib-only job.
+FIELDS = {
+    "name": re.compile(r"^  name:\s*(.+?)\s*$", re.M),
+    "severity": re.compile(r"^\s{2,4}severity:\s*([a-z]+)\s*$", re.M),
+    "cvss": re.compile(r"^\s+cvss-score:\s*([0-9.]+)\s*$", re.M),
+    "cvss_vector": re.compile(r"^\s+cvss-metrics:\s*(\S+)\s*$", re.M),
+    "epss": re.compile(r"^\s+epss-score:\s*([0-9.]+)\s*$", re.M),
+    "epss_pct": re.compile(r"^\s+epss-percentile:\s*([0-9.]+)\s*$", re.M),
+    "cwe": re.compile(r"^\s+cwe-id:\s*(CWE-\d+)\s*$", re.M | re.I),
+}
+
+
+def download() -> bytes:
+    request = urllib.request.Request(TARBALL, headers={"User-Agent": USER_AGENT})
+    with urllib.request.urlopen(request, timeout=180) as response:
+        return response.read()
+
+
+def parse(text: str) -> dict:
+    """Ratings for one template, dropping anything the template does not state."""
+    head = text[:4000]
+    found: dict[str, object] = {}
+    for key, pattern in FIELDS.items():
+        match = pattern.search(head)
+        if not match:
+            continue
+        value = match.group(1).strip().strip('"\'')
+        if key in ("cvss", "epss", "epss_pct"):
+            try:
+                found[key] = round(float(value), 5)
+            except ValueError:
+                pass
+        elif value:
+            found[key] = value
+    return found
+
+
+def collect(archive: bytes) -> dict[str, dict]:
+    """Every CVE template in the tarball, keyed by CVE id.
+
+    Templates live under several top level directories (http, code, network and
+    so on); what marks one is a cves/ path segment and a CVE-shaped filename.
+    """
+    templates: dict[str, dict] = {}
+    with tarfile.open(fileobj=io.BytesIO(archive), mode="r:gz") as tar:
+        for member in tar:
+            if not member.isfile():
+                continue
+            parts = Path(member.name).parts
+            if "cves" not in parts or not TEMPLATE_NAME.match(parts[-1]):
+                continue
+            handle = tar.extractfile(member)
+            if handle is None:
+                continue
+            text = handle.read().decode("utf-8", "replace")
+            cve = parts[-1][:-5].upper()
+            # Strip the archive's own top level directory from the blob path.
+            relative = "/".join(parts[1:])
+            entry = parse(text)
+            entry["url"] = BLOB + relative
+            # A CVE with more than one template keeps the richer of the two.
+            if len(entry) >= len(templates.get(cve, {})):
+                templates[cve] = entry
+    return templates
+
+
+def section_bounds(text: str, header: str) -> tuple[int, int] | None:
+    start = text.find("\n" + header)
+    if start < 0:
+        return None
+    body = start + 1 + len(header)
+    nxt = text.find("\n#", body)
+    return body, len(text) if nxt < 0 else nxt
+
+
+def apply_to_markdown(cve: str, url: str, dry_run: bool) -> str:
+    """Add the template link to one CVE entry. Returns what happened."""
+    path = ROOT / cve.split("-")[1] / f"{cve}.md"
+    if not path.exists():
+        return "absent"
+    original = path.read_text(encoding="utf-8")
+    if url in original:
+        return "unchanged"
+    block = f"\n{SECTION}\n- {url}\n"
+    bounds = section_bounds(original, SECTION)
+    if bounds:
+        start, end = bounds
+        updated = original[:start] + f"\n- {url}\n" + original[end:]
+    else:
+        # The section sits at the end of the POC block, after the GitHub links.
+        updated = original.rstrip("\n") + "\n" + block
+    if not dry_run:
+        path.write_text(updated, encoding="utf-8")
+    return "added"
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser(description="Sync nuclei templates into the index")
+    parser.add_argument("--dry-run", action="store_true", help="report without writing")
+    args = parser.parse_args()
+
+    templates = collect(download())
+    print(f"{len(templates):,} CVE templates in nuclei-templates")
+
+    tally = {"added": 0, "unchanged": 0, "absent": 0}
+    for cve, entry in sorted(templates.items()):
+        tally[apply_to_markdown(cve, entry["url"], args.dry_run)] += 1
+
+    payload = {cve: entry for cve, entry in sorted(templates.items())}
+    if not args.dry_run:
+        with OUTPUT.open("w", encoding="utf-8") as handle:
+            json.dump(payload, handle, indent=0, sort_keys=True)
+            handle.write("\n")
+
+    rated = sum(1 for e in payload.values() if "cvss" in e)
+    scored = sum(1 for e in payload.values() if "epss" in e)
+    print(f"markdown: {tally['added']:,} links added, {tally['unchanged']:,} already there, "
+          f"{tally['absent']:,} for CVEs not in the index")
+    print(f"{OUTPUT.name}: {len(payload):,} CVEs, {rated:,} with CVSS, {scored:,} with EPSS")
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())