Loading story…
ProjectDiscovery's nuclei-templates repository received new detection templates for two open redirect vulnerabilities: CVE-2025-54793 in Astro SSR and CVE-2025-58044 in JumpServer. The Astro SSR issue abuses trailing-slash redirect behavior with double-slash path variations to trigger protocol-relative redirects, and the proposed template uses out-of-band validation through interact.sh to confirm exploitation. Review feedback flagged template quality problems, including an incorrect reference to the upstream fix commit and a Location header regex that could match benign redirects and produce false positives.
A separate template for JumpServer targets an unauthenticated open redirect caused by manipulation of the Referer header. Review notes said the check was validated against both vulnerable and patched targets and confirmed exploitation by requiring an HTTP 302 response and a malicious Location header pattern instead of relying only on version fingerprinting. The associated advisory metadata links the flaw to CWE-601 and GHSA-h762-mj7p-jwjq, underscoring continued efforts to improve reliable detection coverage for web application redirect weaknesses.
See real exploitation activity before you spend the cycle.
3 events from the most recent confirmed update back to the earliest known activity.
A pull request to projectdiscovery/nuclei-templates added a detection template for CVE-2025-58044, an unauthenticated open redirect in JumpServer triggered through the Referer header. Review notes said the template validated exploitation by checking for a 302 response and malicious Location header behavior, with no security issues found in the template itself.
A pull request to projectdiscovery/nuclei-templates added detection logic for CVE-2025-54793, using double-slash path variations and interact.sh to detect the open redirect behavior. Automated review flagged an incorrect fix-commit reference and a regex matcher that could cause false positives.
Astro addressed CVE-2025-54793, an open redirect vulnerability in Astro SSR. The referenced fix commit was identified as 0567fb7b50c0c452be387dd7c7264b96bedab48f.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
github.com
Open sourcegithub.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
ProjectDiscovery's `nuclei-templates` repository received pull requests adding detection coverage for two server-side request forgery issues: **CVE-2026-27826**, described as an MCP Atlassian SSRF reachable via HTTP headers, and **CVE-2025-62718**, an Axios SSRF vulnerability tied to a hostname normalization and `NO_PROXY` bypass. The updates indicate that public detection content is being prepared for defenders to identify exposed systems affected by both flaws. The GitHub activity shows the templates were submitted through separate bounty-related pull requests and routed through the project's normal review workflow, including automated assignment and reviewer requests. While the referenced discussions expose few technical specifics beyond the vulnerability names and high-level attack paths, the additions signal active security community attention on SSRF risks affecting both Atlassian-related MCP deployments and applications using vulnerable Axios proxy-handling logic.
Jun 29, 2026
ProjectDiscovery's `nuclei-templates` repository received several pull requests adding or refining detection logic for newly disclosed web vulnerabilities. Proposed templates covered **CVE-2026-0561** for cross-site scripting, **CVE-2025-69411** for a high-severity path traversal/local file read in the WordPress plugin `ioncube-tester-plus`, **CVE-2026-1405** for a critical SSRF issue in a WordPress REST API endpoint, and an unauthenticated remote command execution flaw in **Synway SMG Gateway** via `9-2radius.php`. The submissions generally reported validation against vulnerable and patched targets to reduce false positives, with several marked ready for merge pending maintainer review. The WordPress `ioncube-tester-plus` template demonstrated file disclosure through `loader-wizard.php` by abusing the `ininame` parameter to retrieve `/etc/passwd`, while the `slider-future` WordPress template showed SSRF by sending an external `image_url` to `/wp-json/slider-future/v1/upload-image/` and confirming outbound DNS interaction through OAST. The Synway SMG Gateway submission described command injection through the `radius_address` parameter reaching a `system()` call, but automated review flagged template quality problems including weak matching logic and missing metadata. Separately, a fix was proposed for the **CVE-2025-71243** template after reports of frequent false positives, replacing reflection-based checks with `md5`-based proof of code execution to improve accuracy.
Jun 29, 2026
ProjectDiscovery contributors opened and advanced Nuclei template pull requests for two newly tracked vulnerabilities: **`CVE-2026-4257`**, a **server-side template injection** issue in the **WordPress Contact Form by Supsystic** plugin, and **`CVE-2026-33032`**, a **broken access control** flaw in **Nginx UI**. The GitHub activity shows template development intended to support detection of both issues, with one pull request referencing a new `CVE-2026-4257.yaml` file and another marked ready to merge for the Nginx UI vulnerability. The available records are limited to repository metadata and do not include technical write-ups, affected version ranges, exploitation details, or vendor remediation guidance. Even so, the publication of detection content for these CVEs indicates that security researchers are operationalizing checks for exposed systems, and defenders using Nuclei should watch for template releases covering both the WordPress plugin SSTI and the Nginx UI authorization weakness.
Jun 29, 2026