projectdiscovery/nuclei-templates
Nov 2024 – May 2026
11 Months active
Languages Used
YAMLyamlbashjsonPythonShell
Technical Skills
Revert CommitSecurity ResearchVulnerability ManagementAlibaba CloudCloud SecurityDevOps
ritikchaddha
PROFILE
Ritikchaddha
Contributed extensively to the projectdiscovery/nuclei-templates repository, building and maintaining a wide range of YAML-based security detection templates for CVEs, misconfigurations, and exposure scenarios across cloud, enterprise, and open-source environments. Leveraged Python scripting, YAML development, and DevOps practices to deliver automated vulnerability scanning, robust template management, and continuous integration improvements. Applied disciplined version control and data hygiene, ensuring traceable, maintainable commits and rapid rollback when needed. Enhanced detection coverage for Kubernetes, WordPress, XWiki, and networking devices, while also streamlining issue reporting workflows with GitHub Actions and API integration. The work enabled faster risk identification and improved security posture for users.
Overall Statistics
Feature vs Bugs
58%Features
Repository Contributions
105Total
Bugs
22
Commits
105
Features
31
Lines of code
2,730,838
Activity Months11
Your Network
262 peopleShared Repositories
262
Work History
May 2026
2 Commits • 1 Features
May 1, 2026May 2026: Delivered enhanced issue reporting and contribution workflow for projectdiscovery/nuclei-templates. Implemented comprehensive issue templates for Nuclei and nuclei-templates and configured auto-assign rules to streamline submissions, improve triage, and boost contribution quality. Early feedback indicates faster triage and higher-quality submissions, reducing onboarding friction for external contributors and enabling quicker issue resolution.
2 Commits • 1 Features
May 1, 2026May 2026: Delivered enhanced issue reporting and contribution workflow for projectdiscovery/nuclei-templates. Implemented comprehensive issue templates for Nuclei and nuclei-templates and configured auto-assign rules to streamline submissions, improve triage, and boost contribution quality. Early feedback indicates faster triage and higher-quality submissions, reducing onboarding friction for external contributors and enabling quicker issue resolution.
May 2026
August 2025
6 Commits • 1 Features
Aug 1, 2025In August 2025, delivered a consolidated set of Nuclei templates to detect critical XWiki vulnerabilities, significantly enhancing security visibility and automated risk detection across environments. This work adds six CVE-focused templates to the nuclei-templates repository, enabling standardized, metadata-rich scanning for rapid triage and remediation.
August 2025
6 Commits • 1 Features
Aug 1, 2025In August 2025, delivered a consolidated set of Nuclei templates to detect critical XWiki vulnerabilities, significantly enhancing security visibility and automated risk detection across environments. This work adds six CVE-focused templates to the nuclei-templates repository, enabling standardized, metadata-rich scanning for rapid triage and remediation.
July 2025
15 Commits • 7 Features
Jul 1, 2025July 2025 monthly summary for the nuclei-templates project (projectdiscovery). This month focused on expanding automated security detection coverage across multiple products, with emphasis on misconfiguration exposure, vulnerability detection, and installer exposure prevention. The work enhances proactive security posture for customers by enabling earlier discovery and remediation of misconfigurations and CVE-integrated weaknesses in widely used software. Key features and improvements: - Implemented Saltbo zpan security detection and installer exposure templates to improve scanning for panel exposure and installer-page misconfigurations (commits b6d6093d640b5a1c58fca4cae433367f2df40c8c and 4b0ac8191af8a950db0eb6a86dffcd248a60b80f). - Added Yonyou UFIDA ERP-NC V5.0 XSS detection suite, covering login and core help pages with CVE references (commits b37c90a1535f8b76da5f1fb31681ea99a32df185; b38673edf61c913c076ccb617934c4b75b0327f5; 54259ca0a9ab8d10f8642fd31cf6e07939732253; f40ee51fffec48eec75ce85caf6664e5df66be17). - Broadened XSS detection templates for multiple products (123Solar, AcuToWeb, idcCMS) to address reflected XSS vulnerabilities (commits 96f1985e98843601cf36148ade68c99c7a8adbeb; 6dad111f403ec4afd4d815b3188a04347ce04795; ccc3d586a523b7748f5b2e4790972ac52723b825). - Added installer exposure detection templates for StrongShop and iBarn to prevent unauthorized installations or misconfigurations (commits 88edf793660e22ab35963f9c02a9e590284e8179; 4bd1d762e0e6a3826e65afe07532000351ae7d00). - Introduced SSRF vulnerability detection for LyLme spage and OneNav, and added a template to detect Yii2 CVE-2024-58136 RCE to mitigate remote code execution risks (commits d3a9519c6e9ac22feb01e02546b6b5663245e11e; 10daa8c78461ef757b326741bf985817c2e0941c; c11c2a56bcb8b78d2fd343754175dc67476f01b7). - Improved Oneinstack misconfiguration detection with a robust DSL and additional validation checks to strengthen detection fidelity (commit ba783e925f24ada906ffa5125653771b9b902dbb). Impact and business value: - Expanded coverage across vendor ecosystems, enabling earlier identification of security misconfigurations and publicly disclosed CVEs. - Reduced time-to-detection for critical exposure scenarios through automated, maintainable YAML templates and clear commit traceability. - Strengthened security posture for customers by enabling automated scanning across more products and workflow-integrated checks. Technologies and skills demonstrated: - YAML-based template authoring for Nuclei, with CVE-backed naming conventions. - Nuclei DSL usage and validation improvements for robust misconfiguration detection. - Cross-product security coverage design, modular template organization, and traceable commit history. - Security-focused automation, risk assessment alignment with product lifecycles.
15 Commits • 7 Features
Jul 1, 2025July 2025 monthly summary for the nuclei-templates project (projectdiscovery). This month focused on expanding automated security detection coverage across multiple products, with emphasis on misconfiguration exposure, vulnerability detection, and installer exposure prevention. The work enhances proactive security posture for customers by enabling earlier discovery and remediation of misconfigurations and CVE-integrated weaknesses in widely used software. Key features and improvements: - Implemented Saltbo zpan security detection and installer exposure templates to improve scanning for panel exposure and installer-page misconfigurations (commits b6d6093d640b5a1c58fca4cae433367f2df40c8c and 4b0ac8191af8a950db0eb6a86dffcd248a60b80f). - Added Yonyou UFIDA ERP-NC V5.0 XSS detection suite, covering login and core help pages with CVE references (commits b37c90a1535f8b76da5f1fb31681ea99a32df185; b38673edf61c913c076ccb617934c4b75b0327f5; 54259ca0a9ab8d10f8642fd31cf6e07939732253; f40ee51fffec48eec75ce85caf6664e5df66be17). - Broadened XSS detection templates for multiple products (123Solar, AcuToWeb, idcCMS) to address reflected XSS vulnerabilities (commits 96f1985e98843601cf36148ade68c99c7a8adbeb; 6dad111f403ec4afd4d815b3188a04347ce04795; ccc3d586a523b7748f5b2e4790972ac52723b825). - Added installer exposure detection templates for StrongShop and iBarn to prevent unauthorized installations or misconfigurations (commits 88edf793660e22ab35963f9c02a9e590284e8179; 4bd1d762e0e6a3826e65afe07532000351ae7d00). - Introduced SSRF vulnerability detection for LyLme spage and OneNav, and added a template to detect Yii2 CVE-2024-58136 RCE to mitigate remote code execution risks (commits d3a9519c6e9ac22feb01e02546b6b5663245e11e; 10daa8c78461ef757b326741bf985817c2e0941c; c11c2a56bcb8b78d2fd343754175dc67476f01b7). - Improved Oneinstack misconfiguration detection with a robust DSL and additional validation checks to strengthen detection fidelity (commit ba783e925f24ada906ffa5125653771b9b902dbb). Impact and business value: - Expanded coverage across vendor ecosystems, enabling earlier identification of security misconfigurations and publicly disclosed CVEs. - Reduced time-to-detection for critical exposure scenarios through automated, maintainable YAML templates and clear commit traceability. - Strengthened security posture for customers by enabling automated scanning across more products and workflow-integrated checks. Technologies and skills demonstrated: - YAML-based template authoring for Nuclei, with CVE-backed naming conventions. - Nuclei DSL usage and validation improvements for robust misconfiguration detection. - Cross-product security coverage design, modular template organization, and traceable commit history. - Security-focused automation, risk assessment alignment with product lifecycles.
July 2025
June 2025
26 Commits • 7 Features
Jun 1, 2025June 2025 monthly summary for nuclei-templates: Delivered comprehensive YAML manifests and exposure configurations across CVEs, UI components, and search dashboards; implemented security patches and bug fixes; enabled safer defaults and streamlined deployment for enterprise templates. The work improves security coverage, deployment speed, and governance.
June 2025
26 Commits • 7 Features
Jun 1, 2025June 2025 monthly summary for nuclei-templates: Delivered comprehensive YAML manifests and exposure configurations across CVEs, UI components, and search dashboards; implemented security patches and bug fixes; enabled safer defaults and streamlined deployment for enterprise templates. The work improves security coverage, deployment speed, and governance.
May 2025
28 Commits • 2 Features
May 1, 2025May 2025 monthly summary for projectdiscovery/nuclei-templates: Delivered extensive CVE YAML coverage and data hygiene improvements. Implemented Batch 1 CVE YAML entries across 13 CVEs (CVE-2022-1711, CVE-2022-26585, CVE-2022-42118, CVE-2022-25061, CVE-2020-15415, CVE-2024-12987, CVE-2022-31126, CVE-2022-31161, CVE-2024-44762, CVE-2021-25161, CVE-2021-36646, CVE-2022-37061, CVE-2021-25032). Updated CVE-2025-24016 YAML and added a WP PublishPress capabilities XSS YAML entry. Added YAML advisories for multiple CVEs (CVE-2023-1389, CVE-2024-8529, CVE-2025-2636, CVE-2024-30163, CVE-2022-0783, CVE-2020-24285 with update, CVE-2020-13886, CVE-2023-27637, CVE-2023-27638, CVE-2021-24522, CVE-2020-12262). Fixed data integrity by renaming CVE-2022-31126 to CVE-2022-31137 to correct the identifier.
28 Commits • 2 Features
May 1, 2025May 2025 monthly summary for projectdiscovery/nuclei-templates: Delivered extensive CVE YAML coverage and data hygiene improvements. Implemented Batch 1 CVE YAML entries across 13 CVEs (CVE-2022-1711, CVE-2022-26585, CVE-2022-42118, CVE-2022-25061, CVE-2020-15415, CVE-2024-12987, CVE-2022-31126, CVE-2022-31161, CVE-2024-44762, CVE-2021-25161, CVE-2021-36646, CVE-2022-37061, CVE-2021-25032). Updated CVE-2025-24016 YAML and added a WP PublishPress capabilities XSS YAML entry. Added YAML advisories for multiple CVEs (CVE-2023-1389, CVE-2024-8529, CVE-2025-2636, CVE-2024-30163, CVE-2022-0783, CVE-2020-24285 with update, CVE-2020-13886, CVE-2023-27637, CVE-2023-27638, CVE-2021-24522, CVE-2020-12262). Fixed data integrity by renaming CVE-2022-31126 to CVE-2022-31137 to correct the identifier.
May 2025
April 2025
8 Commits • 2 Features
Apr 1, 2025April 2025 performance: Expanded CVE detection coverage in nuclei-templates for WordPress and non-WordPress apps. Added a consolidated set of WordPress plugin CVE templates (five CVEs) and three non-WordPress CVE templates, with explicit YAML implementations and traceable commits. No major bugs fixed this month in this repo. Impact: broader, faster detection; maintainable template design; ready for CI validation and broader CVE onboarding.
April 2025
8 Commits • 2 Features
Apr 1, 2025April 2025 performance: Expanded CVE detection coverage in nuclei-templates for WordPress and non-WordPress apps. Added a consolidated set of WordPress plugin CVE templates (five CVEs) and three non-WordPress CVE templates, with explicit YAML implementations and traceable commits. No major bugs fixed this month in this repo. Impact: broader, faster detection; maintainable template design; ready for CI validation and broader CVE onboarding.
March 2025
12 Commits • 9 Features
Mar 1, 2025March 2025: Expanded Nuclei-templates coverage across networking devices and enterprise apps, delivering nine feature/detection items and a targeted regex improvement. Implemented new detections for CVEs across ASUS (CVE-2024-3080), TP-Link (CVE-2024-57049), Ingress-Nginx (CVE-2025-1974), Netgear (CVE-2024-30568, CVE-2024-30569, CVE-2024-30570), GLPI (CVE-2025-24799), and a baserCMS misconfiguration detector. An attempted addition for CVE-2024-51378 YAML templates was rolled back to maintain stability. Refined internal IP discovery regex to reduce false positives. This work increases automated threat detection coverage, enabling earlier risk mitigation and faster incident response for customers.
12 Commits • 9 Features
Mar 1, 2025March 2025: Expanded Nuclei-templates coverage across networking devices and enterprise apps, delivering nine feature/detection items and a targeted regex improvement. Implemented new detections for CVEs across ASUS (CVE-2024-3080), TP-Link (CVE-2024-57049), Ingress-Nginx (CVE-2025-1974), Netgear (CVE-2024-30568, CVE-2024-30569, CVE-2024-30570), GLPI (CVE-2025-24799), and a baserCMS misconfiguration detector. An attempted addition for CVE-2024-51378 YAML templates was rolled back to maintain stability. Refined internal IP discovery regex to reduce false positives. This work increases automated threat detection coverage, enabling earlier risk mitigation and faster incident response for customers.
March 2025
February 2025
1 Commits
Feb 1, 2025February 2025 monthly summary for repository projectdiscovery/nuclei-templates. Delivered targeted SSTI template hardening and linting improvements to reduce unnecessary variable checks, improving scan reliability and performance. The change introduces skip-variables-check: true across Jinja, Pebble, Smarty, and Twig templates, with a minor Thymeleaf description clarification. Associated commit: fb3aa45bfb5daf99a89b6e566100c03d9edd5b18.
February 2025
1 Commits
Feb 1, 2025February 2025 monthly summary for repository projectdiscovery/nuclei-templates. Delivered targeted SSTI template hardening and linting improvements to reduce unnecessary variable checks, improving scan reliability and performance. The change introduces skip-variables-check: true across Jinja, Pebble, Smarty, and Twig templates, with a minor Thymeleaf description clarification. Associated commit: fb3aa45bfb5daf99a89b6e566100c03d9edd5b18.
January 2025
3 Commits • 1 Features
Jan 1, 2025January 2025 monthly summary for projectdiscovery/nuclei-templates: Implemented multi-engine SSTI and template injection templates across multiple languages/frameworks with out-of-band detection capabilities, significantly expanding detection coverage. Expanded Thymeleaf support as part of the template suite. Also delivered linting and encoding fixes to stabilize template payload formatting for Razor SSTI and related templates, boosting reliability. The work is supported by targeted commits that added OOB/SSTI/RCE capabilities and template lint fixes, driving stronger security scanning without impacting performance.
3 Commits • 1 Features
Jan 1, 2025January 2025 monthly summary for projectdiscovery/nuclei-templates: Implemented multi-engine SSTI and template injection templates across multiple languages/frameworks with out-of-band detection capabilities, significantly expanding detection coverage. Expanded Thymeleaf support as part of the template suite. Also delivered linting and encoding fixes to stabilize template payload formatting for Razor SSTI and related templates, boosting reliability. The work is supported by targeted commits that added OOB/SSTI/RCE capabilities and template lint fixes, driving stronger security scanning without impacting performance.
January 2025
December 2024
2 Commits • 1 Features
Dec 1, 2024Month: 2024-12 Focus: Nuclei Templates repository (projectdiscovery/nuclei-templates) Key features delivered: - New template kubernetes-dashboard-enabled.yaml to detect if Kubernetes Dashboard is enabled on Alibaba Cloud ACK clusters, improving security visibility and enabling proactive risk assessment. Major bugs fixed: - Trailing space fix in info.name in improper-bucket-sse.yaml to satisfy linting standards, reducing CI noise and improving template quality. Overall impact and accomplishments: - Strengthened security posture for cloud-based clusters by providing visibility into Dashboard exposure; maintained high lint quality and template reliability; contributed to faster review cycles and reduced maintenance overhead. Technologies/skills demonstrated: - YAML templating and nuclei template development - Linting and CI quality gates - Cloud-provider-specific template work (Alibaba Cloud ACK) - Strong version control discipline and commit hygiene, with traceable changes
December 2024
2 Commits • 1 Features
Dec 1, 2024Month: 2024-12 Focus: Nuclei Templates repository (projectdiscovery/nuclei-templates) Key features delivered: - New template kubernetes-dashboard-enabled.yaml to detect if Kubernetes Dashboard is enabled on Alibaba Cloud ACK clusters, improving security visibility and enabling proactive risk assessment. Major bugs fixed: - Trailing space fix in info.name in improper-bucket-sse.yaml to satisfy linting standards, reducing CI noise and improving template quality. Overall impact and accomplishments: - Strengthened security posture for cloud-based clusters by providing visibility into Dashboard exposure; maintained high lint quality and template reliability; contributed to faster review cycles and reduced maintenance overhead. Technologies/skills demonstrated: - YAML templating and nuclei template development - Linting and CI quality gates - Cloud-provider-specific template work (Alibaba Cloud ACK) - Strong version control discipline and commit hygiene, with traceable changes
November 2024
2 Commits
Nov 1, 2024In 2024-11, stability and reliability were the primary focus for nuclei-templates, with no new features deployed. Unintended YAML changes in the detection module and CVE template definitions were rolled back to restore prior, stable behavior, ensuring consistency for scanning results and user workflows.
2 Commits
Nov 1, 2024In 2024-11, stability and reliability were the primary focus for nuclei-templates, with no new features deployed. Unintended YAML changes in the detection module and CVE template definitions were rolled back to restore prior, stable behavior, ensuring consistency for scanning results and user workflows.
November 2024
Activity
Loading activity data...
Quality Metrics
Correctness98.4%
Maintainability98.6%
Architecture98.0%
Performance98.0%
AI Usage20.2%
Skills & Technologies
Programming Languages
PythonShellYAMLbashjsonyaml
Technical Skills
API IntegrationAPI integrationAlibaba CloudCVE AnalysisCloud SecurityConfiguration ManagementDASTDevOpsExploit DevelopmentGitHub ActionsKubernetesKubernetes SecurityLintingNetwork SecurityNuclei
Repositories Contributed To
Overview of all repositories you've contributed to across your timeline