Template / PR Information

• Added CVE-2024-5806: Progress MOVEit Transfer SFTP Authentication Bypass detection template.
• References:
  • https://nvd.nist.gov/vuln/detail/CVE-2024-5806
  • https://community.progress.com/s/article/MOVEit-Transfer-Service-Pack-June-2024
  • https://github.com/watchtowrlabs/watchTowr-vs-progress-moveit_CVE-2024-5806

Template Validation

I’ve validated this template locally?

• YES
• NO

Additional Details

• Shodan Query: http.favicon.hash:989289239
• FOFA Query: app="Progress-MOVEit"
• Detection covers both SFTP (SSH banner) and HTTP web interface.

Additional References:

• Nuclei Template Creation Guideline
• Nuclei Template Matcher Guideline
• Nuclei Template Contribution Guideline
• PD-Community Discord server

/claim #13257