Rengine Security Vulnerabilities

CVE-2023-50094

reNgine through 2.0.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/tools/waf_detector/?url= string. The commands are executed as root via...

CVE-2022-36566

Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine...

CVE-2022-1813

OS Command Injection in GitHub repository yogeshojha/rengine prior to...

CVE-2022-28995

Rengine v1.0.2 was discovered to contain a remote code execution (RCE) vulnerability via the yaml configuration...

CVE-2021-39491

A Cross Site Scripting (XSS) vulnerability exists in Yogesh Ojha reNgine v1.0 via the Scan Engine name file in the Scan Engine deletion confirmation modal box ....

CVE-2021-38606

reNgine through 0.5 relies on a predictable directory...