104 matches found
GO-2022-0372 Subdomain Takeover in Interactsh server in github.com/projectdiscovery/interactsh
Subdomain Takeover in Interactsh server in github.com/projectdiscovery/interactsh...
CVE-2024-40641 Unsigned code template execution through workflows in projectdiscovery/nuclei
Nuclei is a fast and customizable vulnerability scanner based on simple YAML based DSL. In affected versions it a way to execute code template without -code option and signature has been discovered. Some web applications inherit from Nuclei and allow users to edit and execute workflow files. In...
CVE-2024-39887
creationtimestamp| type| source ---|---|--- 2024-07-16 12:55:40+00:00| seen| https://t.me/cvedetector/926 2024-12-09 16:22:14+00:00| seen| https://t.me/cvedetector/12393 2024-12-11 15:19:16+00:00| confirmed|...
Malicious code in projectdiscovery (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2021-38146
creationtimestamp| type| source ---|---|--- 2024-06-07 17:11:41+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-38146.yaml 2026-09-01 20:02:09+00:00| seen| https://t.me/hackingAttack/31512 2026-09-02 01:02:35+00:00| seen|...
CVE-2024-23901
Jenkins GitLab Branch Source Plugin 684.veafa7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group, allowing attackers to configure and share a project, resulting in a crafted Pipeline being built by Jenkins during the next scan of the group...
CVE-2023-6697
creationtimestamp| type| source ---|---|--- 2024-01-24 15:26:49+00:00| seen| https://t.me/ctinow/172834 2024-02-17 19:16:24+00:00| seen| https://t.me/ctinow/187023 2024-12-14 05:38:37+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-6697.yam...
Exploit for Injection in Atlassian Confluence_Data_Center
Atlassian Confluence CVE-2023-22527 Scanner 🛡️ Overview 🌟...
CVE-2023-49230
creationtimestamp| type| source ---|---|--- 2023-12-28 05:26:21+00:00| seen| https://t.me/ctinow/159920 2024-01-04 21:21:54+00:00| seen| https://t.me/ctinow/163221 2024-01-19 18:47:04+00:00| seen| https://t.me/ctinow/170346 2025-07-08 18:24:31+00:00| confirmed|...
CVE-2023-38875
creationtimestamp| type| source ---|---|--- 2023-09-21 00:30:28+00:00| seen| https://t.me/cibsecurity/70841 2025-11-28 05:14:21+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-38875.yaml 2025-12-01 21:02:37+00:00| seen|...
CVE-2023-40924
creationtimestamp| type| source ---|---|--- 2023-09-08 16:19:35+00:00| seen| https://t.me/cibsecurity/70144 2026-04-06 09:57:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-40924.yaml 2026-04-07 21:03:06+00:00| seen|...
GHSA-826J-8WP2-4X6Q Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User
Impact A Mass assignment vulnerability was found allowing a non-admin user to escalate privileges to admin user. Patches Issue is patched in 0.17.1, and fixed in 0.18.6+. If Users are using 0.17.1, they should run "docker pull gravitl/netmaker:v0.17.1" and "docker-compose up -d". This will switch...
Netmaker Vulnerable to Privilege Escalation From Non Admin To Admin User
Impact A Mass assignment vulnerability was found allowing a non-admin user to escalate privileges to admin user. Patches Issue is patched in 0.17.1, and fixed in 0.18.6+. If Users are using 0.17.1, they should run "docker pull gravitl/netmaker:v0.17.1" and "docker-compose up -d". This will switch...
GHSA-256M-J5QW-38F4 Netmaker IDOR Allows User to Update Other User's Password
Impact An IDOR vulnerability was found in the user update function. By specifying another user's username it is possible to update the other user's password. Patches Issue is patched in 0.17.1, and fixed in 0.18.6+. If Users are using 0.17.1, they should run "docker pull gravitl/netmaker:v0.17.1"...
Netmaker IDOR Allows User to Update Other User's Password
Impact An IDOR vulnerability was found in the user update function. By specifying another user's username it is possible to update the other user's password. Patches Issue is patched in 0.17.1, and fixed in 0.18.6+. If Users are using 0.17.1, they should run "docker pull gravitl/netmaker:v0.17.1"...
GHSA-8X8H-HCQ8-JWWX Netmaker has Hardcoded DNS Secret Key
Impact Hardcoded DNS key usage has been found in Netmaker allowing unauth users to interact with DNS API endpoints. Patches Issue is patched in 0.17.1, and fixed in 0.18.6+. If Users are using 0.17.1, they should run "docker pull gravitl/netmaker:v0.17.1" and "docker-compose up -d". This will...
Netmaker has Hardcoded DNS Secret Key
Impact Hardcoded DNS key usage has been found in Netmaker allowing unauth users to interact with DNS API endpoints. Patches Issue is patched in 0.17.1, and fixed in 0.18.6+. If Users are using 0.17.1, they should run "docker pull gravitl/netmaker:v0.17.1" and "docker-compose up -d". This will...
Path Traversal
github.com/projectdiscovery/nuclei is vulnerable to Path Traversal. The vulnerability exists when to the sandbox feature is turned on, which results in path traversal due to lack of sanitization when loading payloads, resulting in attacker to reading arbitrary files in the file system...
CVE-2023-4136
creationtimestamp| type| source ---|---|--- 2023-08-03 18:40:02+00:00| seen| https://t.me/cibsecurity/67683 2025-06-02 16:52:14+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-4136.yaml 2025-06-04 21:02:24+00:00| seen|...