172 matches found
Path Traversal in yogeshojha/rengine
โ๏ธ Description Local File Inclusion through Path Traversal ๐ต๏ธโโ๏ธ Proof of Concept While logged in into a Rengine instance, go to /api/getFileContents/?nucleitemplate&name=../../../../../../../../etc/passwd. The contents of /etc/passwd are included into the response. ๐ฅ Impact This vulnerability is...
Cross-site Scripting (XSS) - Stored in yogeshojha/rengine
โ๏ธ Description When a XSS payload is used as the name of a gf pattern, it executes. ๐ต๏ธโโ๏ธ Proof of Concept 1. Name a file .json 2. Import the file as a gf pattern at https://127.0.0.1/scanEngine/toolsettings 3. Click on the uploaded gf pattern. ๐ฅ Impact The impact is same as any other Stored XSS...
CVE-2021-38606
reNgine through 0.5 relies on a predictable directory name...
CVE-2021-38606
reNgine through 0.5 relies on a predictable directory name...
CVE-2021-38606
reNgine through 0.5 relies on a predictable directory name...
Directory traversal
reNgine through 0.5 relies on a predictable directory name...
CVE-2021-38606
reNgine through 0.5 relies on a predictable directory name...
CVE-2021-38606
reNgine through 0.5 relies on a predictable directory name...
CVE-2021-38606
CVE-2021-38606 affects reNgine up to version 0.5 (and earlier). Root cause: the product relies on a predictable directory name, enabling potential exploitation via directory name guessing. Public sources corroborate risk and suggest remediation: rename or randomize directory names for versions 0....
CVE-2021-38606: Use of Insufficiently Random Values
reNgine through 0.5 relies on a predictable directory name...
reNgine ๅฎๅ จ็นๅพ้ฎ้ขๆผๆด
reNgine is an automated reconnaissance framework for gathering information during penetration testing of web applications. A security vulnerability exists in reNgine version 0.5 and earlier versions that stems from reNgine's reliance on predictable directory names...
PT-2021-22240 ยท Rengine ยท Rengine
Name of the Vulnerable Software and Affected Versions: reNgine versions 0.5 and earlier Description: The issue is related to reNgine relying on a predictable directory name. Recommendations: For versions 0.5 and earlier, consider renaming or randomizing directory names to mitigate the risk of...