CVE-2023-50094

The CVE-2023-50094 vulnerability affects reNgine (before 2.1.2). Affected component is the web API path including api/tools/waf_detector/?url= where shell metacharacters can be injected by an authenticated user, leading to OS command execution as root via subprocess.check_output. Documented impac...

reNgine Operating System Command Injection Vulnerability

reNgine is an automated reconnaissance framework for web applications from the individual developer Yogesh Ojha. Focused on a highly configurable streamlined reconnaissance process supported by an engine, reconnaissance data correlation and organization, continuous monitoring, supported by a...

CVE-2023-50094

reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/tools/wafdetector/?url= string. The commands are executed as root via subprocess.checkoutput...

CVE-2022-36566

Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function...

CVE-2022-36566

Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function...

Command injection

Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function...

CVE-2022-36566

Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function...

CVE-2022-36566

Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function...

CVE-2022-36566

The CVE-2022-36566 entry concerns Rengine v1.3.0, where a command injection vulnerability exists in the scan engine function . Affected software is Rengine 1.3.0; root cause is injection in the scan engine, enabling the attacker to execute arbitrary commands. CVSSv3.1 metrics indicate a 9.8 score...

Rengine 操作系统命令注入漏洞

Rengine is an automated reconnaissance framework for gathering information during penetration testing of web applications. A security vulnerability exists in Rengine version v1.3.0, which stems from a command injection in its scan engine functionality...

PT-2022-23474 · Rengine · Rengine

Name of the Vulnerable Software and Affected Versions: Rengine version 1.3.0 Description: A command injection issue was found in the scan engine function. Recommendations: For Rengine version 1.3.0, consider disabling the scan engine function as a temporary workaround until a patch is available...

CVE-2022-1813

OS Command Injection in GitHub repository yogeshojha/rengine prior to 1.2.0...

CVE-2022-1813

OS Command Injection in GitHub repository yogeshojha/rengine prior to 1.2.0...

Command injection

OS Command Injection in GitHub repository yogeshojha/rengine prior to 1.2.0...

rengine 操作系统命令注入漏洞

rengine is an automated reconnaissance framework for collecting information during penetration testing of web applications. An operating system command injection vulnerability exists in versions of rengine prior to 1.2.0, which can be exploited by an attacker to execute illegal operating system...

CVE-2022-28995

Rengine v1.0.2 was discovered to contain a remote code execution RCE vulnerability via the yaml configuration function...

CVE-2022-28995

Rengine v1.0.2 was discovered to contain a remote code execution RCE vulnerability via the yaml configuration function...

Remote code execution

Rengine v1.0.2 was discovered to contain a remote code execution RCE vulnerability via the yaml configuration function...

CVE-2022-28995

Rengine v1.0.2 was discovered to contain a remote code execution RCE vulnerability via the yaml configuration function...

CVE-2022-28995

CVE-2022-28995 affects Rengine v1.0.2. The vulnerability enables remote code execution via the YAML configuration function. The issue is confirmed across multiple sources (NVD, Red Hat, OSV, etc.). Practical impact is remote code execution with network access and no authentication required, as de...