11 matches found
CVE-2025-61319
CVE-2025-61319：ReNgine 2. 扫描完成后，打开 ReNgine 中的“漏洞”选项卡并查看结果。 3. 该载荷会在管理员的浏览器上下文中执行。 受影响版本 ReNgine = 2.2.0 修复建议 在渲染扫描结果之前，对用户提供的输入进行净化和转义。 在“漏洞”选项卡中，对用户可控的输出实施正确的 HTML 编码。 参考 ReNgine 官方仓库...
CVE-2025-61319
ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting XSS vulnerability in the Vulnerabilities module. When scanning a target with an XSS payload, the unsanitized payload is rendered in the ReNgine web UI, resulting in arbitrary JavaScript execution in the victim's browser. This can b...
EUVD-2025-33724
ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting XSS vulnerability in the Vulnerabilities module. When scanning a target with an XSS payload, the unsanitized payload is rendered in the ReNgine web UI, resulting in arbitrary JavaScript execution in the victim's browser. This can b...
CVE-2025-61319
ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting XSS vulnerability in the Vulnerabilities module. When scanning a target with an XSS payload, the unsanitized payload is rendered in the ReNgine web UI, resulting in arbitrary JavaScript execution in the victim's browser. This can b...
PT-2025-41564
Name of the Vulnerable Software and Affected Versions ReNgine versions through 2.2.0 Description ReNgine through version 2.2.0 contains a Stored Cross-Site Scripting XSS issue within the Vulnerabilities module. When a target is scanned using an XSS payload, the payload is rendered without proper...
CVE-2025-61319
ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting XSS vulnerability in the Vulnerabilities module. When scanning a target with an XSS payload, the unsanitized payload is rendered in the ReNgine web UI, resulting in arbitrary JavaScript execution in the victim's browser. This can b...
reNgine 安全漏洞
reNgine is an automated reconnaissance framework for web applications from the individual developer Yogesh Ojha. Focused on a highly configurable streamlined scouting process supported by an engine, scouting data correlation and organization, continuous monitoring, supported by a database and a...
CVE-2025-61319
ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting XSS vulnerability in the Vulnerabilities module. When scanning a target with an XSS payload, the unsanitized payload is rendered in the ReNgine web UI, resulting in arbitrary JavaScript execution in the victim's browser. This can b...
CVE-2025-61319
CVE-2025-61319 affects ReNgine up to version 2.2.0. Affected component: Vulnerabilities module; root cause is unsanitized XSS payloads rendered in the web UI during scans, enabling arbitrary JavaScript execution in a victim’s browser. Impact can include session cookie theft, unauthorized actions,...
CVE-2025-61319
ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting XSS vulnerability in the Vulnerabilities module. When scanning a target with an XSS payload, the unsanitized payload is rendered in the ReNgine web UI, resulting in arbitrary JavaScript execution in the victim's browser. This can b...