Lucene search
+L

6 matches found

Kitploit
Kitploit
•added 2026/10/09 2:22 p.m.•23 views

CVE-2023-50094_POC

reNgine 2.2.0 - Command Injection - CVE-2023-50094 Description This Python script exploits an authenticated command injection vulnerability in reNgine 2.2.0. The exploit targets the nmapcmd parameter in the Scan Engine configuration, allowing attackers to execute arbitrary commands. Features...

8.8CVSS8.1AI score0.1354EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/11 12:00 a.m.•4 views

CVE-2024-58287: Improper Neutralization of Special Elements used in an OS Command

reNgine 2.2.0 contains a command injection vulnerability in the nmapcmd parameter of scan engine configuration that allows authenticated attackers to execute arbitrary commands. Attackers can modify the nmapcmd parameter with malicious base64-encoded payloads to achieve remote code execution duri...

8.8CVSS6.8AI score0.03423EPSS
SaveExploits1References1
Mend
Mend
•added 2025/02/03 8:58 p.m.•2 views

CVE-2025-24962

reNgine is an automated reconnaissance framework for web applications. In affected versions a user can inject commands via the nmapcmd parameters. This issue has been addressed in commit "c28e5c8d" and is expected in the next versioned release. Users are advised to filter user input and monitor t...

8.8CVSS0.00737EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/03 12:00 a.m.•2 views

CVE-2025-24962: Improper Neutralization of Special Elements in Output Used by a Downstream Component

reNgine is an automated reconnaissance framework for web applications. In affected versions a user can inject commands via the nmapcmd parameters. This issue has been addressed in commit c28e5c8d and is expected in the next versioned release. Users are advised to filter user input and monitor the...

8.8CVSS5.7AI score0.00737EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2024/10/03 12:00 a.m.•225 views

reNgine 2.2.0 Command Injection

Exploit Title: reNgine 2.2.0 - Command Injection Authenticated Date: 2024-09-29 Exploit Author: Caner Tercan Vendor Homepage: https://rengine.wiki/ Software Link: https://github.com/yogeshojha/rengine Version: v2.2.0 Tested on: macOS POC : 1. Login the Rengine Platform 2. Click the Scan Engine 3...

7.4AI score
SaveExploits0
zdt
zdt
•added 2024/10/01 12:00 a.m.•305 views

reNgine 2.2.0 - Command Injection (Authenticated) Vulnerability

Exploit Title: reNgine 2.2.0 - Command Injection Authenticated Exploit Author: Caner Tercan Vendor Homepage: https://rengine.wiki/ Software Link: https://github.com/yogeshojha/rengine Version: v2.2.0 Tested on: macOS POC : 1. Login the Rengine Platform 2. Click the Scan Engine 3. Modify any Scan...

7.4AI score
SaveExploits0
Rows per page
Query Builder