CVE-2023-37999

creationtimestamp| type| source ---|---|--- 2025-01-30 02:17:49+00:00| seen| Telegram/mwOGtYpeLb6NwMm3XVbF1OQTZbiCjSFR5gPGLhNsdYvtZL9M 2025-12-01 02:41:35+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-37999.yaml 2025-12-04 21:02:37+00:00|...

CVE-2024-50857

creationtimestamp| type| source ---|---|--- 2025-01-15 00:03:15+00:00| seen| https://t.me/cvedetector/15375 2025-01-15 20:55:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1869 2025-11-11 07:11:14+00:00| confirmed|...

Exploit for OS Command Injection in Aviatrix Controller

CVE-20...

Researchers Uncover Nuclei Vulnerability Enabling Signature Bypass and Code Execution

A high-severity security flaw has been disclosed in ProjectDiscovery's Nuclei, a widely-used open-source vulnerability scanner that, if successfully exploited, could allow attackers to bypass signature checks and potentially execute malicious code. Tracked as CVE-2024-43405, it carries a CVSS sco...

Breaking the Chain: Wiz Uncovers a Signature Verification Bypass in Nuclei, the Popular Vulnerability Scanner (CVE-2024-43405)

Wiz’s engineering team discovered a high-severity signature verification bypass in Nuclei, one of the most popular open-source security tools, which could potentially lead to arbitrary code execution...

CVE-2022-4375

creationtimestamp| type| source ---|---|--- 2024-12-05 13:56:09+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-4375.yaml...

Malicious code in nuclei-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff11d1d83d49d09048c99bb1832b42e2e1c9b2eaab16b52b0da3868e73949051 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for CVE-2024-27954

⚠️ CVE-2024-27954 💀 Automatic Remote code Execution Exploit...

CVE-2024-50498

creationtimestamp| type| source ---|---|--- 2024-10-28 13:38:54+00:00| seen| https://t.me/cvedetector/9094 2024-11-28 01:33:43+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-50498.yaml 2024-12-04 01:33:39+00:00| published-proof-of-concept|...

CVE-2024-9772

creationtimestamp| type| source ---|---|--- 2024-10-26 13:08:52+00:00| seen| https://t.me/cvedetector/9029 2025-09-17 10:20:57+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-9772.yaml 2025-09-19 21:02:37+00:00| seen|...

CVE-2024-49357

creationtimestamp| type| source ---|---|--- 2024-10-25 01:12:02+00:00| seen| https://t.me/cvedetector/8874 2026-04-06 02:39:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-49357.yaml 2026-04-06 21:03:14+00:00| seen|...

CVE-2024-8852

creationtimestamp| type| source ---|---|--- 2024-10-22 08:45:47+00:00| seen| https://t.me/cvedetector/8593 2025-11-12 13:17:53+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-8852.yaml 2025-12-02 21:02:34+00:00| seen|...

CVE-2024-8625

creationtimestamp| type| source ---|---|--- 2024-10-21 09:18:39+00:00| seen| https://t.me/cvedetector/8451 2026-02-18 11:48:56+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-8625.yaml 2026-02-20 21:03:02+00:00| seen|...

CVE-2017-20194

creationtimestamp| type| source ---|---|--- 2024-10-16 11:20:57+00:00| seen| https://t.me/cvedetector/8040 2025-10-13 03:20:30+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2017/CVE-2017-20194.yaml 2025-10-14 21:02:26+00:00| seen|...

CVE-2024-45293

creationtimestamp| type| source ---|---|--- 2024-10-07 15:03:27+00:00| published-proof-of-concept| https://github.com/PHPOffice/PhpSpreadsheet/security/advisories/GHSA-6hwr-6v2f-3m88 2024-10-07 22:39:18+00:00| seen| https://t.me/cvedetector/7265 2024-12-12 05:25:46+00:00| confirmed|...

CVE-2024-9161

creationtimestamp| type| source ---|---|--- 2024-10-05 14:36:53+00:00| seen| https://t.me/cvedetector/7054 2025-01-29 19:18:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3391 2025-11-30 14:36:13+00:00| confirmed|...

Exploit for CVE-2024-47176

PoC: Unauthenticated RCE on cups-browsed...

CVE-2024-43971

creationtimestamp| type| source ---|---|--- 2024-09-18 03:20:08+00:00| seen| https://t.me/cvedetector/5898 2026-01-03 21:25:48+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-43971.yaml 2026-01-05 21:03:10+00:00| seen|...

GO-2024-3114 Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei

Nuclei Template Signature Verification Bypass in github.com/projectdiscovery/nuclei...

Signature Verification Bypass

github.com/projectdiscovery/nuclei is vulnerable to Signature Verification Bypass. The vulnerability is caused due to a defect in the Nuclei's template signature verification system, allows an attacker to bypass the signature check and possibly execute malicious code via custom code template...