610 matches found
Exploit for Path Traversal in Zimbra Collaboration
CVE-2022-41352 PoC How does this detection method work?...
Exploit for Improper Input Validation in Adobe Commerce
CVE-2022-24682 PoC How does this detection method work?...
CVE-2024-27920
projectdiscovery/nuclei is a fast and customisable vulnerability scanner based on simple YAML based DSL. A significant security oversight was identified in Nuclei v3, involving the execution of unsigned code templates through workflows. This vulnerability specifically affects users utilizing cust...
CVE-2024-27920 Unsigned code template execution through workflows in projectdiscovery/nuclei
projectdiscovery/nuclei is a fast and customisable vulnerability scanner based on simple YAML based DSL. A significant security oversight was identified in Nuclei v3, involving the execution of unsigned code templates through workflows. This vulnerability specifically affects users utilizing cust...
CVE-2024-27920
The CVE covers projectdiscovery/nuclei where unsigned code templates could be executed via workflows in Nuclei v3. root cause: oversight in workflow execution that allows executing unsigned templates. Impact: local execution with high severity per listed metrics; effects are mitigation-dependent ...
CVE-2024-27920 Unsigned code template execution through workflows in projectdiscovery/nuclei
projectdiscovery/nuclei is a fast and customisable vulnerability scanner based on simple YAML based DSL. A significant security oversight was identified in Nuclei v3, involving the execution of unsigned code templates through workflows. This vulnerability specifically affects users utilizing cust...
CVE-2024-27920 Unsigned code template execution through workflows in projectdiscovery/nuclei
projectdiscovery/nuclei is a fast and customisable vulnerability scanner based on simple YAML based DSL. A significant security oversight was identified in Nuclei v3, involving the execution of unsigned code templates through workflows. This vulnerability specifically affects users utilizing cust...
GHSA-W5WX-6G2R-R78Q Nuclei allows unsigned code template execution through workflows
Overview A significant security oversight was identified in Nuclei v3, involving the execution of unsigned code templates through workflows. This vulnerability specifically affects users utilizing custom workflows, potentially allowing the execution of malicious code on the user's system. This...
Nuclei allows unsigned code template execution through workflows
Overview A significant security oversight was identified in Nuclei v3, involving the execution of unsigned code templates through workflows. This vulnerability specifically affects users utilizing custom workflows, potentially allowing the execution of malicious code on the user's system. This...
CVE-2024-28253
creationtimestamp| type| source ---|---|--- 2024-03-15 06:12:00+00:00| published-proof-of-concept| https://github.com/open-metadata/OpenMetadata/security/advisories/GHSA-7vf4-x5m2-r6gr 2024-03-15 21:22:12+00:00| seen| https://t.me/ctinow/209159 2024-03-15 21:26:25+00:00| seen|...
Nuclei Security Vulnerabilities
Nuclei is a customizable and fast vulnerability scanner based on YAML syntax templates. A security vulnerability exists in nuclei 3.0.0 and later, which stems from allowing the execution of unsigned code templates via a workflow, resulting in malicious code that can be executed on a user's system...
PT-2024-22137
Name of the Vulnerable Software and Affected Versions Nuclei versions prior to 3.2.0 Description A significant security oversight was identified in Nuclei, involving the execution of unsigned code templates through workflows. This issue specifically affects users utilizing custom workflows,...
CVE-2024-0801
creationtimestamp| type| source ---|---|--- 2024-03-13 20:23:06+00:00| seen| https://t.me/ctinow/207117 2024-03-13 20:27:46+00:00| seen| https://t.me/ctinow/207123 2024-05-14 18:10:04+00:00| published-proof-of-concept| https://t.me/truesecator/5733 2025-11-05 16:44:27+00:00| confirmed|...
CVE-2024-0799
creationtimestamp| type| source ---|---|--- 2024-03-13 20:23:04+00:00| seen| https://t.me/ctinow/207115 2024-03-13 20:27:44+00:00| seen| https://t.me/ctinow/207121 2024-03-14 12:41:05+00:00| published-proof-of-concept| https://t.me/ctinow/207672 2024-05-14 18:10:04+00:00|...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: hubble, syft, kustomize, vault-k8s, nuclei, kubernetes, crossplane, kpt, prometheus-adapter, timestamp-authority, falcosidekick, newrelic-nri-kube-events, metacontroller, helm-push, newrelic-infrastructure-agent, guac, sigstore-scaffolding, tkn, aws-efs-csi-driver,...
CVE-2023-40000
creationtimestamp| type| source ---|---|--- 2024-02-27 15:52:47+00:00| seen| https://t.me/thehackernews/4607 2024-02-27 16:17:36+00:00| seen| Telegram/Gl8DkxBzDx13jCAd1KOQDff27xgk7OvzgQUumKqJfz1gw 2024-02-27 17:17:50+00:00| seen| https://t.me/KomunitiSiber/1555 2024-02-27 17:35:44+00:00| seen|...
CVE-2023-7165
creationtimestamp| type| source ---|---|--- 2024-02-27 10:26:10+00:00| seen| https://t.me/ctinow/194184 2024-02-27 10:26:29+00:00| seen| https://t.me/ctinow/194198 2026-04-09 03:37:19+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-7165.yam...
CVE-2023-5204
creationtimestamp| type| source ---|---|--- 2024-02-23 11:09:03+00:00| published-proof-of-concept| https://t.me/CNArsenal/2017 2024-02-24 10:46:25+00:00| published-proof-of-concept| https://t.me/apsecurity/475 2026-02-12 15:29:53+00:00| confirmed|...
CVE-2023-6592
creationtimestamp| type| source ---|---|--- 2024-02-06 09:11:22+00:00| seen| https://t.me/ctinow/179840 2025-06-20 17:46:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19014 2026-04-09 05:01:39+00:00| confirmed|...