765 matches found
Exploit for Improper Validation of Specified Type of Input in Servicenow
CVE-2024-4879-CVE-2024-5217-ServiceNow-RCE-Scanning CVE-2024-4...
CVE-2024-6753
creationtimestamp| type| source ---|---|--- 2024-07-24 05:46:41+00:00| seen| https://t.me/cvedetector/1534 2025-12-25 19:00:47+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-6753.yaml 2025-12-30 21:03:00+00:00| seen|...
GO-2024-2989 projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei
projectdiscovery/nuclei allows unsigned code template execution through workflows in github.com/projectdiscovery/nuclei...
OS Command Injection
Nuclei is vulnerable to OS Command Injection. The vulnerability is due to the -code option in code templates, allowing users to edit and execute workflow files in some web applications, leading to arbitrary command execution...
projectdiscovery/nuclei allows unsigned code template execution through workflows
Summary Find a way to execute code template without -code option and signature. Details write a code.yaml: yaml id: code info: name: example code template author: ovi3 code: - engine: - sh - bash source: | id http: - raw: - | POST /re HTTP/1.1 Host: Hostname coderesponse workflows: - matchers: -...
GHSA-C3Q9-C27P-CW9H projectdiscovery/nuclei allows unsigned code template execution through workflows
Summary Find a way to execute code template without -code option and signature. Details write a code.yaml: yaml id: code info: name: example code template author: ovi3 code: - engine: - sh - bash source: | id http: - raw: - | POST /re HTTP/1.1 Host: Hostname coderesponse workflows: - matchers: -...
CVE-2024-40641
Nuclei is a fast and customizable vulnerability scanner based on simple YAML based DSL. In affected versions it a way to execute code template without -code option and signature has been discovered. Some web applications inherit from Nuclei and allow users to edit and execute workflow files. In...
CVE-2024-40641 Unsigned code template execution through workflows in projectdiscovery/nuclei
Nuclei is a fast and customizable vulnerability scanner based on simple YAML based DSL. In affected versions it a way to execute code template without -code option and signature has been discovered. Some web applications inherit from Nuclei and allow users to edit and execute workflow files. In...
CVE-2024-40641 Unsigned code template execution through workflows in projectdiscovery/nuclei
Nuclei is a fast and customizable vulnerability scanner based on simple YAML based DSL. In affected versions it a way to execute code template without -code option and signature has been discovered. Some web applications inherit from Nuclei and allow users to edit and execute workflow files. In...
CVE-2024-40641
Nuclei (projectdiscovery/nuclei) has a CVE-2024-40641 OS Command Injection vector where unsigned code templates can execute via workflows, exposing arbitrary commands when users can edit/execute workflow files. Connected advisories confirm the root cause is code-template execution without the -co...
CVE-2024-40641 Unsigned code template execution through workflows in projectdiscovery/nuclei
Nuclei is a fast and customizable vulnerability scanner based on simple YAML based DSL. In affected versions it a way to execute code template without -code option and signature has been discovered. Some web applications inherit from Nuclei and allow users to edit and execute workflow files. In...
CVE-2024-6220
creationtimestamp| type| source ---|---|--- 2024-07-17 10:41:45+00:00| seen| https://t.me/cvedetector/1064 2024-08-01 10:18:47+00:00| exploited| https://t.me/HackingInsights/8275 2025-12-03 08:31:16+00:00| confirmed|...
PT-2024-28959 · Nuclei · Nuclei
Name of the Vulnerable Software and Affected Versions: Nuclei versions prior to 3.3.0 Description: A way to execute code templates without the -code option and signature has been discovered in Nuclei. This issue affects some web applications that inherit from Nuclei and allow users to edit and...
Exploit for SQL Injection in Efrotech Timetrax
CVE-2024-39250 PoC nuclei template Efrotech's http://ww...
CVE-2024-6555
creationtimestamp| type| source ---|---|--- 2024-07-12 09:23:09+00:00| seen| https://t.me/cvedetector/703 2025-12-02 07:41:11+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-6555.yaml 2025-12-02 21:02:32+00:00| seen|...
Exploit for Path Traversal in Splunk
CVE-2024-36991 Nuclei Template Description This repositor...
Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Apache Streampipes
CVE-2024-29868: Use of Cryptographically Weak PRNG in Recovery...
Exploit for Code Injection in Rejetto Http_File_Server
CVE-2024-23692-EXP bash bash CVE-2024-...
CVE-2024-35255 vulnerabilities
Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, flux-source-controller, grafana-agent-operator, tekton-chains, cortex, hugo-extended, flux-image-reflector-controller, step, up, argo-workflows, argo-events, chezmoi, fluent-bit-plugin-loki, policy-controller, airflow, ksops,...