Vulnerabilities in ProjectDiscovery
14 resultsCVE-2024-43405HIGHNuclei Template Signature Verification BypassEPSS 1.1%CVE-2023-37896HIGHNuclei Path Traversal vulnerabilityEPSS 1.0%CVE-2024-5262CRITICALProjectDiscovery Interactsh - Files or Directories Accessible to External PartiesEPSS 0.6%CVE-2023-36474HIGHInteractsh server settings make users vulnerable to Subdomain TakeoverEPSS 0.5%CVE-2024-27920HIGHUnsigned code template execution through workflows in projectdiscovery/nucleiEPSS 0.4%CVE-2026-76805MEDIUMNuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz ModeEPSS 0.4%CVE-2026-76803MEDIUMNuclei: Local File Read via MySQL Client Sandbox BypassEPSS 0.4%CVE-2026-41645MEDIUMNuclei: Environment variable disclosure via Response-Derived DSL ExpressionsEPSS 0.4%CVE-2024-40641HIGHUnsigned code template execution through workflows in projectdiscovery/nucleiEPSS 0.3%CVE-2026-41282MEDIUMProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step templates against untruEPSS 0.3%CVE-2026-76802MEDIUMNuclei: Arbitrary Command Execution via DAST Code Signature BypassEPSS 0.2%CVE-2026-76804MEDIUMNuclei: Local File Read via Workflow File-Protocol Gate BypassEPSS 0.2%CVE-2026-92718HIGHNuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only CacheEPSS 0.1%CVE-2026-41646MEDIUMNuclei: Local File Read via require() Module Loader BypassEPSS 0.1%