Vulnerabilities in projectdiscovery
10 resultsVexday analysis
ProjectDiscovery tem 7 vulnerabilidades documentadas, duas publicadas nos últimos 90 dias, com nenhuma atualmente sob exploração ativa ou classificada como crítica. A fraqueza dominante é injeção de comando (CWE-78), que representa o principal vetor de risco para integração segura das ferramentas da empresa em ambientes de produção.
CVE-2024-43405HIGHNuclei Template Signature Verification BypassEPSS 1.1%CVE-2023-37896HIGHNuclei Path Traversal vulnerabilityEPSS 1.0%CVE-2024-5262CRITICALProjectDiscovery Interactsh - Files or Directories Accessible to External PartiesEPSS 0.6%CVE-2023-36474HIGHInteractsh server settings make users vulnerable to Subdomain TakeoverEPSS 0.5%CVE-2024-27920HIGHUnsigned code template execution through workflows in projectdiscovery/nucleiEPSS 0.4%CVE-2026-41645MEDIUMNuclei: Environment variable disclosure via Response-Derived DSL ExpressionsEPSS 0.3%CVE-2024-40641HIGHUnsigned code template execution through workflows in projectdiscovery/nucleiEPSS 0.3%CVE-2026-41282MEDIUMProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step templates against untruEPSS 0.3%CVE-2026-41646MEDIUMNuclei: Local File Read via require() Module Loader BypassEPSS 0.1%CVE-2026-92718HIGHNuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only CacheEPSS 0.1%