Vulnerabilidades en ProjectDiscovery
14 resultadosAnálisis Vexday
ProjectDiscovery registra presença reduzida na base Vexday com apenas 2 CVEs, nenhum sob exploração ativa, mas inclui 1 vulnerabilidade crítica. A fraqueza dominante (CWE-552) aponta para problemas de permissões em acesso a arquivos. O risco é contido pela ausência de atividade recente de ataque e volume baixo, porém a gravidade crítica demanda atenção na aplicação de patches.
CVE-2024-43405HIGHNuclei Template Signature Verification BypassEPSS 1.1%CVE-2023-37896HIGHNuclei Path Traversal vulnerabilityEPSS 1.0%CVE-2024-5262CRITICALProjectDiscovery Interactsh - Files or Directories Accessible to External PartiesEPSS 0.6%CVE-2023-36474HIGHInteractsh server settings make users vulnerable to Subdomain TakeoverEPSS 0.5%CVE-2024-27920HIGHUnsigned code template execution through workflows in projectdiscovery/nucleiEPSS 0.4%CVE-2026-41645MEDIUMNuclei: Environment variable disclosure via Response-Derived DSL ExpressionsEPSS 0.3%CVE-2024-40641HIGHUnsigned code template execution through workflows in projectdiscovery/nucleiEPSS 0.3%CVE-2026-41282MEDIUMProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step templates against untruEPSS 0.3%CVE-2026-41646MEDIUMNuclei: Local File Read via require() Module Loader BypassEPSS 0.1%CVE-2026-92718HIGHNuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only CacheEPSS 0.1%CVE-2026-76803MEDIUMNuclei: Local File Read via MySQL Client Sandbox BypassEPSS —CVE-2026-76804MEDIUMNuclei: Local File Read via Workflow File-Protocol Gate BypassEPSS —CVE-2026-76802MEDIUMNuclei: Arbitrary Command Execution via DAST Code Signature BypassEPSS —CVE-2026-76805MEDIUMNuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz ModeEPSS —