Vulnerabilidades en projectdiscovery
14 resultadosAnálisis Vexday
ProjectDiscovery tem 7 vulnerabilidades documentadas, duas publicadas nos últimos 90 dias, com nenhuma atualmente sob exploração ativa ou classificada como crítica. A fraqueza dominante é injeção de comando (CWE-78), que representa o principal vetor de risco para integração segura das ferramentas da empresa em ambientes de produção.
CVE-2024-43405HIGHNuclei Template Signature Verification BypassEPSS 1.1%CVE-2023-37896HIGHNuclei Path Traversal vulnerabilityEPSS 1.0%CVE-2024-5262CRITICALProjectDiscovery Interactsh - Files or Directories Accessible to External PartiesEPSS 0.6%CVE-2023-36474HIGHInteractsh server settings make users vulnerable to Subdomain TakeoverEPSS 0.5%CVE-2024-27920HIGHUnsigned code template execution through workflows in projectdiscovery/nucleiEPSS 0.4%CVE-2026-41645MEDIUMNuclei: Environment variable disclosure via Response-Derived DSL ExpressionsEPSS 0.3%CVE-2024-40641HIGHUnsigned code template execution through workflows in projectdiscovery/nucleiEPSS 0.3%CVE-2026-41282MEDIUMProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection. This affects use of -env-vars for multi-step templates against untruEPSS 0.3%CVE-2026-41646MEDIUMNuclei: Local File Read via require() Module Loader BypassEPSS 0.1%CVE-2026-92718HIGHNuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only CacheEPSS 0.1%CVE-2026-76803MEDIUMNuclei: Local File Read via MySQL Client Sandbox BypassEPSS —CVE-2026-76804MEDIUMNuclei: Local File Read via Workflow File-Protocol Gate BypassEPSS —CVE-2026-76802MEDIUMNuclei: Arbitrary Command Execution via DAST Code Signature BypassEPSS —CVE-2026-76805MEDIUMNuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz ModeEPSS —