TI-2024-29054 CVE-2024-43405 · GHSA-7h5p-mmpp-hgmm
Nuclei Template Signature Verification Bypass
Priority HIGH 69
Nuclei is a vulnerability scanner powered by YAML based templates.
projectdiscovery
Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
projectdiscovery records in CISA KEVNo projectdiscovery vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
14 records
TI-2023-18315 CVE-2023-36474 · GHSA-m36x-mgfh-8g78
Interactsh server settings make users vulnerable to Subdomain Takeover
Priority HIGH 69
Interactsh is an open-source tool for detecting out-of-band interactions.
TI-2024-27052 CVE-2024-40641 · GHSA-c3q9-c27p-cw9h
Unsigned code template execution through workflows in projectdiscovery/nuclei
Priority HIGH 68
Nuclei is a fast and customizable vulnerability scanner based on simple YAML based DSL.
TI-2026-62486 CVE-2026-92718 · GHSA-77rj-h8wx-6cgq
Nuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only Cache
Priority HIGH 66
Nuclei versions before 3.11.1 cache template signature verification based only on file modification time without content checksums.
TI-2026-29888 CVE-2026-41282 · GHSA-vrr8-h7fq-ghr8
Code injection in projectdiscovery Nuclei
Priority HIGH 66
ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection.
TI-2026-30165 CVE-2026-41646 · GHSA-29rg-wmcw-hpf4
Nuclei: Local File Read via require() Module Loader Bypass
Priority MEDIUM 58
Nuclei is a vulnerability scanner built on a simple YAML-based DSL.
TI-2024-04886 CVE-2024-5262 · GHSA-q5mg-pc7r-r8cr
ProjectDiscovery Interactsh - Files or Directories Accessible to External Parties
Priority MEDIUM 49
Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs…
TI-2023-19329 CVE-2023-37896 · GHSA-2xx4-jj5v-6mff
Nuclei Path Traversal vulnerability
Priority MEDIUM 41
Nuclei is a vulnerability scanner.
TI-2024-18525 CVE-2024-27920 · GHSA-w5wx-6g2r-r78q
Unsigned code template execution through workflows in projectdiscovery/nuclei
Priority LOW 33
projectdiscovery/nuclei is a fast and customisable vulnerability scanner based on simple YAML based DSL.
TI-2026-53662 CVE-2026-76805 · GHSA-jpvm-9frm-hjcq
Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode
Priority LOW 24
Nuclei is a vulnerability scanner built on a simple YAML-based DSL.
TI-2026-53661 CVE-2026-76804 · GHSA-qgw5-7j4f-fg97
Nuclei: Local File Read via Workflow File-Protocol Gate Bypass
Priority LOW 24
Nuclei is a vulnerability scanner built on a simple YAML-based DSL.
TI-2026-53660 CVE-2026-76803 · GHSA-xhmx-w2j4-rw3q
Nuclei: Local File Read via MySQL Client Sandbox Bypass
Priority LOW 24
Nuclei is a vulnerability scanner built on a simple YAML-based DSL.
TI-2026-30164 CVE-2026-41645 · GHSA-jm34-66cf-qpvr
Nuclei: Environment variable disclosure via Response-Derived DSL Expressions
Priority LOW 24
Nuclei is a vulnerability scanner built on a simple YAML-based DSL.
TI-2026-53659 CVE-2026-76802 · GHSA-jpf4-98qj-qr67
Nuclei: Arbitrary Command Execution via DAST Code Signature Bypass
Priority LOW 21
Nuclei is a vulnerability scanner built on a simple YAML-based DSL.