Vendors / yogeshojha Records 15 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 7
Exploited now yogeshojha records in CISA KEV No yogeshojha vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 79
reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine configuration that allows authenticated attackers to execute arbitrary commands.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.03423 · Published 2025-12-11 · No fix listed CWE-78
Priority HIGH 73
reNgine is an automated reconnaissance framework for web applications.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00626 · Published 2025-02-04 · No fix listed CWE-284
Priority HIGH 73
reNgine is an automated reconnaissance framework for web applications.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00737 · Published 2025-02-03 · No fix listed CWE-74
Priority HIGH 73
reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.1354 · Published 2024-01-01 · No fix listed CWE-78
Priority HIGH 66
reNgine is an automated reconnaissance framework for web applications.
CVSS 4.0 HIGH 7.4· Network · High privileges · No interaction · EPSS 0.00282 · Published 2025-02-04 · No fix listed CWE-79
Priority HIGH 66
reNgine is an automated reconnaissance framework for web applications.
CVSS 4.0 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00536 · Published 2025-02-03 · Fixed in 2.2.0 CWE-200
Priority MEDIUM 64
reNgine through 2.2.0 contains an authorization bypass vulnerability in the GetFileContents API endpoint that allows any authenticated user to read bundled recon tool configuration files.
CVSS 4.0 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00436 · Published 2026-09-16 · No fix listed CWE-862
Priority MEDIUM 63
reNgine is an automated reconnaissance framework for web applications.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0027 · Published 2025-02-04 · No fix listed CWE-79
Priority MEDIUM 60
ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in the Vulnerabilities module.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00285 · Published 2025-10-10 · No fix listed CWE-79
Priority MEDIUM 58
reNgine is an automated reconnaissance framework for web applications.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00442 · Published 2024-08-16 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was found in yogeshojha reNgine up to 2.2.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.01089 · Published 2026-10-06 · No fix listed CWE-77
Priority MEDIUM 47
Rengine v1.0.2 was discovered to contain a remote code execution (RCE) vulnerability via the yaml configuration function.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02453 · Published 2022-05-20 · No fix listed
Priority MEDIUM 47
OS Command Injection in GitHub repository yogeshojha/rengine prior to 1.2.0.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0254 · Published 2022-05-22 · Fixed in 1.2.0 CWE-78
Priority MEDIUM 46
Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02088 · Published 2022-08-31 · No fix listed CWE-78
Priority MEDIUM 44
reNgine through 0.5 relies on a predictable directory name.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01202 · Published 2021-08-12 · No fix listed CWE-330
Open these records in search → All records by CVSS severity
4 7 4 0 0
THREATIST.IORead the docs