Vendors / yogeshojha Records 15 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 7
Exploited now yogeshojha records in CISA KEV No yogeshojha vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 79
reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine configuration that allows authenticated attackers to execute arbitrary commands.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.03423 · Published 2025-12-11 · No fix listed CWE-78
Priority HIGH 73
reNgine is an automated reconnaissance framework for web applications.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00626 · Published 2025-02-04 · No fix listed CWE-284
Priority HIGH 73
reNgine is an automated reconnaissance framework for web applications.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00737 · Published 2025-02-03 · No fix listed CWE-74
Priority HIGH 73
reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.1354 · Published 2024-01-01 · No fix listed CWE-78
Priority HIGH 66
reNgine is an automated reconnaissance framework for web applications.
CVSS 4.0 HIGH 7.4· Network · High privileges · No interaction · EPSS 0.00282 · Published 2025-02-04 · No fix listed CWE-79
Priority HIGH 66
reNgine is an automated reconnaissance framework for web applications.
CVSS 4.0 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00536 · Published 2025-02-03 · Fixed in 2.2.0 CWE-200
Priority MEDIUM 63
reNgine is an automated reconnaissance framework for web applications.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0027 · Published 2025-02-04 · No fix listed CWE-79
Priority MEDIUM 60
ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in the Vulnerabilities module.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00285 · Published 2025-10-10 · No fix listed CWE-79
Priority MEDIUM 58
reNgine is an automated reconnaissance framework for web applications.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00442 · Published 2024-08-16 · No fix listed CWE-79
Priority MEDIUM 47
Rengine v1.0.2 was discovered to contain a remote code execution (RCE) vulnerability via the yaml configuration function.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02453 · Published 2022-05-20 · No fix listed
Priority MEDIUM 46
Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02088 · Published 2022-08-31 · No fix listed CWE-78
Priority MEDIUM 44
reNgine through 0.5 relies on a predictable directory name.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01202 · Published 2021-08-12 · No fix listed CWE-330
Open these records in search → All records by CVSS severity
4 7 4 0 0
THREATIST.IORead the docs