Yogeshojha Rengine vulnerabilities

CVE-2023-50094 [HIGH] CWE-78 CVE-2023-50094: reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack reNgine before 2.1.2 allows OS Command Injection if an adversary has a valid session ID. The attack places shell metacharacters in an api/tools/waf_detector/?url= string. The commands are executed as root via subprocess.check_output.

CVE-2024-58287 [HIGH] CWE-78 CVE-2024-58287: reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine co reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine configuration that allows authenticated attackers to execute arbitrary commands. Attackers can modify the nmap_cmd parameter with malicious base64-encoded payloads to achieve remote code execution during scan engine configuration.

CVE-2022-36566 [CRITICAL] CWE-78 CVE-2022-36566: Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine funct Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function.

CVE-2025-24968 [HIGH] CWE-284 CVE-2025-24968: reNgine is an automated reconnaissance framework for web applications. An unrestricted project delet reNgine is an automated reconnaissance framework for web applications. An unrestricted project deletion vulnerability allows attackers with specific roles, such as `penetration_tester` or `auditor` to delete all projects in the system. This can lead to a complete system takeover by redirecting the attacker to the onboarding page, where they can add or

CVE-2022-28995 [CRITICAL] CVE-2022-28995: Rengine v1.0.2 was discovered to contain a remote code execution (RCE) vulnerability via the yaml co Rengine v1.0.2 was discovered to contain a remote code execution (RCE) vulnerability via the yaml configuration function.

CVE-2025-24962 [HIGH] CWE-74 CVE-2025-24962: reNgine is an automated reconnaissance framework for web applications. In affected versions a user c reNgine is an automated reconnaissance framework for web applications. In affected versions a user can inject commands via the nmap_cmd parameters. This issue has been addressed in commit `c28e5c8d` and is expected in the next versioned release. Users are advised to filter user input and monitor the project for a new release.

CVE-2025-24899 [HIGH] CWE-200 CVE-2025-24899: reNgine is an automated reconnaissance framework for web applications. A vulnerability was discovere reNgine is an automated reconnaissance framework for web applications. A vulnerability was discovered in reNgine, where **an insider attacker with any role** (such as Auditor, Penetration Tester, or Sys Admin) **can extract sensitive information from other reNgine users.** After running a scan and obtaining vulnerabilities from a target, the attacker

CVE-2021-38606 [CRITICAL] CWE-330 CVE-2021-38606: reNgine through 0.5 relies on a predictable directory name. reNgine through 0.5 relies on a predictable directory name.

CVE-2025-61319 [MEDIUM] CWE-79 CVE-2025-61319: ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in the Vulnera ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in the Vulnerabilities module. When scanning a target with an XSS payload, the unsanitized payload is rendered in the ReNgine web UI, resulting in arbitrary JavaScript execution in the victim's browser. This can be abused to steal session cookies, perform unauthoriz

CVE-2025-24966 [MEDIUM] CWE-79 CVE-2025-24966: reNgine is an automated reconnaissance framework for web applications. HTML Injection occurs when an reNgine is an automated reconnaissance framework for web applications. HTML Injection occurs when an application improperly validates or sanitizes user inputs, allowing attackers to inject arbitrary HTML code. In this scenario, the vulnerability exists in the "Add Target" functionality of the application, where the Target Organization and Target Desc

CVE-2024-43381 [MEDIUM] CWE-79 CVE-2024-43381: reNgine is an automated reconnaissance framework for web applications. Versions 2.1.2 and prior are reNgine is an automated reconnaissance framework for web applications. Versions 2.1.2 and prior are susceptible to Stored Cross-Site Scripting (XSS) attacks. This vulnerability occurs when scanning a domain, and if the target domain's DNS record contains an XSS payload, it leads to the execution of malicious scripts in the reNgine's dashboard view whe

CVE-2025-24967 [MEDIUM] CWE-79 CVE-2025-24967: reNgine is an automated reconnaissance framework for web applications. A stored cross-site scripting reNgine is an automated reconnaissance framework for web applications. A stored cross-site scripting (XSS) vulnerability exists in the admin panel's user management functionality. An attacker can exploit this issue by injecting malicious payloads into the username field during user creation. This vulnerability allows unauthorized script execution whe