Vulnerabilities > Projectdiscovery

DATE CVE VULNERABILITY TITLE RISK
2024-09-04 CVE-2024-43405 OS Command Injection vulnerability in Projectdiscovery Nuclei
Nuclei is a vulnerability scanner powered by YAML based templates.
local
low complexity
projectdiscovery CWE-78
7.8
2024-06-05 CVE-2024-5262 Files or Directories Accessible to External Parties vulnerability in Projectdiscovery Interactsh
Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login.
network
low complexity
projectdiscovery CWE-552
critical
9.8
2023-08-04 CVE-2023-37896 Path Traversal vulnerability in Projectdiscovery Nuclei
Nuclei is a vulnerability scanner.
network
low complexity
projectdiscovery CWE-22
7.5
2023-06-28 CVE-2023-36474 Cross-site Scripting vulnerability in Projectdiscovery Interactsh
Interactsh is an open-source tool for detecting out-of-band interactions.
network
low complexity
projectdiscovery CWE-79
6.1