Skip to content
OpenAdvisories

Vendor

yogeshojha

9 known vulnerabilities.

Products

rengine 8 yogeshojha/rengine 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-105487

    yogeshojha reNgine listTargets Endpoint tasks.py subdomain_discovery os command injection

    A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomain_discovery of the file web/reNgine/tasks.py of the component listTargets Endpoint. The manipulation of the argument Name results in os command…

    yogeshojha rengine
  • Medium 6.5
    CVE-2026-92570

    reNgine through 2.2.0 Unauthorized Configuration File Read

    reNgine through 2.2.0 contains an authorization bypass vulnerability in the GetFileContents API endpoint that allows any authenticated user to read bundled recon tool configuration files. Attackers with low-privilege Auditor roles can access files containing …

    yogeshojha rengine
  • Medium 5.3
    CVE-2025-24966

    HTML Injection in reNgine

    reNgine is an automated reconnaissance framework for web applications. HTML Injection occurs when an application improperly validates or sanitizes user inputs, allowing attackers to inject arbitrary HTML code. In this scenario, the vulnerability exists in the…

    yogeshojha rengine
  • Medium 5.0
    CVE-2024-43381

    reNgine vulnerable to Stored Cross-Site Scripting (XSS) via DNS Record Poisoning

    reNgine is an automated reconnaissance framework for web applications. Versions 2.1.2 and prior are susceptible to Stored Cross-Site Scripting (XSS) attacks. This vulnerability occurs when scanning a domain, and if the target domain's DNS record contains an X…

    yogeshojha rengine