yogeshojha

Products

ProductCVEsExploitedLatest
reNgine8–Oct 6, 2026
yogeshojha/rengine1–May 22, 2022

Exploited and recent CVEs

  • CVE-2026-105487 Medium 6.3 yogeshojha reNgine listTargets Endpoint tasks.py subdomain_discovery os command injection 1.1%
  • CVE-2026-92570 Medium 6.5 reNgine through 2.2.0 Unauthorized Configuration File Read 0.4%
  • CVE-2025-24968 High 8.8 Business Logic And Unrestricted Project Deletion Lead To Take Over the System in reNgine 0.6%
  • CVE-2025-24967 High 7.4 Stored XSS on Admin Panel When Deleting a User in reNgine 0.3%
  • CVE-2025-24966 Medium 5.3 HTML Injection in reNgine 0.3%
  • CVE-2025-24899 High 7.1 Disclosure of Sensitive User Information via API in reNgine 0.5%
  • CVE-2025-24962 High 8.7 Command Injection in reNgine 0.7%
  • CVE-2024-43381 Medium 5.0 reNgine vulnerable to Stored Cross-Site Scripting (XSS) via DNS Record Poisoning 0.4%
  • CVE-2022-1813 High 8.3 OS Command Injection in yogeshojha/rengine 2.5%