Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Breaking the Chain: Wiz Uncovers a Signature Verification Bypass in Nuclei, the Popular Vulnerability Scanner (CVE-2024-43405)

wiz.io | tool | CVE-2024-43405 | #rce | #open-source | #vulnerability | #security-research | #nuclei | #cve-2024-43405

Summary

Wiz discovered CVE-2024-43405, a high-severity signature verification bypass in ProjectDiscovery's popular Nuclei scanner that could lead to arbitrary code execution, and helped get it fixed.
Published
Collected

original ↗

Related coverage

  1. SAPwned: SAP AI vulnerabilities expose customers’ cloud environments and private AI artifacts (wiz.io)
  2. Probllama: Ollama Remote Code Execution Vulnerability (CVE-2024-37032) – Overview and Mitigations (wiz.io)
  3. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)
  4. dinosn/givewp-cve-2026-82222-rce-lab: GiveWP CVE-2026-82222 RCE Docker Lab & PoC (github.com)
  5. CVE-2022-22947: Spring Cloud Gateway Code Injection Vulnerability (blog.viettelcybersecurity.com)
  6. Droid ASC: High-Performance On-Demand Android Decompiler Front-End for Mobile Security & AI Agents (github.com)

back