Last year we conducted an in-depth analysis of multiple vulnerabilities within Adobe ColdFusion, we derived valuable insights, one of which revolved around CFM and CFC handling, parsing and execution. We wondered if there are any other CFML Servers. Does this ring a bell? Allow us to introduce Lucee. We'

Summary of Releases v9.7.3, v9.7.4, and v9.7.5 This month, we've released multiple versions of Nuclei Templates that bring numerous enhancements to Nuclei users. Here are some highlighted stats from the combined releases: 🎉 157 new Templates added 🚀 20 first-time contributions 🔥 36 new CVEs

Security professionals are constantly on guard against cyber threats, especially given the rising number and sophistication of attacks. However, there's a less obvious, yet increasingly alarming "enemy" in cybersecurity: the surge in reported Common Vulnerabilities and Exposures (CVEs). Though CVEs are vital for identifying and discussing

CVE-2023-22527 is a critical vulnerability within Atlassian's Confluence Server and Data Center. This vulnerability has the potential to permit unauthenticated attackers to inject OGNL expressions into the Confluence instance, thereby enabling the execution of arbitrary code and system commands. Technical Details Initial Analysis The CVE description provided by

“I make all the mistakes, I might as well tell others before they make them. Fail is literally in my name.” -FailOpen If you’ve been on our Discord, you’ve probably seen FailOpen before. He is likely our most active user in Discord, can be seen in all of

If you've been around our community for some time, you know that we've been hard at work getting ProjectDiscovery Cloud Platform ready for all of you. Our goal is to support community members using PD tools for everyone; from bug bounty hunting all the way through

CVE-2023-43177 is a critical vulnerability in CrushFTP. The vulnerability could potentially allow unauthenticated attackers with network access to the CrushFTP Instance to write files in the local file system and eventually in some versions could allow the executing of arbitrary system commands. Technical Details Based on the information shared in

Summary of Releases v9.6.9 and v9.7.0 🎉 124 new Templates added 🚀 14 first-time contributions 🔥 31 new CVEs added Introduction This month, we've seen several high-profile CVEs impacting various technologies. Key among them is CVE-2023-46604, a significant vulnerability in Apache ActiveMQ, notable for its potential for

Welcome to our first community spotlight blog! We started the community spotlight recently for two major reasons: to recognize the work of some of our most active community members and to share that work with others. ProjectDiscovery is community driven, and all of our tools wouldn’t be possible without