Issues

• Add detection module for AhsayCBS CVE-2026-105133 (authentication bypass, CISA KEV)

  OWASP/Nettacker#1844 · Filter by author Dikshant-Neupane opened on Nov 5, 2026

• Proposal: ComfyUI-Manager CRLF config injection (CVE-2026-22777)

  OWASP/Nettacker#1843 · Filter by author manja7304 opened on Nov 4, 2026

• Proposal: Apache APISIX Dashboard unauth migrate API (CVE-2021-45232)

  OWASP/Nettacker#1842 · Filter by author manja7304 opened on Nov 4, 2026

• Proposal: DataEase auth bypass via whitelist path traversal (CVE-2024-56511)

  OWASP/Nettacker#1841 · Filter by author manja7304 opened on Nov 4, 2026

• Proposal: Gradio arbitrary file read via component_server (CVE-2024-1561)

  OWASP/Nettacker#1840 · Filter by author manja7304 opened on Nov 4, 2026

• Proposal: Gotenberg ExifTool argument injection (CVE-2026-40281)

  OWASP/Nettacker#1839 · Filter by author manja7304 opened on Nov 4, 2026

• Proposal: Craft CMS pre-auth RCE via generate-transform (CVE-2025-32432, CISA KEV)

  OWASP/Nettacker#1838 · Filter by author manja7304 opened on Nov 4, 2026

• Proposal: Budibase auth bypass via webhook query-string regex (CVE-2026-31816)

  OWASP/Nettacker#1837 · Filter by author manja7304 opened on Nov 4, 2026

• Proposal: MinIO cluster bootstrap env disclosure (CVE-2023-28432)

  OWASP/Nettacker#1836 · Filter by author manja7304 opened on Nov 4, 2026

• Proposal: n8n form Content-Type confusion arbitrary file read (CVE-2026-21858 / Ni8mare)

  OWASP/Nettacker#1835 · Filter by author manja7304 opened on Nov 4, 2026

• List indices must be integers or slices in find_and_replace_dependent_values()

  OWASP/Nettacker#1829 · Filter by author vishalmore90 opened on Nov 2, 2026
  1

• Discovered ports from service discovery are never propagated to modules in Module.load()

  OWASP/Nettacker#1828 · Filter by author vishalmore90 opened on Nov 2, 2026
  2

• [Feat] Number Generator Data function

  OWASP/Nettacker#1817 · Filter by author Franc-Zar opened on Oct 27, 2026
  3

• Proposal: Spring4Shell CVE-2022-22965 RCE (CISA KEV)

  OWASP/Nettacker#1815 · Filter by author syedsuzain opened on Oct 27, 2026
  1

  

• Add a timeout to RIPE IP range lookups

  OWASP/Nettacker#1806 · Filter by author KritarthPatel opened on Oct 25, 2026
  7

• Multiple URL targets share one url_base_path, and IPv6 URL targets are parsed as "["

  OWASP/Nettacker#1803 · Filter by author akshat-lakhera opened on Oct 24, 2026
  4

• Add light/dark mode toggle to Nettacker documentation

  OWASP/Nettacker#1802 · Filter by author yashspidey opened on Oct 24, 2026
  5

  

• Add detection module for CVE-2026-96654

  answered
  OWASP/Nettacker#1797 · Filter by author youssefnabil2030 opened on Oct 23, 2026
  4

• Add vulnerability detection module for PHP2Shell (CVE-2026-109618, CVE-2026-109619)

  answered
  OWASP/Nettacker#1795 · Filter by author EshaanOjha opened on Oct 22, 2026
  2

• Proposal: Add KEV module for CVE-2026-60004 (Gitea diffpatch RCE)

  answered
  OWASP/Nettacker#1794 · Filter by author psamuelvijay opened on Oct 21, 2026
  5

• New connections are created for every HTTP request

  OWASP/Nettacker#1793 · Filter by author pUrGe12 opened on Oct 21, 2026
  6

• Add vuln modules for actively exploited CVEs: SolarWinds WHD CVE-2025-26399, Zimbra CVE-2025-68645, Livewire CVE-2025-54068

  answered
  OWASP/Nettacker#1791 · Filter by author devjoshi2005 opened on Oct 21, 2026
  3

• [Module-Request] CVE-2016-3081 (Apache Struts Command Injection)

  OWASP/Nettacker#1783 · Filter by author Franc-Zar opened on Oct 12, 2026
  1

  

• [Feat] Random string generator for Modules

  OWASP/Nettacker#1782 · Filter by author Aarush289 opened on Oct 12, 2026
  1

  

• String severity in SiYuan module crashes JSON report generation

  OWASP/Nettacker#1780 · Filter by author 0xgaurav opened on Oct 10, 2026
  3