CVE-2024-57378

CVE-2024-57378 Wie funktioniert diese Erkennungsmethode? Diese Nuclei-HTTP-Vorlage prüft eine Ziel-URL und deren /app/login-Seite auf die Wazuh-Weboberfläche, extrahiert den wazuhVersion-Wert mit einem regulären Ausdruck und bestätigt, dass die Seite erreichbar ist Status 200 und tatsächlich eine...

CVE-2023-22515

CVE-2023-22515 Wie funktioniert diese Erkennungsmethode? Dieses Template prüft die folgenden Endpunkte: root@kitploit: - "BaseURL/dologin.action" - "BaseURL" - "BaseURL/pages" - "BaseURL/confluence" - "BaseURL/wiki" Von diesen Endpunkten wird die Version extrahiert. Wenn die Version mit einer der...

CVE-2026-47727

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the default-on "Safe import" filter fails to neutralize the shareTemplate relation because that relation is not marked as dangerous, allowing an attacker-supplied import archive to plant a server-side...

CVE-2026-19092

The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while rendering templates, allowing unauthenticated users to invoke arbitrary zero-argument PHP functions and receive their output...

CVE-2026-28496-Lab

CVE-2026-28496 - FOSSBilling में Twig रेंडरिंग में सर्वर-साइड टेम्पलेट इंजेक्शन कार्यकारी सारांश इस रिपॉजिटरी में CVE-2026-28496 को पुनः प्रस्तुत करने और मान्य करने के लिए एक स्थानीय Docker लैब शामिल है, जो FOSSBilling के Twig टेम्पलेट रेंडरिंग व्यवहार को प्रभावित करने वाली सर्वर-साइड टेम्पलेट...

CVE-2026-48017

CVE-2026-48017 — Esecuzione di codice remoto in DbGate tramite injection in functionName Gravità : Alta CVSS 8.8 CWE : CWE-94 — Controllo improprio della generazione di codice 'Code Injection' Versioni interessate : dbgate-api ≤ 7.1.8 corretta in 7.1.9 Advisory : GHSA-hv83-ggc4-v385 NVD :...

CVE-2025-6440

CVE-2025-6440 template nuclei per CVE-2025-6440 VERSIONE BETA, verrà aggiornata...

Apache-Solr-RCE-via-Velocity-template

Apache-Solr-RCE-via-Velocity-template Referenzlink Ursache der Schwachstelle: 1. Wenn ein Angreifer direkt auf die Solr-Konsole zugreifen kann, kann er über eine POST-Anfrage ähnlich wie /Knotenname/config die Konfigurationsdatei dieses Knotens ändern. 2. Apache Solr integriert standardmäßig das...

CVE-2025-24367

CVE-2025-24367 CVE-2025-24367 - Cacti RCE Autenticado em Template de Gráfico...

CVE-2024-51378

CVE-2024-51378 Analisi della vulnerabilità CVE-2024-51378, script per la ricerca di host vulnerabili, utilizzo dell'exploit in modalità single-thread e multi-thread in Python e nuclei. L'uso degli script è consentito solo a scopo didattico su host di test. 1-CVE-2024-51378.pdf - file principale c...

CVE-2025-4524

CVE-2025-4524 - Nicht authentifizierte LFI im madara-core WordPress-Theme WordFence-Link Beschreibung Eine Schwachstelle liegt in der Aktion madaraloadmore von madara, bei der ein template-Parameter beliebige Daten vom Benutzer annimmt und an die include-Funktion von PHP übergeben wird...

zeroqlik-detect

Descrição Um template Nuclei para detectar ZeroQlik CVE-2023-41265 and CVE-2023-41266...

Rejetto-HFS-2.x-RCE-CVE-2024-23692

Um SSTI não autenticado no Rejetto HTTP File Server HFS. PoC do descobridor original: https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/ Testado nas versões: 2.4.0 RC7, 2.3m Exemplo de uso: root@kitploit: msf6 use exploit/windows/http/rejettohfsrcecve202423692 No payload...

CVE-2026-76218

A flaw was found in GitPython. This vulnerability allows a remote attacker to achieve arbitrary code execution. By supplying a specially crafted template parameter to the Repo.init function, an attacker can point to a directory containing malicious Git hooks. When Git operations are performed on...

cve-2021-38314

CVE-2021-38314 Exploit Python Dettagli Il plugin Gutenberg Template Library & Redux Framework = 4.2.11 per WordPress registrava diverse azioni AJAX disponibili agli utenti non autenticati nella funzione includes in redux-core/class-redux-core.php, uniche per un dato sito ma deterministiche e...

CVE-2021-27905.POC

CVE-2021-27905.POC POC per LFI relativo a CVE-2021-27905 POC per apache-solr-file-read nuclei template Utilizzo traverse.sh percorso Ad esempio, usando /root come percorso, verrà mostrato il contenuto di tutti i file ricorsivamente ./traverse.sh /root È anche possibile attraversare e ottenere il...

silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template

Impact The advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported by Steve Boyd Silverstripe Ltd...

CVE-2026-54718

Silverstripe Advanced Workflow (the symbiote/silverstripe-advancedworkflow module) is vulnerable to remote code execution prior to versions 6.4.5, 7.1.3, and 7.2.1. An attacker with permission to author the advanced workflow email template can inject a specially crafted server-side template paylo...

EUVD-2026-67160

Silverstripe Advanced Workflow is a highly configurable step-based workflow module. Prior to 6.4.5, 7.1.3, and 7.2.1, an attacker with permission to author the advanced workflow email template can place a specially crafted server-side template payload in NotifyUsersWorkflowAction.EmailTemplate...

CVE-2026-54718 Silverstripe Advanced Workflow: Remote code execution via advanced workflow email template

Silverstripe Advanced Workflow is a highly configurable step-based workflow module. Prior to 6.4.5, 7.1.3, and 7.2.1, an attacker with permission to author the advanced workflow email template can place a specially crafted server-side template payload in NotifyUsersWorkflowAction.EmailTemplate...