CVE-2026-28496-Lab

CVE-2026-28496 - FOSSBilling में Twig रेंडरिंग में सर्वर-साइड टेम्पलेट इंजेक्शन कार्यकारी सारांश इस रिपॉजिटरी में CVE-2026-28496 को पुनः प्रस्तुत करने और मान्य करने के लिए एक स्थानीय Docker लैब शामिल है, जो FOSSBilling के Twig टेम्पलेट रेंडरिंग व्यवहार को प्रभावित करने वाली सर्वर-साइड टेम्पलेट...

CVE-2026-48017

CVE-2026-48017 — Esecuzione di codice remoto in DbGate tramite injection in functionName Gravità : Alta CVSS 8.8 CWE : CWE-94 — Controllo improprio della generazione di codice 'Code Injection' Versioni interessate : dbgate-api ≤ 7.1.8 corretta in 7.1.9 Advisory : GHSA-hv83-ggc4-v385 NVD :...

Apache-Solr-RCE-via-Velocity-template

Apache-Solr-RCE-via-Velocity-template Referenzlink Ursache der Schwachstelle: 1. Wenn ein Angreifer direkt auf die Solr-Konsole zugreifen kann, kann er über eine POST-Anfrage ähnlich wie /Knotenname/config die Konfigurationsdatei dieses Knotens ändern. 2. Apache Solr integriert standardmäßig das...

CVE-2025-24367

CVE-2025-24367 CVE-2025-24367 - Cacti RCE Autenticado em Template de Gráfico...

CVE-2024-51378

CVE-2024-51378 Analisi della vulnerabilità CVE-2024-51378, script per la ricerca di host vulnerabili, utilizzo dell'exploit in modalità single-thread e multi-thread in Python e nuclei. L'uso degli script è consentito solo a scopo didattico su host di test. 1-CVE-2024-51378.pdf - file principale c...

CVE-2025-4524

CVE-2025-4524 - Nicht authentifizierte LFI im madara-core WordPress-Theme WordFence-Link Beschreibung Eine Schwachstelle liegt in der Aktion madaraloadmore von madara, bei der ein template-Parameter beliebige Daten vom Benutzer annimmt und an die include-Funktion von PHP übergeben wird...

zeroqlik-detect

Descrição Um template Nuclei para detectar ZeroQlik CVE-2023-41265 and CVE-2023-41266...

Rejetto-HFS-2.x-RCE-CVE-2024-23692

Um SSTI não autenticado no Rejetto HTTP File Server HFS. PoC do descobridor original: https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/ Testado nas versões: 2.4.0 RC7, 2.3m Exemplo de uso: root@kitploit: msf6 use exploit/windows/http/rejettohfsrcecve202423692 No payload...

CVE-2026-76218

A flaw was found in GitPython. This vulnerability allows a remote attacker to achieve arbitrary code execution. By supplying a specially crafted template parameter to the Repo.init function, an attacker can point to a directory containing malicious Git hooks. When Git operations are performed on...

cve-2021-38314

CVE-2021-38314 Exploit Python Dettagli Il plugin Gutenberg Template Library & Redux Framework = 4.2.11 per WordPress registrava diverse azioni AJAX disponibili agli utenti non autenticati nella funzione includes in redux-core/class-redux-core.php, uniche per un dato sito ma deterministiche e...

CVE-2021-27905.POC

CVE-2021-27905.POC POC per LFI relativo a CVE-2021-27905 POC per apache-solr-file-read nuclei template Utilizzo traverse.sh percorso Ad esempio, usando /root come percorso, verrà mostrato il contenuto di tutti i file ricorsivamente ./traverse.sh /root È anche possibile attraversare e ottenere il...

silverstripe-advancedworkflow vulnerable to remote code execution via advanced workflow email template

Impact The advanced workflow email template field is vulnerable to a specially crafted payload that can be used to run arbitrary code on the server. Reported by Steve Boyd Silverstripe Ltd...

CVE-2026-54718

Silverstripe Advanced Workflow (the symbiote/silverstripe-advancedworkflow module) is vulnerable to remote code execution prior to versions 6.4.5, 7.1.3, and 7.2.1. An attacker with permission to author the advanced workflow email template can inject a specially crafted server-side template paylo...

CVE-2026-54718 Silverstripe Advanced Workflow: Remote code execution via advanced workflow email template

Silverstripe Advanced Workflow is a highly configurable step-based workflow module. Prior to 6.4.5, 7.1.3, and 7.2.1, an attacker with permission to author the advanced workflow email template can place a specially crafted server-side template payload in NotifyUsersWorkflowAction.EmailTemplate...

EUVD-2026-67160

Silverstripe Advanced Workflow is a highly configurable step-based workflow module. Prior to 6.4.5, 7.1.3, and 7.2.1, an attacker with permission to author the advanced workflow email template can place a specially crafted server-side template payload in NotifyUsersWorkflowAction.EmailTemplate...

CVE-2026-59280

Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is configured to resolve templates through SpringTemplateLoader. Spring Framework 7.0.0 - 7.0.8 Spring...

CVE-2026-19092 Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing

The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while rendering templates, allowing unauthenticated users to invoke arbitrary zero-argument PHP functions and receive their output...

CVE-2026-19092

The Tutor LMS WordPress plugin before 4.0.6 is vulnerable to template variable shadowing : request data can overwrite internal variables during template rendering, allowing unauthenticated users to invoke arbitrary zero-argument PHP functions and receive their output. This yields a CVSS 3.1 score...

CVE-2022-22954

CVE-2022-22954 PoC RCE tramite SSTI in VMware Workspace ONE Access e Identity Manager. CVE-2022-22954 - PoC SSTI Uso: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | fil...

EUVD-2026-67238

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the default-on "Safe import" filter fails to neutralize the shareTemplate relation because that relation is not marked as dangerous, allowing an attacker-supplied import archive to plant a server-side...