14739 matches found
CVE-2022-25813
CVE-2022-25813: Iniezione di Template lato server FreeMarker in Apache OfBiz Inserendo contenuti malevoli nel campo "Oggetto" di un messaggio, un attaccante può effettuare attacchi SSTI Server-Side Template Injection, che possono sfruttare gli oggetti esposti di FreeMarker per bypassare le...
CVE-2021-46362
CVE-2021-46362: Iniezione di Template Lato Server FreeMarker in Magnolia CMS Una vulnerabilità di iniezione di template lato server SSTI nei moduli di registrazione e di password dimenticata di Magnolia v6.2.3 e versioni precedenti consente ad attaccanti non autenticati di eseguire codice...
Vvveb-CMS-CVE-2025-8518
Vvveb-CMS-CVE-2025-8518 Questo repository contiene un Proof of Concept PoC che dimostra una vulnerabilità critica in givanz Vvveb 1.0.5. La vulnerabilità consente a un utente autenticato con privilegi di modifica dei template di scrivere codice PHP arbitrario nei file del server, portando a Remot...
CVE-2026-81743
Affected versions of Flowintel allow the LOGFILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this configurable value, an administrator could set LOGFI...
CVE-2026-81658
A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template revision. An authenticated, low privileged user with a template-related permission, such as viewptables, can obtain historical template contents belonging to...
CVE-2026-81743 Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection
Affected versions of Flowintel allow the LOGFILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this configurable value, an administrator could set LOGFI...
EUVD-2026-67007
Affected versions of Flowintel allow the LOGFILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this configurable value, an administrator could set LOGFI...
CVE-2026-81743 Flowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection
Affected versions of Flowintel allow the LOGFILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this configurable value, an administrator could set LOGFI...
CVE-2026-81743
Flowintel versions >=3.3.0 allow the LOG_FILE configuration value to be modified through system settings without restricting it to a filename inside the intended log directory. Because the application constructs the log destination from this value, an attacker with high privileges can set LOG_...
CVE-2026-46439
A flaw was found in compliance-trestle. This Server-Side Template Injection SSTI vulnerability exists in the trestle author jinja command, which recursively evaluates rendered templates. An attacker can inject malicious payloads into data fields, such as SSP documents or Lookup Tables, to achieve...
CVE-2026-18963
Keycloak Reset Path Finder Modello Nuclei per individuare endpoint reset-credentials di Keycloak esposti attraverso molteplici prefissi proxy, percorsi di contesto, nomi realm e variazioni di percorso. Riepilogo Questo modello aiuta a identificare flussi di reimpostazione password raggiungibili c...
EUVD-2026-66996
A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template revision. An authenticated, low privileged user with a template-related permission, such as viewptables, can obtain historical template contents belonging to...
CVE-2026-81658
Foreman is affected by an authorization flaw in its template revision endpoint , which does not enforce object-level authorization when retrieving audited template revisions. An authenticated, low-privileged user with a template-related permission (e.g., view_ptables) can retrieve historical temp...
CVE-2026-81658 Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup
A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template revision. An authenticated, low privileged user with a template-related permission, such as viewptables, can obtain historical template contents belonging to...
CVE-2026-81658
A flaw was found in Foreman. The template revision endpoint does not enforce object-level authorization when retrieving an audited template revision. An authenticated, low privileged user with a template-related permission, such as viewptables, can obtain historical template contents belonging to...
CVE-2026-4800-POC
CVE-2026-4800-POC Advisory di Sicurezza https://github.com/lodash/lodash/security/advisories/GHSA-r5fr-rjxr-66jc POC root@kitploit: const = require'lodash'; Object.prototype.imports = 'x=process.getBuiltinModule"childprocess".execSync"curl https://example.com"':undefined .template'', ; Flusso...
CVE-2024-40111-Exploit
CVE-2024-40111: Cross-Site Scripting XSS persistente in Automad 2.0.0-alpha.4 Dettagli dell'Exploit Titolo dell'Exploit : Cross-Site Scripting XSS persistente in Automad 2.0.0-alpha.4 Data : 2024-06-20 Autore dell'Exploit : Jerry Thomas w3bn00b3r Homepage del Venditore : Automad Link del Software...
CVE-2025-32463
CVE-2025-32463 - Guida di Configurazione ed Esecuzione Questa è la prima volta che porto un exploit dannoso in un template Nuclei per una scansione di vulnerabilità non intrusiva che dimostra comunque il problema sottostante. Ho documentato il processo in maggior dettaglio espressamente come...
CVE-2026-33154
Report sulla Vulnerabilità SSTI in Dynaconf Riepilogo Dynaconf è vulnerabile a Server-Side Template Injection SSTI a causa della valutazione non sicura dei template nel resolver @Jinja. Quando il pacchetto jinja2 è installato, Dynaconf valuta le espressioni di template incorporate nei valori di...