CVE-2018-16341

CVE-2018-16341 Bypass de Autenticação e Execução Remota de Código no Nuxeo 10.3 usando um SSTI - CVE-2018-16341 Análise detalhada não em inglês : https://www.freebuf.com/vuls/193000.html https://blog.riskivy.com/nuxeo-rce-analysis-cve-2018-16341/ Advisory de Segurança :...

CVE-2017-9805

Test nuclei CVE-2017-9805.yaml - struts2 Showcase RCE Dockerfile erstellen docker build -t cve-2017-9805 . Container starten und im Hintergrund laufen lassen docker run --name cve-2017-9805 -p 127.0.0.1:8080:8080 -dit cve-2017-9805 /bin/bash In laufenden Container einloggen docker exec -it...

CVE-2023-22527

CVE-2023-22527 CVE-2023-22527 - Vulnerabilidade de Server-side Template Injection SSTI que permite Execução Remota de Código RCE no Confluence Data Center e Confluence Server Produtos e versões afetados:...

CVE-2018-20250

CVE-2018-20250-3 010 Editor Vorlage für ACE-Archivformat & CVE-2018-20250-3 ace.bt 010 Editor Vorlage acefile.py Open-Source ACE-Extraktor, zum Schreiben der Vorlage verwendet watchme.gif Demo wace269i WinAce-Installer Haftungsausschluss: Alle Ressourcen des Projekts dienen nur der technischen...

OpenCATS - Open Redirect

OpenCATS contains an open redirect vulnerability due to improper validation of user-supplied GET parameters. This, in turn, exposes OpenCATS to possible template injection and obtaining sensitive information, modifying data, and/or executing unauthorized operations. id: CVE-2023-27292 info: name:...

OpenCMS 14 & 15 - Cross Site Scripting

Cross-site scripting XSS vulnerability in Alkacon Software Open CMS, affecting versions 14 and 15 of the 'Mercury' template. id: CVE-2023-6379 info: name: OpenCMS 14 & 15 - Cross Site Scripting author: msegoviag severity: medium description: | Cross-site scripting XSS vulnerability in Alkacon...

JeecgBoot JimuReport - Template injection

A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Template Handler. The manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed t...

Invision Community <=5.0.6 Unauthenticated RCE via Template Injection

Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeeditor controller /applications/core/modules/front/system/themeeditor.php, where a protected method named customCss can be invoked by unauthenticated...

XWiki <= 17.3.0 - Server-Side Template Injection (SSTI)

XWiki = 17.3.0 contains a server-side template injection caused by improper validation of Apache Velocity template code in the Administration interface HTTP Meta Info field, letting authenticated administrators execute arbitrary template logic. id: CVE-2025-51991 info: name: XWiki = 17.3.0 -...

OpenAM<=15.0.3 FreeMarker - Template Injection

OpenAM is an open access management solution. In versions 15.0.3 and prior, the getCustomLoginUrlTemplate method in RealmOAuth2ProviderSettings.java is vulnerable to template injection due to its usage of user input id: CVE-2024-41667 info: name: OpenAM=15.0.3 FreeMarker - Template Injection...

Premium Addons for Elementor - Unauthenticated Information Disclosure

Premium Addons for Elementor plugin for WordPress version 4.11.53 and below contains an unauthenticated information disclosure vulnerability.The vulnerability exists due to a missing authorization check in the gettemplatecontent AJAX handler, allowing unauthenticated attackers to retrieve private...

PHPCMS 2008 - Remote Code Execution via Template Injection

PHPCMS 2008 suffers from an unauthenticated RCE via template injection in type.php, where attacker-supplied content is written into a PHP template cache file, which is then executable. id: CVE-2018-19127 info: name: PHPCMS 2008 - Remote Code Execution via Template Injection author: tomaquet18...

Node.js Embedded JavaScript 3.1.6 - Template Injection

Node.js Embedded JavaScript 3.1.6 is susceptible to server-side template injection via settingsview optionsoutputFunctionName, which is parsed as an internal option and overwrites the outputFunctionName option with an arbitrary OS command, which is then executed upon template compilation. id:...

Apache Solr 9.4.0-9.10.1 / 10.0.0 - Hardcoded Default Credentials

Apache Solr 9.4.0 through 9.10.1 and 10.0.0 contain a hardcoded credentials vulnerability caused by default Basic Authentication template users in bin/solr auth enable, letting remote attackers gain full administrative access. Exploit requires use of default template users. id: CVE-2026-44825 inf...

thedorkbox

thedorkbox TheDorkbox Umfassende Sammlung von Google Dorks & OSINT-Techniken zum Auffinden vertraulicher Daten Willkommen bei thedorkbox 👋 Dies ist ein OSINT-Tool, das aus verschiedenen Google Dorks besteht, die in eine HTML-Vorlage eingebettet sind, damit nicht-technische Benutzer die Bedeutung...

CVE-2021-39115

CVE-2021-39115 Injeção de Template em Modelos de E-mail leva à execução de código no Jira Service Management Server I Build Já mostrei como fazer deploy + debug aqui, vocês podem consultar. II Análise Na Descrição deste CVE também está claro que o bug está no recurso Email Template. Com privilégi...

CVE-2019-3396

CVE-2019-3396 Path traversal do Confluence Widget Connector CVE-2019-3396 PoC de RCE root@kitploit: POST /rest/tinymce/1/macro/preview HTTP/1.1 Host: x.x.x.x Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 X11; Linux x8664; rv:60.0 Gecko/20100101 Firefox/60.0...

spring-cloud-netflix-hystrix-dashboard-cve-2021-22053

CVE-2021-22053: Vulnerabilidade de resolução de templates do Spring Cloud Netflix Hystrix Dashboard Severidade Alta Fornecedor Spring por VMware Descrição Aplicações que utilizam tanto spring-cloud-netflix-hystrix-dashboard quanto spring-boot-starter-thymeleaf expõem uma forma de executar código...

magento2-template-filter-patch

Magento 2 Template Filter Patch für CVE-2022-24086, CVE-2022-24087 Magento 2 Patch für CVE-2022-24086, CVE-2022-24087. Behebt die RCE-Sicherheitslücke und damit verbundene Fehler durch tiefgehendes Escaping von Template-Variablen. Wenn Sie Magento nicht aktualisieren oder die offiziellen Patches...

magento2-cosmic-sting-patch

Patch do Magento 2 para CVE-2024-34102também conhecido como Cosmic Sting Uma solução alternativa como extensão do Magento 2 para corrigir a vulnerabilidade XXE CVE-2024-34102 também conhecida como Cosmic Sting. Se não puder atualizar o Magento ou não puder aplicar o patch oficial, experimente est...