CVE-2021-46703

CVE-2021-46703 Simple payload builder based on POC in: https://github.com/Antaris/RazorEngine/issues/585 Usage C dotnet build --configuration Release .\bin\Release\net4.8\Poc.exe "System.IO.File.WriteAllText"rce.txt", "Hello World";" Python ./poc.py "System.IO.File.WriteAllText"rce.txt",...

CVE-2022-24086

CVE-2022-24086 CVE-2022-24086 POC example provided by BurpRoot CVE-2022-24086: Overview Affected Software: Magento2 CVE ID: CVE-2022-24086 CVSS Score: 9.8 Critical Description CVE-2022-24086 is a critical security vulnerability affecting multiple versions of the Magento2 e-commerce platform. This...

CVE-2024-4040

CVE-2024-4040 PoC Python exploit for CVE-2024-4040 Description A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass...

vert-x3__vertx-web_CVE-2018-12542_3-5-3-CR1

= Vert.x-Web image:https://vertx.ci.cloudbees.com/buildStatus/icon?job=vert.x3-web"Build Status",link="https://vertx.ci.cloudbees.com/view/vert.x-3/job/vert.x3-web/" image:https://img.shields.io/maven-central/v/io.vertx/vertx-web.svg"Maven Central"...

CVE-2026-12227

CVE-2026-12227: Visual Composer Website Builder Unauthenticated Local File Inclusion LFI Summary CVE-2026-12227 is a critical CVSS 9.8 unauthenticated Local File Inclusion LFI vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including...

CVE-2026-12227

CVE-2026-12227: Visual Composer Website Builder Unauthenticated Local File Inclusion LFI Summary CVE-2026-12227 is a critical CVSS 9.8 unauthenticated Local File Inclusion LFI vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including...

CVE-2025-24367

CVE-2025-24367 CVE-2025-24367 - Cacti Authenticated Graph Template RCE...

magento2-encryption-key-manager-cli

Magento 2 Encryption Key Manager CLI A utility for Magento 2 encryption key rotation and management. CVE-2024-34102aka Cosmic Sting victims can use it as an aftercare. Designed for Development usage Deployment automation CVE-2024-34102aka Cosmic Sting aftercare CVE-2024-34102aka Cosmic Sting Afte...

EUVD-2026-91955

The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.0.18 via the template scope function. This makes it possible for authenticated attackers, with contributor-level access and...

cve-2026-9558-poc

CVE-2026-9558 — Mautic Theme Templates Server-Side Template Injection SSTI to Full Admin Takeover Table of Contents Overview Affected Versions Root Cause Analysis Repository Structure Requirements Usage Expected Output References Disclaimer Overview CVE-2026-9558 is a Server-Side Template Injecti...

WTSRM2

WTSRM2 これは私の元のプロジェクト WTSRM と対応する トーク の続きです。 このプロジェクトは、C++17 を利用して、必要な機能をコンパイル時に簡単に変更できるテンプレートを作成するために書き直されました! これはヘッダーのみのファイルとして実装されているため、自分のプロジェクトに簡単に追加できます。 現在実装されている機能には以下があります: CRT 依存なし 10KB バイナリ \KnownDlls\ または \System32\ を使用した '.text' パッチにより、すべての Windows DLL のフックを解除 パッチには VirtualProtect または...

CVE-2022-29078

CVE-2022-29078 vuln ejs 3.1.6 docker Setup git clone https://github.com/miko550/CVE-2022-29078.git cd CVE-2022-29078 docker build . -t miko/vuln-ejs docker run -p 49160:8080 -d --name vuln-ejs miko/vuln-ejs Usage http://127.0.0.1:49160/ Exploit In browser...

CVE-2024-7593

CVE-2024-7593 Detection How does this detection method work? This template matches on the following versions, if there is a match then the host is considered vulnerable: - "22.2" - "22.3" - "22.3R2" - "22.5R1" - "22.6R1" - "22.7R1" To prevent producing any FPs it also matches on the below: - type...

cve-2023-22527

Confluenceメモリ内での任意コード実行 CVE-2023-22527 は、Atlassian Confluence に影響を与える広く知られた脆弱性です。この脆弱性のほとんどのエクスプロイトは、オペレーティングシステムのコマンドを実行するために freemarker.template.utility.Execute を使用しますが、それよりもはるかに優れた方法があります。このリポジトリには、ディスクに触れることなく（少なくともユーザーが指示するまでは）ペイロードを実行する、CVE-2023-22527 の go-exploit 実装が3つ含まれています。...

Koha 3.20.1 - Directory Traversal

Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the templatepath parameter to 1 svc/virtualshelves/search or 2 svc/members/search. id: CVE-2015-4632 info: name:...

Nodejs Squirrelly - Remote Code Execution

Nodejs Squirrelly is susceptible to remote code execution. Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuratio...

CVE-2024-51378

CVE-2024-51378 Analysis of the CVE-2024-51378 vulnerability, scripts for searching vulnerable hosts, using the exploit in single-threaded and multi-threaded mode in Python and nuclei. The use of scripts is allowed only for educational purposes on test hosts. 1-CVE-2024-51378.pdf - main file with ...

lodash.template-fixed

lodash.template v4.5.0 Lodash のメソッド .template を Node.js モジュールとしてエクスポートしたものです。 インストール npm を使用する場合: $ sudo -H npm i -g npm $ npm i --save lodash.template Node.js での使用: var template = require'lodash.template'; 詳細については、ドキュメント または パッケージソース を参照してください。...

PT-2026-104543

Name of the Vulnerable Software and Affected Versions WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System versions prior to 3.0.19 Description The plugin is susceptible to Local File Inclusion, a flaw that allows an attacker to include files from the local server. Authenticated...

Linux Distros Unpatched Vulnerability : CVE-2026-104851

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9.0 until 2026.6.0,...