CVE-2026-100272

In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues...

CVE-2026-100272

In JetBrains YouTrack versions before 2026.2.19197 , a lack of missing authorisation in the notification template preview feature allows Project Administrators to read restricted issues . The impact is categorized as High for confidentiality. Remediation is available in version 2026.2.19197 or la...

EUVD-2026-90016

In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues...

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file | manual -i IP,...

CVE-2026-96824

Editor Arbitrary File Deletion in Template Kit – Import = 1.0.16 versions...

ROOT-APP-MAVEN-CVE-2026-34481 CVE-2026-34481 in org.apache.logging.log4j:log4j-layout-template-json - Patched by Root

Root has patched CVE-2026-34481 in the org.apache.logging.log4j:log4j-layout-template-json package for Root:Maven. Multiple fixed versions available...

CVE-2026-96824

The WordPress Template Kit – Import plugin, specifically versions

CVE-2026-96824 WordPress Template Kit – Import plugin <= 1.0.16 - Arbitrary File Deletion vulnerability

Editor Arbitrary File Deletion in Template Kit – Import = 1.0.16 versions...

CVE-2026-96824 WordPress Template Kit – Import plugin <= 1.0.16 - Arbitrary File Deletion vulnerability

Editor Arbitrary File Deletion in Template Kit – Import = 1.0.16 versions...

EUVD-2026-89877

Editor Arbitrary File Deletion in Template Kit – Import = 1.0.16 versions...

CVE-2021-23394

elFinder CVE-2021-23394 Reproduction Setup This repository contains a reproduction setup for CVE-2021-23394 Arbitrary File Execution in elFinder using Docker. It sets up four environments to compare vulnerable and patched versions across Apache and Nginx. Overview The setup includes: 1. Apache...

llama_facts

Llama Facts This project was originally created for the Rochester Institute of Technology RIT Women in Cybersecurity WIYCS 2022 CTF competition. It is vulnerable to Server-Side Template Injection SSTI, defined in the disputed CVE CVE-2019-8341. Challenge Description Description: A Computer Scienc...

CVE-2025-69516

CVE-2025-69516 - Tactical RMM Remote Code Execution This repository contains a Python script that automates the exploitation of the CVE-2025-69516 SSTI vulnerability in Tactical RMM. It has been tested on version 1.3.1. Usage python xpl.py -d api.tactical.xyz -t SESSIONTOKEN -c "id" Links...

CVE-CVE-2025-25231

CVE-2025-25231 Nuclei Template This template is written for the Nuclei tool to detect the CVE-2025-25231 Secondary Path Traversal vulnerability in the Omnissa Workspace ONE UEM product. Vulnerability Description CVE-2025-25231 is a Path Traversal vulnerability that allows an attacker to access...

CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 EDIT: Oracle just disclosed a new vulnerability CVE-2025-61884, the detection script for that vuln can be found in this repo or originally here:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. As quoted from Oracle's security advisory: This Securit...

CVE-2026-103088

Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-63490 validates template locations as raw percent-encoded strings, whereas the template file is opened through a URL handler that percent-decodes the path. In a...

EUVD-2026-89555

Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-63490 validates template locations as raw percent-encoded strings, whereas the template file is opened through a URL handler that percent-decodes the path. In a...

CVE-2026-103088

Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-63490 validates template locations as raw percent-encoded strings, whereas the template file is opened through a URL handler that percent-decodes the path. In a...

CVE-2026-103088

Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-63490 validates template locations as raw percent-encoded strings, whereas the template file is opened through a URL handler that percent-decodes the path. In a...

EUVD-2026-89477

A security vulnerability has been detected in Naichen ThinkCMF up to 8.0.7. Affected by this issue is the function MailController::templatePut of the file cmf-api/src/admin/controller/MailController.php of the component Email Template. The manipulation leads to improper neutralization of special...