CVE-2024-4040

CVE-2024-4040 A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain administrative access, and perform...

Vulnerabilities in Adobe Commerce

Adobe has identified several vulnerabilities in Adobe Commerce. These vulnerabilities involve stored Cross-Site Scripting XSS, where attackers can inject malicious JavaScript code into form fields within the application. This code is executed in the victim’s browser and can perform unauthorized...

CSRFER

CSRFER / / | \ | | \ | / /\ --.| |/ / | | | | |/ / | | --. \ /| | | || / | /// / |\ | | | || |\ \ //| \| /| | -.--. " '-, ',' 2 \ \q \ . \ .--' '----. / . . \ .'.' \ .-.\ '-, ,/ .---;- . \ \ .\ // '-. \ \ | '. , '-. c=' Cooo -. '-. '. '-. \ snd '-. '. '-. \ ---' CSRFER is a tool to...

MAL-001

MAL-001: FreeMarker Server-Side Template Injection in Liferay Portal An issue was discovered in Liferay - Portal =7.4.3.12-ga12. By inserting malicious content in the FTL Templates, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage FreeMarker exposed objects ...

MAGNOLIA-8348

MAGNOLIA-8348: FreeMarker Restriction Bypass 3 in Magnolia CMS An issue in the FreeMarker Filter of Magnolia CMS v6.2.17 and below allows attackers to bypass security restrictions and execute arbitrary code, read/write/move/copy/delete arbitrary files or launch DoS attacks via a crafted FreeMarke...

solr_rce

Apache Solr RCE via Velocity template python usage: python solrrce.py http://x.x.x.x:8983 command getshell encode payload http://www.jackson-t.ca/runtime-exec-payloads.html whoami bash -c echo,d2hvYW1p|base64,-d|bash,-i 0x01 Introduction to Solr Solr is an open-source enterprise search platform...

010-Editor-Template

010-Editor-Template https://www.sweetscape.com/010editor/repository/files/010.bt https://www.sweetscape.com/010editor/repository/files/010Theme.bt https://www.sweetscape.com/010editor/repository/files/7ZIP.bt https://www.sweetscape.com/010editor/repository/files/ADF.bt...

CVE-2022-24086

CVE-2022-24086 Tested with: magento 2.4.3 and sample data Docker image: docker.io/bitnami/magento:2.4.3-debian-10-r0 First Name: var this.getTemplateFilter.filter$order.shippingaddress.cityvar...

Stardust

Stardust A modern and easy to use 32/64-bit shellcode template. raw strings C++20 project uses compile time hashing with fnv1a for both function and module resolving Basic Usage resolving modules from PEB using resolve::module: if ! ntdll.handle = resolve::module expr::hashstring L"ntdll.dll"...

pillager

Pillager Pillage filesystems for sensitive information with Go. Table of Contents 1. Summary 2. Installation 3. Usage 4. Exfiltration 5. Documentation Summary Pillager is designed to provide a simple means of leveraging Go's strong concurrency model to recursively search directories for sensitive...

rxerium-templates

A curated collection of 144+ Nuclei templates focusing on zero-day and actively exploited vulnerabilities in the wild with a few miscellaneous templates. Templates use passive detection techniques version/date matching and are organized by year for easy navigation. ⚠️ Note: Date matching may be...

Essential-Blocks-4.4.3---Unauthenticated-Local-File-Inclusion

Essential-Blocks-4.4.3---Unauthenticated-Local-File-Inclusion The plugin does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which may lead to Local File Inclusion attacks. Usage: usage: PoC.py -h -u URL -p PAYLOAD Essential Bloc...

CVE-2019-11581

CVE-2019-11581 Atlassian JIRA Template injection vulnerability RCE Demo python CVE-2019-11581.py http://xx.xx.xx.xx:8080/ "Command" Vuln Version Download https://product-downloads.atlassian.com/software/jira/downloads/atlassian-jira-software-7.13.0-x64.exe Poc...

nuclei-drupal-sa

nuclei-drupal-sa Nuclei templates for drupal vulns... far from perfect PR if you want stuff to change. How to use nuclei -t ./nuclei-drupal-sa/templates/ --target https://www.example.com...

talisman

Talisman A tool to detect and prevent secrets from getting checked in Table of Contents What is Talisman? Installation Install onto path recommended approach Installation as a global hook template Configuring a project Using with hook frameworks Pre-commit Husky Directly invoking talisman Upgradi...

Exploits

Exploits Original CVEs, exploit PoCs and security advisories by @kmkz · boffsec-services.com · @kmkzsecurity 2026 File| Target| Type| CVSSv3 ---|---|---|--- CVE-2026-22191-SicuroWeb-ATI-chain.txt| SicuroWeb / Beghelli Sicuro24| Advisory 3-CVE chain| 9.3 CVE-2026-22191-POC.py| SicuroWeb / Beghelli...

nuclei

English • 中文 • Korean • Indonesia • Spanish • 日本語 • Portuguese • Türkçe...

CVE-2020-7384

CVE-2020-7384 This is a small exploit in bash which I had made while solving one of the boxes from Hack The Box. The exploit is modified from the original exploit here: https://github.com/justinsteven/advisories/blob/master/2020metasploitmsfvenomapktemplatecmdi.md Usage dos2unix CVE-2020-7384.sh...

loglizer

loglizer Loglizer is a machine learning-based log analysis toolkit for automated anomaly detection. Loglizer是一款基于AI的日志大数据分析工具, 能用于自动异常检测、智能故障诊断等场景 Logs are imperative in the development and maintenance process of many software systems. They record detailed runtime information during system...

https-nj.gov---CVE-2019-8331

https-nj.gov---CVE-2019-8331 Vulnearability Report of the New Jersey official site Bootstrap 4.0.0 Found in https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js Vulnerability info: Medium 28236 XSS in data-template, data-content and data-title properties of tooltip/popover...