CVE-2025-61882-CVE-2025-61884

CVE-2025-61882 & CVE-2025-61884 EDIT: Oracle just disclosed a new vulnerability CVE-2025-61884, the detection script for that vuln can be found in this repo or originally here:https://gist.github.com/rxerium/6c70bc6b72fc0d1365c85937d35d9550. As quoted from Oracle's security advisory: This Securit...

Invision Community <=5.0.6 Unauthenticated RCE via Template Injection

Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeeditor controller /applications/core/modules/front/system/themeeditor.php, where a protected method named customCss can be invoked by unauthenticated...

Hitachi Pentaho Business Analytics Server - Remote Code Execution

Hitachi Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x, is susceptible to remote code execution via server-side template injection. Certain web services can set property values which contain Spring templates that are interpreted downstream, thereby...

CLEANSTART-2026-UX87470 When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression

CVE-2026-94448 affects multiple packages. When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. See references for individual vulnerability details...

CLEANSTART-2026-YX80273 trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped

CVE-2026-97030 affects multiple packages. A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. See references for individual vulnerability details...

cve-2021-21980-mock-server

Clippy of the Dead - CVE-2021-21980 testing environment and Nuclei template This repository contains a high-confidence Nuclei template to detect CVE-2021-21980 vSphere Web Client path traversal and a small mock environment that reproduces the vulnerable behavior for safe local testing. Files:...

Linux Distros Unpatched Vulnerability : CVE-2026-48211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery CSRF attack. The OTRS...

PT-2026-113681

The affiliate-toolkit WordPress plugin before 3.9.1 does not prevent a low-privileged user from supplying a template body that its bundled templating engine compiles and executes as PHP, allowing users with the Contributor role or above to run arbitrary PHP code on the server...

CVE-2025-55182-react2shell

CVE-2025-55182: Exposed React Server Components RSC Detector This repository contains a Nuclei template for detecting React Server Components exposure associated with CVE-2025-55182. The vulnerability affects applications built with React/Next.js where the RSC negotiation layer is unintentionally...

CVE-2026-103849

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation ...

nuclei-template-cve-2025-31324-check

SAP CVE-2025-31324 Check Overview This template is designed to check the presence of the SAP NetWeaver CVE-2025-31324 vulnerability. This vulnerability allows unauthorized users to upload JSP files through the /developmentserver/metadatauploader endpoint, which can lead to potential remote code...

CVE-2026-103849 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation ...

CVE-2026-103849

Adobe Commerce is impacted by an Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) vulnerability. This flaw could allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user, potentially leading to elevated access or full...

CVE-2024-6648

CVE-2024-6648 Nuclei template for CVE-2024-6648, absolute path traversal at Prestashop ApPage Builder plugin. Usage: nuclei -u https://vulnerable.site.com -t CVE-2024-6648.yaml...

CVE-2026-104126

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts, JumpServer's Ansible-based automation rendering can evaluate attacker-controlled template expressions from users who have permission to create or execute affected automation...

Certiception

Certiception Certiception is a honeypot for Active Directory Certificate Services ADCS , designed to trap attackers with a realistic and attractive bait that triggers highly relevant alerts. Developed by the SRLabs Red Team, Certiception creates a vulnerable-looking certificate template in your...

CVE-2022-40634

CVE-2022-40634: FreeMarker Server-Side Template Injection in CrafterCMS By inserting malicious content in a FTL template, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage FreeMarker exposed objects to bypass restrictions and obtain RCE Remote Code Execution...

CVE-2021-46362

CVE-2021-46362: FreeMarker Server-Side Template Injection in Magnolia CMS A Server-Side Template Injection SSTI vulnerability in the Registration and Forgotten Password forms of Magnolia v6.2.3 and below allows unauthenticated attackers to execute arbitrary code via a crafted payload entered into...

CVE-2026-104126 JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocation

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts, JumpServer's Ansible-based automation rendering can evaluate attacker-controlled template expressions from users who have permission to create or execute affected automation...

CVE-2025-31324

CVE-2025-31324 How does this detection method work? The template performs an HTTP GET request to the target's base URL and examines the response headers to identify SAP NetWeaver Application Server instances. This information helps assess whether the system might be susceptible to CVE-2025-31324...