CVE-2023-54412

The Frappe application (versions before 13.46.3 and 14.x before 14.21.1 ) contains an improper access control vulnerability within the Email Template permissions. This flaw allows any authenticated non-guest user , including low-privileged self-registered users, to create and edit any Email Templ...

CVE-2023-54412 Frappe before 13.46.3 Improper Access Control for Email Templates

Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability in Email Template permissions that allows any authenticated non-guest user to create and edit any Email Template. Attackers with low-privileged accounts, including self-registered users when signup is...

CVE-2026-18537

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image reference in a Kubernetes operator template...

CVE-2026-18533

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image configuration in a Kubernetes operator template...

CVE-2026-18533

The IBM Maximo Application Suite - Location Service for Esri Component versions 9.2 , 9.1 , and 9.0 are vulnerable to improper input validation. The root cause is an unsanitised container image configuration within a Kubernetes operator template , which can lead to Code Injection (CWE-94). This v...

EUVD-2026-97901

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image configuration in a Kubernetes operator template...

CVE-2026-18533 IBM Maximo Application Suite - Location Service for Esri Component Code Execution

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image configuration in a Kubernetes operator template...

EUVD-2026-97900

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image reference in a Kubernetes operator template...

CVE-2026-18537 IBM Maximo Application Suite - Location Service for Esri Component Code Execution

IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image reference in a Kubernetes operator template...

CVE-2026-18537

The IBM Maximo Application Suite - Location Service for Esri Component versions 9.2 , 9.1 , and 9.0 are vulnerable to improper input validation (CWE-94). The root cause is an unsanitised container image reference within a Kubernetes operator template, which could lead to code execution. To remedi...

CVE-2026-109558 EdgeEver 1.6.0 through 1.112.0 Stored XSS via TemplatesPane Template Preview

EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting vulnerability in TemplatesPane.tsx that renders template contentMarkdown with raw HTML via dangerouslySetInnerHTML without sanitization. Attackers can write templates containing HTML event handlers through an API or MCP token t...

CVE-2026-109558

Versions 1.6.0 through 1.112.0 of EdgeEver are vulnerable to a stored cross-site scripting (XSS) vulnerability in the TemplatesPane.tsx component. The root cause is the rendering of template contentMarkdown as raw HTML using dangerouslySetInnerHTML without proper sanitization. An attacker can uti...

CVE-2023-49964

CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco An issue was discovered in Hyland Alfresco Community Edition =7.2.0. By inserting malicious content in the folder.get.html.ftl file, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage...

react2shell-PoC

React2Shell Nuclei template for detecting React2Shell CVE-2025-55182 and CVE-2025-66478...

CVE-2022-24086

CVE-2022-24086 PoC of CVE-2022-24086 var this.getTemplateFilter.addAfterFilterCallback"system".filter"whoami"...

CVE-2025-49113-nuclei-template

Nuclei vulnerability detection template - CVE-2025-49113 - Roundcube ≤ 1.6.10 Post-Authentication Remote Code Execution CVE ID: CVE-2025-49113 Severity: Critical CVSS 10.0 Discovered by: Kirill Firsov FearsOff Date Disclosed: June 1, 2025 Fixed in: Roundcube 1.6.11 / 1.5.10 LTS -...

CVE-2019-8331

Eng Description CVE-2019-8331 is a Cross-Site Scripting XSS security vulnerability found in Bootstrap, a JavaScript library widely used for developing websites and mobile applications. This vulnerability occurs because Bootstrap does not properly sanitize data sent via thedata-template attribute ...

cve-2024-6387-nuclei-template

CVE-2024-6387 Nuclei Template Nuclei template to detect CVE-2024-6387 regreSSHion by OpenSSH software version...

CVE-2022-26923

CVE-2022-26923 As described by Tenable: Active Directory Domain Services Elevation of Privilege Vulnerability CVSS v3 Base score: 8.8 Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Severity: High Summary: CVE-2022-26923 exploits a vulnerability in Microsoft Active Directory Certificate...

CVE-2026-8037-POC

CVE-2026-8037-POC Includes executable command detection and one-click getshell requires server deployment service pco.yaml can be used with nuclei for quick detection Quick Start Interactive Mode python go.py Enter target URL → select function menu. Detection Target Fast detect 8 basic info items...