CVE-2025-24893-PoC

CVE-2025-24893 – XWiki Remote Command Execution Proof of Concept Overview This repository contains a controlled Proof of Concept PoC for CVE-2025-24893 , an unauthenticated Remote Command Execution RCE vulnerability affecting XWiki. The vulnerability allows an attacker to execute arbitrary...

CVE-2026-48211

An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery CSRF attack. The OTRS AdminImportExport::TemplateDelete action does not validate the request's ChallengeToken, allowing an unauthenticated remote attacker to craft a...

CVE-2026-48211 Cross-Site Request Forgery in Import/Export Admin console

An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery CSRF attack. The OTRS AdminImportExport::TemplateDelete action does not validate the request's ChallengeToken, allowing an unauthenticated remote attacker to craft a...

CVE-2022-22954

Analysis of CVE-2022-22954 Overview Workspace ONE Access workspace delivery as a service model provides multi-factor authentication, single sign-on, and conditional access for SaaS, web, and mobile applications. CVE-2022-22954 is a Server-side Template Injection vulnerability existing in the...

CVE-2025-25369

CVE-2025-25369: Cross Site Scripting vulnerability in ZKTeco ZKBio CVSecurity v.6.4.1 An XSS vulnerability was discovered in ZKBio CVSecurity v.6.4.1. An attacker could exploit this vulnerability with Template Editor privileges and escalate their privileges to administrator. Bypassing the built-i...

CVE-2026-75650

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-75650 CVE-2026-75650 Magento Open Source 2.4.8-p5 - Adobe I am @abraxasnull. Loopback lab. The client is CVE-2026-75650-Abraxas-Labs.py. Unauthenticated email-template SSTI. A GraphQL Store header plants...

CVE-2025-65271

CVE-2025-65271 PoC for CVE-2025-65271 How to run? node server.js Description Client-side template injection CSTI in Azuriom CMS admin dashboard allows a low-privilege user to execute arbitrary template code in the context of an administrator's session. This can occur via plugins or dashboard...

POC-CVE-2026-19626

CVE-2026-19626 — RCE in report generation authenticated, non-admin Status: CONFIRMED — pure-REMOTE, non-admin, REST-only 6.7.2-14.el9 lab, 2026-08-21. The weaponized chain this is what poc.py does: 1. login as any regular org user 2. POST /rest/group with name: "=system''" — braces/quotes accepte...

CVE-2026-23631

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Example usage: Install dependencies Run the project Replace the commands...

CVE-2026-108790

A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts the function TemplateController.save of the file /system/cms/template/save of the component Backend Template Editor. The manipulation results in path traversal. The attack may be...

CVE-2026-108791

A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the function TemplateController.input of the file /system/cms/template/input of the component Template Management. This manipulation of the argument filePath causes path traversal. It ...

CVE-2026-108791 westboy CicadasCMS Template Management input TemplateController.input path traversal

A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the function TemplateController.input of the file /system/cms/template/input of the component Template Management. This manipulation of the argument filePath causes path traversal. It ...

CVE-2026-108791

A path traversal vulnerability exists in westboy CicadasCMS (up to version 2431154dac8d0735e04f1fd2a3c3556668fc8dab) within the Template Management component. Specifically, the TemplateController.input function in the file /system/cms/template/input fails to properly sanitize the filePath argumen...

EUVD-2026-97162

A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the function TemplateController.input of the file /system/cms/template/input of the component Template Management. This manipulation of the argument filePath causes path traversal. It ...

EUVD-2026-97160

A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts the function TemplateController.save of the file /system/cms/template/save of the component Backend Template Editor. The manipulation results in path traversal. The attack may be...

CVE-2026-108790 westboy CicadasCMS Backend Template Editor save TemplateController.save path traversal

A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts the function TemplateController.save of the file /system/cms/template/save of the component Backend Template Editor. The manipulation results in path traversal. The attack may be...

CVE-2026-108790

A security flaw in westboy CicadasCMS (up to version 2431154dac8d0735e04f1fd2a3c3556668fc8dab) allows for path traversal via the TemplateController.save function located at /system/cms/template/save within the Backend Template Editor component. This vulnerability can be triggered remotely, and an...

CVE-2026-11561

CVE-2026-11561 — Apinizer SSTI / RCE Version Check Infra Nuclei template to detect Apinizer versions lower than 2026.04.6, which are vulnerable to CVE-2026-11561 Server-Side Template Injection leading to Remote Code Execution, CVSS 9.8. Usage echo | nuclei -t CVE-2026-11561.yaml How it works 1...

CVE-2025-64714-privatebin-2.0.2-PoC

CVE-2025-64714 — PrivateBin Local File Inclusion via Template Cookie Path Traversal Severity: Medium CVSS v3.1: 5.8 Vector: AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Affected versions: PrivateBin = 1.7.7 Patched version: 2.0.3 CWE: CWE-23 Relative Path Traversal, CWE-73 External Control of File Name or...

CVE-2026-42203

LiteLLM CVE-2026-42203 PoC Usage Instructions This document explains how to start a local LiteLLM environment and run CVE-2026-42203.py to verify the /prompts/test SSTI vulnerability. Only use in a local experimental environment that you are authorized to test. Do not point the script at...