CVE-2025-52914

CVE-2025-52914 How does this detection method work? Versions are extracted from target hosts, specifically the SVRVER html response in the body, and then matches on versions prior to 9.3.1 and versions from 10.0.26 to 10.1.101 inclusive. How do I run this script? 1. Download Nuclei from here 2...

CVE-2026-107570

The mutt mail client is vulnerable to a heap out-of-bounds (OOB) write in the convert_file_from_to() function. This issue can be triggered by providing a crafted Content-Type header when an email is being used as a template. The vulnerability is characterized as a Use of Out-of-range Pointer Offs...

CVE-2026-107570

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

CVE-2026-107570 Use of Out-of-range Pointer Offset in mutt

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

CVE-2026-89191

Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store malicious scripts that execute in the...

CVE-2026-89191

SQLView KRIS is vulnerable to a Stored Cross-Site Scripting (XSS) flaw within its Workflow Template feature. The root cause is the lack of server-side sanitisation for the "template name" field, which is subsequently rendered in "onclick" attributes on the main dashboard. An attacker with adminis...

CVE-2026-89191 Stored Cross-Site Scripting in SQLView KRIS

Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store malicious scripts that execute in the...

EUVD-2026-94804

Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store malicious scripts that execute in the...

CVE-2026-89191 Stored Cross-Site Scripting in SQLView KRIS

Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store malicious scripts that execute in the...

CLEANSTART-2026-FF43574 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used

CVE-2026-32289 affects multiple packages. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. See references for individual vulnerability details...

CVE-2026-97030: Improper Neutralization of Input During Web Page Generation

A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses are escaped and non-keyword uses are not escaped...

CVE-2026-94448: Improper Neutralization of Input During Web Page Generation

When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are...

CVE-2026-89191: Improper Neutralization of Input During Web Page Generation

Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store malicious scripts that execute in the...

PT-2026-107893

Name of the Vulnerable Software and Affected Versions mutt versions prior to 2.4.2-2.1 Description A heap out-of-bounds write occurs in the convert file from to function when an email is used as a template. An attacker can trigger this issue by providing a crafted Content-Type header...

PT-2026-108319

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A flaw exists where the context tracking state is not properly reset when a JavaScript template literal contains consecutive expressions. This failure to reset...

CVE-2026-94448: Undefined Security Weakness

When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-literal expression entries correctly reset context variables so all subsequent regular expression literals are...

VulnCheck KEV: CVE-2026-12227

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the vcv-template parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

PT-2026-108320

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A trusted template author may have written a template where the yield keyword is not correctly escaped. This issue involves the improper handling of keyword...

openSUSE 16 Security Update : python-fsspec (openSUSE-SU-2026:22028-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22028-1 advisory. Changes in python-fsspec: - CVE-2026-104851: python-fsspec: remote code execution via server-side template injection in ReferenceFileSystem bsc1284173...

GHSA-75QF-886X-5XF2 Backstage: Improper input validation in Confluence to Markdown scaffolder module

Impact Insufficient input validation in the Confluence to Markdown scaffolder module could allow an attacker to influence file write operations during template execution. Exploitation requires a Backstage user to run a template that processes attacker-influenced Confluence content. Patches Patche...