CVE-2022-30190-follina-Office-MSDT-Fixed

'Follina' MS-MSDT n-day Microsoft Office RCE — Modified Version Based on the project from https://github.com/chvancooten/follina.py, modifications have been made to allow custom specification of the docx template file, making it easier for phishing use in real-world scenarios. After editing your...

evilTrust

evilTrust Ideal tool for automated deployment of a Rogue AP with template selection + 2FA capability. This tool has several templates to use, including a custom template option, where the attacker can deploy their own template. IMPORTANT : No wired connection is required, so the attack can be...

tplmap

Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...

spring-cloud-netflix-hystrix-dashboard-cve-2021-22053

CVE-2021-22053: Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability Severity High Vendor Spring by VMware Description Applications using both spring-cloud-netflix-hystrix-dashboard and spring-boot-starter-thymeleaf expose a way to execute code submitted within the request URI...

DEVVORTEX

DEVVORTEX HackTheBox: Devvortex — Machine Write-Up A comprehensive technical walkthrough detailing the compromise of the Devvortex machine on HackTheBox. This path demonstrates Subdomain Fuzzing , Joomla API Enumeration , Template Modification for initial access, Database Hash Extraction & Cracki...

CVE-2026-111687

WeRSS we-mp-rss through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/feedid endpoint. Attackers can supply a non-built-in ext value and a =expression template whose object-subclass traversa...

CVE-2024-4040-SSTI-LFI-PoC

CVE-2024-4040 SSTI & LFI PoC - Exploitation | CrushFTP This is a proof of concept for a Server Side Template Injection SSTI & Local File Inclusion LFI vulnerability in CrushFTP. Features Taking leverage of Critical Severity Vulnerabilities in CrushFTP servers through Server Side Template Injectio...

CVE-2023-37979

CVE-2023-37979 Exploit CVE ID| CVSS Score| Discovered| Affected Plugin| Vendor| Vulnerability Type ---|---|---|---|---|--- CVE-2023-37979| | 27/07/2023| WordPress Plugin| Ninja-forms| Reflected XSS 🐍 Python Script This Python script exploits the reflected Cross-Site Scripting XSS vulnerability...

ransomware-simulator

Ransomware Simulator NCC Ransomware Simulator Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Donato Ferrante, donato dot ferrante at nccgroup dot trust https://www.github.com/nccgroup/ransomware-simulator Released under AGPL see LICENSE for more information To...

EUVD-2026-102978

WeRSS we-mp-rss through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/feedid endpoint. Attackers can supply a non-built-in ext value and a =expression template whose object-subclass traversa...

CVE-2026-111687

The software WeRSS (we-mp-rss) versions through 1.5.3 is vulnerable to Remote Code Execution (RCE) via the public GET /rss/{feed_id} endpoint. The root cause is an eval injection (CWE-95) flaw where an unauthenticated attacker can provide a non-built-in ext value and a {{=expression}} template. B...

CVE-2026-111687 WeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss Endpoint

WeRSS we-mp-rss through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/feedid endpoint. Attackers can supply a non-built-in ext value and a =expression template whose object-subclass traversa...

cve-2019-17558-apache-solr-rce

Apache Solr RCE CVE-2019-17558 - CTF Write-up Practical exploitation of a Velocity Template Injection vulnerability in Apache Solr, progressing from a failure in an automated tool Metasploit to a successful manual exploitation. This write-up documents the complete reasoning of the exercise,...

CVE-2026-33937-for-DarkZeroReturns

POC for CVE-2026-33937 this is a poc for CVE-2026-33937 that was made with AI in order to exploit the Handelbars vulnerability in the Box DarkZeroRetuns the original poc https://github.com/EQSTLab/CVE-2026-33937/blob/main/exploit.py but it doesn't work for this specific box the poc was written by...

modifyCertTemplate

Purpose This tool is designed to aid an operator in modifying ADCS certificate templates so that a created vulnerable state can be leveraged for privilege escalation and then reset the template to its previous state afterwards. This is specifically designed for a scenario where WriteProperty righ...

CVE-2025-68937

CVE-2025-68937 - Gitea/Forgejo Template Symlink RCE Automated proof-of-concept for CVE-2025-68937 : directory traversal via symlink dereferencing in Gitea and Forgejo template repository processing, leading to remote code execution. Any authenticated user no admin required can obtain a shell as t...

CVE-2025-67906

-c0392b?style=flat -orange?style=flat CVE-2025-67906 MISP = 2.5.27 - Stored Cross-Site Scripting via Workflow Engine doT.js Template Injection Discovered byFranck FERMAN Overview - Root Cause - Attack Chain - Structure - Usage - Remediation - References Vulnerability Overview CVE-2025-67906...

CVE-2025-68493

CVE-2025-68493 CVE-2025-68493 7. References 1 Apache Struts XWork XML Vulnerability CVE-2025-68493 PoC and Script | ZONE.CI Global Network. https://zone.ci/secarticles/wx/486533.html 8. Vulnerability Verification and Exploitation To verify and exploit the CVE-2025-68493 vulnerability, you can use...

CVE-2019-5418

CVE-2019-5418 sandbox https://groups.google.com/forum/!msg/rubyonrails-security/zRNVOUhKHrg/GmmcVXcmAAAJ initialize $ git clone https://github.com/takeokunn/CVE-2019-5418 $ cd https://github.com/takeokunn/CVE-2019-5418 $ docker-compose up Usage $ curl localhost/sandbox -H 'Accept:...

FormatFuzzer

FormatFuzzer FormatFuzzer is a framework for high-efficiency, high-quality generation and parsing of binary inputs. It takes a binary template that describes the format of a binary input and generates an executable that produces and parses the given binary format. From a binary template for GIF,...