CVE-2019-17228

creationtimestamp| type| source ---|---|--- 2025-09-18 11:48:05+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-17228.yaml 2025-09-19 21:02:32+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz7r6sujjv2r...

SUSE CVE-2022-50239

In the Linux kernel, the following vulnerability has been resolved: cpufreq: qcom: fix writes in read-only memory region This commit fixes a kernel oops because of a write in some read-only memory: 9.068287 Unable to handle kernel write to read-only memory at virtual address ffff800009240ad8...

CVE-2025-59340 jinjava Sandbox Bypass via JavaType-Based Deserialization

jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Priori to 2.8.1, by using mapper.getTypeFactory.constructFromCanonical, it is possible to instruct the underlying ObjectMapper to deserialize attacker-controlled input into arbitrary classe...

gnutls: Vulnerability in GnuTLS certtool template parsing

A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds OOB NULL pointer write, resulting in memory corruption and a...

gnutls: Vulnerability in GnuTLS certtool template parsing

A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds OOB NULL pointer write, resulting in memory corruption and a...

RHEL 9 : gnutls (RHSA-2025:16116)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:16116 advisory. The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such a...

CVE-2019-9880

creationtimestamp| type| source ---|---|--- 2025-09-16 22:09:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2019/CVE-2019-9880.yaml 2025-09-17 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz2qayivhe27...

CVE-2025-43805

CVE-2025-43805 affects Liferay Portal 7.3.0 through 7.4.3.111 and Liferay DXP 2023.Q4.0, 2023.Q3.1–2023.Q3.4, 7.4 GA up to update 92, and 7.3 GA up to update 35, where the system fails to perform an authorization check when viewing a display page template. This allows an unauthenticated, remote a...

Path Traversal

github.com/mattermost/mattermost-server is vulnerable to Path Traversal. The vulnerability is due to improper sanitization of path traversal sequences in template file destination paths, which allows an attacker system admin to perform path traversal attacks and place malicious files outside...

CLSA-2025-1758025991 gnutls: Fix of CVE-2025-32990

CVE-2025-32990: fix memory corruption in when parsing a template file...

CLSA-2025-1758022501 gnutls: Fix of CVE-2025-32990

CVE-2025-32990: fix memory corruption in when parsing a template file...

CLSA-2025-1758022425 gnutls: Fix of CVE-2025-32990

CVE-2025-32990: fix memory corruption in when parsing a template file...

CVE-2022-2461

creationtimestamp| type| source ---|---|--- 2025-09-16 05:39:12+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-2461.yaml 2025-09-17 21:02:37+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lz2qayx6up25 2026-09-01...

Exploit for Path Traversal in Atlassian Confluence_Server

CVE-2019-3396 CVE-2019-3396 confluence SSTI RCE 🔎 What is...

Liferay Portal和Liferay DXP 安全漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

Mattermost Server 9.11.x < 9.11.18 / 10.5.x < 10.5.9 / 10.8.x < 10.8.4 / 10.9.x < 10.9.3 / 10.10.0 Multiple Vulnerabilities (MMSA-2025-00498, MMSA-2025-00499)

The version of Mattermost Server installed on the remote host is affected by multiple vulnerabilities as referenced in the MMSA-2025-00500 and MMSA-2025-00499 advisories. - Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.9.x = 10.9.2 fail to sanitize the team invite ID ...

EulerOS Virtualization 2.13.1 : python-jinja2 (EulerOS-SA-2025-2182)

According to the versions of the python-jinja2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with...

PT-2025-37986

Here goes another merged PR: https://t.co/cRGKksIzUk Again, I contributed a nuclei template for CVE-2020-27516 at @pdnuclei...

PT-2025-38085

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.3.0 through 7.4.3.111 Liferay DXP versions 2023.Q3.1 through 2023.Q3.4 and 2023.Q4.0 Liferay Portal 7.4 GA through update 92 Liferay Portal 7.3 GA through update 35 Description The software does not perform an...

XWiki Platform 15.10.10 - Metasploit Module for Remote Code Execution (RCE)

Exploit Title: XWiki Platform 15.10.10 - Metasploit Module for Remote Code Execution RCE Date: 09/01/2025 Exploit Author: Maksim Rogov Vendor Homepage: https://www.xwiki.org/ Software Link: https://www.xwiki.org/xwiki/bin/view/Download/ Version: 5.3‑milestone‑2 ≤ v 'Remote Code Execution...