SUSE CVE-2025-26791

DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting mXSS...

PT-2025-8932 · WordPress · Jeg Elementor Kit

Name of the Vulnerable Software and Affected Versions: Jeg Elementor Kit plugin for WordPress versions up to, and including, 2.6.11 Description: The issue allows authenticated attackers with Contributor-level access and above to extract sensitive private, pending, scheduled, and draft template da...

CVE-2025-27137

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the SYSTEMCONFIGURATION permission to customize notification templates. Templates are evaluated using the Pebble template engine...

CVE-2025-25796

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component admintemplate.php...

CVE-2025-25796

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component admintemplate.php...

CVE-2024-12737

creationtimestamp| type| source ---|---|--- 2025-02-26 06:25:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5471 2026-02-11 14:53:32+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12737.yaml 2026-02-12 21:03:16+00:00| seen|...

CVE-2024-12878

creationtimestamp| type| source ---|---|--- 2025-02-26 06:25:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5470 2026-02-11 12:41:17+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12878.yaml 2026-02-12...

CVE-2024-13628

creationtimestamp| type| source ---|---|--- 2025-02-26 06:25:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5466 2026-02-07 03:41:56+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13628.yaml...

CVE-2024-13630

creationtimestamp| type| source ---|---|--- 2025-02-26 06:25:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5464 2026-02-07 03:40:08+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13630.yaml 2026-02-11 21:03:06+00:00| seen|...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v13.3, which stems from a Remote Code Execution RCE issue in the component admintemplate.php...

CVE-2025-25796

SeaCMS v13.3 is affected by a remote code execution (RCE) flaw in the admin_template.php component. The vulnerability is documented across multiple sources as CVE-2025-25796. The available descriptions consistently identify SeaCMS 13.3 and the admin_template.php module as the entry point for the ...

jinja2: Jinja has a sandbox breakout through malicious filenames

A flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja's sandbox being used. An attacker needs to be able to control both the filename and the contents o...

Security Bulletin: IBM Maximo Application Suite, IBM Maximo Application Suite - IoT Component and IBM Truststore Manager uses jinja2-3.1.4-py3-none-any.whl which is vulnerable to CVE-2024-56326, CVE-2024-56201

Summary IBM Maximo Application Suite, IBM Maximo Application Suite - IoT Component and IBM Truststore Manager uses jinja2-3.1.4-py3-none-any.whl which is vulnerable to CVE-2024-56326, CVE-2024-56201. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability...

ai.djl.timeseries:timeseries (>=0.19.0, <=0.36.0), ai.mindconnect:mc-agent-admin-ui-app (>=0.0.2, <=0.1.0) +640 more potentially affected by CVE-2025-1686 via io.pebbletemplates:pebble (>=2.5.0, <=4.1.2)

io.pebbletemplates:pebble MAVEN version =2.5.0, =0.19.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.0.3, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =0.1.5, =0.3.0, =0.1.0, =2.5.0, =2.5.0, =2.5.2 and more Source cves: CVE-2025-1686 Source advisory: SNYK:JAVA-IOPEBBLETEMPLATES-8745594...

CVE-2025-27137

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the SYSTEMCONFIGURATION permission to customize notification templates. Templates are evaluated using the Pebble template engine...

CVE-2025-27137 Dependency-Track vulnerable to local file inclusion via custom notification templates

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the SYSTEMCONFIGURATION permission to customize notification templates. Templates are evaluated using the Pebble template engine...

CVE-2025-27137 Dependency-Track vulnerable to local file inclusion via custom notification templates

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the SYSTEMCONFIGURATION permission to customize notification templates. Templates are evaluated using the Pebble template engine...

CVE-2025-1611

A vulnerability was found in ShopXO up to 6.4.0. It has been classified as problematic. This affects an unknown part of the file app/service/ThemeAdminService.php of the component Template Handler. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit ha...

CVE-2025-1611 ShopXO Template ThemeAdminService.php injection

A vulnerability was found in ShopXO up to 6.4.0. It has been classified as problematic. This affects an unknown part of the file app/service/ThemeAdminService.php of the component Template Handler. The manipulation leads to injection. It is possible to initiate the attack remotely. The exploit ha...

CVE-2025-1611

ShopXO up to version 6.4.0 is affected by an injection vulnerability in the Template Handler component, specifically within the file app/service/ThemeAdminService.php. The issue is caused by input handling that allows remote exploitation; authenticated administrators can exploit by uploading a ma...