Template 安全漏洞

Template is a quick and easy string template by Blake Embrey Personal Developer. A security vulnerability exists in Template versions prior to 1.2.0 that stems from the ability to inject and run code in a template if an attacker is authorized to write the template name...

PT-2024-31594 · Npm · @Blakeembrey/Template

Name of the Vulnerable Software and Affected Versions: @blakeembrey/template versions prior to 1.2.0 Description: The issue allows an attacker to inject and run code within the template if they have access to write the template name. This can be achieved by exploiting the template display name...

The vulnerability of the `actionpack/lib/action_dispatch/middleware/templates/routes/_table.html.erb` Ruby interpreter allows a hacker to execute cross-site scripting.

The vulnerability of the actionpack/lib/actiondispatch/middleware/templates/routes/table.html.erb Ruby interpreter is related to incorrect handling of input data during web page generation. Exploiting this vulnerability could allow a local attacker to execute cross-site scripting attacks...

September 3, 2024, update for Office 2016 (KB5002636)

None None...

UBUNTU-CVE-2024-45230

An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize and urlizetrunc template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters...

The vulnerability of the Graph Template component of the Centreon IT infrastructure monitoring software’s web interface allows a attacker to execute arbitrary SQL commands.

The vulnerability of the Graph Template component of the Centreon IT infrastructure monitoring software’s web interface is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

Accellion FTA Statecode Cookie Arbitrary File Read

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "Accellion FTA 'statecode' Cookie Arbitrary File Read", 'Description' = %q This module exploits a file disclosure vulnerability in the Accellion...

CrushFTP Unauthenticated Arbitrary File Read

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'CrushFTP Unauthenticated Arbitrary File Read', 'Description' = %q This module leverages an unauthenticated server-side template injection...

AD CS Certificate Template Management

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'AD CS Certificate Template Management', 'Description' = %q This module can create, read, update, and delete AD CS certificate templates from a...

Oracle Application Testing Suite Post-Auth DownloadServlet Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rkelly' class MetasploitModule 'Oracle Application Testing Suite Post-Auth DownloadServlet Directory Traversal', 'Description' = %q This module exploits a...

CVE-2024-8252

The Clean Login plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.14.5 via the 'template' attribute of the clean-login-register shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and...

PT-2024-30050 · Undefined · Undefined

CVE-2024-42588 LLMVulnSphere All Security Issues about LLM Software Components Component Name Version Issue CVE Link promptify 2.0.3 RCE CVE-2024-42588 RCE eval 2.0.3 SSTI CVE-2024-42587 SSTI jinja2 https://t.co/ayrIsJZ5O6...

PT-2024-38890

Name of the Vulnerable Software and Affected Versions: Clean Login plugin for WordPress versions up to, and including, 1.14.5 Description: The Clean Login plugin for WordPress is vulnerable to Local File Inclusion via the template attribute of the clean-login-register shortcode. This allows...

PT-2024-30049 · Undefined · Undefined

CVE-2024-42588 LLMVulnSphere All Security Issues about LLM Software Components Component Name Version Issue CVE Link promptify 2.0.3 RCE CVE-2024-42588 RCE eval 2.0.3 SSTI CVE-2024-42587 SSTI jinja2 https://t.co/ayrIsJZ5O6...

CVE-2024-43965

creationtimestamp| type| source ---|---|--- 2024-08-29 18:44:09+00:00| seen| https://t.me/cvedetector/4422 2026-02-18 19:19:06+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-43965.yaml 2026-02-20 21:03:01+00:00| seen|...

CVE-2024-8304

A vulnerability has been found in jpress up to 5.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/template/edit of the component Template Module Handler. The manipulation leads to path traversal. The attack can be launched remotely. The...

CVE-2024-8304 jpress Template Module edit path traversal

A vulnerability has been found in jpress up to 5.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/template/edit of the component Template Module Handler. The manipulation leads to path traversal. The attack can be launched remotely. The...

CVE-2024-8304 jpress Template Module edit path traversal

A vulnerability has been found in jpress up to 5.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/template/edit of the component Template Module Handler. The manipulation leads to path traversal. The attack can be launched remotely. The...

CVE-2024-8304 jpress Template Module edit path traversal

A vulnerability has been found in jpress up to 5.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/template/edit of the component Template Module Handler. The manipulation leads to path traversal. The attack can be launched remotely. The...

WordPress Custom Field Template plugin <= 2.6.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Robert DeVore Patchstack Alliance in WordPress Plugin Custom Field Template versions = 2.6.5...