390 matches found
CVE-2023-22621-POC
CVE-2023-22621-POC CVE-2023-22621: SSTI a RCE explotando plantillas de correo electrónico que afecta a las versiones de Strapi return strapi.config.get'plugin.email'; ; const send = async options = return strapi.plugin'email'.provider.sendoptions; ; / fill subject, text and html using lodash...
Sensei LMS < 4.24.2 - Email Template Leak
The Sensei LMS WordPress plugin before 4.24.2 does not properly protect some its REST API routes, allowing unauthenticated attackers to leak email templates. id: CVE-2024-7786 info: name: Sensei LMS 4.24.2 - Email Template Leak author: s4e-io severity: high description: | The Sensei LMS WordPress...
CVE-2021-39115
CVE-2021-39115 邮件模板注入导致Jira Service Management Server上的代码执行 I 构建 我已在此处指导了部署+调试 在此，大家可以参考。 II 分析 在 描述 中，此CVE已明确指出漏洞位于Email Template功能。拥有管理员权限的用户可以随意修改通知邮件的模板。此漏洞需要管理员权限才能利用，因此即使有RCE也不严重，但我仍决定写这篇博客以娱乐为目的 : 正在研究SSTI的朋友可以参考。...
Mailphish
Mailphish 编写者：Pro MCracker Mailphish 将帮助您快速轻松地创建专业的钓鱼邮件 访问我们的网站学习黑客方法 https://crackcodes.xyz 和 https://crackcodes.in 如果你复制了代码并制作自己的版本，别忘了给我点 credit，小子！ 使用此工具不会获取凭据 法律免责声明 我不会说您只能将此工具用于教育目的，不能用于攻击他人， 因为我自己也曾用它攻击过别人。但请记住，这样做是违法的，如果被抓到，后果自负。 不要来找我，也不要怪我。 功能 包含20种不同模板的钓鱼邮件创建器： Instagram Facebook...
CVE-2021-45897
CVE-2021-45897 CVE-2021-45897（又名 SCRMBT-180）的 PoC —— SuiteCRM = 8.0.0. Defaults to False --help Show this message and exit. https://github.com/manuelz120/CVE-2021-45897 使用示例： root@kitploit: .venv ➜ CVE-2021-45897 git:main ✗ ./exploit.py -u user -p --payload "cat /etc/passwd"...
[SECURITY] [DSA 6485-1] tryton-server security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6485-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 06, 2026 https://www.debian.org/security/faq -...
Debian dsa-6485 : tryton-server - security update
The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6485 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6485-1 [email protected] https://www.debian.org/security/ Moritz...
Content Moderation Notifications - Moderately critical - Access bypass - SA-CONTRIB-2026-107
The module provides a permission that allows users to configure email templates containing Twig code. This permission was not marked as restricted. A site administrator might inadvertently grant this permission to less-trusted users. This would allow those users to execute Twig within email...
PT-2026-82365
Name of the Vulnerable Software and Affected Versions Content Moderation Notifications versions 0.0.0 through 3.9.0 Description An issue exists where a permission allowing users to configure email templates containing Twig a template engine for web pages was not marked as restricted. If a site...
CVE-2026-18592
A security flaw has been discovered in osCommerce 4.14.63493. Affected by this issue is the function EmailController of the file app/lib/backend/controllers/EmailController.php of the component Email Template Configuration. Performing a manipulation of the argument emailtemplateskey results in sq...
PYSEC-2026-1338 Remote Code Execution Vulnerability via SSTI in Fides Webserver Jinja Email Templating Engine
Summary The Email Templating feature uses Jinja2 without proper input sanitization or rendering environment restrictions, allowing for Server-Side Template Injection that grants Remote Code Execution to privileged users. A privileged user refers to an Admin UI user with the default Owner or...
CVE-2026-55792
Craft CMS is a content management system CMS. In versions starting from 4.0.0-RC1 and prior to 4.18.0, and 5.0.0-RC1 and above, prior to 5.10.0, the dataUrl Twig function is included in Craft’s Twig sandbox allowlist, allowing any control panel user granted the utility:system-messages permission ...
CVE-2026-28496 FOSSBilling: Server-side template injection in Twig template rendering enables information disclosure and RCE
FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 have a Server-Side Template Injection SSTI vulnerability in the template rendering system. Administrators with access to features that render Twig templates email templates, mass mail campaigns, custo...
CVE-2026-28496 FOSSBilling: Server-side template injection in Twig template rendering enables information disclosure and RCE
FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 have a Server-Side Template Injection SSTI vulnerability in the template rendering system. Administrators with access to features that render Twig templates email templates, mass mail campaigns, custo...
CVE-2026-9694 Improper Neutralization of Substitution Characters in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.9 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions, could have allowed an unauthenticated user to impersonate the GitLab Support Bot and inject arbitrary content via a specially...
CVE-2026-27694
Traccar is an open source GPS tracking system. In org.traccar:traccar versions starting at 6.11.1 before 6.13.0, the email notification templates insert user-controlled device, geofence, and driver names into HTML email output without proper escaping. An attacker with low privileges can store...
CVE-2026-39345
OrangeHRM is a comprehensive human resource management HRM system. From 5.0 to 5.8, OrangeHRM Open Source fails to restrict email template file resolution to the intended plugins directory, allowing an authenticated actor who can influence the template path to read arbitrary local files. This...
CVE-2026-45714
CubeCart is an ecommerce software solution. Prior to 6.7.0, an Authenticated Server-Side Template Injection SSTI vulnerability exists in multiple modules of CubeCart including Email Templates, Invoices, Documents, and Contact Forms. The application unsafely evaluates user-supplied input using the...
EUVD-2026-31350
Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status module that allows low-privileged authenticated attackers to execute arbitrary commands by injecting unsanitized input stored in savetmpl.cgi and render...
