17 matches found
VMware-CVE-2022-22954
VMware CVE-2022-22954 Workspace ONE Access Freemarker Injection de modèle côté serveur POC pour Vmware CVE-2022-22954 Utilisez cette requête GET en une ligne !! Cela exécutera cat /etc/passwd...
CVE-2025-26865
CVE-2025-26865: حقن قالب من جهة الخادم في FreeMarker عبر إضافة "التجارة الإلكترونية" في Apache OfBiz بسبب تراجع بين الإصدارين 18.12.17 و 18.12.18، لم يعد الإصلاح الخاص بالثغرة CVE-2022-25813: حقن قالب من جهة الخادم في FreeMarker في Apache OfBiz مطبقًا، مما فتح الباب مرة أخرى لشن هجمات حقن القوالب...
VMware-CVE-2022-22954
VMware CVE-2022-22954 ثغرة حقن القالب من جانب الخادم في Freemarker في Workspace ONE Access POC لـ Vmware CVE-2022-22954 استخدم طلب GET هذا بسطر واحد!! سيؤدي ذلك إلى تنفيذ cat /etc/passwd...
CVE-2022-22954
CVE-2022-22954 CVE-2022-22954 ثغرة في VMware Workspace ONE Access من نوع Freemarker SSTI كشف متعدد لنقاط تفعيل الثغرات، كشف دفعي متعدد الخيوط، تنفيذ الأوامر، كتابة الملفات // Single target vulnerability detection python CVE-2022-22954.py -u https://x.x.x.x // Command execution python...
CVE-2026-22244 OpenMetadata Server-Side Template Injection (SSTI) in FreeMarker email templates that leads to RCE
OpenMetadata is a unified metadata platform. Versions 1.5.0 through 1.11.3 are vulnerable to remote code execution via Server-Side Template Injection SSTI in FreeMarker email templates. An attacker must have administrative privileges to exploit the vulnerability. Version 1.11.4 contains a patch...
Apache StreamPark: FreeMarker SSTI RCE Vulnerability
On versions before 2.1.4, a user could log in and perform a template injection attack resulting in Remote Code Execution on the server, The attacker must successfully log into the system to launch an attack, so this is a moderate-impact vulnerability. Mitigation: all users should upgrade to 2.1.4...
CVE-2024-29178 Apache StreamPark: FreeMarker SSTI RCE Vulnerability
On versions before 2.1.4, a user could log in and perform a template injection attack resulting in Remote Code Execution on the server, The attacker must successfully log into the system to launch an attack, so this is a moderate-impact vulnerability. Mitigation: all users should upgrade to 2.1.4...
CrafterCMS Crafter Studio Improperly Controls Dynamically-Managed Code Resources
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
GHSA-2JV3-V37P-65W3 CrafterCMS Crafter Studio Improperly Controls Dynamically-Managed Code Resources
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
CVE-2022-40634
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
CVE-2022-40634
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
Design/Logic Flaw
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
CVE-2022-40634
CVE-2022-40634 affects Crafter CMS Crafter Studio. The vulnerability arises from improper control of dynamically-managed code resources, enabling Server-Side Template Injection via FreeMarker (SSTI). Exploitation requires authenticated user credentials and can lead to OS command execution, as des...
CVE-2022-40634 Improper Control of Dynamically-Managed Code Resources in Crafter Studio
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
EUVD-2022-6664
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
CVE-2022-40634: Improper Control of Dynamically-Managed Code Resources
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...
