CVE-2022-24442

CVE-2022-24442: FreeMarker Server-Side Template Injection in JetBrains YouTrack By inserting malicious content in the Notification FTL files, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage FreeMarker exposed objects to bypass restrictions and obtain RCE...

CVE-2022-22954

CVE-2022-22954 Atención Por favor, úsalo bajo tu propio riesgo. Este repositorio es solo con fines educativos y estamos estrictamente en contra de cualquier intención ilegal, y no seremos responsables de ninguna actividad ilegal asociada con este repositorio. ¡Sé ético! Ejemplo root@kitploit:...

tplmap

Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...

VMware-CVE-2022-22954-Command-Injector

VMware-CVE-2022-22954-Command-Injector Prueba de concepto para explotar VMware CVE-2022-22954 Cómo funciona Este simple script de Python realiza una solicitud GET a la URL especificada, añadiendo /catalog-portal/ui/oauth/verify?error=&deviceUdid= y luego seguido de una versión codificada en URL d...

CVE-2022-22954_VMware_PoC

CVE-2022-22954 PoC - Inyección de plantillas del lado del servidor Freemarker en VMware Workspace ONE Access Se ha encontrado una vulnerabilidad, clasificada como muy crítica, en Vmware Workspace ONE Access e Identity Manager. El componente afectado es Template Handler. Referencia:...

VMware-CVE-2022-22954

Inyección de plantillas del lado del servidor Freemarker en VMware CVE-2022-22954 Workspace ONE Access POC para VMware CVE-2022-22954 ¡¡Usa esta solicitud GET de una línea!! Esto ejecutará cat /etc/passwd...

CVE-2025-26865

CVE-2025-26865: FreeMarker Server-Side Template Injection via the "ecommerce" plugin in Apache OfBiz Due to a regression between 18.12.17 and 18.12.18 the fix for finding CVE-2022-25813: FreeMarker Server-Side Template Injection in Apache OfBiz was no longer enforced which reopened the possibilit...

CVE-2025-24893-XWiki-unauthenticated-RCE-via-SolrSearch

CVE-2025-24893 – Ejecución remota de código no autenticada en XWiki 0 Tabla de contenidos 1. Resumen 2. Detalles de la vulnerabilidad 3. Versiones afectadas 4. Prueba de concepto 4.1 Construir el payload 4.2 Explotación manual 4.3 Exploit automatizado en Python 5. Mitigación 6. Créditos y...

VMware-CVE-2022-22954

VMware CVE-2022-22954 Workspace ONE Access Freemarker Server-side Template Injection POC for Vmware CVE-2022-22954 Use this one line GET request!! This will execute cat /etc/passwd...

cve-2022-22954

CVE-2022-22954 이 패키지는 CVE-2022-22954 시도 및 악용의 일부를 탐지하고 통지를 생성하며, 악용 URI와 공격자에게 응답으로 전송된 데이터의 처음 4KB도 포함합니다. 이 공격의 탐지는 로그 분석을 통해 더 간단하지만, 이 패키지는 사고 대응을 돕기 위해 공격자에게 전송된 응답을 기록하는 데 도움이 됩니다. 샘플 통지 이 패키지에서는 두 가지 통지를 생성할 수 있습니다: VMWareRCE2022::ExploitAttempt 및 VMWareRCE2022::ExploitSuccess 첫 번째는 공격이...

CVE-2020-7931

CVE-2020-7931: Explotación de SSTI en Artifactory Pro CVE-2020-7931 es una vulnerabilidad de desconfiguración intencionada en Artifactory que permite a los atacantes realizar inyecciones de plantilla del lado del servidor desde una plantilla FreeMarker. La vulnerabilidad fue descubierta por Ryan...

cve-2023-22527

Ejecución de Código Arbitrario en la Memoria de Confluence CVE-2023-22527 es una vulnerabilidad ampliamente conocida que afecta a Atlassian Confluence. La mayoría de los exploits para esta vulnerabilidad utilizan freemarker.template.utility.Execute para ejecutar un comando del sistema operativo,...

MAL-001

MAL-001: FreeMarker Server-Side Template Injection in Liferay Portal An issue was discovered in Liferay - Portal =7.4.3.12-ga12. By inserting malicious content in the FTL Templates, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage FreeMarker exposed objects ...

MAGNOLIA-8348

MAGNOLIA-8348: FreeMarker Restriction Bypass 3 in Magnolia CMS An issue in the FreeMarker Filter of Magnolia CMS v6.2.17 and below allows attackers to bypass security restrictions and execute arbitrary code, read/write/move/copy/delete arbitrary files or launch DoS attacks via a crafted FreeMarke...

MAGNOLIA-8281

MAGNOLIA-8281: FreeMarker Restriction Bypass 2 in Magnolia CMS An issue in the FreeMarker Filter of Magnolia CMS v6.2.16 and below allows attackers to bypass security restrictions and read/write/move/copy/delete arbitrary files via a crafted FreeMarker payload. Arbitrary code execution was...

DEBIAN-CVE-2026-84939

Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...

CVE-2026-84939

Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...

EUVD-2026-75251

Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...

CVE-2026-84939

CVE-2026-84939 is a path traversal vulnerability in Apache FreeMarker 's template loading mechanism (versions 2.2.0–2.3.34 ). An attacker who can supply a malformed locale identifier while the localized lookup setting is enabled (the default) may cause FreeMarker to load templates outside the int...

CVE-2026-84939 Apache FreeMarker, Apache FreeMarker: A malformed locale may be exploitable for path traversal attacks

Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...