422 matches found
CVE-2021-23369
CVE-2021-23369 Vulnerabilidad Handlebars CVE-2021-23369 pip install requests Ingrese la URL : Descripción de la Vulnerabilidad El paquete handlebars anterior a la versión 4.7.7 es vulnerable a la Ejecución Remota de Código RCE al seleccionar ciertas opciones de compilación para compilar plantilla...
CVE-2021-23383
CVE-2021-23383 El paquete handlebars anterior a la versión 4.7.7 es vulnerable a Contaminación de Prototipos al seleccionar ciertas opciones de compilación para compilar plantillas provenientes de una fuente no confiable...
CVE-2019-19919
CVE-2019-19919 Vulnerabilidad de neutralización inadecuada de elementos especiales en la salida utilizada por un componente descendente 'Inyección' en Handlebars pip install requests packaging python handlebarsscanner.py pip install requests python handlebarsexploit.py Introduce la URL objetivo:...
Express-handlebars - Local File Inclusion
Express-handlebars is susceptible to local file inclusion because it mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential...
Check-CVE-2021-23383
Check-CVE-2021-23383 Comprueba las condiciones para explotar CVE-2021-23383 mediante la evaluación de la versión de la librería handlebars...
CVE-2026-33937-for-DarkZeroReturns
POC for CVE-2026-33937 this is a poc for CVE-2026-33937 that was made with AI in order to exploit the Handelbars vulnerability in the Box DarkZeroRetuns the original poc https://github.com/EQSTLab/CVE-2026-33937/blob/main/exploit.py but it doesn't work for this specific box the poc was written by...
CVE-2026-87123
hbs is an Express view engine wrapper for Handlebars. Version 4.3.0 can crash the Node.js process during output escaping when an async helper, registered with registerAsyncHelper, resolves to an object whose toHTML property is truthy but not callable. Handlebars escapeExpression calls the toHTML...
cve-2026-33937
CVE-2026-33937 - Handlebars RCE エクスプロイト PoC 説明 CVE-2026-33937 は、Handlebars における Abstract Syntax Tree（AST）入力の安全でない処理に起因する、重大なリモートコード実行（RCE）脆弱性です。 この脆弱性により、攻撃者は Handlebars.compile に細工された AST オブジェクトを渡すことで、任意の JavaScript コードを注入できます。 根本原因 Handlebars.compile は以下の両方を受け入れます： テンプレート文字列 事前解析済みの AST オブジェクト...
CVE-2026-29053
This is a rework of the Repo by rootxran for this same CVE - https://github.com/rootxran/CVE-2026-29053 During testing against specific Ghost CMS environments, the original theme payload triggered a Fatal Handlebars Error. The CMS failed to activate the malicious theme because it referenced a...
CVE-2026-16231 hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass
hbs is an Express view engine that wraps Handlebars. Its registerAsyncHelper API bypasses Handlebars' automatic HTML escaping: an async helper returns an opaque placeholder during the first render pass, so the double-brace expression escapes only the placeholder, and after rendering hbs substitut...
CVE-2026-16231
hbs , an Express view engine wrapping Handlebars, has a cross-site scripting vulnerability in its registerAsyncHelper API. An async helper returns an opaque placeholder during the first render pass, so Handlebars' double-brace escaping applies only to the placeholder. After rendering, hbs substit...
CLSA-2026-1787070403 TuxCare security update for handlebars (2 CVEs)
TuxCare rebuilt handlebars to address 2 CVEs. Fixed in 2.0.0-tuxcare.5...
EUVD-2026-53371
The render-template component of ember-dynamic-render-template addon/components/render-template.js passes its templateString property directly into Ember/Glimmer's compileTemplate from @ember/template-compilation with no sanitization, allow-listing, or validation of the input. Because...
CLSA-2026-1785117463 TuxCare security update for handlebars (5 CVEs)
TuxCare rebuilt handlebars to address 5 CVEs. Fixed in 3.0.8-tuxcare.3...
CLSA-2026-1784682992 TuxCare security update for handlebars (1 CVE)
TuxCare rebuilt handlebars to address 1 CVE. Fixed in 3.0.8-tuxcare.2...
CLSA-2026-1784596337 TuxCare security update for handlebars (3 CVEs)
TuxCare rebuilt handlebars to address 3 CVEs. Fixed in 3.0.8-tuxcare.1...
CLSA-2026-1782435546 TuxCare security update for handlebars (8 CVEs)
TuxCare rebuilt handlebars to address 8 CVEs. Fixed in 4.7.8-tuxcare.1...
CLSA-2026-1782349135 TuxCare security update for handlebars (8 CVEs)
TuxCare rebuilt handlebars to address 8 CVEs. Fixed in 4.7.7-tuxcare.1...