1458 matches found
CVE-2025-60355
The zhangyd-c OneBlog Java blog (versions v2.3.9 and before ) is vulnerable to Server-Side Template Injection (SSTI) via FreeMarker templates . This vulnerability occurs due to the improper neutralization of special elements used in the template engine, which can allow an attacker to inject malic...
Uptime Kuma Server-side Template Injection (SSTI) in Notification Templates Allows Arbitrary File Read
Summary In some Notification types e.g., Webhook, Telegram, the send function allows user-controlled renderTemplate input. This leads to a Server-side Template Injection SSTI vulnerability that can be exploited to read arbitrary files from the server. Details The root cause is how Uptime Kuma...
CVE-2025-62416
Bagisto is an open source laravel eCommerce platform. Bagisto v2.3.7 is vulnerable to Server-Side Template Injection SSTI due to unsanitized user input being processed by the server-side templating engine when rendering product descriptions. This allows an attacker with product creation privilege...
bagisto has Server Side Template Injection (SSTI) in Product Description
Summary Bagisto v2.3.7 is vulnerable to Server-Side Template Injection SSTI due to unsanitized user input being processed by the server-side templating engine when rendering product descriptions. This allows an attacker with product creation privileges to inject arbitrary template expressions tha...
GHSA-527Q-4WQV-G9WJ bagisto has Server Side Template Injection (SSTI) in Product Description
Summary Bagisto v2.3.7 is vulnerable to Server-Side Template Injection SSTI due to unsanitized user input being processed by the server-side templating engine when rendering product descriptions. This allows an attacker with product creation privileges to inject arbitrary template expressions tha...
CVE-2025-62416
Bagisto is an open source laravel eCommerce platform. Bagisto v2.3.7 is vulnerable to Server-Side Template Injection SSTI due to unsanitized user input being processed by the server-side templating engine when rendering product descriptions. This allows an attacker with product creation privilege...
CVE-2025-62416: Improper Control of Generation of Code
Bagisto is an open source laravel eCommerce platform. Bagisto v2.3.7 is vulnerable to Server-Side Template Injection SSTI due to unsanitized user input being processed by the server-side templating engine when rendering product descriptions. This allows an attacker with product creation privilege...
EUVD-2020-18597
Malware in sbrugna...
EUVD-2021-0204
Malware in sbrugna...
EUVD-2020-1509
Malware in sbrugna...
EUVD-2019-2143
Malware in sbrugna...
EUVD-2021-1261
Malware in sbrugna...
EUVD-2019-6057
Malware in sbrugna...
EUVD-2020-0435
Malware in sbrugna...
EUVD-2020-0372
Malware in sbrugna...
EUVD-2021-12653
Malware in sbrugna...
EUVD-2018-0807
Malware in sbrugna...
EUVD-2020-0549
Malware in sbrugna...