CVE-2022-29078

CVE-2022-29078 漏洞 ejs 3.1.6 docker 设置 root@kitploit: git clone https://github.com/miko550/CVE-2022-29078.git cd CVE-2022-29078 docker build . -t miko/vuln-ejs docker run -p 49160:8080 -d --name vuln-ejs miko/vuln-ejs 使用 root@kitploit: http://127.0.0.1:49160/ 漏洞利用 在浏览器中 root@kitploit:...

CVE-2024-4040-SSTI-LFI-PoC

CVE-2024-4040 SSTI 및 LFI PoC - 익스플로잇 | CrushFTP CrushFTP의 SSTI Server Side Template Injection 및 LFI Local File Inclusion 취약점에 대한 개념 증명입니다. 특징 CrushFTP 서버의 심각도가 높은 취약점을 SSTI 및 인증 우회를 통해 악용합니다. 이 익스플로잇을 LFI로 승격시킵니다! 이 PoC 익스플로잇은 CrushFTP를 호스팅하는 sFTP 서버 내 취약점 탐지 및 익스플로잇을 자동화하는 목적을 제공합니다. 코드 단계별 설명: ...

CVE-2026-11561

CVE-2026-11561 — Apinizer SSTI / RCE Version Check Infra Nuclei-Vorlage zur Erkennung von Apinizer-Versionen unter 2026.04.6, die anfällig für CVE-2026-11561 Serverseitige Template-Injection, die zu Remote Code Execution führt, CVSS 9.8 sind. Verwendung root@kitploit: echo | nuclei -t...

CVE-2026-38165-SSTI-

CVE-2026-38165 SSTI Velocity Server-Side Template Injection SSTI in XDocReport ermöglicht Remote Code Execution über die Apache Velocity Engine Bug Definition Überblick über die Schwachstelle Server-Side Template Injection SSTI ist eine Web-Sicherheitslücke, die es Angreifern ermöglicht, bösartig...

tplmap

Tplmap Questo progetto non è più mantenuto. Sono felice di unire nuove PR purché non rompano la test suite. Tplmap assiste nello sfruttamento di vulnerabilità di Code Injection e Server-Side Template Injection con una serie di tecniche di escape dalla sandbox per ottenere accesso al sistema...

CVE-2024-6386-WPML-SSTI

Este repositorio nao tem um README...

VMware-CVE-2022-22954

VMware CVE-2022-22954 Workspace ONE Access Freemarker Server-side Template Injection POC per Vmware CVE-2022-22954 Usa questa richiesta GET di una sola riga!! Questo eseguirà cat /etc/passwd...

CVE-2022-22954

CVE-2022-22954 PoC RCE tramite SSTI in VMware Workspace ONE Access e Identity Manager. CVE-2022-22954 - PoC SSTI Uso: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | fil...

SSTImap

SSTImap This project is based on Tplmap. SSTImap is a penetration testing software that can check websites for Code Injection and Server-Side Template Injection vulnerabilities and exploit them, giving access to the operating system itself. This tool was developed to be used as an interactive...

CVE-2022-22954_VMware_PoC

CVE-2022-22954 PoC - VMware Workspace ONE Access Freemarker Server-Side Template Injection Una vulnerabilità, classificata come molto critica, è stata trovata in VMware Workspace ONE Access e Identity Manager. Il componente interessato è Template Handler. Riferimento: https://vuldb.com/?id.196644...

CVE-2023-49964

CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco In Hyland Alfresco Community Edition =7.2.0 wurde ein Problem entdeckt. Durch das Einfügen von schädlichem Inhalt in die Datei folder.get.html.ftl kann ein Angreifer SSTI-Angriffe Server-Side Template Injection durchführen, die...

CVE-2018-14716

CVE-2018-14716 PoC per CVE-2018-14716 Titolo dell'exploit: Craft CMS SEOmatic plugin 3.1.4 - Server-Side Template Injection Data: 2018-07-20 Link del software: https://github.com/nystudio107/craft-seomatic Autore dell'exploit: Sebastian Kriesten 0xB455 Contatto: https://twitter.com/0xB455 CVE:...

SSTI-Exploit-Detector

SSTI-Exploit-Detector SSTI Exploit Detector è uno strumento progettato per rilevare potenziali vulnerabilità di Iniezione di template lato server SSTI nelle applicazioni web. SSTI-Exploit-Detector Jenderal92 Caratteristiche File di payload personalizzato : consente agli utenti di aggiungere i...

CVE-2026-54757

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, Trestle is vulnerable to server-side template injection that can lead to remote code execution. This occurs because the...

CVE-2026-54757 Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data

Compliance-trestle Trestle is a Python SDK and command-line tool for managing OSCAL compliance documents. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, Trestle is vulnerable to server-side template injection that can lead to remote code execution. This occurs because the...

CVE-2026-54757

Compliance-trestle (Trestle) , a Python SDK and CLI for managing OSCAL compliance documents, is vulnerable to server-side template injection (SSTI) leading to remote code execution . The root cause is that the MDCleanInclude and MDSectionInclude Jinja2 tags re-parse untrusted Markdown content as ...

POC_CVE-2025-14700

CVE-2025-14700 PoC für CVE-2025-14700 , eine Server-Side Template Injection SSTI-Schwachstelle in Crafty Controller = 4.6.1. Diese Schwachstelle ermöglicht es authentifizierten Benutzern, durch das Einschleusen bösartiger Jinja2-Vorlagen in die Webhook-Konfiguration Remote-Codeausführung RCE zu...

CVE-2026-77129

CVE-2026-77129 is a Server-Side Template Injection (SSTI) in the TYPO3 extension Event management and registration (sf_event_mgt). The extension passes an editor-configurable email subject string directly into a Fluid template source without sanitization. A backend user with edit access to the ev...

CVE-2026-77129 Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)

The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript conte...

CVE-2026-77136 Server-Side Template Injection in extension "powermail" (powermail)

The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, without any sanitization, and renders it. An anonymous, unauthenticated user can submit Fluid template syntax in that field to execute...