1062 matches found
EUVD-2023-1774
Malicious code in bioql PyPI...
EUVD-2023-2677
Malicious code in bioql PyPI...
EUVD-2023-2726
Malicious code in bioql PyPI...
EUVD-2024-3501
Malicious code in bioql PyPI...
EUVD-2023-1231
Malicious code in bioql PyPI...
EUVD-2022-1744
Malicious code in bioql PyPI...
EUVD-2022-1894
Malicious code in bioql PyPI...
EUVD-2025-12577
Malicious code in bioql PyPI...
EUVD-2025-18420
Malicious code in bioql PyPI...
CVE-2025-10380
The Advanced Views – Display Posts, Custom Fields, and More plugin for WordPress is vulnerable to Server-Side Template Injection in all versions up to, and including, 3.7.19. This is due to insufficient input sanitization and lack of access control when processing custom Twig templates in the Mod...
CVE-2025-10380 Advanced Views – Display Posts, Custom Fields, and More <= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTI
The Advanced Views – Display Posts, Custom Fields, and More plugin for WordPress is vulnerable to Server-Side Template Injection in all versions up to, and including, 3.7.19. This is due to insufficient input sanitization and lack of access control when processing custom Twig templates in the Mod...
CVE-2025-54815
Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...
CVE-2025-54815
Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...
CVE-2025-54815
Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...
PT-2025-38618
Name of the Vulnerable Software and Affected Versions PPress version 0.0.9 Description PPress is susceptible to a server-side template injection SSTI issue. This allows attackers to execute arbitrary code through specially crafted themes. Recommendations At the moment, there is no information abo...
CVE-2025-54815
Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...
Exploit for Path Traversal in Atlassian Confluence_Server
CVE-2019-3396 CVE-2019-3396 confluence SSTI RCE 🔎 What is...
CVE-2025-9556 CVE-2025-9556
Langchaingo supports the use of jinja2 syntax when parsing prompts, which is in turn parsed using the gonja library v1.5.3. Gonja supports include and extends syntax to read files, which leads to a server side template injection vulnerability within langchaingo, allowing an attacker to insert a...
Langchaingo supports jinja2 and gonja for syntax parsing, allowing for arbitrary file read
Overview LangChainGo, the Go implementation of LangChain, a large language model LLM application building framework, has been discovered to contain an arbitrary file read vulnerability. The vulnerability, tracked as CVE-2025-9556, allows for arbitrary file read through the Gonja template engine...