205 matches found
Exploit for CVE-2026-87902
CVE-2026-87902 — PoC: path traversal não autenticado na resolu...
Exploit for CVE-2026-87902
CVE-2026-87902 — Unauthenticated local file inclusion in WordP...
CVE-2026-71249: Improper Neutralization of Input During Web Page Generation
299Ko's public contact form plugin/contact/controllers/ContactController.php, home sets raw POST field values name, firstname, email, message into the page template with no sanitization. The template engine's variable output function common/Template.php, showvar echoes values with no...
CVE-2026-3714 OpenCart Incomplete Fix CVE-2024-36694 template.php save special elements used in a template engine
A vulnerability has been found in OpenCart 4.0.2.3. Affected by this issue is the function Save of the file admin/controller/design/template.php of the component Incomplete Fix CVE-2024-36694. Such manipulation leads to improper neutralization of special elements used in a template engine. The...
CVE-2026-3714: Improper Neutralization of Special Elements Used in a Template Engine
A vulnerability has been found in OpenCart 4.0.2.3. Affected by this issue is the function Save of the file admin/controller/design/template.php of the component Incomplete Fix CVE-2024-36694. Such manipulation leads to improper neutralization of special elements used in a template engine. The...
CVE-2025-15589 MuYuCMS Template Management Template.php delete_dir_file path traversal
A vulnerability was determined in MuYuCMS 2.7. Affected is the function deletedirfile of the file application/admin/controller/Template.php of the component Template Management Page. This manipulation of the argument temn/tp causes path traversal. It is possible to initiate the attack remotely. T...
CVE-2025-13773: Improper Control of Generation of Code
The Print Invoice & Delivery Notes for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.8.0 via the 'WooCommerceDeliveryNotes::update' function. This is due to missing capability check in the 'WooCommerceDeliveryNotes::update' functio...
CVE-2025-61318: Path Traversal: '../filedir'
Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability. This vulnerability stems from the admin/template.php component and the admin/plugin.php component. They fail to perform path verification and dangerous code filtering for deletion parameters, allowing attackers to exploit this feature...
CVE-2025-63889: Out-of-bounds Read
The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file path in a template value...
EUVD-2006-6743
Malware in sbrugna...
EUVD-2017-3197
Malware in sbrugna...
EUVD-2017-3199
Malware in sbrugna...
EUVD-2008-6082
Malware in sbrugna...
EUVD-2006-0655
Malware in sbrugna...
EUVD-2022-5869
Malicious code in bioql PyPI...
EUVD-2023-34692
Malicious code in bioql PyPI...
CVE-2023-0783
A vulnerability was found in EcShop 4.1.5. It has been classified as critical. This affects an unknown part of the file /ecshop/admin/template.php of the component PHP File Handler. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-29405: Unrestricted Upload of File with Dangerous Type
An arbitrary file upload vulnerability in the component /admin/template.php of emlog pro 2.5.0 and pro 2.5. allows attackers to execute arbitrary code via uploading a crafted PHP file...
