[SECURITY] Fedora 35 Update: kiln-0.3.1-3.fc35

A simple static site generator. Features - Simple - Extensible - Gemini support - Atom feeds - Go templates...

CVE-2022-31161

creationtimestamp| type| source ---|---|--- 2022-07-16 00:20:39+00:00| seen| https://t.me/cibsecurity/46374 2025-05-20 07:32:08+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-31161.yaml 2025-05-23 21:02:22+00:00| seen|...

Atlassian Jira 8.14.x < 8.20.3 Template Injection

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.13.15 or 8.14.x prior to 8.20.3. It is, therefore, affected by a vulnerability allowing remote attackers with administrator permissions to execute arbitrary code via Templat...

Atlassian Jira < 8.13.15 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.13.15 or 8.14.x prior to 8.20.3. It is, therefore, affected by multiple vulnerabilities: - A template injection leading to remote code execution in the Email Templates featu...

Atlassian Jira 8.14.x < 8.20.3 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.13.15 or 8.14.x prior to 8.20.3. It is, therefore, affected by multiple vulnerabilities: - A template injection leading to remote code execution in the Email Templates featu...

Atlassian Jira < 8.13.15 Template Injection

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.13.15 or 8.14.x prior to 8.20.3. It is, therefore, affected by a vulnerability allowing remote attackers with administrator permissions to execute arbitrary code via Templat...

Remote Code Execution (RCE)

ldap-account-manager:sid is vulnerable to remote code execution. LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 incorrect regular expressions allow to upload PHP scripts to config/templates/pdf...

Fedora: Security Advisory for golang-github-geertjohan-rice (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Atlassian Jira < 8.13.15 / 8.14.x < 8.20.3 / 8.21.0 (JRASERVER-73072)

The version of Atlassian Jira installed on the remote host is prior to 8.13.15 / 8.14.x 8.20.3 / 8.21.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-73072 advisory. - Template Injection in Email Templates leads to code execution on Jira Service Management Server -...

CVE-2022-0250

creationtimestamp| type| source ---|---|--- 2022-07-04 16:12:29+00:00| seen| https://t.me/cibsecurity/45559 2024-12-02 11:15:10+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-0250.yaml...

[SECURITY] Fedora 36 Update: kiln-0.2.0-4.fc36

A simple static site generator. Features - Simple - Extensible - Gemini support - Atom feeds - Go templates...

GO-2022-0192 Incorrect parsing of nested templates in golang.org/x/net/html

The Parse function can panic on some invalid inputs. For example, the Parse function panics on the input ""...

PT-2022-14839 · Unknown · Getgrav/Grav

Name of the Vulnerable Software and Affected Versions: getgrav/grav versions prior to 1.7.34 Description: The issue concerns Server Side Template Injection via Twig, where Twig should not render dangerous functions by default, such as system. This is related to Code Injection in the GitHub...

DEBIAN-CVE-2022-31086

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 incorrect regular expressions allow to upload PHP scripts to config/templates/pdf. This vulnerability could lead to a Remote Code Execution if the...

UBUNTU-CVE-2022-31086

LDAP Account Manager LAM is a webfrontend for managing entries e.g. users, groups, DHCP settings stored in an LDAP directory. In versions prior to 8.0 incorrect regular expressions allow to upload PHP scripts to config/templates/pdf. This vulnerability could lead to a Remote Code Execution if the...

LDAP Account Manager 代码问题漏洞

LDAP Account Manager is a web front-end for managing entries stored in LDAP directories e.g., users, groups, DHCP settings. file upload vulnerability exists in LDAP Account Manager LAM versions prior to 8.0, which stems from a faulty regular expression that allows PHP scripts to be uploaded to th...

scaffold-helper 安全漏洞

scaffold-helper is able to copy files and folders from a source directory to a destination directory using template styles in template files. scaffold-helper version v1.2.0 has a denial of service vulnerability that can be exploited by attackers to cause a denial of service when copying invalid...

[SECURITY] Fedora 35 Update: python-bottle-0.12.21-2.fc35

Bottle is a fast and simple micro-framework for small web-applications. It offers request dispatching Routes with URL parameter support, Templates, a built-in HTTP Server and adapters for many third party WSGI/HTTP-server and template engines. All in a single file and with no dependencies other...

Malicious code in syndication-templates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d1bc55bcb56f68bef6949a6b60ac49ec1b4039e609d7489b9fdae072db22c3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6391 Malicious code in syndication-templates (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d1bc55bcb56f68bef6949a6b60ac49ec1b4039e609d7489b9fdae072db22c3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...