668 matches found
EUVD-2025-25310
Malicious code in bioql PyPI...
EUVD-2024-49768
Malicious code in bioql PyPI...
EUVD-2025-6756
Malicious code in bioql PyPI...
EUVD-2024-19910
Malicious code in bioql PyPI...
EUVD-2022-3315
Malicious code in bioql PyPI...
EUVD-2023-25793
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2020-13936
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account...
Linux Distros Unpatched Vulnerability : CVE-2019-17558
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through...
CVE-2025-51991
XWiki through version 17.3.0 is vulnerable to Server-Side Template Injection SSTI in the Administration interface, specifically within the HTTP Meta Info field of the Global Preferences Presentation section. An authenticated administrator can inject crafted Apache Velocity template code, which is...
Improper Neutralization of Special Elements Used in a Template Engine
Overview Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via improper handling of dynamic template rendering in the HTTP Meta Info field of the Global Preferences Presentation section. An attacker can execute arbitrary...
CVE-2025-51991
XWiki through version 17.3.0 is vulnerable to Server-Side Template Injection SSTI in the Administration interface, specifically within the HTTP Meta Info field of the Global Preferences Presentation section. An authenticated administrator can inject crafted Apache Velocity template code, which is...
PT-2025-34072
Name of the Vulnerable Software and Affected Versions: XWiki versions through 17.3.0 Description: XWiki is vulnerable to Server-Side Template Injection SSTI in the Administration interface, specifically within the HTTP Meta Info field of the Global Preferences Presentation section. An authenticat...
CVE-2025-51991
Summary of CVE-2025-51991 (XWiki SSTI) : XWiki up to version 17.3.0 is vulnerable to a Server-Side Template Injection (SSTI) in the Administration interface, specifically the HTTP Meta Info field of Global Preferences Presentation. The root cause is improper handling/validation of Apache Velocity...
CVE-2025-51991
XWiki through version 17.3.0 is vulnerable to Server-Side Template Injection SSTI in the Administration interface, specifically within the HTTP Meta Info field of the Global Preferences Presentation section. An authenticated administrator can inject crafted Apache Velocity template code, which is...
CVE-2025-51991
XWiki through version 17.3.0 is vulnerable to Server-Side Template Injection SSTI in the Administration interface, specifically within the HTTP Meta Info field of the Global Preferences Presentation section. An authenticated administrator can inject crafted Apache Velocity template code, which is...
CVE-2025-51991
XWiki through version 17.3.0 is vulnerable to Server-Side Template Injection SSTI in the Administration interface, specifically within the HTTP Meta Info field of the Global Preferences Presentation section. An authenticated administrator can inject crafted Apache Velocity template code, which is...
Malicious code in quarry_muo0y_838bf_velocity (npm)
The package quarrymuo0y838bfvelocity was found to contain malicious code...
Malicious code in zen_finym_m0bga_velocity (npm)
The package zenfinymm0bgavelocity was found to contain malicious code...