Exploit for CVE-2026-87902

wp-ghsa-7hp8-lab Outillage de détection et banc d'essai repro...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...

nuclei-template-cve-2025-31324-check

SAP CVE-2025-31324 Check Overview This template is designed to check the presence of the SAP NetWeaver CVE-2025-31324 vulnerability. This vulnerability allows unauthorized users to upload JSP files through the /developmentserver/metadatauploader endpoint, which can lead to potential remote code...

Detection-script-for-cve-2021-23358

Detection-script-for-cve-2021-23358 Detection script for cve-2021-23358 I have created a Detection script for CVE-2021-23358 , which will detect the vulnerable version of node underscore be it installed as an open-source tool or just the libraries are being used. This script has three features, I...

CVE-2024-38856

nuclei -t CVE-2024-38856.yaml -u https://target...

CVE-2024-32030-Nuclei-Template

CVE-2024-32030 Nuclei Template Description This repository contains a Nuclei template for detecting the CVE-2024-32030 vulnerability. This vulnerability allows for remote code execution via JMX Metrics Collection JNDI Resolution. Vulnerability Details ID: CVE-2024-32030 Name: JMX Metrics Collecti...

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE via SSTI. CVE-2022-22954 - PoC SSTI Usage: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan | file |...

CVE-2024-6648

CVE-2024-6648 Nuclei template for CVE-2024-6648, absolute path traversal at Prestashop ApPage Builder plugin. Usage: root@kitploit: nuclei -u https://vulnerable.site.com -t CVE-2024-6648.yaml...

Blackash-CVE-2025-53833

🚨 CVE-2025-53833 — Critical ⚠️ SSTI ➜ RCE in LaRecipe Versions 2.8.1 📌 Overview Vulnerability ID : CVE-2025-53833 Component Affected : LaRecipe a Laravel-based documentation generator Versions Affected : All versions prior to 2.8.1 Vulnerability Type : Server-Side Template Injection SSTI Severity ...

CVE-2025-31324-NUCLEI

CVE-2025-31324-NUCLEI Nuclei template for cve-2025-31324 SAP Usage: nuclei -u https://victima.com -t cve-2025-31324-validation.yaml Múltiples objetivos Usage: nuclei -l targets.txt -t cve-2025-31324-validation.yaml...

CVE-2026-76802

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST template loading branch does not apply the unsigned code-template signature check before accepting a template that contains both a fuzzing: block and an unsigned code: block. When an operator...

CVE-2026-76804

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the workflow template loading path does not enforce the -file capability gate when resolving file: protocol templates referenced by a workflow. An untrusted unsigned workflow can therefore load a...

Certiception

Certiception Certiception is a honeypot for Active Directory Certificate Services ADCS , designed to trap attackers with a realistic and attractive bait that triggers highly relevant alerts. Developed by the SRLabs Red Team, Certiception creates a vulnerable-looking certificate template in your...

CVE-2021-46362

CVE-2021-46362: FreeMarker Server-Side Template Injection in Magnolia CMS A Server-Side Template Injection SSTI vulnerability in the Registration and Forgotten Password forms of Magnolia v6.2.3 and below allows unauthenticated attackers to execute arbitrary code via a crafted payload entered into...

CVE-2022-40634

CVE-2022-40634: FreeMarker Server-Side Template Injection in CrafterCMS By inserting malicious content in a FTL template, an attacker may perform SSTI Server-Side Template Injection attacks, which can leverage FreeMarker exposed objects to bypass restrictions and obtain RCE Remote Code Execution...

CVE-2026-76805

The vulnerability scanner Nuclei (versions 3.0.0 through 3.10.0 ) is vulnerable to environment variable disclosure due to an incomplete fix for CVE-2026-41645. The flaw exists in the DAST/fuzz payload evaluation path (pkg/fuzz/parts.go), where substituted runtime data can be evaluated more than o...

CVE-2026-76805 Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST/fuzz payload path in pkg/fuzz/parts.go can evaluate substituted runtime data more than once, creating a second evaluation pass that allows response content captured by an internal: true extractor...

CVE-2026-76805 Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the DAST/fuzz payload path in pkg/fuzz/parts.go can evaluate substituted runtime data more than once, creating a second evaluation pass that allows response content captured by an internal: true extractor...

CVE-2025-4123-template

CVE-2025-4123-template...

CVE-2026-76802

The Nuclei vulnerability scanner (versions 3.0.0 through 3.10.0 ) contains a flaw in its DAST template loading branch. When the -dast flag is enabled, the loader fails to enforce cryptographic signature checks on templates containing both a fuzzing: block and an unsigned code: block. This allows ...