Gitea-template-sync-Path-Traversal-Privilege-Escalation-CVE-2026-38526-

Nexus — PoC de Escalada de Privilegios Locales Path traversal en la sincronización de plantillas de Gitea mediante objetos Git falsificados → root Un exploit de prueba de concepto para la escalada de privilegios en la máquina de HackTheBox Nexus. Un servicio systemd propiedad de root sincroniza l...

Atlassian Confluence 8.9.0 < 9.2.24 / 9.3.1 < 10.2.17 (CONFSERVER-104362)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104362 advisory. - Impact: The fix for CVE-2021-23337 https://github.com/advisories/GHSA-35jh-r3h4-6jhm added validation for the variable option in .template but di...

CVE-2026-79316

An improper access control vulnerability exists in x-ui 0.3.2 . An authenticated panel user can modify the xray configuration template via the settings interface and trigger a panel restart. This action causes the xray management gRPC service —which defaults to a loopback binding—to be regenerate...

RHEL 9 : rhc (RHSA-2026:69104)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:69104 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

CVE-2026-52740: Incorrect Authorization

GoCD is a continuous deliver server. From 18.7.0 until 26.1.0, the Get Template Config API compares HTTP method names case-sensitively when selecting authorization filters. A lower-privileged authenticated user can send a request with nonstandard HTTP method capitalization to retrieve a pipeline...

RHEL 10 : rhc (RHSA-2026:69103)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:69103 advisory. rhc is a client tool and daemon that connects the system to Red Hat hosted services enabling system and subscription management. Security...

CVE-2024-23692-EXP

CVE-2024-23692-EXP root@kitploit: bash CVE-2024-23692.sh Nuclei root@kitploit: nuclei -list target.txt -t CVE-2024-23692.yaml -o CVE-2024-23692-result.txt...

CVE-2025-69216

CVE-2025-69216: OpenSTAManager tiene una inyección SQL en la plantilla de impresión Scadenzario Descripción general...

CVE-2026-94047

samanhappy MCPHub (up to version 1.0.32) is affected by an improper privilege management flaw in the Template Import Endpoint , specifically the importTemplate function within src/services/templateService.ts. The vulnerability is remotely exploitable over the network with low complexity and low p...

CVE-2026-94047 samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges management

A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32. The impacted element is the function importTemplate of the file src/services/templateService.ts of the component Template Import Endpoint. The manipulation leads to improper privilege management. Remote exploitation of...

CVE-2025-24893-XWiki-SSTI-RCE

CVE-2025-24893 — XWiki SSTI Ejecución remota de código Resumen...

freemarker_RCE_struts2_s2-061

freemarkerRCEstruts2s2-061 cve-2020-17530 struts2s2-061 freemarkerRCE script de prueba python freemarkerRCEstruts2s2-061.py...

Cartero

Cartero Cartero现在是一个Go CLI，内置无需配置的工作区数据库，取代了旧版依赖MongoDB的运行时。 当前实现提供： 由Cobra和Lip Gloss驱动的精美终端体验 通过cartero serve运行的本地管理Web UI和安全测试页面 默认安全的战役验证和预览命令 位于.cartero/cartero.sqlite的嵌入式SQLite工作区存储 用于模板种子、克隆导入、受众同步、分析导出和交互记录的第一方插件 从CSV、JSON、SARIF和JSONL导入规范化发现 单向旧版Mongo导出迁移到当前工作区 单元测试、CLI测试和一致性测试，带有冒烟测试工作流...

vert-x3__vertx-web_CVE-2019-17640_3-9-3

= Vert.x-Web image:https://travis-ci.org/vert-x3/vertx-web.svg?branch=master?branch=master"Build Status",link="https://travis-ci.org/vert-x3/vertx-web" image:https://img.shields.io/maven-central/v/io.vertx/vertx-web.svg"Maven Central"...

zabbix-template-CVE-2020-1472

zabbix-template-CVE-2020-1472 Plantilla de Zabbix para monitorear eventos del Visor de eventos de Windows relacionados con la vulnerabilidad de elevación de privilegios de Netlogon - CVE-2020-1472. Monitorea los ID de evento 5827, 5828 y 5829...

rails-PoC-CVE-2016-2098

Una prueba de concepto de la vulnerabilidad: CVE-2016-2098 Proyecto universitario creado por @alejandro-marting donde podemos comprobar la vulnerabilidad 2096 Usando: rails 4.2.5.1 la vista tiene un código vulnerable app/views/poc/render1.html.erb !...

CVE-2018-14716

CVE-2018-14716 针对 CVE-2018-14716 的 PoC 漏洞标题：Craft CMS SEOmatic 插件 3.1.4 - 服务器端模板注入 日期：2018-07-20 软件链接：https://github.com/nystudio107/craft-seomatic 漏洞作者：Sebastian Kriesten 0xB455 联系：https://twitter.com/0xB455 CVE：CVE-2018-14716 类别：webapps...

CVE-2020-29254

CVE-2020-29254 TikiWiki 21.2 permite editar plantillas sin el uso de una protección CSRF. ========================== Falsificación de Petición entre Sitios CSRF: TikiWiki 21.2 permite editar plantillas sin el uso de una protección CSRF. Esto podría permitir que un atacante remoto no autenticado...

CVE-2025-24893-EXP

CVE-2025-24893-EXP 受影响版本 xwiki-platform = 5.3-milestone-2, = 16.0.0-rc-1, 16.4.1 16.0.0-rc-1, 16.4.1 POC https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24893.yaml CVE-2025-24893 - XWiki 平台利用 用法: python CVE-2025-24893.py -u -c 免责声明...

CVE-2022-24086

PoC de CVE-2022-24682 ¿Cómo funciona este método de detección? Como se indica en los avisos, las versiones 8.8.x anteriores al parche 30 actualización 1 de 8.8.15 son vulnerables a ataques; la plantilla comprueba las siguientes versiones: root@kitploit: - "8.8" - "8.8.6" - "8.8.7" - "8.8.8" -...