tplmap

Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...

CVE-2018-16763

Fuel CMS 1.4.1 - Ejecución Remota de Código FUEL CMS 1.4.1 permite la evaluación de código PHP a través del parámetro filter de pages/select/ o del parámetro data de preview/. Esto puede provocar una Ejecución Remota de Código sin autenticación previa. Instalación git clone...

CVE-2018-16763_FuelCMS-1.4.1_RCE

CVE-2018-16763 FuelCMS - 1.4.1 - RCE PoC FuelCMS 1.4.1 permite la evaluación de código PHP a través del parámetro filter de pages/select/ o del parámetro data de preview/. Esto puede conducir a una ejecución remota de código sin autenticación previa. Exploit Esto funciona explotando el parámetro...

Langflow-CVE-2025-3248-Multi-target

⚠️ Escáner de Explotación RCE de Langflow CVE-2025-3248 Este escáner basado en Python automatiza la detección de vulnerabilidades de Ejecución Remota de Código RCE sin autenticación en instancias de Langflow a través de CVE-2025-3248. Utiliza un payload de prueba de concepto que abusa del endpoint...

CVE-2026-78844

Resumen javadelight delight-nashorn-sandbox 0.5.5 sufre de Consumo de Recursos No Controlado. El sandbox aplica límites de maxCPUTime inyectando estáticamente comprobaciones de interrupción en los bucles de JavaScript, pero el sandbox no logra deshabilitar la evaluación dinámica de código. Un...

CVE_2018_16763_Proof_of_Concept

CVE-2018-16763 Proof-of-Concept A Proof-of-Concept PoC exploit for CVE-2018-16763 Fuel CMS - Preauthenticated Remote Code Execution. Description This Python 3 program serves as a PoC for the CVE-2018-16763 vulnerability in the Fuel CMS content management system. Specifically, the vulnerability...

CVE-2018-16763

Analizador CVE-2018-16763 CVE-2018-16763 Analyzer es un pequeño proyecto de Python para analizar CVE-2018-16763 contra objetivos FUEL CMS. Se centra en verificar si un objetivo parece vulnerable y en mostrar la salida de comandos de forma más limpia y legible cuando la respuesta de la aplicación ...

THM-Vulnerability_Capstone-CVE-2018-16763

THM-VulnerabilityCapstone-CVE-2018-16763 Un write-up sobre la sala THM Vulnerability Capstone y el script de exploit para CVE-2018-16763. CRÉDITOS No me atribuyo el mérito del descubrimiento de esta vulnerabilidad. Gracias a las siguientes personas. Descubrimiento de la vulnerabilidad: 0xd0ff9 Sa...

exploit_cms_fuel

Fuel CMS 1.4.1 - Exploit de Ejecución Remota de Código RCE Este repositorio contiene una implementación en Python 3 de un exploit para Fuel CMS versión 1.4.1. El script aprovecha CVE-2018-16763 , una vulnerabilidad donde la validación insuficiente de entrada en los parámetros filter y preview...

CVE-2026-82789

An Eval Injection vulnerability (improper neutralization of directives in dynamically evaluated code) exists in CONPROSYS HMI System (CHS) by CONTEC. A low-privilege attacker who can log in to the product may achieve arbitrary code execution , leading to high impact on confidentiality, integrity,...

PT-2026-91093

An improper neutralization of directives in dynamically evaluated code 'Eval Injection' issue exists in CONPROSYS HMI SystemCHS. If exploited, arbitrary code may be executed by an attacker who can log in to the product...

Vulnerabilities in Adobe ColdFusion

Adobe has identified several vulnerabilities in Adobe ColdFusion. These vulnerabilities include a stored Cross-Site Scripting XSS vulnerability, where an attacker with low privileges can inject malicious scripts into form fields, which are then executed in the user’s browser. There is also a...

CVE-2026-85694

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extractasobject that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute...

CVE-2026-54718 Silverstripe Advanced Workflow: Remote code execution via advanced workflow email template

Silverstripe Advanced Workflow is a highly configurable step-based workflow module. Prior to 6.4.5, 7.1.3, and 7.2.1, an attacker with permission to author the advanced workflow email template can place a specially crafted server-side template payload in NotifyUsersWorkflowAction.EmailTemplate...

CVE-2026-54718

Silverstripe Advanced Workflow (the symbiote/silverstripe-advancedworkflow module) is vulnerable to remote code execution prior to versions 6.4.5, 7.1.3, and 7.2.1. An attacker with permission to author the advanced workflow email template can inject a specially crafted server-side template paylo...

PYSEC-2026-2638 FoundationAgents MetaGPT vulnerable to eval injection

A flaw has been found in FoundationAgents MetaGPT up to 0.8.1. This vulnerability affects the function ActionNode.xmlfill of the file metagpt/actions/actionnode.py of the component XML Handler. Executing a manipulation can lead to improper neutralization of directives in dynamically evaluated cod...

PT-2026-57976

Name of the Vulnerable Software and Affected Versions DIRAC versions prior to 8.0.79 DIRAC versions prior to 9.0.22 DIRAC versions prior to 9.1.10 Description An authenticated user can achieve remote code execution on the server due to a flaw in the FileCatalog DatasetManager. The checkDataset...

Malicious code in react-next-vite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286869faf09aec1d62b472e43a7188a1583c5cf8c999d1fb2e116f0b7f5ba8c6 The package impersonates the pino logger README/badges reference pino; module.exports.pino is the middleware while its name is react-next-vite. When ...

PhoenixStorybook: Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground

Summary An unsafe HEEx template generation vulnerability allows any unauthenticated user to execute arbitrary code on the server. The phoenixstorybook playground accepts user-controlled attribute values over WebSocket and interpolates them unsanitized into a HEEx template that is subsequently...

CVE-2026-8832

The WPCode - Insert Headers and Footers + Custom Code Snippets - WordPress Code Manager plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 2.3.5 This is due to the 'wpcode' custom post type being registered without a custom capabilitytype or capability...