CVE-2026-29053

Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can execute arbitrary code on the server running Ghost. This issue has been patched in version 6.19.1...

CVE-2026-29053

Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can execute arbitrary code on the server running Ghost. This issue has been patched in version 6.19.1...

CVE-2026-29053

Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically crafted malicious themes can execute arbitrary code on the server running Ghost. This issue has been patched in version 6.19.1...

EUVD-2025-30248

Malicious code in bioql PyPI...

CVE-2025-54815

Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...

CVE-2025-54815

Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...

CVE-2025-54815

Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...

PT-2025-38618

Name of the Vulnerable Software and Affected Versions PPress version 0.0.9 Description PPress is susceptible to a server-side template injection SSTI issue. This allows attackers to execute arbitrary code through specially crafted themes. Recommendations At the moment, there is no information abo...

CVE-2025-54815

CVE-2025-54815 is a server‑side template injection (SSTI) vulnerability in PPress 0.0.9 (beta). The affected component is the template rendering used by themes, with the underlying issue described as SSTI that enables arbitrary code execution. Public references within the provided documents confi...

CVE-2025-54815

Server-side template injection SSTI vulnerability in PPress 0.0.9 allows attackers to execute arbitrary code via crafted themes...

CVE-2015-0856

daemon/Greeter.cpp in sddm before 0.13.0 does not properly disable the KDE crash handler, which allows local users to gain privileges by crashing a greeter when using certain themes, as demonstrated by the plasma-workspace breeze theme...