422 matches found
Check-CVE-2021-23383
Check-CVE-2021-23383 CVE-2021-23383 악용 조건을 handlebars 라이브러리 버전 평가를 통해 확인합니다...
CVE-2021-23383
CVE-2021-23383 Пакет handlebars версии до 4.7.7 уязвим для Prototype Pollution при выборе определенных параметров компиляции для компиляции шаблонов из ненадежного источника...
CVE-2019-19919
CVE-2019-19919 Уязвимость Handlebars, связанная с неправильной нейтрализацией специальных элементов в выводе, используемом нижестоящим компонентом 'Injection' pip install requests packaging python handlebarsscanner.py pip install requests python handlebarsexploit.py Введите целевой URL: Ожидаемый...
Express-handlebars - Local File Inclusion
Express-handlebars is susceptible to local file inclusion because it mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilities in downstream applications. This potential...
CVE-2026-33937-for-DarkZeroReturns
CVE-2026-33937용 POC 이것은 Box DarkZeroRetuns의 Handelbars 취약점을 악용하기 위해 AI로 제작된 CVE-2026-33937용 PoC입니다. 원본 PoC는 https://github.com/EQSTLab/CVE-2026-33937/blob/main/exploit.py 이지만 이 특정 Box에서는 작동하지 않습니다. 이 PoC는 Chatgpt Sol 5.6이 작성했습니다...
CVE-2021-23369
CVE-2021-23369 Уязвимость Handlebars CVE-2021-23369 pip install requests Введите URL: Описание уязвимости Пакет handlebars версии ниже 4.7.7 уязвим к удаленному выполнению кода RCE при выборе определенных параметров компиляции для компиляции шаблонов из ненадежного источника...
CVE-2026-87123
hbs is an Express view engine wrapper for Handlebars. Version 4.3.0 can crash the Node.js process during output escaping when an async helper, registered with registerAsyncHelper, resolves to an object whose toHTML property is truthy but not callable. Handlebars escapeExpression calls the toHTML...
cve-2026-33937
CVE-2026-33937 - Handlebars RCE エクスプロイト PoC 説明 CVE-2026-33937 は、Handlebars における Abstract Syntax Tree（AST）入力の安全でない処理に起因する、重大なリモートコード実行（RCE）脆弱性です。 この脆弱性により、攻撃者は Handlebars.compile に細工された AST オブジェクトを渡すことで、任意の JavaScript コードを注入できます。 根本原因 Handlebars.compile は以下の両方を受け入れます： テンプレート文字列 事前解析済みの AST オブジェクト...
CVE-2026-29053
이것은 동일한 CVE에 대한 rootxran의 Repo를 재작업한 것입니다 - https://github.com/rootxran/CVE-2026-29053 특정 Ghost CMS 환경을 대상으로 테스트하는 동안, 원래 테마 페이로드에서 치명적인 Handlebars 오류Fatal Handlebars Error가 발생했습니다. CMS가 악성 테마를 활성화하지 못한 이유는 author.hbs 파일 내에서 더 이상 사용되지 않거나 누락된 헬퍼socialurl를 참조했기 때문입니다. 저는 Handlebars 템플릿을 기본 제공되는 호환...
CVE-2026-16231
hbs , an Express view engine wrapping Handlebars, has a cross-site scripting vulnerability in its registerAsyncHelper API. An async helper returns an opaque placeholder during the first render pass, so Handlebars' double-brace escaping applies only to the placeholder. After rendering, hbs substit...
CVE-2026-16231 hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass
hbs is an Express view engine that wraps Handlebars. Its registerAsyncHelper API bypasses Handlebars' automatic HTML escaping: an async helper returns an opaque placeholder during the first render pass, so the double-brace expression escapes only the placeholder, and after rendering hbs substitut...
CLSA-2026-1787070403 TuxCare security update for handlebars (2 CVEs)
TuxCare rebuilt handlebars to address 2 CVEs. Fixed in 2.0.0-tuxcare.5...
EUVD-2026-53371
The render-template component of ember-dynamic-render-template addon/components/render-template.js passes its templateString property directly into Ember/Glimmer's compileTemplate from @ember/template-compilation with no sanitization, allow-listing, or validation of the input. Because...
CLSA-2026-1785117463 TuxCare security update for handlebars (5 CVEs)
TuxCare rebuilt handlebars to address 5 CVEs. Fixed in 3.0.8-tuxcare.3...
CLSA-2026-1784682992 TuxCare security update for handlebars (1 CVE)
TuxCare rebuilt handlebars to address 1 CVE. Fixed in 3.0.8-tuxcare.2...
CLSA-2026-1784596337 TuxCare security update for handlebars (3 CVEs)
TuxCare rebuilt handlebars to address 3 CVEs. Fixed in 3.0.8-tuxcare.1...
CLSA-2026-1782435546 TuxCare security update for handlebars (8 CVEs)
TuxCare rebuilt handlebars to address 8 CVEs. Fixed in 4.7.8-tuxcare.1...
CLSA-2026-1782349135 TuxCare security update for handlebars (8 CVEs)
TuxCare rebuilt handlebars to address 8 CVEs. Fixed in 4.7.7-tuxcare.1...