Lucene search
+L

871 matches found

OSV
OSV
added 2024/05/20 8:26 p.m.122 views

GHSA-V45M-HXQP-FWF5 verbb/formie Server-Side Template Injection for variable-enabled settings

Impact Users with access to a form's settings can include malicious Twig code into fields that support Twig. These might be the Submission Title or the Success Message. This code will then be executed upon creating a submission, or rendering the text. This is listed as low-medium severity due to...

4.4CVSS4.6AI score0.00255EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2024/05/20 8:26 p.m.39 views

verbb/formie Server-Side Template Injection for variable-enabled settings

Impact Users with access to a form's settings can include malicious Twig code into fields that support Twig. These might be the Submission Title or the Success Message. This code will then be executed upon creating a submission, or rendering the text. This is listed as low-medium severity due to...

4.4CVSS7.2AI score0.00255EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/20 8:26 p.m.16 views

CVE-2024-35191 verbb/formie Server-Side Template Injection for variable-enabled settings

Formie is a Craft CMS plugin for creating forms. Prior to 2.1.6, users with access to a form's settings can include malicious Twig code into fields that support Twig. These might be the Submission Title or the Success Message. This code will then be executed upon creating a submission, or renderi...

4.4CVSS6.9AI score0.00255EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/05/20 8:26 p.m.44 views

CVE-2024-35191 verbb/formie Server-Side Template Injection for variable-enabled settings

Formie is a Craft CMS plugin for creating forms. Prior to 2.1.6, users with access to a form's settings can include malicious Twig code into fields that support Twig. These might be the Submission Title or the Success Message. This code will then be executed upon creating a submission, or renderi...

4.4CVSS4.7AI score0.00255EPSS
SaveExploits0References2
NVD
NVD
added 2024/05/14 3:38 p.m.26 views

CVE-2024-34359

llama-cpp-python is the Python bindings for llama.cpp. llama-cpp-python depends on class Llama in llama.py to load .gguf llama.cpp or Latency Machine Learning Models. The init constructor built in the Llama takes several parameters to configure the loading and running of the model. Other than NUM...

9.6CVSS9.8AI score0.2842EPSS
SaveExploits1References2
OSV
OSV
added 2024/05/13 2:10 p.m.62 views

GHSA-56XG-WFCC-G829 llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata

Description llama-cpp-python depends on class Llama in llama.py to load .gguf llama.cpp or Latency Machine Learning Models. The init constructor built in the Llama takes several parameters to configure the loading and running of the model. Other than NUMA, LoRa settings, loading tokenizers, and...

9.6CVSS9.2AI score0.2842EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
added 2024/05/13 2:10 p.m.114 views

llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata

Description llama-cpp-python depends on class Llama in llama.py to load .gguf llama.cpp or Latency Machine Learning Models. The init constructor built in the Llama takes several parameters to configure the loading and running of the model. Other than NUMA, LoRa settings, loading tokenizers, and...

9.6CVSS7.3AI score0.2842EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
added 2024/05/10 5:7 p.m.67 views

CVE-2024-34359 llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata

llama-cpp-python is the Python bindings for llama.cpp. llama-cpp-python depends on class Llama in llama.py to load .gguf llama.cpp or Latency Machine Learning Models. The init constructor built in the Llama takes several parameters to configure the loading and running of the model. Other than NUM...

9.6CVSS9.9AI score0.2842EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/05/10 5:7 p.m.32 views

CVE-2024-34359 llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata

llama-cpp-python is the Python bindings for llama.cpp. llama-cpp-python depends on class Llama in llama.py to load .gguf llama.cpp or Latency Machine Learning Models. The init constructor built in the Llama takes several parameters to configure the loading and running of the model. Other than NUM...

9.6CVSS7.9AI score0.2842EPSS
SaveExploits1References2
OSV
OSV
added 2024/05/10 5:7 p.m.46 views

CVE-2024-34359 llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata

llama-cpp-python is the Python bindings for llama.cpp. llama-cpp-python depends on class Llama in llama.py to load .gguf llama.cpp or Latency Machine Learning Models. The init constructor built in the Llama takes several parameters to configure the loading and running of the model. Other than NUM...

9.6CVSS8.6AI score
SaveExploits0References4
CVE
CVE
added 2024/05/10 5:7 p.m.154 views

CVE-2024-34359

CVE-2024-34359 affects llama-cpp-python (Python bindings for llama.cpp). The vulnerability arises when init loads a model’s chat template from the gguf metadata and constructs self.chat_handler via llama_chat_format.Jinja2ChatFormatter.to_chat_handler(), using a sandbox-less Jinja2 Environment. R...

9.6CVSS7.8AI score0.2842EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/05/10 12:0 a.m.16 views

PT-2024-25816

Name of the Vulnerable Software and Affected Versions llama-cpp-python affected versions not specified Description The issue is related to a Server Side Template Injection vulnerability in the llama-cpp-python package, which allows for remote code execution. This is due to the use of...

9.6CVSS9.1AI score0.2842EPSS
SaveExploits1References24
Metasploit
Metasploit
added 2024/05/07 7:55 p.m.341 views

CrushFTP Unauthenticated Arbitrary File Read

This module leverages an unauthenticated server-side template injection vulnerability in CrushFTP use auxiliary/gather/crushftpfilereadcve20244040 msf auxiliarycrushftpfilereadcve20244040 show actions ...actions... msf auxiliarycrushftpfilereadcve20244040 set ACTION msf...

10CVSS8.7AI score0.99539EPSS
SaveExploits22
GithubExploit
GithubExploit
added 2024/04/29 10:21 a.m.422 views

Exploit for Code Injection in Crushftp

CVE-2024-4040-CrushFTP-server CrushFTP is a proprietary multi...

10CVSS10AI score0.99539EPSS
SaveExploits22
OSV
OSV
added 2024/04/26 4:15 a.m.10 views

CVE-2024-32404

Server-Side Template Injection SSTI vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature...

6CVSS6.1AI score0.00797EPSS
SaveExploits0References1
NVD
NVD
added 2024/04/26 4:15 a.m.23 views

CVE-2024-32406

Server-Side Template Injection SSTI vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Batch-Issue Exam Tickets function...

7.5CVSS7.7AI score0.01109EPSS
SaveExploits1References1
NVD
NVD
added 2024/04/26 12:15 a.m.20 views

CVE-2024-32651

changedetection.io is an open source web page change detection, website watcher, restock monitor and notification service. There is a Server Side Template Injection SSTI in Jinja2 that allows Remote Command Execution on the server host. Attackers can run any system command without any restriction...

10CVSS10AI score0.83601EPSS
SaveExploits5References4
Cvelist
Cvelist
added 2024/04/26 12:0 a.m.25 views

CVE-2024-32404

Server-Side Template Injection SSTI vulnerability in inducer relate before v.2024.1, allows remote attackers to execute arbitrary code via a crafted payload to the Markup Sandbox feature...

8.1AI score0.00797EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/26 12:0 a.m.29 views

CVE-2024-32406

Server-Side Template Injection SSTI vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Batch-Issue Exam Tickets function...

8AI score0.01109EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/04/26 12:0 a.m.10 views

CVE-2024-32406

Server-Side Template Injection SSTI vulnerability in inducer relate before v.2024.1 allows a remote attacker to execute arbitrary code via a crafted payload to the Batch-Issue Exam Tickets function...

8.3AI score0.01109EPSS
SaveExploits1References1
Rows per page
Query Builder