CVE-2026-47727

Trilium (open-source hierarchical note-taking app) versions prior to 0.104.0 are vulnerable to remote code execution via a bypass of its default-on "Safe import" filter. The shareTemplate relation is omitted from the built-in list of dangerous attributes, so it is not disabled on import. An attac...

VMware-CVE-2022-22954

VMware CVE-2022-22954 Workspace ONE Access Freemarker Serverseitige Template-Injection POC für Vmware CVE-2022-22954 Verwenden Sie diese einzeilige GET-Anfrage!! Dadurch wird cat /etc/passwd ausgeführt...

CVE-2025-26865

CVE-2025-26865: Iniezione di Template Lato Server in FreeMarker tramite il plugin "ecommerce" in Apache OfBiz A causa di una regressione tra le versioni 18.12.17 e 18.12.18, la correzione per la scoperta di CVE-2022-25813: Iniezione di Template Lato Server in FreeMarker in Apache OfBiz non è più...

CVE-2022-24442

CVE-2022-24442: FreeMarker Server-Side Template Injection in JetBrains YouTrack Durch Einfügen von schädlichem Inhalt in die Notification-FTL-Dateien kann ein Angreifer SSTI-Angriffe Server-Side Template Injection durchführen, die FreeMarker-exponierte Objekte nutzen können, um Einschränkungen zu...

CVE-2021-46361

CVE-2021-46361: Umgehung der FreeMarker-Einschränkungen in Magnolia CMS Ein Problem im FreeMarker-Filter von Magnolia CMS v6.2.11 und früheren Versionen ermöglicht es Angreifern, Sicherheitsbeschränkungen zu umgehen und über einen manipulierten FreeMarker-Payload beliebigen Code auszuführen...

CrushFTP10-Docker-CVE-2024-4040

CrushFTP 10.0 Docker Deployment vulnerabile a CVE-2024-4040 Questo repository fornisce un Dockerfile per creare un'immagine Docker e distribuire un container Linux con un server CrushFTP vulnerabile alla vulnerabilità di fuga dalla sandbox VFS di CrushFTP CVE-2024-4040. ⚠️ Disclaimer Questo...

CVE-2023-22527

CVE-2023-22527 Questo repository presenta una proof-of-concept della CVE-2023-22527 CVE-2023-22527 | RCE tramite SSTI in Confluence Disclaimer Questo codice è una proof-of-concept della vulnerabilità; non incoraggio nessuno a utilizzarlo su istanze Confluence di cui non si è proprietari. Questo...

CrushFTP-CVE-2024-4040-Proof-of-Concept

Уязвимость CVE-2024-4040 — CrushFTP SSTI / LFI Proof of Concept Только для образовательных целей и авторизованных лабораторных работ. Для модуля CS443 «Безопасность программного обеспечения и систем». Лабораторная работа выполнялась в контролируемой локальной среде Docker. Сводка об уязвимости...

SSTI-Exploit-Detector

SSTI-Exploit-Detector SSTI Exploit Detector ist ein Tool zur Erkennung potenzieller Server-Side Template Injection SSTI -Schwachstellen in Webanwendungen. SSTI-Exploit-Detector Jenderal92 Funktionen Benutzerdefinierte Payload-Datei : Ermöglicht Benutzern, eigene Payloads hinzuzufügen, um...

Blackash-CVE-2025-53833

🚨 CVE-2025-53833 — Критическое ⚠️ SSTI ➜ RCE в LaRecipe версии 2.8.1 📌 Обзор Идентификатор уязвимости : CVE-2025-53833 Затронутый компонент : LaRecipe генератор документации на Laravel Затронутые версии : Все версии до 2.8.1 Тип уязвимости : Server-Side Template Injection SSTI Серьезность :...

CVE-2022-22954-PoC

CVE-2022-22954 PoC VMware Workspace ONE Access and Identity Manager RCE über SSTI. CVE-2022-22954 - PoC SSTI Verwendung: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan |...

CVE-2026-54390

CVE-2026-54390 — Exploração em Massa de SSTI Smarty no JTL Shop Formulário de Contato Pré-Autenticação → Assunto do Email → fetch'string:' → RCE Visão Geral CVE-2026-54390 é uma vulnerabilidade crítica CVSS 9.8 de Injeção de Template do Lado do Servidor sem autenticação no JTL Shop 5.2.0–5.7.1. O...

CVE-2022-22954

CVE-2022-22954 PoC VMware Workspace ONE Access und Identity Manager RCE über SSTI. CVE-2022-22954 - PoC SSTI Verwendung: root@kitploit: CVE-2022-22954.py -h -m SETMODE -i IP -c CMD optional arguments: -h, --help show this help message and exit -m SETMODE, --mode SETMODE Available modes: shodan |...

PAYLOAD-LISTS

Payloads Elenco dei payload: SSTI-injection payloads XXE payloads XSS payloads Server Side Request ForgerySSRF SQL injection payloads Open Redirect payloads NoSQL injection payloads LDAP injection payloads File inclusion payloads Command injection payloads CRLF injection payloads Code injection...

HackTheBox-Facts

HTB Facts — Rédaction complète Difficulté : Medium OS : Linux Mots-clés : Web, MinIO, Camaleon CMS, Contournement de chemin, SSTI, Élévation de privilèges Table des matières 1. Reconnaissance 2. Énumération web — Port 80 3. Découverte de MinIO — Port 54321 4. Camaleon CMS — Accès administrateur 5...

waf-bypass

WAF Bypass Tool WAF Bypass Tool is an open source tool to analyze the security of any WAF for False Positives and False Negatives using predefined and customizable payloads. Check your WAF before an attacker does. WAF Bypass Tool is developed by Nemesida WAF team with the participation of...

CVE-2026-77136 Server-Side Template Injection in extension "powermail" (powermail)

The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, without any sanitization, and renders it. An anonymous, unauthenticated user can submit Fluid template syntax in that field to execute...

pyrocms-ssti-fix

🛡️ إصلاح ثغرة SSTI في PyroCMS إصلاح أمني فوري لـ CVE-2023-29689 - حقن القوالب من جانب الخادم SSTI يؤدي إلى تنفيذ الأوامر عن بعد RCE في PyroCMS 3.9. المشكلة يسمح PyroCMS للمستخدمين الإداريين بتحرير القوالب المخزنة في قاعدة البيانات. بدون آلية عزل Sandboxing، يمكن للمهاجمين الذين لديهم صلاحيات...

Grav-CMS-RCE-Authenticated

Grav CMS Esecuzione di codice remoto Autenticato - CVE-2024-28116 Informazioni Questo codice è un adattamento delrepository GitHub Graver con alcuni miglioramenti basati su questo video. Exploit contro Grav CMS per versioni precedenti alla 1.7.45 basato su vulnerabilità SSTI + RCE, etichettato co...

VMware Workspace ONE Access - Server-Side Template Injection

VMware Workspace ONE Access is susceptible to a remote code execution vulnerability due to a server-side template injection flaw. An unauthenticated attacker with network access could exploit this vulnerability by sending a specially crafted request to a vulnerable VMware Workspace ONE or Identit...