CVE-2026-77129

The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript conte...

CVE-2026-77129

CVE-2026-77129 is a Server-Side Template Injection (SSTI) in the TYPO3 extension Event management and registration (sf_event_mgt). The extension passes an editor-configurable email subject string directly into a Fluid template source without sanitization. A backend user with edit access to the ev...

EUVD-2026-65346

The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript conte...

CVE-2026-77129 Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)

The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript conte...

CVE-2026-77136 Server-Side Template Injection in extension "powermail" (powermail)

The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, without any sanitization, and renders it. An anonymous, unauthenticated user can submit Fluid template syntax in that field to execute...

EUVD-2026-65340

The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, without any sanitization, and renders it. An anonymous, unauthenticated user can submit Fluid template syntax in that field to execute...

CVE-2026-77136

CVE-2026-77136 is a Server-Side Template Injection (SSTI) in the TYPO3 extension powermail (in2code). The raw value of a form field configured as the sender name is passed directly into a Fluid template without sanitization, allowing an unauthenticated user to inject Fluid template syntax and exe...

TYPO3-EXT-SA-2026-023: Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-023...

TYPO3-EXT-SA-2026-022: Server-Side Template Injection in extension "powermail" (powermail)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-022...

cve-2025-24893-poc

CVE-2025-24893 — XWiki Unauthenticated RCE PoC Proof-of-Concept-Exploit für CVE-2025-24893 , eine kritische Remote Code Execution -Schwachstelle ohne Authentifizierung in XWiki. Dieser Exploit missbraucht eine Groovy-Template-Injection im SolrSearch-Endpunkt, um ohne Authentifizierung beliebige...

pyrocms-ssti-fix

🛡️ إصلاح ثغرة SSTI في PyroCMS إصلاح أمني فوري لـ CVE-2023-29689 - حقن القوالب من جانب الخادم SSTI يؤدي إلى تنفيذ الأوامر عن بعد RCE في PyroCMS 3.9. المشكلة يسمح PyroCMS للمستخدمين الإداريين بتحرير القوالب المخزنة في قاعدة البيانات. بدون آلية عزل Sandboxing، يمكن للمهاجمين الذين لديهم صلاحيات...

CVE-2025-24893-RCE-PoC

Informationen Dieser PoC testet zuerst auf die SSTI und ob sie funktioniert. Er geht dann in eine Schleife und ermöglicht es dir, Befehle remote auszuführen. Die Befehle exec und shell tun derzeit dasselbe. Installation root@kitploit: python3 -m pip install requirements.txt Verwendung Verbinden...

CVE-2022-27665

CVE-2022-27665 Esiste una vulnerabilità di XSS riflesso tramite espressioni di escape della sandbox AngularJS in Progress/IPSwitch WSFTP Server 8.6.0 che può portare all'esecuzione di codice e comandi malevoli sul client a causa di una gestione impropria dell'input fornito dall'utente. Inserendo...

CrushFTP-SSTI-LFI-Proof-of-Concept

CVE-2024-4040 — CrushFTP SSTI / LFI Proof of Concept Nur für Bildungs- und autorisierte Laborzwecke. CS443 Software- und Systemsicherheit — kontrollierte lokale Docker-Umgebung. Schwachstellenübersicht...

cve-2026-9558-poc

CVE-2026-9558 — Iniezione di template lato server SSTI nei template dei temi di Mautic fino alla compromissione totale dell'admin Indice Panoramica Versioni interessate Causa principale Analisi Struttura del repository Requisiti Utilizzo Output previsto Riferimenti Avvertenze Panoramica...

POC-CVE-2026-19626

CVE-2026-19626 — रिपोर्ट जनरेशन में RCE प्रमाणित, गैर-एडमिन स्थिति: CONFIRMED — पूर्ण-Remote, गैर-एडमिन, केवल-REST 6.7.2-14.el9 लैब, 2026-08-21। हथियारबद्ध श्रृंखला poc.py यही करता है: 1. किसी भी सामान्य org उपयोगकर्ता के रूप में login करें 2. name: "=system''" के साथ POST /rest/group —...

CVE-2026-75574

The Grav Email plugin getgrav/grav-plugin-email before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user with only api.access and api.pages.write permissions can place a Twig expression in header.form.process.email.body, publi...

EUVD-2026-65217

The Grav Email plugin getgrav/grav-plugin-email before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user with only api.access and api.pages.write permissions can place a Twig expression in header.form.process.email.body, publi...

CVE-2026-75574 Grav before 4.2.2 Remote Code Execution via Email Twig

The Grav Email plugin getgrav/grav-plugin-email before 4.2.2 renders page-editor-controlled Email action parameters as unsandboxed Twig templates. An authenticated remote user with only api.access and api.pages.write permissions can place a Twig expression in header.form.process.email.body, publi...

CVE-2026-75574

CVE-2026-75574 is a remote code execution vulnerability in the Grav Email plugin (getgrav/grav-plugin-email) versions before 4.2.2 . The root cause is that page-editor-controlled Email action parameters are rendered as unsandboxed Twig templates . An authenticated remote user possessing only api....