Lucene search
+L

4 matches found

Kitploit
Kitploit
added 2026/08/25 10:41 p.m.3 views

lodash.template-fixed

lodash.template v4.5.0 O método .template do Lodash exportado como um módulo Node.js. Instalação Usando npm: root@kitploit: $ sudo -H npm i -g npm $ npm i --save lodash.template No Node.js: root@kitploit: var template = require'lodash.template'; Consulte a documentação ou o código-fonte do pacote...

5.3AI score
SaveExploits0References1
EUVD
EUVD
added 2026/04/01 3:31 a.m.11 views

EUVD-2025-209156

XenForo before 2.3.7 does not properly restrict methods callable from within templates. A loose prefix match was used instead of a stricter first-word match for methods accessible through callbacks and variable method calls in templates, potentially allowing unauthorized method invocations...

9.8CVSS5.8AI score0.00333EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/01 12:30 a.m.5 views

CVE-2025-71281

XenForo before 2.3.7 does not properly restrict methods callable from within templates. A loose prefix match was used instead of a stricter first-word match for methods accessible through callbacks and variable method calls in templates, potentially allowing unauthorized method invocations...

8.8CVSS5.8AI score0.00333EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2019/04/22 4:29 p.m.10 views

PYSEC-2019-155

python-dbusmock before version 0.15.1 AddTemplate D-Bus method call or DBusTestCase.spawnservertemplate method could be tricked into executing malicious code if an attacker supplies a .pyc file...

9.3CVSS7.2AI score0.01831EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder