Lucene search
+L

4 matches found

Kitploit
Kitploit
added 2026/09/19 12:07 a.m.13 views

lodash.template-fixed

lodash.template v4.5.0 El método .template de Lodash exportado como un módulo de Node.js. Instalación Usando npm: root@kitploit: $ sudo -H npm i -g npm $ npm i --save lodash.template En Node.js: root@kitploit: var template = require'lodash.template'; Consulte la documentación o el código fuente d...

6AI score
SaveExploits0References1
EUVD
EUVD
added 2026/04/01 3:31 a.m.14 views

EUVD-2025-209156

XenForo before 2.3.7 does not properly restrict methods callable from within templates. A loose prefix match was used instead of a stricter first-word match for methods accessible through callbacks and variable method calls in templates, potentially allowing unauthorized method invocations...

9.8CVSS5.8AI score0.00333EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/04/01 12:30 a.m.6 views

CVE-2025-71281

XenForo before 2.3.7 does not properly restrict methods callable from within templates. A loose prefix match was used instead of a stricter first-word match for methods accessible through callbacks and variable method calls in templates, potentially allowing unauthorized method invocations...

8.8CVSS5.8AI score0.00333EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2019/04/22 4:29 p.m.11 views

PYSEC-2019-155

python-dbusmock before version 0.15.1 AddTemplate D-Bus method call or DBusTestCase.spawnservertemplate method could be tricked into executing malicious code if an attacker supplies a .pyc file...

9.3CVSS7.2AI score0.01831EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder