CVE-2021-3152

creationtimestamp| type| source ---|---|--- 2026-04-22 08:43:03+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-3152.yaml 2026-04-23 21:03:09+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mk6vwthxjx2x...

CVE-2026-1296

creationtimestamp| type| source ---|---|--- 2026-03-16 16:03:52+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-1296.yaml 2026-03-17 21:03:03+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mhbuolm47v2q...

CVE-2025-32257

creationtimestamp| type| source ---|---|--- 2026-02-07 06:32:17+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-32257.yaml 2026-02-11 21:03:09+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3memetafx352k 2026-04-03...

CVE-2021-31324

creationtimestamp| type| source ---|---|--- 2025-01-16 09:29:58+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-31324.yaml 2025-01-20 21:01:59+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad57fo42d...

CVE-2021-27330

creationtimestamp| type| source ---|---|--- 2021-02-25 18:37:52+00:00| seen| https://t.me/cibsecurity/24135 2021-05-30 02:45:41+00:00| seen| https://t.me/pwnwikizhchannel/535 2023-04-27 09:58:59+00:00| confirmed|...

Cross-Site Scripting (XSS)

erubis is vulnerable to cross-site scripting XSS. The single quote character ' is not validated and allows a remote attacker to inject and execute arbitrary Javascript in a user's browser via a template source and a malicious XML document...

CVE-2015-9406

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wpmobileeditionfileread.rb 2019-09-21 00:31:28+00:00| seen| https://t.me/cibsecurity/6931 2025-09-24 10:01:57+00:00| confirmed|...

openstack-heat: Template source URL allows network port scan

An information-leak vulnerability was found in the OpenStack Orchestration heat service. Launching a new stack with a local URL resulted in a detailed error message, allowing an authenticated user to conduct network discovery and reveal the details of internal network services...