Nuclei-Template-CVE-2024-50379

Nuclei-Template-CVE-2024-50379 Description This Nuclei template detects Apache Tomcat servers vulnerable to the TOCTOU race condition that allows remote code execution RCE. ⚠ Important note : This template should be used exclusively for educational purposes and in controlled environments with...

CVE-2024-7120-Exploit-by-Dark-07x

Raisecom Devices Command Injection CVE-2024-7120 Proof of concept! Overview A command injection vulnerability has been identified in the RAISECOM Gateway devices, affecting models MSG1200, MSG2100E, MSG2200, and MSG2300. This vulnerability allows remote attackers to execute arbitrary commands on...

Nuclei_CVE-2025-31161_CVE-2025-2825

This repository does not have a README...

pyrocms-ssti-fix

🛡️ PyroCMS SSTI Fix Drop-in security fix for CVE-2023-29689 - Server-Side Template Injection leading to Remote Code Execution in PyroCMS 3.9. The Problem PyroCMS allows admin users to edit templates stored in the database. Without sandboxing, attackers with admin access can inject malicious Twig...

CVE-2019-3396-confluence-poc

CVE-2019-3396-confluence-poc Vulnerability verification txt and template files...

xwiki_solrsearch-rce-exploit

solrsearch-rce-exploit Unauth RCE PoC for XWiki SolrSearch CVE-2025-24893. Command exec + reverse shell. CVE-2025-24893 – XWiki SolrSearch RCE PoC Proof-of-concept for the XWiki SolrSearch template injection leading to unauthenticated remote code execution. Tested against XWiki Debian 15.10.8...

CVE-2017-9805

Test nuclei CVE-2017-9805.yaml - struts2 showcase RCE Build Dockerfile docker build -t cve-2017-9805 . Start and detach container docker run --name cve-2017-9805 -p 127.0.0.1:8080:8080 -dit cve-2017-9805 /bin/bash Login to running container docker exec -it cve-2017-9805 /bin/bash Start tomcat...

CVE-2023-22515

CVE-2023-22515 How does this detection method work? This template looks at the following endpoints: - "BaseURL/dologin.action" - "BaseURL" - "BaseURL/pages" - "BaseURL/confluence" - "BaseURL/wiki" From these endpoints it will extract the version, if the version matches any of the below versions i...

dcsgonefwbsp

dcsgonefwbsp Primeros pasos Para facilitarte el inicio con GitLab, aquí tienes una lista de pasos recomendados a seguir. ¿Ya eres un profesional? Simplemente edita este README.md y hazlo tuyo. ¿Quieres hacerlo fácil? Usa la plantilla al final! Añade tus archivos Crea o sube archivos Añade archivo...

CVE-2019-19781-CitrixRCE

Citrix Unauthorized Remote Code Execution Attacker - CVE-2019-19781 References: https://blog.fox-it.com/2020/07/01/a-second-look-at-cve-2019-19781-citrix-netscaler-adc/ Bypassing: 1 - Deleted / Modified scripts at: /vpn/../vpns/portal/scripts/ 2 - Forward Slash "/" issues after perl commnad...

WordPress Contact Form by Supsystic - Server-Side Template Injection

Contact Form by Supsystic WordPress plugin = 1.7.36 contains a server-side template injection caused by unsandboxed TwigLoaderString and cfsPreFill functionality, letting unauthenticated attackers execute arbitrary code remotely via GET parameters. id: CVE-2026-4257 info: name: WordPress Contact...

Shield Security WP Plugin <= 18.5.9 - Local File Inclusion

The Shield Security Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the renderactiontemplate parameter. This makes it possible for unauthenticated attacker to include and execute PHP fil...

Koha 3.20.1 - Directory Traversal

Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, 3.18.x before 3.18.08, and 3.20.x before 3.20.1 allow remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the templatepath parameter to 1 svc/virtualshelves/search or 2 svc/members/search. id: CVE-2015-4632 info: name:...

Nodejs Squirrelly - Remote Code Execution

Nodejs Squirrelly is susceptible to remote code execution. Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuratio...

CVE-2024-36991

CVE-2024-36991 Nuclei 模板 描述 此仓库包含一个 Nuclei 模板，用于检测 Splunk Enterprise（Windows 版本低于 9.2.2、9.1.5 和 9.0.10）中的路径遍历漏洞。该漏洞允许未经授权访问敏感文件，例如 /etc/passwd。 CVE 详情 CVE ID ：CVE-2024-36991 漏洞类型 ：路径遍历 受影响软件 ：Splunk Enterprise（Windows 版本低于 9.2.2、9.1.5 和 9.0.10） 作者 ：Sardine Web 参考 ： Twitter 作者 使用方法 单次扫描...

stylesmuggler

StyleSmuggler HTTP PoC Private research repository for the HTTP-only reproduction of StyleSmuggler, CVE-2026-75650, against a local Magento Open Source lab. Read the full technical walkthrough in Magento StyleSmuggler RCE: Report Poisoning to Code Execution. The Python PoC performs the complete...

CVE-2021-26084-Nuclei-template

CVE-2021-26084-Nuclei-template This nuclei template is to verify the vulnerability without executing any commands to the target machine...

nuclei_template

This repository does not have a README...

CVE-2021-32819

CVE-2021-32819 CVE-2021-32819 : SquirrellyJS mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options, remote code execution may be triggered in downstream applications. Source...

CVE-2019-3396

CVE-2019-3396 Confluence Widget Connector path traversal CVE-2019-3396 RCE POC POST /rest/tinymce/1/macro/preview HTTP/1.1 Host: x.x.x.x Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 X11; Linux x8664; rv:60.0 Gecko/20100101 Firefox/60.0 Content-Type:...