Lucene search
+L

17182 matches found

Kitploit
Kitploit
•added 2026/09/26 6:19 a.m.•12 views

cve-2026-9558-poc

CVE-2026-9558 — Mautic Theme Templates Server-Side Template Injection SSTI to Full Admin Takeover Table of Contents Overview Affected Versions Root Cause Analysis Repository Structure Requirements Usage Expected Output References Disclaimer Overview CVE-2026-9558 is a Server-Side Template Injecti...

9.9CVSS6.3AI score0.00789EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/26 6:00 a.m.•43 views

CVE-2026-84097 WP Review Slider Pro < 12.7.12 - Subscriber+ SQLi via Stored Template Filter

The wp-review-slider-pro WordPress plugin before 12.7.12 does not sanitize a value stored through one of its AJAX handlers, which lacks a capability check, before using it in a SQL statement, allowing any authenticated user, such as a subscriber, to perform SQL injection attacks whose results are...

0.00215EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/26 5:43 a.m.•11 views

WTSRM2

WTSRM2 Esta es una continuación de mi proyecto original WTSRM y la charla. Este proyecto fue reescrito para utilizar C++17 y así crear una plantilla que nos permite cambiar la funcionalidad requerida en tiempo de compilación con facilidad. Está implementado como un archivo de solo cabecera...

6.1AI score
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/26 5:22 a.m.•11 views

CVE-2022-29078

CVE-2022-29078 vulnerabilidad ejs 3.1.6 docker Configuración git clone https://github.com/miko550/CVE-2022-29078.git cd CVE-2022-29078 docker build . -t miko/vuln-ejs docker run -p 49160:8080 -d --name vuln-ejs miko/vuln-ejs Uso http://127.0.0.1:49160/ Explotación En el navegador...

9.8CVSS7.5AI score0.32808EPSS
SaveExploits7References1
Kitploit
Kitploit
•added 2026/09/26 5:10 a.m.•10 views

CVE-2024-7593

CVE-2024-7593 Detection How does this detection method work? This template matches on the following versions, if there is a match then the host is considered vulnerable: - "22.2" - "22.3" - "22.3R2" - "22.5R1" - "22.6R1" - "22.7R1" To prevent producing any FPs it also matches on the below: - type...

9.8CVSS8.6AI score0.99999EPSS
SaveExploits4References2
Kitploit
Kitploit
•added 2026/09/26 3:43 a.m.•11 views

cve-2023-22527

Ejecución de Código Arbitrario en la Memoria de Confluence CVE-2023-22527 es una vulnerabilidad ampliamente conocida que afecta a Atlassian Confluence. La mayoría de los exploits para esta vulnerabilidad utilizan freemarker.template.utility.Execute para ejecutar un comando del sistema operativo,...

10CVSS8.9AI score0.99984EPSS
SaveExploits34References1
Kitploit
Kitploit
•added 2026/09/26 1:33 a.m.•10 views

CVE-2024-51378

CVE-2024-51378 Análisis de la vulnerabilidad CVE-2024-51378, scripts para buscar hosts vulnerables, explotación en modo monohilo y multihilo en Python y nuclei. El uso de los scripts solo está permitido con fines educativos en hosts de prueba. 1-CVE-2024-51378.pdf - archivo principal con...

10CVSS8.7AI score0.94748EPSS
SaveExploits7
Kitploit
Kitploit
•added 2026/09/26 12:07 a.m.•14 views

lodash.template-fixed

lodash.template v4.5.0 El método .template de Lodash exportado como un módulo de Node.js. Instalación Usando npm: $ sudo -H npm i -g npm $ npm i --save lodash.template En Node.js: var template = require'lodash.template'; Consulte la documentación o el código fuente del paquete para más detalles...

6.2AI score
SaveExploits0References1
NVD
NVD
•added 2026/09/25 10:17 p.m.•14 views

CVE-2026-63432

Horilla is an HR and CRM software. From 1.0.0 until 1.6.0 and 2.0.0, the getmailpreview handlers in recruitment/views/actions.py and employee/notinoutdashboard.py render a user-controlled body at /recruitment/get-mail-preview/ and /employee/get-employee-mail-preview with the full request object i...

6.5CVSS0.00315EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/25 9:58 p.m.•6 views

CVE-2026-63432 Horilla: Server-Side Template Injection (SSTI) in Mail Preview Endpoints Allows Authenticated Users to Disclose Password Hashes and Server Metadata

Horilla is an HR and CRM software. From 1.0.0 until 1.6.0 and 2.0.0, the getmailpreview handlers in recruitment/views/actions.py and employee/notinoutdashboard.py render a user-controlled body at /recruitment/get-mail-preview/ and /employee/get-employee-mail-preview with the full request object i...

6.5CVSS6.3AI score
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/25 9:58 p.m.•28 views

CVE-2026-63432 Horilla: Server-Side Template Injection (SSTI) in Mail Preview Endpoints Allows Authenticated Users to Disclose Password Hashes and Server Metadata

Horilla is an HR and CRM software. From 1.0.0 until 1.6.0 and 2.0.0, the getmailpreview handlers in recruitment/views/actions.py and employee/notinoutdashboard.py render a user-controlled body at /recruitment/get-mail-preview/ and /employee/get-employee-mail-preview with the full request object i...

6.5CVSS0.00315EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/25 9:58 p.m.•8 views

CVE-2026-63432

The Horilla HR and CRM software (versions 1.0.0 until 1.6.0 and 2.0.0) contains a Server-Side Template Injection (SSTI) vulnerability. The get_mail_preview handlers in recruitment/views/actions.py and employee/not_in_out_dashboard.py render user-controlled content while including the full request...

6.5CVSS6.3AI score0.00315EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/25 8:17 p.m.•12 views

CVE-2026-100372

ClipBucket v5 before 5.5.3-197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with managetemplateaccess permission can traverse outsi...

8.6CVSS0.01142EPSS
SaveExploits0References6
CVE
CVE
•added 2026/09/25 7:38 p.m.•12 views

CVE-2026-100372

ClipBucket v5 versions prior to 5.5.3-#197 are vulnerable to a path traversal vulnerability within the admin template editor. Authenticated users with manage_template_access permissions can exploit the folder parameter by providing directory traversal sequences to move outside the layout director...

8.6CVSS6.3AI score0.01142EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/09/25 7:38 p.m.•12 views

EUVD-2026-87315

ClipBucket v5 before 5.5.3-197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with managetemplateaccess permission can traverse outsi...

8.6CVSS6.3AI score0.01142EPSS
SaveExploits0References6
Kitploit
Kitploit
•added 2026/09/25 6:30 p.m.•9 views

DEVVORTEX

DEVVORTEX HackTheBox: Devvortex — Resolución de la Máquina Un recorrido técnico exhaustivo que detalla el compromiso de la máquina Devvortex en HackTheBox. Esta ruta demuestra Fuzzing de Subdominios , Enumeración de la API de Joomla , Modificación de Plantillas para el acceso inicial, Extracción ...

7.8CVSS7.7AI score0.00874EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 5:21 p.m.•14 views

cve-2019-17558-apache-solr-rce

Apache Solr RCE CVE-2019-17558 - Write-up de CTF Explotación práctica de una vulnerabilidad de inyección de plantillas Velocity Velocity Template Injection en Apache Solr, evolucionando de una falla en una herramienta automatizada Metasploit a una explotación manual exitosa. Este write-up documen...

7.5CVSS8.2AI score0.98567EPSS
SaveExploits14
Kitploit
Kitploit
•added 2026/09/25 3:35 p.m.•9 views

CVE-2026-33937-for-DarkZeroReturns

POC para CVE-2026-33937 Este es un poc para CVE-2026-33937 que fue creado con IA para explotar la vulnerabilidad Handelbars en la Box DarkZeroRetuns el poc original https://github.com/EQSTLab/CVE-2026-33937/blob/main/exploit.py pero no funciona para esta box específica el poc fue escrito por...

9.8CVSS6.7AI score0.01736EPSS
SaveExploits4References1
Kitploit
Kitploit
•added 2026/09/25 3:22 p.m.•17 views

CVE-2025-68937

CVE-2025-68937 - RCE por Symlink en Plantillas de Gitea/Forgejo Prueba de concepto automatizada para CVE-2025-68937 : salto de directorio mediante el seguimiento de enlaces simbólicos en el procesamiento de repositorios plantilla de Gitea y Forgejo, que conduce a la ejecución remota de código...

9.5CVSS8.5AI score0.00501EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2026/09/25 2:27 p.m.•15 views

CVE-2025-67906

-c0392b?style=flat -orange?style=flat CVE-2025-67906 MISP = 2.5.27 - Cross-Site Scripting Almacenado a través del Motor de Workflow inyección de plantilla doT.js Descubierto porFranck FERMAN Resumen - Causa Raíz - Cadena de Ataque - Estructura - Uso - Remediación - Referencias Resumen de la...

9CVSS6.1AI score0.00329EPSS
SaveExploits1References2
Rows per page
Query Builder