CVE-2026-107570 Use of Out-of-range Pointer Offset in mutt

heap OOB write in convertfilefromto via a crafted Content-Type header allows attacker to OOB write when email is used as a template...

CVE-2025-24367

CVE-2025-24367 - Cacti Authenticated Graph Template RCE Usage & Safety Important — Read this first: This repository and exploit.py are provided for educational and research purposes only. Do not use this code against systems, networks, or services for which you do not have explicit, written...

auth-bypass-CVE-2025-40554

CVE-2025-40554 – SolarWinds Web Help Desk Auth Bypass PoC shodan Query http.favicon.hash:"1895809524" Nuclei nuclei -u https://TARGET:8443 -t CVE-2025-40554.yaml nuclei -l listtarget.txt -t CVE-2025-40554.yaml pip install -r requirements.txt Usage Single target bypass + login, default...

CVE-2026-12227

CVE-2026-12227 — Visual Composer Website Builder Unauthenticated LFI Python 3 PoC for CVE-2026-12227 Wordfence: Local File Inclusion via the vcv-template query parameter in Visual Composer Website Builder visualcomposer on wordpress.org. | ---|--- Platform| WordPress plugin Component| Visual...

CVE-2026-89191

Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store malicious scripts that execute in the...

CVE-2022-22954-Testi

CVE-2022-22954-Testing Testing the CVE-2022-22954 Vulnerability VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-side template injection. A malicious actor with network access can trigger a server-side template injection that may result ...

EUVD-2026-94804

Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store malicious scripts that execute in the...

CVE-2026-89191 Stored Cross-Site Scripting in SQLView KRIS

Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store malicious scripts that execute in the...

CVE-2026-89191 Stored Cross-Site Scripting in SQLView KRIS

Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store malicious scripts that execute in the...

CVE-2026-89191

SQLView KRIS is vulnerable to a Stored Cross-Site Scripting (XSS) flaw within its Workflow Template feature. The root cause is the lack of server-side sanitisation for the "template name" field, which is subsequently rendered in "onclick" attributes on the main dashboard. An attacker with adminis...

CVE-2025-31324-NUCLEI

CVE-2025-31324-NUCLEI Nuclei template for cve-2025-31324 SAP Usage: nuclei -u https://victima.com -t cve-2025-31324-validation.yaml Múltiples objetivos Usage: nuclei -l targets.txt -t cve-2025-31324-validation.yaml...

CVE-2025-47916

CVE-2025-47916 - Invision Community Remote Code Execution RCE Vulnerability About This repository provides a proof‑of‑concept description for CVE‑2025‑47916 , a Remote Code Execution vulnerability affecting Invision Community versions 5.0.0 through 5.0.6. The issue stems from improper handling of...

Rejetto-HFS-2.x-RCE-CVE-2024-23692

An unauth SSTI in the Rejetto HTTP File Server HFS. Original finder PoC: https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/ Tested against versions: 2.4.0 RC7, 2.3m Example usage: msf6 use exploit/windows/http/rejettohfsrcecve202423692 No payload configured, defaulting to...

CVE-2026-31857

CVE-2026-31857: Craft CMS control panel RCE CVE-2026-31857 is a remote code execution issue in Craft CMS relational condition rules. BaseElementSelectConditionRule::getElementIds renders user-controlled input as an unsandboxed Twig template. An authenticated Control Panel user can submit a crafte...

CLEANSTART-2026-FF43574 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used

CVE-2026-32289 affects multiple packages. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. See references for individual vulnerability details...

PT-2026-107893

Name of the Vulnerable Software and Affected Versions mutt versions prior to 2.4.2-2.1 Description A heap out-of-bounds write occurs in the convert file from to function when an email is used as a template. An attacker can trigger this issue by providing a crafted Content-Type header...

VulnCheck KEV: CVE-2026-12227

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the vcv-template parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

openSUSE 16 Security Update : python-fsspec (openSUSE-SU-2026:22028-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:22028-1 advisory. Changes in python-fsspec: - CVE-2026-104851: python-fsspec: remote code execution via server-side template injection in ReferenceFileSystem bsc1284173...

PT-2026-108320

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A trusted template author may have written a template where the yield keyword is not correctly escaped. This issue involves the improper handling of keyword...

PT-2026-108319

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A flaw exists where the context tracking state is not properly reset when a JavaScript template literal contains consecutive expressions. This failure to reset...