CVE-2025-24893-XWiki-SSTI-RCE

CVE-2025-24893 — XWiki SSTI 远程代码执行 概述 字段| 详情 ---|--- CVE| CVE-2025-24893 软件| XWiki 漏洞| 服务端模板注入 SSTI → 远程代码执行 RCE 认证| 不需要 CVSS 评分| 严重 背景| 在 HackTheBox CTF 期间发现 描述 XWiki 暴露了一个 SolrSearch 端点 /xwiki/bin/get/Main/SolrSearch，该端点直接将用户输入渲染到 Groovy 模板引擎中，且未进行任何清理。未认证的攻击者可以通过 text 查询参数注入 Groovy...

CVE-2021-26084

CVE-2021-26084 Alcance de la afectación Versión .jar y en el archivo atlassian-plugin.xml dentro de los archivos JAR de los complementos incluidos. Cada acción contiene al menos un atributo name, que define el nombre de la acción, un atributo class, que define la clase Java que ejecuta la acción,...

Essential-Blocks-4.4.3---Unauthenticated-Local-File-Inclusion

Essential-Blocks-4.4.3---Unauthenticated-Local-File-Inclusion El plugin no impide que atacantes no autenticados sobrescriban variables locales al renderizar plantillas a través de la API REST, lo que puede conducir a ataques de inclusión local de archivos Local File Inclusion. Uso: root@kitploit:...

CVE-2026-92381

A weakness has been identified in PbootCMS up to 3.2.22. This affects the function decodestring of the file apps/admin/controller/content/ContentController.php of the component Template Rendering. This manipulation of the argument Title causes cross site scripting. The attack is possible to be...

EUVD-2026-80820

A weakness has been identified in PbootCMS up to 3.2.22. This affects the function decodestring of the file apps/admin/controller/content/ContentController.php of the component Template Rendering. This manipulation of the argument Title causes cross site scripting. The attack is possible to be...

CVE-2026-92381 PbootCMS Template Rendering ContentController.php decode_string cross site scripting

A weakness has been identified in PbootCMS up to 3.2.22. This affects the function decodestring of the file apps/admin/controller/content/ContentController.php of the component Template Rendering. This manipulation of the argument Title causes cross site scripting. The attack is possible to be...

CVE-2026-92381: Improper Neutralization of Input During Web Page Generation

A weakness has been identified in PbootCMS up to 3.2.22. This affects the function decodestring of the file apps/admin/controller/content/ContentController.php of the component Template Rendering. This manipulation of the argument Title causes cross site scripting. The attack is possible to be...

CVE-2026-90878

A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This manipulation of the argument chattemplate causes resource consumption. The attack can be initiated remotely. The exploit...

CVE-2026-90878

A flaw was found in vllm-project vLLM. A remote attacker could exploit a vulnerability in the Jinja Template Rendering component by manipulating the chattemplate argument. This manipulation leads to excessive resource consumption, potentially causing a Denial of Service DoS condition for the...

CVE-2026-90878

vLLM (vllm-project) versions up to 0.27.1 are affected by a resource consumption vulnerability in the Jinja Template Rendering component of the /v1/chat/completions endpoint. The root cause is manipulation of the chat_template argument, allowing a remote attacker with low privileges to trigger ex...

CVE-2026-90878 vllm-project vLLM Jinja Template Rendering completions resource consumption

A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This manipulation of the argument chattemplate causes resource consumption. The attack can be initiated remotely. The exploit...

EUVD-2026-78268

A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This manipulation of the argument chattemplate causes resource consumption. The attack can be initiated remotely. The exploit...

CVE-2026-90878 vllm-project vLLM Jinja Template Rendering completions resource consumption

A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This manipulation of the argument chattemplate causes resource consumption. The attack can be initiated remotely. The exploit...

CVE-2026-90878 vllm-project vLLM Jinja Template Rendering completions resource consumption

A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This manipulation of the argument chattemplate causes resource consumption. The attack can be initiated remotely. The exploit...

CVE-2026-90878: Uncontrolled Resource Consumption

A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This manipulation of the argument chattemplate causes resource consumption. The attack can be initiated remotely. The exploit...

PT-2026-91857

A vulnerability was determined in vllm-project vLLM up to 0.27.1. This affects an unknown part of the file /v1/chat/completions of the component Jinja Template Rendering. This manipulation of the argument chat template causes resource consumption. The attack can be initiated remotely. The exploit...

SUSE CVE-2026-73505

Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, the setStyle function in src/segments/path.go passed pt.Path, which includes raw folder names, to template.Render, whose function map exposes cmd, so an attacker-controlled directory name...

CVE-2026-19092 Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing

The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while rendering templates, allowing unauthenticated users to invoke arbitrary zero-argument PHP functions and receive their output...

CVE-2026-19092: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The Tutor LMS WordPress plugin before 4.0.6 does not prevent request data from overwriting internal variables while rendering templates, allowing unauthenticated users to invoke arbitrary zero-argument PHP functions and receive their output...

CVE-2026-63308

A flaw was found in Helm. A remote attacker can exploit a denial of service vulnerability by including zero-length byte slices, such as empty files, within Helm chart files. This can trigger an index out of range panic in the Files.Lines template helper, leading to deterministic render failures...