OpenCMS 14 & 15 - Cross Site Scripting

Cross-site scripting XSS vulnerability in Alkacon Software Open CMS, affecting versions 14 and 15 of the 'Mercury' template. id: CVE-2023-6379 info: name: OpenCMS 14 & 15 - Cross Site Scripting author: msegoviag severity: medium description: | Cross-site scripting XSS vulnerability in Alkacon...

CVE-2024-6386-WPML-SSTI

Este repositorio no tiene un README...

CLEANSTART-2026-FF43574 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used

CVE-2026-32289 affects multiple packages. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. See references for individual vulnerability details...

SGLang-0.5.9-RCE

SGLang SSTI a RCE PoC — Renderizado de plantillas de chat Jinja2 sin sandbox CVE-2026-5760 Ejecución remota de código mediante inyección de plantillas del lado del servidor SSTI en el endpoint de reranking de SGLang. Un archivo de modelo GGUF malicioso con un tokenizer.chattemplate manipulado log...

CVE-2025-52122

CVE CraftCMS Freeform CraftCMS Freeform contiene una vulnerabilidad SSTI, que resulta en una inyección de código arbitrario para todos los usuarios que tienen acceso a editar un formulario título de envío. Las versiones vulnerables son v5.0.0 test % set form = freeform.form'pentest' % % if form %...

CVE-2025-24893-RCE-PoC

Información Este PoC primero prueba la SSTI y, si funciona, entra en un bucle y te permite ejecutar comandos remotamente. Los comandos exec y shell hacen lo mismo actualmente. Instalación python3 -m pip install requirements.txt Uso Conexión python3 poc.py Ejemplo Con debug establecido en False po...

CVE-2025-66478

1 POST / HTTP/1.1 Host: localhost:3000 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/60.0.3112.113 Safari/537.36 Assetnote/1.0.0 Next-Action: x X-Nextjs-Request-Id: b5dce965 Content-Type: multipart/form-data;...

Backstage: Improper input validation in Confluence to Markdown scaffolder module

Impact Insufficient input validation in the Confluence to Markdown scaffolder module could allow an attacker to influence file write operations during template execution. Exploitation requires a Backstage user to run a template that processes attacker-influenced Confluence content. Patches Patche...

GHSA-75QF-886X-5XF2 Backstage: Improper input validation in Confluence to Markdown scaffolder module

Impact Insufficient input validation in the Confluence to Markdown scaffolder module could allow an attacker to influence file write operations during template execution. Exploitation requires a Backstage user to run a template that processes attacker-influenced Confluence content. Patches Patche...

GHSA-MFVQ-X7VR-RGQG Backstage: Secret-derived values may be exposed in scaffolder task logs

Impact Deployments that configure sensitive scaffolder.defaultEnvironment.secrets and allow an attacker to create or modify Scaffolder templates are affected. A template author could cause secret-derived values used during template iteration to be persisted in task logs, exposing those values to...

CVE-2025-4123-template

CVE-2025-4123-template...

CVE-2021-27905.POC

CVE-2021-27905.POC POC para LFI relacionado con CVE-2021-27905 POC para apache-solr-file-read plantilla de nuclei Uso traverse.sh path Por ejemplo, usando /root como ruta, mostrará el contenido de todos los archivos recursivamente ./traverse.sh /root También es posible recorrer y obtener el...

CVE-2026-87902

CVE-2026-87902 — WordPress Core Path Traversal / LFI / RCE Unauthenticated Local File Inclusion via double-encoded path traversal in WordPress core's page-template resolver, with PEAR-based RCE chain. Vulnerability Details Field| Value ---|--- CVE| CVE-2026-87902 CVSS| 9.2 Critical —...

Detections-CVE-2026-31431

MOVIENDO A: https://github.com/insomnisec/publiccvedetections PARA UNA MEJOR GESTIÓN A LARGO PLAZO DE LAS PUBLICACIONES DE DETECCIÓN ESTE REPOSITORIO SERÁ ELIMINADO EN JUNIO DE 2026 POR FAVOR, USE EL OTRO REPOSITORIO EN EL FUTURO CVE-2026-31431 "Copy Fail" — Paquete de Detección y Respuesta...

DRUPAL-CONTRIB-2026-203

The Inline Formatter Field module allows site builders to template and style entities with a field. This module does not properly protect against template injection when parsing, allowing users to render protected data or execute unsafe Twig commands...

EUVD-2026-93772

LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, .first/.last, negative index, and for-loop iteration...

CrushFTP-SSTI-LFI-Proof-of-Concept

CVE-2024-4040 — CrushFTP SSTI / LFI Prueba de Concepto Solo para uso educativo y de laboratorio autorizado. CS443 Seguridad de Software y Sistemas — entorno Docker local controlado. Resumen de la vulnerabilidad Campo| Detalle ---|--- CVE| CVE-2024-4040 Software afectado| CrushFTP … que el servido...

CVE-2026-107270 Gophish through 0.12.1 Object Takeover via Client-Supplied ID on API Create Endpoints

Gophish through 0.12.1 contains an insecure direct object reference vulnerability that allows authenticated users to take over other users' groups, templates, landing pages and sending profiles. Attackers can supply another user's sequential id in POST requests to /api/groups/, /api/templates/,...

CVE-2026-106559

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper input validation in confluence to markdown scaffolder module. Insufficient input validation in the Confluence to...

EUVD-2026-94372

Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper input validation in confluence to markdown scaffolder module. Insufficient input validation in the Confluence to...