CVE-2026-18592 osCommerce Email Template Configuration EmailController.php EmailController sql injection

A security flaw has been discovered in osCommerce 4.14.63493. Affected by this issue is the function EmailController of the file app/lib/backend/controllers/EmailController.php of the component Email Template Configuration. Performing a manipulation of the argument emailtemplateskey results in sq...

EUVD-2026-52221

A security flaw has been discovered in osCommerce 4.14.63493. Affected by this issue is the function EmailController of the file app/lib/backend/controllers/EmailController.php of the component Email Template Configuration. Performing a manipulation of the argument emailtemplateskey results in sq...

CVE-2026-18592

CVE-2026-18592 affects osCommerce version 4.14.63493, specifically the function EmailController in app/lib/backend/controllers/EmailController.php of the Email Template Configuration component. The issue arises from manipulating the email_templates_key argument, which leads to a SQL injection vul...

CVE-2026-18581

A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the component Jinja Minja Template Parser. Executing a manipulation with the input 9|9| can lead to reachable assertion. The attack requires...

CVE-2026-18581

A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the component Jinja Minja Template Parser. Executing a manipulation with the input 9|9| can lead to reachable assertion. The attack requires...

CVE-2026-18581 ggml-org llama.cpp Jinja Minja Template parser.cpp assertion

A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the component Jinja Minja Template Parser. Executing a manipulation with the input 9|9| can lead to reachable assertion. The attack requires...

CVE-2026-18581 ggml-org llama.cpp Jinja Minja Template parser.cpp assertion

A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the component Jinja Minja Template Parser. Executing a manipulation with the input 9|9| can lead to reachable assertion. The attack requires...

CVE-2026-18581

The CVE-2026-18581 entry concerns ggml-org llama.cpp (e15efe0) and affects the Jinja Minja Template Parser component, specifically the file common/jinja/parser.cpp. The issue arises from manipulating input {{9|9|{}, which can trigger a reachable assertion. Exploitation requires local access, and ...

PT-2026-67151

A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to sandbox issue. It is possible to launch the attack remotel...

PT-2026-67484

A security flaw has been discovered in langgenius dify up to 1.14.2. This issue affects the function jinja2.Template of the file api/core/helper/code executor/jinja2/jinja2 transformer.py of the component Jinja2 Handler. The manipulation results in improper neutralization of special elements used...

CVE-2026-18592: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in osCommerce 4.14.63493. Affected by this issue is the function EmailController of the file app/lib/backend/controllers/EmailController.php of the component Email Template Configuration. Performing a manipulation of the argument emailtemplateskey results in sq...

HashiCorp Consul Template 0.41.4 Sandbox Path Bypass / Information Disclosure

This repository includes details for a HashiCorp Consul Template version 0.41.4 sandbox path bypass information disclosure vulnerability. HashiCorp Consul Template versions 0.41.4 and earlier contain a time-of-check to time-of-use flaw in the file template helper where symlink validation is...

HashiCorp Consul Template 0.42.0 Path Redirection File Overwrite / Information Disclosure

This repository holds details relating to a HashiCorp Consul Template version 0.42.0 path redirection file overwrite vulnerability. HashiCorp Consul Template versions 0.42.0 and earlier contain a path resolution flaw in the writeToFile template helper where operator-supplied output paths are open...

CVE-2026-18632: Improper Neutralization of Special Elements Used in a Template Engine

A security flaw has been discovered in langgenius dify up to 1.14.2. This issue affects the function jinja2.Template of the file api/core/helper/codeexecutor/jinja2/jinja2transformer.py of the component Jinja2 Handler. The manipulation results in improper neutralization of special elements used i...

CVE-2026-48323: Improper Neutralization of Special Elements Used in a Template Engine

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation o...

Linux Distros Unpatched Vulnerability : CVE-2026-18581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the...

PT-2026-67441

OpenEMR through 8.2.0 contains a stored cross-site scripting vulnerability in the patient portal template system that allows authenticated administrators to inject arbitrary HTML and JavaScript by storing malicious payloads through the template save mode, which only filters literal PHP open tags...

CVE-2026-18581: Reachable Assertion

A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the component Jinja Minja Template Parser. Executing a manipulation with the input 9|9| can lead to reachable assertion. The attack requires...

PT-2026-67545

Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description Adobe Campaign Classic ACC contains an issue involving the improper neutralization of special elements used in a template engine. This flaw allows an attacker to execute...

CVE-2026-67612: Improper Neutralization of Input During Web Page Generation

OpenEMR through 8.2.0 contains a stored cross-site scripting vulnerability in the patient portal template system that allows authenticated administrators to inject arbitrary HTML and JavaScript by storing malicious payloads through the template save mode, which only filters literal PHP open tags...