VMware-CVE-2022-22954

should be exactly as above. VMware-CVE-2022-22954 VMware CVE-2022-22954 Workspace ONE Access Freemarker серверная инъекция шаблонов POC для Vmware CVE-2022-22954 Используйте этот однострочный GET-запрос!! Он выполнит cat /etc/passwd...

CVE-2026-49049

Исследование уязвимости CVE-2026-49049: Unauthenticated Arbitrary File Write в JoomShaper Helix3 Joomla Репозиторий содержит материалы, технический анализ и Proof of Concept PoC для критической уязвимости CVE-2026-49049 , обнаруженной в устаревшем фреймворке шаблонов Helix3 от JoomShaper для CMS...

CLEANSTART-2026-GZ31996 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used

Security vulnerability affects the temporal-server package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...

PT-2026-106820

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

PT-2026-106848

NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal session cookies and API tokens of other users by exposing the raw Django HttpRequest object to the Jinja2 template contex...

EUVD-2025-211038

LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via crafted workflow template name...

PT-2026-106715

Name of the Vulnerable Software and Affected Versions Smarty versions prior to 4.5.8 Smarty versions 5.x prior to 5.8.5 Description A code injection flaw exists during multi-component template inheritance where the top-level nocache hash is not restored and remains null. This allows an attacker t...

Linux Distros Unpatched Vulnerability : CVE-2026-105315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function topython of the file haystack/backends/elasticsearchbackend.py of the...

PT-2026-106765

Dell Container Storage Modules, versions prior to 1.18.0, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-67273: Improper Neutralization of Special Elements Used in a Template Engine

Dell Container Storage Modules, versions prior to 1.18.0, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

cachet_2.4.0-dev

CVE-2021-39174 Cachet 2.4.0-dev Un script Python pour CVE-2021-39174 Cachet 2.4.0-dev – divulgation d'informations et RCE via injection de template côté serveur Twig. Pour la RCE, la clé API API KEY de l'utilisateur est nécessaire. Consultez le lien Leave Songs ci-dessous qui explique comment...

EUVD-2026-91720

fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution...

fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

Summary fsspec.implementations.reference.ReferenceFileSystem parses a "references" JSON document Kerchunk format supplied either inline or via a URL. The parser renders fields from this JSON through un-sandboxed jinja2.Template....render... calls in three locations. An attacker who controls the...

GHSA-27VJ-QCQG-25RC fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

Summary fsspec.implementations.reference.ReferenceFileSystem parses a "references" JSON document Kerchunk format supplied either inline or via a URL. The parser renders fields from this JSON through un-sandboxed jinja2.Template....render... calls in three locations. An attacker who controls the...

react2shell-PoC

React2Shell Шаблон Nuclei для обнаружения React2Shell CVE-2025-55182 и CVE-2025-66478...

CVE-2025-49113-nuclei-template

Modèle de détection de vulnérabilité Nuclei - CVE-2025-49113 - Exécution de code à distance post-authentification Roundcube ≤ 1.6.10 Identifiant CVE : CVE-2025-49113 Sévérité : Critique CVSS 10.0 Découvert par : Kirill Firsov FearsOff Date de divulgation : 1er juin 2025 Corrigé dans : Roundcube...

CVE-2019-8331

Eng Описание CVE-2019-8331 — это уязвимость безопасности типа межсайтового скриптинга XSS, обнаруженная в Bootstrap, широко используемой библиотеке JavaScript для разработки веб-сайтов и мобильных приложений. Эта уязвимость возникает из-за того, что Bootstrap неправильно фильтрует данные,...

cve-2024-6387-nuclei-template

Modèle Nuclei pour CVE-2024-6387 Modèle Nuclei pour détecter CVE-2024-6387 regreSSHion par la version du logiciel OpenSSH...

CVE-2022-26923

CVE-2022-26923 Как описано в Tenable: Уязвимость повышения привилегий в службах доменов Active Directory CVSS v3 Base score: 8.8 Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Severity: High Краткое описание: CVE-2022-26923 использует уязвимость в службах сертификатов Active Directory AD CS...

CVE-2026-8037-POC

CVE-2026-8037-POC Inclut la détection des commandes exécutables et un one-click getShell nécessite un service déployé sur le serveur pco.yaml peut être utilisé avec nuclei pour une détection rapide Démarrage rapide Mode interactif python go.py Entrez l'URL cible → sélectionnez la fonction dans le...