14866 matches found
CVE-2024-9149
CVE-2024-9149 describes an SQL injection vulnerability in Wind Media E-Commerce Website Template, affecting versions before v1.5. The issue arises from improper neutralization of special elements in SQL commands within the template’s code. Practical impact as stated: high confidentiality impact a...
Malicious code in v1ue-custom-widget-template (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3f7e56b04ae3ca44fba371adba340a3933b9fb3e7899bc2da0a2c868373970b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Wind Media E-Commerce Website Template SQL注入漏洞
Wind Media E-Commerce Website Template is an e-commerce template from Wind Media, Inc. A SQL injection vulnerability exists in Wind Media E-Commerce Website Template versions prior to v1.5, which stems from susceptibility to SQL injection attacks...
GO-2025-3477 S3-Proxy allows Reflected Cross-site Scripting (XSS) in template implementation in github.com/oxyno-zeta/s3-proxy
S3-Proxy allows Reflected Cross-site Scripting XSS in template implementation in github.com/oxyno-zeta/s3-proxy...
Malicious code in upm-template-utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1909 Malicious code in orderly-js-sdk-cra-template (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in orderly-js-sdk-cra-template (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in api-nodejs-template (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1726 Malicious code in api-nodejs-template (npm)
--- -= Per source details. Do not edit below this line.=-...
OneBlog Template Injection Vulnerability
OneBlog is a Java blog. OneBlog suffers from a template injection vulnerability, no details of the vulnerability are provided at this time...
GHSA-P75G-CXFJ-7WRX Pebble has Arbitrary Local File Inclusion (LFI) Vulnerability via `include` macro
Summary If untrusted user input is used to dynamically create a PebbleTemplate with the method PebbleEnginegetLiteralTemplate, then an attacker can include arbitrary local files from the file system into the generated template, leaking potentially sensitive information into the output of...
Pebble has Arbitrary Local File Inclusion (LFI) Vulnerability via `include` macro
Summary If untrusted user input is used to dynamically create a PebbleTemplate with the method PebbleEnginegetLiteralTemplate, then an attacker can include arbitrary local files from the file system into the generated template, leaking potentially sensitive information into the output of...
PT-2025-9135 · Pwndoc · Pwndoc
Name of the Vulnerable Software and Affected Versions: PwnDoc versions prior to 1.2.0 Description: The issue concerns the backup restore functionality, which allows an administrator to import raw data into the database, including Path Traversal ../ sequences. This is problematic for the template...
CVE-2025-1743
creationtimestamp| type| source ---|---|--- 2025-02-27 20:56:15+00:00| seen| https://t.me/cvedetector/19070 2025-05-15 07:39:46+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-1743.yaml 2025-05-15 21:02:29+00:00| seen|...
CVE-2024-13217
The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.11 via the 'expireddata' and 'buildcontent' functions. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract...
CVE-2024-13217
CVE-2024-13217 affects the Jeg Elementor Kit WordPress plugin. The vulnerability arises from the expired_data and build_content functions, enabling authenticated attackers with Contributor+ (and above) to exfiltrate sensitive template data (private, pending, scheduled, and drafts). The issue is d...
SUSE CVE-2025-26791
DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting mXSS...
PT-2025-8932 · WordPress · Jeg Elementor Kit
Name of the Vulnerable Software and Affected Versions: Jeg Elementor Kit plugin for WordPress versions up to, and including, 2.6.11 Description: The issue allows authenticated attackers with Contributor-level access and above to extract sensitive private, pending, scheduled, and draft template da...
CVE-2025-27137
Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the SYSTEMCONFIGURATION permission to customize notification templates. Templates are evaluated using the Pebble template engine...
