CVE-2025-1743

creationtimestamp| type| source ---|---|--- 2025-02-27 20:56:15+00:00| seen| https://t.me/cvedetector/19070 2025-05-15 07:39:46+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-1743.yaml 2025-05-15 21:02:29+00:00| seen|...

CVE-2024-13217

The Jeg Elementor Kit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.11 via the 'expireddata' and 'buildcontent' functions. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract...

CVE-2024-13217

CVE-2024-13217 affects the Jeg Elementor Kit WordPress plugin. The vulnerability arises from the expired_data and build_content functions, enabling authenticated attackers with Contributor+ (and above) to exfiltrate sensitive template data (private, pending, scheduled, and drafts). The issue is d...

SUSE CVE-2025-26791

DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting mXSS...

PT-2025-8932 · WordPress · Jeg Elementor Kit

Name of the Vulnerable Software and Affected Versions: Jeg Elementor Kit plugin for WordPress versions up to, and including, 2.6.11 Description: The issue allows authenticated attackers with Contributor-level access and above to extract sensitive private, pending, scheduled, and draft template da...

CVE-2025-27137

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the SYSTEMCONFIGURATION permission to customize notification templates. Templates are evaluated using the Pebble template engine...

CVE-2025-25796

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component admintemplate.php...

CVE-2025-25796

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component admintemplate.php...

CVE-2024-12737

creationtimestamp| type| source ---|---|--- 2025-02-26 06:25:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5471 2026-02-11 14:53:32+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12737.yaml 2026-02-12 21:03:16+00:00| seen|...

CVE-2024-12878

creationtimestamp| type| source ---|---|--- 2025-02-26 06:25:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5470 2026-02-11 12:41:17+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-12878.yaml 2026-02-12...

CVE-2024-13628

creationtimestamp| type| source ---|---|--- 2025-02-26 06:25:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5466 2026-02-07 03:41:56+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13628.yaml...

CVE-2024-13630

creationtimestamp| type| source ---|---|--- 2025-02-26 06:25:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5464 2026-02-07 03:40:08+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-13630.yaml 2026-02-11 21:03:06+00:00| seen|...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v13.3, which stems from a Remote Code Execution RCE issue in the component admintemplate.php...

CVE-2025-25796

SeaCMS v13.3 is affected by a remote code execution (RCE) flaw in the admin_template.php component. The vulnerability is documented across multiple sources as CVE-2025-25796. The available descriptions consistently identify SeaCMS 13.3 and the admin_template.php module as the entry point for the ...

jinja2: Jinja has a sandbox breakout through malicious filenames

A flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja's sandbox being used. An attacker needs to be able to control both the filename and the contents o...

Security Bulletin: IBM Maximo Application Suite, IBM Maximo Application Suite - IoT Component and IBM Truststore Manager uses jinja2-3.1.4-py3-none-any.whl which is vulnerable to CVE-2024-56326, CVE-2024-56201

Summary IBM Maximo Application Suite, IBM Maximo Application Suite - IoT Component and IBM Truststore Manager uses jinja2-3.1.4-py3-none-any.whl which is vulnerable to CVE-2024-56326, CVE-2024-56201. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability...

ai.djl.timeseries:timeseries (>=0.19.0, <=0.36.0), cc.akkaha:pea-dubbo_2.12 (>=0.1.5, <=0.7.0) +629 more potentially affected by CVE-2025-1686 via io.pebbletemplates:pebble (>=2.5.0, <=4.1.2)

io.pebbletemplates:pebble MAVEN version =2.5.0, =0.19.0, =0.1.5, =0.3.0, =0.1.0, =2.5.0, =2.5.0, =4.1.0, =16.5.0, =16.6.0 and more Source cves: CVE-2025-1686 Source advisory: SNYK:JAVA-IOPEBBLETEMPLATES-8745594...

CVE-2025-27137

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the SYSTEMCONFIGURATION permission to customize notification templates. Templates are evaluated using the Pebble template engine...

CVE-2025-27137 Dependency-Track vulnerable to local file inclusion via custom notification templates

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the SYSTEMCONFIGURATION permission to customize notification templates. Templates are evaluated using the Pebble template engine...

CVE-2025-27137 Dependency-Track vulnerable to local file inclusion via custom notification templates

Dependency-Track is a component analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track allows users with the SYSTEMCONFIGURATION permission to customize notification templates. Templates are evaluated using the Pebble template engine...