CVE-2026-31857

CVE-2026-31857: RCE в панели управления Craft CMS CVE-2026-31857 — это уязвимость удалённого выполнения кода в правилах реляционных условий Craft CMS. BaseElementSelectConditionRule::getElementIds отображает контролируемый пользователем ввод как Twig-шаблон без песочницы. Аутентифицированный...

CVE-2024-6387-template

CVE-2024-6387 Modèle Nuclei Vérificateur rapide regreSSHion basé sur la version du logiciel pour nuclei CVE-2024-6387. Dorks FOFA Lien🔗: https://en.fofa.info/result?qbase64=YXBwPSJPcGVuU1NIIg%3D%3D Requête : app="OpenSSH" Netlas Lien🔗:...

CVE-2024-32651-changedetection-RCE

CVE-2024-32651 changedetection 0.45.20 - Exécution de code à distance RCE Exploit d'injection de modèles côté serveur !! 1. Titre Exécution de code à distance via une injection de modèles côté serveur SSTI dans une application web vulnérable 2. Description Cet exploit cible une application web...

CVE-2025-52914

CVE-2025-52914 Как работает этот метод обнаружения? Версии извлекаются из целевых хостов, а именно из SVRVER HTML-ответа в теле, а затем сопоставляются с версиями до 9.3.1 и версиями от 10.0.26 до 10.1.101 включительно. Как запустить этот скрипт? 1. Загрузите Nuclei отсюда 2. Скопируйте шаблон на...

CVE-2024-57378

CVE-2024-57378 Comment fonctionne cette méthode de détection ? Ce template HTTP Nuclei vérifie une URL cible et sa page /app/login pour l'interface web Wazuh, extrait la valeur wazuhVersion avec une expression régulière, et confirme que la page est accessible statut 200 et qu'il s'agit bien d'une...

CVE-2025-6440

CVE-2025-6440 nuclei-шаблон для CVE-2025-6440 БЕТА-ВЕРСИЯ, будет обновляться...

CVE-2025-24367

CVE-2025-24367 - RCE via le modèle de graphique authentifié de Cacti Utilisation et Sécurité Important — Lisez ceci en premier : Ce dépôt et exploit.py sont fournis uniquement à des fins éducatives et de recherche. N'utilisez pas ce code contre des systèmes, réseaux ou services pour lesquels vous...

auth-bypass-CVE-2025-40554

CVE-2025-40554 – SolarWinds Web Help Desk Обход аутентификации PoC Shodan запрос http.favicon.hash:"1895809524" Nuclei nuclei -u https://TARGET:8443 -t CVE-2025-40554.yaml nuclei -l listtarget.txt -t CVE-2025-40554.yaml pip install -r requirements.txt Использование Одиночная цель обход + вход, по...

CVE-2026-12227

CVE-2026-12227 — Неаутентифицированный LFI в Visual Composer Website Builder Python 3 PoC для CVE-2026-12227 Wordfence: Local File Inclusion через параметр запроса vcv-template в Visual Composer Website Builder visualcomposer на wordpress.org. | ---|--- Платформа| Плагин WordPress Компонент| Visu...

CVE-2025-47916

CVE-2025-47916 - Vulnérabilité d'exécution de code à distance RCE dans Invision Community À propos Ce dépôt fournit une description de preuve de concept pour CVE‑2025‑47916 , une vulnérabilité d'exécution de code à distance affectant les versions 5.0.0 à 5.0.6 d'Invision Community. Le problème...

Rejetto-HFS-2.x-RCE-CVE-2024-23692

Rejetto HTTP File ServerHFS의 인증되지 않은 SSTI 취약점입니다. 최초 발견자 PoC: https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/ 테스트된 버전: 2.4.0 RC7, 2.3m 사용 예시: msf6 use exploit/windows/http/rejettohfsrcecve202423692 No payload configured, defaulting to...

CVE-2026-103540 formtools.org Form Tools Client Settings Clients.class.php updateClientSettingsTab special elements in template engine

A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1. This vulnerability affects the function Clients::updateClientSettingsTab of the file global/code/Clients.class.php of the component Client Settings. The manipulation of the argument pagetitles leads to improper...

EUVD-2026-90497

A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1. This vulnerability affects the function Clients::updateClientSettingsTab of the file global/code/Clients.class.php of the component Client Settings. The manipulation of the argument pagetitles leads to improper...

CVE-2026-103540 formtools.org Form Tools Client Settings Clients.class.php updateClientSettingsTab special elements in template engine

A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1. This vulnerability affects the function Clients::updateClientSettingsTab of the file global/code/Clients.class.php of the component Client Settings. The manipulation of the argument pagetitles leads to improper...

CVE-2024-6386-WPML-SSTI

Ce depot n’a pas de fichier README...

CLEANSTART-2026-BX15476 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used

CVE-2026-32289 affects multiple packages. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. See references for individual vulnerability details...

PT-2026-103916

A flaw was found in Foreman. The Red Hat Satellite /unattended/provision API endpoint is vulnerable to an authentication bypass due to a semantic logic flaw in host verifier.rb. The application verifies the database state of a provisioning token rather than its actual presence in the incoming HTT...

Rocky Linux 9 [CIQ] Security Update: pcs / pcs-snmp (crlsa-2026_10710)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202610710 advisory. lodash: lodash: Arbitrary code execution via untrusted input in template imports CVE-2026-4800 Tenable has extracted the preceding description block directly from...

RHCOS 4 : OpenShift Container Platform 4.17.58 (RHSA-2026:70585)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70585 advisory. - github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 /etc/passwd Injection via HOME env CVE-2026-15809 - encoding/asn1: golang: G...

Rocky Linux 9 [CIQ] Security Update: toolbox / toolbox-debuginfo / toolbox-debugsource / toolbox-tests Multiple Vulnerabilities (crlsa-2024_9135)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249135 advisory. golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm CVE-2023-45290 golang: html/template: erro...