Nunjacks PROTECH System Code Execution

The vulnerability of the Java-Script templater Nunjacks in the PROTECH production analysis and monitoring system exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and gain increased privileges...

PT-2025-37312

Уязвимость Java-Script шаблонизатора Nunjacks системы для аналитики и мониторинга производства PROTECH существует из-за недостаточной проверки входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код и повысить свои привилегии...

OpenShift Mirror Registry Unencrypted Storage

The vulnerability of the Mirror registry software for Red Hat OpenShift, which is used to create local copies of deleted container images, stems from the unencrypted storage of critical information in the config.yaml file of the Jinja templater. Exploiting this vulnerability could allow an attack...

Mirror registry Local Information Disclosure

The vulnerability of the Mirror registry software for Red Hat OpenShift, which is used to create local copies of deleted container images, stems from the unencrypted storage of critical information in the config.yaml file of the Jinja templater. Exploiting this vulnerability could allow an attack...

sqlfluff-templater-dbt (1.3.1) potentially affected by CVE-2023-36830 via sqlfluff (1.3.1)

sqlfluff PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.3.1 Source cves: CVE-2023-36830 Source advisory: OSV:GHSA-JQHC-M2J3-FJRX...

alvin-cli (>=1.1.9, <=1.2.0), cumulus-library (>=0.1.2, <=1.4.0) +6 more potentially affected by CVE-2023-36830 via sqlfluff (>=2.0.0a1, <=2.1.1)

sqlfluff PYPI version =2.0.0a1, =1.1.9, =0.1.2, =0.1.2, =0.13.2.6, =1.0.2, =2.0.0a1, =1.4.2, =0.1.0, =0.1.1 Source cves: CVE-2023-36830 Source advisory: GHSA-JQHC-M2J3-FJRX...

dbt-osmosis (>=0.9.3, <=0.10.0), dbt-superset-lineage (>=0.3.0, <=0.3.2) +3 more potentially affected by CVE-2023-36830 via sqlfluff (1.4.5)

sqlfluff PYPI version 1.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - dbt-osmosis =0.9.3, =0.3.0, =0.8.0, =0.0.0, =0.0.1 - sqlfluff-templater-dbt 1.4.5 Source cves: CVE-2023-36830 Source advisory:...

sqlfluff-templater-dbt (1.2.1) potentially affected by CVE-2023-36830 via sqlfluff (1.2.1)

sqlfluff PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.2.1 Source cves: CVE-2023-36830 Source advisory: OSV:GHSA-JQHC-M2J3-FJRX...

sqlfluff-templater-dbt (1.3.2) potentially affected by CVE-2023-36830 via sqlfluff (1.3.2)

sqlfluff PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.3.2 Source cves: CVE-2023-36830 Source advisory: OSV:GHSA-JQHC-M2J3-FJRX...

sqlfluff-templater-dbt (1.4.2) potentially affected by CVE-2023-36830 via sqlfluff (1.4.2)

sqlfluff PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.4.2 Source cves: CVE-2023-36830 Source advisory: OSV:GHSA-JQHC-M2J3-FJRX...

sqlfluff-templater-dbt (1.3.2) potentially affected by CVE-2023-36830 via sqlfluff (1.3.2)

sqlfluff PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.3.2 Source cves: CVE-2023-36830 Source advisory: OSV:PYSEC-2023-111...

sqlfluff-templater-dbt (1.3.1) potentially affected by CVE-2023-36830 via sqlfluff (1.3.1)

sqlfluff PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.3.1 Source cves: CVE-2023-36830 Source advisory: OSV:PYSEC-2023-111...

sqlfluff-templater-dbt (1.4.3) potentially affected by CVE-2023-36830 via sqlfluff (1.4.3)

sqlfluff PYPI version 1.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.4.3 Source cves: CVE-2023-36830 Source advisory: OSV:PYSEC-2023-111...

sqlfluff-templater-dbt (1.3.0) potentially affected by CVE-2023-36830 via sqlfluff (1.3.0)

sqlfluff PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlfluff and may be impacted: - sqlfluff-templater-dbt 1.3.0 Source cves: CVE-2023-36830 Source advisory: OSV:PYSEC-2023-111...

ZPanel Crafted Template Remote Command Execution Vulnerability

Exploit for php platform in category web applications There's an arbitrary PHP code execution in ZPanel, a free and open-source shared hosting control panel. Using the included zsudo binary, access can be escalated and commands can be run as root. The vulnerability: ZPanel uses a poor "templater"...

ZPanel Code Execution

Hi all, There's an arbitrary PHP code execution in ZPanel, a free and open-source shared hosting control panel. Using the included zsudo binary, access can be escalated and commands can be run as root. The vulnerability: ZPanel uses a poor "templater" system that basically consists of a few...

ZPanel - templateparser.class.php Crafted Template Remote Command Execution

ZPanel - templateparser.class.php Crafted Template Remote Command Execution Hi all, There's an arbitrary PHP code execution in ZPanel, a free and open-source shared hosting control panel. Using the included zsudo binary, access can be escalated and commands can be run as root. The vulnerability:...

Joomla NoNumber Framework Local File Inclusion / Shell Upload

Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link: http://nonumber.nl The nnframework plugin by NoNumber! contains multiple...