BIT-JOOMLA-2026-90918 Joomla! Core - [20260908] - Core - XSS in HTML Mail Templates in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260908 - Core - XSS in HTML Mail Templates in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The mail template feature lacks an escaping mechanism, causing XSS vectors in multiple extensions...

nuclei — Updated!

English • 中文 • Korean • Indonesia • Spanish • 日本語 • Portuguese • Türkçe...

CVE-2026-106444

A flaw was found in Handlebars. This vulnerability allows a remote attacker to execute arbitrary script code through Cross-Site Scripting XSS. When an application precompiles untrusted template text and embeds the generated output directly into an inline web script block, static content is not...

PT-2026-107627

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Object Injection. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through 2.0.19...

PT-2026-107625

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Stored XSS. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a...

AZL-106721 CVE-2026-102411 affecting package rubygem-elasticsearch 8.9.0-1

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to Denial of Service via Excessive Allocation CAPEC-130. Elasticsearch enforces a size limit on the user-supplied metadata field for each individual template resource, but does not limit the total memory used...

CVE-2026-106444

The Handlebars templating engine (versions 4.0.0 through 4.7.10 ) is vulnerable to JavaScript Injection due to improper escaping in the Handlebars.precompile() function. Specifically, lib/handlebars/compiler/code-gen.js uses quotedString() to emit static template text without escaping sequences t...

CVE-2026-106444 Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates

Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.precompile uses quotedString in lib/handlebars/compiler/code-gen.js to emit static template text into generated JavaScript without escaping sequences that terminate an enclosing HTML...

CVE-2022-40634

CVE-2022-40634: CrafterCMS 中的 FreeMarker 服务端模板注入 通过在 FTL 模板中插入恶意内容，攻击者可能执行 SSTI（服务端模板注入）攻击，从而利用 FreeMarker 暴露的对象绕过限制并获取 RCE（远程代码执行）。 厂商披露： 厂商对该漏洞的披露和修复可参见此处。 利用条件： 此漏洞需要： 有效的用户凭据 概念验证： 更多详情及利用过程可参见此 PDF。 附加资源： 最初由 Alvaro "pwntester" Munoz 发现的 漏洞 CVE-2020-25803 及 博客文章 启发了本漏洞的 SSTI 研究和发现。...

React2Shell

React2Shell CVE-2025-55182 扫描器与利用工具包，用于 Next.js/React 服务器组件 RCE。 仓库结构 React2Shell/ ├── browser-extension/ 基于浏览器的检测 Chrome 扩展 │ ├── manifest.json │ ├── content.js │ ├── popup.html/js │ └── background.js ├── cli/ 命令行扫描器与利用工具 │ ├── react2shell.py │ └── requirements.txt ├── docs/ 面向学习的文档 │ ├──...

Shockwave-OSS

BountyTricks Compartiendo consejos y trucos de Bug Bounty con la comunidad, incluyendo, entre otros, automatización, one liners y pensamientos útiles Temario 💂‍♂️ Varios Validador de Regex Generador de homógrafos Shodan-Scripts Cabeceras HTTP Tipos MIME Proxies inversos Writeups Contrabando de...

nuclei-cve-analyzer

Nuclei CVE Analyzer A fast CLI tool for analyzing CVE coverage in Nuclei templates. Nuclei CVE Analyzer takes a list of CVE IDs, scans a local Nuclei template repository, and determines which CVEs already have matching templates and which represent potential template coverage gaps. Built for...

PT-2026-107161

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to Denial of Service via Excessive Allocation CAPEC-130. Elasticsearch enforces a size limit on the user-supplied metadata field for each individual template resource, but does not limit the total memory used...

nuclei-templates v10.5.0

Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...

CVE-2023-49954.github.io

3CX CRM 集成中的 SQL 注入 对于 CRM 集成，3CX 提供了用于连接各种数据库的模板。 在这些模板中，占位符（FirstName、SearchText、Email）用于填充查询。 用户输入未经过滤，从而允许 SQL 注入。 受影响版本 无回复 2023-11-27 - CERT/CC 告知我，他们设定的截止日期已过，3CX 仍未回应 2023-12-03 - 向 MITRE 提交 CVE 请求 2023-12-03 - CVE 已分配 2023-12-14 - 公开发布 2023-12-15 - 测试 18.0 Update 9 是否受影响 2023-12-15 -...

GHSA-3CM4-CCVW-6XR6 SiYuan: /history/*path and /repo/diff/*path potentially exposing historical snapshots of data/.siyuan/publishAccess.json and data/templates/*

Summary GHSA-c8r8-95hg-mp34 added a centralized guard, util.IsForbiddenAbsPath, specifically to block access to a small set of sensitive files: conf/conf.json plaintext accessAuthCode/API token/cookie key, data/snippets/conf.json, the entire data/templates/ directory, and...

Mailphish

Mailphish 编写者：Pro MCracker Mailphish 将帮助您快速轻松地创建专业的钓鱼邮件 访问我们的网站学习黑客方法 https://crackcodes.xyz 和 https://crackcodes.in 如果你复制了代码并制作自己的版本，别忘了给我点 credit，小子！ 使用此工具不会获取凭据 法律免责声明 我不会说您只能将此工具用于教育目的，不能用于攻击他人， 因为我自己也曾用它攻击过别人。但请记住，这样做是违法的，如果被抓到，后果自负。 不要来找我，也不要怪我。 功能 包含20种不同模板的钓鱼邮件创建器： Instagram Facebook...

Certi-Bhai

Certi-Bhai: Kit de Explotación de AD CS Certi-Bhai es una colección completa de herramientas de explotación en PowerShell para atacar vulnerabilidades de Servicios de Certificados de Active Directory AD CS. Este kit implementa varios Escenarios de Escalada ESC que demuestran configuraciones de...

BIT-MOODLE-2026-102581 Moodle: xss in forum post templates due to insufficient escaping

A flaw was found in Moodle. Insufficient output escaping in templates used to display forum posts enables a stored cross-site scripting XSS vulnerability. An attacker can inject malicious content into a forum post, which then executes arbitrary script code in the browser of another user viewing t...

CVE-2026-39721

Missing Authorization vulnerability in Brainstorm Force Starter Templates astra-sites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Starter Templates: from n/a through 4.7.7...