pwndoc

PwnDoc PwnDoc is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users. Documentation Installation Data Roles...

tplmap

Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...

Mockoon < 9.2.0 - Path Traversal

Mockoon before 9.2.0 contains a path traversal and local file inclusion caused by unsafe templating of server filenames from user input, letting attackers read arbitrary files on the mock server filesystem, exploit requires crafted request. id: CVE-2025-59049 info: name: Mockoon 9.2.0 - Path...

jstachio__jstachio_CVE-2023-33962_1-0-0

タイプセーフなJava Mustacheテンプレートエンジン。 テンプレートは読みやすいJavaソースコードにコンパイルされ、値のバインディングは静的にチェックされます。 ドキュメント 最新のSNAPSHOT JStachioドキュメント 現在のリリース版 JStachioドキュメント ドキュメントはjavadoc.ioにもありますが、上記のように集約されていません。集約されたjavadocが推奨されるドキュメントであり、このreadmeの残りは主にプロパガンダ マーケティング目的です。 以前のリリースの場合:...

rabl-old

RABL RABL（Ruby API Builder Language）是一个用于生成 JSON、XML、MessagePack、PList 和 BSON 的 Rails 和 Padrino Ruby 模板系统。在使用 ActiveRecord 的 'tojson' 方法时，我发现自己渴望一个更具表现力和更强大的 API 生成方案。当 JSON 表示复杂或与数据库中定义的确切模式不匹配时，这一点尤为突出。 特别是，我希望能够轻松实现： 基于对象中的数据组合创建任意节点 向方法传递参数并将结果存储为子节点 渲染局部模板并进行继承，以减少代码重复 重命名或别名化属性，以改变模型中的名称...

foreman: Safemode Bypass leading to RCE

A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution RCE by bypassing the safemode sandbox within the templating engine. Due to improper handling of delegated methods, an attacker can append unauthorized functions to the allowed...

foreman: Safemode Bypass leading to RCE

A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution RCE by bypassing the safemode sandbox within the templating engine. Due to improper handling of delegated methods, an attacker can append unauthorized functions to the allowed...

foreman: Safemode Bypass leading to RCE

A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution RCE by bypassing the safemode sandbox within the templating engine. Due to improper handling of delegated methods, an attacker can append unauthorized functions to the allowed...

CVE-2025-31722

CVE-2025-31722 — Jenkins Templating Engine RCE 教育および許可されたセキュリティ研究目的に限ります。 説明 Jenkins Templating Engine JTE プラグイン = 2.5.3 におけるサンドボックスバイパス脆弱性であり、低権限ユーザーが Jenkins サーバー上で任意のコードを実行できるものです。 この欠陥は、JTE がフォルダーレベルの GovernanceTier 設定で定義された外部 Git リポジトリからライブラリを読み込み、ジョブを作成したユーザーの権限レベルに関係なく、それらのライブラリのステップを Groo...

CVE-2026-96658

A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution RCE by bypassing the safemode sandbox within the templating engine. Due to improper handling of delegated methods, an attacker can append unauthorized functions to the allowed...

CVE-2026-96658 Foreman: safemode bypass leading to rce

A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution RCE by bypassing the safemode sandbox within the templating engine. Due to improper handling of delegated methods, an attacker can append unauthorized functions to the allowed...

EUVD-2026-90921

A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution RCE by bypassing the safemode sandbox within the templating engine. Due to improper handling of delegated methods, an attacker can append unauthorized functions to the allowed...

CVE-2026-96658 Foreman: safemode bypass leading to rce

A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution RCE by bypassing the safemode sandbox within the templating engine. Due to improper handling of delegated methods, an attacker can append unauthorized functions to the allowed...

CVE-2026-96658

A flaw in Foreman allows an authenticated attacker with low-level permissions to achieve remote code execution (RCE) . The vulnerability resides in the templating engine 's safemode sandbox , where improper handling of delegated methods enables an attacker to append unauthorized functions to the ...

CVE-2026-96658

A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution RCE by bypassing the safemode sandbox within the templating engine. Due to improper handling of delegated methods, an attacker can append unauthorized functions to the allowed...

foreman: Safemode Bypass leading to RCE

A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution RCE by bypassing the safemode sandbox within the templating engine. Due to improper handling of delegated methods, an attacker can append unauthorized functions to the allowed...

PT-2026-103944

Name of the Vulnerable Software and Affected Versions Foreman affected versions not specified Red Hat Satellite affected versions not specified Description An authenticated attacker with low-level permissions can achieve remote code execution RCE by bypassing the safemode sandbox within the...

Ghostwriter v7.3.0-rc1

Ghostwriter Ghostwriter is an open-source platform designed to enhance offensive security operations by simplifying report writing, asset tracking, and assessment management. It offers tools for managing clients, creating a reusable findings library, and organizing the infrastructure and domains...

Astra Linux – Vulnerability in Jinja2

Jinja is an extensible templating engine. Prior to version 3.1.5, there was a flaw in how the Jinja sandbox environment detected calls to str.format, allowing an attacker who controls the content of a template to execute arbitrary Python code. To exploit this vulnerability, an attacker needed to...

Astra Linux – Vulnerability in Ansible

A flaw was discovered in the way Ansible templating was implemented in versions prior to 2.6.18, 2.7.12, and 2.8.2. This flaw posed a risk of information disclosure due to unintended variable substitutions. By exploiting these unintentional substitutions, the content of any variable could be...