Nuclei-Templates-Collection

https://github.com/0xSojalSec/templates-nuclei-Oracle-OAM---XSS https://gist.github.com/ResistanceIsUseless/e46848f67706a8aa1205c9d2866bff31 https://github.com/0xElkot/My-Nuclei-Templates https://github.com/0xSojalSec/Nuclei-Templates-API-Linkfinder https://github.com/0xSojalSec/templatesallnucle...

GHSA-2WWR-9X6F-88GP EasyAdminBundle has path traversal and reflected XSS in Flag and Icon Twig components

EasyAdminBundle ships two public Twig components — and — that load SVG files from disk using a path built directly from a public component property, and then render the resulting markup with the Twig |raw filter. When an application binds either of those properties to data that is influenced by a...

Home Assistant Command-line Interface: Handling of user-supplied Jinja2 templates

Impact Up to 1.0.0 of home-assitant-cli or hass-cli for short an unrestricted environment was used to handle Jninja2 templates instead of a sandboxed one. The user-supplied input within Jinja2 templates was rendered locally with no restrictions. This gave users access to Python's internals and...