Curated security research, vulnerabilities, advisories and tools for practitioners.

#template-injection

Security coverage tagged template-injection.

1.

Dojo challenge #53 Hacker Club solution

blog | 2026-08-26 07:42 | yeswehack.com | original ↗ | #bug-bounty | #rce | #pentesting

2.

Critical remote code execution in Serena, a popular MCP coding agent

vulnerability | Critical | 2026-08-17 00:00 | about.gitlab.com | original ↗ | #rce | #supply-chain | #gitlab

3.

Finding eight high-severity vulnerabilities in NodeBB in six hours

research | 2026-07-22 00:00 | aikido.dev | original ↗ | #ai-security | #featured | #vulnerability-research

4.

Turning Email Template Injection into Remote Code Execution

vulnerability | 2026-03-23 14:10 | labs.cognisys.group | original ↗ | #rce | #pentesting | #web-security

5.

Life-changing lectures: My day with a top hacker

blog | 2026-01-22 13:00 | bugcrowd.com | original ↗ | #bug-bounty | #web-security | #education

6.

XSS without HTML: Client-Side Template Injection with AngularJS

research | 2025-12-17 15:21 | portswigger.net | original ↗ | #appsec | #web-security | #xss

7.

Server-Side Template Injection

research | 2025-09-03 07:38 | portswigger.net | original ↗ | #rce | #web-security | #template-injection

8.

Limitations are just an illusion – advanced server-side template exploitation with RCE everywhere

blog | 2025-03-24 09:06 | yeswehack.com | original ↗ | #rce | #exploitation | #template-injection

9.

SecureAuth Version 9.3

vulnerability | 2020-06-19 00:00 | CVE-2020-9437 | bishopfox.com | original ↗ | #xss | #vulnerability | #advisory

10.

Adapting AngularJS payloads to exploit real world applications

research | 2019-06-14 12:12 | portswigger.net | original ↗ | #xss | #template-injection | #payloads