#templateInjection - Twitter Hashtag

29 days ago

Never trust template rendering of user supplied input. Profile search and email features often expose hidden SSTI vulnerabilities. Manual testing consistently outperforms automated scanners here. #BugBounty #TemplateInjection #WebSecurity #InfoSec

0

2

0

1

66

reverseame @reverseame

3 months ago

Write Path Traversal to a RCE Art Department #PathTraversal #RCE #RubyOnRails #WildcardRouting #TemplateInjection https://t.co/nSdnxKCNHz

0

22

6

11

1K

Clone Systems

@CloneSystemsInc

9 months ago

CVE 2025 9556 in LangChainGo let attackers use Jinja2 directives to read sensitive files. The fix blocks file access by default and adds RenderTemplateFS. Upgrade now. #AIsecurity #LangChainGo #TemplateInjection #PromptSecurity #SoftwareVulnerability #ZeroTrust #DevSecOps #LLM

0

2

0

104

InfoSec Community

@InfoSecComm

about 1 year ago

🚨 New Writeup Alert! 🚨 "Easy $300: Template Injection" by Abhijeet Kumawat is now live on IW! Check it out here: https://t.co/tAtPdnbtE6 #infosec #bugbounty #templateinjection #hacking #cybersecurity

0

5

1

830

nader @nader_brandi

almost 2 years ago

🔒 Server-Side Template Injection (SSTI) Techniques: Exploiting Untrusted Data 🛠️ #SSTI #TemplateInjection #WebSecurity #InfoSec #EthicalHacking #CyberSecurity #BugBounty #BugBountyTips #SecurityTesting #AppSec #PenTesting #ExploitDev #SecurityFlaws #HackerTools

5

2

0

1

147

rehackxyz @rehackxyz

over 2 years ago

We published a new post! Check out Alysha's new series about Template Injection https://t.co/vuSY3kfpox #rehackxyz #pentest #bugbounty #templateinjection #ssti

0

11

2

1

919

ThreatBook @ThreatBookLabs

over 3 years ago

#APT #Kimsuky #TemplateInjection url:http://k22012.c1[.]biz/paypal.dotm hash:9e916c4f58334aafcb033705e7fac6a217d8e2da131c8c1fd904edda7d026226 #CyberAttack #threatintelligence #threatintel

0

20

5

0

Francesco Bussoletti @FBussoletti

about 4 years ago

#cybercrime, l’exploit #Follina usa #Office per attaccare. Gli esperti di #CyberSecurity di @yoroisecurity: E’ la concatenazione di un attacco già noto e dello sfruttamento di componenti legittimi su Windows: #TemplateInjection e #Lolbin. #infosec https://t.co/vt0WwIYQhv

0

4

3

0

iSecurity @iSecurity

about 5 years ago

How I earned $3200 in 4hours through Stored XSS https://t.co/w4nyBQuoo6 #storedxss #templateinjection #cybersecurity

0

2

0

The Cyber Security Network @TheCybrSecNetwk

about 5 years ago

How To Do Server Side Template Injection #SSTI #TemplateInjection #InfoSec #CyberSecurity #vulnerabilities #Exploit #ExploitationTechnology #bugbountytips https://t.co/nzUZ55hKJK The post How To Do Server Side Template Injection #SSTI #TemplateInjection #InfoSec #Cyb… …

TheCybrSecNetwk's tweet photo. How To Do Server Side Template Injection

#SSTI #TemplateInjection #InfoSec #CyberSecurity #vulnerabilities
#Exploit #ExploitationTechnology
#bugbountytips

https://t.co/nzUZ55hKJK

The post How To Do Server Side Template Injection

#SSTI #TemplateInjection #InfoSec #Cyb…

… https://t.co/lmuvlIFbvV

0

5

0

Het Mehta

@hetmehtaa

about 5 years ago

How To Do Server Side Template Injection #SSTI #TemplateInjection #InfoSec #CyberSecurity #vulnerabilities #Exploit #ExploitationTechnology #bugbountytips https://t.co/tPp38RM5Ly

0

2

4

0

SUDHIR SINGH DUHAN @hunterdevil0001

over 5 years ago

How To Do Server Side Template Injection #SSTI #TemplateInjection #InfoSec #CyberSecurity #vulnerabilities #Exploit #ExploitationTechnology https://t.co/1iKyKKhxHa

0

4

3

1

0

Reconshell @reconshell

over 5 years ago

How To Do Server Side Template Injection #SSTI #TemplateInjection #InfoSec #CyberSecurity #vulnerabilities #Exploit #ExploitationTechnology @Emrullah_A https://t.co/8CI4UfDAVD

0

3

1

0

Pistus @jorgemieres

almost 6 years ago

Interesting #Danish #maldoc related #COVID19 targeting #Sydslesvigsekretariatet (Ministry of Culture) #Denmark Bilag 1 Gennemgang af midtvejsrapporter 2020.DOCX ☣️7bf5cdf9caea7247dfdfa47240342210 #TemplateInjection🔃 dep-esdh[.kum.]dk:443/360Templates/Notat.docx #Gamaredon #APT

jorgemieres's tweet photo. Interesting #Danish #maldoc related #COVID19 targeting #Sydslesvigsekretariatet (Ministry of Culture) #Denmark

Bilag 1 Gennemgang af midtvejsrapporter 2020.DOCX
☣️7bf5cdf9caea7247dfdfa47240342210
#TemplateInjection🔃
dep-esdh[.kum.]dk:443/360Templates/Notat.docx

#Gamaredon #APT https://t.co/pWp2cIr2Iv

0

4

3

0

Blue Team News

@blueteamsec1

almost 6 years ago

A close look at the advanced techniques used in a Malaysian-focused APT campaign #APT #TemplateInjection #Elastic https://t.co/kTObb9IIBe

blueteamsec1's tweet photo. A close look at the advanced techniques used in a Malaysian-focused APT campaign #APT #TemplateInjection #Elastic https://t.co/kTObb9IIBe https://t.co/GMGGIPAeE1

0

4

2

0

Pistus @jorgemieres

almost 6 years ago

Possible #Gamaredon targeting #Malaysia 🔃 Bubar Parlimen.docx ☣️ afbe00e755a2cf963f0eedbb4e310198 🔃 RemoteLoad.dotm 🔛 armybar[.hopto.]org ☣️ 8114e5e15d4086843cf33e3fca7c945b #TemplateInjection #APT #Macros #Exploit

jorgemieres's tweet photo. Possible #Gamaredon targeting #Malaysia 🔃

Bubar Parlimen.docx
☣️ afbe00e755a2cf963f0eedbb4e310198 🔃

RemoteLoad.dotm 🔛 armybar[.hopto.]org
☣️ 8114e5e15d4086843cf33e3fca7c945b
#TemplateInjection

#APT #Macros #Exploit https://t.co/IlhcKyEK1C

1

12

5

1

0

Pistus @jorgemieres

about 6 years ago

Potential #Gamaredon targeting #Ukraine people 🔃 🔛 kasim.freedynamicdns[.]org #Запит.docx #request ☣️ 33856c6f22c01808a4a4ae4034bc7141 🔃 #TemplateInjection ↔️ .../root/backups/IVCbXw.dot ☣️ e843e003470dff3703bb079fca83779f #T1221 #PrimitiveBear #Pteranodon #Pterodo

jorgemieres's tweet photo. Potential #Gamaredon targeting #Ukraine people 🔃
🔛 kasim.freedynamicdns[.]org

#Запит.docx #request
☣️ 33856c6f22c01808a4a4ae4034bc7141 🔃

#TemplateInjection ↔️ .../root/backups/IVCbXw.dot
☣️ e843e003470dff3703bb079fca83779f #T1221

#PrimitiveBear #Pteranodon #Pterodo https://t.co/mRkN2YDssP

0

7

3

0

Pistus @jorgemieres

about 6 years ago

Possible #APT #gamaredon? #maldoc Условия.docx ↔️ "Terms" ☣️e6183f5be1d907fb9a53e08b5c28a9ae #CVE201711882 🔛 logins[.kl.com.]ua 🔃 #TemplateInjection 🔛 /Digital.cer ☣️ 63f4f59656bba5cb700f7f252028be7f #RTF🔃 #Lightstone #stealer 🔛 /2.msi ☣️ 5b70b81e8547a69f44ef41a24f03243a

jorgemieres's tweet photo. Possible #APT #gamaredon?

#maldoc Условия.docx ↔️ "Terms"
☣️e6183f5be1d907fb9a53e08b5c28a9ae
#CVE201711882
🔛 logins[.kl.com.]ua 🔃

#TemplateInjection 🔛 /Digital.cer
☣️ 63f4f59656bba5cb700f7f252028be7f
#RTF🔃

#Lightstone #stealer 🔛 /2.msi
☣️ 5b70b81e8547a69f44ef41a24f03243a https://t.co/9goZ2aoC7L

1

5

1

0

Pistus @jorgemieres

about 6 years ago

⚠️#maldoc based in #EuropeanUnion (#EU) template lure, associated with UN Human Rights Council ☣️EEAS_letterhead.dotx 🔃 ➡️027cece935454a2d535fea22baf71b57 ((Reinhold.brender[@]eeas.europa[.]eu)) ➡️saemaeul[.mireene.]com/skin/visit/basic/log #Malware #TemplateInjection #T1221