People

CVE-2025-23211: Tandoor Recipes Jinja2 SSTI to Remote Code Execution

offsec.com

A critical SSTI vulnerability was discovered in the open-source meal planning application Tandoor Recipes leading to a full system compromise.

Visit Site

People offsec.com

CVE-2025-23211: Tandoor Recipes Jinja2 SSTI to Remote Code Execution
PeopleCVE-2025-0655 – Remote Code Execution in D-Tale via Unprotected Custom Filtersoffsec.com PeopleCVE-2025-3248 – Unauthenticated Remote Code Execution in Langflow via Insecure Python exec Usageoffsec.com PeopleCVE-2025-24893 – Unauthenticated Remote Code Execution in XWiki via SolrSearch Macrooffsec.com PeopleCVE-2025-29306 – Unauthenticated Remote Code Execution in FoxCMS v1.2.5 via Unserialize Injectionoffsec.com PeopleCVE-2025-27636 – Remote Code Execution in Apache Camel via Case-Sensitive Header Filtering Bypassoffsec.com PeopleCVE-2024-13059: Exploiting Path Traversal in AnythingLLM for Remote Code Executionoffsec.com Products & ServicesCisco Cyber VisionCisco Products & ServicesAgenticOps for Enterprise NetworkingCisco BlogsI'm Doing a Little Consulting — overreactedoverreacted.io ResourcesCollationsduckdb.org ResourcesCollationsduckdb.org ResourcesCollationsduckdb.org ResourcesCollationsduckdb.org ResourcesCollationsduckdb.org ResourcesCollationsduckdb.org ResourcesCollationsduckdb.org ResourcesCollationsduckdb.org Products & ServicesCode of Conductduckdb.org ResourcesS3 API Supportduckdb.org ResourcesQuack Remote Protocolduckdb.org