#SSTI

3 posts

BugForge - Daily - Shady Oaks Finance (Jul 12, 2026)

The Shady Oaks forecasting feature renders the user-supplied caption through a server-side template engine, so injecting {api_key} leaks the secret straight back in the response.

SSTI Server Side Template Injection Injection Information Disclosure Sensitive Data Exposure

Posted on 2026-07-12 20:00 4 min read

BugForge - Weekly - Fur Hire (Jul 1, 2026)

This walkthrough demonstrates a local file inclusion against a job recruitment application's resume preview feature. The server-side template engine exposes an…

Path Traversal LFI SSTI

Posted on 2026-07-01 09:00 7 min read

BugForge - Daily - 2026 Vibe Predictor

This vulnerability is a Server-Side Template Injection (SSTI) issue where user-supplied input is evaluated by the EJS template engine. By injecting…

SSTI

Posted on 2025-12-31 20:00 3 min read