Handlebars — PoC Archivehttps://poc.intelseclab.com/tags/handlebars/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Handlebars AST Injection Remote Code Execution — CVE-2026-33937https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33937-handlebars-ast-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-33937-handlebars-ast-rce/Critical severity — web · CVE-2026-33937. Status: PoC. Affects: Handlebars (Node.js templating engine). Tags: handlebars, rce, template-injection, ast-injection, nodejs, express, javascript-compiler, code-generation.webCriticalhandlebarsrcetemplate-injectionast-injectionnodejsexpressjavascript-compilercode-generationGhost CMS Theme JSONPath Remote Code Execution — CVE-2026-29053https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-29053-ghost-cms-jsonpath-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-29053-ghost-cms-jsonpath-rce/High severity — web · CVE-2026-29053 (GHSA-cgc2-rcrh-qr5x). Status: PoC. Affects: Ghost CMS. Tags: ghost-cms, rce, jsonpath, static-eval, handlebars, theme-upload, prototype-pollution, nodejs.webHighghost-cmsrcejsonpathstatic-evalhandlebarstheme-uploadprototype-pollutionnodejs