Code injection.

Duplicate Advisory: Grav: Blueprint dynamic-data bare-function branch is denylist-gated and omits error_log, giving arbitrary file write

• Code injection

* · no fixed version yet

grav-plugin-api before 1.0.15 Twig SSTI via translate endpoint

• grav
• Code injection

SourceCodester Class and Exam Timetabling System BSHRM1.php cross site scripting

• SourceCodester Class and Exam Timetabling System
• Cross-site scripting (XSS)
• Code injection

SourceCodester Class and Exam Timetabling System BSCE2.php cross site scripting

• SourceCodester Class and Exam Timetabling System
• Cross-site scripting (XSS)
• Code injection

JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deployment

• jumpserver
• Code injection

FreeCAD: Arbitrary Code Execution via eval() on untrusted project file metadata in BIM Workbench

• FreeCAD
• Code injection

FreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw Page

• FreeCAD
• Code injection

FreeCAD: Arbitrary code execution via unsandboxed PyImport_ImportModule in PropertyPythonObject::Restore

• FreeCAD
• Code injection

ERPNext: Server-Side Template Injection leading to Remote Code Execution

• frappe erpnext
• Code injection

Improper Control of Generation of Code ('Code Injection') in GitLab

• GitLab
• Code injection

sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes

• Code injection

<0.6.0 · fixed in 0.6.0

Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0

• regularlabs.com Sourcerer extension for Joomla
• Code injection

openssl_encrypt versions before 1.4.0 contain a sandbox escape vulnerability in IsolatedPluginExecutor that exposes Python type objects in restricted exec() builtins. Attackers can traverse the Pyt...

• Code injection

<1.4.0 · fixed in 1.4.0

code-projects Online Shopping System offersmail.php cross site scripting

• code-projects Online Shopping System
• Cross-site scripting (XSS)
• Code injection

Webkul Bagisto RMA Message send-message cross site scripting

• Webkul Bagisto
• Cross-site scripting (XSS)
• Code injection

GL.iNet XE3000 Language Update ui.update_langs code injection

• GL.iNet A1300
• GL.iNet AX1800
• Other injection
• Code injection

An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.

• Code injection

An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components

• Code injection

An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module

• Code injection

An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPluginApplicationContextFactory components

• Code injection

An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset function.

• Code injection

A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrary code via a crafted expression.

• Code injection

Jij-Inc Jij-MCP-Server jm_check python_repr.py PythonREPL.run code injection

• Jij-Inc Jij-MCP-Server
• Other injection
• Code injection

iatsiuk pptr-mcp execute Tool vm-executor.ts executeCode code injection

• iatsiuk pptr-mcp
• Other injection
• Code injection

WCPOS <= 1.9.14 - Authenticated (Shop Manager+) Code Injection via 'thermal' Template Engine

• kilbot WCPOS – Point of Sale (POS) plugin for WooCommerce
• Code injection

Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.16.19 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via First Name / Last Nam…

• properfraction Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
• Code injection

DefaultFuction Notice-System-Managent NoticeController execute GroovyShell.evaluate code injection

• DefaultFuction Notice-System-Managent
• Other injection
• Code injection

OpenBoxes Template Processing DocumentController.groovy buildZebraTemplate special elements in template engine

• OpenBoxes
• Code injection
• CWE-791

code-projects Online Shopping System checkout.php cross site scripting

• code-projects Online Shopping System
• Cross-site scripting (XSS)
• Code injection

code-projects Online Food Order System edit_food_items.php cross site scripting

• code-projects Online Food Order System
• Cross-site scripting (XSS)
• Code injection

SourceCodester Online Book Store System System Settings index.php site_settings cross site scripting

• SourceCodester Online Book Store System
• Cross-site scripting (XSS)
• Code injection

mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"

• Code injection
• Insecure deserialization

<0.6.0 · fixed in 0.6.0

ImpressCMS Authenticated RCE via PHP Custom Tag eval()

• ImpressCMS
• Code injection

MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()

• MindsDB Minds Platform
• Code injection

Remote Code Execution

• Tenable, Inc. Security Center
• Code injection

Code injection in Devolutions PowerShell Universal

• Devolutions PowerShell Universal
• Code injection

Duplicate Advisory: Remote code execution via .zip file upload in Grav CMS

• Code injection

* · no fixed version yet

Grav CMS before 2.0.13 Remote Code Execution via Twig

• grav
• Code injection

Improper Control of Generation of Code in Fleet Server Leading to Code Injection

• Elastic Fleet Server
• Code injection

Form::Processor::Field::HtmlArea versions from 0.06 through 1.162360 for Perl allow attacker selected method dispatch and resource exhaustion via an HTML::Tidy diagnostic that validate passes to add_…

• Code injection

Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into the catal…

• Path traversal
• Code injection

HTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_error use error message text built from request data…

• Code injection

WordPress WP BASE Booking plugin <= 6.3.0 - Arbitrary Code Execution vulnerability

• Hakan Ozevin WP BASE Booking
• Code injection

WordPress QA Analytics plugin <= 5.2.0.0 - Remote Code Execution (RCE) vulnerability

• QuarkA QA Analytics
• Code injection

Duplicate Advisory: Flowise Prompt Injection to RCE and SSRF via CSV/Airtable Agent Python Validator Bypass

• Code injection

<3.1.3 · fixed in 3.1.3

Flowise before 3.1.3 Sandbox Escape to RCE

• Flowise
• Code injection

Flowise before 3.1.3 Remote Code Execution via Custom MCP

• Flowise
• Code injection

Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV

• Flowise
• Code injection

Flowise before 3.1.3 Remote Code Execution via Airtable Agent

• Flowise
• Code injection

OpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE_USER to load arbitrary classes

• The OpenNMS Group Meridian
• The OpenNMS Group Horizon
• Code injection

GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)

• Palo Alto Networks GlobalProtect App
• Code injection

amazing-print/amazing_print at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArray#grep.

• Code injection

IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

• IBM i Access Client Solutions
• Code injection

MCP-for-Stata: Stata Command Injection via Unsanitized `package` in `ado_package_install`

• Code injection

<1.19.0 · fixed in 1.19.0

Cluster-curator-controller: cluster-curator-controller: spec.install.overridejob allows arbitrary job spec injection

• Red Hat multicluster engine for Kubernetes 2.10
• Red Hat multicluster engine for Kubernetes 2.11
• Code injection

CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action

• owen2345 CamaleonCMS
• Code injection

WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.

• Progress Software Corporation WhatsUp Gold
• Path traversal
• Code injection

Seerr: Path traversal to RCE via /avatarproxy image cache filename from upstream ETag

• seerr
• Path traversal
• Code injection

Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8

• fabrikar.com Fabrik extension for Joomla
• Code injection

WPMU DEV Dashboard < 5.0.1 - Remote Code Execution via Hub Install Action

• wpmudev-updates
• Code injection