Code injection.

calibre: Bypass of Python template restrictions via nested `template()` leading to RCE

• kovidgoyal calibre
• Code injection

Code injection in SonicWall Email Security

• SonicWall Email Security
• Code injection

Code injection in SonicWall Email Security

• SonicWall Email Security
• Code injection

Code injection in SonicWall GMS

• SonicWall GMS
• Code injection

Code injection in SonicWall GMS

• SonicWall GMS
• Code injection

Code injection in SonicWall GMS

• SonicWall GMS
• Code injection

FreeCAD: FEM formula incomplete escape

• FreeCAD
• Code injection

PapersGPT for Zotero 0.6.1 RCE via Unsanitized LLM Response eval()

• papersgpt-for-zotero
• Code injection

Improper Neutralization of Input in MongoDB Server's JavaScript Scripting Engine Leads to Unauthorized Code Execution Within Query Scopes

• MongoDB Server
• Code injection

Microsoft PowerShell Security Feature Bypass Vulnerability

• Microsoft PowerShell 7.4
• Microsoft PowerShell 7.5
• Code injection

Visual Studio Code Remote Code Execution Vulnerability

• Microsoft Visual Studio Code
• Code injection

Microsoft SharePoint Server Remote Code Execution Vulnerability

• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Code injection

Activepieces: Reflected Cross-Site Scripting in OAuth Redirect Endpoint

• activepieces
• Cross-site scripting (XSS)
• Code injection

Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim`

• vim
• Code injection
• CWE-829

Fooocus webui vulnerable to Remote Code Execution

• lllyasviel Fooocus
• Code injection

Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attribute

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• Code injection

Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)

• SAP_SE SAP Commerce Cloud (Data Hub Adapter)
• Code injection

Code Injection vulnerability in Manufacturing Integration and Intelligence

• SAP_SE SAP Manufacturing Integration and Intelligence
• Code injection

ERPNext: Possibility of server-side template injection due to missing validation

• frappe erpnext
• Code injection

Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.4
• Code injection
• Privilege escalation

Firecrawl: Arbitrary file read via JSON Schema $ref expansion

• firecrawl
• Command injection
• Code injection

Cachet 2.4.1 Authenticated Server-Side Template Injection RCE

• cachet
• Broken access control
• Code injection

SPIP < 4.4.18 Code Injection via Navigation Endpoint on SQLite

• SPIP
• Code injection

goose: Arbitrary command execution in goose CLI via `goose review` via git core.fsmonitor

• goose
• Code injection

Apache Ranger: Remote Code Execution via JDBC URL Injection

• Apache Software Foundation Apache Ranger
• Code injection
• CWE-20

Apache Ranger: Remote Code Execution via Arbitrary Class Instantiation

• Apache Software Foundation Apache Ranger
• Code injection

Apache Ranger: Remote Code Execution Vulnerability in GraalScriptEngineCreator

• Apache Software Foundation Apache Ranger
• Code injection

Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.7.2

• fabrikar.com Fabrik extension for Joomla
• Code injection

code-projects Task Management System CommentSave.php cross site scripting

• code-projects Task Management System
• Cross-site scripting (XSS)
• Code injection

OpenYak local API: unauthenticated CSRF chain leads to Remote Code Execution

• openyak
• Code injection
• Authentication bypass

SourceCodester Photo Share Website Comment Input Box ajax.php save_upload cross site scripting

• SourceCodester Photo Share Website
• Cross-site scripting (XSS)
• Code injection

Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration

• Sonatype Nexus Repository
• Code injection

Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration API

• Sonatype Nexus Repository 3
• Code injection

SourceCodester Photo Share Website index.php home cross site scripting

• SourceCodester Photo Share Website
• Cross-site scripting (XSS)
• Code injection

GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks

• Command injection
• Code injection

<3.1.58 · fixed in 3.1.58

PHPGurukul Company Visitor Management System manage-newvisitors.php cross site scripting

• PHPGurukul Company Visitor Management System
• Cross-site scripting (XSS)
• Code injection

DataGear Chart Name HtmlTplDashboardWidgetHtmlRenderer.java HtmlTplDashboardWidgetHtmlRenderer cross site scripting

• DataGear
• Cross-site scripting (XSS)
• Code injection

Unauthenticated Stored Vue Template Injection Leads to Cross-Site Scripting in CTI-Transmute

• misp cti-transmute
• Cross-site scripting (XSS)
• Code injection

WGDashboard Server-Side Template Injection vulnerability

• WGDashboard
• Code injection

Mermaid allows CSS injection applying to sibling elements of the diagram

• Code injection

<10.9.8 || >=11.0.0-alpha.1, <11.16.1 · fixed in 10.9.8, 11.16.1

Statamic: Unsafe method invocation via Antlers template resolution allows data destruction

• Code injection

<5.74.1 || >=6.0.0, <6.24.0 · fixed in 5.74.1, 6.24.0

FoundationAgents MetaGPT code injection

• FoundationAgents MetaGPT
• Other injection
• Code injection

Dataverse Integration < 2.91 - Contributor+ Server-Side Template Injection (SSTI) to Information Disclosure

• DataPress (Dataverse Integration)
• Information disclosure
• Code injection

FoundationAgents MetaGPT data_interpreter.py DataInterpreter code injection

• FoundationAgents MetaGPT
• Other injection
• Code injection

WordPress CTX Feed plugin <= 6.6.42 - Remote Code Execution (RCE) vulnerability

• WebAppick CTX Feed
• Code injection

WordPress Spider Analyser – WordPress搜索引擎蜘蛛分析插件 plugin <= 2.1.3 - Remote Code Execution (RCE) vulnerability

• wbolt.com Spider Analyser &#8211; WordPress搜索引擎蜘蛛分析插件
• Code injection

WordPress Betheme theme <= 28.4.2 - Remote Code Execution (RCE) vulnerability

• Muffingroup Betheme
• Code injection

ttttonyhe OBlog tags.php cross site scripting

• ttttonyhe OBlog
• Cross-site scripting (XSS)
• Code injection

FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by getTool

• agentfront frontmcp
• Code injection

Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props

• Other injection
• Code injection

>=3.4.0, <3.21.10 || >=4.0.0, <4.5.1 · fixed in 3.21.10, 4.5.1

Unauthenticated Nuxt DevTools RPC allows arbitrary command execution on the developer's host

• Code injection
• Authentication bypass

<3.3.1 · fixed in 3.3.1

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

• IBM Langflow OSS
• Code injection

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

• IBM Langflow OSS
• Code injection

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

• IBM Langflow OSS
• Code injection

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

• IBM Langflow OSS
• Code injection

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

• IBM Langflow OSS
• Code injection

Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

• IBM Langflow OSS
• Code injection

Code injection in Jenkins Project Jenkins Multijob Plugin

• Jenkins Project Jenkins Multijob Plugin
• Code injection

Electron: DevTools JavaScript Injection via Unsanitized Dock State Parameter

• Code injection
• CWE-116

<39.8.7 || >=40.0.0-alpha.1, <40.9.0 || >=41.0.0-alpha.1, <41.2.0 || >=42.0.0-alpha.1, <42.0.0-beta.1 · fixed in 39.8.7, 40.9.0, 41.2.0, 42.0.0-beta.1

Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server and WebSphere Application Server Liberty due to the July 2026 CPU

• IBM WebSphere Application Server
• IBM WebSphere Application Server - Liberty
• Code injection