Code injection.

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio (createTransport, STDIO branch, routers/mcp-pro…

• Code injection

Open GenAI Stack (aka ogx-ai) 2026-06-11, as used in the Meta AI backend for WhatsApp and other products, allows code execution because prompt injection (with Jinja2 template syntax) can be used to a…

• Code injection

An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary code via the index.php

• Code injection

An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module.

• Code injection

Unsafe use of eval() method in ros2 topic hz tool

• Open Source Robotics Foundation Robot Operating System 2 (ROS 2)
• Code injection

jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider Resolution

• Code injection
• CWE-610

>=2.8.0, <2.18.10 || >=2.19.0, <2.21.6 || >=2.22.0, <2.22.2 · fixed in 2.18.10, 2.21.6, 2.22.2

Eleveo Call Recording Software Play Audio audio.jsp cross site scripting

• Eleveo Call Recording Software
• Cross-site scripting (XSS)
• Code injection

FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)

• FreePBX security-reporting
• Code injection
• CWE-20

Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module

• FreePBX security-reporting
• Path traversal
• Code injection

Streamshub/console: console-operator: streams for apache kafka console: unfiltered kafka client properties → sa-token exfiltration via config.providers

• Red Hat StreamsHub Console for Apache Kafka®
• Red Hat streams for Apache Kafka 2
• Code injection

Langflow Code Execution via eval() in Component Input Schema

• langflow
• Code injection

Unsloth Zoo Code Injection via model_type in config.json

• unslothai unsloth-zoo
• unsloth
• Code injection

Code Injection in Innotim Software's Logsign SIEM

• Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM
• Code injection

Artemis-core-client: unsafe reflection in apache activemq artemis federation message deserialization

• Red Hat JBoss Enterprise Application Platform 7.4.25
• Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
• Code injection

WPForms Lite 1.5.0.1 - 2.0.2 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation

• WPForms
• Code injection

amirsanni mini-inventory-and-sales-management-system Items Management Items.php cross site scripting

• amirsanni mini-inventory-and-sales-management-system
• Cross-site scripting (XSS)
• Code injection

Krayin laravel-crm Admin Settings Endpoint index.blade.php cross site scripting

• Krayin laravel-crm
• Cross-site scripting (XSS)
• Code injection

zhistaredu StarTraining application.yml cross site scripting

• zhistaredu StarTraining
• Cross-site scripting (XSS)
• Code injection

zhistaredu StarTraining Upload Endpoint MimeTypeUtils.java cross site scripting

• zhistaredu StarTraining
• Cross-site scripting (XSS)
• Code injection

mathurvishal CloudClassroom-PHP-Project registrationform.php cross site scripting

• mathurvishal CloudClassroom-PHP-Project
• Cross-site scripting (XSS)
• Code injection

Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in hMailServer

• Progressive Robot Ltd hMailServer
• Code injection

Ad Inserter 2.8.12 - 2.8.18 - Subscriber+ RCE / Stored XSS via Global Custom Fields

• Ad Inserter
• Code injection

MONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in monai/bundle/scripts.py. The function validates shape expressions with a helper that walks the AST and o...

• Code injection

<1.6.1rc0 · fixed in 1.6.1rc0

MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves _target_ values to arbitrary importable callables without an allow list and passe...

• Code injection

<1.6.1rc0 · fixed in 1.6.1rc0

Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape

• heym
• Code injection

heym before 0.0.91 Remote Code Execution via Expression Engine

• heym
• Code injection

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

• lomart.fr UP plugin for Joomla
• Code injection

mathurvishal CloudClassroom-PHP-Project updatequery.php cross site scripting

• mathurvishal CloudClassroom-PHP-Project
• Cross-site scripting (XSS)
• Code injection

mathurvishal CloudClassroom-PHP-Project Faculty Video Management managevideos2.php cross site scripting

• mathurvishal CloudClassroom-PHP-Project
• Cross-site scripting (XSS)
• Code injection

Horilla: Authenticated RCE in Horilla List-View Export

• horilla-hr
• Code injection

Horilla: Server-Side Template Injection (SSTI) in Mail Preview Endpoints Allows Authenticated Users to Disclose Password Hashes and Server Metadata

• horilla-hr
• Code injection
• Information disclosure

Krayin laravel-crm TinyMCE Media Upload Sanitizer.php cross site scripting

• Krayin laravel-crm
• Cross-site scripting (XSS)
• Code injection

krayin laravel-crm Upload Functionality ConfigurationForm.php rules cross site scripting

• krayin laravel-crm
• Cross-site scripting (XSS)
• Code injection

Zammad: AI Agent template sanitizer bypass leads to remote code execution

• zammad
• Code injection
• CWE-20

Zhonglun CloudPos JSBridge JSBridge.cs OpenLocalBrowser code injection

• Zhonglun CloudPos
• Other injection
• Code injection

sheshbabu zen Note Editor NotesEditor.jsx dangerouslySetInnerHTML cross site scripting

• sheshbabu zen
• Cross-site scripting (XSS)
• Code injection

Stored Cross-Site Scripting (XSS) in AIL Framework Tag Selector via Unescaped Tag Names

• ail project ail framework
• Cross-site scripting (XSS)
• Code injection

s2Member <= 260814 - Unauthenticated Remote Code Execution via 'first_name' Parameter in PayPal Proxy Return

• clavaque s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions
• Code injection

ningzichun student-management-system addLog.php echo cross site scripting

• ningzichun student-management-system
• Cross-site scripting (XSS)
• Code injection

Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)

• Code injection

<3.12.4 || >=4.0.0, <4.1.0 · fixed in 3.12.4, 4.1.0

YunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scripting

• YunaiV ruoyi-vue-pro
• zhijiantianya ruoyi-vue-pro
• Cross-site scripting (XSS)
• Code injection

volotat Anagnorisis Media Filename PlaylistManager.js html cross site scripting

• volotat Anagnorisis
• Cross-site scripting (XSS)
• Code injection

Shell script injection via server-supplied database name in Open MongoDB shell

• MongoDB Compass
• Code injection

DbGate JSON Runner runners.js code injection

• DbGate
• Other injection
• Code injection

Excalidraw Imported File restore.ts cross site scripting

• Excalidraw
• Cross-site scripting (XSS)
• Code injection

HFS2 2.4.0 RCE via Multipart Upload Filename Template Injection

• rejetto hfs2
• Code injection

PaperCut NG/MF: Remote Code Execution via Scripting Subsystem

• PaperCut NG/MF
• Code injection

huanzi-qch base-admin Add User CommonController.java save cross site scripting

• huanzi-qch base-admin
• Cross-site scripting (XSS)
• Code injection

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open() functions

• Code injection
• Server-side request forgery (SSRF)

SEMCMS KindEditor Upload upload_json.php cross site scripting

• SEMCMS
• Cross-site scripting (XSS)
• Code injection

Automation-controller: automation-controller-container: automation-controller: rsyslog configuration injection via log_aggregator_* settings leads to remote code execution in the control-plane rsyslo…

• Red Hat Ansible Automation Platform 2.7
• Red Hat Ansible Automation Platform 2
• Code injection

OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)

• Code injection

>=5.1.0, <7.3.0 · fixed in 7.3.0

orval before 8.29.0 Code Injection via operationId

• orval
• Code injection

orval @orval/core before 8.28.0 Code Injection via Form-Data

• orval
• Code injection

orval before 8.29.0 Code Injection via unescaped OpenAPI media-type

• orval
• Code injection

orval before 8.30.0 Code Injection via Factory Generation

• orval
• Code injection

orval @orval/effect 8.14.0 through 8.28.1 Code Injection

• orval
• Code injection

orval @orval/hono before 8.29.0 Code Injection via OpenAPI Path

• orval
• Code injection

Frappe ERPNext before 16.34.1 Unauthorized Method Invocation

• Frappe ERPNext
• Code injection

Solspace Freeform: Limited Twig template injection via submitted field values

• Code injection

>=5.0.0, <5.10.14 · fixed in 5.10.14