Code injection.

YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes

• Code injection
• Insecure deserialization

osCommerce osCommerce2 Newsletter Management newsletters.php include code injection

• osCommerce2
• Other injection
• Code injection

osCommerce osCommerce2 Payment payment.php include code injection

• osCommerce2
• Other injection
• Code injection

code-projects Human Resource Management System Live Event History liveEventHistory.php cross site scripting

• code-projects Human Resource Management System
• Cross-site scripting (XSS)
• Code injection

code-projects Human Resource Management Event Creation EventStore.php cross site scripting

• code-projects Human Resource Management
• Cross-site scripting (XSS)
• Code injection

WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export.

• Code injection

Northstar (dromara/northstar, quantitative trading platform) <= 9.1.1 enables the H2 Console but its auth interceptor only covers /northstar/**, so /h2-console is exposed with no authentication and t…

• Code injection

InternLM MindSearch Planner Agent graph.py ExecutionAction.run code injection

• InternLM MindSearch
• Other injection
• Code injection

Omega Solution CoinEx Crypto Ticket Attachment Upload ticket cross site scripting

• Omega Solution CoinEx Crypto
• Cross-site scripting (XSS)
• Code injection

Beaver Builder Page Builder <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget Output

• beaverbuilder Beaver Builder Page Builder – Drag and Drop Website Builder
• Code injection

WP Ultimate Review <= 2.4.3 - Unauthenticated Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter (Split-Shortcode / Late-Registered Shortcode)

• roxnor WP Ultimate Review
• Code injection

WP Ultimate Review <= 2.4.3 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_reviw_summery' Parameter

• roxnor WP Ultimate Review
• Code injection

All in One SEO <= 5.0.2 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Query Parameter

• smub All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)
• Code injection

Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content <= 4.17.4 - Authenticated (Subscriber+) Sensitive Information Exposure via Shortcode Injection v…

• properfraction Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
• Code injection

Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF

• Command injection
• Code injection

>=0.1.0, <0.1.7 · fixed in 0.1.7

Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway

• GitLab AI Gateway
• Code injection

SourceCodester Student Result Management System Announcement new_announcement.php cross site scripting

• SourceCodester Student Result Management System
• Cross-site scripting (XSS)
• Code injection

CTX Feed Pro <= 7.6.12 - Authenticated (Administrator+) Remote Code Execution

• CTX Feed Pro
• Code injection

agentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py).

• Code injection

FinRobot 1.0.0 contains code injection in CodingUtils.create_file_with_code ().

• Code injection

FinRobot v1.0.0 is vulnerable to Code Injection in CodingUtils.modify_code.

• Code injection

vanna v2.0.2 contains a code injection vulnerability in VannaBase.get_plotly_figure (src/vanna/legacy/base/base.py).

• Code injection

sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute.

• Code injection

NetBox Device Type Library: Arbitrary Code Execution on CI Runner Through Malicious requirements.txt, .pre-commit-hooks-config.yaml, and .gitmodules Files

• netbox-community devicetype-library
• Code injection
• CWE-494

Foreman: foreman: arbitrary code execution via safemode sandbox bypass

• Red Hat Satellite 6.16 for RHEL 8
• Red Hat Satellite 6.16 for RHEL 9
• Code injection

vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection

• Code injection
• CWE-693

>=3.11.6, <3.11.7 · fixed in 3.11.7

JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)

• Cross-site scripting (XSS)
• Code injection

>=3.0.0, <4.5.11 || >=4.6.0, <4.6.4 · fixed in 4.5.11, 4.6.4

rhukster dom-sanitizer URL Validation DOMSanitizer.php isDangerousUrl cross site scripting

• rhukster dom-sanitizer
• Cross-site scripting (XSS)
• Code injection

formtools.org Form Tools Client Settings Clients.class.php updateClientSettingsTab special elements in template engine

• formtools.org Form Tools
• Code injection
• CWE-791

Appointment Booking Plugin <= 5.7.0 - Unauthenticated Arbitrary Shortcode Execution via First/Last Name Field

• Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress
• Code injection

deeptutor 1.4.0 contains code injection in ExecTool.execute.

• Code injection

GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution

• Code injection
• CWE-427

<3.1.60 · fixed in 3.1.60

Kiteworks Email Protection Gateway Remote Code Execution

• Kiteworks Email Protection Gateway
• Code injection
• Unrestricted file upload

Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity

• Kiteworks Email Protection Gateway
• Code injection
• CWE-178

Kiteworks Core Remote Code Execution through Server-Side Template Injection

• Kiteworks Core
• Code injection

Kiteworks Email Protection Gateway remote code execution

• Kiteworks Email Protection Gateway
• Path traversal
• Code injection

Kiteworks Email Protection Gateway unsafe reflection

• Kiteworks Email Protection Gateway
• Code injection

Taskcluster: Unauthenticated remote code execution in `web-server` via GraphQL `filter` argument (sift `$where`)

• taskcluster
• Code injection
• Privilege escalation

WordPress SiteSkite plugin <= 2.1.8 - Remote Code Execution (RCE) vulnerability

• SiteSkite
• Code injection

WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Remote Code Execution (RCE) vulnerability

• AcyMailing Newsletter Team AcyMailing SMTP Newsletter
• Code injection

Apache WSS4J: Streaming WS-SecurityPolicy validation may skip element-protection checks.

• Apache Software Foundation Apache WSS4J
• Code injection

Moodle: arbitrary class instantiation via report builder audience classname

• Code injection

gedelumbung HospitalManagement Guest Book buku_tamu.php kirim cross site scripting

• gedelumbung HospitalManagement
• Cross-site scripting (XSS)
• Code injection

Devika v1.0 is vulnerable to Code Injection via the Runner.run_code function in src/agents/runner/runner.py.

• Code injection

Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct executi…

• Code injection

In DB-GPT 0.7.5 and 0.8.0, a skill uploaded through the real /api/v1/skills/upload route can later be executed through the real /api/v1/chat/react-agent flow.

• Code injection

bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection in src/backend/bisheng/api/v1/validate.py.

• Code injection

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt-driven shell command execution without an approval boundary.

• Code injection

In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through SubprocessInterpreter without an approval boundary.

• Code injection

In agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes execute_python_code as an available tool, a remote WebSocket user can prompt the agent to call that tool and run Python…

• Code injection

Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution

• WatchGuard Fireware OS
• Code injection
• Weak cryptography or TLS

Naichen ThinkCMF Email Template MailController.php templatePut special elements in template engine

• Naichen ThinkCMF
• Code injection
• CWE-791

Toptech TMS7 and TopHAT Eval Injection

• Toptech Systems TMS7
• Toptech Systems TopHAT
• Code injection

PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()

• Code injection

>=1.0.0-alpha1, <1.2.3 · fixed in 1.2.3

Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4

• balbooa.com Balbooa Forms extension for Joomla
• Code injection

GluonTS arbitrary command execution during model deserialization

• AWS gluonts
• Code injection
• Insecure deserialization

Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x

• Dassault Systèmes GEOVIA Geospatial Data Manager
• Code injection

coolbeans1212 MateisHomePage-Website users.php cross site scripting

• coolbeans1212 MateisHomePage-Website
• Cross-site scripting (XSS)
• Code injection

CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting

• CodeCanyon Rocket LMS
• Cross-site scripting (XSS)
• Code injection

mwasikz robo-cafe-rms Edit Profile Feature update-account.php cross site scripting

• mwasikz robo-cafe-rms
• Cross-site scripting (XSS)
• Code injection