Other injection.

SourceCodester Class and Exam Timetabling System preview.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection

Statamic Vulnerable to CSV formula injection in form submission exports

• Other injection

<5.73.24 || >=6.0.0, <6.20.1 · fixed in 5.73.24, 6.20.1

Flawfinder output manipulation via untrusted filenames and source text

• Other injection

<2.0.20 · fixed in 2.0.20

OpenAM Authentication Bypass via MSISDN LDAP Injection

• Other injection
• CWE-1188

<16.1.1 · fixed in 16.1.1

Bitwarden Server < 2026.5.0 JSON Injection via Webhook Templates

• bitwarden server
• Other injection

Rocket.Chat: Pre-Auth NoSQL Injection in OAuth2 Token Endpoint leading to Arbitrary User ATO

• RocketChat Rocket.Chat
• Other injection

Rocket.Chat: Pre-Auth NoSQL Injection in CAS Login Handler leading to Arbitrary CAS/SAML User Session Hijack

• RocketChat Rocket.Chat
• Other injection

Jenkins Active Directory Plugin has an LDAP injection vulnerability

• Other injection

<2.41.2 · fixed in 2.41.2

Jenkins Script Security Plugin has a script security bypass vulnerability

• Other injection
• Code injection

<1402.1405.vc96e74964250 · fixed in 1402.1405.vc96e74964250

Log injection in upKeeper Solutions upKeeper Instant Privilege Access

• upKeeper Solutions upKeeper Instant Privilege Access
• Other injection

Snipe-IT API Vulnerable to Cross-Tenant Accessory Injection

• Other injection
• Broken access control

<8.6.2 · fixed in 8.6.2

Budibase has nonymous NoSQL operator injection via published-app query templates

• SQL injection
• Other injection

<3.39.12 · fixed in 3.39.12

Configuration Injection via Carriage Return (\r) in write() method

• Python Software Foundation CPython
• Other injection

Duplicate Advisory: Hono missing validation of cookie name on write path in setCookie()

• Other injection
• CWE-20

<4.12.12 · fixed in 4.12.12

@actual-app/web has CSV Formula Injection in Transaction Export via Imported Payee/Notes Fields

• Other injection

<26.6.0 · fixed in 26.6.0

skillctl: argument injection, path traversal in --dest, FIFO/device DoS, hardlink exfiltration, and commit-trailer forgery

• Path traversal
• Command injection

<0.1.3 · fixed in 0.1.3

@actual-app/cli `--format csv` Output Vulnerable to CSV Formula Injection via Custom `escapeCsv` Helper

• Other injection

<26.6.0 · fixed in 26.6.0

OpenAM has LDAP Injection via `_queryId` Parameter

• Other injection

<16.1.1 · fixed in 16.1.1

HTML injection in the Canarytoken Google Chat notification

• Thinkst Applied Research Canarytokens
• Other injection

Net::Statsite::Client versions through 1.1.0 for Perl allow metric injections

• JASEI Net::Statsite::Client
• Other injection
• CWE-150

langflow-ai langflow Bundle URL Loader code injection

• langflow
• Other injection
• Code injection

Radware Cyber Controller HTML Report Generation HTML injection

• Radware Cyber Controller
• Other injection
• Cross-site scripting (XSS)

Edimax BR-6478AC V2 POST Request mp command injection

• Edimax BR-6478AC V2
• Other injection
• Command injection

Edimax BR-6478AC V2 POST Request wiz_5in1_redirect command injection

• Edimax BR-6478AC V2
• Other injection
• Command injection

Edimax BR-6478AC V2 POST Request stainfo command injection

• Edimax BR-6478AC V2
• Other injection
• Command injection

Edimax BR-6478AC V2 POST Request setWAN command injection

• Edimax BR-6478AC V2
• Other injection
• Command injection

ILIAS Learning Management System Learning Progress Tracking class.ilTrQuery.php executeQueries sql injection

• ILIAS Learning Management System
• Other injection
• SQL injection

Montodel House-Rental-Management index.php houses sql injection

• Montodel House-Rental-Management
• Other injection
• SQL injection

Montodel House-Rental-Management login.php sql injection

• Montodel House-Rental-Management
• Other injection
• SQL injection

OpenBao: LDAPi ldaputil (wrong escape func)

• Other injection

<0.0.0-20260617104213-10b7825c714c || >=0.1.0, <=2.5.4 · fixed in 0.0.0-20260617104213-10b7825c714c

containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull

• Other injection
• CWE-20

>=1.7.0, <1.7.33 · fixed in 1.7.33

guzzlehttp/psr7: CRLF Injection in HTTP Start-Line Serialization

• Other injection

<2.12.1 · fixed in 2.12.1

undici vulnerable to HTTP header injection via Set-Cookie percent-decoding

• Other injection

<6.27.0 || >=7.0.0, <7.28.0 || >=8.0.0, <8.5.0 · fixed in 6.27.0, 7.28.0, 8.5.0

canto-saas-api: Authenticated API requests can be redirected via unencoded path variables

• Other injection
• Server-side request forgery (SSRF)

<3.0.0 · fixed in 3.0.0

Kirby: Request header injection in `Http\Remote`

• Other injection

<4.9.4 || >=5.0.0-alpha.1, <5.4.4 · fixed in 4.9.4, 5.4.4

opentelemetry-collector-contrib sentryexporter: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token

• Path traversal
• Other injection

<0.154.0 · fixed in 0.154.0

Heimdall: Forwarded Header Injection via Unsanitized Host Header in Proxy Mode

• Other injection
• CWE-20

<0.17.17 · fixed in 0.17.17

http-proxy-middleware: multipart/form-data field injection via unescaped CRLF in `fixRequestBody`

• Other injection

>=3.0.4, <3.0.7 || >=4.0.0, <4.1.1 · fixed in 3.0.7, 4.1.1

NGINX Gateway Fabric vulnerability

• F5 NGINX Gateway Fabric
• Other injection

Apache Shiro: LDAP DN Injection in DefaultLdapRealm

• Other injection

<2.2.1 || >=3.0.0-alpha-0, <3.0.0-alpha-2 · fixed in 2.2.1, 3.0.0-alpha-2

Open WebUI: RAG ACL Bypass in Milvus Multitenancy Mode

• Broken access control
• Other injection

<0.9.6 · fixed in 0.9.6

Cisco Crosswork Network Controller Remote Code Execution Vulnerability

• Cisco Crosswork Network Change Automation
• Other injection

Laravel Framework: CRLF injection in default email rule

• Other injection

<12.60.0 || >=13.0.0, <13.10.0 · fixed in 12.60.0, 13.10.0

yt-dlp: Arbitrary code execution via manifest downloads with aria2c

• Other injection

<2026.6.9 · fixed in 2026.6.9

Crawl4AI: Arbitrary file write (symlink/TOCTOU) plus log and webhook-header injection in Docker server

• Path traversal
• Other injection

<0.8.8 · fixed in 0.8.8

Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores

• Other injection

>=1.0.0, <1.0.9 || >=1.1.0, <1.1.8 · fixed in 1.0.9, 1.1.8

aiohttp: CRLF injection in multipart headers

• Other injection

<3.14.0 · fixed in 3.14.0

Nodemailer: CRLF injection in Nodemailer List-* header comments allows arbitrary message header injection

• Other injection

<8.0.9 · fixed in 8.0.9

form-data: CRLF injection in form-data via unescaped multipart field names and filenames

• Other injection

<2.5.6 || >=3.0.0, <3.0.5 || >=4.0.0, <4.0.6 · fixed in 2.5.6, 3.0.5, 4.0.6

Code Injection in Mia Technologies' Pizzy Library

• MIA Technology Inc. Pizzy Library
• Other injection

Yealink SIP-T46U Web FastCGI Service tftpuploadiperf mod_webd.TFTPUploadIperf command injection

• Yealink SIP-T46U
• Other injection
• Command injection

Yealink SIP-T46U Web FastCGI Service start mod_diagnose.CommandShellByType command injection

• Yealink SIP-T46U
• Other injection
• Command injection

Grit42 Grit data_table_entity.rb DataTableEntity sql injection

• Grit
• Other injection
• SQL injection

Ruijie EG105G-P JSON-RPC Diagnose Endpoint diagnose nslookup command injection

• Ruijie EG105G-P
• Other injection
• Command injection

Grit42 Grit GritEntityController grit_entity_controller.rb sql injection

• Grit
• Other injection
• SQL injection

GL.iNet GL-MT3000 Online Firmware Upgrade one_click_upgrade command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

GL.iNet GL-MT3000 Tor Proxy Service Configuration tor replace_country command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

CodeAstro Student Attendance Management System createStudents.php sql injection

• CodeAstro Student Attendance Management System
• Other injection
• SQL injection

Abrt: unsanitized systemd journal content written to dump directory files enables content injection

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
• Other injection

CodeAstro Human Resource Management System Payroll Invoice Payroll.php sql injection

• CodeAstro Human Resource Management System
• Other injection
• SQL injection