Other injection.

GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

GL.iNet GL-MT3000 modem.so glc set_upgrade command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

GL.iNet GL-MT3000 modem.so glc remove_profile command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

Shlink CSV Formula Injection via Visit Export CLI

• Shlink
• Other injection

undici vulnerable to CRLF Injection via blob-like body 'type' property

• Other injection

<6.28.0 || >=7.0.0, <7.29.0 || >=8.0.0, <8.9.0 · fixed in 6.28.0, 7.29.0, 8.9.0

undici vulnerable to cookie attribute injection via unsanitized domain and unparsed setCookie fields

• Other injection

<6.28.0 || >=7.0.0, <7.29.0 || >=8.0.0, <8.9.0 · fixed in 6.28.0, 7.29.0, 8.9.0

GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection

• GL-iNet GL-MT3000
• Other injection
• Command injection

GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection

• GL-iNet GL-MT3000
• Other injection
• Command injection

GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection

• GL-iNet GL-MT3000
• Other injection
• Command injection

GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection

• GL-iNet GL-MT3000
• Other injection
• CWE-707

GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection

• GL-iNet GL-MT3000
• Other injection
• Command injection

Duplicate Advisory: GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)

• Other injection

<3.1.53 · fixed in 3.1.53

GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup

• TIMLEGGE XML::Sig
• Other injection
• CWE-1287

GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection

• GL.iNet GL-MT3000
• Other injection
• Command injection

osCommerce Email Template Configuration EmailController.php EmailController sql injection

• osCommerce
• Other injection
• SQL injection

LDAP filter injection in legacy jdk1.4 LDAPStoreHelper

• Legion of the Bouncy Castle Inc. BC-JAVA
• Other injection

CSV injection in BaserCMS

• BaserCMS
• Other injection

FreeRDP before 3.29.0 HTTP Proxy Request Injection via Redirection

• FreeRDP
• Other injection

hashi-vault-js has a path traversal and query parameter injection

• Path traversal
• Other injection

<0.5.2 · fixed in 0.5.2

@dynatrace-oss/dynatrace-mcp-server has a DQL injection via parameters not documented as DQL

• SQL injection
• Other injection

<2.1.1 · fixed in 2.1.1

YAML injection via unescaped newlines in ymlr document comments

• Other injection

>=0.0.1, <5.1.6 · fixed in 5.1.6

389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check

• Red Hat Directory Server 11.5 E4S for RHEL 8
• Red Hat Directory Server 11.7 E4S for RHEL 8
• Other injection

Apache Zeppelin: LDAP filter injection in LdapRealm — incomplete fix of CVE-2024-31867

• Apache Software Foundation Apache Zeppelin
• Other injection

Apache Zeppelin: LDAP injection in ActiveDirectoryGroupRealm filter construction

• Apache Software Foundation Apache Zeppelin
• Other injection

Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Other injection

Missing input validation / stripping of CRLF characters in SystemConfigManager

• Phoenix Contact CHARX SEC-3150
• Phoenix Contact CHARX SEC-3100
• Other injection

Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability

• Heimdall Data Database Proxy
• Other injection

Logging operator has Fluentd configuration injection that allows remote code execution

• Other injection
• Command injection

<0.0.0-20260608145523-cf437d7f1e05 · fixed in 0.0.0-20260608145523-cf437d7f1e05

swagger-typescript-api vulnerable to code injection via unescaped OpenAPI path strings in generated method bodies

• Other injection
• Code injection

<13.12.2 · fixed in 13.12.2

swagger-typescript-api vulnerable to code injection via unescaped enum string values

• Other injection
• Code injection

<13.12.2 · fixed in 13.12.2

swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template

• Other injection
• Code injection

<13.12.2 · fixed in 13.12.2

swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in fetch http-client template

• Other injection
• Code injection

<13.12.2 · fixed in 13.12.2

SuperPlane < 0.30.0 SMTP Header Injection via Webhook Event Title

• superplane
• Other injection

Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Other injection

Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM

• BlackBerry UEM
• Other injection

Rouille 0.4.0 - 3.6.2 HTTP Response Splitting via Header Injection

• tomaka rouille
• Other injection

tiny-http 0.12.0 HTTP Response Splitting via Header Injection

• tiny-http
• Other injection

Budibase: NoSQL injection in MongoDB integration: collection dump, $where JS exec, cross-collection pivot, arbitrary update/delete

• SQL injection
• Other injection

<=3.38.1 · no fixed version yet

Budibase: NoSQL Injection via JSON Parameter Interpolation in MongoDB Query Execution

• Other injection

<=3.38.1 · no fixed version yet

yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output

• Other injection

<2026.7.4 · fixed in 2026.7.4

GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)

• Other injection

<3.1.53 · fixed in 3.1.53

CodeAstro Online Classroom loginlinkadmin.php sql injection

• CodeAstro Online Classroom
• Other injection
• SQL injection

XML injection vulnerability in QDom comment, CDATA and processing-instruction serialization

• Qt
• Other injection

Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

• Other injection

>=4.2.0.Final, <4.2.16.Final || <4.1.136.Final · fixed in 4.2.16.Final, 4.1.136.Final

Netty: STOMP CONNECT Frame Header Injection in Netty

• Other injection

>=4.2.0.Final, <4.2.16.Final || <4.1.136.Final · fixed in 4.2.16.Final, 4.1.136.Final

Netty: HAProxy V1 Protocol CRLF Injection via AF_UNIX Address

• Other injection

>=4.2.0.Final, <4.2.16.Final || <4.1.136.Final · fixed in 4.2.16.Final, 4.1.136.Final

itsourcecode Hospital Management System prescription.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

SourceCodester Class and Exam Timetabling System edit_subjecta.php sql injection

• SourceCodester Class and Exam Timetabling System
• Other injection
• SQL injection

Microsoft Security Advisory CVE-2026-47303 – .NET Elevation of Privilege Vulnerability

• Other injection
• Broken access control

>=8.0.0, <8.0.29 || >=9.0.0, <9.0.18 || >=10.0.0, <10.0.10 · fixed in 8.0.29, 9.0.18, 10.0.10

zsadmin2025 ZS-Admin com.zs.sys.dept.controller.SysDeptController page OrderItem.desc sql injection

• zsadmin2025 ZS-Admin
• Other injection
• SQL injection

D-Link DNS-1550-04 remote_backup.cgi cgi_check_rsync_rw command injection

• D-Link DNS-120
• D-Link DNR-202L
• Other injection
• Command injection

itsourcecode Hospital Management System prescriptionorder.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

@astrojs/rss: XML Injection via Unescaped RSS Feed Fields

• Other injection

>=1.0.0, <4.0.19 · fixed in 4.0.19

Adminer < 5.4.3 Cookie Injection via X-Forwarded-Prefix Header

• vrana adminer
• Other injection

Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System Staffshinel Ds.jsp sql injection

• Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System
• Other injection
• SQL injection

itsourcecode Hospital Management System prescriptionorderreport.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection