Other injection.

code-projects Task Management System AdminLogin.php sql injection

• code-projects Task Management System
• Other injection
• SQL injection

NightTrek Ollama-mcp index.ts command injection

• NightTrek Ollama-mcp
• Other injection
• Command injection

NightTrek Supabase-MCP generate_types command injection

• NightTrek Supabase-MCP
• Other injection
• Command injection

NellyW8 MCP4EDA run_openlane/view_waveform command injection

• NellyW8 MCP4EDA
• Other injection
• Command injection

andreahaku codex_mcp ask MCP Tool codex-process-simple.ts command injection

• andreahaku codex_mcp
• Other injection
• Command injection

MauricioMilano coder-api Projects Endpoint projects.ts createProject command injection

• MauricioMilano coder-api
• Other injection
• Command injection

andreahaku llm_memory_mcp GitHooksManager.ts auto.capture command injection

• andreahaku llm_memory_mcp
• Other injection
• Command injection

adolfosalasgomez3011 slidev-builder-mcp generateAssets Tool generateAssets.ts generateChart command injection

• adolfosalasgomez3011 slidev-builder-mcp
• Other injection
• Command injection

MIMICLab mcp-pdf-vision index.ts load_pdf command injection

• MIMICLab mcp-pdf-vision
• Other injection
• Command injection

abdullah1854 MCPGateway Claude Usage Range Endpoint claude-usage.ts getUsageByDateRange command injection

• abdullah1854 MCPGateway
• Other injection
• Command injection

Kirachon context-engine review-git-diff Endpoint gitUtils.ts execGitCommand command injection

• Kirachon context-engine
• Other injection
• Command injection

INQUIRELAB mcp-bridge-api Servers Endpoint mcp-bridge.js command injection

• INQUIRELAB mcp-bridge-api
• Other injection
• Command injection

Kakoune has a Critical RCE via Autorestore Backup Filename Injection

• mawww kakoune
• Other injection

SourceCodester Simple Doctors Appointment System ajax.php delete_appointment sql injection

• SourceCodester Simple Doctors Appointment System
• Other injection
• SQL injection

SourceCodester Photo Share Website ajax.php signup sql injection

• SourceCodester Photo Share Website
• Other injection
• SQL injection

GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name validator, enabling forged core.sshCommand/hooksPath (RCE)

• Other injection
• Command injection

<3.1.58 · fixed in 3.1.58

Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Other injection

SourceCodester Photo Share Website ajax.php login sql injection

• SourceCodester Photo Share Website
• Other injection
• SQL injection

OpenReception: Unauthenticated POST /api/log accepts arbitrary content with CRLF injection and no size or rate limits

• open-reception appointment-booking-software
• Other injection

Dgraph: DQL Injection via unvalidated regexp filter argument in GraphQL query rewriter

• dgraph
• Other injection

itsourcecode Hospital Management System viewappointment.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System viewadmin.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System treatmentrecord.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System treatmentdetail.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System treatment.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

chiuwingyan house selectall.action sql injection

• chiuwingyan house
• Other injection
• SQL injection

Ninja Forms < 3.14.10 - Unauthenticated Arbitrary Shortcode Execution via Query-String Populated Field Default

• Ninja Forms
• Other injection

FoundationAgents MetaGPT code injection

• FoundationAgents MetaGPT
• Other injection
• Code injection

FoundationAgents MetaGPT data_interpreter.py DataInterpreter code injection

• FoundationAgents MetaGPT
• Other injection
• Code injection

NocteDefensor LudusMCP ludus_cli_execute cliWrapper.ts executeCommand command injection

• NocteDefensor LudusMCP
• Other injection
• Command injection

CSS sanitizer allowlist bypass in html_sanitize_ex via non-declaration input

• Other injection

>=0.3.1, <1.4.5 || >=1.5.0-rc.0, <1.5.4 · fixed in 1.4.5, 1.5.4

NocteDefensor LudusMCP get_credential_from_user secretDialog.ts SecretDialog.showSecretDialog command injection

• NocteDefensor LudusMCP
• Other injection
• Command injection

LeeSinLiang godot-mcp create_scene/add_node index.ts executeOperation command injection

• LeeSinLiang godot-mcp
• Other injection
• Command injection

MissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injection

• MissionSquad mcp-api
• Other injection
• Command injection

Kino-Kafkaesque ssh-mcp-server SSH index.ts ssh_exec command injection

• Kino-Kafkaesque ssh-mcp-server
• Other injection
• Command injection

Element Pack Addons for Elementor <= 8.3.15 - Unauthenticated SMTP Header Injection

• bdthemes Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons
• Other injection

OpenHands send_pull_request.py initialize_repo command injection

• OpenHands
• Other injection
• Command injection

SourceCodester Computer Repair Shop Management System Master.php delete_product sql injection

• SourceCodester Computer Repair Shop Management System
• Other injection
• SQL injection

itsourcecode Hospital Management System servicetype.php sql injection

• itsourcecode Hospital Management System
• Other injection
• SQL injection

Header Injection via Custom URL Configuration in Multiple WSO2 Products Allows Open Redirect and Log Forgery

• WSO2 API Manager
• WSO2 API Control Plane
• Other injection
• CWE-20

nearai ironclaw shell.rs classify_command_risk command injection

• nearai ironclaw
• Other injection
• Command injection

Rongzhitong Visual Integrated Command and Dispatch Platform findAll sql injection

• Rongzhitong Visual Integrated Command and Dispatch Platform
• Other injection
• SQL injection

Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props

• Other injection
• Code injection

>=3.4.0, <3.21.10 || >=4.0.0, <4.5.1 · fixed in 3.21.10, 4.5.1

rclone: FTP Command Arguments Permit CRLF Injection When Custom Encoding Preserves Newlines

• Other injection

<1.75.0 · fixed in 1.75.0

imranrisal-dev Student-Management-System Login loginCheckTest.php sql injection

• imranrisal-dev Student-Management-System
• Other injection
• SQL injection

boringproxy 0.10.0 SSH authorized_keys Injection via Tunnel Creation

• boringproxy
• Other injection

Cisco IOS XE Software Security Hardening Release

• Cisco IOS XE Software
• Other injection

Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundary

• Red Hat build of Keycloak 26.4
• Red Hat build of Keycloak 26.4.14
• Other injection
• Privilege escalation

H3C NX15 esps repeaterproc command injection

• H3C NX15
• Other injection
• Command injection

lavkush-maurya Student-Registration-System changepass.php sql injection

• lavkush-maurya Student-Registration-System
• Other injection
• SQL injection

ESAFENET CDG usbkey;logindojojs sql injection

• ESAFENET CDG
• Other injection
• SQL injection

Shandong Hoteam PDM Product Data Management System DataService GetStoredClassByFilter sql injection

• Shandong Hoteam PDM Product Data Management System
• Other injection
• SQL injection

H3C NX15 esps reload.reload_config command injection

• H3C NX15
• Other injection
• Command injection

H3C NX15 esps delete command injection

• H3C NX15
• Other injection
• Command injection

H3C NX15 esps esps.ipv6.wan command injection

• H3C NX15
• Other injection
• Command injection

H3C NX15 esps add command injection

• H3C NX15
• Other injection
• Command injection

GL.iNet AX1800 RPC Endpoint oui-rpc.lua remove_rule command injection

• GL.iNet AX1800
• Other injection
• Command injection

vibesurf-ai VibeSurf Python Validation code code injection

• VibeSurf
• Other injection
• Code injection

chetans9 core-php-admin-panel customers.php sql injection

• chetans9 core-php-admin-panel
• Other injection
• SQL injection

cemtan sar2html Search sar2html.py sql injection

• cemtan sar2html
• Other injection
• SQL injection