obridge

OBridge يوفر OBridge مولّد أكواد مصدرية بسيط بلغة جافا لاستدعاء إجراءات حزم Oracle PL/SQL. أنواع الإدخال والإخراج والقيم المُرجعة المدعومة هي: BINARYINTEGER BOOLEAN CHAR CLOB BLOB DATE NCHAR NUMBER NVARCHAR2 OBJECT - نوع كائن Oracle PLSINTEGER TABLE - جدول من نوع كائن Oracle TIMESTAMP VARCHAR2 RA...

CVE-2024-55978

CVE-2024-55978 Code Generator Pro = 1.2 - حقن SQL بدون مصادقة الوصف المكوّن الإضافي Code Generator Pro لووردبريس عرضة لثغرة حقن SQL في الإصدارات حتى 1.2 وما يشملها، وذلك بسبب عدم كفاية التهريب escaping للمعامل المقدَّم من المستخدم وعدم كفاية التحضير لاستعلام SQL الحالي. وهذا يتيح للمهاجمين غير...

WordPress-Flex-QR-Code-Generator---CVE-2025-10041

CVE-2025-10041 : Analyse de la vulnérabilité de téléchargement arbitraire de fichiers dans l'extension Flex QR Code Generator 1. Présentation de la vulnérabilité Nom de l'extension : Flex QR Code Generator Versions concernées : ≤ 1.2.5 toutes les versions Type de vulnérabilité : Téléchargement...

CVE-2022-24992

CVE-2022-24992 CVE-2022–24992 هذا المنشور عن CVE-2022–24992 أول CVE لي، والذي يشير إلى ثغرة في سكربت مولد رمز QR الشائع الاستخدام من QRCDR. مزيد من المعلومات مع التحية، n0lsec...

CVE-2026-63720-datamodel-code-generator

CVE-2026-63720 : Injection de code dans datamodel-code-generator via un customBasePath non validé Sévérité : Élevée, CVSS 3.1 7.5 / CVSS 4.0 7.5 attribué par VulnCheck, l'organisme CNA Plafond environnemental déploiement en service réseau : jusqu'à 9.8 Vecteur v4.0 :...

CVE-2026-73851

Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who controls or tampers with the OpenAPI description consumed by Kiota can supply a file reference that resolves outside the manifest package e.g. ../../../../etc/passwd, an absolute path, or a file:// /...

CVE-2026-73851 Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)

Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who controls or tampers with the OpenAPI description consumed by Kiota can supply a file reference that resolves outside the manifest package e.g. ../../../../etc/passwd, an absolute path, or a file:// /...

PT-2026-76675

Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who controls or tampers with the OpenAPI description consumed by Kiota can supply a file reference that resolves outside the manifest package e.g. ../../../../etc/passwd, an absolute path, or a file:// /...

EUVD-2026-58550

A vulnerability has been found in Dromara lamp-cloud up to 5.10.0. This affects an unknown part of the file DefGenProjectController.java of the component Code Generator. Such manipulation of the argument outputDir/parent/projectPrefix leads to path traversal. It is possible to launch the attack...

CVE-2026-19756

A vulnerability has been found in Dromara lamp-cloud up to 5.10.0. This affects an unknown part of the file DefGenProjectController.java of the component Code Generator. Such manipulation of the argument outputDir/parent/projectPrefix leads to path traversal. It is possible to launch the attack...

CVE-2026-19756

The vulnerability CVE-2026-19756 affects Dromara lamp-cloud (Code Generator) in DefGenProjectController.java, where improper handling of outputDir/parent/projectPrefix enables path traversal. The issue allows remote exploitation with a Proof-of-Concept exploit disclosed publicly; impact and speci...

CVE-2026-19756 Dromara lamp-cloud Code Generator DefGenProjectController.java path traversal

A vulnerability has been found in Dromara lamp-cloud up to 5.10.0. This affects an unknown part of the file DefGenProjectController.java of the component Code Generator. Such manipulation of the argument outputDir/parent/projectPrefix leads to path traversal. It is possible to launch the attack...

CVE-2026-19756 Dromara lamp-cloud Code Generator DefGenProjectController.java path traversal

A vulnerability has been found in Dromara lamp-cloud up to 5.10.0. This affects an unknown part of the file DefGenProjectController.java of the component Code Generator. Such manipulation of the argument outputDir/parent/projectPrefix leads to path traversal. It is possible to launch the attack...

PT-2026-71927

Name of the Vulnerable Software and Affected Versions Dromara lamp-cloud versions prior to 5.10.1 Description A path traversal issue exists in the Code Generator component within the DefGenProjectController.java file. A remote attacker can exploit this by manipulating the outputDir, parent, or...

Code Injection

datamodel-code-generator is vulnerable to Code Injection. The vulnerability is due to insufficient validation of x-python-type values from attacker-controlled JSON Schema content before inserting them into generated Python field annotations, which allows an attacker to execute arbitrary Python co...

Sensitive Information Exposure

datamodel-code-generator is vulnerable to Sensitive Information Exposure. The vulnerability is due to the reuse of Authorization, Cookie, and Proxy-Authorization headers when following cross-origin redirects while fetching remote schemas, which allows an attacker controlling a redirect target to...

Server-Side Request Forgery (SSRF)

datamodel-code-generator is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to http.getbody in src/datamodelcodegenerator/http.py accepting --url targets and redirect chain targets without proper host/IP validation, which allows an attacker to perform server-side request...

Path Traversal

datamodel-code-generator is vulnerable to Path Traversal. The vulnerability is due to improper validation of schemaLocation values in XML Schema parsing xs:include, xs:import, xs:redefine, and xs:override, which allows an attacker to reference files outside the intended input base path, resulting...

SUSE CVE-2026-55391

datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. Prior to 0.63.0, datamodel-code-generator validates a URL host once in src/datamodelcodegenerator/http.py through...

SUSE CVE-2026-55415

datamodel-code-generator generates Pydantic v2 models, dataclasses, TypedDict, and msgspec.Struct from OpenAPI, JSON Schema, GraphQL, Avro, Protobuf, and raw JSON, YAML, or CSV. From 0.11.6 until 0.64.0, datamodel-code-generator allows attacker-controlled x-python-import or customTypePath schema...