CVE-2026-51871

Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct execution of LLM-generated content...

EUVD-2026-90412

Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct execution of LLM-generated content...

CVE-2026-51871

Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runner.py which allows an attacker to achieve arbitrary code execution by exploiting the direct execution of LLM-generated content...

PT-2026-103350

External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. This issue affects MediaWiki CentralAuth extension: 1.46, 1.45, and 1.43...

EUVD-2026-90419

bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection in src/backend/bisheng/api/v1/validate.py...

CVE-2026-51861: Improper Control of Generation of Code

bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection in src/backend/bisheng/api/v1/validate.py...

PT-2026-103612

bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection in src/backend/bisheng/api/v1/validate.py...

Rocky Linux 9.6 [TuxCare] Security Update: gpsd-minimal / gpsd-minimal-clients (ALMALINUX9.6:CLSA-2026:1789034846)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789034846 advisory. - gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility that allows an...

AlmaLinux 9.2 [TuxCare] Security Update: gpsd-minimal / gpsd-minimal-clients (ALMALINUX9.2:CLSA-2026:1789389842)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1789389842 advisory. - gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility that allows an attacke...

AlmaLinux 9.2 [TuxCare] Security Update: python3.11-setuptools / python3.11-setuptools-wheel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1764615456)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764615456 advisory. - A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its...

CVE-2026-86131

A code injection vulnerability exists in the WatchGuard Fireware OS during the handling of BOVPN Over TLS client configurations. This flaw allows an attacker who controls a remote VPN server to execute arbitrary commands with root privileges on the connecting Firebox . No specific patch versions ...

CVE-2026-86131 Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox...

CVE-2026-86131 Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution

A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attacker who controls the remote VPN server to execute arbitrary commands as root on the connecting Firebox...

Exploit for Code Injection in Craftcms Craft_Cms

CVE-2026-31857 - CraftCMS RCE exploit Python exploit for a RC...

HUST-CSE-cybersecurity-practice-3

Comprehensive Cybersecurity Practice Three This repository co...

N-able N-central CVE-2026-86218 Detect

Detects N-able N-central builds before 2026.3.1.14 Hotfix 4 that expose the pre-authentication /remoteControlAction.do?method=getPierDetails reconnaissance endpoint associated with CVE-2026-86218 static code injection. !/usr/bin/env python3 -- coding: utf-8 -- """Detect N-able N-central...

SharePoint CVE-2026-65660 ToolPane Detect

Detects on-prem SharePoint farms exposed to CVE-2026-65660: ToolPane Register directive quote injection on AddGallery/ToolPane endpoints. Fingerprints MicrosoftSharePointTeamServices build and reachable layouts/15/ gallery edit surfaces without sending exploit markup. !/usr/bin/env python3 --...

Adobe Campaign Classic CVE-2026-83660 Detect

Detects Adobe Campaign Classic ACC instances likely affected by CVE-2026-83660 unauthenticated SSRF / privilege escalation and CVE-2026-89276 low-privilege code injection. Fingerprints ACC JSP surfaces and parses build numbers from /r/test against the APSB26-142 fixed build 7.4.4.9402...

CVE-2026-84154

A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary code on the server...

CVE-2026-84154

The GEOVIA Geospatial Data Manager software, spanning Release 3DEXPERIENCE R2024x through R2026x , is impacted by a Code Injection vulnerability. This flaw could enable an attacker to execute arbitrary code on the server . While the vulnerability has a CRITICAL severity score of 9.9, the provided...