42628 matches found
CVE-2026-94103
A vulnerability has been found in RooCMS up to 1.2.2/1.3.4/1.4RC2. This impacts the function eval of the file roocms/sitepagePHP.php of the component Frontend Rendering. Such manipulation of the argument content leads to code injection. The attack can be launched remotely. The exploit has been...
CVE-2026-94103 RooCMS Frontend Rendering site_pagePHP.php eval code injection
A vulnerability has been found in RooCMS up to 1.2.2/1.3.4/1.4RC2. This impacts the function eval of the file roocms/sitepagePHP.php of the component Frontend Rendering. Such manipulation of the argument content leads to code injection. The attack can be launched remotely. The exploit has been...
EUVD-2026-83815
A vulnerability has been found in RooCMS up to 1.2.2/1.3.4/1.4RC2. This impacts the function eval of the file roocms/sitepagePHP.php of the component Frontend Rendering. Such manipulation of the argument content leads to code injection. The attack can be launched remotely. The exploit has been...
CVE-2026-94103 RooCMS Frontend Rendering site_pagePHP.php eval code injection
A vulnerability has been found in RooCMS up to 1.2.2/1.3.4/1.4RC2. This impacts the function eval of the file roocms/sitepagePHP.php of the component Frontend Rendering. Such manipulation of the argument content leads to code injection. The attack can be launched remotely. The exploit has been...
CVE-2026-94103
RooCMS (up to versions 1.2.2 , 1.3.4 , and 1.4RC2 ) is affected by a code injection vulnerability in the eval function within roocms/site_pagePHP.php (Frontend Rendering component). Manipulation of the content argument allows an authenticated remote attacker to inject arbitrary code. The CVSS 3.1...
CVE-2026-94103: Improper Control of Generation of Code
A vulnerability has been found in RooCMS up to 1.2.2/1.3.4/1.4RC2. This impacts the function eval of the file roocms/sitepagePHP.php of the component Frontend Rendering. Such manipulation of the argument content leads to code injection. The attack can be launched remotely. The exploit has been...
PT-2026-96022
Name of the Vulnerable Software and Affected Versions RooCMS versions 1.2.2 and earlier RooCMS versions 1.3.4 and earlier RooCMS versions 1.4RC2 and earlier Description A code injection issue exists in the Frontend Rendering component within the eval function of the roocms/site pagePHP.php file. ...
PT-2026-104827
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...
PT-2026-96114
Name of the Vulnerable Software and Affected Versions libXrender versions prior to 0.9.13 Description A heap overflow occurs in the RenderQueryPictFormats function. This flaw allows malicious X servers to inject code into attached X clients. A heap overflow is a memory corruption issue where a...
CVE-2026-88807: Heap-based Buffer Overflow
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...
CVE-2026-88807: Heap-based Buffer Overflow
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...
CVE-2026-88807: Heap-based Buffer Overflow
A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be used by malicious X servers to inject code into attached X clients...
CVE-2026-94004
A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytagjs.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used...
CVE-2026-94004
DedeCMS versions up to 5.7.118 are affected by a code injection vulnerability in the file plus/mytag_js.php . The root cause is the manipulation of the aid argument within an unknown function of that file. The vulnerability is exploitable remotely with no privileges and no user interaction requir...
CVE-2026-94004 DedeCMS mytag_js.php code injection
A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytagjs.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used...
EUVD-2026-83732
A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytagjs.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used...
CVE-2026-94004 DedeCMS mytag_js.php code injection
A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytagjs.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used...
CVE-2026-94004: Improper Control of Generation of Code
A vulnerability was found in DedeCMS up to 5.7.118. The affected element is an unknown function of the file plus/mytagjs.php. The manipulation of the argument aid results in code injection. The attack can be launched remotely. The exploit has been made public and could be used...
PT-2026-95960
Name of the Vulnerable Software and Affected Versions DedeCMS versions prior to 5.7.119 Description A remote code injection issue exists in the file plus/mytag js.php. The flaw allows an attacker to execute arbitrary code by manipulating the aid argument within an unknown function of that file...
