Lucene search
+L

42678 matches found

Mend
Mend
•added 2026/09/01 12:40 p.m.•6 views

MSC-2026-11550

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Code injection testing – an attacker checks if...

8.7CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2026/09/01 12:27 p.m.•6 views

MSC-2026-11555

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Code injection testing – an attacker checks if...

8.7CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2026/09/01 12:22 p.m.•6 views

MSC-2026-11553

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Code injection testing – an attacker checks if...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2026/09/01 12:22 p.m.•6 views

MSC-2026-11552

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Code injection testing – an attacker checks if...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2026/09/01 12:22 p.m.•6 views

MSC-2026-11554

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Code injection testing – an attacker checks if...

8.8CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2026/09/01 12:12 p.m.•8 views

MSC-2026-11549

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Code injection testing – an attacker checks if...

8.7CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2026/09/01 11:39 a.m.•7 views

MSC-2026-11543

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: • Code injection testing – an attacker checks if...

8.7CVSS5.8AI score
SaveExploits0References1
Mend
Mend
•added 2026/09/01 11:39 a.m.•6 views

MSC-2026-11545

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Code injection testing – an attacker checks if...

8.7CVSS5.8AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/01 10:54 a.m.•26 views

CVE-2026-4813 Code injection in the Lutece Core

A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authenticated administrators to execute code remotely. The XML/XSLT processing configuration does not enable secure processing mode FEATURESECUREPROCESSING, allowing Java extension functions to be...

9.4CVSS6.3AI score0.00527EPSS
SaveExploits1References1
CVE
CVE
•added 2026/09/01 10:54 a.m.•55 views

CVE-2026-4813

Lutece Core versions up to 7.1.7 are affected by a code injection vulnerability in the XSL export management module . The root cause is that the XML/XSLT processing configuration does not enable FEATURE_SECURE_PROCESSING , permitting Java extension functions to execute from malicious XSL styleshe...

9.4CVSS6.3AI score0.00527EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/09/01 10:54 a.m.•60 views

CVE-2026-4813 Code injection in the Lutece Core

A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authenticated administrators to execute code remotely. The XML/XSLT processing configuration does not enable secure processing mode FEATURESECUREPROCESSING, allowing Java extension functions to be...

9.4CVSS0.00527EPSS
SaveExploits1References1
SUSE Linux
SUSE Linux
•added 2026/09/01 9:10 a.m.•15 views

Security update for python-sqlparse

This update for python-sqlparse fixes the following issues: CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption bsc1275459. CVE-2026-59893: quadratic complexity when processing unmatch...

8.7CVSS6.4AI score0.00337EPSS
SaveExploits0References16
osv_suse
osv_suse
•added 2026/09/01 9:10 a.m.•18 views

SUSE-SU-2026:3907-1 Security update for python-sqlparse

This update for python-sqlparse fixes the following issues: - CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption bsc1275459. - CVE-2026-59893: quadratic complexity when processing...

8.7CVSS6.3AI score0.00337EPSS
SaveExploits0References9
SUSE Linux
SUSE Linux
•added 2026/09/01 9:10 a.m.•18 views

Security update for python3-sqlparse

This update for python3-sqlparse fixes the following issues: CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption bsc1275459. CVE-2026-59893: quadratic complexity when processing...

8.7CVSS6.4AI score0.00337EPSS
SaveExploits0References16
osv_suse
osv_suse
•added 2026/09/01 9:10 a.m.•15 views

SUSE-SU-2026:3906-1 Security update for python3-sqlparse

This update for python3-sqlparse fixes the following issues: - CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption bsc1275459. - CVE-2026-59893: quadratic complexity when processing...

8.7CVSS6.3AI score0.00337EPSS
SaveExploits0References9
GithubExploit
GithubExploit
•added 2026/09/01 8:01 a.m.•40 views

Exploit for Code Injection in Langflow

CVE-2026-0768 Donate Help maintain this pr...

9.8CVSS9.1AI score0.2805EPSS
SaveExploits4
Snyk
Snyk
•added 2026/09/01 2:29 a.m.•14 views

Malicious Package

Overview fuels-forc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.9AI score
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/01 12:00 a.m.•7 views

CVE-2026-58572: Improper Control of Generation of Code

Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...

8.8CVSS6.6AI score0.00256EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/01 12:00 a.m.•6 views

CVE-2026-18808: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Klemsan Electrical Electronics Inc. KIO Klemsan Internet Objects allows Code Injection. This issue affects KIO Klemsan Internet Objects: before v1.9...

9.8CVSS5.8AI score0.00564EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/01 12:00 a.m.•17 views

PT-2026-84225

Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description An authenticated user with limited privileges can exploit a code injection flaw to execute arbitrary code with root privileges. Code injection is a type of attack where an attacker...

8.8CVSS6.4AI score0.00256EPSS
SaveExploits0References5
Rows per page
Query Builder