Netsweeper <=6.4.3 - Python Code Injection

Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php with certain Referer headers launches a command line with client-supplied parameters, and allows injection of shell metacharacters. id: CVE-2020-13167 info: name: Netsweeper =6.4.4 to mitiga...

EUVD-2026-104663

A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface. Executing a manipulation of the argument path can lead to code injection. The attack can be executed remotely. The exploit has been publicly disclose...

cve-2004-2167

cve-2004-2167 Code to be tested: Download CentOS 6.4 Opertaing System Download the Latex2RTf to the Downloads folder from the below link: https://sourceforge.net/projects/latex2rtf/files/latex2rtf-win/1.9.15/ cd /home/username/Downloads/ tar -xvf latex2rtf-1.9.15.tar.gz cd latex2rtf-1.9.15 sudo...

PT-2026-120135

IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user input...

PT-2026-118353

A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file actions/administrator/cache/dynamic.php of the component Cache Settings. Performing a manipulation of the argument host/port/username/password/type/status results in code...

Linux Distros Unpatched Vulnerability : CVE-2026-112307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped...

CVE-2022-23614

CVE-2022-23614 Proof of concept PoC for CVE-2022-23614 referenced in the DSA-5107-1. CVSS-2.0 : 7.5 CVSS-3.X : 9.8 Explanation Twig is a flexible, fast, and secure template engine for PHP. Notably, it is possible to use filters in a template before rendering it. The sort filter can be used to sor...

log4j2-prosecutor

log4j2-prosecutor Motivation This fundamental vulnerability was reported by CVE-2018-3149 and patched by this article. 8u121 Release Notes However, the logging library for java called log4j2 had JNDILookupCVE-2021-44228, which allowed access to protocols such as LDAP, which allowed code injection...

CVE-2024-7094

CVE-2024-7094 CVE-2024-7094 Vulnerability checker Vulnerability type: PHP Code Injection...

CVE-2026-112371

A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface. Executing a manipulation of the argument path can lead to code injection. The attack can be executed remotely. The exploit has been publicly disclose...

CVE-2026-112371 H3C Magic NX15 RPC esps write code injection

A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface. Executing a manipulation of the argument path can lead to code injection. The attack can be executed remotely. The exploit has been publicly disclose...

CVE-2026-112371

A code injection vulnerability exists in the RPC Interface component of H3C Magic NX15 NX15V100R017 . Specifically, the write function of the /api/esps file is affected. By manipulating the argument path , a remote attacker can achieve code injection . The vulnerability is exploitable remotely, a...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via OutputPHPFilter when the outputformat='php' option is used. An attacker can supply SQL text containing unescaped dollar signs, embedding $expr or $expr sequences that OutputPHPFilter places inside...

CVE-2024-4412

The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language EL code. This can lead to the execution of arbitrary operations within the affected deployment. Exploitation of this vulnerability requires administrator privileges...

EUVD-2024-55807

The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language EL code. This can lead to the execution of arbitrary operations within the affected deployment. Exploitation of this vulnerability requires administrator privileges...

CVE-2026-112307

sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed $expr or $expr sequences that OutputPHPFilter places in double-quoted strings, executing arbitrary PHP co...

CVE-2026-112307 sqlparse through 0.6.0 PHP Code Injection via output_format='php'

sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed $expr or $expr sequences that OutputPHPFilter places in double-quoted strings, executing arbitrary PHP co...

CVE-2026-112307

sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed $expr or $expr sequences that OutputPHPFilter places in double-quoted strings, executing arbitrary PHP co...

CVE-2026-112307 sqlparse through 0.6.0 PHP Code Injection via output_format='php'

sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed $expr or $expr sequences that OutputPHPFilter places in double-quoted strings, executing arbitrary PHP co...

CVE-2026-112307 sqlparse through 0.6.0 PHP Code Injection via output_format='php'

sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed $expr or $expr sequences that OutputPHPFilter places in double-quoted strings, executing arbitrary PHP co...