CVE-2026-110887: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This issue affects HivePress: from n/a through 1.7.32...

CVE-2026-83531: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection', Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' vulnerability in Apache Camel. This issue affects Apache Camel: from 4.4.0 before 4.18.5, from 4.19.0 before 4.22.1. The...

PT-2026-117222

A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function change info of the file webui.py. Executing a manipulation of the argument ckpt path can lead to code injection. The attack can be executed remotely. The exploit has been publish...

CVE-2026-112078: Improper Control of Generation of Code

A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function changeinfo of the file webui.py. Executing a manipulation of the argument ckptpath can lead to code injection. The attack can be executed remotely. The exploit has been published...

CVE-2026-112140: Improper Control of Generation of Code

A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function getlibmodule of the file python/mlcchat/chatmodule.py. The manipulation of the argument modellib results in code injection. The attack may be launched remotely. The...

PT-2026-117373

A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function get lib module of the file python/mlc chat/chat module.py. The manipulation of the argument model lib results in code injection. The attack may be launched remotely. Th...

PT-2026-117692

Name of the Vulnerable Software and Affected Versions H3C Magic NX15 version NX15V100R017 Description A remote code injection issue exists within the RPC Interface component. The problem occurs in the write function of the '/api/esps' endpoint, where manipulating the path argument allows an...

CVE-2026-112100: Improper Control of Generation of Code

A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor.init of the file deeppavlov/models/preprocessors/multitaskpreprocessor.py. This manipulation of the argument preprocessor causes code injection. The attack is possible to be carried o...

CVE-2026-112307: Improper Control of Generation of Code

sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed $expr or $expr sequences that OutputPHPFilter places in double-quoted strings, executing arbitrary PHP co...

CVE-2026-112080: Improper Control of Generation of Code

A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function getclassfromdynamicmodule of the file examples/chatgradionomerge.py of the component Adapter Config. The manipulation of the argument basemodelnameorpath...

PT-2026-117467

sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attackers can embed $expr or $expr sequences that OutputPHPFilter places in double-quoted strings, executing arbitrary PHP co...

PT-2026-117340

Improper Control of Generation of Code 'Code Injection', Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' vulnerability in Apache Camel. This issue affects Apache Camel: from 4.4.0 before 4.18.5, from 4.19.0 before 4.22.1. The...

CVE-2026-111991

A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.init of the file models/common.py of the component ONNX Metadata Handler. The manipulation of the argument names/stride leads to code injection. Remote exploitation of t...

EUVD-2026-103679

A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.init of the file models/common.py of the component ONNX Metadata Handler. The manipulation of the argument names/stride leads to code injection. Remote exploitation of t...

CVE-2026-111991 WongKinYiu yolov9 ONNX Metadata common.py DetectMultiBackend.__init__ code injection

A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.init of the file models/common.py of the component ONNX Metadata Handler. The manipulation of the argument names/stride leads to code injection. Remote exploitation of t...

CVE-2026-111991

A security vulnerability exists in WongKinYiu yolov9 0.1 within the ONNX Metadata Handler component. The flaw specifically affects the DetectMultiBackend extunderscore extunderscoreinit extunderscore extunderscore function in the models/common.py file. By manipulating the names/stride arguments, ...

CVE-2026-111991 WongKinYiu yolov9 ONNX Metadata common.py DetectMultiBackend.__init__ code injection

A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.init of the file models/common.py of the component ONNX Metadata Handler. The manipulation of the argument names/stride leads to code injection. Remote exploitation of t...

CVE-2026-111986

A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function getobjfromstr of the file modules/sdmodels.py of the component Model Instantiation. This manipulation of the argument Target causes code injection. The attack can be initiated remotely. T...

EUVD-2026-103506

A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function getobjfromstr of the file modules/sdmodels.py of the component Model Instantiation. This manipulation of the argument Target causes code injection. The attack can be initiated remotely. T...

CVE-2026-111986 AUTOMATIC1111 stable-diffusion-webui Model Instantiation sd_models.py get_obj_from_str code injection

A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function getobjfromstr of the file modules/sdmodels.py of the component Model Instantiation. This manipulation of the argument Target causes code injection. The attack can be initiated remotely. T...