CVE-2026-110885

Improper Control of Generation of Code 'Code Injection' vulnerability in HivePress HivePress hivepress allows Code Injection.This issue affects HivePress: from n/a through 1.7.32...

CVE-2026-110885

The HivePress WordPress plugin (versions

CVE-2026-110885 WordPress HivePress plugin <= 1.7.32 - Content Injection vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in HivePress HivePress hivepress allows Code Injection.This issue affects HivePress: from n/a through 1.7.32...

EUVD-2026-103421

Improper Control of Generation of Code 'Code Injection' vulnerability in HivePress HivePress hivepress allows Code Injection.This issue affects HivePress: from n/a through 1.7.32...

CVE-2017-12615

CVE-2017-12615...

CVE-2026-111991: Improper Control of Generation of Code

A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.init of the file models/common.py of the component ONNX Metadata Handler. The manipulation of the argument names/stride leads to code injection. Remote exploitation of t...

CVE-2026-111986: Improper Control of Generation of Code

A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function getobjfromstr of the file modules/sdmodels.py of the component Model Instantiation. This manipulation of the argument Target causes code injection. The attack can be initiated remotely. T...

CVE-2026-110885: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in HivePress HivePress hivepress allows Code Injection.This issue affects HivePress: from n/a through 1.7.32...

WordPress the Grid 2.8.1 Command Injection

WordPress The Grid plugin versions through 2.8.1 contain a code injection vulnerability that allows command injection...

Laravel Livewire 3.6.3 Code Injection

Laravel Livewire versions from 3.0.0-beta.1 through 3.6.3 contain a code injection vulnerability during component property hydration that may allow unauthenticated remote code execution...

PPLmedic

PPLmedic This tool implements a Userland exploit chain for injecting arbitrary code into a PPL with the signer type Windows and elevating to the signer type WinTcb. These techniques were originally discussed by James Forshaw a.k.a. @tiraniddo in his blog post Injecting Code into Windows Protected...

Chromium CVE-2026-106189: Code injection

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-106416: Code injection

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-68571

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Kylin. Special parameter in JDBC URL can lead to code injection. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted...

Security Bulletin: IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUI [CVE-2026-96119]

Summary IBM i is vulnerable to allowing a remote authenticated attacker to execute arbitrary code due to improper data sanitization CVE-2026-96119 in HTTP Server Administration Graphical User Interface GUI as described in the vulnerability details section. Vulnerability Details ID: CVE-2026-96119...

CVE-2026-111391

SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in evaluatefilter that allows remote attackers to execute Python code by escaping the eval sandbox through re.search globals. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when...

CVE-2026-68571 Apache Kylin: JDBC URL Whitelist Verification Bypass

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Kylin. Special parameter in JDBC URL can lead to code injection. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted...

EUVD-2026-102855

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Kylin. Special parameter in JDBC URL can lead to code injection. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted...

CVE-2026-68571

A Code Injection vulnerability exists in Apache Kylin (versions 4 through 5.0.4) due to improper control over the generation of code. Specifically, a special parameter in the JDBC URL can be exploited to execute arbitrary code. The impact is highest for Kylin services directly exposed to the publ...

CVE-2026-111391 SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter

SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in evaluatefilter that allows remote attackers to execute Python code by escaping the eval sandbox through re.search globals. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when...