CVE-2025-51387

The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses. Specifically, the following insecure settings were observed: RunAsNode is enabled and EnableNodeCliInspectArguments is not disabled. These configurations allow the application to be...

CVE-2025-8518

A vulnerability was found in givanz Vvveb 1.0.5. It has been rated as critical. Affected by this issue is the function Save of the file admin/controller/editor/code.php of the component Code Editor. The manipulation leads to code injection. The attack may be launched remotely. The exploit has bee...

CVE-2025-8518

CVE-2025-8518 affects givanz Vvveb CMS (Code Editor, Save function in admin/controller/editor/code.php) with a code injection vulnerability in version 1.0.5. Public exploits and PoCs exist (remote-friendly, authenticated access to Code Editor can lead to RCE when modified files are executed). Aff...

CVE-2025-8518 givanz Vvveb Code Editor code.php save code injection

A vulnerability was found in givanz Vvveb 1.0.5. It has been rated as critical. Affected by this issue is the function Save of the file admin/controller/editor/code.php of the component Code Editor. The manipulation leads to code injection. The attack may be launched remotely. The exploit has bee...

CVE-2025-8518 givanz Vvveb Code Editor code.php save code injection

A vulnerability was found in givanz Vvveb 1.0.5. It has been rated as critical. Affected by this issue is the function Save of the file admin/controller/editor/code.php of the component Code Editor. The manipulation leads to code injection. The attack may be launched remotely. The exploit has bee...

CVE-2025-8518 givanz Vvveb Code Editor code.php save code injection

A vulnerability was found in givanz Vvveb 1.0.5. It has been rated as critical. Affected by this issue is the function Save of the file admin/controller/editor/code.php of the component Code Editor. The manipulation leads to code injection. The attack may be launched remotely. The exploit has bee...

CVE-2025-6204

An Improper Control of Generation of Code Code Injection vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code...

CVE-2025-6204

An Improper Control of Generation of Code Code Injection vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code...

CVE-2025-6204

DELMIA Apriso CVE-2025-6204 is a code-injection vulnerability affecting Release 2020–2025. The root cause is improper control of file uploads: the upload handler fails to canonicalize filenames or enforce storage restrictions, enabling an authenticated attacker to place executable artifacts in we...

CVE-2025-6204 Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

An Improper Control of Generation of Code Code Injection vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code...

CVE-2025-6204 Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

An Improper Control of Generation of Code Code Injection vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code...

CVE-2025-51387

GitKraken Desktop versions 10.8.0 and 11.1.0 are vulnerable to code injection due to misconfigured Electron Fuses . The application fails to disable EnableNodeCliInspectArguments while having RunAsNode enabled, allowing the application to be executed in Node.js mode . This configuration enables a...

CVE-2025-8518: Improper Control of Generation of Code

A vulnerability was found in givanz Vvveb 1.0.5. It has been rated as critical. Affected by this issue is the function Save of the file admin/controller/editor/code.php of the component Code Editor. The manipulation leads to code injection. The attack may be launched remotely. The exploit has bee...

CVE-2025-51387: Improper Control of Generation of Code

The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses. Specifically, the following insecure settings were observed: RunAsNode is enabled and EnableNodeCliInspectArguments is not disabled. These configurations allow the application to be...

CVE-2025-51387

The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses. Specifically, the following insecure settings were observed: RunAsNode is enabled and EnableNodeCliInspectArguments is not disabled. These configurations allow the application to be...

PT-2025-31802

Name of the Vulnerable Software and Affected Versions Dassault Systèmes DELMIA Apriso versions 2020 through 2025 Description An Improper Control of Generation of Code Code Injection issue exists in DELMIA Apriso. This could allow an attacker to execute arbitrary code. The vulnerability is activel...

Vvveb 注入漏洞

Vvveb is a powerful and easy-to-use CMS from Givan Individual Developers for building websites, blogs or e-commerce stores. An injection vulnerability exists in Vvveb version 1.0.5, which stems from code injection due to a misbehavior of the function Save in the file...

CVE-2025-51387

The GitKraken Desktop 10.8.0 and 11.1.0 is susceptible to code injection due to misconfigured Electron Fuses. Specifically, the following insecure settings were observed: RunAsNode is enabled and EnableNodeCliInspectArguments is not disabled. These configurations allow the application to be...

GitKraken Desktop 安全漏洞

GitKraken Desktop is a cross-platform graphical Git client from GitKraken Inc. in the United States. A security vulnerability exists in GitKraken Desktop versions 10.8.0 and 11.1.0, which stems from a misconfiguration of Electron Fuses and could lead to code injection...

PT-2025-31865

Name of the Vulnerable Software and Affected Versions GitKraken Desktop versions 10.8.0 and 11.1.0 Description GitKraken Desktop is susceptible to code injection due to misconfigured Electron Fuses. Insecure settings, specifically RunAsNode being enabled and EnableNodeCliInspectArguments not bein...