CVE-2025-30975

CVE-2025-30975 affects the WordPress plugin Add Custom Codes (versions up to 4.80). The issue is described as Improper Control of Generation of Code (Code Injection) allowing Remote Code Execution for authenticated users (Contributor+). Documents confirm the vulnerability is still unpatched (Patc...

CVE-2025-53577

CVE-2025-53577 : WordPress plugin Global DNS (versions up to 3.1.0) suffers an improper control of code generation leading to Remote Code Execution (RCE)/Remote Code Inclusion. The issue, described as a Code Injection vulnerability, is exploitable remotely over the network and is rated with a hig...

CVE-2025-54019

The CVE-2025-54019 entry pertains to the WordPress Alone (Alone) plugin/theme, with an Arbitrary Code Execution vulnerability caused by improper control of code generation. Affected versions are listed as

PT-2025-33908 · Unknown · Saifumak Add Custom Codes

Name of the Vulnerable Software and Affected Versions: SaifuMak Add Custom Codes versions through 4.80 Description: An improper control of generation of code 'Code Injection' issue exists in SaifuMak Add Custom Codes, allowing code injection. Recommendations: At the moment, there is no informatio...

PT-2025-34002 · WordPress · Bearsthemes Alone

Name of the Vulnerable Software and Affected Versions: Bearsthemes Alone affected versions not specified Description: Improper Control of Generation of Code 'Code Injection' vulnerability in Bearsthemes Alone allows Code Injection. Recommendations: At the moment, there is no information about a...

WordPress plugin Add Custom Codes 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress plugin Code Engine 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress plugin Alone 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on servers running PHP and MySQL, and the WordPre...

Linux Distros Unpatched Vulnerability : CVE-2024-7883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers when a Secure to Non-secu...

Apache OFBiz 安全漏洞

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a set of Java-based Web application components and tools. A code execution vulnerability exists in Apache OFBiz versions prior to 24.09.02 that stems from improper...

CVE-2025-39483

CVE-2025-39483 is an Unauthenticated Shortcode/Code Injection vulnerability in the imithemes Eventer WordPress plugin. Affected: Eventer before 3.9.9.1 (via versions up to 3.9.6 per sources). Impact: shortcodes could be abused to inject code. Remediation: update Eventer to version 3.9.9.1 or late...

CVE-2025-39483

Improper Control of Generation of Code 'Code Injection' vulnerability in imithemes Eventer allows Code Injection.This issue affects Eventer: from n/a before 3.9.9.1...

WordPress plugin Eventer 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

The vulnerability of HylaFAX Enterprise Web Interface and AvantFAX control devices, related to improper code generation management, allows attackers to execute arbitrary codes.

The vulnerability of HylaFAX Enterprise Web Interface and AvantFAX lies in improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created file...

CVE-2025-53187

Due to an issue in configuration, code that was intended for debugging purposes was included in the market release of the ASPECT FW allowing an attacker to bypass authentication. This vulnerability may allow an attacker to change the system time, access files, and make function calls without prio...

BIT-GITLAB-2025-2867 Improper Control of Generation of Code ('Code Injection') in GitLab

An issue has been discovered in the GitLab Duo with Amazon Q affecting all versions from 17.8 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1. A specifically crafted issue could manipulate AI-assisted development features to potentially expose sensitive project data to unauthorized...

PT-2025-32562

Name of the Vulnerable Software and Affected Versions: ABB ASPECT versions prior to 3.08.04-s01 Description: An issue in configuration led to the inclusion of debugging code in the released version of ABB ASPECT, allowing attackers to bypass authentication. This can enable an attacker to change t...

The vulnerability of the routecheck function in the ThinkPHP framework allows a hacker to execute arbitrary code.

The vulnerability of the routecheck function in the ThinkPHP framework is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted commands...

Linux Distros Unpatched Vulnerability : CVE-2024-1552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.Note: This issue only affects 32-bit ARM devices. Th...

The vulnerability of the sys/audit component in the Vault Enterprise and Vault Community Edition enterprise information archiving platform allows a perpetrator to gain unauthorized access to execute arbitrary code.

The vulnerability of the sys/audit component in the Vault Enterprise and Vault Community Edition enterprise information archiving platforms is related to improper code generation management. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to...