41864 matches found
EUVD-2026-87822
AzuraCast before 0.23.4 contains a code injection vulnerability in the ConfigWriter::cleanUpString method that fails to sanitize Liquidsoap string interpolation sequences, allowing authenticated users with Media or Profile permissions to inject arbitrary Liquidsoap code into station configuration...
CVE-2026-100857
AzuraCast versions prior to 0.23.4 are vulnerable to Remote Code Execution due to a code injection flaw in the ConfigWriter::cleanUpString() method. The root cause is a failure to sanitize Liquidsoap string interpolation sequences. This allows authenticated users with Media or Profile permissions...
EUVD-2026-87821
AzuraCast before 0.23.6 contains a code injection vulnerability in the remote relay password field due to incomplete migration from the vulnerable cleanUpString method to toRawString. Attackers with RemoteRelays station permission can inject nested Liquidsoap interpolation syntax to execute...
CVE-2026-100856 AzuraCast before 0.23.6 Code Injection via Remote Relay Password
AzuraCast before 0.23.6 contains a code injection vulnerability in the remote relay password field due to incomplete migration from the vulnerable cleanUpString method to toRawString. Attackers with RemoteRelays station permission can inject nested Liquidsoap interpolation syntax to execute...
CVE-2026-100856 AzuraCast before 0.23.6 Code Injection via Remote Relay Password
AzuraCast before 0.23.6 contains a code injection vulnerability in the remote relay password field due to incomplete migration from the vulnerable cleanUpString method to toRawString. Attackers with RemoteRelays station permission can inject nested Liquidsoap interpolation syntax to execute...
CVE-2026-100856 AzuraCast before 0.23.6 Code Injection via Remote Relay Password
AzuraCast before 0.23.6 contains a code injection vulnerability in the remote relay password field due to incomplete migration from the vulnerable cleanUpString method to toRawString. Attackers with RemoteRelays station permission can inject nested Liquidsoap interpolation syntax to execute...
CVE-2026-100856
AzuraCast versions prior to 0.23.6 are vulnerable to a code injection vulnerability within the remote relay password field. The root cause is an incomplete migration from the vulnerable cleanUpString method to toRawString. An attacker with RemoteRelays station permission can inject nested Liquids...
CVE-2026-100856: Improper Control of Generation of Code
AzuraCast before 0.23.6 contains a code injection vulnerability in the remote relay password field due to incomplete migration from the vulnerable cleanUpString method to toRawString. Attackers with RemoteRelays station permission can inject nested Liquidsoap interpolation syntax to execute...
CVE-2026-100857: Improper Control of Generation of Code
AzuraCast before 0.23.4 contains a code injection vulnerability in the ConfigWriter::cleanUpString method that fails to sanitize Liquidsoap string interpolation sequences, allowing authenticated users with Media or Profile permissions to inject arbitrary Liquidsoap code into station configuration...
CVE-2026-9198
CVE-2026-9198 - IBM Langflow OSS 未认证远程代码执行（RCE） 影响 IBM Langflow OSS 的严重未认证远程代码执行漏洞。 该漏洞源于以下两个弱点的组合利用： 1. /api/v1/autologin 可向未认证的网络调用者签发具有特权的 SUPERUSER Bearer 令牌。 2. /api/v1/validate/code 会在不安全的执行上下文中处理攻击者控制的 Python 代码。 一旦组合利用，这些弱点就可能导致以 Langflow 后端进程的权限执行任意 Python 代码。 该漏洞的 CVSS v3.1 评分为 9.8（严重）...
Exploit for CVE-2026-97160
CVE-2026-97160 — UP Plugin PHP Code Injection Joomla Python...
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerabilities in question are as follows -...
Exploit for Code Injection in Microsoft
MS SharePoint CVE-2026-65660 - Malicious Register Directive Co...
CVE-2026-97871
A vulnerability has been found in Zhonglun CloudPos up to 3.0.1.76. This issue affects the function OpenLocalBrowser of the file ZlPos/ZlPos/Bizlogic/JSBridge.cs of the component JSBridge. Such manipulation of the argument url leads to code injection. The attack can be executed remotely. The...
EUVD-2026-87142
A vulnerability has been found in Zhonglun CloudPos up to 3.0.1.76. This issue affects the function OpenLocalBrowser of the file ZlPos/ZlPos/Bizlogic/JSBridge.cs of the component JSBridge. Such manipulation of the argument url leads to code injection. The attack can be executed remotely. The...
CVE-2026-97871 Zhonglun CloudPos JSBridge JSBridge.cs OpenLocalBrowser code injection
A vulnerability has been found in Zhonglun CloudPos up to 3.0.1.76. This issue affects the function OpenLocalBrowser of the file ZlPos/ZlPos/Bizlogic/JSBridge.cs of the component JSBridge. Such manipulation of the argument url leads to code injection. The attack can be executed remotely. The...
CVE-2026-97871
A code injection vulnerability exists in Zhonglun CloudPos versions up to 3.0.1.76 . The flaw resides in the OpenLocalBrowser function within the ZlPos/ZlPos/Bizlogic/JSBridge.cs file of the JSBridge component. An attacker can exploit this by manipulating the url argument to execute code remotely...
CVE-2026-97871 Zhonglun CloudPos JSBridge JSBridge.cs OpenLocalBrowser code injection
A vulnerability has been found in Zhonglun CloudPos up to 3.0.1.76. This issue affects the function OpenLocalBrowser of the file ZlPos/ZlPos/Bizlogic/JSBridge.cs of the component JSBridge. Such manipulation of the argument url leads to code injection. The attack can be executed remotely. The...
cve
cve Vulnerability advisories reported by SDshadow, format...
FreeBSD : p5-Image-ExifTool -- code injection via crafted media (bba381b5-b842-11f1-8205-107c614c014e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the bba381b5-b842-11f1-8205-107c614c014e advisory. ExifTool versions up to 13.53 contain a code injection flaw in the Processmrld function of...