42662 matches found
Microsoft PowerShell Security Feature Bypass Vulnerability
Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...
SonicWall GMS Security Affected By Multiple Vulnerabilities
SonicWall GMS Virtual Appliance, Windows - 9.5.1 and earlier versions are vulnerable to the following security issues.1 CVE-2026-66145 - An unauthenticated remote code execution vulnerabilityAn unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 Build 9510.1044 and...
SonicWall Email Security Affected By Multiple Vulnerabilities
1 CVE-2026-66149 - Improper Control of Generation of Code 'Code Injection' Vulnerability via netmaskImproper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restrict...
Exploit for Code Injection in Home-Assistant Home_Assistant_Companion
CVE-2023-41898 Unvalidated Deep Link Lab Home Assistant Compa...
CVE-2026-44758
CVE-2026-44758 affects SAP Manufacturing Integration and Intelligence (MII). The description states that an attacker with high privileges can submit specially crafted input processed without sufficient validation, potentially allowing execution of arbitrary commands on the underlying OS with high...
CVE-2026-44758 Code Injection vulnerability in Manufacturing Integration and Intelligence
SAP Manufacturing Integration and Intelligence MII allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute arbitrary commands on the...
CVE-2026-44758 Code Injection vulnerability in Manufacturing Integration and Intelligence
SAP Manufacturing Integration and Intelligence MII allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute arbitrary commands on the...
On Understanding, Identifying, and Mitigating Vulnerabilities in Agentic Large Language Models
Large Language Models LLMs have undergone a shift from stateless conversational interfaces to autonomous agents capable of multi-step planning, tool invocation, code execution, and maintaining persistent memory. When these agents operate with real-world privileges---calling APIs, modifying files,...
PT-2026-70357
Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, in SANDBOX CODE ONLY mode, the engine loads the compiled user module with importFresh, a wrapper around Node.js require, before the V8 isolate is applied. Top-level module code can therefore call require'child...
Flowise CSV_Agent customReadCSV Code Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is required to exploit this vulnerability. The specific flaw exists within the run method of the CSVAgents class. The issue results from the lack of proper validation of a...
CVE-2026-66150: Improper Control of Generation of Code
Improper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via SNMP...
CVE-2026-66149: Improper Control of Generation of Code
Improper Control of Generation of Code 'Code Injection' Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands that execute as root via netmask...
CVE-2026-70338: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...
CVE-2026-70336: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Visual Studio Code allows an unauthorized attacker to execute code over a network...
CVE-2026-65660: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
PT-2026-70771
Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description Improper control of code generation in Microsoft PowerShell enables an unauthorized attacker to locally bypass a security feature through code injection, which is the process of...
Joomla Fabrik 4.6.6 Remote Code Execution
A proof of concept exploit for an unauthenticated remote code execution vulnerability in Fabrik version 4.6.6. The vulnerability exists in the Joomla Fabrik component's calc element, where attacker-controlled request values can be substituted directly into a site-defined formula that is...
PT-2026-70894
FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the FEM Displacement Constraint task dialog in src/Mod/Fem/Gui/TaskFemConstraintDisplacement.cpp passes the xDisplacementFormula, yDisplacementFormula, and zDisplacementFormula fields of a...
PT-2026-70652
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server 2016 Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition Description Improper control of code generation in Microsoft Office SharePoint allows an authorized attacker with low-privileged...
