CVE-2024-43363

CVE-2024-43363 CVE-2024-43363 Exploit Script This Python script is designed to test if a Cacti instance is vulnerable to CVE-2024-43363, a Remote Code Execution RCE vulnerability caused by log poisoning. How the Vulnerability Works: Log Poisoning: An attacker injects PHP code into device names,...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-0322link is external Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519link is external Cisco Secure Email Gateway Relative Path...

CVE-2026-103358

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allows Code Injection.This issue affects Email Template Customizer for WooCommerce: from n/a through 1.3.4...

EUVD-2026-100987

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allows Code Injection.This issue affects Email Template Customizer for WooCommerce: from n/a through 1.3.4...

CVE-2026-103358 WordPress Email Template Customizer for WooCommerce plugin <= 1.3.4 - Content Injection vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allows Code Injection.This issue affects Email Template Customizer for WooCommerce: from n/a through 1.3.4...

CVE-2026-103358

The Email Template Customizer for WooCommerce plugin for WordPress (versions up to and including 1.3.4 ) is susceptible to a Code Injection vulnerability (CWE-94). This flaw allows an attacker to execute arbitrary code due to improper control over code generation. While the provided documents con...

CVE-2026-55511

CVE-2026-55511: Yamcs StreamSQL Authenticated RCE Non-weaponized proof of concept and technical documentation for CVE-2026-55511, an authenticated Java code-injection vulnerability in the Yamcs StreamSQL aggregate-expression compiler. Field| Value ---|--- Product| Yamcs org.yamcs:yamcs-core...

CVE-2024-3094-info

CVE-2024-3094-info https://github.com/lockness-Ko/xz-vulnerable-honeypot https://tukaani.org/xz-backdoor/ - Lasse Collin response https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27...

CVE-2026-104800

The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution (RCE) in all versions up to and including 1.0 . The flaw exists in the standalone admin.php endpoint, which lacks authentication, capability checks, and nonce verification. Specifically, the plugin fails to sanitize POST par...

CVE-2026-104800 AGE-GATE <= 1.0 - Unauthenticated Remote Code Execution via PHP Code Injection via 'width'/'height' Parameters to Standalone admin.php

The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width and height' parameter parameter. This is due to missing authentication, capability checks, and nonce verification on the standalone admin.php endpoint, combined with...

CVE-2026-110444

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a crafted link to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute arbitrary code...

CVE-2026-110445

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into interacting with crafted content to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute...

CVE-2026-110445

TeamPlus Messenger , developed by Teamplus Technology, contains a Code Injection vulnerability (CWE-94). Unauthenticated remote attackers can trick users into interacting with crafted content to inject and execute arbitrary JavaScript. If a user confirms a Windows security warning, the attacker c...

EUVD-2026-100783

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into interacting with crafted content to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute...

CVE-2026-110445 TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into interacting with crafted content to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute...

EUVD-2026-100782

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a crafted link to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute arbitrary code...

CVE-2026-110444 TEAMPLUS TECHNOLOGY｜TeamPlus Messenger - Code Injection

TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a crafted link to inject and execute arbitrary JavaScript. After the user confirms a Windows security warning, attackers can execute arbitrary code...

CVE-2026-110444

TeamPlus Messenger , developed by Teamplus Technology, contains a Code Injection vulnerability (CWE-94). Unauthenticated remote attackers can exploit this by tricking users into opening a crafted link , which allows for the injection and execution of arbitrary JavaScript . If the user interacts w...

PT-2026-113954

Improper Control of Generation of Code 'Code Injection' vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allows Code Injection.This issue affects Email Template Customizer for WooCommerce: from n/a through 1.3.4...

Palo Alto Networks PAN-OS Code Injection Vulnerability

Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall...