41783 matches found
PT-2026-113363
Name of the Vulnerable Software and Affected Versions Adobe ColdFusion versions 2023 and 2025 Description An improper control of code generation leads to a code injection issue that allows unauthenticated remote attackers to execute arbitrary code on the server. This process occurs in the context...
PT-2026-111948
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper control of code generation leads to a code injection issue, allowing an authorized attacker to elevate privileges over a network. Recommendations At the moment,...
CVE-2026-105903: Improper Control of Generation of Code
ColdFusion is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue doe...
Microsoft Windows: CVE-2026-96220: Windows Assigned Access Elevation of Privilege Vulnerability
Improper control of generation of code 'code injection' in Windows Assigned Access allows an authorized attacker to elevate privileges locally...
PT-2026-111275
Name of the Vulnerable Software and Affected Versions storyicon comfyui segment anything versions up to ab6395596399d5048639cdab7e44ec9fae857a93 Description Code injection is possible via remote attack in the GroundingDINO Model Loading component. The issue exists within the SLConfig. file2dict...
CVE-2026-108382: Improper Control of Generation of Code
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, EnumRepresentation.rendersymbols concatenates each schema-controlled enum symbol between double quotes in a...
CVE-2026-83759: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Windows Encrypting File System EFS allows an authorized attacker to execute code over a network...
CVE-2026-96220: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in Windows Assigned Access allows an authorized attacker to elevate privileges locally...
CVE-2026-102870: Improper Control of Generation of Code
Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...
Microsoft Visual Studio: CVE-2026-102870: ASP.NET Core Remote Code Execution Vulnerability
Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...
UBUNTU-CVE-2026-102870
Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...
PT-2026-111954
Name of the Vulnerable Software and Affected Versions Microsoft.AspNetCore.Components.WebAssembly.Server versions 10.0.0 through 10.0.12 Microsoft.AspNetCore.Components.WebAssembly.Server versions 11.0.0-preview.1 through 11.0.0-rc.1 Description Improper control of code generation in ASP.NET Core...
CVE-2026-108941 Linketic CityGaussian Sidecar Parsing common.py parse_cfg_args code injection
A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parsecfgargs of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfgargs leads to code injection. The attack can only be performed from a local...
CVE-2026-108941
The Linketic CityGaussian software (versions up to 2.0 ) contains a code injection vulnerability within the Sidecar Parsing component. Specifically, the parse_cfg_args function in the internal/utils/common.py file is susceptible to exploitation because the manipulation of the cfg_args argument al...
CVE-2026-108941 Linketic CityGaussian Sidecar Parsing common.py parse_cfg_args code injection
A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parsecfgargs of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfgargs leads to code injection. The attack can only be performed from a local...
CVE-2024-7954
CVE-2024-7954 - SPIP 4.2.8 Remote Command Execution RCE Exploit This script exploits a Remote Code Execution vulnerability in SPIP version 4.2.8 via the porteplumeprevisu endpoint. The vulnerability allows unauthenticated attackers to inject PHP code through preview rendering of crafted image tag...
CVE-2026-82108
IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to a code injection vulnerability (CWE-94). A remote authenticated attacker can execute arbitrary code because the software fails to properly neutralize special elements used in OS commands . This vulnerability carries a High base severity...
CVE-2026-82108 DataStage on Cloud Pak for Data Code Injection
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...
CVE-2026-90920
The IBM Maximo AI Service versions 9.1.0 and 9.2.0 are vulnerable to a Code Injection vulnerability (CWE-94). A remote attacker can execute arbitrary code because of improper control over code generation. The vulnerability has a CRITICAL severity score of 9.8, allowing for high impact on confiden...