41838 matches found
Cisco ASA Protection Mechanism Failure (CVE-2020-3458)
Multiple vulnerabilities in the secure boot process of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software for the Firepower 1000 Series and Firepower 2100 Series Appliances could allow an authenticated, local attacker to bypass the secure boot mechanism. The...
PT-2026-106864
Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-91120
Langflow: Title Authenticated Remote Code Execution in validatecode via Malicious Decorators Description...
Langflow: Prompt injection in Langflow Smart Transform can lead to code execution
Summary Langflow versions 1.3.0 through 1.10.2 contain a code-injection vulnerability in the Smart Transform LambdaFilterComponent component. Smart Transform places flow-author instructions and a preview of its input data into a prompt asking an LLM to generate a Python lambda. It then extracts a...
GHSA-9FPM-3445-2VX4 Langflow: Prompt injection in Langflow Smart Transform can lead to code execution
Summary Langflow versions 1.3.0 through 1.10.2 contain a code-injection vulnerability in the Smart Transform LambdaFilterComponent component. Smart Transform places flow-author instructions and a preview of its input data into a prompt asking an LLM to generate a Python lambda. It then extracts a...
EUVD-2026-26838
Langflow: Prompt injection in Langflow Smart Transform can lead to code execution...
Exploit for Code Injection in Craftcms Craft_Cms
CVE-2026-31857 — Craft CMS Authenticated RCE Timing PoC A sma...
CVE-2026-105329
A vulnerability was determined in TallCMS up to 4.8.0. This affects an unknown function of the file packages/tallcms/cms/src/Filament/Pages/ThemeManager.php of the component PluginManager. Executing a manipulation can lead to code injection. The attack can be launched remotely. The exploit has be...
EUVD-2026-92445
A vulnerability was determined in TallCMS up to 4.8.0. This affects an unknown function of the file packages/tallcms/cms/src/Filament/Pages/ThemeManager.php of the component PluginManager. Executing a manipulation can lead to code injection. The attack can be launched remotely. The exploit has be...
CVE-2026-105329 TallCMS PluginManager ThemeManager.php code injection
A vulnerability was determined in TallCMS up to 4.8.0. This affects an unknown function of the file packages/tallcms/cms/src/Filament/Pages/ThemeManager.php of the component PluginManager. Executing a manipulation can lead to code injection. The attack can be launched remotely. The exploit has be...
CVE-2026-105329 TallCMS PluginManager ThemeManager.php code injection
A vulnerability was determined in TallCMS up to 4.8.0. This affects an unknown function of the file packages/tallcms/cms/src/Filament/Pages/ThemeManager.php of the component PluginManager. Executing a manipulation can lead to code injection. The attack can be launched remotely. The exploit has be...
CVE-2026-105329 TallCMS PluginManager ThemeManager.php code injection
A vulnerability was determined in TallCMS up to 4.8.0. This affects an unknown function of the file packages/tallcms/cms/src/Filament/Pages/ThemeManager.php of the component PluginManager. Executing a manipulation can lead to code injection. The attack can be launched remotely. The exploit has be...
CVE-2026-105329
The TallCMS software, specifically versions up to 4.8.0 , is vulnerable to a code injection flaw within the PluginManager component. The vulnerability exists in an unknown function of the file packages/tallcms/cms/src/Filament/Pages/ThemeManager.php. An attacker can launch a remote attack to exec...
Astra Linux – Vulnerability in Chromium
Injection of code via CSS in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain sensitive information through a crafted HTML page. Chromium security severity: Medium...
CVE-2026-105226
A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component Newsletter Management. Performing a manipulation of the argument module results in code injection. The attack is possible...
CVE-2026-105225
A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1. This affects the function include of the file includes/classes/payment.php of the component Payment Page. Such manipulation of the argument MODULEPAYMENTINSTALLED leads to code injection. The attack can be executed remotely...
CVE-2026-105226
A code injection vulnerability exists in osCommerce osCommerce2 up to version 2.3.4.1 within the Newsletter Management component. The flaw originates from the include function in the admin/newsletters.php file, where manipulating the module argument allows for remote code execution. While the pro...
CVE-2026-105226 osCommerce osCommerce2 Newsletter Management newsletters.php include code injection
A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component Newsletter Management. Performing a manipulation of the argument module results in code injection. The attack is possible...
EUVD-2026-92250
A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component Newsletter Management. Performing a manipulation of the argument module results in code injection. The attack is possible...
CVE-2026-105226 osCommerce osCommerce2 Newsletter Management newsletters.php include code injection
A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component Newsletter Management. Performing a manipulation of the argument module results in code injection. The attack is possible...