37869 matches found
Exploit for Code Injection in Squirrelly
CVE-2024-40453 - Squirrelly v9.0.0 RCE Disclaimer: This sc...
VulnCheck KEV: CVE-2024-50498
Improper Control of Generation of Code 'Code Injection' vulnerability in Ajit Bohra WP Query Console wp-query-console allows Code Injection.This issue affects WP Query Console: from n/a through = 1.0...
CVE-2025-49250
Improper Control of Generation of Code 'Code Injection' vulnerability in cmoreira Team Showcase team-showcase-cm allows Code Injection.This issue affects Team Showcase: from n/a through 25.05.13...
CVE-2025-49250
CVE-2025-49250 affects the WordPress plugin Team Showcase . The connected Wordfence entry shows an Authenticated Arbitrary Shortcode Execution vulnerability in Team Showcase ("Team Showcase
CVE-2025-49250 WordPress Team Showcase plugin < 25.05.13 - Arbitrary Shortcode Execution vulnerability
Improper Control of Generation of Code 'Code Injection' vulnerability in cmoreira Team Showcase team-showcase-cm allows Code Injection.This issue affects Team Showcase: from n/a through 25.05.13...
CVE-2025-49250 WordPress Team Showcase plugin < 25.05.13 - Arbitrary Shortcode Execution vulnerability
Improper Control of Generation of Code 'Code Injection' vulnerability in cmoreira Team Showcase team-showcase-cm allows Code Injection.This issue affects Team Showcase: from n/a through 25.05.13...
CVE-2025-41362
Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that...
CVE-2025-41365
Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that...
CVE-2025-41365 Code injection vulnerability in IDF and ZLF
Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that...
CVE-2025-41365
CVE-2025-41365 describes a code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The flaw allows an attacker to store a malicious payload that runs in the victim’s browser. Exploitation requires authentication to the device and commands with permissions higher than the view...
CVE-2025-41365 Code injection vulnerability in IDF and ZLF
Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that...
CVE-2025-41362 Code injection vulnerability in IDF and ZLF
Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that...
CVE-2025-41362 Code injection vulnerability in IDF and ZLF
Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. This vulnerability allows an attacker to store malicious payload in software that will run in the victim's browser. Exploiting this vulnerability requires authenticating to the device and executing certain commands that...
CVE-2025-41362
CVE-2025-41362 affects IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04. The issue is a code injection vulnerability that could allow an attacker to store a malicious payload that runs in the victim’s browser. Exploitation requires authentication to the device and execution of certain commands with vi...
Exploit for CVE-2025-49113
CVE-2025-49113 - Roundcube Remote Code Execution A proof-of-c...
PT-2025-24210 · Unknown · Cmoreira Team Showcase
Name of the Vulnerable Software and Affected Versions: cmoreira Team Showcase affected versions not specified Description: The issue is related to an Improper Control of Generation of Code, also known as 'Code Injection', which allows for code injection in cmoreira Team Showcase. Recommendations:...
WordPress plugin Team Showcase 代码注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A code injection vulnerability exists in WordPress...
ZIV IDF和ZIV ZLF 代码注入漏洞
The ZIV IDF and ZIV ZLF are both transformer differential protection relays from ZIV Spain. A code injection vulnerability exists in ZIV IDF version v0.10.0-0C03-03 and ZLF version v0.10.0-0C03-04, which originates from a code injection that could lead to malicious code execution...
Code-Projects Laundry System 代码注入漏洞
Laundry System is a laundry system. Laundry System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter Customer in the file /data/editlaundry.php, which can be exploited by an attacker to execute...
SourceCodester Student Result Management System 代码注入漏洞
SourceCodester Student Result Management System is a SourceCodester open source student result management system . A code injection vulnerability exists in SourceCodester Student Result Management System version 1.0, which originates from cross-site scripting due to incorrect manipulation of the...