Lucene search
K

44 matches found

RedhatCVE
RedhatCVE
added 2025/08/22 8:30 a.m.3 views

CVE-2025-53577

Improper Control of Generation of Code 'Code Injection' vulnerability in thehp Global DNS global-dns allows Remote Code Inclusion.This issue affects Global DNS: from n/a through = 3.1.0...

10CVSS5.9AI score0.00103EPSS
Exploits0References1
CVE
CVE
added 2025/08/20 8:3 a.m.15 views

CVE-2025-53577

CVE-2025-53577 : WordPress plugin Global DNS (versions up to 3.1.0) suffers an improper control of code generation leading to Remote Code Execution (RCE)/Remote Code Inclusion. The issue, described as a Code Injection vulnerability, is exploitable remotely over the network and is rated with a hig...

10CVSS5.9AI score0.00103EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/08/20 12:0 a.m.4 views

PT-2025-33925 · Unknown · Jordy Meow Code Engine

Name of the Vulnerable Software and Affected Versions: Jordy Meow Code Engine versions n/a through 0.3.3 Description: An improper control of generation of code 'Code Injection' vulnerability exists in Jordy Meow Code Engine, allowing for Remote Code Inclusion. Recommendations: Update Jordy Meow...

9.9CVSS7AI score0.00103EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2025/08/14 10:34 a.m.2 views

CVE-2025-39483

Improper Control of Generation of Code 'Code Injection' vulnerability in imithemes Eventer allows Code Injection.This issue affects Eventer: from n/a before 3.9.9.1...

6.5CVSS4.9AI score0.00223EPSS
Exploits0References2
Packet Storm News
Packet Storm News
added 2025/07/29 12:0 a.m.1 views

Large Language Model-Based Framework for Explainable Cyberattack Detection in Automatic Generation Control Systems

The increasing digitization of smart grids has improved operational efficiency but also introduced new cybersecurity vulnerabilities, such as False Data Injection Attacks FDIAs targeting Automatic Generation Control AGC systems. While machine learning ML and deep learning DL models have shown...

7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/02/05 6:55 a.m.2 views

CVE-2024-32599

Improper Control of Generation of Code 'Code Injection' vulnerability in Deepak anand WP Dummy Content Generator wp-dummy-content-generator.This issue affects WP Dummy Content Generator: from n/a through = 3.2.1...

10CVSS5.9AI score0.0072EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/02/04 12:0 a.m.2 views

Joomla! 安全漏洞

Joomla! is a free, open source content management system from Joomla! open source. A security vulnerability exists in Joomla! prior to version 11.0.0, which stems from a remote code execution vulnerability due to improper code generation control...

9.8CVSS7.8AI score0.07482EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/09/13 12:0 a.m.1 views

The vulnerability of the universal monitoring system Zabbix, related to improper control of code generation, allows a intruder to execute arbitrary code.

The vulnerability of the Zabbix universal monitoring system is related to improper control of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

3.3CVSS5.9AI score0.00335EPSS
Exploits0References10Affected Software5
CNNVD
CNNVD
added 2024/06/24 12:0 a.m.1 views

WordPress plugin WishList Member X Code Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A code injection...

9.9CVSS7.5AI score0.00848EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/05/28 12:0 a.m.5 views

PT-2025-10595

Name of the Vulnerable Software and Affected Versions Fresh Framework versions 1.70.0 and earlier Description The issue is related to an Improper Control of Generation of Code 'Code Injection' vulnerability, which allows Code Injection. Recommendations For versions 1.70.0 and earlier, update to a...

10CVSS7.3AI score0.00221EPSS
Exploits0References17
CNNVD
CNNVD
added 2024/05/18 12:0 a.m.2 views

LiteLLM 代码注入漏洞

LiteLLM is an open source application from Berri AI. All LLM APIs can be called using the OpenAI format. LiteLLM suffers from a code injection vulnerability that stems from improper control over code generation, leading to a remote code execution RCE vulnerability...

9.8CVSS9.7AI score0.03284EPSS
Exploits0References2
OSV
OSV
added 2024/04/09 6:30 p.m.22 views

GHSA-66J8-C83M-GJ5F Apache Zeppelin remote code execution by adding malicious JDBC connection string

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Zeppelin. The attacker can inject sensitive configuration or malicious code when connecting MySQL database via JDBC driver. This issue affects Apache Zeppelin: before 0.11.1. Users are recommended to upgrade to versio...

9.8CVSS9.4AI score0.11349EPSS
Exploits0References9
NVD
NVD
added 2024/04/03 12:15 p.m.7 views

CVE-2024-27191

Improper Control of Generation of Code 'Code Injection' vulnerability in inpersttion Slivery Extender slivery-extender allows Remote Code Inclusion.This issue affects Slivery Extender: from n/a through = 1.0.2...

8.5CVSS8.6AI score0.01009EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/01/12 12:0 a.m.1 views

The vulnerability of the ProxyCommand/ProxyJump component in the libssh library, which allows a hacker to execute arbitrary code.

The vulnerability of the ProxyCommand/ProxyJump component in the libssh library is related to improper code generation control. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

3.9CVSS6.9AI score0.00051EPSS
Exploits0References17Affected Software10
BDU FSTEC
BDU FSTEC
added 2023/11/22 12:0 a.m.3 views

The vulnerability of Visual Studio Code’s source editor is related to inadequate control over code generation, allowing attackers to execute arbitrary code.

The vulnerability of the Visual Studio Coded source editor is related to inadequate control over code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.01492EPSS
Exploits0References3Affected Software2
CVE
CVE
added 2022/09/23 3:37 p.m.61 views

CVE-2022-40628

The CVE-2022-40628 affects Tacitine Firewall EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100, versions 19.1.1–22.20.1. Root cause: improper control of code generation in the web-based management interface, enabling an unauthenticated remote attacker to send a crafted HTTP request and execute arbit...

9.8CVSS9.8AI score0.06556EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/05 12:0 a.m.2 views

PT-2022-17811 · Hestiacp · Hestiacp

Name of the Vulnerable Software and Affected Versions: hestiacp/hestiacp versions prior to 1.6.6 Description: The issue is related to improper control of generation of code, also known as 'code injection', and improper input validation in the hestiacp/hestiacp GitHub repository. Recommendations:...

8.8CVSS8.6AI score0.00442EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2022/01/17 12:0 a.m.2 views

The vulnerability of the Java Velocity template mechanism, related to improper code generation control, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Java Velocity template mechanism is related to improper code generation management. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9CVSS6.8AI score0.16401EPSS
Exploits0References24Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/04/27 12:0 a.m.1 views

The vulnerability of Microsoft Visual Studio Code’s editor, related to errors in code generation control, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Visual Studio Code’s source editor is related to errors in code generation control. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.09313EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/04/27 12:0 a.m.2 views

The vulnerability of Microsoft Visual Studio Code’s editor, related to errors in code generation control, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Visual Studio Code’s source editor is related to errors in code generation control. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS7.6AI score0.09313EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder