CVE-2025-11837

The Malware Remover application, a built-in security tool from QNAP Systems , is vulnerable to an improper control of generation of code vulnerability. This flaw allows remote attackers to perform code injection , which can lead to remote code execution and the ability to bypass protection mechan...

WordPress plugin IF AS Shortcode 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code injectio...

CVE-2025-66078

Improper Control of Generation of Code 'Code Injection' vulnerability in jetmonsters Hotel Booking Lite motopress-hotel-booking-lite allows Remote Code Inclusion.This issue affects Hotel Booking Lite: from n/a through = 5.2.3...

Azure Container Apps Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Azure Container Apps allows an unauthorized attacker to execute code over a network...

CVE-2025-66533

Improper Control of Generation of Code 'Code Injection' vulnerability in StellarWP GiveWP give allows Code Injection.This issue affects GiveWP: from n/a through = 4.13.1...

ROS-20251029-06

Vulnerability of drm/amdgpu components of Linux kernel is related to dereferencing of pointer NULL. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the Redis database management system DBMS is related to integer overflow. Exploitation of t...

VulnCheck KEV: CVE-2025-6204

Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker to execute arbitrary code...

CVE-2025-62023 WordPress s2Member plugin <= 250905 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Cristián Lávaque s2Member s2member.This issue affects s2Member: from n/a through 250905...

EUVD-2021-9482

Malicious code in bioql PyPI...

ROS-20250924-09

The sftpdecodechanneldatatopacket function of the libssh library has a vulnerability related to integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service Vulnerability in libssh library's sshgetfingerprinthash function is...

The vulnerability of the Python component of the NVIDIA Megatron-LM training library, related to improper code generation control, allows attackers to execute arbitrary code and gain elevated privileges.

Vulnerability of the Python library used for training large language models like NVIDIA Megatron-LM, due to improper code generation control. Exploiting this vulnerability allows attackers to execute arbitrary code and enhance their privileges...

CVE-2025-48169

Improper Control of Generation of Code 'Code Injection' vulnerability in Jordy Meow Code Engine code-engine allows Remote Code Inclusion.This issue affects Code Engine: from n/a through = 0.3.3...

CVE-2025-53577

Improper Control of Generation of Code 'Code Injection' vulnerability in thehp Global DNS global-dns allows Remote Code Inclusion.This issue affects Global DNS: from n/a through = 3.1.0...

CVE-2025-53577

CVE-2025-53577 : WordPress plugin Global DNS (versions up to 3.1.0) suffers an improper control of code generation leading to Remote Code Execution (RCE)/Remote Code Inclusion. The issue, described as a Code Injection vulnerability, is exploitable remotely over the network and is rated with a hig...

PT-2025-33925 · Unknown · Jordy Meow Code Engine

Name of the Vulnerable Software and Affected Versions: Jordy Meow Code Engine versions n/a through 0.3.3 Description: An improper control of generation of code 'Code Injection' vulnerability exists in Jordy Meow Code Engine, allowing for Remote Code Inclusion. Recommendations: Update Jordy Meow...

CVE-2025-39483

Improper Control of Generation of Code 'Code Injection' vulnerability in imithemes Eventer allows Code Injection.This issue affects Eventer: from n/a before 3.9.9.1...

Large Language Model-Based Framework for Explainable Cyberattack Detection in Automatic Generation Control Systems

The increasing digitization of smart grids has improved operational efficiency but also introduced new cybersecurity vulnerabilities, such as False Data Injection Attacks FDIAs targeting Automatic Generation Control AGC systems. While machine learning ML and deep learning DL models have shown...

CVE-2024-32599

Improper Control of Generation of Code 'Code Injection' vulnerability in Deepak anand WP Dummy Content Generator wp-dummy-content-generator.This issue affects WP Dummy Content Generator: from n/a through = 3.2.1...

Joomla! 安全漏洞

Joomla! is a free, open source content management system from Joomla! open source. A security vulnerability exists in Joomla! prior to version 11.0.0, which stems from a remote code execution vulnerability due to improper code generation control...

The vulnerability of the universal monitoring system Zabbix, related to improper control of code generation, allows a intruder to execute arbitrary code.

The vulnerability of the Zabbix universal monitoring system is related to improper control of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...