CVE-2024-50498

CVE-2024-50498 描述 LUBUS WP Query Console 中存在生成代码控制不当（'Code Injection'）漏洞，允许代码注入。此问题影响 WP Query Console：从 n/a 到 1.0。 设置 Netcat 监听器： 在你的机器上打开一个终端并启动 Netcat 监听器，等待反向 shell 连接。 root@kitploit: nc -lvnp 用法 root@kitploit: usage: CVE-2024-50498.py -h -u URL -ip LISTENERIP -P PORT wordpress | Improper...

CVE-2026-23498

CVE-2026-23498: Shopware 在 Twig 渲染视图中对代码生成的控制不当 概述 字段| 详情 ---|--- CVE ID| CVE-2026-23498 严重性| 高 安全公告| 查看公告 发现者| Lukasz Rybak 受影响产品 shopware/shopware （版本：= 6.7.0.0, = 6.7.0.0, 6.7.6.1） CWE 分类 CWE-94: 代码生成控制不当（'代码注入'） 详情 影响 我们在 CVE-2023-2017 中修复了 Twig 过滤器，使其仅允许执行通过验证的函数。但是存在一个回归，导致数组和精心构造的 PHP...

EUVD-2026-69130

Improper Control of Generation of Code 'Code Injection' vulnerability in Klemsan Electrical Electronics Inc. KIO Klemsan Internet Objects allows Code Injection. This issue affects KIO Klemsan Internet Objects: before v1.9...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: pcp (UTSA-2026-093145)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093145 advisory. A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise Hi...

The vulnerability of the standard authentication client of the Data Hub Adapter for the SAP Commerce Cloud platform allows a hacker to execute arbitrary code and cause complete system compromise.

The vulnerability of the standard authentication client for Data Hub Adapters in the SAP Commerce Cloud platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, leading to a complete compromise of the system...

The vulnerability of the TrueConf Server software, related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of the TrueConf Server software is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

The vulnerability of the USB component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow a remote attacker to cause a service failure through a specially created HTML page...

The vulnerability of the s:stepmatch() function in the Vim text editor, which allows a hacker to execute arbitrary code.

The vulnerability of the s:stepmatch function in the Vim text editor is related to improper code generation. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the Python library for interacting with git repositories, GitPython, arises from improper code generation management. This allows attackers to execute arbitrary code.

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

dotnet: .NET Framework: Privilege escalation via code injection

A flaw was found in .NET Framework. This vulnerability, caused by improper control of code generation, allows an unauthorized attacker to inject malicious code. Successful exploitation can lead to local privilege escalation, enabling the attacker to gain higher access rights on the affected syste...

dotnet: .NET Framework: Privilege escalation via code injection

A flaw was found in .NET Framework. This vulnerability, caused by improper control of code generation, allows an unauthorized attacker to inject malicious code. Successful exploitation can lead to local privilege escalation, enabling the attacker to gain higher access rights on the affected syste...

CVE-2026-50650

A flaw was found in .NET Framework. This vulnerability, caused by improper control of code generation, allows an unauthorized attacker to inject malicious code. Successful exploitation can lead to local privilege escalation, enabling the attacker to gain higher access rights on the affected syste...

The vulnerability affects the implementation of the WebRTC technology in Mozilla Firefox ESR and Thunderbird email client, allowing a hacker to execute arbitrary code.

The vulnerability in the implementation of the WebRTC technology in Mozilla Firefox ESR and the Thunderbird email client is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the control consoles for SonicWall SMA 1000 microprogrammed network interface devices allows attackers to execute arbitrary code.

The vulnerability of the control consoles for SonicWall’s SMA 1000 microprogrammed network interface devices is related to improper code generation. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

CVE-2026-24226

NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause improper control of code generation. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-57811

Improper Control of Generation of Code 'Code Injection' vulnerability in Realtyna Realtyna Organic IDX plugin real-estate-listing-realtyna-wpl allows Remote Code Inclusion.This issue affects Realtyna Organic IDX plugin: from n/a through = 5.2.0...

ROS-20260713-73-0048

The vulnerability in GitPython is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Handlebars.compile() function, a tool for creating Handlebars templates, allows a malicious actor to cause a service failure.

The vulnerability of the Handlebars.compile function, a tool for creating Handlebars templates, is related to improper handling of code generation. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the Lodash library, related to improper handling of code generation, allows attackers to trigger a service failure.

The vulnerability of the Lodash library is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...