CVE-2023-36570: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-36589: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-36591: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-36574: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-36575: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-36571: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-36702: Improper Control of Generation of Code

Microsoft DirectMusic Remote Code Execution Vulnerability...

CVE-2023-36789: Improper Control of Generation of Code

Skype for Business Remote Code Execution Vulnerability...

CVE-2023-36572: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-36592: Improper Control of Generation of Code

Microsoft Message Queuing MSMQ Remote Code Execution Vulnerability...

CVE-2023-4977: Improper Control of Generation of Code

Code Injection in GitHub repository librenms/librenms prior to 23.9.0...

CVE-2023-41892: Improper Control of Generation of Code

Craft CMS is a platform for creating digital experiences. This is a high-impact, low-complexity attack vector. Users running Craft installations before 4.4.15 are encouraged to update to at least that version to mitigate the issue. This issue has been fixed in Craft CMS 4.4.15...

CVE-2023-39956: Improper Control of Generation of Code

Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Electron apps that are launched as command line executables are impacted. Specifically this issue can only be exploited if the following conditions are met: 1. The app is launched with...

CVE-2020-22612: Improper Control of Generation of Code

Installer RCE on settings file write in MyBB before 1.8.22...

CVE-2023-37424: Improper Control of Generation of Code

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerabilit...

CVE-2023-40252

Improper Control of Generation of Code 'Code Injection' vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Replace Trusted Executable.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from...

CVE-2023-3401: Improper Control of Generation of Code

An issue has been discovered in GitLab affecting all versions before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. The main branch of a repository with a specially designed name allows an attacker to create repositories with malicious code...

CVE-2023-37273: Improper Control of Generation of Code

Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Running Auto-GPT version prior to 0.4.3 by cloning the git repo and executing docker compose run auto-gpt in the repo root uses a different docker-compose.yml file from the one suggested i...

CVE-2023-37199

A CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exists that could cause remote code execution when an admin user on DCE tampers with backups which are then manually restored...

CVE-2023-2359: Improper Control of Generation of Code

The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations...