EUVD-2024-48360

Malicious code in bioql PyPI...

CVE-2025-34226: Improper Control of a Resource Through its Lifetime

OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epochtime field supplied during program uploads is not validated and can be crafted to induce corruption of the programs database. After a successful malformed upload the runtime continues to operate...

CVE-2025-11153: Improper Control of Generation of Code

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3...

The vulnerability of the arm64 component of the Linux operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the arm64 component in the Linux operating system is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the destroy_unused_implicit_child_mr() function in the mlx5/odp.c component of the Linux kernel allows a attacker to cause a service failure.

The vulnerability of the destroyunusedimplicitchildmr function in the mlx5/odp.c component of the Linux kernel is related to improper control of resource identifiers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to improper control of resource identifiers, allows attackers to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to improper control of resource identifiers. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2025-38962

Name of the Vulnerable Software and Affected Versions WP User Frontend versions through 4.1.11 Description An improper control of generation of code issue, specifically a code injection, exists in WP User Frontend. This allows for code injection. Recommendations Update WP User Frontend to a versi...

CVE-2025-58673: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in weDevs WP User Frontend wp-user-frontend allows Code Injection.This issue affects WP User Frontend: from n/a through = 4.1.12...

The vulnerability of the FFmpeg multimedia library, related to improper control of resource identifiers (“resource injection”), allows attackers to gain unauthorized access to protected information and compromise its integrity.

The vulnerability of the FFmpeg multimedia library is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and compromise its integrity...

CVE-2024-45433

OpenSynergy BlueSDK aka Blue SDK through 6.x has Incorrect Control Flow Scoping. The specific flaw exists within the BlueSDK Bluetooth stack. The issue results from the lack of proper return control flow after detecting an unusual condition. An attacker can leverage this to bypass a security...

PT-2025-36166

Name of the Vulnerable Software and Affected Versions: PickPlugins Job Board Manager versions through 2.1.61 Description: An improper control of generation of code 'Code Injection' vulnerability exists in PickPlugins Job Board Manager. This vulnerability allows code injection. Recommendations:...

CVE-2025-58206: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove MaxCoach maxcoach allows PHP Local File Inclusion.This issue affects MaxCoach: from n/a through = 3.2.5...

CVE-2025-58827: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in PickPlugins Job Board Manager job-board-manager allows Code Injection.This issue affects Job Board Manager: from n/a through = 2.1.61...

CVE-2025-9959: Improper Control of Generation of Code

Incomplete validation of dunder attributes allows an attacker to escape from the Local Python execution environment sandbox, enforced by smolagents. The attack requires a Prompt Injection in order to trick the agent to create malicious code...

CVE-2025-9619: Improper Control of Resource Identifiers

A security flaw has been discovered in E4 Sistemas Mercatus ERP 2.00.019. The affected element is an unknown function of the file /basico/webservice/imprimir-danfe/id/. Performing manipulation results in improper control of resource identifiers. It is possible to initiate the attack remotely. The...

CVE-2025-53216: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in themeuniver Glamer glamer allows PHP Local File Inclusion.This issue affects Glamer: from n/a through = 1.0.2...

CVE-2025-5101: Improper Control of Generation of Code

An issue has been discovered in GitLab CE/EE affecting all versions before 18.1.5, 18.2 before 18.2.5, and 18.3 before 18.3.1 that under certain conditions could have allowed an authenticated attacker to distribute malicious code that appears harmless in the web interface by taking advantage of...

CVE-2025-54019

Improper Control of Generation of Code 'Code Injection' vulnerability in Beplusthemes Alone alone allows Code Injection.This issue affects Alone: from n/a through 7.8.5...

CVE-2025-30975

Improper Control of Generation of Code 'Code Injection' vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Code Injection.This issue affects Add Custom Codes: from n/a through = 4.80...

CVE-2025-9264: Improper Control of Resource Identifiers

A vulnerability was found in Xuxueli xxl-job up to 3.1.1. Affected by this issue is the function remove of the file /src/main/java/com/xxl/job/admin/controller/JobInfoController.java of the component Jobs Handler. Performing manipulation of the argument ID results in improper control of resource...