CVE-2026-23498

CVE-2026-23498: Shopware의 Twig 렌더링 뷰에서 코드 생성 제어 미흡 개요 필드| 세부 정보 ---|--- CVE ID| CVE-2026-23498 심각도| HIGH 보안 권고| 보안 권고 보기 발견자| Lukasz Rybak 영향을 받는 제품 shopware/shopware 버전: = 6.7.0.0, = 6.7.0.0, 6.7.6.1 CWE 분류 CWE-94: 코드 생성 제어 불량 '코드 인젝션' 세부 정보 영향 CVE-2023-2017에서 Twig 필터가 허용된 함수로만 실행되도록 수정했습니다. 그러나...

CVE-2024-50498

CVE-2024-50498 설명 LUBUS WP Query Console의 코드 생성 제어 불량'코드 삽입' 취약점으로 인해 코드 삽입이 가능합니다. 이 문제는 WP Query Console n/a부터 1.0까지의 버전에 영향을 미칩니다. Netcat 리스너 설정: 사용자 머신에서 터미널을 열고 Netcat 리스너를 시작하여 리버스 셸 연결을 대기하세요. nc -lvnp 사용법 usage: CVE-2024-50498.py -h -u URL -ip LISTENERIP -P PORT wordpress | Improper Contr...

The vulnerability of the Security component of the Oracle PeopleSoft Enterprise Campus Solutions platform allows a hacker to gain full control over the application.

The vulnerability of Oracle PeopleSoft Enterprise Campus Solutions’ Security component is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to gain full control over the application using the HTTPS protocol...

ROS-20260915-73-0009

The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise data integrity...

The vulnerability of the Core component of the Oracle Coherence data processing software allows a hacker to gain full control over the application.

The vulnerability of the Core component of the Oracle Coherence data processing software is related to improper code generation management. Exploiting this vulnerability can allow an attacker to gain full control over the application using the TCP protocol...

The vulnerability of the autodoppleing mechanism in the C omni-completion module of the runtime/autoload/ccomplete.vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the C omni-completion mechanism in the runtime/autoload/ccomplete.vim text editor Vim is related to improper code generation control. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20260911-73-0077

The vulnerability of the Headless web browsers Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability can allow a remote attacker to trigger a service failure through a specially created HTML page...

ROS-20260910-73-0030

The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260909-73-0113

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

ROS-20260909-73-0171

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to improper code generation. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260909-73-0126

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

ROS-20260908-73-0086

The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a malicious file...

The vulnerability of the Pre-Logon Access Provider (PLAP) component of the software for secure remote access to data in the Palo Alto Networks GlobalProtect App allows a perpetrator to execute arbitrary code.

The vulnerability of the Pre-Logon Access Provider PLAP component of the Palo Alto Networks GlobalProtect App, which enables secure remote access to data, is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with SYSTEM privilege...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser allows a hacker to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to improper code generation. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows attackers to induce a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

EUVD-2026-69130

Improper Control of Generation of Code 'Code Injection' vulnerability in Klemsan Electrical Electronics Inc. KIO Klemsan Internet Objects allows Code Injection. This issue affects KIO Klemsan Internet Objects: before v1.9...

PT-2026-84218

Improper Control of Generation of Code 'Code Injection' vulnerability in Klemsan Electrical Electronics Inc. KIO Klemsan Internet Objects allows Code Injection. This issue affects KIO Klemsan Internet Objects: before v1.9...

The vulnerability of the Headless web browsers Google Chrome and Microsoft Edge, which allows a hacker to trigger a service failure

The vulnerability of the Headless web browsers Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through a specially created HTML page...

The vulnerability in the Accessibility component of Google Chrome and Microsoft Edge browsers allows attackers to access confidential data and influence data integrity.

The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise data integrity...

The vulnerability of the getTarSpec() function in the tools/rpmbuild.cc component of the RPM package manager allows a hacker to execute arbitrary code.

The vulnerability of the getTarSpec function in the tools/rpmbuild.cc component of the RPM package manager is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...