WordPress plugin Total Poll Lite has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

EcoStruxure Automation Expert Arbitrary Command Execution

The vulnerability of the EcoStruxure Automation Expert software for automating manufacturing processes is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary commands and gain full control over the system...

Flowise convertToValidJSONString Code Execution

The vulnerability of the convertToValidJSONString function in the software platform for creating user interfaces based on language models LLM called Flowise is related to improper code generation management. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PT-2026-28856

Уязвимость программного обеспечения для автоматизации производственных процессов EcoStruxure Automation Expert связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю выполнить произвольные команды и получить полный контроль над системой...

CVE-2026-22390

Improper Control of Generation of Code 'Code Injection' vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.This issue affects Builderall Builder for WordPress: from n/a through = 3.0.1...

cmd/cgo Component Code Execution

The vulnerability of the cmd/cgo component in the Go programming language is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code...

ClamBC Code Execution

The vulnerability of the byte-code interpreter in the ClamAV antivirus software package ClamBC is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause system failures...

WordPress Plugin Builderall Builder for WordPress: Code Injection Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that extends the...

Telecom MG Code Execution

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

browserstack-local Node.js Command Execution

The vulnerability of the logfile parameter in the lib/Local.js library of the npm package browserstack-local for the Node.js software platform is related to improper code generation management. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

ROS-20260224-73-0023

A vulnerability in the Moodle virtual learning environment is related to improper code generation controls. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code and compromise the system...

jsPDF addJS Code Execution

The vulnerability of the addJS function in the jsPDF library for creating PDF files is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code, provided that the user opens a specially crafted PDF file...

CVE-2026-26974

CVE-2026-26974 (Slyde) affects Slyde versions 0.0.4 and earlier. The root cause is Node.js automatically importing any /**.plugin.{js,mjs} files, including those from node_modules, enabling a malicious package with a .plugin.js file to execute arbitrary code when installed or required. Impact is ...

PT-2026-28810

Уязвимость программного обеспечения VoIP-шлюза Телеком MG связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

PT-2026-21033

Name of the Vulnerable Software and Affected Versions Inpersttion For Theme versions n/a through 1.0 Description An improper control of generation of code issue, specifically a code injection, exists in Inpersttion For Theme. This allows for code injection. Recommendations Versions prior to 1.1 a...

Vzlet SP Code Execution

The vulnerability of the “Vzlet SP” software suite is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

EcoStruxure Building Operation Workstation Interface Code Execution

The vulnerability of the EcoStruxure Building Operation Workstation interface and the EcoStruxure Building Operation WebStation software’s web interface is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially creat...

Microsoft Defender for Endpoint Linux Code Execution

The vulnerability of Microsoft Defender for Endpoint on Linux operating systems is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Duo Workflow Service Code Execution

The vulnerability of the Duo Workflow Service component, a service for interacting with external LLM-providers like GitLab AI Gateway, is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted request...

Ivanti Endpoint Manager Mobile Improper Code Generation Code Execution

The vulnerability of the Ivanti Endpoint Manager Mobile EPMM application for managing the lifecycle of mobile devices and applications is related to improper code generation. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...