CVE-2026-41094

Improper control of generation of code 'code injection' in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network...

vm2 resetPromiseSpecies Command Injection

The vulnerability of the resetPromiseSpecies function in the vm2 library of the NPM package manager is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to bypass the sandbox’s security mechanisms and execute arbitrary commands...

PT-2026-54588

Уязвимость модуля трансформации кода в формат SystemJS компилятора для написания JavaScript-кода Babel связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...

PT-2026-36796

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injection. This issue affects SambaBox: from 5.1 before 5.3...

SambaBox code injection vulnerability

SambaBox is a file-sharing server solution developed by SambaBox Inc. Based on Samba, versions 5.1 to 5.3 of SambaBox had a code injection vulnerability. This vulnerability stemmed from improper code generation control, which could lead to OS command injections...

Intec-Core Module Code Execution

The vulnerability of the Intec-Core module of the INTEC Universe software suite is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-44999

Уязвимость программного обеспечения VoIP-шлюза Телеком MG связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код с правами root...

Livewire PHP Command Execution

The vulnerability of the Livewire PHP framework’s library is related to improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

CVE-2026-39440

Improper Control of Generation of Code 'Code Injection' vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPro: from n/a through 3.8.1...

Web Dynpro Java Component Code Execution

The vulnerability of the Web Dynpro Java component in SAP NetWeaver Java Application Servers is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

FortiClient GUI Code Execution

The vulnerability of the graphical user interface GUI of the FortiClient for MAC security tool is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-65331

Уязвимость платформы для создания индивидуальных веб-приложений CRM Руководитель связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

N8n Automation Code Execution

The vulnerability of the N8n automation platform for work processes is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GitLab EE Git Code Generation Data Compromise

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE is related to improper management of code generation. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality of protected information...

Drupal Kernel Code Execution

The vulnerability of the Drupal CMS system’s kernel is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

NLTK Unzip Iteration Code Execution

The vulnerability of the unzipiter function in the Natural Language Processing and statistical processing library package NLTK is related to improper code generation. Exploiting this vulnerability may allow a remote attacker to execute arbitrary code...

Google Chrome Microsoft Edge Code Execution

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page from a remote location...

1C:ERP. Management of Holding Companies Code Execution

The vulnerability of the developer tool “1C:ERP. Management of Holding Companies” is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

EUVD-2026-15889

Improper Control of Generation of Code 'Code Injection' vulnerability in jetmonsters JetFormBuilder jetformbuilder allows Code Injection.This issue affects JetFormBuilder: from n/a through = 3.5.6.1...

WordPress plugin JetFormBuilder has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...