CVE-2020-22612: Improper Control of Generation of Code

Installer RCE on settings file write in MyBB before 1.8.22...

CVE-2023-37424: Improper Control of Generation of Code

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerabilit...

CVE-2023-40252

Improper Control of Generation of Code 'Code Injection' vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Replace Trusted Executable.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from...

CVE-2023-3401: Improper Control of Generation of Code

An issue has been discovered in GitLab affecting all versions before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. The main branch of a repository with a specially designed name allows an attacker to create repositories with malicious code...

CVE-2023-37273: Improper Control of Generation of Code

Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. Running Auto-GPT version prior to 0.4.3 by cloning the git repo and executing docker compose run auto-gpt in the repo root uses a different docker-compose.yml file from the one suggested i...

CVE-2023-37199

A CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exists that could cause remote code execution when an admin user on DCE tampers with backups which are then manually restored...

CVE-2023-38068: Improper Control of Interaction Frequency

In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms...

Improper Control of Generation of Code

Description Kimai Plugin EasyBackupBundle allows admins to edit mysql commands from the configuration tab, an attacker can append arbitrary commands to achieve code execution. This can be also extended to an arbitrary file read while specifying filenames such as /etc/passwd in backup. Proof of...

CVE-2023-35930: Improper Control of Dynamically-Managed Code Resources

SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions. Any user making a negative authorization decision based on the results of a LookupResources request with 1.22.0 is affected. For example, using LookupResources...

CVE-2023-2359: Improper Control of Generation of Code

The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escalated to Remote Code Execution in some server configurations...

Code injection

A CWE-94: Improper Control of Generation of Code 'Code Injection' vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local filesystem into the HMI...

CVE-2023-33131: Improper Control of Generation of Code

Microsoft Outlook Remote Code Execution Vulnerability...

CVE-2023-21569: Improper Control of Generation of Code

Azure DevOps Server Spoofing Vulnerability...

CVE-2019-16283: Improper Control of Generation of Code

A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution...

CVE-2022-35743: Improper Control of Generation of Code

Microsoft Windows Support Diagnostic Tool MSDT Remote Code Execution Vulnerability...

CVE-2023-2980

A vulnerability classified as critical was found in Abstrium Pydio Cells 4.2.0. This vulnerability affects unknown code of the component User Creation Handler. The manipulation leads to improper control of resource identifiers. The attack can be initiated remotely. The exploit has been disclosed ...

CVE-2023-33175: Improper Control of Dynamically-Identified Variables

ToUI is a Python package for creating user interfaces websites and desktop apps from HTML. ToUI is using Flask-Caching SimpleCache to store user variables. Websites that use Website.uservars property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1...

CVE-2023-2980: Improper Control of Resource Identifiers

A vulnerability classified as critical was found in Abstrium Pydio Cells 4.2.0. This vulnerability affects unknown code of the component User Creation Handler. The manipulation leads to improper control of resource identifiers. The attack can be initiated remotely. The exploit has been disclosed ...

The vulnerability of the Apache InLong data integration platform relates to improper control of resource identifiers, allowing attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the Apache InLong data integration platform is related to improper control of resource identifiers. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected information...

CVE-2023-1178: Improper Control of Generation of Code

An issue has been discovered in GitLab CE/EE affecting all versions from 8.6 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. File integrity may be compromised when source code or installation packages are pulled from a tag or from a...