CVE-2026-62350: Improper Control of Generation of Code

TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, a user with create udf privilege could upload a crafted shared library and install it as a user-defined function, such as eval, then execute arbitrary C code on the TDengine server side...

CVE-2021-42777: Generation of Error Message Containing Sensitive Information

Stimulsoft aka Stimulsoft Reports 2013.1.1600.0, when Compilation Mode is used, allows an attacker to execute arbitrary C code on any machine that renders a report, including the application server or a user's local machine, as demonstrated by System.Diagnostics.Process.Start...

CVE-2017-11615: Undefined Security Weakness

A sandbox escape in the Lua interface in Wube Factorio before 0.15.31 allows remote game servers or user-assisted attackers to execute arbitrary C code by including and loading a C library...

CVE-2014-8778: Improper Control of Generation of Code

Checkmarx CxSAST formerly CxSuite before 7.1.8 allows remote authenticated users to bypass the CxQL sandbox protection mechanism and execute arbitrary C code by asserting the 1 System.Security.Permissions.PermissionState.Unrestricted or 2 System.Security.Permissions.SecurityPermissionFlag.AllFlag...

CVE-2006-3855: Undefined Security Weakness

The ifxloadinternal function in IBM Informix Dynamic Server IDS allows remote authenticated users to execute arbitrary C code via the DllMain or init function in a library, aka "C code UDR."...