CVE-2022-42045

CVE-2022-42045 Summary We discovered an Arbitrary code injection in Zemana amsdk.sys kernel-mode driver, a part of Zemana Antimalware SDK. The vulnerability allows to inject an arbitrary code into the one of the driver code sections and then to execute it with kernel-mode privileges local...

CVE-2023-33246_RocketMQ_RCE_EXPLOIT

CVE-2023-33246 RocketMQ Remote Code Execution Exploit CVE-2023-33246 RocketMQ Remote Code Execution Exploit Overview RocketMQ is a distributed messaging and streaming platform. RocketMQ versions 5.1.0 and below are vulnerable to Arbitrary Code Injection. Broker component of RocketMQ is leaked on...

DS-Wireless-Communication-Remote-Code-Execution

DS Wireless Communication Remote Code Execution Injects arbitrary code into a client's game. Prerequisites Python 3.10 pip pydivert Usage pip install -r requirements.txt python dswirelesscommunicationremotecodeexecution.py CVE-ID CVE-2023-45887 License GNU General Public License v2.0...

CVE-2026-109097

A vulnerability has been identified in ROS All versions V2.3.1. Affected systems do not properly escape text of message definition files. This could allow an attacker that is able to pass a crafted message definition file to the user to inject arbitrary code into the generated program...

CVE-2026-109097

A vulnerability exists in ROS# (all versions

CVE-2026-109097

A vulnerability has been identified in ROS All versions V2.3.1. Affected systems do not properly escape text of message definition files. This could allow an attacker that is able to pass a crafted message definition file to the user to inject arbitrary code into the generated program...

EUVD-2026-120888

A vulnerability has been identified in ROS All versions V2.3.1. Affected systems do not properly escape text of message definition files. This could allow an attacker that is able to pass a crafted message definition file to the user to inject arbitrary code into the generated program...

CVE-2026-109097

A vulnerability has been identified in ROS All versions V2.3.1. Affected systems do not properly escape text of message definition files. This could allow an attacker that is able to pass a crafted message definition file to the user to inject arbitrary code into the generated program...

PT-2026-141588

A vulnerability has been identified in ROS All versions V2.3.1. Affected systems do not properly escape text of message definition files. This could allow an attacker that is able to pass a crafted message definition file to the user to inject arbitrary code into the generated program...

EUVD-2026-119740

IBM Bob 1.0.4 through 2.0.1 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code...

Arbitrary Code Injection

Overview ultralytics is an Ultralytics YOLOv8 for SOTA object detection, multi-object tracking, instance segmentation, pose estimation and image classification. Affected versions of this package are vulnerable to Arbitrary Code Injection via the parsemodel function in ultralytics/nn/tasks.py. An...

Arbitrary Code Injection

Overview ultralytics is an Ultralytics YOLOv8 for SOTA object detection, multi-object tracking, instance segmentation, pose estimation and image classification. Affected versions of this package are vulnerable to Arbitrary Code Injection via the checkdetdataset function in...

Arbitrary Code Injection

Overview seroval is a Stringify JS values Affected versions of this package are vulnerable to Arbitrary Code Injection via the typed array serialization path in createTypedArrayNode and createBigIntTypedArrayNode, where the serializer uses value.constructor.name to write the constructor name afte...

Arbitrary Code Injection

Overview org.webjars.npm:seroval is a Stringify JS values Affected versions of this package are vulnerable to Arbitrary Code Injection via the typed array serialization path in createTypedArrayNode and createBigIntTypedArrayNode, where the serializer uses value.constructor.name to write the...

Deserialization of Untrusted Data

Overview org.webjars.npm:seroval is a Stringify JS values Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the sequence serialization logic in packages/seroval/src/core/sequence.ts, where identity of internal Sequence objects was checked by the presence of...

Arbitrary Code Injection

Overview happy-dom is a Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. It includes many web standards from WHATWG DOM and HTML. Affected versions of this package are vulnerable to Arbitrary Code Injection via the ESM compiler...

Arbitrary Code Injection

Overview org.webjars.npm:happy-dom is a Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. It includes many web standards from WHATWG DOM and HTML. Affected versions of this package are vulnerable to Arbitrary Code Injection via the ESM compiler...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the figwidth option in src/mistune/directives/image.py, where an attacker can supply an arbitrary string value for the figwidth directive option that is passed through without validation into the rendered HT...

Arbitrary Code Injection

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Arbitrary Code Injection via the /tokenize API endpoint, which does not enforce authentication even when the --api-key option is configured. An...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the quote method in src/virtualenv/activation/xonsh/init.py, which uses repr to encode string literals written into the xonsh activation script. Because repr does not guarantee ASCII-safe output, non-ASCII...