CVE-2022-42045

CVE-2022-42045 Summary We discovered an Arbitrary code injection in Zemana amsdk.sys kernel-mode driver, a part of Zemana Antimalware SDK. The vulnerability allows to inject an arbitrary code into the one of the driver code sections and then to execute it with kernel-mode privileges local...

CVE-2023-33246_RocketMQ_RCE_EXPLOIT

CVE-2023-33246 Exploit de Ejecución Remota de Código en RocketMQ CVE-2023-33246 Exploit de Ejecución Remota de Código en RocketMQ Resumen RocketMQ es una plataforma de mensajería y transmisión distribuida. Las versiones de RocketMQ 5.1.0 y anteriores son vulnerables a la Inyección Arbitraria de...

DS-Wireless-Communication-Remote-Code-Execution

Ejecución remota de código en la comunicación inalámbrica de DS Inyecta código arbitrario en el juego de un cliente. Requisitos previos Python 3.10 pip pydivert Uso pip install -r requirements.txt python dswirelesscommunicationremotecodeexecution.py ID de CVE CVE-2023-45887 Licencia GNU General...

Arbitrary Code Injection

Overview mcp-atlassian is a The Model Context Protocol MCP Atlassian integration is an open-source implementation that bridges Atlassian products Jira and Confluence with AI language models following Anthropic's MCP specification. This project enables secure, contextual AI interactions with...

Arbitrary Code Injection

Overview org.jenkins-ci.plugins:script-security is a package that allows Jenkins administrators to control what in-process scripts can be run by less-privileged users. Affected versions of this package are vulnerable to Arbitrary Code Injection in the @GroovyASTTransformationClass annotation...

Arbitrary Code Injection

Overview org.jenkins-ci.plugins:script-security is a package that allows Jenkins administrators to control what in-process scripts can be run by less-privileged users. Affected versions of this package are vulnerable to Arbitrary Code Injection in the handling of @Builder annotations when the...

CVE-2026-85469: Reliance on Insufficiently Trustworthy Component

A flaw was found in quay-builder-qemu. A remote attacker could exploit this by compromising the upstream Noelware/docker-manifest-action used in the release workflow, which is pinned to a mutable branch. This allows the attacker to inject arbitrary code, leading to the exfiltration of sensitive...

Arbitrary Code Injection

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Arbitrary Code Injection in the sort filter due to improper handling of the isSandboxed argument in the sortFunc wrapper. An attacker can...

Arbitrary Code Injection

Overview modelscope is a ModelScope: bring the notion of Model-as-a-Service to life. Affected versions of this package are vulnerable to Arbitrary Code Injection due to unsafe YAML deserialization in the model configuration loading paths in modelscope/models/audio/tts/voice.py and...

Arbitrary Code Injection

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Arbitrary Code Injection in the /prompts/test endpoint through the renderedcontent path in litellm/proxy/prompts/promptendpoints.py. An attacker can execute arbitrary OS...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection through the direct-SQL partition-name resolution paths in DirectSqlUpdatePart.getPartitionInfo and MetaStoreDirectSql.getPartitionsByNames. An attacker can cause metastore RPCs to target unintended partitions by...

Arbitrary Code Injection

Overview vrana/adminer is a Database management in a single file. Affected versions of this package are vulnerable to Arbitrary Code Injection via the VACUUM INTO process in SQLite query handling. An attacker can execute arbitrary code on the server by crafting a query that writes PHP code to...

Arbitrary Code Injection

Overview jsonata is a JSON query and transformation language Affected versions of this package are vulnerable to Arbitrary Code Injection via the lookup function due to a missing hasOwnProperty check. An attacker can execute arbitrary code by submitting crafted expressions. Remediation Upgrade...

Arbitrary Code Injection

Overview n8n-editor-ui is a Workflow Editor UI for n8n Affected versions of this package are vulnerable to Arbitrary Code Injection in the editor's resource locator link preview rendering, which inserts stored field values into URL templates without sanitizing them, so expression syntax held in a...

Arbitrary Code Injection

Overview org.springframework:spring-webmvc is a package that provides Model-View-Controller MVC architecture and ready components that can be used to develop flexible and loosely coupled web applications. Affected versions of this package are vulnerable to Arbitrary Code Injection via the XsltVie...

CVE-2026-75569 Mce-operator-bundle: all github actions pinned by mutable tag, not commit sha

A flaw was found in mce-operator-bundle. The build process fetches and executes scripts from a remote repository without performing integrity checks, such as commit pinning or signature verification. This allows a malicious actor with write access to the remote repository to inject and execute...

Arbitrary Code Injection

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Arbitrary Code Injection via the errorlog function. An attacker can write arbitrary PHP code to web-accessible files by leveraging access to...

Arbitrary Code Injection

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Arbitrary Code Injection through the handleException function, which fails to sanitize the .cause property of errors. An attacker can gain access to...

Arbitrary Code Injection

Overview org.webjars.npm:vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Arbitrary Code Injection through the handleException function, which fails to sanitize the .cause property of errors. An attacker can...

PT-2026-69962

Name of the Vulnerable Software and Affected Versions Feast operator affected versions not specified Description A flaw allows a malicious tenant to inject arbitrary code into their feature repository. This code is executed by an automated process with elevated privileges, enabling the tenant to...