Lucene search
+L

2046 matches found

attackerkb
attackerkb
•added 2026/05/31 9:00 a.m.•28 views

CVE-2026-10176

A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the component Code Generation Workflow. Executing a manipulation can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and...

6.5CVSS6.4AI score0.00204EPSS
SaveExploits0References6Affected Software1
Vulnrichment
Vulnrichment
•added 2026/05/31 9:00 a.m.•53 views

CVE-2026-10176 Aider-AI Aider Code Generation Workflow sql injection

A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the component Code Generation Workflow. Executing a manipulation can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and...

6.5CVSS6.3AI score0.00204EPSS
SaveExploits0References6
CVE
CVE
•added 2026/05/31 9:00 a.m.•62 views

CVE-2026-10176

Technical details about CVE-2026-10176 are not publicly available in the provided documents; affected component and root cause are not specified beyond a generic description. Monitor for updates.

6.5CVSS6.3AI score0.00204EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/05/31 9:00 a.m.•37 views

EUVD-2026-33496

A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the component Code Generation Workflow. Executing a manipulation can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and...

6.5CVSS5.6AI score0.00204EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/05/31 9:00 a.m.•66 views

CVE-2026-10176 Aider-AI Aider Code Generation Workflow sql injection

A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the component Code Generation Workflow. Executing a manipulation can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and...

6.5CVSS0.00204EPSS
SaveExploits0References6
OSV
OSV
•added 2026/05/31 9:00 a.m.•15 views

CVE-2026-10176 Aider-AI Aider Code Generation Workflow sql injection

A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the component Code Generation Workflow. Executing a manipulation can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and...

5.3CVSS6.4AI score
SaveExploits0References8
CNNVD
CNNVD
•added 2026/05/31 12:00 a.m.•29 views

Aider SQL注入漏洞

Aider is an open-source terminal AI pair programming tool developed by Aider AI. Version 0.86.3 of Aider contains a SQL injection vulnerability, which arises from the Code Generation Workflow component causing SQL injections. Attackers can launch attacks remotely due to this vulnerability...

6.5CVSS6.7AI score0.00204EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/05/31 12:00 a.m.•40 views

PT-2026-45186

A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the component Code Generation Workflow. Executing a manipulation can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and...

6.5CVSS6.4AI score0.00204EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/31 12:00 a.m.•6 views

CVE-2026-10176: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the component Code Generation Workflow. Executing a manipulation can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and...

6.5CVSS5.4AI score0.00204EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/05/29 12:00 a.m.•16 views

The vulnerability of the TLS protocol implementation in the IBM HTTP Server allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the TLS protocol implementation in the IBM HTTP Server is related to incorrect code generation practices. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service failures...

8.1CVSS6.2AI score0.00848EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/29 12:00 a.m.•16 views

The vulnerability of the IBM HTTP Server web server, related to improper code generation management, allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the IBM HTTP Server is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions...

10CVSS6.2AI score0.0086EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/05/28 10:50 p.m.•59 views

CVE-2026-6816 TFA Basic Plugins - Access Bypass

An access bypass vulnerability in Drupal TFA Basic Plugins allows users with the administer users permission to view or generate recovery codes for other users. This issue affects TFA Basic Plugins: from 7.x-1.0 through 7.x-1.2...

5.1CVSS0.00387EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/05/28 12:00 a.m.•6 views

PT-2026-86273

Уязвимость программного обеспечения VoIP-шлюза Телеком MG связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

9CVSS5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/05/28 12:00 a.m.•6 views

PT-2026-86272

Уязвимость программного обеспечения VoIP-шлюза Телеком MG связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

9CVSS5.8AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/05/27 12:00 a.m.•19 views

The vulnerability of the virtual learning environment Moodle, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability in the virtual learning environment Moodle is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.3CVSS6AI score0.00775EPSS
SaveExploits0References7Affected Software2
Positive Technologies
Positive Technologies
•added 2026/05/27 12:00 a.m.•5 views

PT-2026-86271

Уязвимость программного обеспечения VoIP-шлюза Телеком MG связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

9CVSS5.8AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/26 12:00 a.m.•2 views

CVE-2026-44728: Improper Control of Generation of Code

Babel is a compiler for writing next generation JavaScript. From 7.12.0 to before 7.29.4 and 8.0.0-alpha.13, using Babel to compile code that was specifically crafted by an attacker can cause Babel to generate output code that executes arbitrary code. This vulnerability is fixed in 7.29.4 and...

8.2CVSS7.8AI score0.0018EPSS
SaveExploits0References4
Redos
Redos
•added 2026/05/26 12:00 a.m.•30 views

ROS-20260526-73-0001

A vulnerability in the email interpreter module of the Python programming language is related to improper code generation control. Exploitation of the vulnerability could allow a remote attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service...

5.5CVSS7AI score0.011EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/05/26 12:00 a.m.•7 views

PT-2026-86270

Уязвимость программного обеспечения VoIP-шлюза Телеком MG связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

9CVSS5.8AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/25 10:13 p.m.•18 views

CVE-2026-24937

Improper Control of Generation of Code 'Code Injection' vulnerability in VideoWhisper.Com Broadcast Live Video allows Code Injection. This issue affects Broadcast Live Video: from n/a before 7.1.3...

7.2CVSS5.8AI score0.00408EPSS
SaveExploits0References2
Rows per page
Query Builder