Lucene search
K

214 matches found

Snyk
Snyk
added 2026/01/01 6:29 a.m.7 views

Arbitrary Code Injection

Overview datamodel-code-generator is a Datamodel Code Generator Affected versions of this package are vulnerable to Arbitrary Code Injection due to improper sanitization of filenames used in generated headers. An attacker can provide a maliciously crafted filename containing Python syntax or esca...

5.4CVSS7.2AI score
Exploits0References3
vulnersOsv
vulnersOsv
added 2026/01/01 6:29 a.m.3 views

aas-middleware (>=0.1.0 <=0.2.6), agency-skej-framework (>=0.0.1 <=0.0.7) +89 more potentially affected by unknown CVE via datamodel-code-generator (>=0.10.3 <=0.30.2)

datamodel-code-generator PYPI version =0.10.3, =0.1.0, =0.0.1, =0.2.5, =0.1.0a0, =0.0.0, =0.1.6, =0.1.4, =0.1.0, =0.1.0, =1.0.0, =0.10.2, =0.1.0, =2024.12.13.post0, =2024.12.13.post1 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-DATAMODELCODEGENERATOR-14829603...

5.8AI score
Exploits0
Patchstack
Patchstack
added 2025/12/08 6:45 a.m.17 views

WordPress Flex QR Code Generator plugin <= 1.2.7 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Ryan Kozak in WordPress Plugin Flex QR Code Generator versions = 1.2.7...

9.8CVSS5.3AI score0.00631EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2025/12/06 5:49 a.m.26 views

CVE-2025-12673 Flex QR Code Generator <= 1.2.7 - Unauthenticated Arbitrary File Upload

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the updateqrcode function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site...

9.8CVSS0.00631EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/12/06 12:0 a.m.10 views

WordPress plugin Flex QR Code Generator 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

9.8CVSS6.8AI score0.00631EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/22 3:31 p.m.3 views

EUVD-2025-35392

Cross-Site Request Forgery CSRF vulnerability in Dmitry V. CEO of "UKR Solution" UPC/EAN/GTIN Code Generator upc-ean-barcode-generator allows Cross Site Request Forgery.This issue affects UPC/EAN/GTIN Code Generator: from n/a through = 2.0.2...

6.5AI score0.00136EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.5 views

WordPress plugin UPC/EAN/GTIN Code Generator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.7AI score0.00136EPSS
Exploits0References1
NVD
NVD
added 2025/10/15 9:15 a.m.50 views

CVE-2025-10041

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesaveqrcodetodb function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

9.8CVSS0.00878EPSS
Exploits3References4
Cvelist
Cvelist
added 2025/10/15 8:25 a.m.43 views

CVE-2025-10041 Flex QR Code Generator <= 1.2.5 - Unauthenticated Arbitrary File Upload

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesaveqrcodetodb function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

9.8CVSS0.00878EPSS
Exploits3References4
EUVD
EUVD
added 2025/10/15 8:25 a.m.38 views

EUVD-2025-34561

The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesaveqrcodetodb function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected...

9.8CVSS7.1AI score0.00878EPSS
Exploits3References4
CVE
CVE
added 2025/10/15 8:25 a.m.32 views

CVE-2025-10041

The CVE-2025-10041 entry concerns the Flex QR Code Generator WordPress plugin. Affected versions include all up to and including 1.2.5, where missing file type validation in the save_qr_code_to_db() function allows unauthenticated arbitrary file uploads, potentially enabling remote code execution...

9.8CVSS7.2AI score0.00878EPSS
Exploits3References4
Patchstack
Patchstack
added 2025/10/15 12:27 a.m.11 views

WordPress Flex QR Code Generator plugin <= 1.2.5 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by johska in WordPress Plugin Flex QR Code Generator versions = 1.2.5...

9.8CVSS7.2AI score0.00878EPSS
Exploits3References1Affected Software1
CNNVD
CNNVD
added 2025/10/15 12:0 a.m.20 views

WordPress plugin Flex QR Code Generator 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

9.8CVSS7.4AI score0.00878EPSS
Exploits3References4
Fedora
Fedora
added 2025/10/09 1:15 a.m.6 views

[SECURITY] Fedora 41 Update: rust-protobuf-codegen-3.7.2-1.fc41

Code generator for rust-protobuf. Includes a library to invoke programmatically e. g. from build.rs and protoc-gen-rs binary...

5.9CVSS7.1AI score0.0038EPSS
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-3460

Malicious code in bioql PyPI...

6.5CVSS8.7AI score0.00357EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-52878

Malicious code in bioql PyPI...

9.3CVSS9.2AI score0.00732EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-35146

Malicious code in bioql PyPI...

6.5CVSS6.7AI score0.00358EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-38146

Malicious code in bioql PyPI...

7.1CVSS7.1AI score0.00454EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2023-42293

Malicious code in bioql PyPI...

4.3CVSS9.1AI score0.00377EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-9162

Malicious code in bioql PyPI...

5.4CVSS6.6AI score0.00241EPSS
Exploits0References2
Rows per page
Query Builder