Lucene search
+L

37022 matches found

NVD
NVD
added 1 hour ago4 views

CVE-2026-18770

A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0. Impacted is an unknown function of the file /code of the component Python Validation Handler. The manipulation leads to code injection. Remote exploitation of the attack is possible. This produc...

7.5CVSS
SaveExploits0References5
CVE
CVE
added 2 hours ago9 views

CVE-2026-18770

A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0. Impacted is an unknown function of the file /code of the component Python Validation Handler. The manipulation leads to code injection. Remote exploitation of the attack is possible. This produc...

7.5CVSS6.7AI score
SaveExploits0References5
EUVD
EUVD
added 2 hours ago5 views

EUVD-2026-52704

A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0. Impacted is an unknown function of the file /code of the component Python Validation Handler. The manipulation leads to code injection. Remote exploitation of the attack is possible. This produc...

7.5CVSS6.7AI score
SaveExploits0References5
Cvelist
Cvelist
added 2 hours ago7 views

CVE-2026-18770 vibesurf-ai VibeSurf Python Validation code code injection

A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0. Impacted is an unknown function of the file /code of the component Python Validation Handler. The manipulation leads to code injection. Remote exploitation of the attack is possible. This produc...

7.5CVSS
SaveExploits0References5
CVE
CVE
added 11 hours ago6 views

CVE-2026-16623

The CVE-2026-16623 entry describes a PHP code-injection flaw in the Create Block WordPress plugin prior to 2.10.0. A multisite subsite administrator (with limited PHP file-edit capability) can inject and execute arbitrary PHP because user-supplied text isn’t properly escaped before being written ...

6AI score
SaveExploits0References1
EUVD
EUVD
added 12 hours ago6 views

EUVD-2026-52574

A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker who is able to place crafted content in a profi...

8.7CVSS5.7AI score
SaveExploits0References1
Nuclei
Nuclei
added 13 hours ago7 views

Sneeit WP Social WordPress Plugin - Unauthenticated RCE via call_user_func

The Sneeit Framework plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.3 via the sneeitarticlespaginationcallback function. This is due to the function accepting user input and then passing that through calluserfunc. This makes it possible for...

9.8CVSS7.7AI score0.44442EPSS
SaveExploits3References5
Nuclei
Nuclei
added 14 hours ago35 views

Netsweeper 4.0.3 - Cross-Site Scripting

A cross-site scripting vulnerability in webadmin/policy/grouptableajax.php/ in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO. id: CVE-2014-9608 info: name: Netsweeper 4.0.3 - Cross-Site Scriptin...

6.1CVSS6.3AI score0.04663EPSS
SaveExploits1References4
Nuclei
Nuclei
added 14 hours ago186 views

ISPConfig - PHP Code Injection

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if adminallowlangedit is enabled. id: CVE-2023-46818 info: name: ISPConfig - PHP Code Injection author: non-things severity: high description: | An issue was discovered...

7.2CVSS7.2AI score0.13894EPSS
SaveExploits14References4
Nuclei
Nuclei
added 14 hours ago25 views

Google ADK-Python - Unauthenticated Builder Endpoint

Google Agent Development Kit ADK 1.7.0 through 1.28.1 and 2.0.0a1 through 2.0.0a2 on Python OSS, Cloud Run, and GKE contains a code injection and missing authentication vulnerability, letting unauthenticated remote attackers execute arbitrary code on the server, exploit requires no authentication...

10CVSS6.1AI score0.01818EPSS
SaveExploits0References1
Nuclei
Nuclei
added 14 hours ago36 views

TP-Link Archer A20 v3 Router - Cross-site Scripting

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting XSS due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL...

4.8CVSS7.8AI score0.00875EPSS
SaveExploits0References2
Nuclei
Nuclei
added 14 hours ago70 views

Microweber <1.3.2 - Cross-Site Scripting

Code Injection in on search.php?keywords= GitHub repository microweber/microweber prior to 1.3.2. id: CVE-2022-3242 info: name: Microweber 1.3.2 - Cross-Site Scripting author: r3Y3r53 severity: medium description: | Code Injection in on search.php?keywords= GitHub repository microweber/microweber...

6.1CVSS5.6AI score0.01437EPSS
SaveExploits1References4
EUVD
EUVD
added 16 hours ago6 views

EUVD-2026-52530

Improper control of generation of code 'code injection' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

6.1CVSS5.5AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added yesterday5 views

CVE-2026-65804

Improper control of generation of code 'code injection' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

6.1CVSS5.5AI score
SaveExploits0References2Affected Software1
NVD
NVD
added yesterday10 views

CVE-2026-61523

WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators to inject arbitrary PHP code by submitting malicious content through the droplet Code field, which is written verbatim to a publicly accessible PHP file with no...

8.6CVSS
SaveExploits0References3
EUVD
EUVD
added yesterday7 views

EUVD-2026-52397

A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue affects the function plugins.setconfig of the file /cgi-bin/glc of the component plugins.so Native Plugin. Such manipulation leads to injection. The attack can be launched remotely. The exploit has been disclosed to the...

10CVSS7.1AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added yesterday6 views

CVE-2026-61523 WebsiteBaker CMS < 2.13.10 Code Injection via Droplets Editor

WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators to inject arbitrary PHP code by submitting malicious content through the droplet Code field, which is written verbatim to a publicly accessible PHP file with no...

8.6CVSS6.5AI score
SaveExploits0References3
Cvelist
Cvelist
added yesterday36 views

CVE-2026-61523 WebsiteBaker CMS < 2.13.10 Code Injection via Droplets Editor

WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators to inject arbitrary PHP code by submitting malicious content through the droplet Code field, which is written verbatim to a publicly accessible PHP file with no...

8.6CVSS
SaveExploits0References3
CVE
CVE
added yesterday13 views

CVE-2026-61523

WebsiteBaker CMS before 2.13.10 has a code injection vulnerability in the Droplets editor. Authenticated administrators can submit malicious content through the droplet Code field, which is written verbatim to a publicly accessible PHP file with no sanitization. An attacker can save a PHP webshel...

8.6CVSS6.5AI score
SaveExploits0References3
Nuclei
Nuclei
added yesterday95 views

MetInfo CMS <= 8.1 - Remote Code Execution

MetInfo CMS 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injection vulnerability caused by insufficient input neutralization in the execution path, letting remote attackers execute arbitrary code remotely, exploit requires crafted requests. id: CVE-2026-29014 info: name: MetInfo CMS = 8....

9.8CVSS8.7AI score0.41576EPSS
SaveExploits4References3
Rows per page
Query Builder