41349 matches found
CVE-2026-19932
A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function GroovyShell.evaluate of the file /execute of the component NoticeController. The manipulation results in code injection. The attack can be launched remotely. The exploit has been...
CVE-2026-19932 DefaultFuction Notice-System-Managent NoticeController execute GroovyShell.evaluate code injection
A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function GroovyShell.evaluate of the file /execute of the component NoticeController. The manipulation results in code injection. The attack can be launched remotely. The exploit has been...
EUVD-2026-59848
A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function GroovyShell.evaluate of the file /execute of the component NoticeController. The manipulation results in code injection. The attack can be launched remotely. The exploit has been...
CVE-2026-19932
The CVE affects DefaultFuction Notice-System-Managent 2.0, specifically the GroovyShell.evaluate function in the /execute path of the NoticeController. The underlying root cause is code injection via that evaluation, enabling a remote attacker to trigger exploitation. Public exploits are indicate...
CVE-2026-19932 DefaultFuction Notice-System-Managent NoticeController execute GroovyShell.evaluate code injection
A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function GroovyShell.evaluate of the file /execute of the component NoticeController. The manipulation results in code injection. The attack can be launched remotely. The exploit has been...
CVE-2026-19958: Improper Control of Generation of Code
A security flaw has been discovered in iatsiuk pptr-mcp up to 0.2.7. The impacted element is the function executeCode of the file src/vm-executor.ts of the component execute Tool. The manipulation results in code injection. The attack may be launched remotely. The exploit has been released to the...
PT-2026-73173
Name of the Vulnerable Software and Affected Versions iatsiuk pptr-mcp versions prior to 0.2.8 Description A flaw in the execute Tool component allows for remote code injection. The issue resides within the executeCode function located in the src/vm-executor.ts file. Recommendations At the moment...
CVE-2026-19932: Improper Control of Generation of Code
A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function GroovyShell.evaluate of the file /execute of the component NoticeController. The manipulation results in code injection. The attack can be launched remotely. The exploit has been...
CVE-2026-17581: Improper Control of Generation of Code
The WCPOS – Point of Sale POS plugin for WooCommerce plugin for WordPress is vulnerable to Code Injection via the 'thermal' Template Engine in all versions up to, and including, 1.9.14 due to the ReceiptRendererFactory dispatching templates with the 'thermal' engine to the LegacyPhpRenderer inste...
PT-2026-73078
A security flaw has been discovered in DefaultFuction Notice-System-Managent 2.0. This issue affects the function GroovyShell.evaluate of the file /execute of the component NoticeController. The manipulation results in code injection. The attack can be launched remotely. The exploit has been...
PT-2026-73111
Name of the Vulnerable Software and Affected Versions WCPOS – Point of Sale POS plugin for WooCommerce versions prior to 1.9.15 Description Authenticated attackers with Shop Manager-level access or higher can perform code injection through the 'thermal' Template Engine. The issue occurs because t...
PT-2026-73179
Name of the Vulnerable Software and Affected Versions Jij-Inc Jij-MCP-Server version 0.1.0 Description Code injection is possible via remote attack in the jm check component. The issue exists within the PythonREPL.run function located in the jij mcp/python repr.py file, where manipulation of the...
Exploit for CVE-2026-9147
CVE-2026-9147: uproot Code Injection via TStreamerInfo Metadat...
Exploit for Code Injection in Fgmacedo Python_Statemachine
CVE-2026-47103: Python StateMachine Remote Code Execution via...
Exploit for CVE-2026-47117
CVE-2026-47117: OpenMed Unauthenticated Remote Code Execution...
Malicious code in tw-pkgprobe-7731 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12551ba52a9605fc8ce1e13b750671d201dcf2a6e23d03f5a23b15236f2fa49b On preinstall/postinstall, probe.js checks whether cwd matches a Twilio Serverless build path /tmp/AC/ and, if so, copies daemon.js to...
Exploit for Code Injection in Samba
SambaCry CVE-2017-7494 Exploit CVE-2017-7494/SambaCry allows...
CVE-2026-18503 vulnerabilities
Vulnerabilities for packages: python...
SUSE CVE-2026-18408
Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql \restrict meta-command input expansion. The fix for CVE-2025-871...
