SourceCodester Student Grades Management System 代码注入漏洞

SourceCodester Student Grades Management System is a SourceCodester open source student grades management system. A code injection vulnerability exists in SourceCodester Student Grades Management System version 1.0, which stems from an incorrect manipulation of the parameter Remarks in the file...

PT-2025-47332

Name of the Vulnerable Software and Affected Versions baryhuang/mcp-server-aws-resources-python version 0.1.0 Description A code injection issue exists due to insufficient input validation in the execute query method. This allows for remote code execution by exposing dangerous Python built-in...

SourceCodester Interview Management System 代码注入漏洞

SourceCodester Interview Management System is a SourceCodester open source interview management system. A code injection vulnerability exists in version 1.0 of the SourceCodester Interview Management System, which stems from an incorrect manipulation of the parameter Question in the file...

PT-2025-47349

Name of the Vulnerable Software and Affected Versions NVIDIA Isaac-GR00T for all platforms affected versions not specified Description A flaw exists in a Python component of NVIDIA Isaac-GR00T that could allow an attacker to inject code. Exploitation of this issue may result in code execution,...

Siemens RUGGEDCOM ROS Improper Control of Generation of Code (CVE-2022-34663)

Affected devices are vulnerable to a web-based code injection attack via the console. An attacker could exploit this vulnerability to inject code into the web server and cause malicious behavior in legitimate users accessing certain web resources on the affected device. This plugin only works wit...

EUVD-2025-198041

A code injection vulnerability exists in baryhuang/mcp-server-aws-resources-python 0.1.0 that allows remote code execution through insufficient input validation in the executequery method. The vulnerability stems from the exposure of dangerous Python built-in functions import, getattr, hasattr in...

WordPress plugin The Classified Listing – Classified ads & Business Directory Plugin 代码注入漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code injection...

Code-Projects Student Information System 代码注入漏洞

Student Information System is a student information system. The Student Information System suffers from a cross-site scripting vulnerability that stems from the mishandling of user input by an unspecified functional component in the /register.php file. An attacker can exploit this vulnerability b...

ProjectSend 代码注入漏洞

ProjectSend cFTP is the ProjectSend open source suite of self-hosted applications based on PHP and MySQL. A code injection vulnerability exists in ProjectSend r1720 and earlier versions, which stems from a misbehavior of the component File Editor/Custom Download Aliases and could lead to cross-si...

Code-Projects Student Information System 代码注入漏洞

Student Information System is a student information system. A cross-site scripting vulnerability exists in the Student Information System, which originates from an unspecified function in the /editprofile.php file that improperly handles user input. An attacker can exploit this vulnerability by...

Code-Projects Simple Cafe Ordering System 代码注入漏洞

Simple Cafe Ordering System is a simple coffee ordering system. The Simple Cafe Ordering System suffers from a cross-site scripting vulnerability that arises from insufficient security filtering of the productname parameter in the /addtocart file. An attacker could use this vulnerability to execu...

HSEC-2023-0003 code injection in xmonad-contrib

code injection in xmonad-contrib The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the xmobar window title, as demonstrated using an action tag...

h3blog 代码注入漏洞

h3blog is a light blogging system focusing on creation by H.C.Q individual developers. A code injection vulnerability exists in version 1.0 of h3blog, which stems from the incorrect operation of the parameter Title in the file /admin/cms/category/addtitle, and could lead to a cross-site scripting...

Bdtask Isshue - Multi Store eCommerce Shopping Cart Solution 代码注入漏洞

Bdtask Isshue - Multi Store eCommerce Shopping Cart Solution is an e-commerce shopping cart system from Bdtask Bangladesh. A code injection vulnerability exists in Bdtask Isshue - Multi Store eCommerce Shopping Cart Solution version 4.0 and prior versions, which originates from an incorrect...

h3blog 跨站脚本漏洞

h3blog is a creation-focused light blogging system by H.C.Q's individual developers. A code injection vulnerability exists in version 1.0 of h3blog, which stems from the incorrect operation of the parameter Name in the file /admin/cms/material/add, and could lead to a cross-site scripting attack...

CVE-2024-48829

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code 'Code Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...

Arbitrary Code Injection

Overview pgadmin4 is a PostgreSQL Tools Affected versions of this package are vulnerable to Arbitrary Code Injection through the PLAIN SQL file, which includes any meta-commands. An attacker can execute arbitrary commands on the server by supplying a crafted PLAIN-format SQL dump file during...

SAP Pushes Emergency Patch for 9.9 Rated CVE-2025-42887 After Full Takeover Risk

CVE 2025 42887 vulnerability, rated 9.9, allows code injection through Solution Manager giving attackers full SAP control urgent patch needed to block system takeover...

CVE-2025-12382

Improper Limitation of a Pathname 'Path Traversal' vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restricted directory leading to code injection. This issue affects Algosec Firewall Analyzer: A33.0 up to build 320, A33.10 up to build...

Malicious code in eslint-plugin-ophiuchus-pino-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72910fde647545178f4ccecb0cd7f8485357f83fd546d2c8329012ecdc9f34e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...