Lucene search
+L

37043 matches found

EUVD
EUVD
added 2026/06/28 2:15 p.m.11 views

EUVD-2026-39998

A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action Block Handler. Executing a manipulation can lead to code injection. The attack may be launched remotely. The...

7.5CVSS5.6AI score0.00311EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/06/28 2:15 p.m.13 views

CVE-2026-13500

A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action Block Handler. Executing a manipulation can lead to code injection. The attack may be launched remotely. The...

7.5CVSS6.8AI score0.00311EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2026/06/28 2:15 p.m.47 views

CVE-2026-13500 antlr ANTLR4 Grammar Action Block OutputFile.java code injection

A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action Block Handler. Executing a manipulation can lead to code injection. The attack may be launched remotely. The...

7.5CVSS0.00311EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/06/28 12:0 a.m.25 views

PT-2026-53111

Name of the Vulnerable Software and Affected Versions ANTLR4 versions prior to 4.13.3 Description An issue exists in the Grammar Action Block Handler component within the file tool/src/org/antlr/v4/codegen/model/OutputFile.java. A remote attacker can perform a manipulation that leads to code...

7.5CVSS7.5AI score0.00311EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
added 2026/06/28 12:0 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-13500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of...

7.5CVSS6.8AI score0.00311EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
added 2026/06/27 8:18 a.m.12 views

Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename

...

8.4CVSS5.8AI score0.00152EPSS
SaveExploits0
Snyk
Snyk
added 2026/06/26 4:32 p.m.12 views

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the path parameter in output plugins when using the $tag placeholder. An attacker can overwrite arbitrary files or inject malicious content by sending specially crafted log entries containing path traversal...

9.8CVSS6.1AI score0.01092EPSS
SaveExploits1References3
NVD
NVD
added 2026/06/26 11:16 a.m.15 views

CVE-2025-7958

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details...

8.5CVSS0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/26 10:15 a.m.52 views

CVE-2025-7958

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details...

8.5CVSS0.00197EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/26 10:15 a.m.11 views

EUVD-2025-210348

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details...

8.5CVSS6.2AI score0.00197EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/06/26 10:15 a.m.11 views

CVE-2025-7958

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details...

8.5CVSS6.2AI score0.00197EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/06/26 10:15 a.m.43 views

CVE-2025-7958

Summary (CVE-2025-7958): A code injection vulnerability exists in Trellix Network Security CM and NX. A locally authenticated admin user can trigger arbitrary code execution via the web interface and Alert artifact details. The issue is described as enabling remote-like control within the device ...

8.5CVSS6.2AI score0.00197EPSS
SaveExploits0References1
OSV
OSV
added 2026/06/25 10:34 p.m.8 views

GO-2026-5738 Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour

Contour has Lua code injection via Cookie Path Rewrite Policy in github.com/projectcontour/contour...

8.1CVSS5.9AI score0.00482EPSS
SaveExploits0References7
CVE
CVE
added 2026/06/25 3:31 p.m.96 views

CVE-2026-55895

Summary: CVE-2026-55895 affects Vim prior to 9.2.0663 due to a Vimscript code injection in the netrw plugin (s:NetrwLocalRmFile()) when deleting a local file from the browser. A filename derived from the buffer’s directory listing is interpolated into an Ex command line, with only backslashes esc...

8.4CVSS6.2AI score0.00152EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/06/25 3:31 p.m.10 views

CVE-2026-55895

Vim is an open source, command line text editor. Prior to 9.2.0663, a Vimscript code injection vulnerability exists in s:NetrwLocalRmFile in the netrw plugin runtime/pack/dist/opt/netrw/autoload/netrw.vim when deleting a local file from the browser. A filename derived from the buffer's directory...

8.4CVSS6.2AI score0.00152EPSS
SaveExploits0References4Affected Software1
GithubExploit
GithubExploit
added 2026/06/25 6:6 a.m.85 views

Exploit for Code Injection in Lantronix Eds5032_Firmware

cve-id ⚡ Simple Usage Use this project only in safe and...

9.8CVSS7.1AI score0.1432EPSS
SaveExploits22
CVE
CVE
added 2026/06/25 4:34 a.m.143 views

CVE-2026-1606

CVE-2026-1606 affects GitLab CE/EE (versions 14.8–before 18.11.6, 19.0–before 19.0.3, 19.1–before 19.1.1). The issue stems from improper input validation and could allow an authenticated user to conceal content within a Snippet. The CVSSv3.1 vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N ...

4.3CVSS5.9AI score0.00224EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/06/25 4:34 a.m.43 views

CVE-2026-1606 Improper Control of Generation of Code ('Code Injection') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.8 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user to conceal content within a Snippet due to improper input validation...

4.3CVSS0.00224EPSS
SaveExploits0References3
The Hacker News
The Hacker News
added 2026/06/24 5:19 p.m.21 views

CISA Warns Critical Lantronix EDS5000 Flaw Is Being Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday warned of active exploitation of a critical security flaw impacting Lantronix EDS5000 Series devices, urging Federal Civilian Executive Branch FCEB agencies to apply the fixes by June 26, 2026. The vulnerability in question...

9.8CVSS7.5AI score0.1432EPSS
SaveExploits1
OSV
OSV
added 2026/06/24 1:12 p.m.10 views

OESA-2026-2725 activemq security update

The most popular and powerful open source messaging and Integration Patterns server. Security Fixes: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache ActiveMQ, Apache ActiveMQ Web. The MessageServlet in the ActiveMQ web console API copies...

8.8CVSS6.5AI score0.01107EPSS
SaveExploits2References7
Rows per page
Query Builder