CVE-2025-53187 Unauthenticated RCE

Due to an issue in configuration, code that was intended for debugging purposes was included in the market release of the ASPECT FW allowing an attacker to bypass authentication. This vulnerability may allow an attacker to change the system time, access files, and make function calls without prio...

ABB ASPECT 代码注入漏洞

ABB ASPECT is a scalable building energy management and control solution from ABB Switzerland. A code injection vulnerability exists in ABB ASPECT versions prior to 3.08.04-s01, which stems from improper code generation controls and could lead to code injection...

RuoYi 代码注入漏洞

RuoYi is a back-end management system for individual developers of RuoYi in China. RuoYi 4.8.1 and previous versions of code injection vulnerability exists, the vulnerability stems from the file /system/notice/edit in the parameter noticesTitle/noticeContent improper handling of cross-site...

cherry 代码注入漏洞

cherry is an HTTP server for Chee Personal Developers. A code injection vulnerability exists in cherry versions 1.4.8 through 1.5.0, which stems from improper handling of custom URLs and could lead to remote code execution...

JCG Link-net LW-N915R 代码注入漏洞

The JCG Link-net LW-N915R is a router from the Chinese company Jiexi JCG. A code injection vulnerability exists in JCG Link-net LW-N915R version 17s.20.001.908, which stems from improper manipulation of the Network Name parameter and could lead to a cross-site scripting attack...

Linux Distros Unpatched Vulnerability : CVE-2017-8284

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The disasinsn function in target/i386/translate.c in QEMU before 2.9.0, when TCG mode without hardware acceleration is used, does not limit the instruction size...

i-Educar 代码注入漏洞

i-Educar is a free educational software open source by Portábilis. A code injection vulnerability exists in i-Educar 2.9 and earlier versions, which stems from improper handling of the parameter nmpessoa/matricula/matriculainterna in the file /intranet/educarusuariolst.php, which could lead to a...

pybbs 代码注入漏洞

pybbs is a community platform for Java development by iuiu individual developers. A code injection vulnerability exists in pybbs 6.0.0 and earlier versions, which originates in files/api/settings leading to cross-site scripting that could lead to remote attacks...

Portabilis i‑Diário 代码注入漏洞

Portabilis i-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A code injection vulnerability exists in Portabilis i-Diário 1.5.0 and earlier versions, which originates in the file /planos-de-aula-por-areas-de-conhecimento/ in the paramete...

Portabilis i‑Diário 代码注入漏洞

Portabilis i-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A code injection vulnerability exists in Portabilis i-Diário 1.5.0 and earlier versions, which originates from the parameter Registro de atividades/ in the file...

Portabilis i‑Diário 代码注入漏洞

Portabilis i-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A code injection vulnerability exists in Portabilis i-Diário 1.5.0 and earlier versions, which stems from the parameter Registro de atividades/Conteúdos in file...

Exploit for Code Injection in Xwiki

CVE-2025-24893-P...

CVE-2025-54393

Netwrix Directory Manager formerly Imanami GroupID 11.0.0.0 before 11.1.25162.02 allows Static Code Injection. Authenticated users can obtain administrative access...

Datacom DM955 5GT 代码注入漏洞

The Datacom DM955 5GT is a router from Datacom New Zealand. A code injection vulnerability exists in the Datacom DM955 5GT version 1200 825.8010.00, which stems from improper handling of the parameter SSID and could lead to cross-site scripting attacks...

mall 代码注入漏洞

mall is a set of e-commerce system for macro individual developers, including the front-end mall system and back-end management system. mall 1.0.3 and previous versions of the code injection vulnerability, the vulnerability stems from the file /minio/upload parameter File improper handling, may...

OpenBao 代码注入漏洞

OpenBao is OpenBao open source a sensitive data management software . A code injection vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by attackers to cause unauthorized code execution and network access...

Total WebShield Extension 代码注入漏洞

Total WebShield Extension is a browser extension from Total WebShield that enhances web security. A code injection vulnerability exists in Total WebShield Extension 3.2.0 and earlier versions, which stems from improper handling of the parameter Category and could lead to cross-site scripting...

Craft CMS 代码注入漏洞

Craft CMS is an open source content management system CMS from Craft CMS. A code injection vulnerability exists in Craft CMS versions 4.13.8 through 4.16.2 and 5.5.8 through 5.8.3, which stems from a security key compromise that could allow remote code execution...

Portábilis i-Educar 代码注入漏洞

Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portábilis i-Educar version 2.9 and earlier, which stems from improper handling of the parameter nome in the file...

Arbitrary Code Injection

Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Arbitrary Code Injection via the /updater/restore-db endpoint. An attacker can execute arbitrary code by crafting a malicious request after obtaining a compromised security key and creating a...