CVE-2025-7361

CVE-2025-7361 affects NI LabVIEW 32-bit up to and including 2025 Q1. The issue is a code injection vulnerability caused by an improper initialization check in CIN nodes, which could allow arbitrary code execution if a user opens a specially crafted VI. LabVIEW 64-bit is not affected because CIN n...

CVE-2025-7361 Code Injection Vulnerability in NI LabVIEW when using CIN nodes

A code injection vulnerability due to an improper initialization check exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI using a CIN node. This vulnerability affects 32-bit NI LabVIEW 2025 Q1...

CVE-2025-7361 Code Injection Vulnerability in NI LabVIEW when using CIN nodes

A code injection vulnerability due to an improper initialization check exists in NI LabVIEW that may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI using a CIN node. This vulnerability affects 32-bit NI LabVIEW 2025 Q1...

CVE-2025-53541

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1751892857 and Tuleap Enterprise Edition prior to 16.8-5 and 16.9-3, malicious users with some control over certain artifacts could inser...

CVE-2025-53541 Tuleap is vulnerable to XSS attacks when displaying the children of a parent artifact

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1751892857 and Tuleap Enterprise Edition prior to 16.8-5 and 16.9-3, malicious users with some control over certain artifacts could inser...

CVE-2025-53541 Tuleap is vulnerable to XSS attacks when displaying the children of a parent artifact

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1751892857 and Tuleap Enterprise Edition prior to 16.8-5 and 16.9-3, malicious users with some control over certain artifacts could inser...

USN-7678-1: Perl vulnerability

It was discovered that Perl threads incorrectly handled certain file operations. A local attacker could possibly use this issue to load code or access files from unexpected locations...

PT-2025-31193 · Unknown · Human Resource Management System

Name of the Vulnerable Software and Affected Versions: Human Resource Management System version 1.0 Description: Reflected Cross-Site Scripting XSS exists in Human Resource Management System version 1.0. This issue could allow an attacker to execute JavaScript code in the victim's browser by...

PT-2025-31265 · National Instruments · Ni Labview

Name of the Vulnerable Software and Affected Versions: NI LabVIEW versions 2025 Q1 and prior 32-bit Description: A code injection vulnerability exists in NI LabVIEW due to an improper initialization check, potentially leading to arbitrary code execution. Exploitation requires a user to open a...

glib 代码注入漏洞

glib is a general-purpose, portable utility library from the GNOME project. It provides many useful data types, macros, type conversions, string utilities, file utilities, main loop abstractions, and more. A code injection vulnerability exists in glib that stems from a long command line that coul...

Exploit for OS Command Injection in Gnu Bash

This is an extension for Burp Suite, a web application security testing tool. The extension, named "ActiveScan++", extends Burp's active and passive scanning capabilities to identify application behavior that may be of interest to advanced testers. It includes checks for potential host header...

JPACookieShop 代码注入漏洞

JPACookieShop is a cake mall platform software by Jerryshensjf individual developer. JPACookieShop has a code injection vulnerability that stems from the file GoodsController.java being vulnerable to cross-site scripting attacks...

smolagents 代码注入漏洞

smolagents is a basic library for agents open-sourced by Hugging Face. A code injection vulnerability exists in smolagents version 1.14.0, which stems from an under-restricted localpythonexecutor.py module that could lead to remote code execution...

CVE-2025-5243

Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in SMG Software Information Portal allows Code Injection, Upload a Web Shell to a Web Server, Code Inclusion. This issue affects Information...

Comodo Dragon 代码注入漏洞

Comodo Dragon is a web browser from Comodo China. A code injection vulnerability exists in Comodo Dragon version 134.0.6998.179 and earlier, which stems from the component IP DNS Leakage Detector leading to cross-site scripting...

mall 代码注入漏洞

mall is a macro personal developer of a set of e-commerce system, including the front mall system and backend management system. mall 1.0.3 and previous versions of code injection vulnerability, the vulnerability stems from the file / swagger-ui/index.html parameter configUrl lead to cross-site...

Roothub 代码注入漏洞

Roothub is a forum system developed using SSM and MySQL. A code injection vulnerability exists in Roothub 2.6 and earlier versions, which originates from cross-site scripting due to function Edit in file src/main/java/cn/roothub/web/admin/SystemConfigAdminController.java...

CVE-2014-125116

A remote code execution vulnerability exists in HybridAuth versions 2.0.9 through 2.2.2 due to insecure use of the install.php installation script. The script remains accessible after deployment and fails to sanitize input before writing to the application’s config.php file. An unauthenticated...

CVE-2025-54449

Unrestricted Upload of File with Dangerous Type vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0...

CVE-2025-54450

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Samsung Electronics MagicINFO 9 Server allows Code Injection.This issue affects MagicINFO 9 Server: less than 21.1080.0...