CVE-2025-0134

A code injection vulnerability in the Palo Alto Networks Cortex XDR® Broker VM allows an authenticated user to execute arbitrary code with root privileges on the host operating system running Broker VM...

CVE-2025-48120

Improper Control of Generation of Code 'Code Injection' vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Code Injection.This issue affects MapSVG: from n/a through = 8.6.9...

CVE-2025-48119

Improper Control of Generation of Code 'Code Injection' vulnerability in RS WP THEMES RS WP Book Showcase rs-wp-books-showcase allows Code Injection.This issue affects RS WP Book Showcase: from n/a through = 6.7.59...

CVE-2025-47562

Improper Control of Generation of Code 'Code Injection' vulnerability in RomanCode MapSVG mapsvg allows Code Injection.This issue affects MapSVG: from n/a through = 8.5.34...

CVE-2025-47562 WordPress MapSVG plugin <= 8.5.34 - Content Injection Vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in RomanCode MapSVG mapsvg allows Code Injection.This issue affects MapSVG: from n/a through = 8.5.34...

CVE-2025-47562 WordPress MapSVG <= 8.5.34 - Content Injection Vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in RomanCode MapSVG allows Code Injection. This issue affects MapSVG: from n/a through 8.5.34...

CVE-2025-47562

CVE-2025-47562 : WordPress MapSVG up to version 8.5.34 is affected by an Improper Control of Generation of Code (Code Injection) vulnerability. The root cause is described as code-generation control weaknesses in MapSVG, enabling code injection. Affected product: MapSVG (WordPress plugin). Public...

CVE-2025-48120 WordPress MapSVG Lite plugin <= 8.6.9 - Arbitrary Shortcode Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Code Injection.This issue affects MapSVG: from n/a through = 8.6.9...

CVE-2025-48120 WordPress MapSVG Lite plugin <= 8.6.4 - Arbitrary Shortcode Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in RomanCode MapSVG Lite allows Code Injection. This issue affects MapSVG Lite: from n/a through 8.6.4...

CVE-2025-48120

CVE-2025-48120 (MapSVG Lite) is an improper generation of code vulnerability in the WordPress MapSVG Lite plugin, enabling arbitrary shortcode execution (code injection). Affected: MapSVG Lite versions up to 8.6.4. Public docs indicate a vendor-provided fix was released: MapSVG Lite 8.6.9 and lat...

CVE-2025-48119 WordPress RS WP Book Showcase plugin <= 6.7.59 - Content Injection vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in RS WP THEMES RS WP Book Showcase rs-wp-books-showcase allows Code Injection.This issue affects RS WP Book Showcase: from n/a through = 6.7.59...

CVE-2025-48119 WordPress RS WP Book Showcase plugin <= 6.7.41 - Arbitrary Shortcode Execution vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in RS WP THEMES RS WP Book Showcase allows Code Injection. This issue affects RS WP Book Showcase: from n/a through 6.7.41...

CVE-2025-48119

CVE-2025-48119 affects the WordPress plugin RS WP Book Showcase . Public sources in the connected set confirm an Imporer/Incorrect Control of Generation of Code (Code Injection) vulnerability, allowing arbitrary shortcode execution. Affected product: RS WP Book Showcase versions up to and includi...

CVE-2025-4767

A vulnerability was found in defog-ai introspect up to 0.1.4. It has been rated as critical. Affected by this issue is the function testcustomtool of the file introspect/backend/integrationroutes.py of the component Test Endpoint. The manipulation of the argument inputmodel leads to code injectio...

CVE-2025-4767 defog-ai introspect Test Endpoint integration_routes.py test_custom_tool code injection

A vulnerability was found in defog-ai introspect up to 0.1.4. It has been rated as critical. Affected by this issue is the function testcustomtool of the file introspect/backend/integrationroutes.py of the component Test Endpoint. The manipulation of the argument inputmodel leads to code injectio...

CVE-2025-4767

CVE-2025-4767 affects defog-ai introspect up to version 0.1.4. The vulnerability targets the Test Endpoint’s test_custom_tool function, where improper handling of the input_model in introspect/backend/integration_routes.py enables code injection. Local attack required; exploit has been disclosed ...

CVE-2025-4767 defog-ai introspect Test Endpoint integration_routes.py test_custom_tool code injection

A vulnerability was found in defog-ai introspect up to 0.1.4. It has been rated as critical. Affected by this issue is the function testcustomtool of the file introspect/backend/integrationroutes.py of the component Test Endpoint. The manipulation of the argument inputmodel leads to code injectio...

CVE-2025-4767 defog-ai introspect Test Endpoint integration_routes.py test_custom_tool code injection

A vulnerability was found in defog-ai introspect up to 0.1.4. It has been rated as critical. Affected by this issue is the function testcustomtool of the file introspect/backend/integrationroutes.py of the component Test Endpoint. The manipulation of the argument inputmodel leads to code injectio...

Code Injection

github.com/cosmos/evm are vulnerable to Code Injection. The vulnerability is due to setting lower EVM call gas limits, which allows the precompile code to partially execute and then fail without reverting the already made state changes...

PT-2025-21724 · WordPress · Rs Wp Book Showcase

Name of the Vulnerable Software and Affected Versions: RS WP Book Showcase versions through 6.7.41 Description: The issue is related to an Improper Control of Generation of Code, also known as 'Code Injection', which affects RS WP Book Showcase, allowing code injection. Recommendations: For...