37928 matches found
CVE-2025-1398 macOS TCC Bypass via Code Injection
Mattermost Desktop App versions =5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control TCC via code injection...
CVE-2025-1398 macOS TCC Bypass via Code Injection
Mattermost Desktop App versions =5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control TCC via code injection...
Security Bulletin: QRadar Advisor With Watson for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. QRadar Advisor With Watson for IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2024-6345 DESCRIPTION: pypa/setuptools could...
CVE-2025-27102
Agate (OBiBa epidemiology) is affected by an HTML injection vulnerability in user signup that allows arbitrary HTML to be injected into a user’s first/last name and rendered in the admin email, enabling phishing risk targeting administrative users. The issue exists in versions prior to 3.3.0 and ...
PHPGurukul Human Metapneumovirus Testing Management System 代码注入漏洞
PHPGurukul Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system from PHPGurukul, Inc. A code injection vulnerability exists in version 1.0 of the PHPGurukul Human Metapneumovirus Testing Management System, which originates from cross-site scripting a...
PHPGurukul Human Metapneumovirus Testing Management System 代码注入漏洞
PHPGurukul Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system from PHPGurukul, Inc. A code injection vulnerability exists in version 1.0 of the PHPGurukul Human Metapneumovirus Testing Management System, which stems from an incorrect manipulation o...
Virtual Airlines Manager 代码注入漏洞
Virtual Airlines Manager VAM is an open source web-based system for managing virtual airlines from Virtual Airlines Manager, Inc. It supports different ACARS and flight trackers to manage virtual airlines. A code injection vulnerability exists in Virtual Airlines Manager version 2.6.2, which...
VBlog 代码注入漏洞
VBlog is a multi-user blog management platform for lenve individual developers. A code injection vulnerability exists in VBlog 1.0.0 and earlier versions, which originates from cross-site scripting and could lead to a remote attacker executing arbitrary script in a user's browser...
SourceCodester Vehicle Management System 代码注入漏洞
SourceCodester Vehicle Management System is an open source vehicle management system from SourceCodester. A code injection vulnerability exists in SourceCodester Vehicle Management System version 1.0, which stems from incorrect manipulation of the parameter id that can lead to cross-site scriptin...
gougucms 代码注入漏洞
gougucms gougucms CMS is China's gougu gougu open source based on ThinkPHP6 + Layui + MySql to create a lightweight general-purpose back-end management framework . gougucms 4.08.18 version of the code injection vulnerability, the vulnerability stems from cross-site scripting, may lead to a remote...
Mattermost Desktop App 安全漏洞
Mattermost Desktop App is a cross-platform desktop collaboration tool based on the Electron framework, supporting Windows, macOS and Linux systems, designed for team collaboration. A privilege misconfiguration vulnerability exists in Mattermost Desktop App. The vulnerability stems from declaring...
Drivin Soluções 代码注入漏洞
Drivin Soluções is an application from Drivin, Inc. A code injection vulnerability exists in Drivin Soluções 20250226 and prior versions, which originates from cross-site scripting and could lead to remote attacks...
starsea-mall 代码注入漏洞
starsea-mall is a springboot +thymeleaf based Xiaomi mall management system by StarSea99 individual developer. A code injection vulnerability exists in starsea-mall version 1.0, which originates from cross-site scripting and may lead to remote attacks...
Tale Blog 代码注入漏洞
Tale Blog is a Java blog open-sourced by Tale Blog System. A code injection vulnerability exists in Tale Blog version 2.0.5, which originates from cross-site scripting and could lead to remote attacks...
CVE-2025-26924
Improper Control of Generation of Code 'Code Injection' vulnerability in colabrio Ohio Extra ohio-extra allows Code Injection.This issue affects Ohio Extra: from n/a through = 3.4.7...
CVE-2025-26924
The CVE-2025-26924 entry concerns WordPress Ohio Extra (and related NotFound Ohio Extra) with versions n/a through 3.4.7 affected by an Improper Generation of Code (Code Injection) due to shortcode handling. The vulnerability enables code injection via shortcodes. Public details confirm affected ...
CVE-2025-26924 WordPress Ohio Theme Extra plugin <= 3.4.7 - Shortcode Injection vulnerability
Improper Control of Generation of Code 'Code Injection' vulnerability in colabrio Ohio Extra ohio-extra allows Code Injection.This issue affects Ohio Extra: from n/a through = 3.4.7...
CVE-2025-26924 WordPress Ohio Theme Extra plugin <= 3.4.7 - Shortcode Injection vulnerability
Improper Control of Generation of Code 'Code Injection' vulnerability in colabrio Ohio Extra ohio-extra allows Code Injection.This issue affects Ohio Extra: from n/a through = 3.4.7...
CVE-2024-8402
An issue was discovered in GitLab EE affecting all versions starting from 17.2 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. An input validation issue in the Google Cloud IAM integration feature could have enabled a Maintainer to...