Kardex Mlog Control Center Path Combine Code Execution

The vulnerability of the Path.Combine method in the modular software solution for managing material flows and inventory control processes in the Kardex Mlog Control Center MCC is related to improper code generation. Exploiting this vulnerability allows an attacker operating remotely to execute...

Microsoft Exchange Server Code Execution

The vulnerability of Microsoft Exchange Server is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Exchange Server Code Execution

The vulnerability of Microsoft Exchange Server lies in improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request remotely...

Control By Web X-600M Code Execution

The vulnerability of the microprogramming software of the input/output controller for controlling and monitoring the Control By Web X-600M is related to errors during code generation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code by running scripts written ...

Azure DevOps Server Code Execution

The vulnerability of Azure DevOps Server lies in improper code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

SUSE CVE-2009-1102

Unspecified vulnerability in the Virtual Machine in Java SE Development Kit JDK and Java Runtime Environment JRE 6 Update 12 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to "code generation."...

SUSE CVE-2016-5397

The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0...

SUSE CVE-2017-11671

Under certain circumstances, the ix86expandbuiltin function in i386.c in GNU Compiler Collection GCC version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before 6.4 will generate instruction sequences that clobber the status flag of the RDRAND and RDSEED intrinsics before it can be read, potentially...

SUSE CVE-2019-3695

A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Module for Developmen...

Pulse Connect Secure VPN Code Execution

The vulnerability in the web interface of the administrator’s VPN server for corporate networks, Pulse Connect Secure, is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2023-1397 · Microsoft · Azure Devops Server

Name of the Vulnerable Software and Affected Versions: Azure DevOps Server affected versions not specified Description: The issue is related to incorrect code generation management in Azure DevOps Server, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: At t...

PT-2023-1514 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Exchange Server. It allows a remote attacker to execute arbitrary code. There is no information...

PT-2023-1537 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to errors in code generation management. It allows a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no informatio...

Microsoft Edge Privilege Escalation

The vulnerability of Microsoft Edge is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created web page...

Threat Actors Turn to Sliver as Open Source Alternative to Popular C2 Frameworks

The legitimate command-and-control C2 framework known as Sliver is gaining more traction from threat actors as it emerges as an open source alternative to Cobalt Strike and Metasploit. The findings come from Cybereason, which detailed its inner workings in an exhaustive analysis last week. Sliver...

Threat Actors Turn to Sliver as Open Source Alternative to Popular C2 Frameworks

The legitimate command-and-control C2 framework known as Sliver is gaining more traction from threat actors as it emerges as an open source alternative to Cobalt Strike and Metasploit. The findings come from Cybereason, which detailed its inner workings in an exhaustive analysis last week. Sliver...

PT-2023-6840

Name of the Vulnerable Software and Affected Versions EdgeRouters versions 2.0.9-hotfix.5 and earlier UniFi Security Gateways USG versions 4.4.56 and earlier Description A vulnerability allows a malicious actor directly connected to the WAN interface of an affected device to create a remote code...

Shopware vulnerable to Improper Control of Generation of Code in Twig rendered views

Impact In Twig environment without the Sandbox extension, it is possible to refer to PHP functions in twig filters like map, filter, sort. This allows in the template to call any global PHP function. Patches The problem has been fixed with 6.4.18.1 with an override of the specified filters until...

PT-2023-7037 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to improper code generation control in Visual Studio Code, allowing an attacker to execute arbitrary code. This can be exploited to gain unauthorized access...

Dev UI Config Editor Quarkus Code Execution

The vulnerability of the Dev UI Config Editor component in the quarkus Java framework is related to improper code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...