Netgear DGN1000WW Arbitrary Command Execution

The vulnerability of the Netgear DGN1000WW router’s built-in software is related to incorrect code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

PT-2024-8818

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 133 Firefox ESR versions prior to 128.5 Thunderbird versions prior to 133 Thunderbird versions prior to 128.5 Description: When handling keypress events, an attacker may have been able to trick a user into bypassing...

Arbitrary Code Injection

Overview pycel is an A library for compiling excel spreadsheets to python code & visualizing them as a graph Affected versions of this package are vulnerable to Arbitrary Code Injection through the code generation from a crafted formula in an Excel spreadsheet cell. An attacker can execute...

Apache OFBiz SSRF

The vulnerability of Apache OFBiz’s resource planning software lies in improper code generation management. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...

CVE-2024-10094

Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code...

CVE-2024-10094

Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code...

CVE-2024-10094

Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code...

CVE-2024-10094

CVE-2024-10094 affects Pega Platform versions 6.x through Infinity 24.1.1 due to an issue with Improper Control of Generation of Code. Connected sources consistently identify this as the affected product and root cause. Public details mention a large range of versions but do not provide a confirm...

CVE-2024-10094

Pega Platform versions 6.x to Infinity 24.1.1 are affected by an issue with Improper Control of Generation of Code...

PT-2024-16022 · Pegasystems · Pega Platform

Name of the Vulnerable Software and Affected Versions: Pega Platform versions 6.x through Infinity 24.1.1 Description: The issue is related to Improper Control of Generation of Code. No information is provided about the estimated number of potentially affected devices worldwide or real-world...

Pegasystem PEGA Platform 安全漏洞

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem, USA. The platform is used to develop applications such as BPM Business Process Management, Case Management, Real-Time Decision Making and CRM Customer Relationship Management. A security vulnerability exists...

PT-2024-8649

Name of the Vulnerable Software and Affected Versions Sourcetree for Mac versions 4.2.8 Sourcetree for Windows versions 3.4.19 Description The issue is related to incorrect code generation management in the visual Git client SourceTree. Exploitation of this issue may allow a remote attacker to...

Microsoft TorchGeo Code Execution

The vulnerability of the Microsoft TorchGeo library for working with geospatial data is related to improper code generation management. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary code...

libreswan NetworkManager Privilege Escalation

The vulnerability of the client plugin libreswan in the NetworkManager network management software is related to incorrect code generation. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

PT-2024-8093

Name of the Vulnerable Software and Affected Versions: TorchGeo affected versions not specified Description: The issue is related to incorrect code generation management in the TorchGeo library, which handles geospatial data. This can allow a remote attacker to execute arbitrary code...

BG-TEK Informatics CoslatV3 代码注入漏洞

BG-TEK Informatics CoslatV3 is an application from BG-TEK Informatics. A code injection vulnerability exists in BG-TEK Informatics CoslatV3 version 3.1069 and earlier, which stems from improper code generation controls that allow command injection...

Cisco Adaptive Security Appliance Code Execution

The vulnerability in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD VPN microprogramming device controllers is related to improper code generation. Exploitation of this vulnerability could allow an attacker to execute arbitrary code...

Docker Integration Code Execution

The vulnerability of the Docker Integration component of the Warp terminal emulator emulator is related to incorrect code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created link...

Dell OpenManage Enterprise Code Execution

The vulnerability of the Dell OpenManage Enterprise system management console is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

WordPress plugin ScottCart 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A code injection...