[SECURITY] Fedora 41 Update: rust-pyo3-macros-backend-0.22.4-1.fc41

Code generation for PyO3 package...

[SECURITY] Fedora 40 Update: rust-pyo3-macros-backend-0.22.4-1.fc40

Code generation for PyO3 package...

[SECURITY] Fedora 39 Update: rust-pyo3-macros-backend-0.22.4-1.fc39

Code generation for PyO3 package...

Grafana Expressions Code Execution

The vulnerability of the Expressions function on the Grafana monitoring and observation platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by injecting specially crafted SQL queries...

WordPress plugin ajax-extend 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code injection...

PT-2024-33392 · Sunjianle · Ajax-Extend

Name of the Vulnerable Software and Affected Versions: Sunjianle ajax-extend versions n/a through 1.0 Description: The issue is related to improper control of code generation, allowing code injection. This vulnerability exists in Sunjianle and affects the ajax-extend component. Recommendations: F...

PT-2024-7385

Name of the Vulnerable Software and Affected Versions: Warp Terminal versions prior to 2024.07.18 v0.2024.07.16.08.02 Description: A command injection vulnerability exists in the Docker integration functionality of Warp Terminal. An attacker can create a specially crafted hyperlink using the...

Cacti Code Execution

The vulnerability of the Cacti network monitoring software is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by injecting specially crafted PHP code into log files...

CVE-2024-46076

RuoYi v4.7.9 and before has a security flaw that allows escaping from comments within the code generation feature, enabling the injection of malicious code...

CVE-2024-46076: Improper Control of Generation of Code

RuoYi v4.7.9 and before has a security flaw that allows escaping from comments within the code generation feature, enabling the injection of malicious code...

CVE-2024-46076

RuoYi v4.7.9 and before has a security flaw that allows escaping from comments within the code generation feature, enabling the injection of malicious code...

CVE-2024-46076

RuoYi v4.7.9 and before has a security flaw that allows escaping from comments within the code generation feature, enabling the injection of malicious code...

RuoYi 安全漏洞

RuoYi is a backend management system for individual developers in China RuoYi RuoYi. A security vulnerability exists in RuoYi v4.7.9 and prior versions, which stems from a vulnerability that allows comments in the code generation function to escape, thereby injecting malicious code...

CVE-2024-46076

The RuoYi backend management system (v4.7.9 and before) contains a security flaw in its code generation feature . This vulnerability allows an attacker to escape from comments to perform malicious code injection into the system. No specific remediation or patched version is currently documented i...

mysql2 readCodeFor Code Execution

The vulnerability of the readCodeFor function in the mysql2 library relates to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GLSA-202409-22 : GCC: Flawed Code Generation

The remote host is affected by the vulnerability described in GLSA-202409-22 GCC: Flawed Code Generation A vulnerability has been discovered in GCC. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo Linux...

GCC: Flawed Code Generation

Background The GNU Compiler Collection includes front ends for C, C++, Objective-C, Fortran, Ada, Go, D and Modula-2 as well as libraries for these languages libstdc++,.... Description A vulnerability has been discovered in GCC. Please review the CVE identifier referenced below for details. Impac...

MindsDB eval Code Execution

The vulnerability of the eval function in software platforms for automating data exchange between MindsDB queues is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing a specially crafted INSERT query...

D-Link DI-8300 Router Arbitrary Command Execution

The vulnerability of the mspinfohtm function in D-Link DI-8300 router microprogramming software is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using the GET request...

MindsDB eval Code Execution

The vulnerability of the eval function in software platforms for automating data exchange between MindsDB queues is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing a specially crafted INSERT query...