41285 matches found
CVE-2026-18808
Klemsan Electrical Electronics Inc. KIO (Klemsan Internet Objects) prior to v1.9 is affected by an Improper Control of Generation of Code (Code Injection) vulnerability, enabling unauthenticated remote code execution over the network. The vulnerability carries a CVSS 3.1 score of 9.8 (CRITICAL) w...
EUVD-2026-69130
Improper Control of Generation of Code 'Code Injection' vulnerability in Klemsan Electrical Electronics Inc. KIO Klemsan Internet Objects allows Code Injection. This issue affects KIO Klemsan Internet Objects: before v1.9...
CVE-2026-18808 Unauthenticated Remote Code Execution via Code Injection in Klemsan's KIO
Improper Control of Generation of Code 'Code Injection' vulnerability in Klemsan Electrical Electronics Inc. KIO Klemsan Internet Objects allows Code Injection. This issue affects KIO Klemsan Internet Objects: before v1.9...
CVE-2026-4813 Code injection in the Lutece Core
A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authenticated administrators to execute code remotely. The XML/XSLT processing configuration does not enable secure processing mode FEATURESECUREPROCESSING, allowing Java extension functions to be...
CVE-2026-4813 Code injection in the Lutece Core
A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authenticated administrators to execute code remotely. The XML/XSLT processing configuration does not enable secure processing mode FEATURESECUREPROCESSING, allowing Java extension functions to be...
CVE-2026-4813
Lutece Core versions up to 7.1.7 are affected by a code injection vulnerability in the XSL export management module . The root cause is that the XML/XSLT processing configuration does not enable FEATURE_SECURE_PROCESSING , permitting Java extension functions to execute from malicious XSL styleshe...
Security update for python-sqlparse
This update for python-sqlparse fixes the following issues: CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption bsc1275459. CVE-2026-59893: quadratic complexity when processing unmatch...
SUSE-SU-2026:3907-1 Security update for python-sqlparse
This update for python-sqlparse fixes the following issues: - CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption bsc1275459. - CVE-2026-59893: quadratic complexity when processing...
Security update for python3-sqlparse
This update for python3-sqlparse fixes the following issues: CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption bsc1275459. CVE-2026-59893: quadratic complexity when processing...
SUSE-SU-2026:3906-1 Security update for python3-sqlparse
This update for python3-sqlparse fixes the following issues: - CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessive resource consumption bsc1275459. - CVE-2026-59893: quadratic complexity when processing...
Exploit for Code Injection in Langflow
CVE-2026-0768 Donate Help maintain this pr...
Malicious Package
Overview fuels-forc is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
PT-2026-84225
Name of the Vulnerable Software and Affected Versions Dell PowerStore affected versions not specified Description An authenticated user with limited privileges can exploit a code injection flaw to execute arbitrary code with root privileges. Code injection is a type of attack where an attacker...
PT-2026-84218
Improper Control of Generation of Code 'Code Injection' vulnerability in Klemsan Electrical Electronics Inc. KIO Klemsan Internet Objects allows Code Injection. This issue affects KIO Klemsan Internet Objects: before v1.9...
CVE-2026-58572: Improper Control of Generation of Code
Dell PowerStore contains a Code Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...
CVE-2026-18808: Improper Control of Generation of Code
Improper Control of Generation of Code 'Code Injection' vulnerability in Klemsan Electrical Electronics Inc. KIO Klemsan Internet Objects allows Code Injection. This issue affects KIO Klemsan Internet Objects: before v1.9...
openSUSE 16 Security Update : python-sqlparse (openSUSE-SU-2026:21690-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21690-1 advisory. - CVE-2026-54284: high algorithm complexity when parsing SQL payloads with hundreds of nesting levels can lead to denial of service via excessiv...
Arbitrary Code Injection
Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Arbitrary Code Injection in the /prompts/test endpoint through the renderedcontent path in litellm/proxy/prompts/promptendpoints.py. An attacker can execute arbitrary OS...