CVE-2026-84154: Improper Control of Generation of Code

A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary code on the server...

Debian dsa-6526 : dovecot-auth-lua - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6526 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6526-1 [email protected] https://www.debian.org/securit...

CVE-2022-22947

CVE-2022-22947 스프링 클라우드 게이트웨이에 대한 코드 인젝션 공격 CVE 요약 스프링 클라우드 게이트웨이 버전 3.1.1+ 및 3.0.7+ 이전 버전에서는 Gateway Actuator 엔드포인트가 활성화되고 노출되며 보안되지 않은 경우 애플리케이션이 코드 인젝션 공격에 취약합니다. 원격 공격자는 악의적으로 조작된 요청을 만들어 원격 호스트에서 임의의 원격 실행을 가능하게 할 수 있습니다. 영향을 받는 버전 Oracle Commerce Guided Search 11.3.2 Oracle Communications...

CVE-2024-42002

A code injection vulnerability has been discovered in the Robot Operating System 2 ROS 2 'ros2topic' command-line tool, affecting all ROS 2 distributions from Crystal Clemmys up to and including Lyrical Luth and Rolling Ridley. The vulnerability lies in the 'hz' verb, which reports the publishing...

CVE-2024-42002 Unsafe use of eval() method in ros2 topic hz tool

A code injection vulnerability has been discovered in the Robot Operating System 2 ROS 2 'ros2topic' command-line tool, affecting all ROS 2 distributions from Crystal Clemmys up to and including Lyrical Luth and Rolling Ridley. The vulnerability lies in the 'hz' verb, which reports the publishing...

CVE-2024-42002

A code injection vulnerability exists in the ROS 2 'ros2topic' command-line tool, specifically within the 'hz' verb . The flaw occurs because the tool accepts a user-provided Python expression via the --filter option and passes it directly to the eval() function without any sanitization. This all...

CVE-2021-42694

CVE-2021-42694 최근 공개된 동형문자 공격 취약점을 악용한 악성 파일 생성 도구로, 최소한 C, C++, C, Go, Python, Rust, JS 등에서 발견되었습니다. cve.mitre.org에서 인용 유니코드 사양 14.0까지의 문자 정의에서 문제가 발견되었습니다. 이 사양은 공격자가 동형문자를 사용하여 대상 식별자와 시각적으로 동일하게 보이는 함수명과 같은 소스 코드 식별자를 생성할 수 있도록 합니다. 공격자는 이를 악용하여 상위 소프트웨어 의존성에서 공격적인 식별자 정의를 통해 코드를 주입하고, 이를 속아...

[SECURITY] [DSA 6526-1] dovecot security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6526-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 28, 2026 https://www.debian.org/security/faq -...

CVE-2026-93348

Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...

Security update for ImageMagick

This update for ImageMagick fixes the following issues: CVE-2026-62343: heap buffer over-write in morphology operation when an invalid kernel is provided bsc1272575. CVE-2026-62363: heap buffer over-write in fx operation bsc1272582. CVE-2026-62946: integer overflow in JNX decoder causes heap buff...

SUSE-SU-2026:4376-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2026-62343: heap buffer over-write in morphology operation when an invalid kernel is provided bsc1272575. - CVE-2026-62363: heap buffer over-write in fx operation bsc1272582. - CVE-2026-62946: integer overflow in JNX decoder causes hea...

CVE-2026-93348 Unsloth Zoo Code Injection via model_type in config.json

Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...

CVE-2026-93348 Unsloth Zoo Code Injection via model_type in config.json

Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...

CVE-2026-93348 Unsloth Zoo Code Injection via model_type in config.json

Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...

EUVD-2026-88318

Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...

CVE-2026-93348

The Unsloth Zoo library (versions 2025.9.9 before 2026.8.14), as implemented in Unsloth (2025.9.9 through 2026.8.19), is vulnerable to a code injection flaw in the model-loading compile path. The root cause is that the get_transformers_model_type() function in hf_utils.py collects model_type valu...

CVE-2026-90926

Improper Control of Generation of Code 'Code Injection' vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Code Injection. This issue affects Logsign SIEM: from 6.4.101 before 6.4.117...

CVE-2026-90926

The Logsign SIEM software, developed by Innotim Software, Telecommunications and Consultancy Trade Ltd. Co., is vulnerable to a Code Injection flaw. This issue affects versions from 6.4.101 before 6.4.117 . The vulnerability allows for the improper control of code generation, potentially leading ...

EUVD-2026-88290

Improper Control of Generation of Code 'Code Injection' vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Code Injection. This issue affects Logsign SIEM: from 6.4.101 before 6.4.117...

CVE-2026-90926 Code Injection in Innotim Software's Logsign SIEM

Improper Control of Generation of Code 'Code Injection' vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Code Injection. This issue affects Logsign SIEM: from 6.4.101 before 6.4.117...