Lucene search
+L

37753 matches found

RedhatCVE
RedhatCVE
added 2025/05/04 12:10 p.m.33 views

CVE-2025-2421

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Informatics SambaBox allows Code Injection. This issue affects SambaBox: before 5.1...

9.8CVSS7.1AI score0.00579EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/03 12:00 a.m.11 views

WordPress plugin The Motors - Car Dealer, Rental & Listing 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in...

7.3CVSS8.3AI score0.00486EPSS
SaveExploits0References4
OSV
OSV
added 2025/05/02 9:15 p.m.19 views

CVE-2025-4218

A vulnerability was found in handrew browserpilot up to 0.2.51. It has been declared as critical. Affected by this vulnerability is the function GPTSeleniumAgent of the file browserpilot/browserpilot/agents/gptseleniumagent.py. The manipulation of the argument instructions leads to code injection...

7.8CVSS5.4AI score0.00304EPSS
SaveExploits1References5
NVD
NVD
added 2025/05/02 9:15 p.m.32 views

CVE-2025-4218

A vulnerability was found in handrew browserpilot up to 0.2.51. It has been declared as critical. Affected by this vulnerability is the function GPTSeleniumAgent of the file browserpilot/browserpilot/agents/gptseleniumagent.py. The manipulation of the argument instructions leads to code injection...

7.8CVSS0.00304EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/05/02 8:31 p.m.8 views

CVE-2025-4218 handrew browserpilot gpt_selenium_agent.py GPTSeleniumAgent code injection

A vulnerability was found in handrew browserpilot up to 0.2.51. It has been declared as critical. Affected by this vulnerability is the function GPTSeleniumAgent of the file browserpilot/browserpilot/agents/gptseleniumagent.py. The manipulation of the argument instructions leads to code injection...

5.3CVSS5.8AI score0.00304EPSS
SaveExploits1References5
CVE
CVE
added 2025/05/02 8:31 p.m.69 views

CVE-2025-4218

CVE-2025-4218 affects handrew browserpilot up to 0.2.51. The vulnerability lies in the GPTSeleniumAgent function (file browserpilot/browserpilot/agents/gpt_selenium_agent.py) where improper handling/manipulation of the instructions argument enables code injection. Exploitation is described as loc...

7.8CVSS5.8AI score0.00304EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/05/02 8:31 p.m.35 views

CVE-2025-4218 handrew browserpilot gpt_selenium_agent.py GPTSeleniumAgent code injection

A vulnerability was found in handrew browserpilot up to 0.2.51. It has been declared as critical. Affected by this vulnerability is the function GPTSeleniumAgent of the file browserpilot/browserpilot/agents/gptseleniumagent.py. The manipulation of the argument instructions leads to code injection...

5.3CVSS0.00304EPSS
SaveExploits1References5
NVD
NVD
added 2025/05/02 12:15 p.m.22 views

CVE-2025-2421

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Informatics SambaBox allows Code Injection. This issue affects SambaBox: before 5.1...

9.8CVSS0.00579EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2025/05/02 12:15 p.m.11 views

CVE-2025-2421

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Informatics SambaBox allows Code Injection. This issue affects SambaBox: before 5.1...

9.8CVSS5.4AI score0.00579EPSS
SaveExploits0References4
OSV
OSV
added 2025/05/02 12:15 p.m.20 views

CVE-2025-2421

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Informatics SambaBox allows Code Injection.This issue affects SambaBox: before 5.1...

9.8CVSS5.8AI score0.00579EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/05/02 11:27 a.m.12 views

CVE-2025-2421 Remote Code Execution in Profelis Informatics' SambaBox

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Informatics SambaBox allows Code Injection. This issue affects SambaBox: before 5.1...

9.8CVSS5.5AI score0.00579EPSS
SaveExploits0References3
CVE
CVE
added 2025/05/02 11:27 a.m.85 views

CVE-2025-2421

CVE-2025-2421 affects SambaBox (Profelis Informatics) prior to version 5.1. The root cause is improper control of code generation, enabling a code injection vulnerability. Multiple sources consistently describe impact as code injection with a high severity risk; CVSS metrics in the initial entry ...

9.8CVSS5.4AI score0.00579EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2025/05/02 11:27 a.m.33 views

CVE-2025-2421 Remote Code Execution in Profelis Informatics' SambaBox

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Informatics SambaBox allows Code Injection. This issue affects SambaBox: before 5.1...

9.8CVSS0.00579EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2025/05/02 4:51 a.m.568 views

Exploit for Code Injection in Ispconfig

CVE-2023-46818 ISPConfig - PHP Code Injection PoC Exploit Ba...

7.2CVSS7.4AI score0.13784EPSS
SaveExploits14
CNNVD
CNNVD
added 2025/05/02 12:00 a.m.9 views

BrowserPilot 安全漏洞

BrowserPilot is an intelligent web browsing agent controlled by natural language from the individual developer Andrew Han. A security vulnerability exists in BrowserPilot 0.2.51 and earlier versions, which stems from code injection due to incorrect manipulation of the parameter instructions...

7.8CVSS5.7AI score0.00304EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/05/02 12:00 a.m.22 views

PT-2025-18772

Name of the Vulnerable Software and Affected Versions SambaBox versions prior to 5.1 Description The issue affects SambaBox due to an improper control of generation of code, allowing code injection. Recommendations For versions prior to 5.1, update to version 5.1 or later to resolve the issue...

9.8CVSS5.5AI score0.00579EPSS
SaveExploits0References15
CNNVD
CNNVD
added 2025/05/02 12:00 a.m.12 views

WordPress多款产品 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers. A code injection...

4.3CVSS8.6AI score0.00228EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/05/02 12:00 a.m.14 views

PT-2025-18922 · Unknown · Handrew Browserpilot

Name of the Vulnerable Software and Affected Versions: handrew browserpilot versions up to 0.2.51 Description: A critical issue was found in the GPTSeleniumAgent function of the file browserpilot/browserpilot/agents/gpt selenium agent.py. The manipulation of the instructions argument leads to cod...

7.8CVSS5.4AI score0.00304EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/05/02 12:00 a.m.12 views

SambaBox 代码注入漏洞

SambaBox is a Samba-based file sharing server solution from SambaBox, Inc. A code injection vulnerability exists in SambaBox versions prior to 5.1, which stems from improper code generation controls and could lead to code injection...

9.8CVSS7.3AI score0.00579EPSS
SaveExploits0References3
NVD
NVD
added 2025/05/01 8:15 p.m.28 views

CVE-2025-46569

Open Policy Agent OPA is an open source, general-purpose policy engine. Prior to version 1.4.0, when run as a server, OPA exposes an HTTP Data API for reading and writing documents. Requesting a virtual document through the Data API entails policy evaluation, where a Rego query containing a singl...

7.4CVSS0.00486EPSS
SaveExploits0References2
Rows per page
Query Builder