YouGile Project Management Code Execution

The vulnerability of the YouGile project management service is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-50498

CVE-2024-50498 Description Improper Control of Generation of Code 'Code Injection' vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console: from n/a through 1.0. Setup Netcat Listener: Open a terminal on your machine and start a Netcat listener to wait fo...

CVE-2026-23498

CVE-2026-23498: Shopware Has Improper Control of Generation of Code in Twig rendered views Overview Field| Details ---|--- CVE ID| CVE-2026-23498 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products shopware/shopware versions: = 6.7.0.0, = 6.7.0.0, 6.7.6.1 CWE...

Bisection Component Protected Information Access

The vulnerability of the Bisection component in Google Chrome and Microsoft Edge is related to improper code generation management. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created file...

Nginx UI Code Execution

The vulnerability of the Nginx UI server’s user interface is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-114460

Уязвимость пользовательского интерфейса Nginx UI сервера nginx связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

Cisco License On-Prem License Server Data Compromise

The vulnerability of the Cisco License On-Prem server licensing system previously known as Cisco Smart Software Manager On-Prem SSM On-Prem is related to improper code generation management. Exploitation of this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

Microsoft Remote Desktop Client Code Execution

The vulnerability of the Microsoft Remote Desktop Client for Windows client involves improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Dynamics 365 Customer Engagement Code Execution

The vulnerability of the Microsoft Dynamics 365 Customer Engagement CE CRM system is related to improper code generation. Exploitation of this vulnerability could allow an attacker operating remotely to execute arbitrary code...

MongoDB Compass Unauthorized Access

The vulnerability of MongoDB Compass’s graphical interface, a database management system for MongoDB, is related to improper code generation practices. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Ad Adobe Campaign Classic Code Execution

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Ad Adobe Campaign Classic Code Execution

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Ad Adobe Campaign Classic Code Execution

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Adobe Campaign Classic DoS

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to improper code generation. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Microsoft SharePoint Server Code Execution

The vulnerability of the ToolPane.GetPartPreviewAndPropertiesFromMarkup function in Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Server Subscription Edition packages is related to improper code generation. Exploiting this vulnerability could allow ...

Security Component Full Control

The vulnerability of Oracle PeopleSoft Enterprise Campus Solutions’ Security component is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to gain full control over the application using the HTTPS protocol...

ROS-20260915-73-0009

The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise data integrity...

Core Component Oracle Coherence Full Control

The vulnerability of the Core component of the Oracle Coherence data processing software is related to improper code generation management. Exploiting this vulnerability can allow an attacker to gain full control over the application using the TCP protocol...

ROS-20260911-73-0077

The vulnerability of the Headless web browsers Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability can allow a remote attacker to trigger a service failure through a specially created HTML page...

C omni-completion module Code Execution

The vulnerability of the C omni-completion mechanism in the runtime/autoload/ccomplete.vim text editor Vim is related to improper code generation control. Exploiting this vulnerability can allow an attacker to execute arbitrary code...