The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a malicious file...

The vulnerability of the “Universal Import” module, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the “Universal Import” module is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260609-73-0008

The vulnerability of the SQL Expressions function on the Grafana monitoring and observation platform is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain unauthorized access to the platform by sending speciall...

The vulnerability of QStar Archive Solutions’ software for working with archives lies in improper code generation management, allowing attackers to execute arbitrary code.

The vulnerability of the software for working with QStar Archive Solutions is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-3120

Improper Control of Generation of Code 'Code Injection' vulnerability in Profelis Information and Consulting Trade and Industry Limited Company SambaBox allows OS Command Injection. This issue affects SambaBox: from 5.1 before 5.3...

The vulnerability of the resumeConfigurationDispatch method in the ActivityRecord.java class of the Framework operating system Android component allows a hacker to escalate their privileges.

The vulnerability of the resumeConfigurationDispatch method in the ActivityRecord.java class of the Android operating system’s Framework component is related to improper code generation. Exploiting this vulnerability could allow an attacker to gain increased privileges...

PT-2026-86272

Уязвимость программного обеспечения VoIP-шлюза Телеком MG связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...

ROS-20260526-73-0001

A vulnerability in the email interpreter module of the Python programming language is related to improper code generation control. Exploitation of the vulnerability could allow a remote attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service...

EUVD-2026-31090

Improper Control of Generation of Code 'Code Injection' vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables code execution on other users' systems. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component:...

ROS-20260520-73-0004

A vulnerability in the V8 JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to improper code generation control. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code using a specially crafted HTML page...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to improper code generation management, allows a hacker to execute arbitrary code.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Apache OFBiz 代码注入漏洞

Apache OFBiz is an ERP system developed by the Apache Foundation in the United States. This system provides a complete set of Java-based web application components and tools. Versions of Apache OFBiz prior to 24.09.06 contained a code injection vulnerability. This vulnerability stemmed from...

PT-2026-46074

Уязвимость программного обеспечения VoIP-шлюза Телеком MG связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код с правами root...

The vulnerability of the Python Task Runner module of the N8n automation platform allows a hacker to bypass the sandbox protection mechanisms and execute arbitrary code.

The vulnerability of the Python Task Runner module of the N8n automation platform relates to improper code generation management. Exploiting this vulnerability allows a remote attacker to bypass the sandbox’s security mechanisms and execute arbitrary code...

The vulnerability of Microsoft Data Formulator’s AI-based data visualization tool, related to improper code generation management, allows a malicious actor to execute arbitrary code.

The vulnerability of the Microsoft Data Formulator, a tool for visualizing data based on artificial intelligence, is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Microsoft Dynamics 365 resource planning software, related to improper code generation management, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Dynamics 365 resource planning software is related to improper code generation. Exploitation of this vulnerability could allow an attacker operating remotely to execute arbitrary code...

The vulnerability of the os.system() function on the lifecycle management platform for machine learning models allows a perpetrator to execute arbitrary commands.

The vulnerability of the os.system function on the lifecycle management platform for machine learning models involves improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2026-41094

Improper control of generation of code 'code injection' in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network...

The vulnerability of the resetPromiseSpecies() function in the vm2 package manager’s NPM library allows a hacker to bypass the sandbox protection mechanisms and execute arbitrary commands.

The vulnerability of the resetPromiseSpecies function in the vm2 library of the NPM package manager is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to bypass the sandbox’s security mechanisms and execute arbitrary commands...

PT-2026-54588

Уязвимость модуля трансформации кода в формат SystemJS компилятора для написания JavaScript-кода Babel связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...