cve-2020-29007

CVEID : CVE-2020-29007 Name of the affected products and versions : Mediawiki Score all versions up to 0.3.0 Problem type : CWE-96: Improper Neutralization of Directives in Statically Saved Code ‘Static Code Injection’ Summary Score is a Mediawiki extension which generates musical notation based ...

CVE-2026-89107 Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules)

SAP S/4HANA Manage Substitution/Validation Rules does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting language. An authenticated attacker with specific business privileges could submit specially crafted input, which is interpret...

CVE-2026-89107

The SAP S/4HANA (Manage Substitution/Validation Rules) component is vulnerable to a Code Injection vulnerability (CWE-94). The issue stems from insufficient validation of input processed by rule definition functionality that uses a domain-specific scripting language. An authenticated attacker wit...

CVE-2009-2265

CVE-2009-2265 - Adobe ColdFusion 8 File Upload RCE A Rust implementation of the POC for the CVE-2009-2265 exploit, targeting Adobe ColdFusion 8. Vulnerability Overview This vulnerability allows an unauthenticated attacker to upload arbitrary files to a web-accessible directory on a server running...

HuaWei_Route_HG532_RCE_CVE-2017-17215

HuaWeiRouteHG532RCECVE-2017-17215 POCsuite and goland implementation of Huawei HG532 router command injection CVE-2017-17215 POC goland Implementation POCsuite Implementation For writing and code, please refer to: https://blog.csdn.net/qq41490561/article/details/127659604...

CVE-2026-108941

A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parsecfgargs of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfgargs leads to code injection. The attack can only be performed from a local...

CVE-2026-108943 ModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.frompretrained of the file lightx2v/models/runners/cosmos3/cosmos3runner.py of the component Tokenizer. This manipulation of the argument automap causes code injection. The attack is restricted ...

EUVD-2026-98182

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.frompretrained of the file lightx2v/models/runners/cosmos3/cosmos3runner.py of the component Tokenizer. This manipulation of the argument automap causes code injection. The attack is restricted ...

CVE-2026-108943

A code injection vulnerability exists in ModelTC LightX2V (versions up to 0.5.0 ) within the Tokenizer component. The flaw is located in the AutoTokenizer.from_pretrained function of the file lightx2v/models/runners/cosmos3/cosmos3_runner.py . By manipulating the auto_map argument, an attacker ca...

CVE-2026-108943 ModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection

A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.frompretrained of the file lightx2v/models/runners/cosmos3/cosmos3runner.py of the component Tokenizer. This manipulation of the argument automap causes code injection. The attack is restricted ...

CVE-2019-3396

CVE-2019-3396 CVE-2019-3396 confluence SSTI RCE 🔎 What is CVE-2019-3396? A critical Confluence bug Atlassian. Type: Template Injection + Path Traversal. Risk: Remote Code Execution RCE without login. Status: Exploited in the wild. 🛑 Affected Versions 6.6.0 → 6.6.11 ❌ vulnerable 6.6.12 ✅ fixed...

CVE-2014-6287

CVE-2014-6287 - Rejetto HTTP File Server RCE Exploit A Rust implementation of the CVE-2014-6287 exploit targeting Rejetto HTTP File Server HFS versions 2.3x before 2.3c. Vulnerability Overview CVE-2014-6287 is a critical remote code execution vulnerability in Rejetto HTTP File Server HFS. Technic...

CVE-2023-46818

Metasploit-module Metasploit Module use exploit/linux/http/ispconfiglanguageedit set RHOSTS target.com set USERNAME admin set PASSWORD password123 set LHOST 127.0.0.1 set LPORT 4444 exploit An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language fi...

CVE-2026-74251

Unauthenticated SQL Injection via Attribute Filter in Phoca Cart Phoca Cart ≤ 6.1.6 — Unauthenticated Attacker Extracts Full Database via Time-Based Blind Injection SUMMARY The a attribute and s specification GET array parameters on Phoca Cart's public shop items page are concatenated raw into SQ...

ActiveScanPlusPlus

ActiveScan++ ActiveScan++ extends Burp Suite's active and passive scanning capabilities. Designed to add minimal network overhead, it identifies application behaviour that may be of interest to advanced testers: Potential host header attacks password reset poisoning, cache poisoning, DNS rebindin...

PT-2026-111781

Name of the Vulnerable Software and Affected Versions Fortinet FortiManager version 8.0.0 Fortinet FortiManager versions 7.6.0 through 7.6.6 Fortinet FortiManager Cloud versions 7.6.2 through 7.6.6 Description An OS command injection issue exists due to improper neutralization of special elements...

PT-2026-112905

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network...

PT-2026-111797

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 7.6.0 through 7.6.4 FortiAnalyzer versions 7.4.0 through 7.4.7 FortiAnalyzer version 7.2 FortiAnalyzer Cloud versions 7.6.2 through 7.6.4 FortiAnalyzer Cloud versions 7.4.1 through 7.4.7 FortiAnalyzer Cloud versions 7.2....

Microsoft Windows: CVE-2026-85359: Windows Performance Monitor Elevation of Privilege Vulnerability

Improper control of generation of code 'code injection' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

Microsoft SharePoint: CVE-2026-70266: Microsoft Office SharePoint Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...