Code Injection

A flaw has been found in Dromara dataCompare up to 1.0.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

pgAdmin <= 9.9 is affected by an LDAP injection vulnerability in the LDAP authentication flow that allows an attacker to inject special LDAP characters in the username, causing the DC/LDAP server and. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

pgAdmin versions up to 9.9 are affected by a Remote Code Execution (RCE) vulnerability that occurs when running in server mode and performing restores from PLAIN-format dump files. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

The Import any XML, CSV or Excel File to WordPress (WP All Import) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.9.6. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code ('Code Injection') vulnerability. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Open Access Management (OpenAM) is an access management solution. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

NVIDIA NeMo Framework for all platforms contains a vulnerability in the bert services component where malicious data created by an attacker may cause a code injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

The Holiday class post calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 7.1 via the 'contents' parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation feature in the process_theme function in all versions up to, and including,. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Due to insufficient validation of connection property values, the SAP HANA JDBC Client allows a high-privilege locally authenticated user to supply crafted parameters that lead to unauthorized code. Rated medium severity (CVSS 6.9), this vulnerability is low attack complexity. No vendor patch available.

Due to missing input sanitation, SAP Solution Manager allows an authenticated attacker to insert malicious code when calling a remote-enabled function module. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject JNDI environment properties or pass a URL used during JNDI lookup operations, enabling access to an unintended JNDI. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

The Better Find and Replace - AI-Powered Suggestions plugin for WordPress is vulnerable to Limited Code Injection in all versions up to, and including, 1.7.7. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Various Ruijie Gateway EG and NBR models firmware versions 11.1(6)B9P1 < 11.9(4)B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end. Rated critical severity (CVSS 9.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme HAPPY happy-helpdesk-support-ticket-system allows Remote Code Inclusion.0.7. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Improper Control of Generation of Code ('Code Injection') vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-pricing allows Code Injection.5.9. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Improper Control of Generation of Code ('Code Injection') vulnerability in Widgetlogic.org Widget Logic widget-logic allows Code Injection.0.5. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

An arbitrary code execution vulnerability exists in multiple WSO2 products due to insufficient restrictions in the GraalJS and NashornJS Script Mediator engines. Rated high severity (CVSS 8.4), this vulnerability is low attack complexity. No vendor patch available.

The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

Xibo is an open source digital signage platform with a web content management system (CMS). Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. This Code Injection vulnerability could allow attackers to inject and execute arbitrary code within the application.

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Manipulating Writeable Configuration Files.3.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Agentforce Vibes Extension allows Code Injection.2.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Manipulating Writeable Configuration Files.12.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Improper Neutralization of Input Used for LLM Prompting vulnerability in Salesforce Mulesoft Anypoint Code Builder allows Code Injection.11.6. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

A remote code execution (RCE) vulnerability in the Postgres Drivers component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via a crafted HTML page. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

The kallyas theme for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.0 via the `TH_PhpCode` pagebuilder widget. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

The Advanced Ads - Ad Manager & AdSense plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.12 via the select_one() function. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Remote code execution in Veeam Backup & Replication allows an authenticated domain user with network access to the backup server to execute arbitrary code. The flaw requires valid domain credentials but no user interaction and has low attack complexity, making it a significant risk for domain-joined deployments. No public exploit code or active exploitation has been identified at the time of analysis.

Remote code execution in Nagios Log Server versions prior to 2024R1.3.1 allows an authenticated low-privileged attacker to execute arbitrary code in the context of the Log Server process by supplying a malformed dashboard ID to an internal API. The vulnerability is rated CVSS 9.4 (CVSS 4.0) but requires authentication (PR:L), and no public exploit code has been identified at time of analysis. This is a credible priority rather than a high-CVSS-but-low-risk issue, though the risk is gated by the authentication requirement.

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Prevent access to vCPU events before init Another day, another syzkaller bug. KVM erroneously allows userspace to pend vCPU events for a vCPU that hasn't been initialized yet, leading to KVM interpreting a bunch of uninitialized garbage for routing / injecting the exception. In one case the injection code and the hyp disagree on whether the vCPU has a 32bit EL1 and put the vCPU into an illegal mode for AArch64, tripping the BUG() in exception_target_el() during the next injection: kernel BUG at arch/arm64/kvm/inject_fault.c:40! Internal error: Oops - BUG: 00000000f2000800 [#1] SMP CPU: 3 UID: 0 PID: 318 Comm: repro Not tainted 6.17.0-rc4-00104-g10fd0285305d #6 PREEMPT Hardware name: linux,dummy-virt (DT) pstate: 21402009 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : exception_target_el+0x88/0x8c lr : pend_serror_exception+0x18/0x13c sp : ffff800082f03a10 x29: ffff800082f03a10 x28: ffff0000cb132280 x27: 0000000000000000 x26: 0000000000000000 x25: ffff0000c2a99c20 x24: 0000000000000000 x23: 0000000000008000 x22: 0000000000000002 x21: 0000000000000004 x20: 0000000000008000 x19: ffff0000c2a99c20 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 00000000200000c0 x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 x8 : ffff800082f03af8 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff800080f621f0 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 000000000040009b x1 : 0000000000000003 x0 : ffff0000c2a99c20 Call trace: exception_target_el+0x88/0x8c (P) kvm_inject_serror_esr+0x40/0x3b4 __kvm_arm_vcpu_set_events+0xf0/0x100 kvm_arch_vcpu_ioctl+0x180/0x9d4 kvm_vcpu_ioctl+0x60c/0x9f4 __arm64_sys_ioctl+0xac/0x104 invoke_syscall+0x48/0x110 el0_svc_common.constprop.0+0x40/0xe0 do_el0_svc+0x1c/0x28 el0_svc+0x34/0xf0 el0t_64_sync_handler+0xa0/0xe4 el0t_64_sync+0x198/0x19c Code: f946bc01 b4fffe61 9101e020 17fffff2 (d4210000) Reject the ioctls outright as no sane VMM would call these before KVM_ARM_VCPU_INIT anyway. Even if it did the exception would've been thrown away by the eventual reset of the vCPU's state.

Remote code execution in alexusmai laravel-file-manager (versions 3.3.1 and earlier) lets an authenticated user with file-manager access run arbitrary PHP on the server by uploading a PHP payload disguised with a .png extension, then abusing the rename API to give it a .php extension so it executes when requested via a public URL. The flaw stems from client-side-only upload validation combined with an unrestricted rename operation and web-accessible storage. No CISA KEV listing; EPSS is a modest 0.55% (42nd percentile), but a dedicated GitHub repository referencing this CVE indicates public proof-of-concept material likely exists.

Local denial-of-service in the Linux kernel's F2FS filesystem allows an attacker who can mount a crafted F2FS image to trigger a kernel BUG_ON panic during a fallocate punch-hole operation. The flaw stems from missing validation of the node footer for non-inode direct nodes (dnodes), which lets a corrupted dnode be misparsed as an inode and produce an invalid truncation count. No public exploit has been identified at time of analysis and EPSS is low (0.17%, 7th percentile); reproduction requires a deliberately fuzzed on-disk image (syzbot-discovered).

ANSI escape sequence injection in Apache Tomcat log messages enables console manipulation and social engineering attacks against administrators on Windows systems. Attackers can craft malicious URLs that inject escape sequences into Tomcat logs, potentially manipulating console output and clipboard contents to trick administrators into executing attacker-controlled commands. This affects Tomcat 9.0.40-9.0.108, 10.1.0-M1-10.1.44, and 11.0.0-M1-11.0.10, with highest risk when Tomcat runs in ANSI-capable Windows consoles. Despite the 9.6 CVSS score, real-world risk is lower as exploitation requires user interaction (administrator viewing logs in console), scope change indicating console compromise beyond Tomcat process, and specific Windows deployment configuration. No active exploitation confirmed (not in CISA KEV), and EPSS data not available at time of analysis.

Code injection in Zytec Dalian Zhuoyun Technology Central Authentication Service up to version 20251009 allows authenticated remote attackers to inject arbitrary code via manipulation of the get.layer, get.widget, and get.action parameters in the /index.php/auth/widget endpoint. Public exploit code is available, but real-world exploitation risk is low given the low CVSS score (2.1), requirement for prior authentication, and extremely low EPSS score (0.04%), suggesting limited practical exploitability despite proof-of-concept availability.

CSV injection in Axosoft Scrum and Bug Tracking 22.1.1.11545 allows authenticated remote attackers to inject malicious CSV formulas via the Title argument on the Edit Ticket Page, potentially enabling formula execution or data exfiltration when exported. Public exploit code exists and the vendor has not responded to disclosure notifications despite early contact.

Remote code execution in the VideoWhisper Paid Videochat Turnkey Site WordPress plugin (versions up to 7.3.23) allows authenticated administrators to inject and execute arbitrary code through code injection vulnerabilities. The CVSS 9.1 severity reflects scope change and high impact across confidentiality, integrity, and availability. EPSS exploitation probability is low at 0.04% (13th percentile), and no public exploit identified at time of analysis, suggesting this remains a theoretical high-severity issue requiring privileged access rather than an imminent mass-exploitation threat.

Authenticated shortcode injection in the Discussion Board - WordPress Forum Plugin (all versions through 2.5.5) lets any logged-in user with Subscriber-level access or higher trigger arbitrary WordPress shortcodes by supplying an unvalidated value to a plugin action that is then passed into do_shortcode(). The flaw requires a valid low-privilege account rather than being exploitable anonymously, and the practical severity depends on which shortcodes are registered on the target site, since only those can be invoked. CISA KEV does not list this CVE and no public exploit code has been identified at time of analysis, with EPSS at 0.26% (17th percentile).

CRLF injection in KeeneticOS before version 4.3 enables full device takeover by exploiting the /auth API endpoint to inject crafted HTTP headers that create additional administrator-level user accounts. The attack requires social engineering the device owner into visiting a malicious page, after which the injected CRLF sequences manipulate the API response to silently add a full-permission user the attacker controls. No public exploit has been identified at time of analysis, though a detailed writeup is publicly available on GitHub, which significantly lowers the barrier to weaponization.

Remote code execution in the s2Member WordPress plugin (≤ version 250905) allows unauthenticated attackers to inject and execute arbitrary PHP code, potentially leading to full site compromise. The vulnerability has a CVSS score of 9.0 but a very low EPSS exploitation probability (0.06%) and is not listed in CISA KEV; no public exploit is known at the time of analysis.

Remote code execution in Beplusthemes Alone WordPress theme through version 7.8.3 allows unauthenticated attackers to inject and execute arbitrary code via a code injection vulnerability. With a critical CVSS score of 10.0 and network-based exploitation requiring no privileges or user interaction, this vulnerability enables complete system compromise. EPSS exploitation probability is low (0.06%, 17th percentile), and no public exploit or CISA KEV listing identified at time of analysis.

Code injection in WP Last Modified Info plugin versions ≤1.9.4 allows authenticated attackers with low-level privileges to execute arbitrary code remotely via vulnerable code generation controls. The CVSS 7.4 rating reflects network accessibility, low attack complexity, and scope change enabling cross-boundary impact. EPSS probability is minimal (0.05%, 15th percentile), no active exploitation confirmed (not in CISA KEV), and no public exploit code identified at time of analysis, suggesting limited real-world exploitation activity despite the critical vulnerability class.

Remote code injection in the Kalium WordPress theme (versions ≤ 3.25) allows unauthenticated attackers to execute arbitrary PHP code on the server. The vulnerability has a CVSS 3.1 base score of 7.2 (High) with low confidentiality and integrity impact and no availability impact. No active exploitation has been reported to date, and the EPSS score (0.09%) indicates a low probability of widespread exploitation.

HTML injection in LibreChat 0.7.9 allows an authenticated user to reflect arbitrary markup into the <html lang=""> attribute of a server response by sending a crafted Accept-Language header on an HTTP GET request, which can be escalated into cross-site scripting (XSS) in the browser session that renders the injected page. Publicly available exploit code exists and the issue is documented through a Huntr bounty, but EPSS is only 0.45% (37th percentile) and CVSS 3.1 scores it 5.4 (AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N), which our review confirms as a moderate-severity, low-priority issue in practice. The principal limiting factor is that Accept-Language is normally chosen by the requester, so hitting a different victim requires an additional mechanism to set or override that header, such as a malicious proxy, header smuggling, or a client that honors attacker-supplied language preferences.

XML injection in Zoho ManageEngine EndPoint Central versions 11.4.2516.1 and prior allows an authenticated attacker with local access to inject malicious XML content, leading to low-level impacts on confidentiality, integrity, and availability. The vulnerability requires a low-privileged account and local access (CVSS vector AV:L/PR:L), and there is no public exploit identified at time of analysis. EPSS score is 0.34% (25th percentile), indicating low real-world exploitation likelihood, and no CISA KEV status is present.

Code injection in the MediaWiki LanguageSelector extension (versions from master before 1.39) allows remote, unauthenticated attackers to execute arbitrary code on affected MediaWiki instances, resulting in high availability impact and limited confidentiality/integrity compromise. The flaw is an improper neutralization of special elements in output (CWE-74) that are later used by a downstream component. No public exploit code is identified at time of analysis, and MediaWiki core without this extension is unaffected.

Arbitrary PHP code execution in ClipBucket v5 (all releases prior to 5.5.2 #147) lets an administrator with backend access run attacker-supplied PHP on the server by posting a crafted "type" value to /upload/admin_area/actions/update_launch.php, which embeds that value directly inside PHP tags without sanitization. Rated CVSS 3.1 7.2 (High) with vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, the flaw is network-reachable and low-complexity but requires high privileges - a valid admin session - and no unauthenticated path is present in the available data. Publicly available exploit code exists, and the vendor has shipped a fix in ClipBucket v5 version 5.5.2 #147.

Apache Syncope's pluggable extension mechanism lets a user holding administrator rights supply custom interface implementations as Groovy classes that are compiled and reloaded at runtime by the Syncope Core, and because that code was not isolated, a malicious administrator can inject Groovy code that executes remotely on the Core instance with the full privileges of the Syncope process, affecting confidentiality, integrity, and availability. The flaw is reachable only by an authenticated administrator (CVSS 7.2, AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) - unauthenticated or low-privileged users cannot trigger it - and it affects Apache Syncope 3.0.x before 3.0.14 and 4.0.x before 4.0.2. No public exploit code or confirmed active exploitation has been identified at time of analysis; the practical risk is best characterized as access-gated insider or compromised-admin abuse rather than a mass-exploitation threat.

Authenticated remote code execution in the PluXml flat-file CMS lets an administrator abuse the built-in theme editor to overwrite /themes/defaut/css/minify.php with arbitrary PHP, turning legitimate admin file-editing into full server command execution. The flaw (CWE-94 code injection) requires high privileges (admin) but no user interaction, and its CVSS 3.1 score of 9.1 reflects a scope change from the web application to the underlying OS. No public exploit code is confirmed beyond a vulnerability-disclosure PDF, and EPSS is low (0.90%), consistent with an admin-only prerequisite.

Code injection in ChanCMS up to version 3.3.2 via the getArticle function in app/modules/cms/controller/gather.js allows authenticated remote attackers to inject and execute arbitrary code with low impact on confidentiality, integrity, and availability. The exploit is publicly available on GitHub but exploitation probability remains low (EPSS 0.04%) due to authentication requirements and limited impact scope. The vendor did not respond to early disclosure notification.

Unauthenticated remote attackers can exploit a code injection flaw in ibi WebFOCUS to gain administrative access, which may lead to remote code execution. The vulnerability carries a CVSS 4.0 base score of 9.3, and the independent assessment confirms remote unauthenticated exploitation with no user interaction, though the vendor frames full RCE as a potential downstream outcome contingent on version or configuration specifics. No public exploit code or active exploitation has been identified at time of analysis, and EPSS is low at 0.52%, but the risk remains high-priority for network-exposed instances.

Code injection in FortiClientMac 7.4.0 through 7.4.3 and 7.2.1 through 7.2.8 on macOS could let an unauthenticated remote attacker execute arbitrary code on the victim’s host if the user is tricked into visiting a malicious website. The independent assessment emphasizes that exploitation requires social engineering and user interaction (UI:R), with mixed signals indicating a moderate rather than top-tier priority; EPSS is low at 0.28% (18th percentile), and no public exploit identified at time of analysis.

CSV formula injection in B&R Automation Runtime's System Diagnostics Manager (SDM) before version 6.4 allows remote unauthenticated attackers to inject formula data into generated CSV files, but exploitation requires a user to click a malicious link and then manually open the resulting CSV in a spreadsheet application that evaluates formulas. With an EPSS score of 0.31% and the need for multiple user actions, real-world urgency is low; no public exploit or active exploitation has been identified.

Unauthenticated remote code execution affects ZTE's ZXCDN content delivery network product through its Apache Struts-based interface, allowing a network-reachable attacker to run arbitrary commands under the service's non-root account (CVSS 3.1 base 9.8, PR:N/UI:N). Impact is bounded by two practical factors: ZXCDN nodes are typically deployed inside carrier or operator networks rather than on the open internet, and code execution lands with non-root privileges, so full host compromise would require a follow-on local privilege escalation. No public exploit code has been identified at time of analysis and there is no CISA KEV entry, though EPSS sits at roughly 0.80% (55th percentile), reflecting moderate rather than elevated exploitation pressure.

Stored cross-site scripting (XSS) in the BAPI Explorer of SAP Application Server for ABAP allows an authenticated attacker with low privileges to inject malicious JavaScript that executes in the browser of a victim user who later accesses the affected functionality. The vulnerability requires victim interaction and prior authentication, and impact is limited to low confidentiality and integrity with no availability impact. No public exploit has been identified, and EPSS score is 0.23% (12th percentile), indicating a moderate priority rather than critical.

Remote code execution in Cherry Studio allows unauthenticated attackers to run arbitrary commands on a victim's system when the victim clicks a crafted cherrystudio://mcp link. The custom protocol handler decodes a base64-encoded configuration and directly executes the command it contains, and publicly available exploit code exists. Although EPSS is low (0.47%, percentile 39%), the CVSS base score is 9.6 and no vendor-released patch was identified at the time of analysis, so users must rely on blocking the protocol and user awareness.

VM context escape in Happy DOM 19.x and earlier allows attacker-controlled JavaScript executed inside a Window to break out of the Node.js VM context and reach process-level functionality; on CommonJS runtimes the escaped code can obtain the require() function, yielding arbitrary module import and full remote code execution, while on ESM the escape yields the process object without require/import. Because JavaScript evaluation is enabled by default in v19 and lower, any application that feeds untrusted HTML or script into a Window (document.write(), innerHTML, or server-side rendering of user-supplied content) is exposed without opting in, and untrusted code does not need to be executed by the victim deliberately. There is no confirmed active exploitation (CISA KEV) and no public exploit weaponization flagged, though the vendor advisory publishes working reproduction snippets; EPSS is low at 0.64% (49th percentile), and the vendor-released patch is Happy DOM 20.0.0, which disables JavaScript evaluation by default.

Kernel panic in the Linux igc Ethernet driver (Intel I225/I226/I227) triggers when igc_led_setup() fails during driver probe and igc_probe() propagates that failure without calling unregister_netdev() first, causing free_netdev() to hit a BUG assertion at net/core/dev.c:12047. Systems running Linux kernel 6.17-rc1 through rc6 with Intel I225/I226/I227 NICs are affected; a local low-privileged user who can induce an LED setup allocation failure - naturally under memory pressure or deliberately via the kernel fault-injection framework - can crash the host. No public exploit exists and EPSS sits at the 5th percentile, reflecting negligible opportunistic exploitation probability.

Remote code execution in Grafana Image Renderer 1.0.0 through 4.0.16 allows an attacker to write an arbitrary file - specifically a shared object - to a location that the bundled Chromium rendering process subsequently loads, achieving code execution on the renderer host. Exploitation requires two concrete prerequisites: the image renderer's default 'authToken' must still be in place (or otherwise known to the attacker), and the attacker must be able to reach the /render/csv endpoint over the network. The issue is rated CVSS 9.9 (network vector, low privileges, scope-changed, high confidentiality/integrity/availability impact); EPSS is 0.64% (49th percentile) and there is no public exploit identified at time of analysis, though the vendor has released a fix in v4.0.17 that adds path-traversal validation. Signals are mixed: the technical severity is critical, but exposure depends heavily on whether the token was rotated and whether the renderer is network-reachable.

Unauthenticated operating system command injection in Framelink Figma MCP Server (published as GLips/Figma-Context-MCP) versions before 0.6.3 lets a remote attacker who can reach the server's HTTP transport run arbitrary OS commands with the privileges of the MCP process. A crafted HTTP POST carrying shell metacharacters reaches an input path that is passed unsanitized into the fetchWithRetry curl invocation, so the injected command executes on the host. The assessed vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) reflects an unauthenticated, network-reachable, high-impact flaw, and while EPSS is elevated at 5.83% (93rd percentile), no public exploit has been identified at time of analysis and there is no CISA KEV listing.

Code injection in the ClineProvider prompt handler of Kilo Code up to version 4.86.0 allows remote attackers with user interaction to manipulate input prompts and inject arbitrary code. The vulnerability affects the prompt processing component through insufficient input validation in src/core/webview/ClineProvider.ts. Public exploit code is available, and a patch has been released by the vendor, though the low CVSS score (2.1) and minimal EPSS percentile (12%) suggest limited real-world exploitation risk despite public availability.

CSV injection in Axosoft Scrum and Bug Tracking 22.1.1.11545 via the Title parameter on the Add Work Item Page allows authenticated users with UI interaction to inject malicious CSV formulas, resulting in low-impact data manipulation. The vulnerability requires user login and deliberate user interaction to exploit, limiting real-world risk despite public exploit availability and vendor non-responsiveness.

Eidos is an extensible framework for Personal Data Management. Versions 0.21.0 and below contain a one-click remote code execution vulnerability. An attacker can exploit this vulnerability by embedding a specially crafted eidos: URL on any website, including a malicious one they control. When a victim visits such a site or clicks on the link, the browser triggers the app’s custom URL handler (eidos:), causing the Eidos application to launch and process the URL, leading to remote code execution on the victim’s machine. This issue does not have a fix as of October 3, 2025

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions of Redis with LUA scripting. This issue is fixed in version 8.2.2. A workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing LUA scripts. This can be done using ACL to block a script by restricting both the EVAL and FUNCTION command families.

Cursor is a code editor built for programming with AI. In versions 1.7 and below, a vulnerability in the way Cursor CLI Agent protects its sensitive files (i.e. */.cursor/cli.json) allows attackers to modify the content of the files through prompt injection, thus achieving remote code execution. A prompt injection can lead to full RCE through modifying sensitive files on case-insensitive filesystems. This issue is fixed in a commit, 25b418f, but has yet to be released as of October 3, 2025.

Cursor is a code editor built for programming with AI. Versions 1.6 and below are vulnerable to Remote Code Execution (RCE) attacks through Visual Studio Code Workspaces. Workspaces allow users to open more than a single folder and save specific settings (pretty similar to .vscode/settings.json) for the folders / project. An untitled workspace is automatically created by VS Code (untitled.code-workspace), which contains all the folders and workspace settings from the user's current session, opening up an entire new attack vector if the user has a .code-workspace file in path (either untitled created automatically or a saved one). If an attacker is able to hijack the chat context of the victim (such as via a compromised MCP server), they can use prompt injection to make the Cursor Agent write into this file and modify the workspace. This leads to a bypass of CVE-2025-54130 which can lead to RCE by writing to the settings section. This issue is fixed in version 1.7.

CVE-2025-59489 is a security vulnerability (CVSS 7.4) that allows argument injection that can result. Risk factors: public PoC available.

Code injection in Anthropic's Claude Code CLI before version 1.0.111 allows malicious code embedded in a project directory to execute before the startup trust dialog is accepted, giving an attacker arbitrary command execution with the privileges of the user who launched the tool (CVSS 4.0 base 8.7). Exploitation is unauthenticated (PR:N) but depends on the victim starting Claude Code inside an attacker-controlled, untrusted directory (UI:P in the 4.0 vector; UI:R under the assessed CVSS 3.1 vector, which scores scope-unchanged confidentiality, integrity and availability impact as High). Publicly available exploit code exists in the form of a public gist, but there is no evidence of confirmed active exploitation (not listed in CISA KEV) and EPSS is low at 0.05% (14th percentile), so real-world risk is concentrated among users who manually maintain Claude Code and remain below 1.0.111 rather than the auto-update population.

Server-side template injection in Canonical LXD's instance snapshot naming feature lets an authenticated user who can modify instance configuration read arbitrary files on the LXD host. The snapshots.pattern setting is rendered by the Pongo2 template engine without sandboxing, so tags such as include, ssi, extends, and import can pull in files like /etc/passwd, /etc/shadow, LXD database files, and other tenants' instance data. Publicly available exploit code exists (a crafted pattern using urlencode and slice filters to bypass length limits), though there is no confirmed active exploitation (CISA KEV) and EPSS is low at 0.06% (19th percentile); the assessed vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N confirms this is a confidentiality-only impact requiring an authenticated account with delegated instance-configuration rights.

RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARKs and the RISC-V microarchitecture. In versions 2.0.2 and below of risc0-zkvm-platform, when the zkVM guest calls sys_read, the host is able to use a crafted response to write to an arbitrary memory location in the guest. This capability can be leveraged to execute arbitrary code within the guest. As sys_read is the mechanism by which input is requested by the guest, all guest programs built with the affected versions are vulnerable. This critically compromises the soundness guarantees of the guest program. Other affected packages include risc0-aggregation versions below 0.9, risc0-zkos-v1compat below 2.1.0, risc0-zkvm versions between 3.0.0-rc.1 and 3.0.1. This issue has been fixed in the following versions: risc0-zkvm-platform 2.1.0, risc0-zkos-v1compat 2.1.0, risc0-aggregation 0.9, and risc0-zkvm 2.3.2 and 3.0.3.

Dolibarr ERP & CRM v21.0.1 were discovered to contain a remote code execution (RCE) vulnerability in the User module configuration via the computed field parameter.

CVE-2022-50445 is a security vulnerability (CVSS 5.5). Remediation should follow standard vulnerability management procedures. Vendor patch is available.

CVE-2025-39913 is a security vulnerability (CVSS 7.8). High severity vulnerability requiring prompt remediation. Vendor patch is available.

JIT miscompilation in the JavaScript Engine: JIT component. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of performance related log data or to inject crafted data in logfile for potentially carrying out further. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Knowage is an open source analytics and business intelligence suite. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Medical Informatics Engineering Enterprise Health has a CSV injection vulnerability that allows a remote, authenticated attacker to inject macros in downloadable CSV files. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Versions of the package algoliasearch-helper from 2.0.0-rc1 and before 3.11.2 are vulnerable to Prototype Pollution in the _merge() function in merge.js, which allows constructor.prototype to be. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Improper Control of Generation of Code ('Code Injection') vulnerability in YayCommerce YayCurrency allows Code Injection.2. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

A security flaw has been discovered in MuYuCMS up to 2.7. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software could allow an unauthenticated, adjacent attacker to inject wireless 802.11 action frames. Rated medium severity (CVSS 4.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Horilla is a free and open source Human Resource Management System (HRMS). Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

NVIDIA Megatron-LM for all platforms contains a vulnerability in the ensemble_classifer script where malicious data created by an attacker may cause an injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

NVIDIA Megatron-LM for all platforms contains a vulnerability in the msdp preprocessing script where malicious data created by an attacker may cause an injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

NVIDIA Megatron-LM for all platforms contains a vulnerability in the tasks/orqa/unsupervised/nq.py component, where an attacker may cause a code injection. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

NVIDIA Megatron-LM for all platforms contains a vulnerability in the pretrain_gpt script, where malicious data created by an attacker may cause a code injection issue. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.