Kiota: XML Doc-Comment Newline Breakout Code Injection
CVE-2026-59860
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.32.3, Kiota is affected by a code-generation injection
#cwe-94
共收录 1468 条相关情报。
← 返回所有主题MaaAssistantArknights is a one-click tool for daily Arknights tasks. In the current dev-v2 workflow, .github/workflows/release-preparation.yml inlined attacker-controlled github...
CVE-2026-55576
MaaAssistantArknights is a one-click tool for daily Arknights tasks. In the current dev-v2 workflow, .github/workflows/r
xszyou Fay 4.3.1 contains a remote code execution vulnerability in its MCP STDIO server management and command execution handling. A remote attacker can access the publicly expo...
CVE-2026-30618
xszyou Fay 4.3.1 contains a remote code execution vulnerability in its MCP STDIO server management and command execution
MaaAssistantArknights: PR-title expression injection in release-preparation.yml
CVE-2026-55576
MaaAssistantArknights is a one-click tool for daily Arknights tasks. In the current dev-v2 workflow, .github/workflows/r
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase Redshift datasource connections can load attacker-controlled rsjdbc.ini configuration...
CVE-2026-45534
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase Redshift datasource connecti
DataEase: RCE Vulnerability
CVE-2026-45534
DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase Redshift datasource connecti
TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, a user with create udf privilege could upload a crafted shared libr...
CVE-2026-62350
TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, a user wit
PraisonAI (praisonaiagents) before 1.6.78 contains a remote code execution vulnerability in the plugin manager, which loads and executes arbitrary Python (.py) files from projec...
CVE-2026-61446
PraisonAI (praisonaiagents) before 1.6.78 contains a remote code execution vulnerability in the plugin manager, which lo
PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for API servers. Attackers can inject arbitrary Python expressi...
CVE-2026-61433
PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for AP
The bundled Grav Flex Objects plugin (getgrav/grav-plugin-flex-objects) before 1.4.0 contains a stored server-side template injection vulnerability. When rendering dynamic colle...
CVE-2026-58655
The bundled Grav Flex Objects plugin (getgrav/grav-plugin-flex-objects) before 1.4.0 contains a stored server-side templ
PraisonAI before 4.6.78 Code Injection via API deployment generator
CVE-2026-61433
PraisonAI before 4.6.78 fails to safely encode deployment configuration values when generating Python source code for AP
Grav Flex Objects - Server-Side Template Injection via Dynamic Titles
CVE-2026-58655
The bundled Grav Flex Objects plugin (getgrav/grav-plugin-flex-objects) before 1.4.0 contains a stored server-side templ
Twig is a template language for PHP. From 3.15.0 until 3.26.0, _self.(<string>) and import-alias dynamic attribute syntax can concatenate an attacker-controlled string into a Ma...
CVE-2026-46640
Twig is a template language for PHP. From 3.15.0 until 3.26.0, _self.() and import-alias dynamic attribute syntax can co
Twig is a template language for PHP. Prior to 3.26.0, Compiler::string() does not escape single quotes when a template name from a {% use %} tag is placed inside a PHP single-qu...
CVE-2026-46633
Twig is a template language for PHP. Prior to 3.26.0, Compiler::string() does not escape single quotes when a template n
jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest into the generated app/build.gradle Groovy template without ...
CVE-2026-42049
jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest int
An issue in Aetopia Digital Asset Management DAM v.1.0.0 allows a remote attacker to execute arbitrary code via the name and description parameter of the Add/Update Project func...
CVE-2026-38450
An issue in Aetopia Digital Asset Management DAM v.1.0.0 allows a remote attacker to execute arbitrary code via the name
jadx: RCE Via Groovy Code Injection in Gradle Export
CVE-2026-42049
jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx inserts the android:versionName value from an AndroidManifest int
ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection')...
CVE-2026-48322
ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result i
Twig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilation
CVE-2026-46640
Twig is a template language for PHP. From 3.15.0 until 3.26.0, _self.() and import-alias dynamic attribute syntax can co
ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current ...
CVE-2026-48322
ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result i