Twig: PHP code injection via `{% use %}` template name
CVE-2026-46633
Twig is a template language for PHP. Prior to 3.26.0, Compiler::string() does not escape single quotes when a template n
#cwe-94
共收录 1468 条相关情报。
← 返回所有主题Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.
CVE-2026-50650
Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate p
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specif...
CVE-2026-15410
Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the S
TidGi Desktop Remote Code Execution via Malicious TiddlyWiki Repository Import — Tiddler Startup Module Auto-Execution
## Description TidGi Desktop through 0.13.0 contains a critical remote code execution vulnerability exploitable via a s
Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.
CVE-2026-56185
Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.
A security vulnerability has been detected in tamagui up to 2.3.0. This affects the function updateConfig of the file code/core/web/src/config.ts. Such manipulation leads to imp...
CVE-2026-15702
A security vulnerability has been detected in tamagui up to 2.3.0. This affects the function updateConfig of the file co
A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/svg.js of the component npm Package API. Performing a man...
CVE-2026-15697
A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/
A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the...
CVE-2026-15607
A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the fi
A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in...
CVE-2026-15598
A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/ob
A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the file src/query/compiler/select.ts of the component Alias Pa...
CVE-2026-15607
CVE-2026-15607 是影响 tanstack db（一种数据库库）的一个原型污染漏洞，涉及版本 0.6.8 及之前的所有版本。该漏洞位于文件 src/query/compiler/select.ts 中的 select 函数，属于
tanstack db Alias Path select.ts select prototype pollution
CVE-2026-15607
A vulnerability was detected in tanstack db up to 0.6.8. Affected by this vulnerability is the function select of the fi
A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/object.js. Executing a manipulation of the argument path ca...
CVE-2026-15598
A weakness has been identified in antv layout 2.0.0. This impacts the function setNestedValue in the library lib/util/ob
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unknown function of the file /subject.php. Such manipulation o...
CVE-2026-15596
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. The impacted element is an unkno
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unknown function of the file /forsubject.php. This manipulatio...
CVE-2026-15595
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. The affected element is an unkno
CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 2.3.6, 3.4.1 and 4.9.0, under c...
CVE-2026-55773
CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisi
CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. In versions prior to 4.9.0, the EntityIdentifier.equ...
CVE-2026-55771
CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisi
CedarJava has policy injection, type confusion, and incorrect equality comparison vulnerabilities
CVE-2026-55771
CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisi
ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability could enable an unauthenticated user, in cer...
CVE-2026-6875
ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This v
Decidim: HTML content blocks allow stored script execution
CVE-2026-45572
## Description A privileged admin user who can edit an affected landing page can store arbitrary HTML/JavaScript in an
Versions of Mura CMS prior to 10.0.712 contain a critical remote code execution (RCE) vulnerability. The flaw is located in the endpoint “/index.cfm/_api/json/v1/default”, where...
CVE-2026-12257
Versions of Mura CMS prior to 10.0.712 contain a critical remote code execution (RCE) vulnerability. The flaw is located