Search Vulnerabilities

datamodel-code-generator Code Injection via Unvalidated customBasePath Schema Field

Microweber CMS 2.0.20 Server-Side Template Injection via Mail Templates

Improper control of generation of code ('Code Injection') in the variables feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows ...

Improper control of generation of code ('Code Injection') in the schedule feature in Devolutions PowerShell Universal 2026.2.2 and earlier allows a...

Cal.com before 5.9.9 Remote Code Execution via RSC

nebula-mesh: Host advanced overrides allow YAML injection into agent config.yml

gpsd gpsprof Code Injection via SKY.satellites used Field

DbGate: Unauthenticated Remote Code Execution via JSON Script Runner

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible

In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible

In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust via the configured Go SDK

In JetBrains GoLand before 2026.2 arbitrary code execution was possible before granting project trust in the Go Modules integration

WordPress Advanced Views plugin <= 3.8.11 - Remote Code Execution (RCE) vulnerability

Customer Support Ticket System & Helpdesk <= 6.0.5 - Unauthenticated Code Injection via 'path' Parameter

Unauthenticated remote code execution (pre-auth RCE) vulnerability in openFT for Linux and Oracle Solaris

Contact Form 7 – Dynamic Text Extension <= 5.0.6 - Unauthenticated Arbitrary Shortcode Execution

SourceCodester Class and Exam Timetabling System BSIS.php cross site scripting

SourceCodester Class and Exam Timetabling System class.php cross site scripting

FUXA Vulnerable to Pre-auth RCE via Path Manipulation & Configuration Injection