code-injection
145 articles with this tag
HIGH
MEDIUM
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
MEDIUM
CRITICAL
HIGH
CRITICAL
CRITICAL
MEDIUM
HIGH
CRITICAL
HIGH
MEDIUM
MEDIUM
MEDIUM
HIGH
HIGH
CRITICAL
MEDIUM
MEDIUM
HIGH
HIGH
MEDIUM
MEDIUM
MEDIUM
HIGH
HIGH
CRITICAL
CRITICAL
HIGH
CRITICAL
HIGH
HIGH
HIGH
MEDIUM
CRITICAL
HIGH
HIGH
CRITICAL
HIGH
CRITICAL
MEDIUM
CRITICAL
HIGH
HIGH
CRITICAL
CRITICAL
HIGH
HIGH
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
HIGH
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
HIGH
CRITICAL
CRITICAL
HIGH
CRITICAL
CRITICAL
CRITICAL
HIGH
CRITICAL
HIGH
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
CRITICAL
HIGH
HIGH
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
NCSC-2026-0363 [1.00] [M/H] Kwetsbaarheden verholpen in Adobe Experience Manager
Chromium: CVE-2026-79249 Code injection in Bisection
Critical Gitea vulnerability now exploited in the wild (CVE-2026-60004)
Marimo Notebook Flaw Could Run MCP Commands Before Cells Execute in Edit Mode
Unpatched Zimbra servers are falling to CVE-2026-73570 attacks
GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure
Critical GitLab Flaw Exploited Shortly After Disclosure
Critical GitLab Zero-Click Flaw Poses Mitigation Challenges
Critical GitLab flaw allows attackers to delete and modify public repos
Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)
GitLab Patches Critical Code Injection Vulnerability
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
AI agents caught using social engineering in UK security tests
Massive supply-chain attack compromises 440 packages under four hours
NCSC-2026-0258 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle Financial Services
Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)
NCSC-2026-0239 [1.00] [H/H] Zero-Day kwetsbaarheden verholpen in SonicWall SMA1000
CVE-2026-14380 DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile
GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
CVE-2026-55895 Vim: Vimscript Code Injection in netrw NetrwLocalRmFile() via crafted filename
macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox
CVE-2026-47162 Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted directory name
CVE-2026-47167 Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex
CVE-2026-47292 Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability
CVE-2026-47298 Microsoft SharePoint Server Remote Code Execution Vulnerability
Gogs patches critical zero-day enabling remote code execution
CVE-2026-46640: Developing payloads for Twig sandbox bypass
CVE-2026-27142 URLs in meta content attribute actions are not escaped in html/template
A hacker group is poisoning open source code at an unprecedented scale
First Shai-Hulud Worm Clones Emerge
Analysis reveals concerning features in official White House app
How to exfiltrate data using only numeric outputs
CVE-2026-39881 Vim Ex command injection in Vims NetBeans integration
CVE-2026-33941 Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options
CVE-2026-33940 Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial
Hackers exploit a critical Flowise flaw affecting thousands of AI workflows
OpenAI Codex: How a Branch Name Stole GitHub Tokens
TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files
Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of Disclosure
CISA Adds Five Known Exploited Vulnerabilities to Catalog
Schneider Electric EcoStruxure Automation Expert
Siemens SIMATIC
Contagious Interview: Evolution of VS Code and Cursor Tasks Infection Chains Part 2
Dozens of Vendors Patch Security Flaws Across Enterprise Software and Network Devices
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Lua Code Injection Vulnerability
Claude collaboration tools left the door wide open to remote code execution
January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office Zero-Day
SAP Security Patch Day Fixes Critical Code Injection Flaw in SAP CRM and S/4HANA
SAP Security Patch Day - Critical SAP CRM and SAP S/4HANA Code Injection Vulnerabilities Fixed
NCSC-2026-0052 [1.00] [M/H] Kwetsbaarheden verholpen in SAP producten
From Clawdbot to Moltbot to OpenClaw: Security Experts Detail Critical Vulnerabilities and 6 Immediate Hardening Steps for the Viral AI Agent
USN-8004-1: FreeRDP vulnerabilities
GlassWorm Malware Returns to Shatter Developer Ecosystems
Ivanti’s EPMM is under active attack, thanks to two critical zero-days
Docker Fixes Critical Ask Gordon AI Flaw Allowing Code Execution via Image Metadata
Hundreds of Malicious Crypto Trading Addons Found in Moltbot/OpenClaw
DockerDash Exposes AI Supply Chain Weakness In Docker's Ask Gordon
Hackers exploit critical React Native Metro bug to breach dev systems
Hackers Exploit Metro4Shell RCE Flaw in React Native CLI npm Package
Hackers exploit critical React Native Metro bug to breach dev systems
Critical React Native Vulnerability Exploited in the Wild
Vulnerability Allows Hackers to Hijack OpenClaw AI Assistant
USN-7998-1: OpenJDK 17 vulnerabilities
USN-7996-1: CRaC JDK 25 vulnerabilities
USN-7995-1: OpenJDK 25 vulnerabilities
Notepad++ infrastructure hijacked by Chinese APT in sophisticated supply chain attack
USN-8003-1: CRaC JDK 21 vulnerabilities
USN-8002-1: OpenJDK 21 vulnerabilities
USN-8001-1: OpenJDK 11 vulnerabilities
USN-8000-1: OpenJDK 8 vulnerabilities
OpenSSL Multiple Vulnerabilities
RedHat Linux Kernel Multiple Vulnerabilities
Chinese Hackers Hijack Notepad++ Updates for 6 Months
Notepad++ users take note: It's time to check if you're hacked
OpenClaw Bug Enables One-Click Remote Code Execution via Malicious Link
Notepad++ update feature hijacked by Chinese state hackers for months
OpenClaw patches one-click RCE as security Whac-A-Mole continues
Critical Ivanti Endpoint Manager Mobile (EPMM) zero-day exploited in the wild (CVE-2026-1281 & CVE-2026-1340)
175,000 Exposed Ollama Hosts Could Enable LLM Abuse
Ivanti patches two actively exploited critical vulnerabilities in EPMM
Critical RCE bugs expose the n8n automation platform to host‑level compromise
How state-sponsored attackers hijacked Notepad++ updates
VU#102648: Code injection vulnerability in binary-parser library
VU#458022: Open5GS WebUI uses a hard-coded secrets including JSON Web Token signing key
VU#818729: Safetica contains a kernel driver vulnerability
VU#244846: Server-Side Template Injection (SSTI) vulnerability exist in Genshi
GLSA 202601-05: Commons-BeanUtils: Arbitary Code Execution
GLSA 202601-04: Asterisk: Multiple Vulnerabilities
GLSA 202601-03: GIMP: Arbitrary Code Execution
GLSA 202601-02: Vim, gVim: Multiple Vulnerabilities
GLSA 202601-01: inetutils: Remote Code Execution
AI Coding Assistants Secretly Copying All Code to China
vr2jb: Pwning the PlayStation VR2 using Sony's hidden recovery mode
CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities
Critical GNU InetUtils telnetd Flaw Lets Attackers Bypass Login and Gain Root Access
Patch or die: VMware vCenter Server bug fixed in 2024 under attack today
Ancient telnet bug happily hands out root to attackers
Another week, another emergency patch as Cisco plugs Unified Comms zero-day
Exploited Zero-Day Flaw in Cisco UC Could Affect Millions