Search: “code injection”

16 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 1929 Malware 1436 Exploit / PoC 864 Ransomware 518 Threat actor 308 Data breach 286 AI safety & security 129 Phishing & fraud 108 Policy & legal 63 Industry 49 Advisory 48 Research 45 Tools 22 AI tools & infra 15

SeverityAll critical 2456 high 1810 medium 1300 low 162 info 123

[vim-security] Ex Command Injection in sign_jump() in Vim < v9.2.1090

Vim sign_jump() before v9.2.1090 permits Ex command injection via unescaped buffer names; low-severity patch disclosed by Christian Brabandt.

Christian Brabandt disclosed an Ex command injection vulnerability in Vim's sign_jump() function affecting versions before v9.2.1090, caused by improper neutralization of unescaped buffer names. The issue is rated Low severity and maps to CWE-88 (argument injection) and CWE-94 (code injection). A CVE has been requested but not yet assigned.

oss-securitySep 12, 17:53 UTC · 3d agoVulnerability

18

GambleForce Group Targets Websites With SQL Injection

Infosecurity MagazineDec 14, 10:00 UTC · Dec 14, 2023Vulnerability

30

Microsoft Apps for macOS Exposed to Library Injection Attacks

Infosecurity MagazineAug 19, 15:15 UTC · Aug 19, 2024Vulnerability CVE-2024-42220 CVE-2024-42004 CVE-2024-39804+5 CVEs1

35

Even the best safeguards can't stop LLMs from being fooled

Help Net SecurityMay 8, 00:00 UTC · May 8, 2025Vulnerability

30

New Exploit Bypasses Existing Spectre

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2022Vulnerability CVE-2017-5715

35

It’s ethical hacking with SQL injection on Pluralsight!

Troy HuntMay 20, 23:00 UTC · May 20, 2015Vulnerability

30

Qodana 2026.2 adds post-quantum crypto checks for JVM code

Help Net SecurityAug 3, 00:00 UTC · Aug 3, 2026Vulnerability

30

Embedding security, the right way

Help Net SecurityJan 16, 00:00 UTC · Jan 16, 2020Vulnerability

30

Threat Stack Application Security Monitoring now supported by Python

Help Net SecurityNov 1, 00:00 UTC · Nov 1, 2019Vulnerability1

30

Hackers can infect network

Ars Technica · SecurityJan 9, 14:00 UTC · Jan 9, 2024Vulnerability CVE-2023-48252 CVE-2023-48253 CVE-2023-48243+22 CVEs

35

Threat Stack releases new unified application security solution

Help Net SecurityJun 20, 00:00 UTC · Jun 20, 2019Vulnerability

30

SafeLine: Open-source web application firewall (WAF)

Help Net SecurityDec 4, 00:00 UTC · Dec 4, 2024Vulnerability

30

Kali Linux 2024.3 released: 11 new tools, Qualcomm Snapdragon SDM845 SoC support

Help Net SecuritySep 11, 00:00 UTC · Sep 11, 2024Vulnerability

30

AgentGG: Open-source agentic SAST scanner

Help Net SecurityJun 5, 00:00 UTC · Jun 5, 2026Vulnerability

30

Soft-Launching and Open Sourcing the Have I Been Pwned Rebrand

Troy HuntMar 11, 19:56 UTC · Mar 11, 2025Vulnerability1

30

Friday Squid Blogging: Underwater Sculptures Use Squid Ink for Coloring

Schneier on SecurityDec 15, 00:00 UTC · Dec 15, 2023Vulnerability1

30