⤷ Title: Dangerous PHP functions every developer should avoid (or handle with extreme care)
════════════════════════
𐀪 Author: Roman Huliak
════════════════════════
ⴵ Time: Sun, 01 Jun 2025 07:30:26 GMT
════════════════════════
⌗ Tags: #web_development #secure_coding #cybersecurity #php #code_injection
════════════════════════
𐀪 Author: Roman Huliak
════════════════════════
ⴵ Time: Sun, 01 Jun 2025 07:30:26 GMT
════════════════════════
⌗ Tags: #web_development #secure_coding #cybersecurity #php #code_injection
Medium
Dangerous PHP functions every developer should avoid (or handle with extreme care)
Why “it works on my machine” isn’t good enough when security is on the line.
⤷ Title: Critical CI/CD Cache Poisoning Threatens Supply Chain: Undetectable Code Injection Possible!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 00:22:16 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cache Poisoning #CI/CD #cloud storage #code_injection #cybersecurity #privilege escalation #Remote Cache #Software Supply Chain #Supply Chain Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 13 Jun 2025 00:22:16 +0000
════════════════════════
⌗ Tags: #Vulnerability #Cache Poisoning #CI/CD #cloud storage #code_injection #cybersecurity #privilege escalation #Remote Cache #Software Supply Chain #Supply Chain Security
Daily CyberSecurity
Critical CI/CD Cache Poisoning Threatens Supply Chain: Undetectable Code Injection Possible!
A critical CI/CD flaw in remote caches allows undetectable code injection and privilege escalation via cache poisoning, bypassing all security controls.
⤷ Title: Injection Can Be Anywhere
════════════════════════
𐀪 Author: Faxcel
════════════════════════
ⴵ Time: Sun, 22 Jun 2025 12:49:25 GMT
════════════════════════
⌗ Tags: #code_injection #bug_bounty #xss_vulnerability #cybersecurity #ssti
════════════════════════
𐀪 Author: Faxcel
════════════════════════
ⴵ Time: Sun, 22 Jun 2025 12:49:25 GMT
════════════════════════
⌗ Tags: #code_injection #bug_bounty #xss_vulnerability #cybersecurity #ssti
Medium
Injection Can Be Anywhere
A write-up covering XSS, HTML Injection, and SSTI in real-world web applications
⤷ Title: BrightScan #ThreatIntelThursday | Code Injection
════════════════════════
𐀪 Author: Kalpitha S
════════════════════════
ⴵ Time: Sun, 20 Jul 2025 06:31:20 GMT
════════════════════════
⌗ Tags: #cybersecurity #defenseark #threat_intelligence #code_injection #hacking
════════════════════════
𐀪 Author: Kalpitha S
════════════════════════
ⴵ Time: Sun, 20 Jul 2025 06:31:20 GMT
════════════════════════
⌗ Tags: #cybersecurity #defenseark #threat_intelligence #code_injection #hacking
Medium
BrightScan #ThreatIntelThursday | Code Injection
This article was originally published on May 6, 2021, written by Ted Udelson
⤷ Title: Amazon Q Pulled After Malicious Pull Request Instructs AI to Delete User Files and AWS Resources
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 26 Jul 2025 00:49:09 +0000
════════════════════════
⌗ Tags: #Malware #AI Assistant #Amazon Q #AWS #code injection #cybersecurity #File Deletion #Pull Request #supply chain attack #Visual Studio Code
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Sat, 26 Jul 2025 00:49:09 +0000
════════════════════════
⌗ Tags: #Malware #AI Assistant #Amazon Q #AWS #code injection #cybersecurity #File Deletion #Pull Request #supply chain attack #Visual Studio Code
Penetration Testing Tools
Amazon Q Pulled After Malicious Pull Request Instructs AI to Delete User Files and AWS Resources
Amazon was forced to withdraw a compromised version of its AI assistant, Q, after a malicious pull request instructed it to delete local files and AWS resources.
⤷ Title: SAP Patch Day August 2025: Critical Code Injection Flaws Threaten Core ERP Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 Aug 2025 07:25:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ABAP #code_injection #cybersecurity #ERP Security #RFC Exploit #SAP #SAP NetWeaver #SAP Patch Day #SAP S/4HANA #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 12 Aug 2025 07:25:20 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ABAP #code_injection #cybersecurity #ERP Security #RFC Exploit #SAP #SAP NetWeaver #SAP Patch Day #SAP S/4HANA #Vulnerability
Daily CyberSecurity
SAP Patch Day August 2025: Critical Code Injection Flaws Threaten Core ERP Systems
SAP’s August 2025 Patch Day fixes critical code injection flaws in S/4HANA and SLT that could allow full ERP compromise via RFC exploits.
⤷ Title: NVIDIA Patches High-Severity Code Injection Flaws in Megatron-LM AI Framework
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 26 Sep 2025 00:12:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Framework #code_injection #CVE_2025_23348 #LLM #Megatron_LM #nvidia #security update #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 26 Sep 2025 00:12:36 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Framework #code_injection #CVE_2025_23348 #LLM #Megatron_LM #nvidia #security update #Vulnerability
Daily CyberSecurity
NVIDIA Patches High-Severity Code Injection Flaws in Megatron-LM AI Framework
NVIDIA released an urgent update for its Megatron-LM LLM framework, patching four high-severity code injection flaws that could allow attackers to compromise AI workflows.
⤷ Title: CISA KEV Alert: Critical DELMIA Apriso Flaws Under Active Exploitation Allow RCE and Privileged Access
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 03:46:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #CISA KEV #code_injection #Critical Vulnerability #CVE_2025_6204 #DELMIA Apriso #Manufacturing Systems #rce
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 03:46:14 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Active Exploitation #CISA KEV #code_injection #Critical Vulnerability #CVE_2025_6204 #DELMIA Apriso #Manufacturing Systems #rce
Daily CyberSecurity
CISA KEV Alert: Critical DELMIA Apriso Flaws Under Active Exploitation Allow RCE and Privileged Access
CISA added two critical DELMIA Apriso flaws (CVE-2025-6204/6205) to its KEV Catalog due to active exploitation. The flaws risk RCE and privileged access to manufacturing management systems.
⤷ Title: Self Proccess Injection With CPP
════════════════════════
𐀪 Author: 0xc4t
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 13:44:31 GMT
════════════════════════
⌗ Tags: #process_injection #malware #red_team #hacking #code_injection
════════════════════════
𐀪 Author: 0xc4t
════════════════════════
ⴵ Time: Sun, 09 Nov 2025 13:44:31 GMT
════════════════════════
⌗ Tags: #process_injection #malware #red_team #hacking #code_injection
Medium
Self Proccess Injection With CPP
Self process injection occurs when a program loads or executes a malicious payload in its own address space (rather than writing to or…
⤷ Title: High-Severity NVIDIA NeMo Framework Flaws Allow Code Injection and Privilege Escalation in AI Pipelines
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 14 Nov 2025 00:15:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Framework #AI security #code_injection #CVE_2025_23361 #CVE_2025_33178 #NVIDIA NeMo #privilege escalation
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 14 Nov 2025 00:15:49 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Framework #AI security #code_injection #CVE_2025_23361 #CVE_2025_33178 #NVIDIA NeMo #privilege escalation
Daily CyberSecurity
High-Severity NVIDIA NeMo Framework Flaws Allow Code Injection and Privilege Escalation in AI Pipelines
NVIDIA patched two High-severity flaws in its NeMo Framework. CVE-2025-23361 and CVE-2025-33178 allow local code injection and privilege escalation in AI training environments. Update to v2.5.0.
⤷ Title: Code Injection Flaws Threaten NVIDIA’s Isaac-GROOT Robotics Platform
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 24 Nov 2025 01:52:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CVE_2025_33183 #CVE_2025_33184 #cybersecurity #High Severity #Isaac_GROOT #nvidia #Python vulnerability #Robotics
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 24 Nov 2025 01:52:38 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CVE_2025_33183 #CVE_2025_33184 #cybersecurity #High Severity #Isaac_GROOT #nvidia #Python vulnerability #Robotics
Daily CyberSecurity
Code Injection Flaws Threaten NVIDIA's Isaac-GROOT Robotics Platform
NVIDIA patches two high-severity code injection flaws (CVE-2025-33183/4) in Isaac-GROOT, risking code execution & privilege escalation in robotics.
⤷ Title: Final Patch of 2025: Critical SAP Solution Manager Flaw (CVE-2025-42880, CVSS 9.9) Risks Full System Compromise
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 07:31:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #Critical Vulnerability #CVE_2025_42880 #Patch Day #SAP #SAP Commerce Cloud #Solution Manager
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 07:31:50 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #Critical Vulnerability #CVE_2025_42880 #Patch Day #SAP #SAP Commerce Cloud #Solution Manager
Daily CyberSecurity
Final Patch of 2025: Critical SAP Solution Manager Flaw (CVE-2025-42880, CVSS 9.9) Risks Full System Compromise
SAP's final patch of 2025 fixes a Critical Code Injection flaw (CVSS 9.9) in Solution Manager risking full system control. Also patched: Tomcat flaws (9.6) in Commerce Cloud and jConnect RCE.
⤷ Title: Poisoned Comments: Critical Orval Flaw (CVE-2026-25141) Injects Code
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 00:36:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CVE_2026_23947 #CVE_2026_25141 #Developer Tools #JavaScript Security #OpenAPI #Orval #Supply Chain Security #TypeScript #web development
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 04 Feb 2026 00:36:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CVE_2026_23947 #CVE_2026_25141 #Developer Tools #JavaScript Security #OpenAPI #Orval #Supply Chain Security #TypeScript #web development
Daily CyberSecurity
Poisoned Comments: Critical Orval Flaw (CVE-2026-25141) Injects Code
Critical Orval flaw CVE-2026-25141 (CVSS 9.3) allows code injection via OpenAPI comments. 2.8M+ downloads affected. Update to v7.21.0 now.
⤷ Title: Critical SAP Alert: Code Injection (CVSS 9.9) Exposes S/4HANA Databases
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 07:47:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CVE_2026_0488 #CVE_2026_0509 #database security #ERP Security #NetWeaver #Patch Tuesday #SAP CRM #SAP S/4HANA #SAP Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 10 Feb 2026 07:47:22 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #code_injection #CVE_2026_0488 #CVE_2026_0509 #database security #ERP Security #NetWeaver #Patch Tuesday #SAP CRM #SAP S/4HANA #SAP Security
Daily CyberSecurity
Critical SAP Alert: Code Injection (CVSS 9.9) Exposes S/4HANA Databases
SAP Feb 2026 update fixes critical CVE-2026-0488 (CVSS 9.9). Code injection in CRM & S/4HANA allows full database compromise. Patch immediately.
⤷ Title: Tutorials of Terror: How NVIDIA’s AI Training Guides Became a Gateway for Code Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 01:47:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #code_injection #CVE_2025_33239 #CVE_2025_33240 #infosec #LLM Training #machine_learning #Megatron Bridge #nvidia #privilege escalation #Tech News 2026
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 18 Feb 2026 01:47:27 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #code_injection #CVE_2025_33239 #CVE_2025_33240 #infosec #LLM Training #machine_learning #Megatron Bridge #nvidia #privilege escalation #Tech News 2026
Daily CyberSecurity
Tutorials of Terror: How NVIDIA’s AI Training Guides Became a Gateway for Code Injection
NVIDIA has released a critical software update for its Megatron Bridge, a key component used in training large language models (LLMs). The bulletin discloses two high-severity vulnerabilities hidd…
⤷ Title: CISA Warning: Critical Ivanti EPMM Code Injection Vulnerability Under Active Attack
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 01:46:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA KEV #code_injection #CVE_2026_1340 #cybersecurity #infosec #Ivanti EPMM #Ivanti Security Update #Mobile Device Management #patch management #rce
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 09 Apr 2026 01:46:54 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CISA KEV #code_injection #CVE_2026_1340 #cybersecurity #infosec #Ivanti EPMM #Ivanti Security Update #Mobile Device Management #patch management #rce
Daily CyberSecurity
CISA Warning: Critical Ivanti EPMM Code Injection Vulnerability Under Active Attack
CISA adds critical Ivanti EPMM flaw (CVE-2026-1340) to KEV catalog. The 9.8 CVSS code injection allows unauthenticated RCE. Patch mandated by April 11!
⤷ Title: Gremlin Injection Flaw in Apache Atlas Exposes Enterprise Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 02:20:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Atlas #code_injection #CVE_2026_40563 #cybersecurity #data governance #DSL Search #Gremlin Injection #Hadoop Security #infosec #Patch Alert
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 05 May 2026 02:20:03 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache Atlas #code_injection #CVE_2026_40563 #cybersecurity #data governance #DSL Search #Gremlin Injection #Hadoop Security #infosec #Patch Alert
Daily CyberSecurity
Gremlin Injection Flaw in Apache Atlas Exposes Enterprise Data
A critical injection flaw (CVE-2026-40563) in Apache Atlas lets attackers manipulate Gremlin logic to extract restricted enterprise data. Patch to v2.5.0!
⤷ Title: Breaking the AI Sandbox: Critical Flowise Flaw (CVE-2026-46442) Grants Host-Level RCE
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 01:40:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Agent Security #code_injection #CVE_2026_46442 #Cyber Security #Flowise #infosec #LLM Orchestration #NodeVM #Patch Alert #Remote Code Execution #Sandbox Escape
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 19 May 2026 01:40:33 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI Agent Security #code_injection #CVE_2026_46442 #Cyber Security #Flowise #infosec #LLM Orchestration #NodeVM #Patch Alert #Remote Code Execution #Sandbox Escape
Daily CyberSecurity
Breaking the AI Sandbox: Critical Flowise Flaw (CVE-2026-46442) Grants Host-Level RCE
CVE-2026-46442 in Flowise allows authenticated users to escape the NodeVM sandbox and execute system commands. Secure your AI infrastructure now!
⤷ Title: Cybercriminals Deploy Malicious AI Extensions to Steal Private Chat Data
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 06:20:43 +0000
════════════════════════
⌗ Tags: #Data Leak #Malware #Browser Extensions #ChatGPT Security #Claude #code_injection #data exfiltration #google chrome #Infosec Report #Malicious AI Extensions
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 10 Jun 2026 06:20:43 +0000
════════════════════════
⌗ Tags: #Data Leak #Malware #Browser Extensions #ChatGPT Security #Claude #code_injection #data exfiltration #google chrome #Infosec Report #Malicious AI Extensions
Daily CyberSecurity
Cybercriminals Deploy Malicious AI Extensions to Steal Private Chat Data
The Dangerous Scope of Browser Data Exfiltration Artificial Intelligence has rapidly transformed how we work and communicate every single day. Therefore, millions of professionals now rely on auto…
⤷ Title: NVIDIA Patches Three High-Severity NeMo Framework Code Injection Flaws
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 01:01:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #code_injection #Command Injection #CVE_2026_24155 #CVE_2026_24228 #CVE_2026_24252 #Deserialization #NeMo Framework #nvidia
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 17 Jun 2026 01:01:58 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #AI security #code_injection #Command Injection #CVE_2026_24155 #CVE_2026_24228 #CVE_2026_24252 #Deserialization #NeMo Framework #nvidia
Daily CyberSecurity
NVIDIA Patches Three High-Severity NeMo Framework Code Injection Flaws
NVIDIA has issued an urgent fix for its NeMo Framework, the popular open-source toolkit for building generative AI models. The update tackles an NVIDIA NeMo vulnerability set spanning three separa…