Search Vulnerabilities

NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments

PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution

Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR

Authenticated RCE via Malicious eTemplate Upload in EGroupware

Yamcs: Remote Code Execution via Mission Database algorithm override

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile

Dokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through eval

picklescan - Remote Code Execution via Undetected idlelib.calltip.Calltip.fetch_tip

Command injection through unsanitized YAML parameter in Rancher

picklescan - Scanning Bypass via Dynamic Eval in scan_pytorch

Python StateMachine 3.0.0 < 3.2.0 RCE via SCXML eval() Injection

Vim: Arbitrary Code Execution via Python Omni-Completion

Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex

Markdown Preview Enhanced 0.8.x Code Injection via WaveDrom Rendering

Markdown Preview Enhanced Arbitrary Code Execution via WaveDrom eval()

Command injection in Profile change function

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob

Apache OFBiz: Improper Validation in traverseContent Service Enables Authenticated Groovy Code Execution

OWASP BLT: pre-commit-fix.yaml executes untrusted fork code via pull_request_target

Angular Expressions - Remote Code Execution using filters