Search Vulnerabilities

Command injection through unsanitized YAML parameter in Rancher

picklescan - Scanning Bypass via Dynamic Eval in scan_pytorch

Python StateMachine 3.0.0 < 3.2.0 RCE via SCXML eval() Injection

Vim: Arbitrary Code Execution via Python Omni-Completion

Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-definition regex

Markdown Preview Enhanced 0.8.x Code Injection via WaveDrom Rendering

Markdown Preview Enhanced Arbitrary Code Execution via WaveDrom eval()

Command injection in Profile change function

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob

Apache OFBiz: Improper Validation in traverseContent Service Enables Authenticated Groovy Code Execution

OWASP BLT: pre-commit-fix.yaml executes untrusted fork code via pull_request_target

Angular Expressions - Remote Code Execution using filters

Unauthenticated Remote Code Execution

PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope

Pagekit CMS StringStorage Template PhpEngine.php evaluate eval injection

OWASP BLT has RCE in Github Actions via untrusted Django model execution in workflow

Stored XSS via Eval Injection in EchartsRander Component

Chamilo LMS Affected by Remote Code Execution via eval() in Platform Settings

FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection

Eval Injection in Rapid7 Insight Agent