Search Vulnerabilities

Unauthenticated Remote Code Execution in openc3-api

Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin

XWiki vulnerable to remote code execution through insufficient protection against {{/html}} injection

RCE in Wirtualna Uczelnia

Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events

F5OS vulnerability

WordPress Plugin is-human <= v1.4.2 Eval Injection RCE

Horilla vulnerable to authenticated RCE via eval() in project_bulk_archive

XWiki Remote Macros vulnerable to remote code execution using the panel macro

XWiki Remote Macros vulnerable to remote code execution from width parameter in the column macro

XWiki Blog Application: Privilege Escalation (PR) from account through blog content

Request a Quote Form Plugin <= 2.5.2 - Unauthenticated Limited Remote Code Execution

PHP-Charts v1.0 PHP Code Execution

InstantCMS <= 1.6 Remote PHP Code Execution

Unsafe use of eval() method in rosbag tool

Unsafe use of eval() method in rostopic echo tool

Unsafe use of eval() method in rostopic hz tool

Unsafe use of eval() method in roslaunch tool

Unsafe use of eval() method in rosparam tool

letta-ai letta interface.py function_message eval injection