CVE-2026-9147-uproot-rce

CVE-2026-9147: внедрение кода в uproot через метаданные TStreamerInfo Серьёзность: Высокая, CVSS 4.0 8.5 , CVSS 3.1 7.8 присвоено VulnCheck, CNA Вектор v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Вектор v3.1: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Затронуты: uproot...

CVE-2017-9841

CVE-2017-9841 Laravel-RCE: CVE-2017-9841 CVE-2017-9841 — это критическая уязвимость удаленного выполнения кода RCE, затрагивающая библиотеку PHPUnit, широко используемую для автоматизированного тестирования в PHP. Эта ошибка позволяет злоумышленнику выполнять произвольные команды на сервере при...

CVE-2017-9841-EXPLOIT

CVE-2017-9841 - Удаленное выполнение кода RCE в PHPUnit Эта уязвимость затрагивает версии PHPUnit до 4.8.28, а также все версии 5.x до 5.6.3. Она позволяет злоумышленникам выполнять произвольный PHP-код на серверах, где PHPUnit доступен извне. Проблема заключается в файле eval-stdin.php,...

CVE-2026-44262

PoC de RCE dedoc/scramble CVE-2026-44262 📜 Description CVE-2026-44262 est une vulnérabilité d'exécution de code à distance non authentifiée dans dedoc/scramble, un générateur de documentation d'API Laravel. NodeRulesEvaluator::doEvaluateExpression appelle extract$variables avant . Lorsqu'un...

CVE-2026-47103-python-statemachine-rce

CVE-2026-47103: SCXML eval 주입을 통한 Python StateMachine 원격 코드 실행 심각도: Critical, CVSS 4.0 9.3 , CVSS 3.1 9.8 CNA인 VulnCheck가 할당 Vector v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 영향받는 버전: Python StateMachine = 3.0.0,...

CVE-2017-9841-PHPUnit-Remote-Code-Execution-PoC

CVE-2017-9841 — Preuve de concept PoC pour une exécution de code à distance RCE dans PHPUnit ⚠️ AVERTISSEMENT : Cet outil est destiné uniquement à des fins éducatives et à des tests de sécurité autorisés. Toute utilisation non autorisée contre des systèmes dont vous n'êtes pas propriétaire ou pour...

safer-eval-cve-CVE-2019-10760

safer-eval-cve-CVE-2019-10760 L'exploit de preuve de concept POC suivant, ciblant safer-eval version 1.3.1 et inférieures, est le premier payload publiquement connu à attaquer cette plage de versions. Contribution Veuillez consulter CONTRIBUTING pour les directives relatives à la contribution à c...

hdwebmobile-formula-pricing

HDWebmobile Formula Pricing Расчёт цены товара на основе введённых клиентом чисел по формуле — безопасно, без использования PHP-функции eval. WordPress.org: https://wordpress.org/plugins/hdwebmobile-formula-pricing/ Требования: WordPress 6.9+, WooCommerce, PHP 7.4+ Лицензия: GPLv2 или новее...

eval-stdin

La vulnérabilité Util PHP eval-stdin.php CVE-2017-9841 est une vulnérabilité RCE dans eval-stdin.php obsolète. Cet exploit n'est qu'une automatisation de la vulnérabilité mentionnée et est encore en développement. Écrit en Ruby 3.0.4 en 2 heures, testé sur Kali Linux, Arch Linux, Ubuntu minimal e...

CVE-2014-7205

Bassmaster NodeJS Plugin RCE PoC bassmaster-rce.py: Un script Python pour exploiter CVE-2014-7205. nodeshell.py: Un module Python pour générer un reverse shell pour NodeJS !!Utilisez uniquement contre des serveurs sur lesquels vous avez la permission de tester Résumé CVE-2014-7205 est une...

CHIRP-CodeExecution_via_Malicious_ImageFile

CHIRP — Arbitrary Code Execution via eval in Kenwood ITM Driver Product: CHIRP - An open-source project for programming Ham Radios. Affected Versions: URL: https://github.com/kk7ds/chirp, https://chirpmyradio.com Affected Versions: = chirp-next-20260814 CWE: CWE-95 Eval Injection Overview CHIRP's...

EUVD-2026-75799

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an unguarded eval call on attacker-controlled input...

CVE-2026-78571

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an unguarded eval call on attacker-controlled input...

CVE-2026-78571

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an unguarded eval call on attacker-controlled input...

CVE-2026-78571

IBM Langflow OSS versions 1.0.0 through 1.11.5 are vulnerable to arbitrary code execution via an unguarded eval() call in the lfx CodeParser , which passes return-type annotation source directly to eval without sanitization (CWE-94). A remote authenticated attacker can exploit this to execute arb...

CVE-2026-78571 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary code due to an unguarded eval call on attacker-controlled input...

CVE-2026-80351

Improper neutralization of directives in dynamically evaluated code 'eval injection' vulnerability in Apache Camel K. An improper neutralization of directives in dynamically evaluated Maven configuration allows tenant-controlled repository content to influence code execution within the operator...

EUVD-2026-75291

Improper neutralization of directives in dynamically evaluated code 'eval injection' vulnerability in Apache Camel K. An improper neutralization of directives in dynamically evaluated Maven configuration allows tenant-controlled repository content to influence code execution within the operator...

CVE-2026-80351 Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator pod

Improper neutralization of directives in dynamically evaluated code 'eval injection' vulnerability in Apache Camel K. An improper neutralization of directives in dynamically evaluated Maven configuration allows tenant-controlled repository content to influence code execution within the operator...

CVE-2026-80351

Apache Camel K is affected by an eval injection vulnerability (CVE-2026-80351) in its dynamically evaluated Maven configuration. Tenant-controlled repository content can influence code execution within the operator pod , potentially allowing tenants to run arbitrary code with operator-level privi...