Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/22 12:00 a.m.•7 views

CVE-2025-51472: Improper Neutralization of Special Elements used in a Command

Code Injection in AgentTemplate.evalagentconfig in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to execute arbitrary Python code via malicious values in agent template configurations such as the goal, constraints, or instruction field, which are evaluated using eval without validati...

6.5CVSS6.4AI score0.00432EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/31 12:00 a.m.•9 views

CVE-2024-55062: Improper Neutralization of Special Elements used in a Command

Code Injection vulnerability in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote unauthenticated attackers to execute arbitrary code to /api/license/sendlicense/...

9.8CVSS6.5AI score0.01109EPSS
SaveExploits1References1
Rows per page
Query Builder