miasm

What is Miasm? Miasm is a free and open source GPLv2 reverse engineering framework. Miasm aims to analyze / modify / generate binary programs. Here is a non-exhaustive list of features: Opening / modifying / generating PE / ELF 32 / 64 LE / BE Assembling / Disassembling X86 / ARM / MIPS / SH4 /...

Langflow-CVE-2025-3248-Multi-target

⚠️ Langflow RCE Exploit Scanner CVE-2025-3248 This Python-based scanner automates the detection of unauthenticated Remote Code Execution RCE vulnerabilities in Langflow instances via CVE-2025-3248. It uses a proof-of-concept payload that abuses the /api/v1/validate/code endpoint to execute...

slides

slides Hack Different: Pwning iOS 14 with Generation Z Bugz BlackHat USA 2021 Zhi Zhou@CodeColorist, Jundong Xie @Jdddong paper recording parody See No Eval: Runtime Dynamic Code Execution in Objective-C RWCTF 2021 Zhi Zhou@CodeColorist Cross-Site Escape: Pwning macOS Safari Sandbox the Unusual W...

ICPin

ICPin An Integrity-Check Monitoring Pintool What A pintool that records the reads and writes to the executable in memory. It also tracks dynamically executed code and handles some antidebug checks it is immune to most antidebug by pintools design and outputs backtraces of watched behavior. How...

CVE-2025-6384

CVE-2025-6384: Groovy Sandbox Bypass 2 in CrafterCMS Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. Vendor Disclosure: The vendor's disclosure and fix for this...

CVE-2026-78844

Summary javadelight delight-nashorn-sandbox 0.5.5 suffers from Uncontrolled Resource Consumption. The sandbox enforces maxCPUTime limits by statically injecting interruption checks into JavaScript loops, but the sandbox fails to disable dynamic code evaluation. An attacker can use these functions...

CVE-2026-65141

A flaw was found in NVIDIA Isaac Lab. The software improperly evaluates untrusted input during dynamic code execution. A local attacker could exploit this vulnerability by enticing a user to process malicious input, leading to arbitrary code execution, unauthorized data modification, sensitive...

Brocade ASCG remote Code Execution via Pre-Validation Dynamic Code Evaluation (CVE-2026-85486)

Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text could immediately be processed. A malicious actor with basic access can supply crafted input to execute arbitrary code...

Malicious code in esm-dotenv (npm)

Source: amazon-inspector 55c5c67c48596e011158554f8b5ea57d65a8a8dc3b5f4120d3c9c4d1cf961da2 The package advertises itself as a zero-dependency dotenv parser but its main entry dist/index.cjs and CLI bin dist/cli.cjs both invoke dispatchAnalytics at top-level module load. That function reads...

Malicious code in esm-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c5c67c48596e011158554f8b5ea57d65a8a8dc3b5f4120d3c9c4d1cf961da2 The package advertises itself as a zero-dependency dotenv parser but its main entry dist/index.cjs and CLI bin dist/cli.cjs both invoke...

Malicious code in fs-commons (npm)

Source: amazon-inspector f7e82e98343807c39ea786017de4d2a7455815424155ca2a856333d895c8a48b The package presents itself as a filesystem/data-helper library, but its exported getTransactions/loadtransactiondata functions are a two-file dynamic-code loader. index.js hides the identifiers 'Function',...

Malicious code in fs-commons (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e82e98343807c39ea786017de4d2a7455815424155ca2a856333d895c8a48b The package presents itself as a filesystem/data-helper library, but its exported getTransactions/loadtransactiondata functions are a two-file...

CVE-2026-82789

An Eval Injection vulnerability (improper neutralization of directives in dynamically evaluated code) exists in CONPROSYS HMI System (CHS) by CONTEC. A low-privilege attacker who can log in to the product may achieve arbitrary code execution , leading to high impact on confidentiality, integrity,...

CVE-2026-82789

An improper neutralization of directives in dynamically evaluated code 'Eval Injection' issue exists in CONPROSYS HMI SystemCHS. If exploited, arbitrary code may be executed by an attacker who can log in to the product...

PT-2026-91093

An improper neutralization of directives in dynamically evaluated code 'Eval Injection' issue exists in CONPROSYS HMI SystemCHS. If exploited, arbitrary code may be executed by an attacker who can log in to the product...

Vulnerabilities in Adobe ColdFusion

Adobe has identified several vulnerabilities in Adobe ColdFusion. These vulnerabilities include a stored Cross-Site Scripting XSS vulnerability, where an attacker with low privileges can inject malicious scripts into form fields, which are then executed in the user’s browser. There is also a...

Exploit for Improper Control of Dynamically-Managed Code Resources in N8N

Description PoC explo...

Malicious code in cclr-component-resources (npm)

Multiple evidences suggest this package is a malware: code obfuscation, dynamic code execution, suspicious domain, and unusual install script. Source: amazon-inspector 61af3265fce06cfbb9bbf20e38d468e136487f69c41f70b0bbb1b331535bdf82 The package cclr-component-resources was found to contain...

Malicious code in accounts-offers (npm)

Source: amazon-inspector 2b8f0ec540c47830dcdf624b91e67aa00b005c240e43bb7cd5ffd183f02beac7 The package advertises itself as an 'Accounts offers library' but on require index.js silently loads setup.js, which via process.nextTick collects installer-side identifiers hostname, username, cwd, pid, Nod...

IBM Langflow OSS Visual Development Code Execution

The vulnerability of the software for visual development of IBM Langflow OSS AI agents lies in the failure to take measures to neutralize instructions in dynamically executed code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...