Lucene search
+L

3598 matches found

OSV
OSV
•added 2026/08/13 2:17 p.m.•11 views

DEBIAN-CVE-2026-67986

amazing-print/amazingprint at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArraygrep. A specially named method containing Ruby interpolation syntax can be interpolated into a dynamically constructed eval string when grep is called with a...

8.4CVSS6.1AI score0.00262EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/08/13 2:17 p.m.•15 views

CVE-2026-67986

amazing-print/amazingprint at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArraygrep. A specially named method containing Ruby interpolation syntax can be interpolated into a dynamically constructed eval string when grep is called with a...

8.4CVSS5.7AI score0.00262EPSS
SaveExploits0References4
GithubExploit
GithubExploit
•added 2026/08/13 2:06 p.m.•28 views

Exploit for Eval Injection in Langflow

CVE-2026-33017 — Langflow Unauthenticated RCE PoC 면책 조항...

9.8CVSS9.2AI score0.24755EPSS
SaveExploits33
GithubExploit
GithubExploit
•added 2026/08/13 1:33 p.m.•29 views

Exploit for Eval Injection in Langflow

No d...

9.8CVSS8.8AI score0.24755EPSS
SaveExploits33
Tenable Nessus
Tenable Nessus
•added 2026/08/13 12:00 a.m.•52 views

Adobe ColdFusion 2023.x < 2023 Update 23 / 2025.x < 2025 Update 12 Multiple Vulnerabilities (APSB26-90)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2023.x update 23 or 2025.x update 12. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-90 advisory. - Improper Neutralization of Special Elements used in an OS Command 'OS Command...

10CVSS6.6AI score0.03505EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
•added 2026/08/13 12:00 a.m.•14 views

PT-2026-71595

amazing-print/amazing print at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArraygrep. A specially named method containing Ruby interpolation syntax can be interpolated into a dynamically constructed eval string when grep is called with ...

8.4CVSS5.9AI score0.00262EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/13 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-73231

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Faker generates massive amounts of fake data in the browser and Node.js. Prior to 10.5.0, the faker.helpers.fake method in src/modules/helpers/eval.ts allows...

7.8CVSS5.9AI score0.0021EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/13 12:00 a.m.•14 views

CVE-2026-67986

amazing-print/amazingprint at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArraygrep. A specially named method containing Ruby interpolation syntax can be interpolated into a dynamically constructed eval string when grep is called with a...

5.9AI score0.00262EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/08/13 12:00 a.m.•17 views

CVE-2026-67986

amazing-print/amazingprint at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArraygrep. A specially named method containing Ruby interpolation syntax can be interpolated into a dynamically constructed eval string when grep is called with a...

5.9AI score0.00262EPSS
SaveExploits0References4
Packet Storm
Packet Storm
•added 2026/08/13 12:00 a.m.•22 views

Webmin Help Template Authenticated Remote Code Execution

Webmin's help system accepts template variables via query parameters and processes them through the eval function. This allows an authenticated user to execute commands with root privileges. Versions prior to 2.640 appear to be affected. Webmin Help Template Authenticated Remote Code Execution...

5.6AI score
SaveExploits0
Cvelist
Cvelist
•added 2026/08/13 12:00 a.m.•43 views

CVE-2026-67986

amazing-print/amazingprint at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArraygrep. A specially named method containing Ruby interpolation syntax can be interpolated into a dynamically constructed eval string when grep is called with a...

0.00262EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/13 12:00 a.m.•4 views

CVE-2026-67986: Improper Control of Generation of Code

amazing-print/amazingprint at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArraygrep. A specially named method containing Ruby interpolation syntax can be interpolated into a dynamically constructed eval string when grep is called with a...

8.4CVSS6.1AI score0.00262EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/08/13 12:00 a.m.•13 views

CVE-2026-67986

amazing-print/amazingprint at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArraygrep. A specially named method containing Ruby interpolation syntax can be interpolated into a dynamically constructed eval string when grep is called with a...

8.4CVSS6.1AI score0.00262EPSS
SaveExploits0
Oracle linux
Oracle linux
•added 2026/08/13 12:00 a.m.•24 views

dracut security update

057-120.git20260728.0.1 - Skip the default FIPS logic on special UEK kernels where the FIPS module is linked directly into the kernel. Orabug: 38705580 - Ship Oracle IMA certificate Orabug: 35992862 - Ship 98-integrity.conf, populating initramfs with Oracle IMA certificate Orabug: 35992862 -...

7.5CVSS5.6AI score0.00371EPSS
SaveExploits0
CVE
CVE
•added 2026/08/13 12:00 a.m.•43 views

CVE-2026-67986

The amazing-print/amazing_print gem (commit dc890dfafdf07088ea901df53c19c2710e5c5234 ) is vulnerable to Ruby code injection within the AwesomeMethodArray#grep method. The root cause is that a specially named method containing Ruby interpolation syntax can be interpolated into a dynamically constr...

8.4CVSS5.9AI score0.00262EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/13 12:00 a.m.•14 views

EUVD-2026-58030

amazing-print/amazingprint at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArraygrep. A specially named method containing Ruby interpolation syntax can be interpolated into a dynamically constructed eval string when grep is called with a...

8.4CVSS5.9AI score0.00262EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/12 3:41 p.m.•42 views

Malicious code in tailwind-form-templates (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8febe917c3076e12756acd284d92cd2810cb59f7c546a6e669ef23caa56457bc The package name resembles @tailwindcss/forms and its src/index.js copies the legitimate @tailwindcss/forms source, appending an evalatob... payload...

6.1AI score
SaveExploits0References1
The Hacker News
The Hacker News
•added 2026/08/12 11:13 a.m.•22 views

Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws

Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully exploited, could result in arbitrary code execution and privilege escalation. The most severe of the flaws are listed below - CVE-2026-48362...

10CVSS9.4AI score0.87507EPSS
SaveExploits1
Oracle linux
Oracle linux
•added 2026/08/12 12:00 a.m.•14 views

perl-DBI:1.641 security update

perl-DBI 1.641-8 - Fix unsafe string eval in DBI::Profile CVE-2026-14380 Resolves: RHEL-211151 1.641-7 - Fix patch. 1.641-6 - Fix heap overflow when preparsing SQL statements with excessive placeholders CVE-2026-14739 Resolves: RHEL-193298 1.641-5 - Fix stack overflow and buffer overflow in DBI.x...

9.8CVSS5.9AI score0.00499EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/08/12 12:00 a.m.•28 views

Oracle Linux 8 : perl-DBI:1.641 (ELSA-2026-52772)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-52772 advisory. - Fix unsafe string eval in DBI::Profile CVE-2026-14380 Resolves: RHEL-211151 - Fix heap overflow when preparsing SQL statements with excessive...

9.8CVSS6.2AI score0.00824EPSS
SaveExploits0References3
Rows per page
Query Builder