Eaton-UPS-Companion-Exploit

Overview The Eaton UPS Companion software checks for an update every single week over an insecure HTTP connection and evals the content of whatever is at the update URL. This allows an attacker to craft a JavaScript function which uses the low-level OS operations that already exist in the backend...

CVE-2020-15778

Write up for CVE id CVE-2020-15778. Discoverd by : Chinmay Pandya Email address : [email protected] Linkedin : www.linkedin.com/in/chinmay-pandya Vulnerability title: scp in OpenSSH 8.3p1 allows eval injection. Product: Openssh Affected Component: SCP...

Reproduce-CVE-2024-21513

Reproduce-CVE-2024-21513 Overview This project demonstrates the vulnerability CVE-2024-21513 in the langchain-experimental package, specifically in versions =0.0.15 and 0.0.21. The vulnerability allows arbitrary code execution via the VectorSQLDatabaseChain component when retrieving values from t...

CVE-2021-27928-POC

CVE-2021-27928 POC Description A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval...

CVE-2023-47253

CVE-2023-47253 | Qualitor povoaVoComArray$REQUEST; if inarray$REQUEST'nmalias', array'dtiniciomesatual', 'dtfimmesatual', 'dtiniciomespassado', 개념 증명 POC "gridValoresPopHidden" 매개변수에 PHP 코드를 포함한 URL에 접속하기만 하면 됩니다. 연구자 https://www.linkedin.com/in/xvinicius/...

CVE-2025-54322

CVE-2025-54322 - XSpeeder SXZOS Pre-Auth RCE Scanner A multi-threaded vulnerability scanner for CVE-2025-54322, an unauthenticated remote code execution vulnerability in XSpeeder SXZOS firmware affecting 70,000+ hosts globally. 📋 Table of Contents About the Vulnerability Features Installation Usa...

CVE-2025-0868

Penetration Testing Project Report: Exploiting CVE-2025-0868 DocsGPT RCE via JSON Eval 1. Introduction A critical Remote Code Execution RCE flaw CVE-2025-0868 was disclosed on February 20, 2025, in the open-source DocsGPT library, caused by unsafe use of eval when parsing JSON payloads. Key...

CVE-2026-48962

摘要 File::GlobMapper::getFiles 中存在一个 eval 注入漏洞，允许任何能够控制传递给 IO::Compress::Gzip::gzip、IO::Compress::Zip::zip 或任何同类函数的输出文件通配符参数的攻击者，在运行进程的上下文中执行任意 Perl 代码。无需认证。影响是全面的：主机进程的机密性、完整性和可用性完全受损。 详情 File::GlobMapper::parseOutputGlob 通过将调用者提供的输出模式包裹在 Perl 双引号中并将结果存储来构建输出文件名模板。然后 getFiles 将该字符串直接传递给...

PrestaShop - SQL Injection to Eval Injection

PrestaShop versions from 1.6.0.10 and before 1.7.8.7 contain an SQL injection caused by unsanitized user input, letting attackers chain the vulnerability to call PHP's Eval function, exploit requires attacker to send malicious input. id: CVE-2022-31181 info: name: PrestaShop - SQL Injection to Ev...

perl_spreadsheet_excel_rce_poc

ParseExcel のセキュリティ脆弱性 TL;DR: フォーマット文字列の解析ロジックに起因するRCE。 脆弱性の簡単な説明 この脆弱性の根本原因は、Utility.pm 内で検証されていないユーザー入力を eval に渡していることです。 https://github.com/jmcnamara/spreadsheet-parseexcel/blob/e33d626d9b9cec91be7520dec1686712313957fb/lib/Spreadsheet/ParseExcel/Utility.pmL171 root@kitploit: Uitlity.pm sub...

proofpoint-CVE-2023-0090

About Security researcher: ly1g3, ly1g3attuta.io GPG fingerprint: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Overview: Remote Code Execution - Unauthenticated RCE CVE: CVE-2023-0090 Timeline: Discovered - ly1g3 Reported - ly1g3 Fixed - Proofpoint...

CVE-2026-61511-PoC-Exploit

CVE-2026-61511 – vBulletin 事前認証RCEエクスプロイト＆検証ツール ⚠️ 倫理的な使用のみ – 許可されたセキュリティテスト このリポジトリは許可されたセキュリティ専門家、ブルーチーム、ペネトレーションテスター のみを対象としたツールを提供します。 許可のないコンピュータシステムへのアクセスは、CFAA（米国）、Computer Misuse Act（英国）、TCK 243/244（トルコ）、および世界各国の同様の法律 に基づき違法です。 📖 脆弱性の概要 CVE‑2026‑61511 は、vBulletin の AJAX テンプレートレンダリングエンジンにおけ...

CVE-2023-47253

CVE-2023-47253 CVE-2023-47253 | Qualitor povoaVoComArray$REQUEST; if inarray$REQUEST'nmalias', array'dtiniciomesatual', 'dtfimmesatual', 'dtiniciomespassado', Proof of Concept POC Just access the URL with your PHP code in "gridValoresPopHidden" parameter. Researches...

CVE-2023-43364-Exploit-CVE

CVE-2023-43364-エクスプロイト-CVE これは、Searchor 2.4.0 を悪用する Python スクリプトです - eval 関数が安全でない方法で実装されており、RCE のために悪用される可能性があります。 このマシンは busybox がインストールされていることを前提としています。これは HackTheBox の Busqueda マシン向けに作成したためです。busybox 以外を使用する必要がある場合は、ペイロードを別のリバースシェルに置き換えてください。...

Ultimate-CVE-2026-61511

CVE-2026-61511 – 概念验证 用于验证 vBulletin 漏洞CVE-2026-61511 暴露情况的教育性和防御性概念验证 PoC – 未认证远程代码执行。 联系方式 Telegram: https://t.me/thecodeb0ss 概述 本仓库为 vBulletin 漏洞 CVE-2026-61511 提供防御性检测与验证概念验证 。 根据公开的安全研究，CVE-2026-61511 描述了 vBulletin 模板运行时中的一个严重 eval 注入漏洞，在特定条件下可导致未认证远程代码执行 RCE 。 本项目的目标是帮助： 安全研究人员 渗透测试人员 蓝队...

Astra Linux – Vulnerability in libio-compress-perl

IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob. The parseOutputGlob function wraps the output glob string provided by the caller within double quotes and stores it in the parser state. Then, the getFiles function...

CVE-2026-82789

An improper neutralization of directives in dynamically evaluated code 'Eval Injection' issue exists in CONPROSYS HMI SystemCHS. If exploited, arbitrary code may be executed by an attacker who can log in to the product...

CVE-2026-82789

An Eval Injection vulnerability (improper neutralization of directives in dynamically evaluated code) exists in CONPROSYS HMI System (CHS) by CONTEC. A low-privilege attacker who can log in to the product may achieve arbitrary code execution , leading to high impact on confidentiality, integrity,...

EUVD-2026-77243

An improper neutralization of directives in dynamically evaluated code 'Eval Injection' issue exists in CONPROSYS HMI SystemCHS. If exploited, arbitrary code may be executed by an attacker who can log in to the product...

CVE-2026-82789

An improper neutralization of directives in dynamically evaluated code 'Eval Injection' issue exists in CONPROSYS HMI SystemCHS. If exploited, arbitrary code may be executed by an attacker who can log in to the product...