29 matches found
Exploit for Eval Injection in Langflow
No d...
EUVD-2026-52517
Adobe Campaign Classic ACC is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code 'Eval Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute...
Eval Injection
Overview Affected versions of this package are vulnerable to Eval Injection in the isfalsy function of the WordPress.WP.EnqueuedResourceParameters process. An attacker can execute arbitrary commands on the scanning host by submitting maliciously crafted arguments that are evaluated during code...
Exploit for Eval Injection in Langflow
No d...
๐ IO-Compress 2.219 Eval Injection
An eval injection vulnerability in File::GlobMapper::getFiles allows any attacker who can control the output fileglob argument passed to IO::Compress::Gzip::gzip, IO::Compress::Zip::zip, or any sibling function to execute arbitrary Perl code in the context of the running process. Summary An eval...
MaxKB ๅฎๅ จๆผๆด
MaxKB is an open-source question-answering system based on large language models and RAG, developed by 1Panel-dev. Versions of MaxKB prior to 2.7.1 contained a security vulnerability. This vulnerability stemmed from a Eval injection flaw in the Markdown rendering engine, which could allow any use...
Exploit for Eval Injection in Langflow
CVE-2026-33...
Exploit for Eval Injection in Xwiki
...
EUVD-2006-3813
Malware in sbrugna...
EUVD-2009-4799
Malware in sbrugna...
EUVD-2007-0533
Malware in sbrugna...
EUVD-2015-7613
Malware in sbrugna...
EUVD-2008-5050
Malware in sbrugna...
EUVD-2020-2639
Malware in sbrugna...
EUVD-2007-4437
Malware in sbrugna...
EUVD-2009-0817
Malware in sbrugna...
EUVD-2006-0891
Malware in sbrugna...
EUVD-2019-3223
Malware in sbrugna...
EUVD-2011-1759
Malware in sbrugna...
Eval Injection
Overview letta is a Create LLM agents with long-term memory and custom tools Affected versions of this package are vulnerable to Eval Injection via the functionmessage process. An attacker can execute arbitrary code by manipulating the functionname or functionargs arguments. Remediation There is ...