CVE-2026-85694

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extractasobject that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute...

CVE-2026-85694

LaVague 0.2.35 is vulnerable to remote code execution via its PythonFromMarkdownExtractor.extract_as_object function, which uses eval on untrusted language model output derived from web page content. An attacker can perform indirect prompt injection through a web page to inject malicious Python c...

CVE-2026-85694 LaVague 0.2.35 Remote Code Execution via eval extraction

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extractasobject that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute...

CVE-2026-85694 LaVague 0.2.35 Remote Code Execution via eval extraction

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extractasobject that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute...

EUVD-2026-71143

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extractasobject that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute...

PT-2026-85580

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extract as object that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute...

CVE-2026-85694: Improper Control of Generation of Code

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extractasobject that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute...

LaVague <= 0.3 (printbar.php views_path) RFI Vulnerability

No description provided by source...

Remote file inclusion

PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the viewspath parameter...

Immunity Canvas: LAVAGUE_INCLUDE

Name| lavagueinclude ---|--- CVE| CVE-2007-2607 Exploit Pack| CANVAS Description| LaVague 0.3 = Remote File Inclusion Vulnerability Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: adullact.net CVE Url: https://vulners.com/cve/CVE-2007-2607 CVE Name: CVE-2007-2607...

CVE-2007-2607

PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the viewspath parameter...

CVE-2007-2607

LaVague 0.3 and earlier suffers a PHP remote file inclusion in views/print/printbar.php, exploitable via a URL in the views_path parameter. Connected sources confirm this vulnerability type (RFI) and cite an impact consistent with arbitrary code execution on affected installations. The issue is t...

lavague-rfi.txt

LaVague 0.3 = Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR1:views/print/printbar.php require $viewspath."/progressbar.php"; BUG1: Example1:http://site.com/path/views/print/printbar.php?viewspath=Sh3LL Script Script Download http://admisource.gouv.fr/frs/?groupid=30&releaseid=145...

LaVague 0.3 - 'printbar.php?views_path' Remote File Inclusion

§§§§§§§§§§ §§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§...

LaVague <= 0.3 (printbar.php views_path) RFI Vulnerability

Exploit for unknown platform in category web applications ========================================================== LaVague = 0.3 printbar.php viewspath RFI Vulnerability ========================================================== ?????????? ??????????????? ???????????????????...

LaVague 0.3 - printbar.php?views_path Remote File Inclusion

LaVague 0.3 - printbar.php?viewspath Remote File Inclusion §§§§§§§§§§ §§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§...