CVE-2026-85694

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extractasobject that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute...

CVE-2026-85694 LaVague 0.2.35 Remote Code Execution via eval extraction

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extractasobject that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute...

EUVD-2026-71143

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extractasobject that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute...

CVE-2026-85694 LaVague 0.2.35 Remote Code Execution via eval extraction

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extractasobject that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute...

CVE-2026-85694

LaVague 0.2.35 is vulnerable to remote code execution via its PythonFromMarkdownExtractor.extract_as_object function, which uses eval on untrusted language model output derived from web page content. An attacker can perform indirect prompt injection through a web page to inject malicious Python c...

PT-2026-85580

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extract as object that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute...

CVE-2026-85694: Improper Control of Generation of Code

LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkdownExtractor.extractasobject that evaluates untrusted language model output derived from web page content. Attackers can inject malicious Python code through web pages using indirect prompt injection to execute...

africanwhisper (>=0.2.1, <=0.2.5), iopaint (>=1.2.3, <=1.6.0) +3 more potentially affected by CVE-2026-49119 via gradio (4.21.0)

gradio PYPI version 4.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - africanwhisper =0.2.1, =1.2.3, =1.0.4.post1, =0.2.2, =1.2.3 - llmtuner 0.6.2 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

africanwhisper (>=0.2.1, <=0.2.5), iopaint (>=1.2.3, <=1.6.0) +3 more potentially affected by CVE-2026-49119 via gradio (4.21.0)

gradio PYPI version 4.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - africanwhisper =0.2.1, =1.2.3, =1.0.4.post1, =0.2.2, =1.2.3 - llmtuner 0.6.2 Source cves: CVE-2026-49119 Source advisory: OSV:PYSEC-2026-2179...

africanwhisper (>=0.2.1, <=0.2.5), iopaint (>=1.2.3, <=1.6.0) +3 more potentially affected by CVE-2024-47871 via gradio (4.21.0)

gradio PYPI version 4.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - africanwhisper =0.2.1, =1.2.3, =1.0.4.post1, =0.2.2, =1.2.3 - llmtuner 0.6.2 Source cves: CVE-2024-47871 Source advisory: OSV:PYSEC-2024-219...

africanwhisper (>=0.2.1, <=0.2.5), iopaint (>=1.2.3, <=1.6.0) +3 more potentially affected by CVE-2024-47872 via gradio (4.21.0)

gradio PYPI version 4.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - africanwhisper =0.2.1, =1.2.3, =1.0.4.post1, =0.2.2, =1.2.3 - llmtuner 0.6.2 Source cves: CVE-2024-47872 Source advisory: OSV:GHSA-GVV6-33J7-884G...

LaVague <= 0.3 (printbar.php views_path) RFI Vulnerability

No description provided by source...

Immunity Canvas: LAVAGUE_INCLUDE

Name| lavagueinclude ---|--- CVE| CVE-2007-2607 Exploit Pack| CANVAS Description| LaVague 0.3 = Remote File Inclusion Vulnerability Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: adullact.net CVE Url: https://vulners.com/cve/CVE-2007-2607 CVE Name: CVE-2007-2607...

Remote file inclusion

PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the viewspath parameter...

CVE-2007-2607

PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the viewspath parameter...

CVE-2007-2607

LaVague 0.3 and earlier suffers a PHP remote file inclusion in views/print/printbar.php, exploitable via a URL in the views_path parameter. Connected sources confirm this vulnerability type (RFI) and cite an impact consistent with arbitrary code execution on affected installations. The issue is t...

CVE-2007-2607: Undefined Security Weakness

PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the viewspath parameter...

lavague-rfi.txt

LaVague 0.3 = Remote File Inclusion Vulnerability Dork:: Vuln Code ERROR1:views/print/printbar.php require $viewspath."/progressbar.php"; BUG1: Example1:http://site.com/path/views/print/printbar.php?viewspath=Sh3LL Script Script Download http://admisource.gouv.fr/frs/?groupid=30&releaseid=145...

LaVague 0.3 - printbar.php?views_path Remote File Inclusion

LaVague 0.3 - printbar.php?viewspath Remote File Inclusion §§§§§§§§§§ §§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§ §§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§§...

LaVague <= 0.3 (printbar.php views_path) RFI Vulnerability

Exploit for unknown platform in category web applications ========================================================== LaVague = 0.3 printbar.php viewspath RFI Vulnerability ========================================================== ?????????? ??????????????? ???????????????????...