CVE-2026-25731

Templiteエンジンにおけるサーバーサイドテンプレートインジェクション（SSTI） 深刻度: 高（CVSS 7.8） 影響を受けるソフトウェア: calibre パッチ適用バージョン: 9.2.0 アドバイザリ: GHSA-xrh9-w7qx-3gcc 概要...

mpDNS

mpDNS 일명 다목적 DNS 서버 간단하고 설정 가능한 여러 유용한 기능을 갖춘 DNS 서버 Python 3 names.db - 모든 사용자 정의 레코드 보관 예제 참조 .example.com 같은 간단한 와일드카드 유니코드 DNS 요청 포착 사용자 정의 작업일명 매크로: shellexec::dig google.com +short - 셸 명령을 실행하고 결과로 응답 eval::res = '1.1.1.%d' % random.randint0,256 - Python 코드 평가 file::/etc/passwd - 로컬 파일 내용으로...

CVE-2025-2945-pgadmin-rce

CVE-2025-2945 — pgAdmin 4 クエリツールの認証済みRCE CVE-2025-2945 の概念実証です。これは pgAdmin 4 における重大なリモートコード実行の脆弱性です。 影響を受けるバージョン: 8.10 から 9.1 修正版: 9.2 2025年4月4日リリース CVSS v3.1: 9.9 緊急 概要 pgAdmin 4 クエリツールは、querycommited パラメータを受け入れ、それをサニタイズなしで Python 組み込みの eval に直接渡すエンドポイントを公開しています。認証済みの攻撃者は、このパラメータを介して任意の Python...

CVE-2026-100865

Heym before 0.0.53 evaluates workflow condition expressions using Python's eval with insufficient sandboxing in the workflow executor service. Authenticated users can edit workflow condition nodes or import malicious templates to execute arbitrary Python and OS commands as the backend process use...

PYSEC-2026-4015

MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves target values to arbitrary importable callables without an allow list and passes $ expressions to Python eval. Attackers can publish a malicious bundle with crafted configuration...

CVE-2026-100840

MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves target values to arbitrary importable callables without an allow list and passes $ expressions to Python eval. Attackers can publish a malicious bundle with crafted configuration...

PYSEC-2026-4015

MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves target values to arbitrary importable callables without an allow list and passes $ expressions to Python eval. Attackers can publish a malicious bundle with crafted configuration...

CVE-2026-100865

The Heym workflow automation platform, in versions before 0.0.53 , is vulnerable to Remote Code Execution (RCE) due to insufficient sandboxing when evaluating workflow condition expressions using Python's eval() function in the workflow executor service. Authenticated users can exploit this by ed...

EUVD-2026-87830

Heym before 0.0.53 evaluates workflow condition expressions using Python's eval with insufficient sandboxing in the workflow executor service. Authenticated users can edit workflow condition nodes or import malicious templates to execute arbitrary Python and OS commands as the backend process use...

CVE-2026-100865 Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape

Heym before 0.0.53 evaluates workflow condition expressions using Python's eval with insufficient sandboxing in the workflow executor service. Authenticated users can edit workflow condition nodes or import malicious templates to execute arbitrary Python and OS commands as the backend process use...

CVE-2026-100840 MONAI through 1.6.0 Remote Code Execution via bundle configuration

MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves target values to arbitrary importable callables without an allow list and passes $ expressions to Python eval. Attackers can publish a malicious bundle with crafted configuration...

CVE-2026-100840

The MONAI library (through version 1.6.0 ) contains a Remote Code Execution vulnerability within its bundle configuration engine . The root cause is that the engine resolves _target_ values to arbitrary importable callables without an allow list and passes $ expressions to Python's eval(). An att...

CVE-2026-100840 MONAI through 1.6.0 Remote Code Execution via bundle configuration

MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves target values to arbitrary importable callables without an allow list and passes $ expressions to Python eval. Attackers can publish a malicious bundle with crafted configuration...

EUVD-2026-87848

MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves target values to arbitrary importable callables without an allow list and passes $ expressions to Python eval. Attackers can publish a malicious bundle with crafted configuration...

CVE-2026-100840 MONAI through 1.6.0 Remote Code Execution via bundle configuration

MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves target values to arbitrary importable callables without an allow list and passes $ expressions to Python eval. Attackers can publish a malicious bundle with crafted configuration...

PT-2026-105776

MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves target values to arbitrary importable callables without an allow list and passes $ expressions to Python eval. Attackers can publish a malicious bundle with crafted configuration...

PT-2026-99485

Name of the Vulnerable Software and Affected Versions Heym versions prior to 0.0.53 Description Multiple security issues exist in the software. The workflow condition evaluator uses the Python eval function without an effective sandbox, enabling users who can edit workflow branch/condition nodes ...

CVE-2026-100840: Improper Neutralization of Directives in Dynamically Evaluated Code

MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves target values to arbitrary importable callables without an allow list and passes $ expressions to Python eval. Attackers can publish a malicious bundle with crafted configuration...

CVE-2026-61667

DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, DataManagementSystem/Service/FileCatalogHandler.py checkDataset forwards an authenticated caller-controlled datasets value to DatasetManager.py checkDataset, where...

CVE-2026-61667

DIRAC , a distributed computing framework, is vulnerable to remote code execution in the FileCatalog DatasetManager component. The checkDataset function in FileCatalogHandler.py forwards a caller-controlled datasets value to DatasetManager.py, where datasetName is interpolated into an FC_MetaData...