CVE-2022-36432

CVE-2022-36432 在 Amasty Blog Pro for Magento 2 的 Preview（预览）功能中存在跨站脚本（XSS）漏洞 描述 Amasty Blog Pro 2.10.3 插件（适用于 Magento 2）中的 Preview（预览）功能不安全地使用了 eval。攻击者可以通过操纵生成的预览应用程序响应，对管理面板用户执行跨站脚本攻击。 该漏洞存在于 blog/view/base/web/js/adminhtml/preview.js 文件中。 在参考资料中，你可以找到 Magento 2 中类似的已修复问题。 受影响版本 2.10.5 建议 将...

CVE-2025-54322-exploit

CVE-2025-54322: XSpeeder SXZOS 预认证远程代码执行 RCE 利用工具 这是一个针对 CVE-2025-54322 的专业漏洞验证工具 PoC。该漏洞是 XSpeeder SXZOS 固件中存在的一个严重的预认证远程代码执行漏洞，最初由 pwn.ai 的自治 AI 智能体独立发现并披露。 🔍 漏洞概述 CVE 编号 : CVE-2025-54322 CVSS 评分 : 10.0 严重 受影响厂商 : XSpeeder 受影响产品 : SXZOS 固件 SD-WAN / 边缘路由器 漏洞类型 : 对用户输入不安全地使用 eval 函数 权限要求 : 无 预认证...

dejavu

DejaVu Este contenedor ejecuta una aplicación web que analiza imágenes y devuelve sus metadatos usando exiftool. Los usuarios envían a la aplicación una URL de una imagen y la aplicación la recupera, la analiza y devuelve los resultados. La versión de exiftool utilizada por la aplicación es...

CVE-2024-53924

CVE-2024-53924 描述：Pycel 截至 1.0b30 版本，在处理不可信电子表格时，可通过精心构造的单元格公式（例如以 =IFA1=200, eval"import'os'.system 开头的公式）执行代码。 作者：Adham Elmosalamy @aelmo 披露日期：2024 年 11 月 23 日 链接：https://nvd.nist.gov/vuln/detail/CVE-2024-53924 摘要 Pycel 是一个用于处理 Excel 工作表的 Python 库，其功能包括对 Excel 公式进行符号安全求值。该库存在一个代码执行漏洞：通过特制的 Exce...

PT-2026-82209

Name of the Vulnerable Software and Affected Versions SENAITE.CORE versions 2.0.0 through 2.6.0 Description An unauthenticated remote code execution issue exists in the SENAITE JSON API due to a chain of missing authorization and unsafe evaluation of input. The state-changing routes in...

Astra Linux – Vulnerability in node-thenify

This affects the thenify package before version 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this value is passed to the eval function without any sanitization...

GHSA-X2RJ-828P-HX9M Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsing

Summary Xinference used Python's unsafe eval function when parsing Llama3 tool-call output generated by a large language model. Because the model output can be influenced by attacker-controlled prompts sent to the chat completion API, a remote attacker can craft prompts that cause the model to...

Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsing

Summary Xinference used Python's unsafe eval function when parsing Llama3 tool-call output generated by a large language model. Because the model output can be influenced by attacker-controlled prompts sent to the chat completion API, a remote attacker can craft prompts that cause the model to...

CVE-2026-61539 Xinference: Remote code execution via unsafe `eval()` in Llama3 tool-call parsing

Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference passes attacker-influenced Llama3 tool-call output to eval in xinference/model/llm/toolparsers/llama3toolparser.py and xinference/model/llm/utils.py. Requests to...

CVE-2026-61539

Xinference (an inference API for open-source, speech, and multimodal models) versions 2.5.0 and earlier are vulnerable to remote code execution via unsafe use of Python's eval() in Llama3 tool-call parsing. An unauthenticated remote attacker can craft a prompt sent to /v1/chat/completions with a ...

CVE-2026-61539 Xinference: Remote code execution via unsafe `eval()` in Llama3 tool-call parsing

Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference passes attacker-influenced Llama3 tool-call output to eval in xinference/model/llm/toolparsers/llama3toolparser.py and xinference/model/llm/utils.py. Requests to...

Oracle Linux 8 : perl-DBI:1.641 (ELSA-2026-52772)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-52772 advisory. - Fix unsafe string eval in DBI::Profile CVE-2026-14380 Resolves: RHEL-211151 - Fix heap overflow when preparsing SQL statements with excessive...

CVE-2025-31114

Fooocus is an image generating software. In versions 2.5.5 and prior, the Fooocus web UI is vulnerable to remote code execution due to the unsafe use of eval when processing metadata JSON. An attacker with access to the Fooocus web UI may be able to execute arbitrary code on the instance. As of...

CVE-2025-29296

H3C devices listed (BE18000 V200R007, NX400 V100R015, NX30 Pro V100R0011, R3010 V100R009, NX15 V100R017, R1510 V100R016, NE36 Pro V100R002) expose multiple command injection flaws in the /api/esps handler. Vulnerable interfaces include esps.dhcpd.vlan (getlist, delete), esps.filter.url (add, modi...

Oracle Linux 10 : perl-DBI (ELSA-2026-49514)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-49514 advisory. - Fix CVE-2026-14380: unsafe string eval in DBI::Profile - Fix CVE-2026-14739: set a hard limit of 99999 on '?' placeholders Tenable has extracted th...

perl-DBI security update

1.643-9.3 - Fix unsafe string eval in DBI::Profile CVE-2026-14380 - Resolves: RHEL-211149 1.643-9.2 - Set a hard limit of 99999 on '?' placeholders CVE-2026-14739 - Resolves: RHEL-193306...

CVE-2026-47391 PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution

PraisonAI is a multi-agent teams system. Prior to version 4.6.40, PraisonAI's first-party A2A server example exposes an unauthenticated A2A JSON-RPC endpoint and registers a calculateexpression tool implemented with Python eval. The example also binds to 0.0.0.0. A remote unauthenticated attacker...

CVE-2025-30007

HestiaCP prior to 1.9.5 is affected by an authenticated OS command injection via DNS record management. The vulnerability stems from insufficient input validation in is_dns_record_format_valid() and unsafe eval-based parsing in update_domain_zone(), which can allow a low-privilege authenticated u...

PT-2026-57246

Name of the Vulnerable Software and Affected Versions HestiaCP versions prior to 1.9.5 Description An authenticated OS command injection allows low-privilege users to execute arbitrary commands as root. The issue stems from insufficient input validation in the is dns record format valid function...

CVE-2026-14158

The Widget Logic Visual plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.52 via the widgetlogicvisualcheckvisibility function. This is due to missing capability check and nonce verification on the widget-logic-update-conditional-tags AJAX action...