CVE-2022-36432

CVE-2022-36432 在 Amasty Blog Pro for Magento 2 的 Preview（预览）功能中存在跨站脚本（XSS）漏洞 描述 Amasty Blog Pro 2.10.3 插件（适用于 Magento 2）中的 Preview（预览）功能不安全地使用了 eval。攻击者可以通过操纵生成的预览应用程序响应，对管理面板用户执行跨站脚本攻击。 该漏洞存在于 blog/view/base/web/js/adminhtml/preview.js 文件中。 在参考资料中，你可以找到 Magento 2 中类似的已修复问题。 受影响版本 2.10.5 建议 将...

dejavu

DejaVu...

CVE-2024-53924

CVE-2024-53924 説明: Pycel 1.0b30 以前では、信頼できないスプレッドシートを操作する際、セル内の巧妙に細工された数式（=IFA1=200, eval"import'os'.system で始まるものなど）を介してコード実行が可能です。 著者: Adham Elmosalamy @aelmo 公開日: 2024年11月23日 リンク: https://nvd.nist.gov/vuln/detail/CVE-2024-53924 概要 Pycel...

CVE-2025-54322-exploit

CVE-2025-54322: XSpeeder SXZOS 事前認証 RCE エクスプロイト CVE-2025-54322 のプロフェッショナルな Proof-of-Concept PoC エクスプロイトです。これは、XSpeeder SXZOS ファームウェアにおける重大な事前認証リモートコード実行脆弱性です。この脆弱性は、pwn.ai の自律型AIエージェントによって発見・公開されました。 🔍 脆弱性概要 | - CVE ID : CVE-2025-54322 | - CVSS Score : 10.0 重大 | - 影響を受けるベンダー : XSpeeder | - 影響を受ける...

EUVD-2026-80061

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in ddnswanlistshow.cgi caused by unsafe eval handling of DDNS data. Attackers can inject malicious script through the DDNS configuration path, leading to persistent execution when the affected page is viewed...

Astra Linux – Vulnerability in node-thenify

This affects the thenify package before version 3.3.1. The name argument provided to the package can be controlled by users without any sanitization, and this value is passed to the eval function without any sanitization...

Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsing

SummaryXinference used Python's unsafe eval function when parsing Llama3 tool-call output generated by a large language model. Because the model output can be influenced by attacker-controlled prompts sent to the chat completion API, a remote attacker can craft prompts that cause the model to...

PYSEC-2026-3946 Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsing

Summary Xinference used Python's unsafe eval function when parsing Llama3 tool-call output generated by a large language model. Because the model output can be influenced by attacker-controlled prompts sent to the chat completion API, a remote attacker can craft prompts that cause the model to...

PT-2026-82209

Name of the Vulnerable Software and Affected Versions SENAITE.CORE versions 2.0.0 through 2.6.0 Description An unauthenticated remote code execution issue exists in the SENAITE JSON API due to a chain of missing authorization and unsafe evaluation of input. The state-changing routes in...

GHSA-X2RJ-828P-HX9M Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsing

Summary Xinference used Python's unsafe eval function when parsing Llama3 tool-call output generated by a large language model. Because the model output can be influenced by attacker-controlled prompts sent to the chat completion API, a remote attacker can craft prompts that cause the model to...

Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsing

Summary Xinference used Python's unsafe eval function when parsing Llama3 tool-call output generated by a large language model. Because the model output can be influenced by attacker-controlled prompts sent to the chat completion API, a remote attacker can craft prompts that cause the model to...

CVE-2026-61539 Xinference: Remote code execution via unsafe `eval()` in Llama3 tool-call parsing

Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference passes attacker-influenced Llama3 tool-call output to eval in xinference/model/llm/toolparsers/llama3toolparser.py and xinference/model/llm/utils.py. Requests to...

CVE-2026-61539 Xinference: Remote code execution via unsafe `eval()` in Llama3 tool-call parsing

Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference passes attacker-influenced Llama3 tool-call output to eval in xinference/model/llm/toolparsers/llama3toolparser.py and xinference/model/llm/utils.py. Requests to...

CVE-2026-61539

Xinference (an inference API for open-source, speech, and multimodal models) versions 2.5.0 and earlier are vulnerable to remote code execution via unsafe use of Python's eval() in Llama3 tool-call parsing. An unauthenticated remote attacker can craft a prompt sent to /v1/chat/completions with a ...

CVE-2026-61539 Xinference: Remote code execution via unsafe `eval()` in Llama3 tool-call parsing

Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference passes attacker-influenced Llama3 tool-call output to eval in xinference/model/llm/toolparsers/llama3toolparser.py and xinference/model/llm/utils.py. Requests to...

Oracle Linux 8 : perl-DBI:1.641 (ELSA-2026-52772)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-52772 advisory. - Fix unsafe string eval in DBI::Profile CVE-2026-14380 Resolves: RHEL-211151 - Fix heap overflow when preparsing SQL statements with excessive...

CVE-2025-31114

Fooocus is an image generating software. In versions 2.5.5 and prior, the Fooocus web UI is vulnerable to remote code execution due to the unsafe use of eval when processing metadata JSON. An attacker with access to the Fooocus web UI may be able to execute arbitrary code on the instance. As of...

CVE-2025-29296

Several H3C network devices, including the Magic BE18000 V200R007 , NX400 V100R015 , Magic NX30 Pro V100R0011 , Magic R3010 V100R009 , Magic NX15 V100R017 , Magic R1510 V100R016 , NE36 Pro V100R002 , and MC102G HM1A0V200R010 , are vulnerable to multiple command injection flaws in the /api/esps re...

perl-DBI security update

1.643-9.3 - Fix unsafe string eval in DBI::Profile CVE-2026-14380 - Resolves: RHEL-211149 1.643-9.2 - Set a hard limit of 99999 on '?' placeholders CVE-2026-14739 - Resolves: RHEL-193306...

Oracle Linux 10 : perl-DBI (ELSA-2026-49514)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-49514 advisory. - Fix CVE-2026-14380: unsafe string eval in DBI::Profile - Fix CVE-2026-14739: set a hard limit of 99999 on '?' placeholders Tenable has extracted th...