CVE-2020-15778

Write up for CVE id CVE-2020-15778. Discoverd by : Chinmay Pandya Email address : [email protected] Linkedin : www.linkedin.com/in/chinmay-pandya Vulnerability title: scp in OpenSSH 8.3p1 allows eval injection. Product: Openssh Affected Component: SCP Vulnerable version: Fixed version: - CVE...

CVE-2025-0868

Penetration Testing Project Report: Exploiting CVE-2025-0868 DocsGPT RCE via JSON Eval 1. Introduction A critical Remote Code Execution RCE flaw CVE-2025-0868 was disclosed on February 20, 2025, in the open-source DocsGPT library, caused by unsafe use of eval when parsing JSON payloads. Key...

Eaton-UPS-Companion-Exploit

Overview The Eaton UPS Companion software checks for an update every single week over an insecure HTTP connection and evals the content of whatever is at the update URL. This allows an attacker to craft a JavaScript function which uses the low-level OS operations that already exist in the backend...

vBulletin 6.x - Remote Code Execution

vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contain an eval injection vulnerability caused by insufficiently restrictive regex filtering in vB5TemplateRuntime::runMaths, letting unauthenticated remote attackers execute arbitrary PHP code via the pagenavpagenumber parameter in ajax/render...

PrestaShop - SQL Injection to Eval Injection

PrestaShop versions from 1.6.0.10 and before 1.7.8.7 contain an SQL injection caused by unsanitized user input, letting attackers chain the vulnerability to call PHP's Eval function, exploit requires attacker to send malicious input. id: CVE-2022-31181 info: name: PrestaShop - SQL Injection to Ev...

CVE-2026-69662 Toptech TMS7 and TopHAT Eval Injection

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions...

CVE-2026-69662

The Toptech TMS7 and TopHAT applications are vulnerable to an eval injection flaw due to the use of unsafe functions . These functions allow for the execution of inline scripts and string evaluation functions . While specific versions are not detailed in the provided text, a security strengthenin...

CVE-2023-43364-Searchor-RCE-Exploit

CVE-2023-43364 – Exploit RCE de Searchor PoC Ejecución Remota de Código RCE mediante uso inseguro de eval en Searchor --test Ejecutar comando personalizado Ejecutar cualquier comando en el servidor objetivo: python3 CVE-2023-43364.py -a "whoami" Ejemplos: python3 CVE-2023-43364.py -a "TF=$mktemp...

CVE-2023-47253

CVE-2023-47253 CVE-2023-47253 | Qualitor povoaVoComArray$REQUEST; if inarray$REQUEST'nmalias', array'dtiniciomesatual', 'dtfimmesatual', 'dtiniciomespassado', Proof of Concept POC Just access the URL with your PHP code in "gridValoresPopHidden" parameter. Researches...

CVE-2026-48962

Resumen Una vulnerabilidad de inyección en eval en File::GlobMapper::getFiles permite a cualquier atacante que pueda controlar el argumento fileglob de salida pasado a IO::Compress::Gzip::gzip, IO::Compress::Zip::zip, o cualquier función relacionada, ejecutar código Perl arbitrario en el contexto...

CVE-2023-47253

CVE-2023-47253 | Qualitor povoaVoComArray$REQUEST; if inarray$REQUEST'nmalias', array'dtiniciomesatual', 'dtfimmesatual', 'dtiniciomespassado', Prueba de Concepto PoC Simplemente accede a la URL con tu código PHP en el parámetro "gridValoresPopHidden"...

proofpoint-CVE-2023-0090

Acerca de Investigador de seguridad: ly1g3, ly1g3attuta.io Huella GPG: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Resumen: Ejecución Remota de Código - RCE sin autenticación CVE: CVE-2023-0090 Cronología: Descubierto - ly1g3 Reportado - ly1g3 Corregido...

perl_spreadsheet_excel_rce_poc

Vulnerabilidad de seguridad en ParseExcel TL;DR: RCE a partir de la lógica en el análisis de cadenas de formato. Explicación breve sobre el exploit La causa raíz de la explotación proviene de llamar a eval sobre una entrada de usuario no validada en Utility.pm...

CVE-2021-27928-POC

CVE-2021-27928 POC Descripción Se descubrió un problema de ejecución remota de código en MariaDB 10.2 anterior a 10.2.37, 10.3 anterior a 10.3.28, 10.4 anterior a 10.4.18 y 10.5 anterior a 10.5.9; Percona Server hasta 2021-03-03; y el parche wsrep hasta 2021-03-03 para MySQL. Una ruta de búsqueda...

CVE-2023-43364-Exploit-CVE

CVE-2023-43364-Exploit-CVE This is a python script to exploit Searchor 2.4.0 - the eval function was implemented insecurely and can be exploited for RCE. This machine relies on busybox being installed, as I wrote this for the Busqueda machine on HackTheBox. Just replace the payload with another...

Ultimate-CVE-2026-61511

CVE-2026-61511 – Prueba de concepto Prueba de concepto PoC educativa y defensiva para validar la exposición a la vulnerabilidad de vBulletin CVE-2026-61511 – Ejecución remota de código no autenticada. Contacto Telegram: https://t.me/thecodeb0ss Resumen Este repositorio proporciona una prueba de...

Reproduce-CVE-2024-21513

Reproduce-CVE-2024-21513 Overview This project demonstrates the vulnerability CVE-2024-21513 in the langchain-experimental package, specifically in versions =0.0.15 and 0.0.21. The vulnerability allows arbitrary code execution via the VectorSQLDatabaseChain component when retrieving values from t...

sk-cve-2026-26030-lab

CVE-2026-26030 — Semantic Kernel filter eval RCE lab A self-contained lab reproducing CVE-2026-26030 : prompt-injectable remote code execution via the in-memory vector store search filter in Microsoft Semantic Kernel Python, Ethical lab only. Isolated in dedicated virtualenvs; payloads are harmle...

CVE-2025-50881

CVE-2025-50881: Remote Code Execution in API Use it Flow via moniteur.php Identifier: CVE-2025-50881 Affected Product: API Use it Flow Version 8.2.0 Rev 15851, Version 9.2.0 Rev 18093 Editor: https://www.tenorsolutions.com formerly https://api-sas.fr/ Affected Components: flow/admin/moniteur.php...

CVE-2026-9147-uproot-rce

CVE-2026-9147: inyección de código en uproot mediante metadatos TStreamerInfo Gravedad: Alta, CVSS 4.0 8.5 , CVSS 3.1 7.8 asignada por VulnCheck, la CNA Vector v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vector v3.1: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Afectados...