Lucene search
+L

1204 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 6:59 a.m.•10 views

CVE-2018-20988

The wpgform plugin before 0.94 for WordPress has eval injection in the CAPTCHA calculation...

7.5CVSS7.4AI score0.01377EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/22 4:28 a.m.•20 views

CVE-2019-14746

A issue was discovered in KuaiFanCMS 5.0. It allows eval injection by placing PHP code in the install.php dbname parameter and then making a config.php request...

9.8CVSS7.4AI score0.01212EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:44 a.m.•13 views

CVE-2012-5932

Eval injection vulnerability in the ldapagnteval function in ldapagnt.dll in unifid.exe in NetIQ Privileged User Manager 2.3.x before 2.3.1 HF2 allows remote attackers to execute arbitrary Perl code via a crafted application/x-amf request...

10CVSS7.9AI score0.6275EPSS
SaveExploits4References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:28 a.m.•17 views

CVE-2011-4932

Eval injection vulnerability in ipcms/modules/standard/contentmanagement/actions.php in ImpressPages CMS 1.0.12 and possibly other versons before 1.0.13 allows remote attackers to execute arbitrary code via the cmgroup parameter...

7.5CVSS8.2AI score0.03928EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 12:26 a.m.•21 views

CVE-2012-1625

Eval injection vulnerability in the fillpdfformexportdecode function in fillpdf.admin.inc in the Fill PDF module 6.x-1.x before 6.x-1.16 and 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with administer PDFs privileges to execute arbitrary PHP code via unspecified vectors...

6CVSS7.8AI score0.01067EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/21 8:21 p.m.•12 views

CVE-2009-2946

Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages...

9.3CVSS8AI score0.02882EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/21 7:34 p.m.•15 views

CVE-2005-2837

Multiple eval injection vulnerabilities in PlainBlack Software WebGUI before 6.7.3 allow remote attackers to execute arbitrary Perl code via 1 Help.pm, 2 International.pm, or 3 WebGUI.pm...

7.5CVSS8.3AI score0.01691EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/10 12:20 a.m.•32 views

CVE-2025-26845

An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the configuration file can use this to execute a command executed by the user running the backup.pl script...

9.8CVSS7.5AI score0.00483EPSS
SaveExploits0References1
OSV
OSV
•added 2025/05/08 5:16 p.m.•10 views

DEBIAN-CVE-2025-26845

An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the configuration file can use this to execute a command executed by the user running the backup.pl script...

9.8CVSS5.6AI score0.00483EPSS
SaveExploits0References1
NVD
NVD
•added 2025/05/08 5:16 p.m.•51 views

CVE-2025-26845

An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the configuration file can use this to execute a command executed by the user running the backup.pl script...

9.8CVSS0.00483EPSS
SaveExploits0References2
OSV
OSV
•added 2025/05/08 5:16 p.m.•14 views

CVE-2025-26845

An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the configuration file can use this to execute a command executed by the user running the backup.pl script...

9.8CVSS7.3AI score
SaveExploits0References2
OSV
OSV
•added 2025/05/08 5:16 p.m.•14 views

UBUNTU-CVE-2025-26845

An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the configuration file can use this to execute a command executed by the user running the backup.pl script...

9.8CVSS5.9AI score0.00483EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/05/08 12:00 a.m.•36 views

CVE-2025-26845

An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the configuration file can use this to execute a command executed by the user running the backup.pl script...

0.00483EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/05/08 12:00 a.m.•7 views

CVE-2025-26845

An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the configuration file can use this to execute a command executed by the user running the backup.pl script...

9.8AI score0.00483EPSS
SaveExploits0References2
CVE
CVE
•added 2025/05/08 12:00 a.m.•88 views

CVE-2025-26845

CVE-2025-26845 describes an Eval Injection vulnerability in Znuny up to version 7.1.3. A user with write access to the configuration file can cause code execution via the command that runs the backup.pl script, effectively allowing escalation to the user running that script. The primary affected ...

9.8CVSS7.1AI score0.00483EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/08 12:00 a.m.•1 views

CVE-2025-26845: Improper Control of Generation of Code

An Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the configuration file can use this to execute a command executed by the user running the backup.pl script...

9.8CVSS8.4AI score0.00483EPSS
SaveExploits0References1
OSV
OSV
•added 2025/04/03 2:06 p.m.•18 views

BIT-DOLIBARR-2022-40871

Dolibarr ERP & CRM =15.0.3 is vulnerable to Eval injection. By default, any administrator can be added to the installation page of dolibarr, and if successfully added, malicious code can be inserted into the database and then execute it by eval...

9.8CVSS7.4AI score0.33371EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2025/03/20 12:32 p.m.•20 views

Composio Eval Injection Vulnerability

In composiohq/composio version 0.4.3, the mathematicalcalculator endpoint uses the unsafe eval function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval function...

9.8CVSS7.4AI score0.01214EPSS
SaveExploits1References5Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2025/03/19 12:00 a.m.•9 views

VulnCheck KEV: CVE-2025-24893

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to SolrSearch. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduc...

9.8CVSS8.3AI score0.99864EPSS
SaveIn wildExploits52References628
Tenable Nessus
Tenable Nessus
•added 2025/03/03 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2011-1760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to conduct eval injection attacks and gain privileges via shell metacharacters in the -e...

7.2CVSS5.5AI score0.01367EPSS
SaveExploits2References2
Rows per page
Query Builder