EUVD-2025-6884

Malicious code in bioql PyPI...

EUVD-2024-19201

Malicious code in bioql PyPI...

EUVD-2024-0107

Malicious code in bioql PyPI...

EUVD-2024-54798

Malicious code in bioql PyPI...

EUVD-2022-7275

Malicious code in bioql PyPI...

EUVD-2022-6206

Malicious code in bioql PyPI...

EUVD-2024-43982

Malicious code in bioql PyPI...

EUVD-2025-6967

Malicious code in bioql PyPI...

EUVD-2024-37876

Malicious code in bioql PyPI...

EUVD-2023-26800

Malicious code in bioql PyPI...

The vulnerability of the eval() function in Totolink A3002R router microprogramming software allows a hacker to perform cross-site scripting attacks.

The vulnerability of the eval function in Totolink A3002R router microprogramming software relates to the failure to eliminate instructions from the dynamically executed code. Exploiting this vulnerability could allow a remote attacker to perform domain--site attacks...

TOTOLINK A3002R eval function command injection vulnerability

The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. TOTOLINK A3002R suffers from a command injection vulnerability that stems from the presence of command...

CVE-2025-55585

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an eval injection vulnerability via the eval function...

CVE-2025-55585: Improper Neutralization of Directives in Dynamically Evaluated Code

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an eval injection vulnerability via the eval function...

TOTOLINK A3002R 安全漏洞

The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. TOTOLINK A3002R suffers from a command injection vulnerability that stems from the presence of command...

CVE-2013-10051 InstantCMS <= 1.6 Remote PHP Code Execution

A remote PHP code execution vulnerability exists in InstantCMS version 1.6 and earlier due to unsafe use of eval within the search view handler. Specifically, user-supplied input passed via the look parameter is concatenated into a PHP expression and executed without proper sanitation. A remote...

CVE-2025-51472

Code Injection in AgentTemplate.evalagentconfig in TransformerOptimus SuperAGI 0.0.14 allows remote attackers to execute arbitrary Python code via malicious values in agent template configurations such as the goal, constraints, or instruction field, which are evaluated using eval without validati...

CVE-2024-41148

A code injection vulnerability has been discovered in the Robot Operating System ROS 'rostopic' command-line tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability lies in the 'hz' verb, which reports the publishing rate of a topic and accepts a user-provided Python...

CVE-2024-39289

A code execution vulnerability has been discovered in the Robot Operating System ROS 'rosparam' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability stems from the use of the eval function to process unsanitized, user-supplied parameter values via special converters fo...

UBUNTU-CVE-2025-3753

A code execution vulnerability has been identified in the Robot Operating System ROS 'rosbag' tool, affecting ROS distributions Noetic Ninjemys and earlier. The vulnerability arises from the use of the eval function to process unsanitized, user-supplied input in the 'rosbag filter' command. This...