2683 matches found
Remote Code Execution (RCE)
m2m-supervisor is vulnerable to remote code execution RCE. A malicious user can inject and execute arbitrary code due to the lack of sanitization of user input before executing the eval function...
Sandbox Breakout
Overview Affected versions of safe-eval are vulnerable to a sandbox escape. By accessing object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox. Proof of Concept: This code accesses the process object and calls .exit var safeEv...
Command Execution Through Collection Name
summit is vulnerable to command execution. There is an unsafe eval in summit which allows an attacker to execute arbitrary commands through a malicious collection name. This only happens when using the PouchDB driver...
Remote Code Execution (RCE)
MathJS is vulnerable to remote code execution RCE attacks. These attacks are possible through the eval function...
Remote Code Execution (RCE)
MathJS is vulnerable to remote code execution RCE attacks. These attacks are possible through the eval function...
Remote Code Execution (RCE) Through Eval
heist is vulnerable to remote code execution RCE attacks. The vulnerability exists as the eval code for strings leads to Kernel.eval, and allows string interpolation to happen. This can eventually lead to a sandbox escape and remote code execution. The following code illustrates the issue RCE...
CVE-2017-5359
EasyCom SQL iPlug allows remote attackers to cause a denial of service via the D$EVAL parameter to the default URI...
CVE-2017-5359
Affected product: EasyCom SQL iPlug. Vulnerability: Denial of Service via the D$EVAL parameter to the default URI, allowing remote attackers to exhaust the service. The issue is demonstrated by public PoCs/exploits targeting the 7078 port and sending oversized payloads, as reported across multipl...
seacms search.php code execution vulnerability
function parseIf$content if strpos$content,'if:'=== false return $content; else $labelRule = buildregx"if:.? .? end if","is"; $labelRule2="elseif"; $labelRule3="else"; pregmatchall$labelRule,$content,$iar; $arlen=count$iar0; $elseIfFlag=false; for$m=0;$mparseStrIf$strIf; $strThen=$iar2$m;...
Remote Code Execution (RCE)
airflow is vulnerable to remote code execution RCE . It can happen because it passes user-controllable data as the default parameters to the python eval function which directly executes the parameters. Therefore any users who can create or edit charts can trigger the attack in airflow server...
CVE-2016-4311
Cross-site request forgery CSRF vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for requests that process XACML requests via an entitlement/eval-policy-submit.jsp request...
CVE-2016-4311
Cross-site request forgery CSRF vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for requests that process XACML requests via an entitlement/eval-policy-submit.jsp request...
CVE-2016-6175
Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header...
UBUNTU-CVE-2016-6175
Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header...
CVE-2016-6175
Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header...
DEBIAN-CVE-2016-6175
Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header...
CVE-2016-6175
The vulnerability CVE-2016-6175 affects php-gettext up to version 1.0.12, where eval injection in the plural forms header allows remote attackers to execute arbitrary PHP code. Exploitation is evidenced by an in-the-wild exploit (Exploit-DB entry) and multiple security feeds. The issue is caused ...
PT-2017-2446 · Ruby +1 · Ruby +1
Name of the Vulnerable Software and Affected Versions: Ruby affected versions not specified Description: The issue is related to a type confusion in the cancel eval method of Ruby's TclTkIp class. This occurs when an attacker passes a different type of object than a String as the retval argument,...
Non-Exploitable Security Issues
Invalid Code The following code was found in the XOOPS project. User input is saved in the variable $filter and then used in a call to eval - a security nightmare. image.php 301 302 303 $filter = isset$GETfilter ? $GETfilter : false; $destinationimage = imagecreatetruecolor$tnwidth, $tnheight;...
