LotusCMS 3.0 - Remote Code Execution

LotusCMS 3.0 is susceptible to remote code execution via the Router function. This is done by embedding PHP code in the 'page' parameter, which will be passed to a eval call and allow remote code execution. id: CVE-2011-0518 info: name: LotusCMS 3.0 - Remote Code Execution author: pikpikcu...

MaxSite CMS <=109.1 - Remote Code Execution

MaxSite CMS through 109.1 allows unauthenticated remote attackers to execute arbitrary code via the MarkItUp editor preview AJAX endpoint, preview-ajax.php. The endpoint insufficiently authenticates the request, failing to ensure the user is logged in, and processes the attacker's input via unsaf...

vBulletin 6.x - Remote Code Execution

vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contain an eval injection vulnerability caused by insufficiently restrictive regex filtering in vB5TemplateRuntime::runMaths, letting unauthenticated remote attackers execute arbitrary PHP code via the pagenavpagenumber parameter in ajax/render...

PrestaShop - SQL Injection to Eval Injection

PrestaShop versions from 1.6.0.10 and before 1.7.8.7 contain an SQL injection caused by unsanitized user input, letting attackers chain the vulnerability to call PHP's Eval function, exploit requires attacker to send malicious input. id: CVE-2022-31181 info: name: PrestaShop - SQL Injection to Ev...

phpunit-brute

phpunit-brute 用于尝试多个路径以实现 PHPunit RCE（CVE-2017-9841）的工具，并将找到的路径记录到目录下的 found.txt 中。 它使用以下路径列表：https://raw.githubusercontent.com/random-robbie/bruteforce-lists/master/phpunit.txt 如果你有不在列表中的路径，请提交 PR usage: phpunit-brute.py -h -u URL -p PROXY phpunit-brute.py: error: the following arguments are...

EUVD-2026-26838

Langflow: Prompt injection in Langflow Smart Transform can lead to code execution...

Php-unit-CVE-2017-9841

phpunit 远程代码执行漏洞（CVE-2017-9841） composer是php包管理工具，使用composer安装扩展包将会在当前目录创建一个vendor文件夹，并将所有文件放在其中。通常这个目录需要放在web目录外，使用户不能直接访问。 phpunit是php中的单元测试工具，其4.8.19 4.8.27和5.0.10 5.6.2版本的vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php文件有如下代码： eval'?'.filegetcontents'php://input'; 如果该文件被用户直接访问到，将造成远程代码执行漏洞...

Ultimate-CVE-2026-61511

CVE-2026-61511 – Proof of Concept Educational and defensive Proof of Concept PoC for validating exposure to the vBulletin vulnerability CVE-2026-61511 – Unauthenticated Remote Code Execution. Contact Telegram: https://t.me/thecodeb0ss Overview This repository provides a defensive detection and...

CVE-2026-88393

WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. The data parameter is base64-decoded and passed directly into the string2array function in app/Module/Base.php, which executes eval"$array = $data;" whenever the decoded string starts...

Reproduce-CVE-2024-21513

复现 CVE-2024-21513 概述 本项目演示了 langchain-experimental 包中的漏洞 CVE-2024-21513，该漏洞影响版本 =0.0.15 且 0.0.21。由于对检索到的所有值使用了 eval，VectorSQLDatabaseChain 组件在从数据库检索值时允许任意代码执行。 复现漏洞的工作流程 该应用程序允许你通过与电影相关的 SQL 数据库（包含 ID、标题、导演、年份、评分）进行对话。 使用 langchain 的 SQLDatabase 工具连接到 PostgreSQL 数据库。 利用 OpenAI 的 GPT 模型生成 SQL 查询。 ...

CVE-2017-9841

phpunit-shell ⭐ 一个简单的 Python3 脚本，用于利用 CVE-2017-9841。 漏洞利用 - CVE-2017-9841 ❗ 简单脚本，利用 PHPUnit 4.8.28 之前版本和 5.6.3 之前 5.x 版本中存在的远程代码执行漏洞。向目标发送带有用户输入系统命令的 POST 请求。 https://vulners.com/cve/CVE-2017-9841。 先决条件 ✔ python3 Python3 的 requests 模块和 bs4 模块。可以通过以下命令安装： pip3 install requests bs4 用法 ℹ 在确认目标运行着...

CVE-2026-105315 django-haystack more_like_this Template Tag elasticsearch_backend.py _to_python eval injection

A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function topython of the file haystack/backends/elasticsearchbackend.py of the component morelikethis Template Tag Handler. Such manipulation of the argument resultclass leads to improper neutralization of directives i...

CVE-2026-105315

A vulnerability exists in django-haystack versions up to 3.3.0 within the more_like_this Template Tag Handler. Specifically, the _to_python function in haystack/backends/elasticsearch_backend.py is susceptible to eval injection (CWE-95, CWE-94) because manipulation of the result_class argument le...

CVE-2026-105315 django-haystack more_like_this Template Tag elasticsearch_backend.py _to_python eval injection

A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function topython of the file haystack/backends/elasticsearchbackend.py of the component morelikethis Template Tag Handler. Such manipulation of the argument resultclass leads to improper neutralization of directives i...

majordomo-CVE-2026-27174-poc

majordomo-CVE-2026-27174-poc Una prueba de concepto que explota una ejecución remota de código no autenticada a través de la consola PHP del panel de administración en MajorDomo Major Domestic Module. Vulnerabilidad El panel de administración de MajorDoMo expone una consola de evaluación PHP a...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first gain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw resides within...

Malicious code in keccka (RubyGems)

RubyGems runs this gem's native extension script ext/keccka/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minutes and...

ROOT-APP-NPM-CVE-2025-12735 CVE-2025-12735 in expr-eval - Patched by Root

Root has patched CVE-2025-12735 in the expr-eval package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-13204 CVE-2025-13204 in expr-eval - Patched by Root

Root has patched CVE-2025-13204 in the expr-eval package for Root:npm. Multiple fixed versions available...

Malicious code in crypti-toolbox (RubyGems)

RubyGems runs this gem's native extension script ext/crypti-toolbox/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30...