Все уязвимости

Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service

Chamilo LMS: Conditional PHP execution through vendored QuickForm eval

Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into the catalog filename

Code execution through double evaluation in address replacement rules

Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitra

vBulletin < 6.2.2 Eval Injection RCE via vb5/template/runtime.php

Command injection through unsanitized YAML parameter in Rancher

XWiki Pro Macros: excerpt-include title and content injection executes code

Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt

Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server

n8n before 2.36.2 Expression Sandbox Bypass via SpreadElement

Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_for

LangChain Experimental Eval Injection vulnerability

Agno < 2.3.24 field_type Eval Injection Arbitrary Code Execution

OWASP BLT has RCE in Github Actions via untrusted Django model execution in workflow

Pagekit CMS StringStorage Template PhpEngine.php evaluate eval injection

FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection

Stored XSS via Eval Injection in EchartsRander Component

Chamilo LMS Affected by Remote Code Execution via eval() in Platform Settings

PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope

Angular Expressions - Remote Code Execution using filters

Unauthenticated Remote Code Execution

OWASP BLT: pre-commit-fix.yaml executes untrusted fork code via pull_request_target

Ultralytics FastSAM AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection

JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval

THU-MIG yoloe AutoBackend Model Loading autobackend.py eval eval injection

WeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss Endpoint

ImprintLab Medical-SAM-Adapter AutoBackend Model Loading autobackend.py session.get_modelmeta.custom_metadata_map eval injection

SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter

Dokku: Host Command Execution via eval of Unsanitized Docker Options in DOCKER_ARGS