Fallos del tipo CWE-95

224 resultados

Injeção em Código Avaliado Dinamicamente (Eval Injection)

Fraqueza onde entrada do usuário é passada diretamente para funções que executam código dinamicamente (como eval(), exec() ou similar), sem validação ou sanitização prévia. Um atacante injeta comandos maliciosos que são interpretados e executados com os mesmos privilégios da aplicação, resultando em execução remota de código.

Ejemplo

Um aplicativo recebe uma expressão matemática do usuário via URL (ex: ?calc=2+2) e executa eval(request.param('calc')) para retornar o resultado. Um atacante envia ?calc=import('os').system('rm -rf /') e consegue executar comandos no servidor.

Cómo mitigar

Nunca use eval(), exec() ou equivalentes com entrada do usuário. Se precisa avaliar expressões, use parsers seguros ou bibliotecas de sandboxing. Valide e escape rigorosamente qualquer dado dinâmico; melhor ainda: redesenhe para evitar código dinâmico completamente.

CVE-2025-43388LOWAn injection issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.1. An app may be able to access sensitive uEPSS 0.2%CVE-2026-78136HIGHchirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in _clean_tmode in drivers/kenwood_itm.py.EPSS 0.2%CVE-2026-73231HIGHFaker: helpers.fake exploitable into arbritary code executionEPSS 0.2%CVE-2024-39289HIGHUnsafe use of eval() method in rosparam toolEPSS 0.2%CVE-2024-39835HIGHUnsafe use of eval() method in roslaunch toolEPSS 0.2%CVE-2026-52858HIGHVim: Arbitrary Code Execution via Python Omni-CompletionEPSS 0.2%CVE-2026-34399HIGHFreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw PageEPSS 0.2%CVE-2026-73248HIGHcalibre: Bypass of Python template restrictions via nested `template()` leading to RCEEPSS 0.2%CVE-2026-101861LOWLangflow Code Execution via eval() in Component Input SchemaEPSS 0.2%CVE-2026-78497HIGHJQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string evalEPSS 0.2%CVE-2026-120859HIGHPyMoDAQ before 5.3.10 Arbitrary Code Execution via Crafted HDF5, Dock Layout, and XML Settings FilesEPSS 0.2%CVE-2026-69662LOWToptech TMS7 and TopHAT Eval InjectionEPSS 0.2%CVE-2026-100842HIGHMONAI through 1.6.0 _get_fake_spatial_shape eval() Sandbox Bypass via Attribute ChainsEPSS 0.2%CVE-2025-49598MEDIUMconda-forge-ci-setup Allows Arbitrary Code Execution via Insecure Version ParsingEPSS 0.2%CVE-2026-39423MEDIUMStored XSS via Eval Injection in EchartsRander ComponentEPSS 0.2%CVE-2026-65141HIGHNVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might EPSS 0.2%CVE-2024-42002HIGHUnsafe use of eval() method in ros2 topic hz toolEPSS 0.2%CVE-2026-11422HIGHMarkdown Preview Enhanced 0.8.x Code Injection via WaveDrom RenderingEPSS 0.2%CVE-2026-65954HIGHPHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey()EPSS 0.2%CVE-2026-42079HIGHPPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in ScopeEPSS 0.1%