Fallos del tipo CWE-95

224 resultados

Injeção em Código Avaliado Dinamicamente (Eval Injection)

Fraqueza onde entrada do usuário é passada diretamente para funções que executam código dinamicamente (como eval(), exec() ou similar), sem validação ou sanitização prévia. Um atacante injeta comandos maliciosos que são interpretados e executados com os mesmos privilégios da aplicação, resultando em execução remota de código.

Ejemplo

Um aplicativo recebe uma expressão matemática do usuário via URL (ex: ?calc=2+2) e executa eval(request.param('calc')) para retornar o resultado. Um atacante envia ?calc=import('os').system('rm -rf /') e consegue executar comandos no servidor.

Cómo mitigar

Nunca use eval(), exec() ou equivalentes com entrada do usuário. Se precisa avaliar expressões, use parsers seguros ou bibliotecas de sandboxing. Valide e escape rigorosamente qualquer dado dinâmico; melhor ainda: redesenhe para evitar código dinâmico completamente.

CVE-2025-26845CRITICALAn Eval Injection issue was discovered in Znuny through 7.1.3. A user with write access to the configuration file can use this to execute a EPSS 0.5%CVE-2026-14380HIGHDBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced ProfileEPSS 0.5%CVE-2026-28505HIGHTautulli: RCE via eval() sandbox bypass using lambda nested scope to escape co_names whitelist checkEPSS 0.5%CVE-2026-55415HIGHdatamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statementsEPSS 0.5%CVE-2011-10033CRITICALWordPress Plugin is-human <= v1.4.2 Eval Injection RCEEPSS 0.5%CVE-2026-4851CRITICALGRID::Machine versions through 0.127 for Perl allows arbitrary code execution via unsafe deserializationEPSS 0.5%CVE-2026-44643CRITICALAngular Expressions - Remote Code Execution using filtersEPSS 0.5%CVE-2026-23885MEDIUMAlchemyCMS has Authenticated Remote Code Execution (RCE) via eval injection in ResourcesHelperEPSS 0.5%CVE-2026-72904CRITICALFirecrawl: Arbitrary file read via JSON Schema $ref expansionEPSS 0.5%CVE-2024-32649MEDIUMvyper performs double eval of the argument of sqrtEPSS 0.5%CVE-2024-32647MEDIUMvyper performs double eval of raw_args in create_from_blueprintEPSS 0.5%CVE-2026-111391CRITICALSGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper FilterEPSS 0.5%CVE-2025-12140CRITICALRCE in Wirtualna UczelniaEPSS 0.4%CVE-2025-15551MEDIUMLAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845NEPSS 0.4%CVE-2026-48962HIGHIO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output globEPSS 0.4%CVE-2026-108263CRITICALAstron Agent: Unsandboxed code-node leads to cross-tenant RCEEPSS 0.4%CVE-2025-71361HIGHpicklescan - Remote Code Execution via Undetected idlelib.calltip.Calltip.fetch_tipEPSS 0.4%CVE-2025-47271MEDIUMOZI-Project/ozi-publish Code Injection vulnerabilityEPSS 0.4%CVE-2026-55094HIGHTaskcluster: Unauthenticated remote code execution in `web-server` via GraphQL `filter` argument (sift `$where`)EPSS 0.4%CVE-2026-120499HIGHh5io before 0.2.6 Arbitrary Code Execution via read_hdf5EPSS 0.4%