Threats Tagged 'cwe-95'

A command injection vulnerability in the Rancher Manager cluster before 2.14.2 import endpoint /v3/import/{token}_{clusterId}.yaml through unsanitized YAML parameters could allow remote attackers to break out of an image, and execute e.g. malicious containers.

Markdown Preview Enhanced 0.8.x with crossnote engine 0.9.28 contains a code injection vulnerability in the WaveDrom rendering pipeline that allows attackers to execute arbitrary JavaScript by embedding malicious content in a wavedrom fenced code block within a crafted Markdown document. Attackers can exploit the unsanitized passing of wavedrom block content to window.eval() in the VS Code webview context to abuse the extension's message passing and invoke arbitrary file writes on the local filesystem.

In Teltonika Networks RUTOS devices, running versions 7.22 through 7.23.2 and TSWOS devices running versions 1.09 through 1.09.1, due to unsafe calls to an eval function in rpc-profile, a vulnerability exists where a lower privileged user could perform command injection as the root user.

CVE-2026-48962 is a high-severity vulnerability in the PMQS IO::Compress Perl module before version 2.220. It allows an attacker to execute arbitrary Perl code via a specially crafted output glob string in File::GlobMapper. This occurs because the output glob is wrapped in double quotes and evaluated with Perl's eval function without proper sanitization, enabling code injection. The vulnerability can lead to arbitrary code execution with the privileges of the calling process.