Eval-Injection — PoC Archivehttps://poc.intelseclab.com/tags/eval-injection/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000XSpeeder SXZOS Pre-Auth eval() Remote Code Execution (CVE-2025-54322)https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-54322-xspeeder-sxzos-preauth-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-54322-xspeeder-sxzos-preauth-rce/Critical severity (CVSS 10) — network · CVE-2025-54322. Status: Weaponized. Affects: XSpeeder SXZOS firmware (SD-WAN devices, routers, edge networking equipment). Tags: xspeeder, sxzos, sd-wan, router, firmware, python, django, eval-injection, pre-auth, rce, cwe-95.networkCriticalxspeedersxzossd-wanrouterfirmwarepythondjangoeval-injectionpre-authrcecwe-95safe-expr-eval: Mitigation Library for the expr-eval Unsafe eval() RCE (CVE-2025-12735)https://poc.intelseclab.com/pocs/misc/2026-07-06_cve-2025-12735-safe-expr-eval-mitigation/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-06_cve-2025-12735-safe-expr-eval-mitigation/Critical severity (CVSS 9.8) — misc · CVE-2025-12735. Status: Patched. Affects: expr-eval npm package (mathematical/logical expression evaluator). Tags: expr-eval, eval-injection, arbitrary-code-execution, rce, cwe-95, javascript, typescript, npm, expression-parser, mitigation-library, drop-in-replacement.miscCriticalexpr-evaleval-injectionarbitrary-code-executionrcecwe-95javascripttypescriptnpmexpression-parsermitigation-librarydrop-in-replacementpgAdmin 4 Query Tool Authenticated eval() RCE (CVE-2025-2945)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-2945-pgadmin-eval-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-2945-pgadmin-eval-rce/Critical severity (CVSS 9.9) — web · CVE-2025-2945. Status: Weaponized. Affects: pgAdmin 4 (web-based PostgreSQL administration tool). Tags: pgadmin, postgresql, rce, eval-injection, code-injection, cwe-95, python, authenticated, sqleditor.webCriticalpgadminpostgresqlrceeval-injectioncode-injectioncwe-95pythonauthenticatedsqleditorMicrosoft Semantic Kernel In-Memory Vector Store Filter eval() Sandbox Bypass RCE (CVE-2026-26030)https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-26030-semantic-kernel-eval-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-26030-semantic-kernel-eval-rce/Critical severity — misc · CVE-2026-26030. Status: Weaponized. Affects: Microsoft Semantic Kernel (Python), InMemoryCollection vector store connector. Tags: semantic-kernel, python, eval-injection, sandbox-bypass, prompt-injection, llm-agent, rce, ast-allowlist-bypass, vector-store.miscCriticalsemantic-kernelpythoneval-injectionsandbox-bypassprompt-injectionllm-agentrceast-allowlist-bypassvector-storededoc/scramble Laravel API-Doc Generator Unauthenticated eval() RCE (CVE-2026-44262)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44262-dedoc-scramble-eval-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44262-dedoc-scramble-eval-rce/Critical severity — web · CVE-2026-44262 / [GHSA-4rm2-28vj-fj39](https://github.com/advisories/GHSA-4rm2-28vj-fj39). Status: PoC. Affects: [dedoc/scramble](https://github.com/dedoc/scramble) — Laravel API documentation generator. Tags: laravel, php, dedoc-scramble, eval-injection, rce, unauthenticated, api-documentation, openapi.webCriticallaravelphpdedoc-scrambleeval-injectionrceunauthenticatedapi-documentationopenapi