https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:41:13 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-318816 EUVD-2026-318816 https://cve.radiocsirt.org/vuln/euvd-2026-318816 https://cve.radiocsirt.org/vuln/fkie_cve-2011-10026 <p>Spreecommerce versions prior to 0.50.x contain a remote command execution vulnerability in the API&#39;s search functionality. Improper input sanitation allows attackers to inject arbitrary shell commands via the search[instance_eval] parameter, which is dynamically invoked using Ruby’s send method. This flaw enables unauthenticated attackers to execute commands on the server.</p> <p>Spreecommerce versions prior to 0.50.x contain a remote command execution vulnerability in the API&#39;s search functionality. Improper input sanitation allows attackers to inject arbitrary shell commands via the search[instance_eval] parameter, which is dynamically invoked using Ruby’s send method. This flaw enables unauthenticated attackers to execute commands on the server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-10026 https://cve.radiocsirt.org/vuln/ghsa-x485-rhg3-cqr4 <p><strong>Affected:</strong> RubyGems: spree, RubyGems: rd_searchlogic</p> <p>Spreecommerce versions prior to 0.50.x contain a remote command execution vulnerability in the API&#39;s search functionality. Improper input sanitation allows attackers to inject arbitrary shell commands via the search[instance_eval] parameter, which is dynamically invoked using Ruby’s send method. This flaw enables unauthenticated attackers to execute commands on the server.</p> <p><strong>Affected:</strong> RubyGems: spree, RubyGems: rd_searchlogic</p> <p>Spreecommerce versions prior to 0.50.x contain a remote command execution vulnerability in the API&#39;s search functionality. Improper input sanitation allows attackers to inject arbitrary shell commands via the search[instance_eval] parameter, which is dynamically invoked using Ruby’s send method. This flaw enables unauthenticated attackers to execute commands on the server.</p> https://cve.radiocsirt.org/vuln/ghsa-x485-rhg3-cqr4