sink register.
1,153 exact model facts. Select a row to inspect access paths, confidence, corroboration, and available editorial guidance.
SymbolEnvironmentKindAccess path
fgetsc / stdlibbuffer-writeArgument[0]fgetsc / stdlibbuffer-sizeArgument[1]freadc / stdlibbuffer-writeArgument[0]freadc / stdlibbuffer-sizeArgument[1]freadc / stdlibbuffer-sizeArgument[2]preadc / stdlibbuffer-writeArgument[1]preadc / stdlibbuffer-sizeArgument[2]readc / stdlibbuffer-writeArgument[1]readc / stdlibbuffer-sizeArgument[2]__copy_from_user_inatomicc / stdlibbuffer-writeArgument[0]__copy_from_user_inatomicc / stdlibbuffer-sizeArgument[2]__copy_from_userc / stdlibbuffer-writeArgument[0]__copy_from_userc / stdlibbuffer-sizeArgument[2]__memcpy_fromioc / stdlibbuffer-writeArgument[0]__memcpy_fromioc / stdlibbuffer-sizeArgument[2]_copy_from_userc / stdlibbuffer-writeArgument[0]_copy_from_userc / stdlibbuffer-sizeArgument[2]copy_from_user_nofaultc / stdlibbuffer-writeArgument[0]copy_from_user_nofaultc / stdlibbuffer-sizeArgument[2]copy_from_userc / stdlibbuffer-writeArgument[0]copy_from_userc / stdlibbuffer-sizeArgument[2]devm_kcallocc / stdliballoc-sizeArgument[1]devm_kcallocc / stdliballoc-sizeArgument[2]devm_kmalloc_arrayc / stdliballoc-sizeArgument[1]devm_kmalloc_arrayc / stdliballoc-sizeArgument[2]devm_kmallocc / stdliballoc-sizeArgument[1]devm_kzallocc / stdliballoc-sizeArgument[1]kcallocc / stdliballoc-sizeArgument[0]kcallocc / stdliballoc-sizeArgument[1]kmalloc_arrayc / stdliballoc-sizeArgument[0]kmalloc_arrayc / stdliballoc-sizeArgument[1]kmalloc_nodec / stdliballoc-sizeArgument[0]kmallocc / stdliballoc-sizeArgument[0]kmemdup_nulc / stdliballoc-sizeArgument[1]kmemdupc / stdliballoc-sizeArgument[1]kreallocc / stdliballoc-sizeArgument[1]kvcallocc / stdliballoc-sizeArgument[0]kvcallocc / stdliballoc-sizeArgument[1]kvmalloc_arrayc / stdliballoc-sizeArgument[0]kvmalloc_arrayc / stdliballoc-sizeArgument[1]kvmalloc_nodec / stdliballoc-sizeArgument[0]kvmallocc / stdliballoc-sizeArgument[0]kvmemdupc / stdliballoc-sizeArgument[1]kvreallocc / stdliballoc-sizeArgument[1]kvzallocc / stdliballoc-sizeArgument[0]kzalloc_nodec / stdliballoc-sizeArgument[0]kzallocc / stdliballoc-sizeArgument[0]memcpy_fromioc / stdlibbuffer-writeArgument[0]memcpy_fromioc / stdlibbuffer-sizeArgument[2]memdup_user_nulc / stdliballoc-sizeArgument[1]memdup_userc / stdliballoc-sizeArgument[1]vmalloc_userc / stdliballoc-sizeArgument[0]vmallocc / stdliballoc-sizeArgument[0]vmemdup_userc / stdliballoc-sizeArgument[1]vzallocc / stdliballoc-sizeArgument[0]ldap_search_extc / stdlibldap-injectionArgument[3]ldap_search_ext_sc / stdlibldap-injectionArgument[3]ldap_search_sc / stdlibldap-injectionArgument[3]PQexecc / stdlibsql-injectionArgument[1]PQexecParamsc / stdlibsql-injectionArgument[1]PQpreparec / stdlibsql-injectionArgument[2]xmlXPathCompilec / stdlibxpath-injectionArgument[0]xmlXPathEvalc / stdlibxpath-injectionArgument[0]xmlXPathEvalExpressionc / stdlibxpath-injectionArgument[0]mysql_queryc / stdlibsql-injectionArgument[1]mysql_real_queryc / stdlibsql-injectionArgument[1]recvc / stdlibbuffer-writeArgument[1]recvc / stdlibbuffer-sizeArgument[2]recvfromc / stdlibbuffer-writeArgument[1]recvfromc / stdlibbuffer-sizeArgument[2]DES_ecb_encryptc / stdlibweak-cryptoArgument[0]DES_set_keyc / stdlibweak-cryptoArgument[0]EVP_bf_cbcc / stdlibweak-cryptoReturnValueEVP_des_cbcc / stdlibweak-cryptoReturnValueEVP_des_ecbc / stdlibweak-cryptoReturnValueEVP_md4c / stdlibweak-cryptoReturnValueEVP_md5c / stdlibweak-cryptoReturnValueEVP_rc2_cbcc / stdlibweak-cryptoReturnValueEVP_rc4c / stdlibweak-cryptoReturnValueEVP_sha1c / stdlibweak-cryptoReturnValueMD4c / stdlibweak-cryptoArgument[0]MD5c / stdlibweak-cryptoArgument[0]RC4c / stdlibweak-cryptoArgument[2]SHA1c / stdlibweak-cryptoArgument[0]SSLv2_methodc / stdlibinsecure-tlsReturnValueSSLv3_client_methodc / stdlibinsecure-tlsReturnValueSSLv3_methodc / stdlibinsecure-tlsReturnValueTLSv1_methodc / stdlibinsecure-tlsReturnValuepcre_compilec / stdlibredosArgument[0]new_arrayc / stdliballoc-sizeArgument[0]realloc_arrayc / stdliballoc-sizeArgument[1]sqlite3_execc / stdlibsql-injectionArgument[1]sqlite3_get_tablec / stdlibsql-injectionArgument[1]sqlite3_preparec / stdlibsql-injectionArgument[1]sqlite3_prepare_v2c / stdlibsql-injectionArgument[1]accessc / stdlibpath-traversalArgument[0]aligned_allocc / stdliballoc-sizeArgument[1]allocac / stdliballoc-sizeArgument[0]asprintfc / stdlibformat-stringArgument[1]bcopyc / stdlibbuffer-writeArgument[1]bcopyc / stdlibbuffer-sizeArgument[2]bzeroc / stdlibbuffer-sizeArgument[1]callocc / stdliballoc-sizeArgument[0]callocc / stdliballoc-sizeArgument[1]canonicalize_file_namec / stdlibpath-traversalArgument[0]chdirc / stdlibpath-traversalArgument[0]chmodc / stdlibpath-traversalArgument[0]chownc / stdlibpath-traversalArgument[0]chrootc / stdlibpath-traversalArgument[0]creatc / stdlibpath-traversalArgument[0]cryptc / stdlibweak-cryptoArgument[0]crypt_rc / stdlibweak-cryptoArgument[0]dlmopenc / stdlibcode-injectionArgument[1]dlopenc / stdlibcode-injectionArgument[0]dprintfc / stdlibformat-stringArgument[1]errc / stdlibformat-stringArgument[1]errxc / stdlibformat-stringArgument[1]execlc / stdlibcommand-injectionArgument[0]execlec / stdlibcommand-injectionArgument[0]execlpc / stdlibcommand-injectionArgument[0]execvc / stdlibcommand-injectionArgument[0]execvec / stdlibcommand-injectionArgument[0]execveatc / stdlibcommand-injectionArgument[1]execvpc / stdlibcommand-injectionArgument[0]execvpec / stdlibcommand-injectionArgument[0]faccessatc / stdlibpath-traversalArgument[1]fchmodatc / stdlibpath-traversalArgument[1]fchownatc / stdlibpath-traversalArgument[1]fexecvec / stdlibcommand-injectionArgument[0]fopenc / stdlibpath-traversalArgument[0]fprintfc / stdlibformat-stringArgument[1]freopenc / stdlibpath-traversalArgument[0]fscanfc / stdlibbuffer-writeArgument[2]fstatatc / stdlibpath-traversalArgument[1]futimesatc / stdlibpath-traversalArgument[1]fwprintfc / stdlibformat-stringArgument[1]fwscanfc / stdlibbuffer-writeArgument[2]getpwc / stdlibbuffer-writeArgument[1]getsc / stdlibbuffer-writeArgument[0]getwdc / stdlibbuffer-writeArgument[0]globc / stdlibpath-traversalArgument[0]lchownc / stdlibpath-traversalArgument[0]linkc / stdlibpath-traversalArgument[1]linkatc / stdlibpath-traversalArgument[1]linkatc / stdlibpath-traversalArgument[3]lstatc / stdlibpath-traversalArgument[0]lstrcatc / stdlibbuffer-writeArgument[0]lstrcatnc / stdlibbuffer-writeArgument[0]lstrcpyc / stdlibbuffer-writeArgument[0]lstrcpync / stdlibbuffer-writeArgument[0]lstrncatc / stdlibbuffer-writeArgument[0]mallocc / stdliballoc-sizeArgument[0]memalignc / stdliballoc-sizeArgument[1]memccpyc / stdlibbuffer-writeArgument[0]memccpyc / stdlibbuffer-sizeArgument[2]memcpyc / stdlibbuffer-writeArgument[0]memcpyc / stdlibbuffer-sizeArgument[2]memmovec / stdlibbuffer-writeArgument[0]memmovec / stdlibbuffer-sizeArgument[2]mempcpyc / stdlibbuffer-writeArgument[0]mempcpyc / stdlibbuffer-sizeArgument[2]memsetc / stdlibbuffer-sizeArgument[2]mkdirc / stdlibpath-traversalArgument[0]mkdiratc / stdlibpath-traversalArgument[1]mkfifoc / stdlibpath-traversalArgument[0]mknodc / stdlibpath-traversalArgument[0]mknodatc / stdlibpath-traversalArgument[1]mktempc / stdlibinsecure-temp-fileArgument[0]newfstatatc / stdlibpath-traversalArgument[1]openc / stdlibpath-traversalArgument[0]openatc / stdlibpath-traversalArgument[1]openat2c / stdlibpath-traversalArgument[1]opendirc / stdlibpath-traversalArgument[0]popenc / stdlibcommand-injectionArgument[0]posix_memalignc / stdliballoc-sizeArgument[2]posix_spawnc / stdlibcommand-injectionArgument[1]posix_spawnpc / stdlibcommand-injectionArgument[1]printfc / stdlibformat-stringArgument[0]readlinkc / stdlibpath-traversalArgument[0]readlinkatc / stdlibpath-traversalArgument[1]reallocc / stdliballoc-sizeArgument[1]reallocarrayc / stdliballoc-sizeArgument[1]reallocarrayc / stdliballoc-sizeArgument[2]realpathc / stdlibpath-traversalArgument[0]regcompc / stdlibredosArgument[1]removec / stdlibpath-traversalArgument[0]renamec / stdlibpath-traversalArgument[0]renameatc / stdlibpath-traversalArgument[1]renameatc / stdlibpath-traversalArgument[3]rmdirc / stdlibpath-traversalArgument[0]scandirc / stdlibpath-traversalArgument[0]scanfc / stdlibbuffer-writeArgument[1]seed48c / stdlibweak-cryptoArgument[0]snprintfc / stdlibbuffer-writeArgument[0]snprintfc / stdlibbuffer-sizeArgument[1]snprintfc / stdlibformat-stringArgument[2]sprintfc / stdlibbuffer-writeArgument[0]sprintfc / stdlibformat-stringArgument[1]srandc / stdlibweak-cryptoArgument[0]srand48c / stdlibweak-cryptoArgument[0]srandomc / stdlibweak-cryptoArgument[0]sscanfc / stdlibbuffer-writeArgument[2]statc / stdlibpath-traversalArgument[0]stpcpyc / stdlibbuffer-writeArgument[0]stpncpyc / stdlibbuffer-writeArgument[0]stpncpyc / stdlibbuffer-sizeArgument[2]strcaddc / stdlibbuffer-writeArgument[0]strcatc / stdlibbuffer-writeArgument[0]strccpyc / stdlibbuffer-writeArgument[0]strcpyc / stdlibbuffer-writeArgument[0]streaddc / stdlibbuffer-writeArgument[0]strecpyc / stdlibbuffer-writeArgument[0]strlcatc / stdlibbuffer-sizeArgument[2]strlcpyc / stdlibbuffer-sizeArgument[2]strncatc / stdlibbuffer-writeArgument[0]strncatc / stdlibbuffer-sizeArgument[2]strncpyc / stdlibbuffer-writeArgument[0]strncpyc / stdlibbuffer-sizeArgument[2]strtrnsc / stdlibbuffer-writeArgument[3]swprintfc / stdlibbuffer-writeArgument[0]swprintfc / stdlibbuffer-sizeArgument[1]swscanfc / stdlibbuffer-writeArgument[2]symlinkc / stdlibpath-traversalArgument[1]symlinkatc / stdlibpath-traversalArgument[2]syslogc / stdlibformat-stringArgument[1]systemc / stdlibcommand-injectionArgument[0]tempnamc / stdlibinsecure-temp-fileReturnValuetmpfilec / stdlibinsecure-temp-fileReturnValuetmpnamc / stdlibinsecure-temp-fileReturnValuetruncatec / stdlibpath-traversalArgument[0]unlinkc / stdlibpath-traversalArgument[0]unlinkatc / stdlibpath-traversalArgument[1]utimensatc / stdlibpath-traversalArgument[1]vallocc / stdliballoc-sizeArgument[0]vasprintfc / stdlibformat-stringArgument[1]vdprintfc / stdlibformat-stringArgument[1]verrc / stdlibformat-stringArgument[1]verrxc / stdlibformat-stringArgument[1]vfprintfc / stdlibformat-stringArgument[1]vfwprintfc / stdlibformat-stringArgument[1]vprintfc / stdlibformat-stringArgument[0]vsnprintfc / stdlibbuffer-writeArgument[0]vsnprintfc / stdlibbuffer-sizeArgument[1]vsnprintfc / stdlibformat-stringArgument[2]vsprintfc / stdlibbuffer-writeArgument[0]vsprintfc / stdlibformat-stringArgument[1]vswprintfc / stdlibbuffer-writeArgument[0]vswprintfc / stdlibbuffer-sizeArgument[1]vswprintfc / stdlibformat-stringArgument[2]vsyslogc / stdlibformat-stringArgument[1]vwarnc / stdlibformat-stringArgument[0]vwarnxc / stdlibformat-stringArgument[0]vwprintfc / stdlibformat-stringArgument[0]warnc / stdlibformat-stringArgument[0]warnxc / stdlibformat-stringArgument[0]wcpcpyc / stdlibbuffer-writeArgument[0]wcpncpyc / stdlibbuffer-writeArgument[0]wcpncpyc / stdlibbuffer-sizeArgument[2]wcscatc / stdlibbuffer-writeArgument[0]wcscpyc / stdlibbuffer-writeArgument[0]wcsncatc / stdlibbuffer-writeArgument[0]wcsncatc / stdlibbuffer-sizeArgument[2]wcsncpyc / stdlibbuffer-writeArgument[0]wcsncpyc / stdlibbuffer-sizeArgument[2]wordexpc / stdlibcommand-injectionArgument[0]wprintfc / stdlibformat-stringArgument[0]wscanfc / stdlibbuffer-writeArgument[1]LoadLibraryAc / stdlibcode-injectionArgument[0]trustAsResourceUrljavascript / angularxssArgument[0]trustAsHtmljavascript / angularxssArgument[0]getjavascript / axiosssrfArgument[0]postjavascript / axiosssrfArgument[0]requestjavascript / axiosssrfArgument[0]execjavascript / stdlibsql-injectionArgument[0]preparejavascript / stdlibsql-injectionArgument[0]execjavascript / child_processcommand-injectionArgument[0]execFilejavascript / child_processcommand-injectionArgument[0]execFileSyncjavascript / child_processcommand-injectionArgument[0]execSyncjavascript / child_processcommand-injectionArgument[0]forkjavascript / child_processcommand-injectionArgument[0]spawnjavascript / child_processcommand-injectionArgument[0]spawnSyncjavascript / child_processcommand-injectionArgument[0]searchjavascript / stdlibldap-injectionArgument[1]compilejavascript / coffeescriptcode-injectionArgument[0]evaljavascript / coffeescriptcode-injectionArgument[0]aggregatejavascript / stdlibnosql-injectionArgument[0]deleteManyjavascript / stdlibnosql-injectionArgument[0]deleteOnejavascript / stdlibnosql-injectionArgument[0]findjavascript / stdlibnosql-injectionArgument[0]findOnejavascript / stdlibnosql-injectionArgument[0]findOneAndUpdatejavascript / stdlibnosql-injectionArgument[0]updateManyjavascript / stdlibnosql-injectionArgument[0]updateOnejavascript / stdlibnosql-injectionArgument[0]queryjavascript / stdlibsql-injectionArgument[0]parsejavascript / cryodeserializationArgument[0]createCipherjavascript / cryptoweak-cryptoArgument[0]createDecipherjavascript / cryptoweak-cryptoArgument[0]createHashjavascript / cryptoweak-cryptoArgument[0]createHmacjavascript / cryptoweak-cryptoArgument[0]pseudoRandomBytesjavascript / cryptoweak-cryptoReturnValuewritejavascript / stdlibxssArgument[0]writelnjavascript / stdlibxssArgument[0]setAttributejavascript / stdlibxssArgument[1]innerHTMLjavascript / stdlibxssArgument[0]outerHTMLjavascript / stdlibxssArgument[0]WebSocketjavascript / stdlibssrfArgument[0]openjavascript / stdlibopen-redirectArgument[0]openjavascript / stdlibssrfArgument[1]parseFromStringjavascript / stdlibxssArgument[0]templatejavascript / dottemplate-injectionArgument[0]compilejavascript / ejstemplate-injectionArgument[0]renderjavascript / ejstemplate-injectionArgument[0]insertAdjacentHTMLjavascript / stdlibxssArgument[1]queryjavascript / stdlibsql-injectionArgument[0]compilejavascript / etatemplate-injectionArgument[0]commandjavascript / execacommand-injectionArgument[0]commandSyncjavascript / execacommand-injectionArgument[0]sendjavascript / stdlibxssArgument[0]sendfilejavascript / stdlibpath-traversalArgument[0]setjavascript / stdlibopen-redirectArgument[1]writejavascript / stdlibxssArgument[0]parsejavascript / stdlibxxeArgument[0]accessjavascript / fspath-traversalArgument[0]appendFilejavascript / fspath-traversalArgument[0]appendFileSyncjavascript / fspath-traversalArgument[0]chmodjavascript / fspath-traversalArgument[0]chownjavascript / fspath-traversalArgument[0]copyFilejavascript / fspath-traversalArgument[0]cpjavascript / fspath-traversalArgument[0]createReadStreamjavascript / fspath-traversalArgument[0]createWriteStreamjavascript / fspath-traversalArgument[0]linkjavascript / fspath-traversalArgument[1]lstatjavascript / fspath-traversalArgument[0]mkdirjavascript / fspath-traversalArgument[0]mkdirSyncjavascript / fspath-traversalArgument[0]openjavascript / fspath-traversalArgument[0]openSyncjavascript / fspath-traversalArgument[0]readdirjavascript / fspath-traversalArgument[0]readdirSyncjavascript / fspath-traversalArgument[0]readFilejavascript / fspath-traversalArgument[0]readFileSyncjavascript / fspath-traversalArgument[0]readlinkjavascript / fspath-traversalArgument[0]realpathjavascript / fspath-traversalArgument[0]renamejavascript / fspath-traversalArgument[0]renameSyncjavascript / fspath-traversalArgument[0]rmjavascript / fspath-traversalArgument[0]rmdirjavascript / fspath-traversalArgument[0]rmSyncjavascript / fspath-traversalArgument[0]symlinkjavascript / fspath-traversalArgument[1]truncatejavascript / fspath-traversalArgument[0]unlinkjavascript / fspath-traversalArgument[0]unlinkSyncjavascript / fspath-traversalArgument[0]writeFilejavascript / fspath-traversalArgument[0]writeFileSyncjavascript / fspath-traversalArgument[0]deepDeserializejavascript / funcsterdeserializationArgument[0]getjavascript / gotssrfArgument[0]postjavascript / gotssrfArgument[0]compilejavascript / handlebarstemplate-injectionArgument[0]precompilejavascript / handlebarstemplate-injectionArgument[0]compilejavascript / hogan.jstemplate-injectionArgument[0]getjavascript / httpssrfArgument[0]requestjavascript / httpssrfArgument[0]getjavascript / httpsssrfArgument[0]requestjavascript / httpsssrfArgument[0]evaljavascript / stdlibcode-injectionArgument[0]evalClosurejavascript / stdlibcode-injectionArgument[0]evalSyncjavascript / stdlibcode-injectionArgument[0]compileScriptjavascript / stdlibcode-injectionArgument[0]compileScriptSyncjavascript / stdlibcode-injectionArgument[0]appendTojavascript / stdlibxssArgument[0]insertAfterjavascript / stdlibxssArgument[0]insertBeforejavascript / stdlibxssArgument[0]parseHTMLjavascript / stdlibxssArgument[0]prependTojavascript / stdlibxssArgument[0]replaceAlljavascript / stdlibxssArgument[0]loadAlljavascript / js-yamldeserializationArgument[0]loadjavascript / js-yamldeserializationArgument[0]rawjavascript / knexsql-injectionArgument[0]parseXmljavascript / libxmljsxxeArgument[0]parseXmlStringjavascript / libxmljsxxeArgument[0]assignjavascript / stdlibopen-redirectArgument[0]replacejavascript / stdlibopen-redirectArgument[0]defaultsDeepjavascript / lodashprototype-pollutionArgument[1]mergejavascript / lodashprototype-pollutionArgument[1]mergeWithjavascript / lodashprototype-pollutionArgument[1]setjavascript / lodashprototype-pollutionArgument[1]setWithjavascript / lodashprototype-pollutionArgument[1]templatejavascript / lodashtemplate-injectionArgument[0]countDocumentsjavascript / stdlibnosql-injectionArgument[0]distinctjavascript / stdlibnosql-injectionArgument[1]mapReducejavascript / stdlibnosql-injectionArgument[0]findjavascript / stdlibnosql-injectionArgument[0]findOnejavascript / stdlibnosql-injectionArgument[0]updateOnejavascript / stdlibnosql-injectionArgument[0]wherejavascript / stdlibnosql-injectionArgument[0]renderjavascript / mustachetemplate-injectionArgument[0]getjavascript / needlessrfArgument[0]requestjavascript / needlessrfArgument[1]parsejavascript / stdlibxxeArgument[0]unserializejavascript / node-serializedeserializationArgument[0]compilejavascript / nunjuckstemplate-injectionArgument[0]renderStringjavascript / nunjuckstemplate-injectionArgument[0]executejavascript / stdlibsql-injectionArgument[0]queryjavascript / stdlibsql-injectionArgument[0]queryjavascript / stdlibsql-injectionArgument[0]computed-property-writejavascript / stdlibprototype-pollutionArgument[0]compilejavascript / pugtemplate-injectionArgument[0]renderjavascript / pugtemplate-injectionArgument[0]renderFilejavascript / pugtemplate-injectionArgument[0]createContextualFragmentjavascript / stdlibxssArgument[0]execjavascript / stdlibredosArgument[0]matchjavascript / stdlibredosReceiversearchjavascript / stdlibredosReceivertestjavascript / stdlibredosArgument[0]queryjavascript / stdlibsql-injectionArgument[0]getjavascript / requestssrfArgument[0]postjavascript / requestssrfArgument[0]downloadjavascript / stdlibpath-traversalArgument[0]locationjavascript / stdlibopen-redirectArgument[0]redirectjavascript / stdlibopen-redirectArgument[0]renderjavascript / stdlibtemplate-injectionArgument[0]sendFilejavascript / stdlibpath-traversalArgument[0]safeEvaljavascript / safe-evalcode-injectionArgument[0]sendjavascript / sendpath-traversalArgument[1]queryjavascript / sequelizesql-injectionArgument[0]deserializejavascript / serialize-to-jsdeserializationArgument[0]execjavascript / shelljscommand-injectionArgument[0]alljavascript / stdlibsql-injectionArgument[0]getjavascript / stdlibsql-injectionArgument[0]runjavascript / stdlibsql-injectionArgument[0]evaluatejavascript / static-evalcode-injectionArgument[0]afterjavascript / stdlibxssArgument[0]appendjavascript / stdlibxssArgument[0]beforejavascript / stdlibxssArgument[0]evaljavascript / stdlibcode-injectionArgument[0]$executeRawUnsafejavascript / stdlibsql-injectionArgument[0]fetchjavascript / stdlibssrfArgument[0]Functionjavascript / stdlibcode-injectionArgument[0]htmljavascript / stdlibxssArgument[0]importjavascript / stdlibcode-injectionArgument[0]matchAlljavascript / stdlibredosArgument[0]prependjavascript / stdlibxssArgument[0]$queryRawUnsafejavascript / stdlibsql-injectionArgument[0]RegExpjavascript / stdlibredosArgument[0]replaceWithjavascript / stdlibxssArgument[0]requirejavascript / stdlibcode-injectionArgument[0]getjavascript / superagentssrfArgument[0]postjavascript / superagentssrfArgument[0]templatejavascript / underscoretemplate-injectionArgument[0]fetchjavascript / undicissrfArgument[0]requestjavascript / undicissrfArgument[0]compileFunctionjavascript / vmcode-injectionArgument[0]runInContextjavascript / vmcode-injectionArgument[0]runInNewContextjavascript / vmcode-injectionArgument[0]runInThisContextjavascript / vmcode-injectionArgument[0]Scriptjavascript / vmcode-injectionArgument[0]runjavascript / stdlibcode-injectionArgument[0]runjavascript / stdlibcode-injectionArgument[0]VMScriptjavascript / vm2code-injectionArgument[0]parseStringjavascript / stdlibxxeArgument[0]selectjavascript / xpathxpath-injectionArgument[0]openpython / aiofilespath-traversalArgument[0]requestpython / aiohttpssrfArgument[1]create_subprocess_execpython / asynciocommand-injectionArgument[0]create_subprocess_execpython / asynciocommand-injectionArgument[1]create_subprocess_shellpython / asynciocode-injectionArgument[0]subprocess_execpython / asyncio.events.AbstractEventLoopcommand-injectionArgument[0]subprocess_execpython / asyncio.events.AbstractEventLoopcommand-injectionArgument[1]subprocess_shellpython / asyncio.events.AbstractEventLoopcode-injectionArgument[0]subprocess_shellpython / asyncio.events.AbstractEventLoopcommand-injectionArgument[1]create_subprocess_execpython / asyncio.subprocesscommand-injectionArgument[0]create_subprocess_execpython / asyncio.subprocesscommand-injectionArgument[1]create_subprocess_shellpython / asyncio.subprocesscode-injectionArgument[0]executepython / stdlibsql-injectionArgument[0]fetchpython / stdlibsql-injectionArgument[0]redirectpython / bottleopen-redirectArgument[0]SimpleTemplatepython / bottletemplate-injectionArgument[0]templatepython / bottletemplate-injectionArgument[0]compilepython / builtinscode-injectionArgument[0]evalpython / builtinscode-injectionArgument[0]execpython / builtinscode-injectionArgument[0]getattrpython / builtinsunsafe-reflectionArgument[1]__import__python / builtinscode-injectionArgument[0]openpython / builtinspath-traversalArgument[0]setattrpython / builtinsunsafe-reflectionArgument[1]openpython / bz2path-traversalArgument[0]PageTemplatepython / chameleontemplate-injectionArgument[0]getpython / stdlibssrfArgument[0]postpython / stdlibssrfArgument[0]requestpython / stdlibssrfArgument[0]getpython / stdlibssrfArgument[0]postpython / stdlibssrfArgument[0]requestpython / stdlibssrfArgument[0]loadpython / cloudpickledeserializationArgument[0]loadspython / cloudpickledeserializationArgument[0]compile_commandpython / codecode-injectionArgument[0]compile_commandpython / codecode-injectionArgument[1]openpython / codecspath-traversalArgument[0]pushpython / code.InteractiveConsolecode-injectionArgument[0]runcodepython / code.InteractiveInterpretercode-injectionArgument[0]runsourcepython / code.InteractiveInterpretercode-injectionArgument[0]runsourcepython / code.InteractiveInterpretercode-injectionArgument[1]compile_commandpython / codeopcode-injectionArgument[0]compile_commandpython / codeopcode-injectionArgument[1]aggregatepython / stdlibnosql-injectionArgument[0]delete_manypython / stdlibnosql-injectionArgument[0]delete_onepython / stdlibnosql-injectionArgument[0]findpython / stdlibnosql-injectionArgument[0]find_onepython / stdlibnosql-injectionArgument[0]find_one_and_updatepython / stdlibnosql-injectionArgument[0]update_manypython / stdlibnosql-injectionArgument[0]update_onepython / stdlibnosql-injectionArgument[0]readpython / stdlibpath-traversalArgument[0]searchpython / stdlibldap-injectionArgument[1]newpython / Crypto.Cipher.DES3weak-cryptoArgument[0]newpython / Crypto.Cipher.ARC2weak-cryptoArgument[0]newpython / Crypto.Cipher.ARC4weak-cryptoArgument[0]newpython / Crypto.Cipher.Blowfishweak-cryptoArgument[0]newpython / Crypto.Cipher.DESweak-cryptoArgument[0]newpython / Crypto.Cipher.XORweak-cryptoArgument[0]newpython / Cryptodome.Cipher.DES3weak-cryptoArgument[0]newpython / Cryptodome.Cipher.ARC2weak-cryptoArgument[0]newpython / Cryptodome.Cipher.ARC4weak-cryptoArgument[0]newpython / Cryptodome.Cipher.Blowfishweak-cryptoArgument[0]newpython / Cryptodome.Cipher.DESweak-cryptoArgument[0]newpython / Cryptodome.Cipher.XORweak-cryptoArgument[0]newpython / Cryptodome.Hash.MD2weak-cryptoArgument[0]newpython / Cryptodome.Hash.MD4weak-cryptoArgument[0]newpython / Cryptodome.Hash.MD5weak-cryptoArgument[0]newpython / Cryptodome.Hash.SHAweak-cryptoArgument[0]ARC4python / cryptography.hazmat.primitives.ciphers.algorithmsweak-cryptoArgument[0]Blowfishpython / cryptography.hazmat.primitives.ciphers.algorithmsweak-cryptoArgument[0]CAST5python / cryptography.hazmat.primitives.ciphers.algorithmsweak-cryptoArgument[0]IDEApython / cryptography.hazmat.primitives.ciphers.algorithmsweak-cryptoArgument[0]SEEDpython / cryptography.hazmat.primitives.ciphers.algorithmsweak-cryptoArgument[0]TripleDESpython / cryptography.hazmat.primitives.ciphers.algorithmsweak-cryptoArgument[0]newpython / Crypto.Hash.MD2weak-cryptoArgument[0]newpython / Crypto.Hash.MD4weak-cryptoArgument[0]newpython / Crypto.Hash.MD5weak-cryptoArgument[0]newpython / Crypto.Hash.SHAweak-cryptoArgument[0]executepython / stdlibsql-injectionArgument[0]executemanypython / stdlibsql-injectionArgument[0]executescriptpython / stdlibsql-injectionArgument[0]openpython / dbmpath-traversalArgument[0]loadpython / dilldeserializationArgument[0]loadspython / dilldeserializationArgument[0]Unpicklerpython / dilldeserializationArgument[0]SafeStringpython / django.utils.safestringxssArgument[0]servepython / django.views.staticpath-traversalArgument[1]executepython / django.db.backends.mysql.base.CursorWrappersql-injectionArgument[0]executemanypython / django.db.backends.mysql.base.CursorWrappersql-injectionArgument[0]executepython / django.db.backends.utils.CursorWrappersql-injectionArgument[0]executemanypython / django.db.backends.utils.CursorWrappersql-injectionArgument[0]RawSQLpython / django.db.models.expressionssql-injectionArgument[0]rawpython / django.db.models.manager.Managersql-injectionArgument[0]extrapython / django.db.models.query.QuerySetsql-injectionArgument[0]extrapython / django.db.models.query.QuerySetsql-injectionArgument[1]extrapython / django.db.models.query.QuerySetsql-injectionArgument[3]HttpResponsepython / django.http.responsexssArgument[0]HttpResponseRedirectpython / django.http.responseopen-redirectArgument[0]contentpython / django.http.response.HttpResponsexssArgument[0]redirectpython / django.shortcutsopen-redirectArgument[0]renderpython / django.shortcutspath-traversalArgument[1]renderpython / django.shortcutsxssArgument[3]Templatepython / django.templatetemplate-injectionArgument[0]Templatepython / django.template.basetemplate-injectionArgument[0]from_stringpython / django.template.engine.Enginetemplate-injectionArgument[0]format_htmlpython / django.utils.htmlxssArgument[0]format_html_joinpython / django.utils.htmlxssArgument[1]mark_safepython / django.utils.safestringxssArgument[0]executepython / stdlibsql-injectionArgument[0]runpython / stdlibcommand-injectionArgument[0]HTMLResponsepython / fastapi.responsesxssArgument[0]RedirectResponsepython / fastapi.responsesopen-redirectArgument[0]inputpython / fileinputpath-traversalArgument[0]Markuppython / flaskxssArgument[0]redirectpython / flaskopen-redirectArgument[0]render_template_stringpython / flasktemplate-injectionArgument[0]send_filepython / flaskpath-traversalArgument[0]send_from_directorypython / flaskpath-traversalArgument[1]FTPpython / ftplibssrfArgument[0]GzipFilepython / gzippath-traversalArgument[0]openpython / gzippath-traversalArgument[0]md5python / hashlibweak-cryptoArgument[0]newpython / hashlibweak-cryptoArgument[0]sha1python / hashlibweak-cryptoArgument[0]HTTPConnectionpython / http.clientssrfArgument[0]HTTPSConnectionpython / http.clientssrfArgument[0]putrequestpython / http.client.HTTPConnectionssrfArgument[1]requestpython / http.client.HTTPConnectionssrfArgument[1]set_tunnelpython / http.client.HTTPConnectionssrfArgument[0]requestpython / stdlibssrfArgument[0]deletepython / httpxssrfArgument[0]getpython / httpxssrfArgument[0]headpython / httpxssrfArgument[0]patchpython / httpxssrfArgument[0]postpython / httpxssrfArgument[0]putpython / httpxssrfArgument[0]requestpython / httpxssrfArgument[0]streampython / httpxssrfArgument[0]import_modulepython / importlibcode-injectionArgument[0]spec_from_file_locationpython / importlib.utilunsafe-reflectionArgument[1]runpython / stdlibcommand-injectionArgument[0]openpython / iopath-traversalArgument[0]from_stringpython / jinja2template-injectionArgument[0]Markuppython / jinja2xssArgument[0]Templatepython / jinja2template-injectionArgument[0]loadpython / joblibdeserializationArgument[0]decodepython / jsonpickledeserializationArgument[0]decodepython / jsonpickle.unpicklerdeserializationArgument[0]Unpicklerpython / jsonpickle.unpicklerdeserializationArgument[0]load_modelpython / keras.modelsdeserializationArgument[0]searchpython / ldapldap-injectionArgument[2]search_ext_spython / ldapldap-injectionArgument[2]search_spython / ldapldap-injectionArgument[2]getlinepython / linecachepath-traversalArgument[0]lazycachepython / linecachepath-traversalArgument[0]XPathpython / lxml.etreexpath-injectionArgument[0]fromstringpython / lxml.objectifyxxeArgument[0]parsepython / lxml.objectifyxxeArgument[0]fromstringpython / lxml.etreexxeArgument[0]parsepython / lxml.etreexxeArgument[0]xpathpython / lxml.etreexpath-injectionArgument[0]LZMAFilepython / lzmapath-traversalArgument[0]openpython / lzmapath-traversalArgument[0]Templatepython / mako.templatetemplate-injectionArgument[0]Markuppython / markupsafexssArgument[0]dumppython / marshalpath-traversalArgument[1]loadpython / marshaldeserializationArgument[0]loadspython / marshaldeserializationArgument[0]evaluatepython / numexprcode-injectionArgument[0]loadpython / numpydeserializationArgument[0]attrgetterpython / operatorunsafe-reflectionArgument[0]accesspython / ospath-traversalArgument[0]chdirpython / ospath-traversalArgument[0]chflagspython / ospath-traversalArgument[0]chmodpython / ospath-traversalArgument[0]chownpython / ospath-traversalArgument[0]chrootpython / ospath-traversalArgument[0]execlpython / oscommand-injectionArgument[0]execlpython / oscommand-injectionArgument[2]execlepython / oscommand-injectionArgument[0]execlppython / oscommand-injectionArgument[0]execlpepython / oscommand-injectionArgument[0]execvpython / oscommand-injectionArgument[0]execvpython / oscommand-injectionArgument[1]execvepython / oscommand-injectionArgument[0]execvepython / oscommand-injectionArgument[1]execvepython / oscommand-injectionArgument[2]execvppython / oscommand-injectionArgument[0]execvppython / oscommand-injectionArgument[1]execvpepython / oscommand-injectionArgument[0]execvpepython / oscommand-injectionArgument[1]execvpepython / oscommand-injectionArgument[2]fwalkpython / ospath-traversalArgument[0]lchflagspython / ospath-traversalArgument[0]lchownpython / ospath-traversalArgument[0]linkpython / ospath-traversalArgument[0]linkpython / ospath-traversalArgument[1]linkpython / ospath-traversalArgument[2]listdirpython / ospath-traversalArgument[0]makedirspython / ospath-traversalArgument[0]mkdirpython / ospath-traversalArgument[0]openpython / ospath-traversalArgument[0]popenpython / oscommand-injectionArgument[0]posix_spawnpython / oscommand-injectionArgument[0]posix_spawnppython / oscommand-injectionArgument[0]putenvpython / ospath-traversalArgument[0]putenvpython / ospath-traversalArgument[1]readlinkpython / ospath-traversalArgument[0]removepython / ospath-traversalArgument[0]removedirspython / ospath-traversalArgument[0]removexattrpython / ospath-traversalArgument[0]renamepython / ospath-traversalArgument[0]renamepython / ospath-traversalArgument[1]renamespython / ospath-traversalArgument[0]renamespython / ospath-traversalArgument[1]replacepython / ospath-traversalArgument[0]replacepython / ospath-traversalArgument[1]rmdirpython / ospath-traversalArgument[0]scandirpython / ospath-traversalArgument[0]setxattrpython / ospath-traversalArgument[0]spawnlpython / oscommand-injectionArgument[0]spawnlpython / oscommand-injectionArgument[1]spawnlpython / oscommand-injectionArgument[3]spawnlepython / oscommand-injectionArgument[0]spawnlepython / oscommand-injectionArgument[1]spawnlepython / oscommand-injectionArgument[3]spawnlppython / oscommand-injectionArgument[0]spawnlppython / oscommand-injectionArgument[1]spawnlppython / oscommand-injectionArgument[3]spawnlpepython / oscommand-injectionArgument[0]spawnlpepython / oscommand-injectionArgument[1]spawnlpepython / oscommand-injectionArgument[3]spawnvpython / oscommand-injectionArgument[0]spawnvpython / oscommand-injectionArgument[1]spawnvpython / oscommand-injectionArgument[2]spawnvepython / oscommand-injectionArgument[0]spawnvepython / oscommand-injectionArgument[1]spawnvepython / oscommand-injectionArgument[2]spawnvepython / oscommand-injectionArgument[3]spawnvppython / oscommand-injectionArgument[1]spawnvppython / oscommand-injectionArgument[2]spawnvpepython / oscommand-injectionArgument[0]spawnvpepython / oscommand-injectionArgument[1]spawnvpepython / oscommand-injectionArgument[2]startfilepython / oscommand-injectionArgument[0]symlinkpython / ospath-traversalArgument[1]systempython / oscommand-injectionArgument[0]truncatepython / ospath-traversalArgument[0]unlinkpython / ospath-traversalArgument[0]unsetenvpython / ospath-traversalArgument[0]utimepython / ospath-traversalArgument[0]walkpython / ospath-traversalArgument[0]evalpython / stdlibcode-injectionArgument[0]querypython / stdlibcode-injectionArgument[0]evalpython / pandascode-injectionArgument[0]read_picklepython / pandasdeserializationArgument[0]read_sqlpython / pandassql-injectionArgument[0]read_sql_querypython / pandassql-injectionArgument[0]exec_commandpython / stdlibcommand-injectionArgument[0]exec_commandpython / stdlibcommand-injectionArgument[0]Pathpython / pathlibpath-traversalArgument[0]mkdirpython / stdlibpath-traversalReceiveropenpython / stdlibpath-traversalReceiverread_bytespython / stdlibpath-traversalReceiverread_textpython / stdlibpath-traversalReceivertouchpython / stdlibpath-traversalReceiverunlinkpython / stdlibpath-traversalReceiverwrite_bytespython / stdlibpath-traversalReceiverwrite_textpython / stdlibpath-traversalReceiverPurePathpython / pathlibpath-traversalArgument[0]renamepython / pathlib.Pathpath-traversalArgument[0]replacepython / pathlib.Pathpath-traversalArgument[0]rglobpython / pathlib.Pathpath-traversalArgument[0]symlink_topython / pathlib.Pathpath-traversalArgument[0]execute_sqlpython / stdlibsql-injectionArgument[0]RawQuerypython / peeweesql-injectionArgument[0]runpython / pexpectcommand-injectionArgument[0]spawnpython / pexpectcommand-injectionArgument[0]loadpython / pickledeserializationArgument[0]loadspython / pickledeserializationArgument[0]Unpicklerpython / pickledeserializationArgument[0]loadpython / _pickledeserializationArgument[0]loadspython / _pickledeserializationArgument[0]requestpython / stdlibssrfArgument[1]urlopenpython / stdlibssrfArgument[1]spawnpython / ptycommand-injectionArgument[0]setoptpython / pycurl.CurlssrfArgument[1]locatepython / pydocunsafe-reflectionArgument[0]count_documentspython / stdlibnosql-injectionArgument[0]distinctpython / stdlibnosql-injectionArgument[1]map_reducepython / stdlibnosql-injectionArgument[0]replace_onepython / stdlibnosql-injectionArgument[0]extrapython / stdlibsql-injectionArgument[0]rawpython / stdlibsql-injectionArgument[0]compilepython / reredosArgument[0]findallpython / reredosArgument[0]finditerpython / reredosArgument[0]fullmatchpython / reredosArgument[0]matchpython / reredosArgument[0]searchpython / reredosArgument[0]splitpython / reredosArgument[0]subpython / reredosArgument[0]subnpython / reredosArgument[0]evalpython / stdlibcode-injectionArgument[0]compilepython / regexredosArgument[0]findallpython / regexredosArgument[0]matchpython / regexredosArgument[0]searchpython / regexredosArgument[0]subpython / regexredosArgument[0]deletepython / requestsssrfArgument[0]getpython / requestsssrfArgument[0]headpython / requestsssrfArgument[0]patchpython / requestsssrfArgument[0]postpython / requestsssrfArgument[0]putpython / requestsssrfArgument[0]requestpython / requestsssrfArgument[0]deletepython / requests.apissrfArgument[0]getpython / requests.apissrfArgument[0]headpython / requests.apissrfArgument[0]optionspython / requests.apissrfArgument[0]patchpython / requests.apissrfArgument[0]postpython / requests.apissrfArgument[0]putpython / requests.apissrfArgument[0]requestpython / requests.apissrfArgument[1]deletepython / requests.sessions.SessionssrfArgument[0]getpython / requests.sessions.SessionssrfArgument[0]headpython / requests.sessions.SessionssrfArgument[0]optionspython / requests.sessions.SessionssrfArgument[0]patchpython / requests.sessions.SessionssrfArgument[0]postpython / requests.sessions.SessionssrfArgument[0]putpython / requests.sessions.SessionssrfArgument[0]requestpython / requests.sessions.SessionssrfArgument[1]loadpython / stdlibdeserializationArgument[0]run_modulepython / runpycode-injectionArgument[0]run_pathpython / runpycode-injectionArgument[0]DbfilenameShelfpython / shelvedeserializationArgument[0]openpython / shelvedeserializationArgument[0]chownpython / shutilpath-traversalArgument[0]copypython / shutilpath-traversalArgument[0]copypython / shutilpath-traversalArgument[1]copy2python / shutilpath-traversalArgument[0]copy2python / shutilpath-traversalArgument[1]copyfilepython / shutilpath-traversalArgument[0]copyfilepython / shutilpath-traversalArgument[1]copymodepython / shutilpath-traversalArgument[0]copymodepython / shutilpath-traversalArgument[1]copystatpython / shutilpath-traversalArgument[0]copystatpython / shutilpath-traversalArgument[1]copytreepython / shutilpath-traversalArgument[0]copytreepython / shutilpath-traversalArgument[1]make_archivepython / shutilpath-traversalArgument[0]make_archivepython / shutilpath-traversalArgument[3]movepython / shutilpath-traversalArgument[0]movepython / shutilpath-traversalArgument[1]rmtreepython / shutilpath-traversalArgument[0]_RmtreeTypepython / shutilpath-traversalArgument[0]unpack_archivepython / shutilpath-traversalArgument[0]unpack_archivepython / shutilpath-traversalArgument[1]urlopenpython / six.moves.urllib.requestssrfArgument[0]urlretrievepython / six.moves.urllib.requestssrfArgument[0]SMTPpython / smtplibssrfArgument[0]create_connectionpython / socketssrfArgument[0]connectpython / _socket.socketssrfArgument[0]connect_expython / _socket.socketssrfArgument[0]exec_driver_sqlpython / stdlibsql-injectionArgument[0]executepython / stdlibsql-injectionArgument[0]textpython / sqlalchemysql-injectionArgument[0]connectpython / sqlite3path-traversalArgument[0]executepython / sqlite3.Connectionsql-injectionArgument[0]executemanypython / sqlite3.Connectionsql-injectionArgument[0]executescriptpython / sqlite3.Connectionsql-injectionArgument[0]executepython / sqlite3.Cursorsql-injectionArgument[0]executemanypython / sqlite3.Cursorsql-injectionArgument[0]executescriptpython / sqlite3.Cursorsql-injectionArgument[0]_create_unverified_contextpython / sslinsecure-tlsReturnValueFileResponsepython / starlette.responsespath-traversalArgument[0]HTMLResponsepython / starlette.responsesxssArgument[0]RedirectResponsepython / starlette.responsesopen-redirectArgument[0]callpython / subprocesscommand-injectionArgument[0]callpython / subprocesscommand-injectionArgument[1]callpython / subprocesscommand-injectionArgument[2]check_callpython / subprocesscommand-injectionArgument[0]check_callpython / subprocesscommand-injectionArgument[1]check_callpython / subprocesscommand-injectionArgument[2]check_outputpython / subprocesscommand-injectionArgument[0]check_outputpython / subprocesscommand-injectionArgument[1]check_outputpython / subprocesscommand-injectionArgument[2]getoutputpython / subprocesscommand-injectionArgument[0]getstatusoutputpython / subprocesscommand-injectionArgument[0]Popenpython / subprocesscommand-injectionArgument[0]Popenpython / subprocesscommand-injectionArgument[1]Popenpython / subprocesscommand-injectionArgument[2]runpython / subprocesscommand-injectionArgument[0]runpython / subprocesscommand-injectionArgument[1]runpython / subprocesscommand-injectionArgument[2]sympifypython / sympycode-injectionArgument[0]extractallpython / tarfilepath-traversalReceiverTarFilepython / tarfilepath-traversalArgument[0]extractpython / stdlibpath-traversalArgument[0]openpython / tarfile.TarFilepath-traversalArgument[0]Telnetpython / telnetlibssrfArgument[0]mkdtemppython / tempfilepath-traversalArgument[0]mkdtemppython / tempfilepath-traversalArgument[1]mkdtemppython / tempfilepath-traversalArgument[2]mkstemppython / tempfilepath-traversalArgument[0]mkstemppython / tempfilepath-traversalArgument[1]mkstemppython / tempfilepath-traversalArgument[2]mktemppython / tempfileinsecure-temp-fileReturnValueNamedTemporaryFilepython / tempfilepath-traversalArgument[5]NamedTemporaryFilepython / tempfilepath-traversalArgument[6]SpooledTemporaryFilepython / tempfilepath-traversalArgument[6]SpooledTemporaryFilepython / tempfilepath-traversalArgument[7]TemporaryDirectorypython / tempfilepath-traversalArgument[0]TemporaryDirectorypython / tempfilepath-traversalArgument[1]TemporaryDirectorypython / tempfilepath-traversalArgument[2]TemporaryFilepython / tempfilepath-traversalArgument[5]TemporaryFilepython / tempfilepath-traversalArgument[6]loadpython / torchdeserializationArgument[0]fetchpython / stdlibssrfArgument[0]writepython / stdlibxssArgument[0]Templatepython / tornado.templatetemplate-injectionArgument[0]Requestpython / urllib.requestssrfArgument[0]urlopenpython / urllib.requestssrfArgument[0]urlretrievepython / urllib.requestssrfArgument[0]urlretrievepython / urllib.requestpath-traversalArgument[1]openpython / urllib.request.URLopenerssrfArgument[0]open_unknownpython / urllib.request.URLopenerssrfArgument[0]retrievepython / urllib.request.URLopenerssrfArgument[0]redirectpython / werkzeug.utilsopen-redirectArgument[0]send_filepython / werkzeug.utilspath-traversalArgument[0]send_from_directorypython / werkzeug.utilspath-traversalArgument[1]findpython / stdlibxpath-injectionArgument[0]findallpython / stdlibxpath-injectionArgument[0]iterfindpython / stdlibxpath-injectionArgument[0]parseStringpython / xml.saxxxeArgument[0]parsepython / xml.dom.minidomxxeArgument[0]parseStringpython / xml.dom.minidomxxeArgument[0]parsepython / xml.dom.pulldomxxeArgument[0]parseStringpython / xml.dom.pulldomxxeArgument[0]fromstringpython / xml.etree.ElementTreexxeArgument[0]iterparsepython / xml.etree.ElementTreexxeArgument[0]parsepython / xml.etree.ElementTreexxeArgument[0]XMLpython / xml.etree.ElementTreexxeArgument[0]feedpython / xml.etree.ElementTree.XMLParserxxeArgument[0]loadspython / xmlrpc.clientxxeArgument[0]ServerProxypython / xmlrpc.clientssrfArgument[0]parsepython / xml.saxxxeArgument[0]full_loadpython / yamldeserializationArgument[0]loadpython / yamldeserializationArgument[0]load_allpython / yamldeserializationArgument[0]unsafe_loadpython / yamldeserializationArgument[0]extractallpython / zipfilepath-traversalReceiverZipFilepython / zipfilepath-traversalArgument[0]extractpython / stdlibpath-traversalArgument[0]trustAsResourceUrltypescript / angularxssArgument[0]trustAsHtmltypescript / angularxssArgument[0]gettypescript / axiosssrfArgument[0]posttypescript / axiosssrfArgument[0]requesttypescript / axiosssrfArgument[0]exectypescript / stdlibsql-injectionArgument[0]preparetypescript / stdlibsql-injectionArgument[0]exectypescript / child_processcommand-injectionArgument[0]execFiletypescript / child_processcommand-injectionArgument[0]execFileSynctypescript / child_processcommand-injectionArgument[0]execSynctypescript / child_processcommand-injectionArgument[0]forktypescript / child_processcommand-injectionArgument[0]spawntypescript / child_processcommand-injectionArgument[0]spawnSynctypescript / child_processcommand-injectionArgument[0]plainToClasstypescript / class-transformerprototype-pollutionArgument[1]plainToInstancetypescript / class-transformerprototype-pollutionArgument[1]searchtypescript / stdlibldap-injectionArgument[1]compiletypescript / coffeescriptcode-injectionArgument[0]evaltypescript / coffeescriptcode-injectionArgument[0]aggregatetypescript / stdlibnosql-injectionArgument[0]deleteManytypescript / stdlibnosql-injectionArgument[0]deleteOnetypescript / stdlibnosql-injectionArgument[0]findtypescript / stdlibnosql-injectionArgument[0]findOnetypescript / stdlibnosql-injectionArgument[0]findOneAndUpdatetypescript / stdlibnosql-injectionArgument[0]updateManytypescript / stdlibnosql-injectionArgument[0]updateOnetypescript / stdlibnosql-injectionArgument[0]querytypescript / stdlibsql-injectionArgument[0]parsetypescript / cryodeserializationArgument[0]createCiphertypescript / cryptoweak-cryptoArgument[0]createDeciphertypescript / cryptoweak-cryptoArgument[0]createHashtypescript / cryptoweak-cryptoArgument[0]createHmactypescript / cryptoweak-cryptoArgument[0]pseudoRandomBytestypescript / cryptoweak-cryptoReturnValueCommandtypescript / Denocommand-injectionArgument[0]copyFiletypescript / Denopath-traversalArgument[0]mkdirtypescript / Denopath-traversalArgument[0]opentypescript / Denopath-traversalArgument[0]readDirtypescript / Denopath-traversalArgument[0]readFiletypescript / Denopath-traversalArgument[0]readFileSynctypescript / Denopath-traversalArgument[0]readTextFiletypescript / Denopath-traversalArgument[0]readTextFileSynctypescript / Denopath-traversalArgument[0]removetypescript / Denopath-traversalArgument[0]renametypescript / Denopath-traversalArgument[0]runtypescript / Denocommand-injectionArgument[0]stattypescript / Denopath-traversalArgument[0]writeFiletypescript / Denopath-traversalArgument[0]writeTextFiletypescript / Denopath-traversalArgument[0]writetypescript / stdlibxssArgument[0]writelntypescript / stdlibxssArgument[0]setAttributetypescript / stdlibxssArgument[1]innerHTMLtypescript / stdlibxssArgument[0]outerHTMLtypescript / stdlibxssArgument[0]WebSockettypescript / stdlibssrfArgument[0]opentypescript / stdlibopen-redirectArgument[0]opentypescript / stdlibssrfArgument[1]parseFromStringtypescript / stdlibxssArgument[0]bypassSecurityTrustHtmltypescript / stdlibxssArgument[0]bypassSecurityTrustResourceUrltypescript / stdlibxssArgument[0]bypassSecurityTrustScripttypescript / stdlibxssArgument[0]bypassSecurityTrustStyletypescript / stdlibxssArgument[0]bypassSecurityTrustUrltypescript / stdlibxssArgument[0]templatetypescript / dottemplate-injectionArgument[0]rawtypescript / drizzle-ormsql-injectionArgument[0]compiletypescript / ejstemplate-injectionArgument[0]rendertypescript / ejstemplate-injectionArgument[0]insertAdjacentHTMLtypescript / stdlibxssArgument[1]querytypescript / stdlibsql-injectionArgument[0]compiletypescript / etatemplate-injectionArgument[0]commandtypescript / execacommand-injectionArgument[0]commandSynctypescript / execacommand-injectionArgument[0]sendtypescript / stdlibxssArgument[0]sendfiletypescript / stdlibpath-traversalArgument[0]settypescript / stdlibopen-redirectArgument[1]writetypescript / stdlibxssArgument[0]parsetypescript / stdlibxxeArgument[0]accesstypescript / fspath-traversalArgument[0]appendFiletypescript / fspath-traversalArgument[0]appendFileSynctypescript / fspath-traversalArgument[0]chmodtypescript / fspath-traversalArgument[0]chowntypescript / fspath-traversalArgument[0]copyFiletypescript / fspath-traversalArgument[0]cptypescript / fspath-traversalArgument[0]createReadStreamtypescript / fspath-traversalArgument[0]createWriteStreamtypescript / fspath-traversalArgument[0]linktypescript / fspath-traversalArgument[1]lstattypescript / fspath-traversalArgument[0]mkdirtypescript / fspath-traversalArgument[0]mkdirSynctypescript / fspath-traversalArgument[0]opentypescript / fspath-traversalArgument[0]openSynctypescript / fspath-traversalArgument[0]readdirtypescript / fspath-traversalArgument[0]readdirSynctypescript / fspath-traversalArgument[0]readFiletypescript / fspath-traversalArgument[0]readFileSynctypescript / fspath-traversalArgument[0]readlinktypescript / fspath-traversalArgument[0]realpathtypescript / fspath-traversalArgument[0]renametypescript / fspath-traversalArgument[0]renameSynctypescript / fspath-traversalArgument[0]rmtypescript / fspath-traversalArgument[0]rmdirtypescript / fspath-traversalArgument[0]rmSynctypescript / fspath-traversalArgument[0]symlinktypescript / fspath-traversalArgument[1]truncatetypescript / fspath-traversalArgument[0]unlinktypescript / fspath-traversalArgument[0]unlinkSynctypescript / fspath-traversalArgument[0]writeFiletypescript / fspath-traversalArgument[0]writeFileSynctypescript / fspath-traversalArgument[0]deepDeserializetypescript / funcsterdeserializationArgument[0]gettypescript / gotssrfArgument[0]posttypescript / gotssrfArgument[0]compiletypescript / handlebarstemplate-injectionArgument[0]precompiletypescript / handlebarstemplate-injectionArgument[0]compiletypescript / hogan.jstemplate-injectionArgument[0]gettypescript / httpssrfArgument[0]requesttypescript / httpssrfArgument[0]deletetypescript / stdlibssrfArgument[0]gettypescript / stdlibssrfArgument[0]jsonptypescript / stdlibssrfArgument[0]patchtypescript / stdlibssrfArgument[0]posttypescript / stdlibssrfArgument[0]puttypescript / stdlibssrfArgument[0]requesttypescript / stdlibssrfArgument[1]gettypescript / httpsssrfArgument[0]requesttypescript / httpsssrfArgument[0]evaltypescript / stdlibcode-injectionArgument[0]evalClosuretypescript / stdlibcode-injectionArgument[0]evalSynctypescript / stdlibcode-injectionArgument[0]compileScripttypescript / stdlibcode-injectionArgument[0]compileScriptSynctypescript / stdlibcode-injectionArgument[0]appendTotypescript / stdlibxssArgument[0]insertAftertypescript / stdlibxssArgument[0]insertBeforetypescript / stdlibxssArgument[0]parseHTMLtypescript / stdlibxssArgument[0]prependTotypescript / stdlibxssArgument[0]replaceAlltypescript / stdlibxssArgument[0]loadAlltypescript / js-yamldeserializationArgument[0]loadtypescript / js-yamldeserializationArgument[0]fromRawtypescript / knexsql-injectionArgument[0]havingRawtypescript / knexsql-injectionArgument[0]orderByRawtypescript / knexsql-injectionArgument[0]rawtypescript / knexsql-injectionArgument[0]whereRawtypescript / knexsql-injectionArgument[0]parseXmltypescript / libxmljsxxeArgument[0]parseXmlStringtypescript / libxmljsxxeArgument[0]assigntypescript / stdlibopen-redirectArgument[0]replacetypescript / stdlibopen-redirectArgument[0]defaultsDeeptypescript / lodashprototype-pollutionArgument[1]mergetypescript / lodashprototype-pollutionArgument[1]mergeWithtypescript / lodashprototype-pollutionArgument[1]settypescript / lodashprototype-pollutionArgument[1]setWithtypescript / lodashprototype-pollutionArgument[1]templatetypescript / lodashtemplate-injectionArgument[0]countDocumentstypescript / stdlibnosql-injectionArgument[0]distincttypescript / stdlibnosql-injectionArgument[1]mapReducetypescript / stdlibnosql-injectionArgument[0]findtypescript / stdlibnosql-injectionArgument[0]findOnetypescript / stdlibnosql-injectionArgument[0]updateOnetypescript / stdlibnosql-injectionArgument[0]wheretypescript / stdlibnosql-injectionArgument[0]rendertypescript / mustachetemplate-injectionArgument[0]gettypescript / needlessrfArgument[0]requesttypescript / needlessrfArgument[1]parsetypescript / stdlibxxeArgument[0]unserializetypescript / node-serializedeserializationArgument[0]compiletypescript / nunjuckstemplate-injectionArgument[0]renderStringtypescript / nunjuckstemplate-injectionArgument[0]executetypescript / stdlibsql-injectionArgument[0]querytypescript / stdlibsql-injectionArgument[0]querytypescript / stdlibsql-injectionArgument[0]computed-property-writetypescript / stdlibprototype-pollutionArgument[0]compiletypescript / pugtemplate-injectionArgument[0]rendertypescript / pugtemplate-injectionArgument[0]renderFiletypescript / pugtemplate-injectionArgument[0]createContextualFragmenttypescript / stdlibxssArgument[0]exectypescript / stdlibredosArgument[0]matchtypescript / stdlibredosReceiversearchtypescript / stdlibredosReceivertesttypescript / stdlibredosArgument[0]setAttributetypescript / stdlibxssArgument[2]setPropertytypescript / stdlibxssArgument[2]querytypescript / stdlibsql-injectionArgument[0]gettypescript / requestssrfArgument[0]posttypescript / requestssrfArgument[0]downloadtypescript / stdlibpath-traversalArgument[0]locationtypescript / stdlibopen-redirectArgument[0]redirecttypescript / stdlibopen-redirectArgument[0]rendertypescript / stdlibtemplate-injectionArgument[0]sendFiletypescript / stdlibpath-traversalArgument[0]navigatetypescript / stdlibopen-redirectArgument[0]navigateByUrltypescript / stdlibopen-redirectArgument[0]safeEvaltypescript / safe-evalcode-injectionArgument[0]andWheretypescript / stdlibsql-injectionArgument[0]havingtypescript / stdlibsql-injectionArgument[0]orderBytypescript / stdlibsql-injectionArgument[0]orWheretypescript / stdlibsql-injectionArgument[0]wheretypescript / stdlibsql-injectionArgument[0]sendtypescript / sendpath-traversalArgument[1]literaltypescript / sequelizesql-injectionArgument[0]querytypescript / sequelizesql-injectionArgument[0]deserializetypescript / serialize-to-jsdeserializationArgument[0]exectypescript / shelljscommand-injectionArgument[0]alltypescript / stdlibsql-injectionArgument[0]gettypescript / stdlibsql-injectionArgument[0]runtypescript / stdlibsql-injectionArgument[0]evaluatetypescript / static-evalcode-injectionArgument[0]aftertypescript / stdlibxssArgument[0]appendtypescript / stdlibxssArgument[0]beforetypescript / stdlibxssArgument[0]evaltypescript / stdlibcode-injectionArgument[0]$executeRawUnsafetypescript / stdlibsql-injectionArgument[0]fetchtypescript / stdlibssrfArgument[0]Functiontypescript / stdlibcode-injectionArgument[0]htmltypescript / stdlibxssArgument[0]importtypescript / stdlibcode-injectionArgument[0]matchAlltypescript / stdlibredosArgument[0]prependtypescript / stdlibxssArgument[0]$queryRawUnsafetypescript / stdlibsql-injectionArgument[0]RegExptypescript / stdlibredosArgument[0]replaceWithtypescript / stdlibxssArgument[0]requiretypescript / stdlibcode-injectionArgument[0]gettypescript / superagentssrfArgument[0]posttypescript / superagentssrfArgument[0]templatetypescript / underscoretemplate-injectionArgument[0]fetchtypescript / undicissrfArgument[0]requesttypescript / undicissrfArgument[0]compileFunctiontypescript / vmcode-injectionArgument[0]runInContexttypescript / vmcode-injectionArgument[0]runInNewContexttypescript / vmcode-injectionArgument[0]runInThisContexttypescript / vmcode-injectionArgument[0]Scripttypescript / vmcode-injectionArgument[0]runtypescript / stdlibcode-injectionArgument[0]runtypescript / stdlibcode-injectionArgument[0]VMScripttypescript / vm2code-injectionArgument[0]parseStringtypescript / stdlibxxeArgument[0]selecttypescript / xpathxpath-injectionArgument[0]