latest greps...

unsafe serialization (Python)
yaml.load\s?\(
unsafe serialization (Python)
pickle.loads\s?\(|pickle.load\s?\(|pickle.Unpickler\s?\(|cPickle.loads\s?\(|cPickle.load\s?\(|cPickle.Unpickler\s?\(|marshal.load\s?\(|marshal.loads
eval, ruby (Ruby)
eval(\s*\(|\s+)
xss, jquery, javascript (ERB)
\.(html|before|after|append|prepend|appendTo|prependTo)\s*\(
xss, jquery, javascript (HTML)
\.(html|before|after|append|prepend|appendTo|prependTo)\s*\(
xss, jquery, javascript (Javascript)
\.(html|before|after|append|prepend|appendTo|prependTo)\s*\(
dangerous command execution functions (C)
(system|popen)\s?\(
dangerous function code execution (PHP)
dl\s?\(
dangerous function code execution (PHP)
register_tick_function\s?\(
dangerous function code execution (PHP)
register_shutdown_function\s?\(
dangerous function command execution (PHP)
^.*\`.*\`.*$
dangerous function command execution (PHP)
expect_popen\s?\(
ruby on rails arbitrary render path (Ruby)
render\s*(\(|\s)\s*params\s*\[(?!\s*:?['"]?(id|action|controller))
xss multiple sinks (PHP)
(echo(\s*\()?|(print(_r)?|exit|die|printf|vprintf|trigger_error|user_error|odbc_result_all|ovrimos_result_all|ifx_htmltbl_result)\s*\()\s*[^;]*\$_(GET|POST|REQUEST|SERVER|COOKIE)
sql injection (ColdFusion)
cfx_ingres .*\"\s*update .* set .*\'?#(form|url)\.