latest greps...

dangerous command execution functions (C)
(system|popen)\s?\(
dangerous function code execution (PHP)
dl\s?\(
dangerous function code execution (PHP)
register_tick_function\s?\(
dangerous function code execution (PHP)
register_shutdown_function\s?\(
dangerous function command execution (PHP)
^.*\`.*\`.*$
dangerous function command execution (PHP)
expect_popen\s?\(
ruby on rails arbitrary render path (Ruby)
render\s*(\(|\s)\s*params\s*\[(?!\s*:?['"]?(id|action|controller))
xss multiple sinks (PHP)
(echo(\s*\()?|(print(_r)?|exit|die|printf|vprintf|trigger_error|user_error|odbc_result_all|ovrimos_result_all|ifx_htmltbl_result)\s*\()\s*[^;]*\$_(GET|POST|REQUEST|SERVER|COOKIE)
sql injection (ColdFusion)
cfx_ingres .*\"\s*update .* set .*\'?#(form|url)\.
sql injection (ColdFusion)
cfx_ingres .*\"\s*insert into .*\'?#(form|url)\.
sql injection (ColdFusion)
cfx_ingres .*\"\s*delete .*from .*\'?#(form|url)\.
sql injection (ColdFusion)
cfx_ingres .*\"\s*select .*from .*\'?#(form|url)\.
local file inclusion (JSP)
<jsp:include[^>]*request\.
sql injection (ASP)
\.Execute\(.*\"\s*\&
sql injection (ASP)
CommandText\s*=\s*.*\"\s*\&