CVE-2026-111935 NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis

NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing...

CVE-2026-111935 NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis

NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing...

EUVD-2026-104316

NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceUrl paths. Attackers with write access to the victim's sync target can plant absolute paths or file:// URLs, causing...

CVE-2026-111935

The software NoteGen through version 0.38.3 is vulnerable to an external control of file path (CWE-73) during chat image analysis. The root cause is the use of unvalidated synced sourceUrl paths , which allows an attacker with write access to the victim's sync target to plant absolute paths or fi...

CVE-2025-51868

CVE-2025-51868 Vulnerability description Dippyis a popular website to chat with millions of proactive AI characters. Dippy allows users to chat with characters based on LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its chat component. An attacker can exploit this IDOR to...

islechat

isle.chat A ssh powered chat server with public and private invite-only channels Each channel has an owner who can change its banner and invite users anyone can join if its public Demo it with ssh [email protected] This project is very new right now so don't rely on it for anything critical...

CVE-2026-36227

CVE-2026-36227: Easy Chat Server 3.1 UserName Path Traversal PoC This repository contains a benign proof of concept for CVE-2026-36227, a path traversal issue in Easy Chat Server 3.1 user registration handling. This repository is for authorized security research and local reproduction only. Do no...

CVE-2020-9758

CVE-2020-9758 Description An issue was discovered in chat.php in LiveZilla Live Chat 8.0.1.3 Helpdesk. A blind JavaScript injection lies in the name parameter. Triggering this can fetch the username and passwords of the helpdesk employees in the URI. This leads to a privilege escalation, from...

CVE-2025-51865

CVE-2025-51865 Vulnerability description Ai2 is a Seattle based non-profit AI research institute. Ai2 provide a playground web application to chat with their LLM, which is vulnerable to Insecure Direct Object Reference IDOR in its chat component. An attacker can exploit this IDOR to tamper other...

CVE-2025-45960

CVE-2025-45960 - tawk.to Live chat - 1.6.1 - Cross-Site Scripting XSS Vulnerability Confirmed on 1.6.1 older versions likely affected Description: Found that the web application stores and displays user-supplied input without proper input validation or encoding. This leading to a malicious code...

njutils

njutils ./njclient.py 192.168.56.101 5552 -k "You won't find keylogs here" -u "5k1d d357r0y3r" -p "m41nfr4m3-3000" -f "TRACKING LOCATION - PREPARING DRONE STRIKE" -o "Mac OSX 9.9" Use njclient.py -K option to open your l33t ascii art upon successfully connecting. Example: ./njclient.py...

NoEyes

NoEyes 🔒 Secure Terminal Chat End-to-end encrypted group chat, private messages, and file transfer in your terminal. The server is a blind forwarder: it cannot read your messages, does not know your username, does not know the room you are in, and cannot link any two messages to the same person,...

PT-2026-117373

A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function get lib module of the file python/mlc chat/chat module.py. The manipulation of the argument model lib results in code injection. The attack may be launched remotely. Th...

PT-2026-117224

A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function get class from dynamic module of the file examples/chat gradio no merge.py of the component Adapter Config. The manipulation of the argument base model name...

torchat

TorChat - Anonymous P2P Chat Secure, private, and anonymous peer-to-peer chat over the Tor network. What is TorChat? its a lightweight, privacy-first messaging tool that lets you communicate directly with others over the Tor network—without any central servers. It's designed for those who care...

pisiguard

PISIGuard Protect your personal and sensitive info when you chat with AI PISIGuard : P ersonally I dentifiable & S ensitive I nformation Guard PISIGuard demo. sensitive data is caught, masked and restored right in the browser I built PISIGuard because I've been horrified at how much personal &...

punchline

punchline End-to-end encrypted peer-to-peer chat over UDP. No accounts, no central server relaying/storing messages, no middleman. Just two peers, a direct connection, and Noise protocol encryption. https://github.com/user-attachments/assets/939e96d3-45e3-4484-9a27-28c3a0457b05 Table of Contents...

pmotadeee

🧠 FLATLINE - Consciousness Injection Protocol WARNING: This is not a game. It's a cognitive interface for reality hacking. 🎮 HOW TO PLAY Basic Gameplay 1. Download consciousness modules CSV files from this repository 2. Inject directly into AI interfaces as file uploads 3. Experience accelerated...

ssh-chatter

SSH-Chatter: TUI Bulletin Board System in C ssh [email protected] General BBS Software SSH-Chatter has started from a C reimplementation of the Go ssh-chat server. It mirrors/extends the original behaviour while using modern C patterns and a small, testable core. The server listens for...

ghidra-copilot

Ghidra Copilot AI-assisted companion for Ghidra. It embeds a chat panel that can answer questions about your current program, suggest next steps, and run small analysis tools directly from the conversation. What It Does Chat inside Ghidra that stays in context with the open program. Tool calls fo...