Lucene search
K

2698 matches found

Packet Storm
Packet Storm
added 2023/07/07 12:0 a.m.327 views

DaillyTools Remote Command Execution

==================================================================================================================================== | Title : DaillyTools v1 command execution Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 64.0.2 32-bit ...

7.1AI score
Exploits0
Github Security Blog
Github Security Blog
added 2023/07/06 3:30 p.m.31 views

langchain vulnerable to arbitrary code execution

An issue in langchain allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

9.8CVSS7.8AI score0.01566EPSS
Exploits2References7Affected Software1
OSV
OSV
added 2023/07/06 3:30 p.m.1 views

GHSA-57FC-8Q82-GFP3 langchain vulnerable to arbitrary code execution

An issue in langchain allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

9.8CVSS7.6AI score0.01566EPSS
Exploits2References7
OSV
OSV
added 2023/07/06 2:15 p.m.15 views

CVE-2023-36188

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

9.8CVSS8.1AI score
Exploits0References2
NVD
NVD
added 2023/07/06 2:15 p.m.10 views

CVE-2023-36188

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

9.8CVSS9.6AI score0.01566EPSS
Exploits2References2
Prion
Prion
added 2023/07/06 2:15 p.m.18 views

Security feature bypass

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

7.5CVSS9.7AI score0.01566EPSS
Exploits2References2Affected Software1
PyPA
PyPA
added 2023/07/06 2:15 p.m.5 views

PYSEC-2023-109

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

9.8CVSS8.1AI score0.01566EPSS
Exploits2References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/06 12:0 a.m.23 views

CVE-2023-36188

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

8.1AI score0.01566EPSS
Exploits2References2
CNNVD
CNNVD
added 2023/07/06 12:0 a.m.2 views

LangChain 注入漏洞

LangChain is an application built using LLM through composability. A security vulnerability exists in LangChain version v.0.0.64, which stems from a vulnerability that allows an attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

9.8CVSS8.8AI score0.01566EPSS
Exploits2References3
Cvelist
Cvelist
added 2023/07/06 12:0 a.m.18 views

CVE-2023-36188

An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method...

9.9AI score0.01566EPSS
Exploits2References2
CVE
CVE
added 2023/07/06 12:0 a.m.75 views

CVE-2023-36188

CVE-2023-36188 affects LangChain v0.0.64, enabling remote code execution via the PALChain parameter in Python exec. The issue stems from deserialization/execution pathways that process untrusted data and can lead to arbitrary code execution. Affected product: LangChain core library (v0.0.64); imp...

9.8CVSS9.6AI score0.01566EPSS
Exploits2References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/07/06 12:0 a.m.2 views

PT-2023-25472 · Langchain · Langchain

Name of the Vulnerable Software and Affected Versions: langchain version 0.0.64 Description: The issue allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method. This enables the attacker to run malicious code, potentially leading to system compromise...

9.8CVSS9.6AI score0.01566EPSS
Exploits2References13
OSV
OSV
added 2023/07/05 8:15 p.m.3 views

CVE-2023-27198

PAX A930 device with PayDroid7.1.1VirgoV04.5.0220220722 can allow the execution of arbitrary commands by using the exec service and including a specific word in the command to be executed. The attacker must have physical USB access to the device in order to exploit this vulnerability...

6.8CVSS6.1AI score0.00531EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/07/05 12:0 a.m.3 views

PAX Technology A930 操作系统命令注入漏洞

PAX Technology A930 is an Android mobile payment terminal from PAX Technology China. A security vulnerability exists in the PAX Technology A930 PayDroid7.1.1VirgoV04.5.0220220722 version, which originates from allowing arbitrary commands to be executed by using the exec service and including...

6.8CVSS6.8AI score0.00531EPSS
Exploits0References2
PyPA
PyPA
added 2023/07/03 9:15 p.m.4 views

PYSEC-2023-98

An issue in langchain v.0.0.199 allows an attacker to execute arbitrary code via the PALChain in the python exec method...

9.8CVSS8AI score0.00982EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/03 12:0 a.m.11 views

CVE-2023-36258

An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used...

8.1AI score0.00982EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/07/03 12:0 a.m.3 views

LangChain 安全漏洞

LangChain is used to build applications using LLM through composability. A security vulnerability exists in LangChain version v.0.0.199, which stems from a vulnerability that allows an attacker to execute arbitrary code via PALChain in the python exec method...

9.8CVSS8.8AI score0.00982EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/07/03 12:0 a.m.3 views

PT-2023-25499 · Langchain · Langchain

Name of the Vulnerable Software and Affected Versions: LangChain versions prior to 0.0.236 Description: The issue allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used. This is possible via the PALChain in the python exec method. Recommendation...

9.8CVSS7.8AI score0.00982EPSS
Exploits1References21
Cvelist
Cvelist
added 2023/07/03 12:0 a.m.28 views

CVE-2023-36258

An issue in LangChain before 0.0.236 allows an attacker to execute arbitrary code because Python code with os.system, exec, or eval can be used...

9.9AI score0.00982EPSS
Exploits1References1
CNVD
CNVD
added 2023/06/30 12:0 a.m.19 views

Apache Airflow ODBC Provider Remote Code Execution Vulnerability

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. A remote code execution vulnerability exists in Apache Airflow ODBC Provider, which can be exploited by an attacker to cause command execution...

7.8CVSS8AI score0.00661EPSS
Exploits0References1
Rows per page
Query Builder