lunary 安全漏洞

Lunary is a production toolkit for LLM open sourced by lunary. A security vulnerability exists in lunary version 0.3.0, which stems from insufficient authorization checking in the project's delete endpoint...

CVE-2024-28435

The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload...

PT-2024-22435 · Twenty · Twenty

Name of the Vulnerable Software and Affected Versions: Twenty version 0.3.0 Description: The CRM platform is vulnerable to server-side request forgery SSRF via file upload. This issue allows an attacker to potentially access internal resources or make unauthorized requests. Recommendations: For...

CVE-2024-28435

The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload...

CVE-2024-28434

The CRM platform Twenty is vulnerable to stored cross site scripting via file upload in version 0.3.0. A crafted svg file can trigger the execution of the javascript code...

CVE-2024-28435

Twenty CRM platform version 0.3.0 is affected by a server-side request forgery (SSRF) via the file upload feature. The root cause is SSRF in the file upload handling, which can allow an attacker to trigger requests to internal resources or make unauthorized requests. PT-Security notes remediation...

MolecularFaces Cross-Site Scripting Vulnerability

MolecularFaces is a collection of reusable UI components for Java Server Faces JSF from the IPB Halle Institute. A security vulnerability exists in versions of MolecularFaces prior to 0.3.0 that stems from vulnerability to cross-site scripting attacks, which allow remote attackers to execute...

GHSA-8PP6-5QPW-85G3 Magnesium-PHP Injection vulnerability

UNSUPPORTED WHEN ASSIGNED UNSUPPORTED WHEN ASSIGNED A vulnerability was found in Magnesium-PHP up to 0.3.0. It has been classified as problematic. Affected is the function formatEmailString of the file src/Magnesium/Message/Base.php. The manipulation of the argument email/name leads to injection...

Magnesium-PHP Injection Vulnerability

Magnesium-PHP is a wrapper for the Mailguns PHP API client. An injection vulnerability exists in Magnesium-PHP version 0.3.0 and earlier, which stems from the fact that incorrect manipulation of the parameter eemail/name can lead to injection...

PT-2023-10638 · Unknown · Magnesium-Php

Name of the Vulnerable Software and Affected Versions: Magnesium-PHP versions up to 0.3.0 Description: A vulnerability was found in Magnesium-PHP, classified as problematic. The issue affects the formatEmailString function of the file src/Magnesium/Message/Base.php. The manipulation of the...

XML External Entity (XXE) Injection

Overview svgoptimizer is a SVG optimization based on Node's SVGO Affected versions of this package are vulnerable to XML External Entity XXE Injection when optimizing untrusted SVG content. An attacker can escalate privileges by exploiting the external XML entity XXE vulnerability. This is only...

Improper Input Validation in vriteio/vrite

Improper Input Validation in GitHub repository vriteio/vrite prior to 0.3.0...

GHSA-44FF-9W4F-99W6 Improper Input Validation in vriteio/vrite

Improper Input Validation in GitHub repository vriteio/vrite prior to 0.3.0...

CVE-2023-5572

Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...

CVE-2023-5571

Improper Input Validation in GitHub repository vriteio/vrite prior to 0.3.0...

CVE-2023-5573 Allocation of Resources Without Limits or Throttling in vriteio/vrite

Allocation of Resources Without Limits or Throttling in GitHub repository vriteio/vrite prior to 0.3.0...

CVE-2023-5572 Server-Side Request Forgery (SSRF) in vriteio/vrite

Server-Side Request Forgery SSRF in GitHub repository vriteio/vrite prior to 0.3.0...

PT-2023-32186 · Vrite · Vrite

Name of the Vulnerable Software and Affected Versions: vrite versions prior to 0.3.0 Description: The issue is related to the allocation of resources without limits or throttling in the GitHub repository vriteio/vrite. This could potentially lead to exploitation. Recommendations: For versions pri...

vrite Security Vulnerabilities

vrite is an open source collaborative space for creating, managing and deploying product documentation, technical blogs and knowledge bases from vrite, Inc. A security vulnerability exists in vrite versions prior to 0.3.0 that stems from the presence of a resource allocation error vulnerability...

vrite Code Issues Vulnerabilities

vrite is an open source collaborative space for creating, managing and deploying product documentation, technical blogs and knowledge bases from vrite, Inc. A code issue vulnerability exists in vrite versions prior to 0.3.0 that stems from the presence of a Server Request Forgery SSRF vulnerabili...