aigco (0.0.3), airoboros (>=2.1.6, <=2.2.1) +82 more potentially affected by CVE-2026-31253 via flash-attn (>=0.2.8, <=2.8.3.post1)

flash-attn PYPI version =0.2.8, =2.1.6, =1.1.2, =0.0.0.dev0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2026-31253 Source advisory: SNYK:PYTHON-FLASHATTN-17670564...

CVE-2026-31253

The flash-attention training framework is vulnerable to an insecure deserialization (CWE-502) vulnerability in its checkpoint loading mechanism, specifically affecting versions prior to commit e724e2588cbe754beb97cf7c011b5e7e34119e62 . The load_checkpoint() function in checkpoint.py and the loadi...

CVE-2024-31253

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in WP OAuth Server OAuth Server.This issue affects OAuth Server: from n/a through 4.3.3...

CVE-2025-31253

This issue was addressed through improved state management. This issue is fixed in iOS 18.5 and iPadOS 18.5. Muting the microphone during a FaceTime call may not result in audio being silenced...

CVE-2025-31253

creationtimestamp| type| source ---|---|--- 2025-05-12 22:47:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loz2g2zh2y2h 2025-05-13 01:19:14+00:00| seen| https://t.me/cvedetector/25119...

CVE-2025-31253

This issue was addressed through improved state management. This issue is fixed in iOS 18.5 and iPadOS 18.5. Muting the microphone during a FaceTime call may not result in audio being silenced...

CVE-2025-31253

A vulnerability in the FaceTime video telephony technology on iOS and iPadOS operating systems allows an attacker to cause a service failure . The root cause is related to the incorrect duration of a call session . This issue was addressed through improved state management , and the fix is availa...

CVE-2024-31253 WordPress WP OAuth Server (OAuth Authentication) plugin <= 4.3.3 - Open Redirection vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in WP OAuth Server OAuth Server.This issue affects OAuth Server: from n/a through 4.3.3...

WordPress OAuth Server Plugin <= 4.3.3 is vulnerable to Open Redirection

Software OAuth Server Type Plugin Vulnerable versions = 4.3.3 Fixed in 4.4.0 OWASP Top 10 A5: Security Misconfiguration Classification Open Redirection CVE CVE-2024-31253 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 0b209ddaec61 Credits Le Ngoc Anh Required privilege...

CVE-2022-31253

creationtimestamp| type| source ---|---|--- 2022-11-09 16:36:05+00:00| seen| https://t.me/cibsecurity/52712...

CVE-2022-31253

A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory entries to this user/group, leading to escalation to root. This issue affects: openSUSE Factory openldap2 versions prior ...

CVE-2022-31253

A Untrusted Search Path vulnerability in openldap2 of openSUSE Factory allows local attackers with control of the ldap user or group to change ownership of arbitrary directory entries to this user/group, leading to escalation to root. This issue affects: openSUSE Factory openldap2 versions prior ...

CVE-2022-31253

CVE-2022-31253 covers an Untrusted Search Path vulnerability in openldap2 for openSUSE Factory. The issue allows a local attacker who has control of the ldap user or group to change ownership of arbitrary directory entries to that user/group, enabling escalation to root. Affected are openldap2 ve...

Oracle Forms and Reports - Remote Code Execution (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class Metasploit3 'Oracle Forms and Reports Remote Code Execution', 'Description' = %q This module uses two vulnerabilities in Oracle form...