Cross RSS 1.7 - Local File Inclusion

Absolute path traversal vulnerability in Cross-RSS wp-cross-rss plugin 1.7 for WordPress allows remote attackers to read arbitrary files via a full pathname in the rss parameter to proxy.php. id: CVE-2014-4941 info: name: Cross RSS 1.7 - Local File Inclusion author: DhiyaneshDK severity: medium...

CVE-2017-4941

creationtimestamp| type| source ---|---|--- 2026-07-26 07:01:53+00:00| seen| https://t.me/KaitNews/7372 2026-07-27 00:01:36+00:00| seen| https://t.me/KaitNews/7372 2026-07-29 04:00:05+00:00| seen| https://t.me/KaitNews/7372 2026-07-30 00:03:16+00:00| seen| https://t.me/KaitNews/7372...

CVE-2025-4941

A vulnerability, which was classified as critical, was found in PHPGurukul Credit Card Application Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. T...

CVE-2025-4941

A vulnerability, which was classified as critical, was found in PHPGurukul Credit Card Application Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. T...

CVE-2025-4941

CVE-2025-4941 affects PHPGurukul Credit Card Application Management System 1.0, with a SQL injection in an unknown function of /admin/index.php triggered by manipulating the Username parameter. The vulnerability is remotely exploitable and has been publicly disclosed. Connected sources consistent...

CVE-2025-4941 PHPGurukul Credit Card Application Management System index.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Credit Card Application Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. T...

PYSEC-2025-93

gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is affected by a local file inclusion vulnerability due to the use of the gradio component gr.JSON, which has a known issue CVE-2024-4941. This vulnerability allows unauthenticated users to access arbitrary files on the server by uploading a speciall...

CVE-2024-4941

A local file inclusion vulnerability exists in the JSON component of gradio-app/gradio version 4.25. The vulnerability arises from improper input validation in the postprocess function within gradio/components/jsoncomponent.py, where a user-controlled string is parsed as JSON. If the parsed JSON...

africanwhisper (>=0.2.1, <=0.9.0), agentx (>=0.0.6, <=0.0.27) +42 more potentially affected by CVE-2024-4941 via gradio (>=4.0.0b15, <=4.31.0)

gradio PYPI version =4.0.0b15, =0.2.1, =0.0.6, =0.4.0, =0.1.0, =0.1.2, =0.1.1, =0.5.0, =0.0.1, =1.0.0, =0.0.11, =0.0.5, =0.0.15 and more Source cves: CVE-2024-4941 Source advisory: OSV:GHSA-6V6G-J5FQ-HPVW...

africanwhisper (>=0.2.1, <=0.9.0), agentx (>=0.0.6, <=0.0.27) +42 more potentially affected by CVE-2024-4941 via gradio (>=4.0.0b15, <=4.31.0)

gradio PYPI version =4.0.0b15, =0.2.1, =0.0.6, =0.4.0, =0.1.0, =0.1.2, =0.1.1, =0.5.0, =0.0.1, =1.0.0, =0.0.11, =0.0.5, =0.0.15 and more Source cves: CVE-2024-4941 Source advisory: GHSA-6V6G-J5FQ-HPVW...

musicaiz (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-4941 via gradio (3.0.15)

gradio PYPI version 3.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - musicaiz =0.0.1, =0.0.2 Source cves: CVE-2024-4941 Source advisory: OSV:GHSA-6V6G-J5FQ-HPVW...

langs-vall (>=0.0.1, <=0.0.18) potentially affected by CVE-2024-4941 via gradio (3.47.1)

gradio PYPI version 3.47.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - langs-vall =0.0.1, =0.0.18 Source cves: CVE-2024-4941 Source advisory: OSV:GHSA-6V6G-J5FQ-HPVW...

yolov2keras (>=0.0.2, <=0.0.6) potentially affected by CVE-2024-4941 via gradio (3.45.2)

gradio PYPI version 3.45.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - yolov2keras =0.0.2, =0.0.6 Source cves: CVE-2024-4941 Source advisory: OSV:GHSA-6V6G-J5FQ-HPVW...

academic-chatgpt (>=0.3.0, <=0.4.1), agentverse (>=0.1.5, <=0.1.8) +46 more potentially affected by CVE-2024-4941 via gradio (3.50.2)

gradio PYPI version 3.50.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - academic-chatgpt =0.3.0, =0.1.5, =0.0.4, =0.8.11, =0.1.0, =0.1.3, =1.1.0, =1.2.1 and more Source cves: CVE-2024-4941 Source advisory:...

pynami (>=0.0.1, <=0.0.2) potentially affected by CVE-2024-4941 via gradio (3.17.0)

gradio PYPI version 3.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - pynami =0.0.1, =0.0.2 Source cves: CVE-2024-4941 Source advisory: OSV:GHSA-6V6G-J5FQ-HPVW...

diffuzers (>=0.0.2, <=0.0.6), starwhale (>=0.3.5, <=0.4.9) potentially affected by CVE-2024-4941 via gradio (3.15.0)

gradio PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - diffuzers =0.0.2, =0.3.5, =0.4.9 Source cves: CVE-2024-4941 Source advisory: OSV:GHSA-6V6G-J5FQ-HPVW...

customintents (>=0.7.3, <=0.7.6) potentially affected by CVE-2024-4941 via gradio (3.16.1)

gradio PYPI version 3.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - customintents =0.7.3, =0.7.6 Source cves: CVE-2024-4941 Source advisory: OSV:GHSA-6V6G-J5FQ-HPVW...

pynami (>=0.0.3, <=0.0.5) potentially affected by CVE-2024-4941 via gradio (3.19.1)

gradio PYPI version 3.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - pynami =0.0.3, =0.0.5 Source cves: CVE-2024-4941 Source advisory: OSV:GHSA-6V6G-J5FQ-HPVW...

chatarena (>=0.1.9, <=0.1.10) potentially affected by CVE-2024-4941 via gradio (3.20.0)

gradio PYPI version 3.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - chatarena =0.1.9, =0.1.10 Source cves: CVE-2024-4941 Source advisory: OSV:GHSA-6V6G-J5FQ-HPVW...

artcraft (>=0.0.0, <=0.0.16), maestror (0.1.0) potentially affected by CVE-2024-4941 via gradio (3.41.2)

gradio PYPI version 3.41.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - artcraft =0.0.0, =0.0.16 - maestror 0.1.0 Source cves: CVE-2024-4941 Source advisory: OSV:GHSA-6V6G-J5FQ-HPVW...