EUVD-2024-44465

Malicious code in bioql PyPI...

CVE-2024-34359

llama-cpp-python is the Python bindings for llama.cpp. llama-cpp-python depends on class Llama in llama.py to load .gguf llama.cpp or Latency Machine Learning Models. The init constructor built in the Llama takes several parameters to configure the loading and running of the model. Other than NUM...

CVE-2024-4897: Improper Neutralization of Equivalent Special Elements

parisneo/lollms-webui, in its latest version, is vulnerable to remote code execution due to an insecure dependency on llama-cpp-python version llamacpppython-0.2.61+cpuavx2-cp311-cp311-manylinux231x8664. The vulnerability arises from the application's 'bindingzoo' feature, which allows attackers ...

Researchers Uncover Flaws in Python Package for AI Models and PDF.js Used by Firefox

A critical security flaw has been disclosed in the llamacpppython Python package that could be exploited by threat actors to achieve arbitrary code execution. Tracked as CVE-2024-34359 CVSS score: 9.7, the flaw has been codenamed Llama Drama by software supply chain security firm Checkmarx. "If...

CVE-2024-34359

creationtimestamp| type| source ---|---|--- 2024-05-17 08:03:06+00:00| published-proof-of-concept| https://t.me/HackingInsights/582 2024-05-17 15:53:40+00:00| seen| https://t.me/informationsecuritychannel/52213 2024-05-21 13:16:03+00:00| seen| https://t.me/KomunitiSiber/1975 2024-05-21...