55893 matches found
CVE-2025-2565
CVE-2025-2565 affects Liferay Portal 7.4.0–7.4.3.126 and Liferay DXP 2024.Q3.0 through 2024.Q2.x, 2023.x releases, where an unauthorized user can obtain entry data from forms. Connected sources provide concrete details on affected products and versions, and identify the underlying issue as data e...
CVE-2025-0453
creationtimestamp| type| source ---|---|--- 2025-03-20 13:03:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr44thbj2w 2025-03-20 13:13:08+00:00| seen| https://t.me/cvedetector/20715 2025-03-20 16:18:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8...
GHSA-38MG-WM59-G64X composio allows Server-Side Request Forgery (SSRF) in BROWSERTOOL
A Server-Side Request Forgery SSRF vulnerability exists in composiohq/composio version v0.4.4. This vulnerability allows an attacker to read the contents of any file in the system by exploiting the BROWSERTOOLGOTOPAGE and BROWSERTOOLGETPAGEDETAILS actions...
Improper Neutralization of Data within XPath Expressions ('XPath Injection')
Overview composio-core is a Core package to act as a bridge between composio platform and other services. Affected versions of this package are vulnerable to Improper Neutralization of Data within XPath Expressions 'XPath Injection' via the BROWSERTOOLGOTOPAGE and BROWSERTOOLGETPAGEDETAILS action...
H2O Vulnerable to Arbitrary File Overwrite
In h2oai/h2o-3 version 3.46.0, the /99/Models/name/json endpoint allows for arbitrary file overwrite on the target server. The vulnerability arises from the exportModelDetails function in ModelsHandler.java, where the user-controllable mexport.dir parameter is used to specify the file path for...
Undefined Behavior for Input to API
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Undefined Behavior for Input to API due to improper access control on the /api/v1/auths/admin/details interface. An attacker can view administrative details by directly calling the interface without needing...
GHSA-GV26-QW3H-8QVP Open WebUI Allows Viewing of Admin Details
An improper access control vulnerability in open-webui/open-webui v0.3.8 allows an attacker to view admin details. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the /api/v1/auths/admin/details interface to retrieve the first admin...
Open WebUI Allows Viewing of Admin Details
An improper access control vulnerability in open-webui/open-webui v0.3.8 allows an attacker to view admin details. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the /api/v1/auths/admin/details interface to retrieve the first admin...
DB-GPT vulnerable to Cross-Site Request Forgery
In version 0.6.0 of eosphoros-ai/db-gpt, the uvicorn app created by dbgptserver uses an overly permissive instance of CORSMiddleware which sets the Access-Control-Allow-Origin to for all requests. This configuration makes all endpoints exposed by the server vulnerable to Cross-Site Request Forger...
CVE-2024-10553
creationtimestamp| type| source ---|---|--- 2025-03-20 11:40:14+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3lksmgyieme2u 2025-09-05 02:40:36+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3ly2n3nag2s2b 2025-09-09 03:37:30+00:00| seen|...
CVE-2025-0454
creationtimestamp| type| source ---|---|--- 2025-03-20 10:19:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8195 2025-03-20 13:03:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lksr44ptdf26 2025-03-20 13:13:09+00:00| seen|...
CVE-2024-8616
In h2oai/h2o-3 version 3.46.0, the /99/Models/name/json endpoint allows for arbitrary file overwrite on the target server. The vulnerability arises from the exportModelDetails function in ModelsHandler.java, where the user-controllable mexport.dir parameter is used to specify the file path for...
CVE-2024-7046
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2024-11300 Improper Access Control in lunary-ai/lunary
In lunary-ai/lunary before version 1.6.3, an improper access control vulnerability exists where a user can access prompt data of another user. This issue affects version 1.6.2 and the main branch. The vulnerability allows unauthorized users to view sensitive prompt data by accessing specific URLs...
CVE-2024-8616 Arbitrary File Overwrite in h2oai/h2o-3
In h2oai/h2o-3 version 3.46.0, the /99/Models/name/json endpoint allows for arbitrary file overwrite on the target server. The vulnerability arises from the exportModelDetails function in ModelsHandler.java, where the user-controllable mexport.dir parameter is used to specify the file path for...
CVE-2024-9447 Exposure of Sensitive Information in transformeroptimus/superagi
An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. The /get/organisation/ endpoint does not verify the user's organization, allowing any authenticated user to retrieve sensitive configuration details, including API keys, of any organization. This...
CVE-2024-9309 SSRF in POST /worker_generate_stream API endpoint in haotian-liu/llava
A Server-Side Request Forgery SSRF vulnerability exists in the POST /workergeneratestream API endpoint of the Controller API Server in haotian-liu/llava version v1.2.0 LLaVA-1.6. This vulnerability allows attackers to exploit the victim Controller API Server's credentials to perform unauthorized...
CVE-2024-7046
Open-WebUI (open-webui) is affected by an improper access-control vulnerability in version 0.3.8. An attacker can call the API endpoint /api/v1/auths/admin/details to view the first admin (owner) details without verifying administrator privileges. Remediation: upgrade to open-webui version 0.5.8 ...
CVE-2024-7046 Improper Access Control in open-webui/open-webui
An improper access control vulnerability in open-webui/open-webui v0.3.8 allows an attacker to view admin details. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the /api/v1/auths/admin/details interface to retrieve the first admin...