55893 matches found
CVE-2024-7046
...
CVE-2000-0314
creationtimestamp| type| source ---|---|--- 2025-03-20 08:28:06+00:00| seen| https://bsky.app/profile/secyoure.bsky.social/post/3lksbpgbds42m...
Lunary security vulnerabilities
lunary is lunary open source a production toolkit for LLM . An access control error vulnerability exists in lunary that stems from improper access control on the /prompts/promptid endpoint, and no detailed vulnerability details are provided at this time...
Number withdrawal
PandasAI is a data processing application that combines Pandas, a data manipulation and analysis library, with AI, allowing users to interact with data through natural language without having to write complex code. PandasAI has a command injection vulnerability that can be exploited by an attacke...
PT-2025-12237
Name of the Vulnerable Software and Affected Versions modelscope/agentscope version 21161fe Description A stored cross-site scripting XSS issue exists in the view for inspecting detailed run information. This occurs because a user-controllable string, the run ID, is appended and rendered as HTML,...
PT-2025-12240
Name of the Vulnerable Software and Affected Versions h2oai/h2o-3 version 3.46.0 Description The issue arises from the /99/Models/name/json endpoint, which allows for arbitrary file overwrite on the target server. This is due to the exportModelDetails function in ModelsHandler.java, where the...
PT-2025-12280 · Unknown · Transformeroptimus/Superagi
Name of the Vulnerable Software and Affected Versions: transformeroptimus/superagi version 0.0.14 Description: A Path Traversal vulnerability exists in the file upload functionality. This vulnerability allows an attacker to upload an arbitrary file to the server, potentially leading to remote cod...
PT-2025-12080 · Unknown · Automatic1111/Stable-Diffusion-Webui
Name of the Vulnerable Software and Affected Versions: automatic1111/stable-diffusion-webui version 1.10.0 Description: The software is susceptible to a flaw where the server does not properly manage extra characters added to the end of multipart boundaries. This can be exploited by sending...
EulerOS 2.0 SP12 : dhcp (EulerOS-SA-2025-1291)
According to the versions of the dhcp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only...
PT-2025-12022 · Parisneo · Lollms-Webui
Name of the Vulnerable Software and Affected Versions: parisneo/lollms-webui versions v9.9 to the latest Description: The issue allows an attacker to list arbitrary directories on a Windows system by sending a specially crafted HTTP request to the "/open file" endpoint. This enables the attacker ...
Polyaxon security vulnerabilities
Polyaxon is an open source platform designed to simplify the lifecycle management of machine learning and deep learning projects. Polyaxon suffers from a container escape vulnerability that can be exploited by attackers to compromise the confidentiality, availability, and integrity of the system...
FluxBB 1.5.11 - Stored Cross-Site Scripting (XSS)
Exploit Title: FluxBB 1.5.11 Stored xss Date: 3/8/2025 Exploit Author: Chokri Hammedi Vendor Homepage: www.fluxbb.org Software Link: https://www.softaculous.com/apps/forums/FluxBB Version: FluxBB 1.5.11 Tested on: Windows XP 1. login to admin panel 2. go to /adminforums.php 3. click on "add forum...
SUSE SLES15: kernel-livepatch-5_14_21-150400_24_111-default / etc (SUSE-SU-2025:0950-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0950-1 advisory. This update for the Linux Kernel 5.14.21-15040024111 fixes several issues. The following security issues were fixed: - CVE-2024-46818:...
Google Chrome Security Update (stable-channel-update-for-desktop_19-2025-03) - Windows
Google Chrome is prone to an use-after-free vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...
PT-2025-12182
Name of the Vulnerable Software and Affected Versions open-webui/open-webui version 0.3.8 Description The issue is related to improper access control, allowing an attacker to view admin details without verifying if the attacker is an administrator. This can be exploited by directly calling the...
Open WebUI security vulnerabilities
Open WebUI is an extensible, feature-rich, user-friendly self-hosted WebUI from Open WebUI open source. A security vulnerability exists in Open WebUI version v0.3.8 that stems from improper access control and allows an attacker to view administrator details...
CVE-2025-27786
creationtimestamp| type| source ---|---|--- 2025-03-19 23:00:27+00:00| seen| https://t.me/cvedetector/20676 2025-03-19 23:33:38+00:00| published-proof-of-concept| Telegram/f9bJGi25q0ZeFbva3U2-T1otHLP8tha0QyjUNdGGgBSvDk 2025-03-20 00:49:02+00:00| seen|...
CVE-2025-27780
creationtimestamp| type| source ---|---|--- 2025-03-19 22:01:14+00:00| published-proof-of-concept| Telegram/jlMT5pQePgK5GBSq5wMoupEVU9UT7ofYY1WgfO6aSFHSaLY 2025-03-19 23:00:34+00:00| seen| https://t.me/cvedetector/20681 2025-03-20 00:49:02+00:00| seen|...
