594 matches found
Exploit for CVE-2025-64495
CVE-2025-64495-POC Open WebUI vulnerable to Stored DOM XSS via...
CVE-2025-64495
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 and below, the functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prompt body is...
CVE-2025-64495: Improper Neutralization of Input During Web Page Generation
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 and below, the functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prompt body is...
PT-2025-45781
Summary The functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prompt body is assigned to the DOM sink .innerHtml without sanitisation. Any user with permissions to create prompts can abuse this to plant ...
EUVD-2015-9139
Malware in sbrugna...
EUVD-2019-0460
Malware in sbrugna...
EUVD-2020-21948
Malware in sbrugna...
EUVD-2017-0008
Malware in sbrugna...
EUVD-2021-2102
Malware in sbrugna...
EUVD-2021-15847
Malware in sbrugna...
EUVD-2021-15849
Malware in sbrugna...
EUVD-2019-7911
Malware in sbrugna...
EUVD-2022-48338
Malicious code in bioql PyPI...
EUVD-2022-2694
Malicious code in bioql PyPI...
EUVD-2023-53101
Malicious code in bioql PyPI...
EUVD-2022-46015
Malicious code in bioql PyPI...
EUVD-2022-39605
Malicious code in bioql PyPI...
EUVD-2023-43702
Malicious code in bioql PyPI...