CVE-2025-29916

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Datasets declared in rules have an option to specify the hashsize to use. This size setting isn't properly limited, so the hash table allocation can be large. Untrusted rules can...

aaa-ml-datasets-course (1.0.0), aana (>=0.2.1, <=0.2.2.2) +2115 more potentially affected by CVE-2025-3001 via torch (>=2.0.0, <=2.5.1)

torch PYPI version =2.0.0, =0.2.1, =1.0.0, =0.1.0, =1.1.0, =0.4.6, =0.0.1, =0.0.0, =1.0.1, =2.1.1, =2.3.1 - acscend 1.0.0 - adabmdca 0.1.5 and more Source cves: CVE-2025-3001 Source advisory: OSV:PYSEC-2025-195...

aaa-ml-datasets-course (1.0.0), aait (>=0.0.4.80, <=2.0.2) +3007 more potentially affected by CVE-2025-2999 via torch (>=2.0.0, <=2.9.1)

torch PYPI version =2.0.0, =0.0.4.80, =0.2.1, =1.0.0, =0.1.0, =1.1.0, =0.4.6, =0.0.1, =1.14.0.post1, =0.1.0, =1.0.0.3, =1.0.0.5 and more Source cves: CVE-2025-2999 Source advisory: SNYK:PYTHON-TORCH-10332645...

aaa-ml-datasets-course (1.0.0), aana (>=0.2.1, <=0.2.2.2) +2115 more potentially affected by CVE-2025-3000 via torch (>=2.0.0, <=2.5.1)

torch PYPI version =2.0.0, =0.2.1, =1.0.0, =0.1.0, =1.1.0, =0.4.6, =0.0.1, =0.0.0, =1.0.1, =2.1.1, =2.3.1 - acscend 1.0.0 - adabmdca 0.1.5 and more Source cves: CVE-2025-3000 Source advisory: OSV:PYSEC-2025-194...

WordPress Datasets Manager 1.5 Shell Upload

WordPress Datasets Manager plugin versions 1.5 and below suffer from a remote shell upload vulnerability...

Cybertron Reshapes AI Security as “Cyber Brain” Grows

Previously exclusive to Trend Vision One customers, select Trend Cybertron models, datasets and agents are now available via open-source. Build advanced security solutions and join us in developing the next generation of AI security technology...

lunary access control error vulnerability (CNVD-2025-07602)

lunary is lunary open source a production toolkit for LLM . An access control error vulnerability exists in lunary, which stems from improper access control on the /v1/datasets endpoint, and can be exploited by an attacker to gain access to unauthorized datasets...

Exploit for CVE-2024-52375

WordPress Datasets Manager 💥 Exploit by: Nxploit Khaled Alen...

CVE-2024-10272 Broken Access Control in lunary-ai/lunary

lunary-ai/lunary is vulnerable to broken access control in the latest version. An attacker can view the content of any dataset without any kind of authorization by sending a GET request to the /v1/datasets endpoint without a valid authorization token...

CVE-2024-10272 Broken Access Control in lunary-ai/lunary

lunary-ai/lunary is vulnerable to broken access control in the latest version. An attacker can view the content of any dataset without any kind of authorization by sending a GET request to the /v1/datasets endpoint without a valid authorization token...

CVE-2024-10272

lunary-ai/lunary is vulnerable to broken access control in the latest version. An attacker can view the content of any dataset without any kind of authorization by sending a GET request to the /v1/datasets endpoint without a valid authorization token...

Lunary security vulnerabilities

lunary is lunary open source a production toolkit for LLM . An access control error vulnerability exists in lunary, which stems from improper access control on the /v1/datasets endpoint, and can be exploited by an attacker to gain access to unauthorized datasets...

CVE-2024-10272: Missing Authorization

lunary-ai/lunary is vulnerable to broken access control in the latest version. An attacker can view the content of any dataset without any kind of authorization by sending a GET request to the /v1/datasets endpoint without a valid authorization token...

CVE-2024-24779

Apache Superset with custom roles that include can write on dataset and without all data access permissions, allows for users to create virtual datasets to data they don't have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apac...

CVE-2024-52375

Unrestricted Upload of File with Dangerous Type vulnerability in Arttia Creative Datasets Manager by Arttia Creative datasets-manager-by-arttia-creative.This issue affects Datasets Manager by Arttia Creative: from n/a through = 1.5...

BIT-SUPERSET-2024-24779 Apache Superset: Improper data authorization when creating a new dataset

Apache Superset with custom roles that include can write on dataset and without all data access permissions, allows for users to create virtual datasets to data they don't have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apac...

CVE-2024-52375

Unrestricted Upload of File with Dangerous Type vulnerability in Arttia Creative Datasets Manager by Arttia Creative datasets-manager-by-arttia-creative.This issue affects Datasets Manager by Arttia Creative: from n/a through = 1.5...

CVE-2024-52375 WordPress Datasets Manager by Arttia Creative plugin <= 1.5 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Arttia Creative Datasets Manager by Arttia Creative.This issue affects Datasets Manager by Arttia Creative: from n/a through 1.5...

CVE-2024-52375

CVE-2024-52375 describes an Unrestricted Upload of File with Dangerous Type in the WordPress plugin Datasets Manager by Arttia Creative (affected: versions up to and including 1.5). The underlying issue is improper validation of uploaded file types, allowing arbitrary files to be uploaded (e.g., ...

CVE-2024-52375 WordPress Datasets Manager by Arttia Creative plugin <= 1.5 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Arttia Creative Datasets Manager by Arttia Creative datasets-manager-by-arttia-creative.This issue affects Datasets Manager by Arttia Creative: from n/a through = 1.5...