3281 matches found
openjdk: Enhance Path Factories (Oracle CPU 2025-10)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle...
The vulnerability of the _process_request() function in the library for working with Large Language Models (LLM) from LLaMA-Factory allows attackers to circumvent security restrictions and execute SSRF attacks.
The vulnerability of the processrequest function in the library for working with Large Language Models LLM from LLaMA-Factory is related to the modification of requests on the server side during the processing of the /v1/chat/completions endpoint. Exploiting this vulnerability allows a malicious...
Server-side Request Forgery (SSRF)
Overview llamafactory is an Easy-to-use LLM fine-tuning framework Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the processrequest function, which processes incoming content URLs without proper validation or sanitization. An attacker can access internal...
CVE-2025-61784
LLaMA-Factory's chat API contains SSRF and LFI in the _process_request function (src/llamafactory/api/chat.py). For image_url, video_url, and audio_url, if a URL is not a base64 data URI or local file path, the code fetches the URL with requests.get(url, stream=True).raw without validation, enabl...
CVE-2025-61784 LLaMA Factory's Chat API has Critical SSRF and LFI Vulnerabilities
LLaMA-Factory is a tuning library for large language models. Prior to version 0.9.4, a Server-Side Request Forgery SSRF vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure ...
CVE-2025-61784 LLaMA Factory's Chat API has Critical SSRF and LFI Vulnerabilities
LLaMA-Factory is a tuning library for large language models. Prior to version 0.9.4, a Server-Side Request Forgery SSRF vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure ...
EUVD-2025-32903
LLaMA-Factory is a tuning library for large language models. Prior to version 0.9.4, a Server-Side Request Forgery SSRF vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure ...
EUVD-2010-1974
Malware in sbrugna...
EUVD-2010-1626
Malware in sbrugna...
EUVD-2020-1944
Malware in sbrugna...
EUVD-2020-7566
Malware in sbrugna...
EUVD-2019-9033
Malware in sbrugna...
EUVD-2021-12216
Malware in sbrugna...
EUVD-2020-17744
Malware in sbrugna...
EUVD-2017-11853
Malware in sbrugna...
EUVD-2017-17135
Malware in sbrugna...
EUVD-2017-11851
Malware in sbrugna...
EUVD-2016-9601
Malware in sbrugna...