CVE-2024-10901: Unrestricted Upload of File with Dangerous Type

In eosphoros-ai/db-gpt version v0.6.0, the web API POST /api/v1/editor/chart/run allows execution of arbitrary SQL queries without any access control. This vulnerability can be exploited by attackers to perform Arbitrary File Write, enabling them to write arbitrary files to the victim's file...

GPT Academic 代码问题漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a server-side request forgery vulnerability that can be exploited by an attacker to cause an application to access any URL, including internal services, and...

GPT Academic 跨站请求伪造漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a cross-site request forgery vulnerability that stems from a WEB application that does not adequately verify that a request is from a trusted user. An attacke...

PT-2025-12320 · Autogpt +1 · Autogpt +1

Name of the Vulnerable Software and Affected Versions: AutoGPT versions 0.3.4 and earlier Description: AutoGPT versions 0.3.4 and earlier are susceptible to a Server-Side Template Injection SSTI that could lead to Remote Code Execution RCE. This issue stems from the inadequate handling of...

PT-2025-12131

Name of the Vulnerable Software and Affected Versions binary-husky/gpt academic version 310122f Description A Regular Expression Denial of Service ReDoS attack is possible due to the application's use of a regular expression to parse user input, which can take polynomial time to match certain...

PT-2025-12133 · Unknown +1 · Binary-Husky/Gpt Academic +1

Name of the Vulnerable Software and Affected Versions: binary-husky/gpt academic version git 310122f Description: A vulnerability in binary-husky/gpt academic allows for remote code execution. The application supports the extraction of user-provided RAR files without proper validation. The Python...

DB-GPT 安全漏洞

DB-GPT is an AWEL and agent-based AI native data application development framework open-sourced by eosphoros. A security vulnerability exists in DB-GPT version 0.6.0, which stems from a path traversal vulnerability in the API endpoint /v1/resource/file/delete, which allows an attacker to delete...

CVE-2024-10986: Improper Link Resolution Before File Access

GPT Academic version 3.83 is vulnerable to a Local File Read LFI vulnerability through its HotReload function. This function can download and extract tar.gz files from arxiv.org. Despite implementing protections against path traversal, the application overlooks the Tarslip triggered by symlinks...

GPT Academic 安全漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a path traversal vulnerability that can be exploited by an attacker to disclose sensitive information...

GPT Academic 安全漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a security vulnerability that originates from a specially crafted zip bomb upload that can be exploited by an attacker to cause a memory exhaustion crash...

CVE-2024-10829: Loop with Unreachable Exit Condition

A Denial of Service DoS vulnerability in the multipart request boundary processing mechanism of eosphoros-ai/db-gpt v0.6.0 allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to the end of multipart boundaries, leading...

PT-2025-12130

Name of the Vulnerable Software and Affected Versions binary-husky/gpt academic versions as of commit git 3890467 Description A vulnerability in the binary-husky/gpt academic repository allows an attacker to crash the server by uploading a specially crafted zip bomb. The server decompresses the...

DB-GPT 安全漏洞

DB-GPT is an AWEL and agent-based AI native data application development framework open-sourced by eosphoros. A security vulnerability exists in DB-GPT version v0.6.0, which stems from an arbitrary file upload vulnerability in the web API POST /v1/personal/agent/upload, which allows an attacker t...

PT-2025-12070

Name of the Vulnerable Software and Affected Versions eosphoros-ai/db-gpt version 0.6.0 Description The issue arises because the file key and doc file.filename parameters are user-controllable, enabling the construction of paths outside the intended directory. This can lead to overwriting essenti...

PrivateGPT 跨站脚本漏洞

PrivateGPT is an AI project open-sourced by Zylon. A cross-site scripting vulnerability exists in PrivateGPT version v0.5.0, which stems from cross-site scripting during file uploads, which allows an attacker to upload a malicious SVG file and execute JavaScript when the victim clicks on the file...

PT-2025-12076

Name of the Vulnerable Software and Affected Versions eosphoros-ai/db-gpt version 0.6.0 Description The issue arises from an overly permissive instance of CORSMiddleware in the uvicorn app created by dbgpt server, which sets the Access-Control-Allow-Origin to for all requests. This configuration...

CVE-2024-10906: Cross-Site Request Forgery (CSRF)

In version 0.6.0 of eosphoros-ai/db-gpt, the uvicorn app created by dbgptserver uses an overly permissive instance of CORSMiddleware which sets the Access-Control-Allow-Origin to for all requests. This configuration makes all endpoints exposed by the server vulnerable to Cross-Site Request Forger...

DB-GPT 路径遍历漏洞

DB-GPT is an AWEL and agent-based AI native data application development framework open-sourced by eosphoros. A path traversal vulnerability exists in DB-GPT version 0.6.0, which stems from an arbitrary file write vulnerability in the knowledge API that allows an attacker to write a file to an...

GPT Academic 代码注入漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a command injection vulnerability that stems from a security issue with the CodeInterpreter plugin, which can be exploited by an attacker to achieve Remote Co...

CVE-2024-11030: Server-Side Request Forgery (SSRF)

GPT Academic version 3.83 is vulnerable to a Server-Side Request Forgery SSRF vulnerability through its HotReload plugin function, which calls the crazyutils.getfilesfromeverything API without proper sanitization. This allows attackers to exploit the vulnerability to abuse the victim GPT Academic...