Lucene search
+L

13535 matches found

BDU FSTEC
BDU FSTEC
added 2025/07/09 12:00 a.m.12 views

The vulnerability in the `front/index.php` script of the NetAlert X network alert infrastructure allows a intruder to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability in the front/index.php script of the NetAlert X network alerting infrastructure is related to incorrect password comparison based on hashes. Exploiting this vulnerability allows an attacker to bypass security restrictions and gain unauthorized access to protected information...

9.7CVSS5.5AI score0.00516EPSS
SaveExploits1References2Affected Software1
Microsoft KB
Microsoft KB
added 2025/07/08 2:00 p.m.15 views

Description of the security update for Visual Studio 2015 Update 3: July 8, 2025 (KB5063035)

None None...

8.8CVSS7AI score0.00799EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2025/07/08 2:00 p.m.20 views

End of support for Office 2016 and Office 2019

None None...

7.8CVSS7.2AI score0.00619EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2025/07/08 2:00 p.m.17 views

Description of the security update for PowerPoint 2016: July 8, 2025 (KB5002746)

None None...

7.8CVSS7AI score0.00378EPSS
SaveExploits0
Veracode
Veracode
added 2025/07/08 4:29 a.m.11 views

Hash Collision

llamaindexreaderspapers is vulnerable to Hash Collision. The vulnerability is due to the use of MD5 hashing to generate filenames for downloaded papers, which allows an attacker to exploit hash collisions by submitting papers with identical titles but different content...

5.3CVSS5.1AI score0.00284EPSS
SaveExploits1References5Affected Software1
Github Security Blog
Github Security Blog
added 2025/07/07 12:30 p.m.23 views

LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each other, preventing some papers from...

5.3CVSS5AI score0.00284EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2025/07/07 12:30 p.m.12 views

GHSA-P7J4-JWJF-5X9W LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each other, preventing some papers from...

5.3CVSS5AI score0.00284EPSS
SaveExploits1References5
Snyk
Snyk
added 2025/07/07 10:44 a.m.4 views

Expected Behavior Violation

Overview llama-index-readers-papers is a llama-index readers papers integration Affected versions of this package are vulnerable to Expected Behavior Violation via the ArxivReader process. An attacker can cause data loss by uploading papers with identical titles but different contents, resulting ...

6.9CVSS6.9AI score0.00284EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/07/07 10:44 a.m.8 views

Expected Behavior Violation

Overview llama-index is an Interface between LLMs and your data Affected versions of this package are vulnerable to Expected Behavior Violation via the ArxivReader process. An attacker can cause data loss by uploading papers with identical titles but different contents, resulting in one paper...

6.9CVSS7AI score0.00284EPSS
SaveExploits1References2
NVD
NVD
added 2025/07/07 10:15 a.m.16 views

CVE-2025-3044

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each othe...

5.3CVSS0.00284EPSS
SaveExploits1References2
OSV
OSV
added 2025/07/07 10:15 a.m.16 views

PYSEC-2025-247

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each othe...

5.3CVSS6.2AI score0.00284EPSS
SaveExploits1References2
CVE
CVE
added 2025/07/07 9:54 a.m.71 views

CVE-2025-3044

The CVE-2025-3044 affects the ArxivReader class in the llama_index project. Versions up to v0.12.22.post1 are vulnerable to MD5 hash collisions when generating filenames for downloaded papers, which can cause papers with identical titles but different contents to overwrite each other, leading to ...

5.3CVSS5.1AI score0.00284EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2025/07/07 9:54 a.m.19 views

CVE-2025-3044 MD5 Hash Collision in run-llama/llama_index

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each othe...

5.3CVSS0.00284EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/07/07 9:54 a.m.10 views

CVE-2025-3044 MD5 Hash Collision in run-llama/llama_index

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each othe...

5.3CVSS7AI score0.00284EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/07/07 12:00 a.m.12 views

LlamaIndex 安全漏洞

LlamaIndex is a data framework for LLM applications from the LlamaIndex open source. A security vulnerability exists in LlamaIndex 0.12.22.post1 and earlier versions, which stems from an MD5 hash conflict when generating filenames in the ArxivReader class, which could lead to data loss...

5.3CVSS5.2AI score0.00284EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/07/07 12:00 a.m.16 views

PT-2025-28148

Name of the Vulnerable Software and Affected Versions: llama index versions up to v0.12.22.post1 Description: A vulnerability in the ArxivReader class allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but...

5.3CVSS6AI score0.00284EPSS
SaveExploits1References14
BDU FSTEC
BDU FSTEC
added 2025/07/07 12:00 a.m.20 views

The vulnerability of the alloc_preauth_hash() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the allocpreauthhash function in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.66418EPSS
SaveExploits0References5Affected Software3
Gitee
Gitee
added 2025/07/06 3:21 a.m.133 views

OSCP-Prep

This is a comprehensive guide for information security infosec professionals, particularly those preparing for the OSCP Offensive Security Certified Professional exam. The guide is a collection of various files, including a PDF document, a text file, and a set of cheat sheets. The PDF document,...

6.8AI score
SaveExploits0
Gitee
Gitee
added 2025/07/06 2:31 a.m.135 views

Exploit for CVE-2020-1472

ZeroLogon exploitation script Exploit code based on https://www.secura.com/blog/zero-logon and https://github.com/SecuraBV/CVE-2020-1472. Original research and scanner by Secura, modifications by RiskSense Inc. To exploit, clear out any previous Impacket installs you have and install Impacket fro...

10CVSS8.2AI score0.99389EPSS
SaveExploits76
GithubExploit
GithubExploit
added 2025/07/05 9:22 a.m.116 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071PoC CVE-2025-24071: NTLM Hash Leak via RAR/ZIP...

6.5CVSS7.6AI score0.58909EPSS
SaveExploits36
Rows per page
Query Builder