Lucene search
+L

1831 matches found

OSV
OSV
added 2025/10/07 10:8 p.m.6 views

GHSA-527M-2XHR-J27G LLaMA Factory's Chat API Contains Critical SSRF and LFI Vulnerabilities

Summary A Server-Side Request Forgery SSRF vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure of sensitive internal services, reconnaissance of the internal network, or...

7.6CVSS6.1AI score0.0035EPSS
SaveExploits1References4
NVD
NVD
added 2025/10/07 8:15 p.m.9 views

CVE-2025-6242

A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an...

7.1CVSS0.00231EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/07 7:45 p.m.3 views

CVE-2025-6242 Vllm: server side request forgery (ssrf) in mediaconnector

A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an...

7.1CVSS6.7AI score0.00231EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/07 7:15 p.m.8 views

CVE-2025-61784

LLaMA-Factory is a tuning library for large language models. Prior to version 0.9.4, a Server-Side Request Forgery SSRF vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure ...

8.1CVSS0.0035EPSS
SaveExploits1References2
OSV
OSV
added 2025/10/07 7:1 p.m.18 views

CVE-2025-61784 LLaMA Factory's Chat API has Critical SSRF and LFI Vulnerabilities

LLaMA-Factory is a tuning library for large language models. Prior to version 0.9.4, a Server-Side Request Forgery SSRF vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure ...

7.6CVSS6.2AI score0.0035EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2002-1517

Malware in sbrugna...

5CVSS6.4AI score0.02447EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2019-7428

Malware in sbrugna...

9.8CVSS9.2AI score0.01335EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-0476

Malware in sbrugna...

6.5CVSS6.4AI score0.0113EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-23995

Malware in sbrugna...

7.5CVSS7.5AI score0.02853EPSS
SaveExploits1References16
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2021-10902

Malware in sbrugna...

6.5CVSS7.8AI score0.00743EPSS
SaveExploits0References20
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2016-10001

Malware in sbrugna...

4.3CVSS4.6AI score0.01537EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-17130

Malware in sbrugna...

4.3CVSS4.8AI score0.00266EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-17164

Malware in sbrugna...

5.8CVSS5.8AI score0.02077EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2019-10654

Malware in sbrugna...

4.3CVSS4.9AI score0.00815EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2002-1978

Malware in sbrugna...

5CVSS6.4AI score0.02653EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-19502

Malware in sbrugna...

6.1CVSS8AI score0.01266EPSS
SaveExploits0References22
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-26111

Malware in sbrugna...

4.3CVSS4.8AI score0.00446EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-20486

Malware in sbrugna...

5.3CVSS6.2AI score0.01489EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-8039

Malware in sbrugna...

5.3CVSS5.5AI score0.00689EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2017-9248

Malware in sbrugna...

8.7CVSS8.8AI score0.01633EPSS
SaveExploits0References2
Rows per page
Query Builder