CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

406 matches found

Kitploit•added 2026/10/25 12:16 p.m.•26 views

CVE-2025-25296

CVE-2025-25296 Proof of Concept POC Description This project demonstrates a Proof of Concept POC for the CVE-2025-25296 vulnerability affecting Label Studio, an open-source data labeling tool. The vulnerability resides in the /projects/upload-example endpoint, which fails to sanitize user-provide...

6.1CVSS6.8AI score0.01898EPSS

SaveExploits3References1

Nuclei•added 2026/10/25 2:06 a.m.•38 views

Label Studio < 1.16.0 - Cross-Site Scripting

Label Studio prior to version 1.16.0 contains a cross-site scripting caused by rendering unsanitized user-provided HTML in the /projects/upload-example endpoint, letting attackers execute arbitrary JavaScript via crafted labelconfig in a GET request, exploit requires victims to visit malicious UR...

6.1CVSS6.1AI score0.01898EPSS

SaveExploits3References2

Nuclei•added 2026/10/25 2:06 a.m.•126 views

Label Studio - Sensitive Information Exposure

An attacker can construct a filter chain to filter tasks based on sensitive fields for all user accounts on the platform by exploiting Django's Object Relational Mapper ORM. Since the results of query can be manipulated by the ORM filter, an attacker can leak these sensitive fields character by...

7.5CVSS6.4AI score0.04055EPSS

SaveExploits3References3

Nuclei•added 2026/10/25 2:06 a.m.•179 views

Label Studio - Cross-Site Scripting

Versions prior to 1.9.2 have a cross-site scripting XSS vulnerability that could be exploited when an authenticated user uploads a crafted image file for their avatar that gets rendered as a HTML file on the website. id: CVE-2023-47115 info: name: Label Studio - Cross-Site Scripting author: isaca...

7.1CVSS6.1AI score0.01448EPSS

SaveExploits1References5

Chainguard•added 2026/10/21 8:55 p.m.•7 views

CVE-2026-112400 vulnerabilities

Vulnerabilities for packages: label-studio, netbox-fips, openstack-horizon-2025.2, superset-fips, nemo-gym, apache-beam-python-3.13-sdk, jupyter-all-spark-notebook, kserve-xgbserver, openstack-horizon-2026.1-fips, tensorflow-gpu-jupyter, netbox, apache-beam-python-3.12-sdk,...

8.7CVSS5.9AI score0.00512EPSS

SaveExploits0

Chainguard•added 2026/10/21 8:55 p.m.•8 views

CVE-2026-112403 vulnerabilities

9.2CVSS6.1AI score0.00771EPSS

SaveExploits1

Chainguard•added 2026/10/21 8:55 p.m.•6 views

CVE-2026-112895 vulnerabilities

8.7CVSS5.9AI score0.00417EPSS

SaveExploits0

Chainguard•added 2026/10/21 8:55 p.m.•6 views

CVE-2026-112897 vulnerabilities

8.7CVSS5.9AI score0.00512EPSS

SaveExploits0