CVE-2023-4899

SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4898

Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4899

The CVE-2023-4899 entry concerns a SQL Injection vulnerability in mintplex-labs/anything-llm (versions prior to 0.0.1). The Red Hat/NVD/NVD-derived entries align on the vulnerability class, with the Huntr PoC detailing a concrete flaw in the /api/workspace/:slug endpoint where the slug parameter ...

CVE-2023-4899 SQL Injection in mintplex-labs/anything-llm

SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4899 SQL Injection in mintplex-labs/anything-llm

SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4898 Authentication Bypass by Primary Weakness in mintplex-labs/anything-llm

Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4898 Authentication Bypass by Primary Weakness in mintplex-labs/anything-llm

Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4898 Authentication Bypass by Primary Weakness in mintplex-labs/anything-llm

Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

CVE-2023-4897

CVE-2023-4897 describes a Relative Path Traversal in mintplex-labs/anything-llm prior to 0.0.1. The vulnerability stems from insufficient validation of the filename parameter in the data-exports endpoint, allowing a crafted request to traverse directories and access sensitive local files as demon...

CVE-2023-4897 Relative Path Traversal in mintplex-labs/anything-llm

Relative Path Traversal in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...

Nation-State Actors Infiltrate U.S. by Exploiting Zoho and Fortinet Flaws

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Multiple nation-state entities infiltrated a prominent U.S. aeronautics organization by capitalizing on vulnerabilities within Fortinet FortiOS SSL-VPN and Zoho ManageEngine ServiceDesk Plus,...

Critical Remote Code Execution Vulnerabilities Discovered in ASUS Routers

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Three critical-severity remote code execution vulnerabilities have been identified in ASUS routers. These vulnerabilities have the potential to allow threat actors to take control of these devices...

Agent Tesla’s New Variant Spreads Through Crafted Excel Files

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A phishing campaign has surfaced, disseminating a new iteration of the Agent Tesla malware through a meticulously crafted Microsoft Excel document. This document exploits a longstanding memory corruption...

DuckTail Targets the Digital Marketers with Malicious Operations

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary DuckTail refers to an operation organized by several threat actors based in Vietnam. These threat actors not only employ common techniques but also share a common objective: to gain unauthorized access t...

CVE-2023-36184

CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json...

CVE-2023-36184

CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json...

Stack overflow

CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json...

CVE-2023-36184

CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json...

MystenLabs Sui Buffer Error Vulnerability

Mysten Labs Sui is a smart contract platform from Mysten Labs Labs. A security vulnerability exists in Mysten Labs Sui v1.2.0, which stems from a stack overflow in component /spec/openrpc.json...

CVE-2023-36184

CVE-2023-36184 concerns Mysten Labs Sui blockchain v1.2.0, with a stack overflow in the component /spec/openrpc.json. The consolidated descriptions across NVD and partner feeds identify the affected product as Sui (Mysten Labs) and the root cause as a stack overflow in the OpenRPC spec endpoint. ...