Lucene search
+L

846 matches found

Kitploit
Kitploit
added 2026/09/07 6:05 a.m.5 views

langgrinch-cve-2025-68664-analysis

Análisis de Vulnerabilidad LangGrinch: CVE-2025-68664 Resumen Este repositorio contiene un informe técnico que analiza CVE-2025-68664, también conocido como LangGrinch, una vulnerabilidad de inyección de serialización que afecta a LangChain Core. El informe explica los antecedentes de la...

9.3CVSS7.9AI score0.43415EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/07 4:24 a.m.3 views

CVE-2025-68664-LangGrinch-PoC

📑 Índice 🎯 Resumen Ejecutivo 📂 Estructura del Proyecto 🚀 Inicio Rápido...

9.3CVSS7.8AI score0.43415EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/07 3:10 a.m.6 views

Nmap-API

API de Nmap Usa python3.10, Debian, python-Nmap y el framework flask para crear una API de Nmap que puede realizar escaneos con buena velocidad en línea y es fácil de desplegar. Esta es una implementación para nuestro proyecto universitario PCL que aún está en desarrollo y se actualiza...

6AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/06 8:56 p.m.5 views

LangAlpha

Un arnés de agente para inversiones por vibra «vibe investing» LangAlpha está diseñado para ayudar a interpretar los mercados financieros y respaldar decisiones de inversión. English | 简体中文 | 日本語 Primeros pasos • API Docs • Agent Core • Backend • Web • TUI • Skills • MCP Fija en el panel un resum...

6.3AI score
SaveExploits0References13
Kitploit
Kitploit
added 2026/09/06 9:29 a.m.4 views

Reproduce-CVE-2024-21513

Reproduce-CVE-2024-21513 Resumen Este proyecto demuestra la vulnerabilidad CVE-2024-21513 en el paquete langchain-experimental, específicamente en las versiones =0.0.15 y 0.0.21. La vulnerabilidad permite la ejecución de código arbitrario a través del componente VectorSQLDatabaseChain al recupera...

8.5CVSS5.9AI score0.01864EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/06 6:29 a.m.5 views

CVE-2024-8309

Langchain CVE-2024–8309 भेद्यता के लिए प्रूफ ऑफ कॉन्सेप्ट अवलोकन यह सेटअप GraphCypherQAChain क्लास में प्रॉम्प्ट इंजेक्शन भेद्यता के लिए एक प्रूफ ऑफ कॉन्सेप्ट प्रदर्शित करता है, जो Neo4j डेटाबेस में SQL इंजेक्शन की अनुमति देता है। घटक: 1. Neo4j डेटाबेस : Neo4j चलाता है। 2. बैकएंड FastAPI :...

9.8CVSS6.3AI score0.13743EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 4:17 p.m.7 views

CVE-2026-34070

I Found a Path Traversal Bug in LangChain That Could Leak Your Cloud Credentials How a forgotten legacy API in one of AI's most popular frameworks quietly exposed millions of applications to arbitrary file reads. There's a certain feeling you get when a proof-of-concept works on the first try. No...

7.5CVSS7.8AI score0.01382EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/01 6:39 p.m.7 views

CVE-2024-21513

CVE-2024-21513 PoC para CVE-2024-21513 Exploit original documentado por Snyk Security Research Exploit CVE-2024-21513 es una vulnerabilidad en langchain-experimental donde los resultados no validados de consultas SQL se pasaban a eval de Python, permitiendo la ejecución remota de código mediante...

8.5CVSS6AI score0.01864EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 6:25 p.m.9 views

LangAlpha v2026.09.01

A vibe investing agent harness LangAlpha is built to help interpret financial markets and support investment decisions. English | 简体中文 | 日本語 Getting Started • API Docs • Agent Core • Backend • Web • TUI • Skills • MCP Pin a curated news brief from the dashboard, kick off idea generation, and...

6.3AI score
SaveExploits0References17
Kitploit
Kitploit
added 2026/09/01 5:10 a.m.6 views

CVE-2025-68664

CVE-2025-68664 All I Want for Christmas Is Your Secrets: LangGrinch Strikes LangChain Core CVE-2025-68664 Author: Yarden Porat Cyata Research: LangGrinch Vulnerability in LangChain Published: https://cyata.ai/blog/langgrinch-langchain-core-cve-2025-68664/ Yesterday LangChain published a critical...

9.3CVSS7.8AI score0.43415EPSS
SaveExploits5
OSV
OSV
added 2026/08/31 9:47 a.m.17 views

ROOT-APP-PYPI-CVE-2026-34070 CVE-2026-34070 in langchain-core - Patched by Root

Root has patched CVE-2026-34070 in the langchain-core package for Root:PyPI. Multiple fixed versions available...

7.5CVSS7.3AI score0.01382EPSS
SaveExploits2
OSV
OSV
added 2026/08/31 9:47 a.m.23 views

ROOT-APP-PYPI-CVE-2026-44843 CVE-2026-44843 in langchain-core - Patched by Root

Root has patched CVE-2026-44843 in the langchain-core package for Root:PyPI. Multiple fixed versions available...

8.2CVSS6.8AI score0.00406EPSS
SaveExploits0
OSV
OSV
added 2026/08/31 9:47 a.m.6 views

ROOT-APP-PYPI-CVE-2025-65106 CVE-2025-65106 in langchain-core - Patched by Root

Root has patched CVE-2025-65106 in the langchain-core package for Root:PyPI. Multiple fixed versions available...

8.3CVSS6.9AI score0.00509EPSS
SaveExploits0
OSV
OSV
added 2026/08/31 9:47 a.m.10 views

ROOT-APP-PYPI-CVE-2025-68664 CVE-2025-68664 in langchain-core - Patched by Root

Root has patched CVE-2025-68664 in the langchain-core package for Root:PyPI. Multiple fixed versions available...

9.3CVSS7.3AI score0.43415EPSS
SaveExploits5
RedhatCVE
RedhatCVE
added 2026/08/27 12:37 p.m.7 views

CVE-2026-72848

A flaw was found in langchain-community. An attacker who controls or influences an ingested sitemap can bypass domain restrictions in the SitemapLoader component by pointing a nested sitemap entry at an internal address. This allows the server to fetch internal resources even when...

8.6CVSS5.4AI score0.00476EPSS
SaveExploits0References7
vulnersOsv
vulnersOsv
added 2026/08/21 11:47 p.m.7 views

a-data-processing (0.0.1), a2a-client-handler (0.1.0) +2041 more potentially affected by CVE-2026-72848 via langchain-community (>=0.0.1, <=1.0.0a1)

langchain-community PYPI version =0.0.1, =0.1.0, =0.1.0b1, =0.1.0, =0.1.0, =0.1.0, =4.8.2, =0.1.3, =0.1.0, =1.0.1, =0.1.0, =0.1.0, =3.2.0, =3.4.0 and more Source cves: CVE-2026-72848 Source advisory: SNYK:PYTHON-LANGCHAINCOMMUNITY-19233333...

8.6CVSS5.8AI score0.00476EPSS
SaveExploits0
NVD
NVD
added 2026/08/20 10:18 p.m.18 views

CVE-2026-72848

SitemapLoader.parsesitemap in langchaincommunity/documentloaders/sitemap.py applies the documented restricttosamedomain control only to leaf url entries. The loop over url elements filters cross-domain locations, but the loop over nested sitemap elements passes the child loc straight to...

8.6CVSS0.00476EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/20 9:57 p.m.22 views

CVE-2026-72848 langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery

SitemapLoader.parsesitemap in langchaincommunity/documentloaders/sitemap.py applies the documented restricttosamedomain control only to leaf url entries. The loop over url elements filters cross-domain locations, but the loop over nested sitemap elements passes the child loc straight to...

7.7CVSS5.6AI score
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/20 9:57 p.m.36 views

CVE-2026-72848 langchain-community SitemapLoader Does Not Apply restrict_to_same_domain to Nested Sitemap Index Entries, Allowing Server-Side Request Forgery

SitemapLoader.parsesitemap in langchaincommunity/documentloaders/sitemap.py applies the documented restricttosamedomain control only to leaf url entries. The loop over url elements filters cross-domain locations, but the loop over nested sitemap elements passes the child loc straight to...

8.6CVSS0.00476EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/20 9:57 p.m.62 views

CVE-2026-72848

CVE-2026-72848 is a Server-Side Request Forgery (SSRF) in langchain_community 's SitemapLoader.parse_sitemap (document_loaders/sitemap.py). The restrict_to_same_domain guard is applied only to leaf URL entries; nested sitemap index entries bypass it entirely, passing the child loc directly to Web...

8.6CVSS5.3AI score0.00476EPSS
SaveExploits0References4
Rows per page
Query Builder