28158 matches found
EUVD-2019-19365
Malware in sbrugna...
LLaMA-Factory 安全漏洞
LLaMA-Factory is a fine-tuned large-scale language model by a Chinese hoshi-hiyouga individual developer. A security vulnerability exists in LLaMA-Factory versions prior to 0.9.4, which stems from the processrequest function not validating or cleaning up URLs, which could lead to server-side...
PT-2025-41167
Name of the Vulnerable Software and Affected Versions LLaMA-Factory versions prior to 0.9.4 Description LLaMA-Factory, a tuning library for large language models, contains a Server-Side Request Forgery SSRF issue in the chat API. Authenticated users can make the server send arbitrary HTTP request...
CVE-2025-61666
Traccar is an open source GPS tracking system. Default installs of Traccar on Windows between versions 6.1- 6.8.1 and non default installs between versions 5.8 - 6.0 are vulnerable to unauthenticated local file inclusion attacks which can lead to leakage of passwords or any file on the file syste...
CVE-2025-6985 XXE Vulnerability in langchain-ai/langchain
The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity XXE attacks due to unsafe XSLT parsing. This vulnerability arises because the class allows the use of arbitrary XSLT stylesheets, which are parsed using lxml.etree.parse and lxml.etree.XSL...
langchain-text-splitters 代码问题漏洞
langchain-text-splitters is a Python package open-sourced by LangChain. A code issue vulnerability exists in langchain-text-splitters version 0.3.8, which stems from the HTMLSectionSplitter class allowing the use of arbitrary XSLT stylesheets, which could lead to an XML External Entity Attack,...
WordPress The7 Elements plugin <= 2.7.11 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin The7 Elements versions = 2.7.11...
WordPress The7 theme < 12.8.1.1 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme The7 versions 12.8.1.1...
CVE-2025-7721
The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.7.3 via the task parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the...
WordPress JoomSport plugin <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion vulnerability
Unauthenticated Directory Traversal to Local File Inclusion vulnerability discovered by mikemyers in WordPress Plugin JoomSport versions = 5.7.3...
EUVD-2024-35539
Malicious code in bioql PyPI...
EUVD-2022-28142
Malicious code in bioql PyPI...
EUVD-2025-9464
Malicious code in bioql PyPI...
EUVD-2025-28083
Malicious code in bioql PyPI...
EUVD-2025-8343
Malicious code in bioql PyPI...
EUVD-2024-0557
Malicious code in bioql PyPI...
EUVD-2025-6693
Malicious code in bioql PyPI...
EUVD-2025-12094
Malicious code in bioql PyPI...