2972 matches found
CVE-2025-62356
A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection...
EUVD-2025-34887
A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection...
EUVD-2025-34892
Keras framework vulnerable to deserialization of untrusted data...
CVE-2025-62356
A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection...
UBUNTU-CVE-2025-49655
Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being...
CVE-2025-62356
CVE-2025-62356 affects Qodo Gen IDE (Qodo Gen IDE). A path traversal vulnerability enables a threat actor to read arbitrary local files on an end user’s system, including files outside of current projects. The issue is reachable directly and via indirect prompt injection, impacting confidentialit...
CVE-2025-62356
A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection...
CVE-2025-62356
A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection...
Qodo Gen 安全漏洞
Qodo Gen is a code AI aid from Qodo, Inc. in the United States. A security vulnerability exists in Qodo Gen that stems from vulnerability to a path traversal attack that could result in reading arbitrary local files on an end-user's system...
Windsurf 安全漏洞
Windsurf is an AI programming software from Windsurf. Windsurf has a security vulnerability that stems from the presence of a path traversal vulnerability that could lead to reading and writing arbitrary local files...
GHSA-3XGR-H5HQ-7299 GeoIP processor disables SSL certificate validation when downloading databases
Impact The GeoIP processor in Data Prepper was configured to trust all SSL certificates and disable hostname verification when downloading GeoIP databases from HTTP URLs, making downloads vulnerable to man-in-the-middle attacks. The GeoIP processor included a custom SSL implementation that...
Grafana Path Traversal Vulnerability
Grafana contains a path traversal vulnerability that could allow access to local files...
EUVD-2008-5194
Malware in sbrugna...
EUVD-2008-5181
Malware in sbrugna...
EUVD-2007-5815
Malware in sbrugna...
EUVD-2010-1529
Malware in sbrugna...
EUVD-2007-5031
Malware in sbrugna...
EUVD-2017-14694
Malware in sbrugna...