378 matches found
Exploit for CVE-2023-12345
Exploit-DB MCP Server for Pentesting A Model Context Protocol...
CVE-2025-66416 vulnerabilities
Vulnerabilities for packages: semgrep, open-webui...
GHSA-9H52-P55H-VW2F vulnerabilities
Vulnerabilities for packages: semgrep, open-webui...
GHSA-9H52-P55H-VW2F vulnerabilities
Vulnerabilities for packages: open-webui, semgrep...
Open WebUI Vulnerable to Stored DOM XSS via Note 'Download PDF'
Summary A Stored XSS vulnerability has been discovered in Open-WebUI's Notes PDF download functionality. An attacker can import a Markdown file containing malicious SVG tags into Notes, allowing them to execute arbitrary JavaScript code and steal session tokens when a victim downloads the note as...
open-webui is Vulnerable to Incorrect Access Control
open-webui v0.6.33 is vulnerable to Incorrect Access Control. The API /api/tasks/stop/ directly accesses and cancels tasks without verifying user ownership, enabling attackers a normal user to stop arbitrary LLM response tasks...
EUVD-2025-38253
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and prior contain a code injection vulnerability in the Direct Connections feature that allows malicious external model servers to execute arbitrary JavaScript in victim browsers vi...
openwebui-token-tracking (=0.1.7) potentially affected by CVE-2025-64496 via open-webui (=0.6.0)
open-webui PYPI version =0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking =0.1.7 Source cves: CVE-2025-64496 Source advisory: SNYK:PYTHON-OPENWEBUI-13863430...
GHSA-2QFP-Q593-8484 vulnerabilities
Vulnerabilities for packages: mitmproxy, superset...
GHSA-2QFP-Q593-8484 vulnerabilities
Vulnerabilities for packages: nemo, superset, mitmproxy, pgadmin4...
GHSA-7F5H-V6XP-FCQ8 vulnerabilities
Vulnerabilities for packages: mlflow, reflex, kserve, k8s-sidecar, open-webui...
CVE-2025-62727 vulnerabilities
Vulnerabilities for packages: mlflow, reflex, kserve, k8s-sidecar, open-webui...
CVE-2025-62727 vulnerabilities
Vulnerabilities for packages: airflow-core, reflex, open-webui, mlflow, kserve, nemo, airflow, k8s-sidecar...
Hundreds of People With ‘Top Secret’ Clearance Exposed by House Democrats’ Website
A database containing information on people who applied for jobs with Democrats in the US House of Representatives was left accessible on the open web...
EUVD-2014-1533
Malware in sbrugna...
EUVD-2014-2332
Malware in sbrugna...
EUVD-2010-2681
Malware in sbrugna...