Arbitrary Code Injection

Overview litellm is a Library to easily interface with LLM API providers Affected versions of this package are vulnerable to Arbitrary Code Injection via the createguardrail, updateguardrail, deleteguardrail, and patchguardrail handlers in the guardrails API. An attacker can upload or modify cust...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the proxy process. An attacker can access internal network resources and cloud metadata endpoints by exploiting a race condition between DNS validation and the actual HTTP request, using DNS rebinding...

CVE-2026-42203

A flaw was found in LiteLLM, an AI Gateway. An authenticated user could exploit this by sending a crafted prompt template to the POST /prompts/test endpoint. The endpoint rendered user-supplied prompt templates without proper sandboxing. This could lead to arbitrary code execution within the...

LiteLLM has a sandbox escape in custom-code guardrail

Impact The POST /guardrails/testcustomcode endpoint runs user-supplied Python inside a hand-rolled sandbox. The sandbox can be escaped using bytecode-level techniques, allowing arbitrary code execution in the proxy process — which runs as root in the default Docker image. Reaching the endpoint...

EUVD-2025-176947

Malicious code in proxy-process-rho-chi-web npm...

EUVD-2020-13006

Malware in sbrugna...

Fortinet Fortigate Webproxy process DoS (FG-IR-23-184)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-184 advisory. - A use after free vulnerability CWE-416 in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiPro...

PT-2021-24230 · Avast · Avast Antivirus

Name of the Vulnerable Software and Affected Versions: Avast Antivirus versions prior to 20.8 Description: A privilege escalation issue exists in the Self-Defense driver of Avast Antivirus, allowing a local user with SYSTEM privileges to gain elevated privileges. This is achieved by "hollowing" t...

CVE-2019-1886: Improper Input Validation

A vulnerability in the HTTPS decryption feature of Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to insufficient validation of Secure Sockets Layer SSL server certificates. An attacker could...

PT-2016-6941

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA versions 9.0.1-162 through 9.1.1-074 Description A vulnerability in HTTP URL parsing could allow an unauthenticated, remote attacker to cause a denial of service DoS due to the proxy process unexpectedly...

Cisco Web Security Appliance HTTP URL Denial of Service Vulnerability

A vulnerability in HTTP URL parsing of Cisco AsyncOS for Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a denial of service DoS vulnerability due to the proxy process unexpectedly restarting. The vulnerability is due to improper input validation of the...

CVE-2016-1440: Undefined Security Weakness

The proxy process on Cisco Web Security Appliance WSA devices through 9.1.0-070 allows remote attackers to cause a denial of service CPU consumption by establishing an FTP session and then improperly terminating the control connection after a file transfer, aka Bug ID CSCuy43468...

CVE-2016-1380: Improper Input Validation

Cisco AsyncOS 8.0 before 8.0.6-119 on Web Security Appliance WSA devices allows remote attackers to cause a denial of service proxy-process hang via a crafted HTTP POST request, aka Bug ID CSCuo12171...

CVE-2016-1382: Improper Input Validation

Cisco AsyncOS before 8.5.3-069 and 8.6 through 8.8 on Web Security Appliance WSA devices mishandles memory allocation for HTTP requests, which allows remote attackers to cause a denial of service proxy-process reload via a crafted request, aka Bug ID CSCuu02529...

PT-2016-4747

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS version 8.0 before 8.0.6-119 on Web Security Appliance WSA devices Description The issue allows remote attackers to cause a denial of service, specifically a proxy-process hang, via a crafted HTTP POST request. Recommendations Fo...

PT-2016-4749

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA versions prior to 8.5.3-069 Cisco Web Security Appliance WSA versions 8.6 through 8.8 Description The issue is related to the mishandling of memory allocation for HTTP requests. This allows remote attackers to...

Cisco Web Security Appliance HTTP Length Denial of Service Vulnerability

A vulnerability in HTTP request parsing in Cisco AsyncOS for the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a denial of service DoS condition when the proxy process unexpectedly restarts. The vulnerability occurs because the affected software does no...

Internet Explorer EPM sandbox out vulnerability analysis CVE-2 0 1 4-6 3 5 0-a vulnerability warning-the black bar safety net

0x00 Preface Author: James Forshaw Original: link This month Microsoft fixed 3 different IE enhanced protected mode EPM sandbox out of vulnerabilities by me the original author, the same below）at 8 months of disclosure. The Sandbox is Project Zero I also participated in the most major concern the...