2213 matches found
CVE-2025-46567: Deserialization of Untrusted Data
LLama Factory enables fine-tuning of large language models. Prior to version 1.0.0, a critical vulnerability exists in the llamafybaichuan2.py script of the LLaMA-Factory project. The script performs insecure deserialization using torch.load on user-supplied .bin files from an input directory. An...
CVE-2025-3622 Xorbits Inference model.py load deserialization
A vulnerability, which was classified as critical, has been found in Xorbits Inference up to 1.4.1. This issue affects the function load of the file xinference/thirdparty/cosyvoice/cli/model.py. The manipulation leads to deserialization...
Security Bulletin: IBM Cloud Pak for Network Automation 2.4.7 fixes multiple security vulnerabilities
Summary IBM Cloud Pak for Network Automation 2.4.7 fixes multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2023-24538 DESCRIPTION: Golang Go could allow a remote attacker to execute arbitrary code on the system, caused by the failure to properly consider...
Applio 代码问题漏洞
Applio is an open source AI voice conversion tool from Spanish AI Hispano. A code issue vulnerability exists in Applio 3.2.8-bugfix and prior versions, which stems from an insecure deserialization issue in infer.py that could lead to remote code execution...
Applio 信息泄露漏洞
Applio is an open source AI speech conversion tool from Spanish AI Hispano. An information disclosure vulnerability exists in Applio 3.2.8-bugfix and earlier versions, which stems from an arbitrary file read issue in the exportindex function of train.py, which could lead to the reading of arbitra...
CVE-2025-26047
Loggrove v1.0 is vulnerable to SQL Injection in the read.py file...
CVE-2022-36024
py-cord is a an API wrapper for Discord written in Python. Bots creating using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the application.commands scope without the bot scope. Currently, it appears that all public bots that use slash commands are...
CVE-2022-42969 affecting package python-py 1.10.0-3
CVE-2022-42969 affecting package python-py 1.10.0-3. This CVE either no longer is or was never applicable...
CVE-2022-42969 affecting package python-py 1.10.0-1
CVE-2022-42969 affecting package python-py 1.10.0-1. No patch is available currently...
Malicious code in py-colorprinting (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11666 Malicious code in py-colorprinting (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in afriton-py (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-11515 Malicious code in afriton-py (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-10205 Malicious code in web3-py-tools (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in py-solana-cli (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-10110 Malicious code in py-solana-cli (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in class-py (PyPI)
--- -= Per source details. Do not edit below this line.=-...
DEBIAN-CVE-2024-9979
A flaw was found in PyO3. This vulnerability causes a use-after-free issue, potentially leading to memory corruption or crashes via unsound borrowing from weak Python references...
Security Bulletin: Vulnerability in pytest-dev py affects IBM watsonx.data
Summary pytest-dev py is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw by the InfoSvnCommand argument. By sending a specially-crafted regex info data, a remote attacker could exploit this vulnerability to cause a denial of service condition. This c...
CVE-2024-8948
A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpzasbytes of the file py/objint.c. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and ma...