CVE-2025-64703

MaxKB (open‑source enterprise AI assistant) contains an information disclosure vulnerability in versions prior to 2.3.1. The issue arises from Python code in the tool module, where a user can obtain sensitive information despite the process running in a sandbox. The root cause is effectively a sa...

CVE-2025-64511 MaxKB has SSRF in sandbox

MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can access internal network services such as databases through Python code in the tool module, although the process runs in a sandbox. Version 2.3.1 fixes the issue...

Taught by the Flawed: How Dataset Insecurity Breeds Vulnerable AI Code

AI programming assistants have demonstrated a tendency to generate code containing basic security vulnerabilities. While developers are ultimately responsible for validating and reviewing such outputs, improving the inherent quality of these generated code snippets remains essential. A key...

Eval Injection

Overview talkpipe is a Python internal and external DSL for writing generative AI analytics Affected versions of this package are vulnerable to Eval Injection due to using the function eval unsafe in the compileLambda function in the talkpipe/util/datamanipulation.py file. An attacker can execute...

YouTube-Scraper-POC

What this repo is The code in this repository is a proof of...

MAL-2025-191843 Malicious code in python3-6 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d48e27507362baa15b8e41d1554bce82077fcc870112ab6cb4d17694b47c8ef3 During installation, the obfuscated code is run and connect with a remote server. In the current version, the code just opens a URL without exfiltrating any...

EUVD-2020-2744

Malware in sbrugna...

EUVD-2017-2447

Malware in sbrugna...

EUVD-2005-2484

Malware in sbrugna...

EUVD-2021-13350

Malware in sbrugna...

EUVD-2007-1250

Malware in sbrugna...

EUVD-2014-0045

Malware in sbrugna...

EUVD-2009-0012

Malware in sbrugna...

EUVD-2014-2368

Malware in sbrugna...

EUVD-2018-8022

Malware in sbrugna...

EUVD-2018-17775

Malware in sbrugna...

EUVD-2020-26899

Malware in sbrugna...

EUVD-2020-0178

Malware in sbrugna...

EUVD-2005-3008

Malware in sbrugna...

EUVD-2008-6506

Malware in sbrugna...