2728 matches found
EUVD-2025-32552
SillyTavern Web Interface Vulnerable DNS Rebinding...
SillyTavern Web Interface Vulnerable DNS Rebinding
Summary The web UI for SillyTavern is susceptible to DNS rebinding, allowing attackers to perform actions like install malicious extensions, read chats, inject arbitrary HTML for phishing, etc. Details DNS rebinding is a method to bypass the CORS policies by tricking the browser into resolving...
Improper Verification of Source of a Communication Channel
Overview sillytavern is a LLM Frontend for Power Users Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via improper validation of the Host header in inbound HTTP requests. An attacker can gain unauthorized access to sensitive data,...
CVE-2025-59159
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...
CVE-2025-59159 SillyTavern Web Interface Vulnerable to DNS Rebinding
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...
CVE-2025-59159
SillyTavern’s web UI (prior to 1.13.4) is vulnerable to DNS rebinding, enabling attackers to read chats, inject HTML, install extensions, and execute phishing-style actions. The issue is mitigated in 1.13.4 by adding a host validation setting (hostWhitelist.enabled) in config.yaml or SILLYTAVERN_...
CVE-2025-59159 SillyTavern Web Interface Vulnerable to DNS Rebinding
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...
CVE-2025-59159 SillyTavern Web Interface Vulnerable to DNS Rebinding
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...
PT-2025-40903
Name of the Vulnerable Software and Affected Versions SillyTavern versions prior to 1.13.4 Description SillyTavern is a locally installed user interface for interacting with large language models, image generation engines, and text-to-speech models. The web user interface, in versions prior to...
SillyTavern 安全漏洞
SillyTavern is an open source front-end interface for a large language model from SillyTavern. A security vulnerability exists in SillyTavern versions prior to 1.13.4, which stems from vulnerability to DNS rebinding attacks that could lead to the installation of malicious extensions, reading chat...
CVE-2025-59159: Origin Validation Error
SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...
EUVD-2025-31619
Malicious code in bioql PyPI...
EUVD-2024-51930
Malicious code in bioql PyPI...
EUVD-2024-0083
Malicious code in bioql PyPI...
EUVD-2023-52366
Malicious code in bioql PyPI...
EUVD-2023-56908
Malicious code in bioql PyPI...
EUVD-2023-1043
Malicious code in bioql PyPI...
EUVD-2022-46545
Malicious code in bioql PyPI...