EUVD-2021-26224

Malware in sbrugna...

EUVD-2018-3355

Malware in sbrugna...

EUVD-2007-5254

Malware in sbrugna...

EUVD-2019-15046

Malware in sbrugna...

EUVD-2019-7217

Malware in sbrugna...

EUVD-2019-4512

Malware in sbrugna...

EUVD-2020-3932

Malware in sbrugna...

EUVD-2021-21211

Malware in sbrugna...

EUVD-2017-11283

Malware in sbrugna...

Improper Verification of Source of a Communication Channel

Overview sillytavern is a LLM Frontend for Power Users Affected versions of this package are vulnerable to Improper Verification of Source of a Communication Channel via improper validation of the Host header in inbound HTTP requests. An attacker can gain unauthorized access to sensitive data,...

SillyTavern Web Interface Vulnerable DNS Rebinding

Summary The web UI for SillyTavern is susceptible to DNS rebinding, allowing attackers to perform actions like install malicious extensions, read chats, inject arbitrary HTML for phishing, etc. Details DNS rebinding is a method to bypass the CORS policies by tricking the browser into resolving...

EUVD-2025-32552

SillyTavern Web Interface Vulnerable DNS Rebinding...

GHSA-7CXJ-W27X-X78Q SillyTavern Web Interface Vulnerable DNS Rebinding

Summary The web UI for SillyTavern is susceptible to DNS rebinding, allowing attackers to perform actions like install malicious extensions, read chats, inject arbitrary HTML for phishing, etc. Details DNS rebinding is a method to bypass the CORS policies by tricking the browser into resolving...

CVE-2025-59159

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...

CVE-2025-59159 SillyTavern Web Interface Vulnerable to DNS Rebinding

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...

CVE-2025-59159 SillyTavern Web Interface Vulnerable to DNS Rebinding

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...

CVE-2025-59159

SillyTavern’s web UI (prior to 1.13.4) is vulnerable to DNS rebinding, enabling attackers to read chats, inject HTML, install extensions, and execute phishing-style actions. The issue is mitigated in 1.13.4 by adding a host validation setting (hostWhitelist.enabled) in config.yaml or SILLYTAVERN_...

CVE-2025-59159 SillyTavern Web Interface Vulnerable to DNS Rebinding

SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing...

PT-2025-40903

Name of the Vulnerable Software and Affected Versions SillyTavern versions prior to 1.13.4 Description SillyTavern is a locally installed user interface for interacting with large language models, image generation engines, and text-to-speech models. The web user interface, in versions prior to...

SillyTavern 安全漏洞

SillyTavern is an open source front-end interface for a large language model from SillyTavern. A security vulnerability exists in SillyTavern versions prior to 1.13.4, which stems from vulnerability to DNS rebinding attacks that could lead to the installation of malicious extensions, reading chat...