23536 matches found
CVE-2024-11039 Deserialization of Untrusted Data in binary-husky/gpt_academic
A pickle deserialization vulnerability exists in the Latex English error correction plug-in function of binary-husky/gptacademic versions up to and including 3.83. This vulnerability allows attackers to achieve remote command execution by deserializing untrusted data. The issue arises from the...
CVE-2024-11039 Deserialization of Untrusted Data in binary-husky/gpt_academic
A pickle deserialization vulnerability exists in the Latex English error correction plug-in function of binary-husky/gptacademic versions up to and including 3.83. This vulnerability allows attackers to achieve remote command execution by deserializing untrusted data. The issue arises from the...
CVE-2024-11039 Deserialization of Untrusted Data in binary-husky/gpt_academic
A pickle deserialization vulnerability exists in the Latex English error correction plug-in function of binary-husky/gptacademic versions up to and including 3.83. This vulnerability allows attackers to achieve remote command execution by deserializing untrusted data. The issue arises from the...
CVE-2024-11039
CVE-2024-11039 affects binary-husky/gpt_academic
CVE-2024-11039
A pickle deserialization vulnerability exists in the Latex English error correction plug-in function of binary-husky/gptacademic versions up to and including 3.83. This vulnerability allows attackers to achieve remote command execution by deserializing untrusted data. The issue arises from the...
CVE-2024-9016
CVE-2024-9016 affects D-Tale (Man Group) for Pandas data structures, where versions
CVE-2024-9880
CVE-2024-9880 is marked as rejected by its CVE Numbering Authority; the connected documents confirm rejection but provide no public technical details (impact, exploit, or fix) in the supplied sources.
PT-2025-12192
Name of the Vulnerable Software and Affected Versions onnx/onnx framework version 1.16.1 and earlier Description A vulnerability in the download model function of the onnx/onnx framework allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar...
PT-2025-12294
Name of the Vulnerable Software and Affected Versions pandas-dev/pandas versions up to and including v2.2.2 Description A command injection issue exists in the pandas.DataFrame.query function, allowing an attacker to execute arbitrary commands on the server by crafting a malicious query. The issu...
GPT Academic Code Issues and Vulnerabilities
GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a code issue vulnerability that arises from unsafe deserialization of serialized data received from users by the Latex English Error Correction Plugin feature...
CVE-2024-7776: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the downloadmodel function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files i...
PT-2025-12260
Name of the Vulnerable Software and Affected Versions man-group dtale versions = 3.13.1 Description The issue allows for unauthenticated remote command execution via the df.query method when the query engine is set to 'python'. This is due to the query parameters from the request being directly...
AIX : Multiple Vulnerabilities (IJ53929)
The version of AIX installed on the remote host is prior to APAR IJ53929. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ53929 advisory. - IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due...
AIX : Multiple Vulnerabilities (IJ53923)
The version of AIX installed on the remote host is prior to APAR IJ53923. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ53923 advisory. - IBM AIX 7.2 and 7.3 nimsh service SSL/TLS protection mechanisms could allow a remote attacker to execute arbitrary commands due...
AIX : Multiple Vulnerabilities (IJ53792) (deprecated)
The vendor has closed the APAR/removed the security issue. %NASLMINLEVEL 80900 C Tenable, Inc. Disabled on 2026/02/17. Advisory states "Closed" and "Removed security issue." include'compat.inc'; if description scriptid232950; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate...