13130 matches found
GHSA-527M-2XHR-J27G LLaMA Factory's Chat API Contains Critical SSRF and LFI Vulnerabilities
Summary A Server-Side Request Forgery SSRF vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure of sensitive internal services, reconnaissance of the internal network, or...
CVE-2025-61784
LLaMA-Factory's chat API contains SSRF and LFI in the _process_request function (src/llamafactory/api/chat.py). For image_url, video_url, and audio_url, if a URL is not a base64 data URI or local file path, the code fetches the URL with requests.get(url, stream=True).raw without validation, enabl...
EUVD-2021-10849
Malware in sbrugna...
EUVD-2021-27298
Malware in sbrugna...
EUVD-2018-2029
Malware in sbrugna...
EUVD-2016-5312
Malware in sbrugna...
EUVD-2018-20547
Malware in sbrugna...
EUVD-2016-10553
Malware in sbrugna...
EUVD-2020-30247
Malware in sbrugna...
EUVD-2020-23369
Malware in sbrugna...
EUVD-2019-13810
Malware in sbrugna...
EUVD-2019-6664
Malware in sbrugna...
EUVD-2020-1507
Malware in sbrugna...
EUVD-2021-11284
Malware in sbrugna...
EUVD-2018-20410
Malware in sbrugna...
EUVD-2021-17074
Malware in sbrugna...
EUVD-2020-6317
Malware in sbrugna...
EUVD-2021-25664
Malware in sbrugna...