2605 matches found
FastChat Denial of Service vulnerability
A Denial of Service DoS vulnerability exists in the file upload feature of lm-sys/fastchat version 0.2.36. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this by sending a payload with an excessively large...
CVE-2024-8736
A Denial of Service DoS vulnerability exists in multiple file upload endpoints of parisneo/lollms-webui version V12 Strawberry. The vulnerability can be exploited remotely via Cross-Site Request Forgery CSRF. Despite CSRF protection preventing file uploads, the application still processes multipa...
CVE-2024-12391
A vulnerability in binary-husky/gptacademic, as of commit 310122f, allows for a Regular Expression Denial of Service ReDoS attack. The function '解析项目源码（手动指定和筛选源码文件类型）' permits the execution of user-provided regular expressions. Certain regular expressions can cause the Python RE engine to take...
CVE-2024-11043
A Denial of Service DoS vulnerability was discovered in the /api/v1/boards/boardid endpoint of invoke-ai/invokeai version v5.0.2. This vulnerability occurs when an excessively large payload is sent in the boardname field during a PATCH request. By sending a large payload, the UI becomes...
CVE-2024-10650
ChuanhuChatGPT 20240918 is affected by an unauthenticated DoS vulnerability (CVE-2024-10650). An attacker can exhaust resources by sending large payloads structured around multipart boundaries, with exploitation described as grouping data in sequences (e.g., 10 characters per line, multiple lines...
CVE-2024-12070
CVE-2024-12070 concerns a DoS vulnerability in the file upload feature of haotian-liu/llava (Release v1.2.0 / LLaVA-1.6). The root cause is improper handling of form-data with an excessively large filename in the file upload request, which can overwhelm the server and render it unresponsive. Expl...
CVE-2024-12534 Denial of Service (DoS) in open-webui/open-webui
In version v0.3.32 of open-webui/open-webui, the application allows users to submit large payloads in the email and password fields during the sign-in process due to the lack of character length validation on these inputs. This vulnerability can lead to a Denial of Service DoS condition when a us...
CVE-2024-11033 Denial of Service (DoS) in binary-husky/gpt_academic
A Denial of Service DoS vulnerability exists in the file upload feature of binary-husky/gptacademic version 3.83. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this vulnerability by sending a payload with an...
CVE-2024-12704
CVE-2024-12704 affects run-llama/llama_index version v0.12.5, specifically the LangChainLLM class. The vulnerability arises in the streaming path: stream_complete runs the LLM in a thread and returns results via StreamingGeneratorCallbackHandler.get_response_gen. If the thread terminates abnormal...
CVE-2024-7765 Denial of Service in h2oai/h2o-3
In h2oai/h2o-3 version 3.46.0.2, a vulnerability exists where uploading and repeatedly parsing a large GZIP file can cause a denial of service. The server becomes unresponsive due to memory exhaustion and a large number of concurrent slow-running jobs. This issue arises from the improper handling...
PT-2025-12090 · Unknown · Binary-Husky/Gpt Academic
Name of the Vulnerable Software and Affected Versions: binary-husky/gpt academic version 3.83 Description: A Denial of Service DoS vulnerability exists in the file upload feature due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this b...
PT-2025-12051 · Unknown +1 · Chuanhuchatgpt +1
Name of the Vulnerable Software and Affected Versions: ChuanhuChatGPT version 20240918 Description: A Denial of Service DoS vulnerability was identified in ChuanhuChatGPT, which could be exploited by sending large data payloads using a multipart boundary. Although a patch was applied for a previo...
Debian dla-4086 : python-django-doc - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4086 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4086-1 [email protected] https://www.debian.org/lts/security/...
CVE-2025-27787
Applio (versions 3.2.8-bugfix and earlier) is affected by a DoS when restart.py executes. The train.py model_name parameter accepts user input and passes it to stop_train in restart.py, which constructs a path to a folder containing config.json. The config.json’s process_pids list is read and all...
[SECURITY] [DLA 4086-1] python-django security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4086-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb March 19, 2025 https://wiki.debian.org/LTS -...
SUSE-SU-2025:0959-1 Security update for python-Django
This update for python-Django fixes the following issues: - CVE-2025-26699: Fixed potential denial-of-service in django.utils.text.wrap bsc1239052...
CVE-2024-10442
Off-by-one error vulnerability in the transmission component in Synology Replication Service before 1.0.12-0066, 1.2.2-0353 and 1.3.0-0423 and Synology Unified Controller DSMUC before 3.1.4-23079 allows remote attackers to execute arbitrary code, potentially leading to a broader impact across the...
Fedora 40 : python-django4.2 (2025-d58f8ec8ec)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-d58f8ec8ec advisory. ix for CVE-2025-26699: Potential denial-of-service vulnerability in django.utils.text.wrap Tenable has extracted the preceding description block directly fro...
CVE-2025-29910 CryptoLib's crypto_handle_incrementing_nontransmitted_counter Function has Memory Leak
CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. A memory leak vulnerability was identified in the...