CVE-2024-9701 Remote Code Execution in kedro-org/kedro

A Remote Code Execution RCE vulnerability has been identified in the Kedro ShelveStore class version 0.19.8. This vulnerability allows an attacker to execute arbitrary Python code via deserialization of malicious payloads, potentially leading to a full system compromise. The ShelveStore class use...

CVE-2024-7033 Arbitrary File Write in open-webui/open-webui

In version 0.3.8 of open-webui/open-webui, an arbitrary file write vulnerability exists in the downloadmodel endpoint. When deployed on Windows, the application improperly handles file paths, allowing an attacker to manipulate the file path to write files to arbitrary locations on the server's...

CVE-2024-7033

Open-WebUI (open-webui/open-webui) 0.3.8 contains an arbitrary file write vulnerability in the download_model endpoint. On Windows, improper path handling allows an attacker to manipulate the file path and write files to arbitrary locations on the server’s filesystem, potentially overwriting crit...

Malicious code in n11-chatbot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1a368f528c1eb4b3da0f52628aed3b3e5ca54083842086c30a70a91d1110a3cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in my-local-c (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02d644e20cd207e1e86f170a9f0461fdf7ebc239c2b459eca878054fb7dc33ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in airbnb-i18n (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0300bde98e64293234ba880a6e80dbe97bf5d348a18cc288de3d963e8adf768 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in migu-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccbd8955e0708787cb831d8758b4c240d432a13fe1c1c182ded5e19b8cd49d3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2570 Malicious code in cmft-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7480b4348d595d2f3e0c25957e99041d6301f7e51593c0334345c1cdfe2a080c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in arnotest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64475736790097a8b2e30db87aa02796673e4a50b3af8e0d633eb261ec376983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3143 Malicious code in arnotest (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64475736790097a8b2e30db87aa02796673e4a50b3af8e0d633eb261ec376983 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GPT Academic 跨站请求伪造漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a cross-site request forgery vulnerability that stems from a WEB application that does not adequately verify that a request is from a trusted user. An attacke...

PT-2025-12284 · Superagi · Superagi

Name of the Vulnerable Software and Affected Versions: SuperAGI affected versions not specified Description: SuperAGI is vulnerable to remote code execution. The agent template update API allows attackers to control certain parameters, which are then fed to the eval function without any...

Malicious code in ethereum-cryptog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9b4f4e2a3a4121480300942e01892de5c8f71fbecf3f907eb9512d09b0a0a16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2554 Malicious code in ethereum-cryptog (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9b4f4e2a3a4121480300942e01892de5c8f71fbecf3f907eb9512d09b0a0a16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in exampleeeeeeeeeeeeeeeeeeee (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a66e83d3b408d3cbf134ada9b1ce3dbdc0d15c0cbe493c738afbbd90b49aae86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ember-inner-addon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bbbdbcc5d40cae533849a83ada31138fdc88cd05fc5f9a44dfe836d0c028837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2504 Malicious code in ember-inner-addon (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7bbbdbcc5d40cae533849a83ada31138fdc88cd05fc5f9a44dfe836d0c028837 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tasks_mangement (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f5af70a269afd5435306a85b902070f929d511d8855e369cc7c930a9dc50be50 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tasks_viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 21e1bcb65dac0ffae9b7b7e0f14570fa73511f72e91dc2ff7c600497e4d4f9a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2524 Malicious code in plasty (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 101f2171688036d97dd4a9278f0e3a13ddc39853c5161ece25ac283a619b19ba Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...