817 matches found
EUVD-2025-11574
Malicious code in bioql PyPI...
EUVD-2025-11576
Malicious code in bioql PyPI...
EUVD-2024-32601
Malicious code in bioql PyPI...
EUVD-2024-17199
Malicious code in bioql PyPI...
EUVD-2022-46898
Malicious code in bioql PyPI...
EUVD-2024-29724
Malicious code in bioql PyPI...
EUVD-2022-51177
Malicious code in bioql PyPI...
JetBrains ToolBox before version 1.18 is vulnerable to Remote Code Execution via a browser protocol handler.
...
JetBrains ToolBox before version 1.18 is vulnerable to a Denial of Service attack via a browser protocol handler.
...
In JetBrains Toolbox App before 1.15.5666 for Windows, privilege escalation was possible.
...
JetBrains Toolbox before 1.15.5605 was resolving an internal URL via a cleartext http connection.
...
PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element.
...
CVE-2025-10236
A vulnerability has been found in binary-husky gptacademic up to 3.91. Impacted is the function mergetexfiles of the file crazyfunctions/latexfns/latextoolbox.py of the component LaTeX File Handler. Such manipulation of the argument \input leads to path traversal. The attack may be launched...
Malicious code in crew-toolbox (npm)
The package crew-toolbox was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 814628864e80153a94f63be13a31cda738fad89160a114cb24559afb0fdbf60f Any computer that has this package installed or running should be considered fully...
MAL-2025-47056 Malicious code in crew-toolbox (npm)
The package crew-toolbox was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 814628864e80153a94f63be13a31cda738fad89160a114cb24559afb0fdbf60f Any computer that has this package installed or running should be considered fully...
Malicious Package
Overview crew-toolbox is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CVE-2025-10236
A vulnerability has been found in binary-husky gptacademic up to 3.91. Impacted is the function mergetexfiles of the file crazyfunctions/latexfns/latextoolbox.py of the component LaTeX File Handler. Such manipulation of the argument \input leads to path traversal. The attack may be launched...
CVE-2025-10236
CVE-2025-10236 affects binary-husky gpt_academic up to version 3.91. The vulnerability resides in the LaTeX File Handler’s merge_tex_files_ function inside crazy_functions/latex_fns/latex_toolbox.py, where untrusted input passed to the \
CVE-2025-10236 binary-husky gpt_academic LaTeX File latex_toolbox.py merge_tex_files_ path traversal
A vulnerability has been found in binary-husky gptacademic up to 3.91. Impacted is the function mergetexfiles of the file crazyfunctions/latexfns/latextoolbox.py of the component LaTeX File Handler. Such manipulation of the argument \input leads to path traversal. The attack may be launched...
GPT Academic 路径遍历漏洞
GPT Academic is an interface by the individual developer binary-husky to provide pragmatic interactions for LLM large language models such as GPT/GLM. A path traversal vulnerability exists in GPT Academic 3.91 and earlier, which stems from a misbehavior with the parameter input in the file...