PT-2025-12131

Name of the Vulnerable Software and Affected Versions binary-husky/gpt academic version 310122f Description A Regular Expression Denial of Service ReDoS attack is possible due to the application's use of a regular expression to parse user input, which can take polynomial time to match certain...

PT-2025-12133 · Unknown +1 · Binary-Husky/Gpt Academic +1

Name of the Vulnerable Software and Affected Versions: binary-husky/gpt academic version git 310122f Description: A vulnerability in binary-husky/gpt academic allows for remote code execution. The application supports the extraction of user-provided RAR files without proper validation. The Python...

CVE-2024-10986: Improper Link Resolution Before File Access

GPT Academic version 3.83 is vulnerable to a Local File Read LFI vulnerability through its HotReload function. This function can download and extract tar.gz files from arxiv.org. Despite implementing protections against path traversal, the application overlooks the Tarslip triggered by symlinks...

GPT Academic 安全漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a path traversal vulnerability that can be exploited by an attacker to disclose sensitive information...

GPT Academic 安全漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a remote code execution vulnerability that stems from not properly validating a user-supplied RAR file, which can be exploited by an attacker to cause remote...

GPT Academic 安全漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a security vulnerability that originates from a specially crafted zip bomb upload that can be exploited by an attacker to cause a memory exhaustion crash...

PT-2025-12130

Name of the Vulnerable Software and Affected Versions binary-husky/gpt academic versions as of commit git 3890467 Description A vulnerability in the binary-husky/gpt academic repository allows an attacker to crash the server by uploading a specially crafted zip bomb. The server decompresses the...

GPT Academic 代码注入漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a command injection vulnerability that stems from a security issue with the CodeInterpreter plugin, which can be exploited by an attacker to achieve Remote Co...

CVE-2024-11030: Server-Side Request Forgery (SSRF)

GPT Academic version 3.83 is vulnerable to a Server-Side Request Forgery SSRF vulnerability through its HotReload plugin function, which calls the crazyutils.getfilesfromeverything API without proper sanitization. This allows attackers to exploit the vulnerability to abuse the victim GPT Academic...

GPT Academic 安全漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a denial of service vulnerability that can be exploited by an attacker to cause a regular expression denial of service attack...

PT-2025-12091

Name of the Vulnerable Software and Affected Versions binary-husky/gpt academic at commit 679352d Description A path traversal issue exists, allowing an attacker to bypass the blocked paths protection and read sensitive information, such as the OpenAI API key, from the config.py file. This issue...

PT-2025-12090 · Unknown · Binary-Husky/Gpt Academic

Name of the Vulnerable Software and Affected Versions: binary-husky/gpt academic version 3.83 Description: A Denial of Service DoS vulnerability exists in the file upload feature due to improper handling of form-data with a large filename in the file upload request. An attacker can exploit this b...

PT-2025-12065 · Unknown · Binary-Husky/Gpt Academic

Name of the Vulnerable Software and Affected Versions: binary-husky/gpt academic version 3.83 Description: An open redirect issue exists, allowing attackers to exploit user-controlled input in the file parameter for malicious purposes, such as phishing, malware distribution, and credential theft...

PT-2025-12054

Name of the Vulnerable Software and Affected Versions binary-husky/gpt academic version 3.83 Description A Denial of Service DoS issue allows an attacker to cause the server to become inaccessible by adding excessive characters to the end of a multipart boundary during file upload. This results i...

PT-2025-12087 · Unknown · Gpt Academic

Name of the Vulnerable Software and Affected Versions: GPT Academic version 3.83 Description: The issue concerns a Local File Read LFI vulnerability through the HotReload function, which can download and extract tar.gz files from arxiv.org. Despite protections against path traversal, the...

GPT Academic 资源管理错误漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. A denial of service vulnerability exists in GPT Academic, which stems from a security issue in the file upload feature that can be exploited by an attacker to cause a denial of service...

GPT Academic 访问控制错误漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from an Access Control Error vulnerability that could be exploited by an attacker to cause unauthorized operations...

GPT Academic 安全漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a denial of service vulnerability that stems from the use of insecure regular expressions. An attacker could exploit this vulnerability to cause a regular...

PT-2025-12088 · Hotreload +2 · Hotreload +2

Name of the Vulnerable Software and Affected Versions: GPT Academic version 3.83 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability. It occurs through the HotReload plugin function, which calls the crazy utils.get files from everything API without proper...

GPT Academic 路径遍历漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a path traversal vulnerability that can be exploited to cause an attacker to read a config.py file containing sensitive information...