Lucene search
+L

7 matches found

NVD
NVD
added 4 days ago8 views

CVE-2026-71479

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, maxtokens, maxcompletiontokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversio...

9.1CVSS0.00519EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 4 days ago6 views

CVE-2026-71479

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, maxtokens, maxcompletiontokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversio...

9.1CVSS5.3AI score0.00519EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 4 days ago11 views

CVE-2026-71479 New API: Integer overflow in quota billing yields negative charges (self-crediting)

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, maxtokens, maxcompletiontokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversio...

9.1CVSS5.5AI score
SaveExploits0References6
Cvelist
Cvelist
added 4 days ago46 views

CVE-2026-71479 New API: Integer overflow in quota billing yields negative charges (self-crediting)

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 1.0.0-rc.18, user-controlled image n, video seconds and duration, maxtokens, maxcompletiontokens, maxOutputTokens, audio duration, and billing-expression quantities can overflow conversio...

9.1CVSS0.00519EPSS
SaveExploits0References4
CVE
CVE
added 4 days ago58 views

CVE-2026-71479

In New API (github.com/QuantumNous/new-api) before 1.0.0-rc.18, user-controlled billing multipliers (n, duration, max_tokens, etc.) lacked upper-bound validation and overflow-safe conversion in common/quota_math.go, causing integer overflow into negative settlement charges that credit attacker ac...

9.1CVSS5.4AI score0.00519EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 4 days ago11 views

PT-2026-76692

Name of the Vulnerable Software and Affected Versions New API versions prior to 1.0.0-rc.18 Description An issue exists where user-controlled quantity parameters can cause overflow conversions during quota calculations in common/quota math.go and related settlement paths. A low-privileged account...

9.1CVSS5.2AI score0.00519EPSS
SaveExploits0References8
Cisco Threats
Cisco Threats
added 2014/05/19 1:26 p.m.27 views

Threat Outbreak Alert: Fake Bank Account Transaction Notification Email Messages on May 17, 2014

Medium Alert ID: 34265 First Published: 2014 May 19 13:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank account credit confirmation notice for the recipient. The text in the email message attempts to convince th...

0.8AI score
SaveExploits0
Rows per page
Query Builder