Lucene search
+L

29 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2006-6223

Malware in sbrugna...

4CVSS6.4AI score0.01257EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2006-6224

Malware in sbrugna...

4CVSS6.4AI score0.01219EPSS
SaveExploits0References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2023-46840

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00965EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2025-9644

Malicious code in bioql PyPI...

5.3CVSS5.6AI score0.00206EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/05/23 4:19 a.m.•9 views

CVE-2023-42387

An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via getdbinfo function in install.php...

7.5CVSS6.4AI score0.00965EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/04/05 4:43 p.m.•32 views

CVE-2025-3165

A vulnerability classified as critical has been found in thu-pacman chitu 0.1.0. This affects the function torch.load of the file chitu/chitu/backend.py. The manipulation of the argument ckptpath/quantckptdir leads to deserialization. An attack has to be approached locally...

5.3CVSS7.3AI score0.00206EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/03 4:15 p.m.•17 views

CVE-2025-3165

A vulnerability classified as critical has been found in thu-pacman chitu 0.1.0. This affects the function torch.load of the file chitu/chitu/backend.py. The manipulation of the argument ckptpath/quantckptdir leads to deserialization. An attack has to be approached locally...

5.3CVSS0.00206EPSS
SaveExploits0References4
CVE
CVE
•added 2025/04/03 4:00 p.m.•148 views

CVE-2025-3165

CVE-2025-3165 affects thu-pacman chitu 0.1.0. The vulnerability is in the function torch.load within chitu/chitu/backend.py, where manipulation of the arguments ckpt_path/quant_ckpt_dir leads to deserialization. An attack requires local access. The issue is documented across multiple feeds (NVD, ...

5.3CVSS7.2AI score0.00206EPSS
SaveExploits0References4
OSV
OSV
•added 2025/04/03 4:00 p.m.•12 views

CVE-2025-3165 thu-pacman chitu backend.py torch.load deserialization

A vulnerability classified as critical has been found in thu-pacman chitu 0.1.0. This affects the function torch.load of the file chitu/chitu/backend.py. The manipulation of the argument ckptpath/quantckptdir leads to deserialization. An attack has to be approached locally...

4.8CVSS5.8AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2025/04/03 4:00 p.m.•10 views

CVE-2025-3165 thu-pacman chitu backend.py torch.load deserialization

A vulnerability classified as critical has been found in thu-pacman chitu 0.1.0. This affects the function torch.load of the file chitu/chitu/backend.py. The manipulation of the argument ckptpath/quantckptdir leads to deserialization. An attack has to be approached locally...

5.3CVSS5.4AI score0.00206EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/04/03 12:00 a.m.•32 views

PT-2025-14773 · Unknown · Thu-Pacman Chitu

Name of the Vulnerable Software and Affected Versions: thu-pacman chitu version 0.1.0 Description: A critical vulnerability has been found in thu-pacman chitu. This issue affects the torch.load function in the file chitu/chitu/backend.py. The manipulation of the ckpt path/quant ckpt dir argument...

5.3CVSS5.6AI score0.00206EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/04/03 12:00 a.m.•14 views

Chitu 代码问题漏洞

Chitu is thu-pacman open source a high performance reasoning framework for large language models. A code issue vulnerability exists in Chitu version 0.1.0, which stems from the fact that incorrect manipulation of the parameter ckptpath/quantckptdir can lead to deserialization issues...

5.3CVSS5.5AI score0.00206EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/03 12:00 a.m.•4 views

CVE-2025-3165: Deserialization of Untrusted Data

A vulnerability classified as critical has been found in thu-pacman chitu 0.1.0. This affects the function torch.load of the file chitu/chitu/backend.py. The manipulation of the argument ckptpath/quantckptdir leads to deserialization. An attack has to be approached locally...

5.3CVSS5.5AI score0.00206EPSS
SaveExploits0References1
NVD
NVD
•added 2023/09/18 3:15 p.m.•30 views

CVE-2023-42387

An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via getdbinfo function in install.php...

7.5CVSS7.2AI score0.00965EPSS
SaveExploits1References2
OSV
OSV
•added 2023/09/18 3:15 p.m.•13 views

CVE-2023-42387

An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via getdbinfo function in install.php...

7.5CVSS7.2AI score0.00965EPSS
SaveExploits1References2
Prion
Prion
•added 2023/09/18 3:15 p.m.•27 views

Information disclosure

An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via getdbinfo function in install.php...

5CVSS7.3AI score0.00965EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/18 12:00 a.m.•19 views

CVE-2023-42387

An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via getdbinfo function in install.php...

7.3AI score0.00965EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/18 12:00 a.m.•1 views

CVE-2023-42387: Exposure of Sensitive Information to an Unauthorized Actor

An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via getdbinfo function in install.php...

7.5CVSS7.3AI score0.00965EPSS
SaveExploits1References2
CVE
CVE
•added 2023/09/18 12:00 a.m.•73 views

CVE-2023-42387

CVE-2023-42387 describes an information disclosure in the TDSQL Chitu management platform (v.10.3.19.5.0). A remote attacker can obtain sensitive data via the get_db_info function in install.php. Public references in the provided documents tie this issue to an unauthenticated access path that exp...

7.5CVSS7.2AI score0.00965EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2023/09/18 12:00 a.m.•16 views

Tencent TDSQL Chitu management platform Cross-Site Scripting Vulnerability

Tencent TDSQL Chitu management platform is a tdsql chitu management platform from China's Tencent Tencent. A cross-site scripting vulnerability exists in Tencent TDSQL Chitu management platform version v.10.3.19.5.0, which originated from a vulnerability that allows remote attackers to obtain...

7.5CVSS6AI score0.00965EPSS
SaveExploits1References3
Rows per page
Query Builder