Gradio's Component Server does not properly consider` _is_server_fn` for functions

Component Server in Gradio before 4.13 does not properly consider isserverfn for functions...

PYSEC-2026-1407 Gradio's Component Server does not properly consider` _is_server_fn` for functions

Component Server in Gradio before 4.13 does not properly consider isserverfn for functions...

gradio vulnerable to Path Traversal

An issue was discovered in gradio-app/gradio, where the /componentserver endpoint improperly allows the invocation of any method on a Component class with attacker-controlled arguments. Specifically, by exploiting the moveresourcetoblockcache method of the Block class, an attacker can copy any fi...

PYSEC-2026-1415 gradio vulnerable to Path Traversal

An issue was discovered in gradio-app/gradio, where the /componentserver endpoint improperly allows the invocation of any method on a Component class with attacker-controlled arguments. Specifically, by exploiting the moveresourcetoblockcache method of the Block class, an attacker can copy any fi...

Exploit for Path Traversal in Gradio_Project Gradio

CVE-2024-1561 - Gradio Arbitrary File Read CVE-2024-1561...

EUVD-2020-13449

Malware in sbrugna...

VulnCheck KEV: CVE-2024-1561

An issue was discovered in gradio-app/gradio, where the /componentserver endpoint improperly allows the invocation of any method on a Component class with attacker-controlled arguments. Specifically, by exploiting the moveresourcetoblockcache method of the Block class, an attacker can copy any fi...

Gradio's Component Server does not properly consider` _is_server_fn` for functions

Component Server in Gradio before 4.13 does not properly consider isserverfn for functions...

GHSA-34RF-P3R3-58X2 Gradio's Component Server does not properly consider` _is_server_fn` for functions

Component Server in Gradio before 4.13 does not properly consider isserverfn for functions...

PT-2024-25942

Name of the Vulnerable Software and Affected Versions Gradio versions prior to 4.13 Description The issue arises from the Component Server in Gradio not properly considering is server fn for functions. This can lead to security risks if function calls do not take is server fn into account...

PT-2021-10525

Name of the Vulnerable Software and Affected Versions: libiec iccp mod version 1.5 Description: The issue is related to a segmentation violation in the component server example1.c. Recommendations: For libiec iccp mod version 1.5, consider restricting access to the server example1.c component unt...

CVE-2021-2031

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

Backup job fails with error: Insufficient system resources exist to complete the requested service.

Challenge The following entry can be seen in the log file: Client error: Insufficient system resources exist to complete the requested service Cause The error is relayed by Veeam Backup & Replication from the underlying Windows OS. Solution As the underlying Windows OS is reporting this error,...

Mozilla Firefox 3.5 (Font tags) Remote Heap Spray Exploit (pl)

Exploit for windows platform in category remote exploits ============================================================== Mozilla Firefox 3.5 Font tags Remote Heap Spray Exploit pl ============================================================== FireFox 3.5 Heap Spray Discovered by: Simon Berry-Bryne...