CVE-2025-0188

CVE-2025-0188 concerns a Server-Side Request Forgery (SSRF) in the project gaizhenbiao/chuanhuchatgpt, version 20240914. The described flaw allows an attacker to craft a response link by saving content to a folder named after the SHA-1 hash of the target URL, which can enable direct access to the...

CVE-2024-7819

A CVE-2024-7819 entry concerns danswer-ai/danswer v1.4.1. The vulnerability is a CORS misconfiguration caused by improper validation of the origin header, enabling malicious web pages to issue unauthorized requests to the application's API and potentially disclose sensitive data (e.g., chat conte...

Open WebUI 跨站脚本漏洞

Open WebUI is an extensible, feature-rich, user-friendly self-hosted WebUI from Open WebUI open source. A cross-site scripting vulnerability exists in Open WebUI version 0.3.8, which stems from the presence of stored cross-site scripting in the chat file upload function, which could lead to user...

phpIPAM 跨站脚本漏洞

phpIPAM is the phpIPAM open source set of open source PHP and MySQL based IP address management applications IPAM. A cross-site scripting vulnerability exists in phpIPAM version 1.5.2, which stems from a stored cross-site scripting vulnerability in the Description field of the custom field in the...

MAL-2025-2590 Malicious code in blackspammerbd-remot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron b3620d6bbda8c8e6a637f39997f1d22114756ec09e8e458eaab7287ea64ff7c3 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

MAL-2025-2593 Malicious code in blackspammerbd-tool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 49490144c72d79e7bb37921a87c52011d6ce935fd7d031e2a4d3e4835e98a399 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

MAL-2025-2591 Malicious code in blackspammerbd-remot1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 3618dd14b1eb36d5025d6a47cf69fbe08f06fa02c9de8338f7ca67ce5ef38fd9 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

MAL-2025-2587 Malicious code in blackspammerbd-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 6fd0fbf90d161b67f6df5c7e057b6ac660066232b4565e893e9e72bc43c86a1b This package seems to be part of a larger malicious toolkit designed for unauthorized access to systems, data theft, and potentially acting as a...

MAL-2025-2592 Malicious code in blackspammerbd-tg (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 899ac6c3d1b62da3553aab693790598d0e87f6530b57d335deaee2545a39eb9c This package seems to be part of a larger malicious toolkit designed for unauthorized access to systems, data theft, and potentially acting as a...

MAL-2025-2594 Malicious code in blackspammerbd-tooll (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron d5e8e091db7011e3f7cef75872065e84b3ac54c31c4811271f7ac816301676f6 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

MAL-2025-2598 Malicious code in bsb-connector (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron ed806140937f50b1f0283cc8d7f9feb4a85562c25574e2dd35cdb6548901e0a9 This package seems to be part of a larger malicious toolkit designed for unauthorized access to systems, data theft, and potentially acting as a...

MAL-2025-2602 Malicious code in connector-bsb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron eed0770278358269212ff3971e9c4ee9d5410676ea27a4feb6ae52fa8cb5484b This package seems to be part of a larger malicious toolkit designed for unauthorized access to systems, data theft, and potentially acting as a...

MAL-2025-2595 Malicious code in blackspammerbd-tools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 032eea352b83029c69620b0a45a9297f18ccf6dcf76418258d428e85ca8dc304 This package is designed for remote control and data exfiltration, and could be used for malicious purposes such as spying, unauthorized access,...

Malicious code in connector-bsb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron eed0770278358269212ff3971e9c4ee9d5410676ea27a4feb6ae52fa8cb5484b This package seems to be part of a larger malicious toolkit designed for unauthorized access to systems, data theft, and potentially acting as a...

MAL-2025-2600 Malicious code in bsb-family-pack (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 9ce94b3baee18c22e6c4de9808764de9496aa7a055a74f58eb972741ac433181 This package seems to be part of a larger malicious toolkit designed for unauthorized access to systems, data theft, and potentially acting as a...

MAL-2025-2586 Malicious code in blackspammerbd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron 610e92bd25b3f4e4206c9e4e0c321b5120bc85b6a01b289d192f78c53bff9ada This package seems to be part of a larger malicious toolkit designed for unauthorized access to systems, data theft, and potentially acting as a...

Human Metapneumovirus Testing Management System /check_availability.php File SQL Injection Vulnerability

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. The Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter...

Apartment Visitors Management System visname Parameter SQL Injection Vulnerability

Apartment Visitors Management System is an apartment visitor management system. Apartment Visitors Management System suffers from a SQL injection vulnerability that stems from the lack of validation of an externally entered SQL statement in the parameter visname. An attacker can exploit this...

Company Visitor Management System /index.php File SQL Injection Vulnerability

Company Visitor Management System is a visitor management system. Company Visitor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the parameter username in the /index.php file of the component Sign In against an externally-entered SQL...

Online Class and Exam Scheduling System salut_del.php File SQL Injection Vulnerability

Online Class and Exam Scheduling System is an online class and exam scheduling system. The Online Class and Exam Scheduling System suffers from a SQL injection vulnerability that originates from the parameter id of /pages/salutdel.php that lacks validation of externally entered SQL statements. An...