Code Injection

llamaindex is vulnerable to Code Injection. The vulnerability is caused due to a missing validation for the clsname variable used in the exec call in the download/integration.py script. An attacker can execute arbitrary code by injecting malicious input into the clsname variable used in the exec...

DEBIAN-CVE-2024-45321

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers...

Trellix多款产品 安全漏洞

Trellix NX and others are a range of security software from FireEye Trellix USA. A security vulnerability exists in various Trellix products. An attacker exploiting the vulnerability could read or download arbitrary files on the server. The following products are affected: NX, EX, FX, AX, IVX and...

cpanminus 安全漏洞

cpanminus is a script by Tatsuhiko Miyagawa, an individual developer, that is used to fetch, unpack, build, and install modules from CPAN without performing any other actions. A security vulnerability exists in cpanminus version 1.7047 and prior versions, which originates from downloading code ov...

CVE-2024-45321

The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling code execution for network attackers...

CVE-2024-43230 WordPress Shared Files – Premium Download Manager & Secure File Sharing with Frontend File Upload plugin <= 1.7.28 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Anssi Laitila Shared Files shared-files.This issue affects Shared Files: from n/a through = 1.7.28...

PT-2024-38851 · Ruijie · Ruijie Eg2000K

Name of the Vulnerable Software and Affected Versions: Ruijie EG2000K version 11.16B2 Description: A critical issue has been found, affecting unknown code of the file /tool/index.php?c=download&a=save. The manipulation of the content argument leads to unrestricted upload. The attack can be...

GHSA-FXC2-8M62-M85X LlamaIndex includes an exec call for `import {cls_name}`

An issue was discovered in llamaindex before 0.10.38. download/integration.py includes an exec call for import clsname...

LlamaIndex includes an exec call for `import {cls_name}`

An issue was discovered in llamaindex before 0.10.38. download/integration.py includes an exec call for import clsname...

CVE-2024-45201

An issue was discovered in llamaindex before 0.10.38. download/integration.py includes an exec call for import clsname...

PYSEC-2024-192

An issue was discovered in llamaindex before 0.10.38. download/integration.py includes an exec call for import clsname...

PYSEC-2024-192

An issue was discovered in llamaindex before 0.10.38. download/integration.py includes an exec call for import clsname...

CVE-2024-45201

An issue was discovered in llamaindex before 0.10.38. download/integration.py includes an exec call for import clsname...

CVE-2024-45201

An issue was discovered in llamaindex before 0.10.38. download/integration.py includes an exec call for import clsname...

LlamaIndex 安全漏洞

LlamaIndex is a data framework for LLM applications open-sourced by LlamaIndex. A security vulnerability exists in LlamaIndex versions prior to 0.10.38, which stems from a risky exec call to download/integration.py...

CVE-2024-21690

This High severity Reflected XSS and CSRF Cross-Site Request Forgery vulnerability was introduced in versions 7.19.0, 7.20.0, 8.0.0, 8.1.0, 8.2.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0, 8.7.1, 8.8.0, and 8.9.0 of Confluence Data Center and Server. This Reflected XSS and CSRF Cross-Site Request Forgery...

GO-2022-0600 HashiCorp Nomad Artifact Download Race Condition in github.com/hashicorp/nomad

HashiCorp Nomad Artifact Download Race Condition in github.com/hashicorp/nomad...

GO-2023-2053 matrix-media-repo: Unsafe media served inline on download endpoints in github.com/turt2live/matrix-media-repo

matrix-media-repo: Unsafe media served inline on download endpoints in github.com/turt2live/matrix-media-repo...

GO-2023-2005 1Panel Arbitrary File Download vulnerability in github.com/1Panel-dev/1Panel

1Panel Arbitrary File Download vulnerability in github.com/1Panel-dev/1Panel...

Cannot download source for Citrix Hypervisor hotfixes

The Hotfix Source link in articles for Citrix Hypervisor 8.2 Cumulative Update 1 hotfixes hangs when attempting to download the hotfix source file. This problem occurs whether or not the user is logged in to their Citrix account through the Log In link provided on support.citrix.com...