21331 matches found
CVE-2025-59159
SillyTavern’s web UI (prior to 1.13.4) is vulnerable to DNS rebinding, enabling attackers to read chats, inject HTML, install extensions, and execute phishing-style actions. The issue is mitigated in 1.13.4 by adding a host validation setting (hostWhitelist.enabled) in config.yaml or SILLYTAVERN_...
Exploit for Path Traversal in Jenkins
CVE-2024-23897 환경 구축 1. Java 설치 sudo apt update sudo apt ins...
Faraday 5.17.0
Faraday is a tool that introduces a new concept called IPE, or Integrated Penetration-Test Environment. It is a multiuser penetration test IDE designed for distribution, indexation and analysis of the generated data during the process of a security audit. The main purpose of Faraday is to re-use...
PT-2025-40903
Name of the Vulnerable Software and Affected Versions SillyTavern versions prior to 1.13.4 Description SillyTavern is a locally installed user interface for interacting with large language models, image generation engines, and text-to-speech models. The web user interface, in versions prior to...
Exploit for CVE-2025-39946
README This is an exploit for CVE-2025-39946. It...
CVE-2025-61677
DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. Versions 0.34.1 and below allow for deseriaization of untrusted data because of the way the DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and...
EUVD-2025-32181
DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. Versions 0.34.1 and below allow for deseriaization of untrusted data because of the way the DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and...
CVE-2025-61677 DataChain: Deserialization of Untrusted Data from Environment Variables
DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. Versions 0.34.1 and below allow for deseriaization of untrusted data because of the way the DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and...
CVE-2025-61677
DataChain is a Python-based AI-data warehouse. Versions 0.34.1 and earlier are vulnerable to deserialization of untrusted data caused by how the loader.py reads serialized objects from environment variables (e.g., DATACHAIN__METASTORE, DATACHAIN__WAREHOUSE). An attacker who can set these environm...
CVE-2025-61677 DataChain: Deserialization of Untrusted Data from Environment Variables
DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. Versions 0.34.1 and below allow for deseriaization of untrusted data because of the way the DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and...
CVE-2025-61677 DataChain: Deserialization of Untrusted Data from Environment Variables
DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. Versions 0.34.1 and below allow for deseriaization of untrusted data because of the way the DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and...
EUVD-2023-41368
Malicious code in bioql PyPI...
EUVD-2024-39166
Malicious code in bioql PyPI...
EUVD-2022-41825
Malicious code in bioql PyPI...
EUVD-2023-0732
Malicious code in bioql PyPI...
EUVD-2023-52298
Malicious code in bioql PyPI...
EUVD-2021-33026
Malicious code in bioql PyPI...
EUVD-2022-30013
Malicious code in bioql PyPI...