6764 matches found
BIT-GITEA-2022-0905 Missing Authorization in go-gitea/gitea
Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...
BIT-GITEA-2022-1058 Open Redirect on login in go-gitea/gitea
Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...
Path Traversal
langchain is vulnerable to Path Traversal. This vulnerability is due to a flaw in the loadchain function, allowing an actor to control the final part of the path parameter. This bypasses the intended behavior of loading configurations solely from a specific GitHub repository. The consequence coul...
LangChain directory traversal vulnerability
LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...
CVE-2024-28088
LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...
CVE-2024-28088
LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...
CVE-2024-0968
CVE-2024-0968 entry is rejected/not used and not an active vulnerability.
Mars: sensitive data-creds for database - private key
The sensitive database credentials, including a username, password, and a private key, were discovered in a publicly accessible GitHub repository. The credentials were stored in plaintext within a configuration file, exposing them to anyone who could access the repository...
CVE-2023-40000
creationtimestamp| type| source ---|---|--- 2024-02-27 15:52:47+00:00| seen| https://t.me/thehackernews/4607 2024-02-27 16:17:36+00:00| seen| Telegram/Gl8DkxBzDx13jCAd1KOQDff27xgk7OvzgQUumKqJfz1gw 2024-02-27 17:17:50+00:00| seen| https://t.me/KomunitiSiber/1555 2024-02-27 17:35:44+00:00| seen|...
mapshaper Path Traversal vulnerability
Path Traversal in GitHub repository mbloch/mapshaper prior to 0.6.44...
CVE-2024-1163
The attacker may exploit a path traversal vulnerability leading to information disclosure...
Design/Logic Flaw
Uncontrolled Resource Consumption in GitHub repository mbloch/mapshaper prior to 0.6.44...
CVE-2024-1163 Path traversal vulnerability in mapshaper
The attacker may exploit a path traversal vulnerability leading to information disclosure...
TensorFlow CI/CD Flaw Exposed Supply Chain to Poisoning Attacks
Continuous integration and continuous delivery CI/CD misconfigurations discovered in the open-source TensorFlow machine learning framework could have been exploited to orchestrate supply chain attacks. The misconfigurations could be abused by an attacker to "conduct a supply chain compromise of...
EulerOS 2.0 SP10 : vim (EulerOS-SA-2023-3233)
According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Use After Free in GitHub repository vim/vim prior to 9.0.1840. CVE-2023-4733 - Integer Overflow or Wraparound in GitHub repository vim/vim prior to...
CVE-2019-17232
creationtimestamp| type| source ---|---|--- 2024-01-15 22:26:38+00:00| seen| https://t.me/pytar/231 2025-09-21 17:11:40+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/CVE-2019-17232.yaml 2025-09-23 21:02:22+00:00| seen|...
PHPJabbers Car Park Booking System 3.0 CSV Injection
Exploit Title: PHPJabbers Car Park Booking System v3.0 - CSV Injection Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/car-park-booking/sectionDemo Version: v3.0 Tested on: Windows...
PHPJabbers Cinema Booking System 1.0 CSV Injection
Exploit Title: PHPJabbers Cinema Booking System v1.0 - CSV Injection Date: 19/12/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/meeting-room-booking-system/sectionDemo Version: v1.0 Tested on:...
