BIT-MLFLOW-2023-6909 Path Traversal: '\..\filename' in mlflow/mlflow

Path Traversal: '..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2...

BIT-MONGOOSE-2022-2564 Prototype Pollution in automattic/mongoose

Prototype Pollution in GitHub repository automattic/mongoose prior to 6.4.6...

BIT-MONGOOSE-2023-3696 Prototype Pollution in automattic/mongoose

Prototype Pollution in GitHub repository automattic/mongoose prior to 7.3.4...

BIT-LIVEHELPERCHAT-2022-0935

Host Header injection in password Reset in GitHub repository livehelperchat/livehelperchat prior to 3.97...

BIT-LIVEHELPERCHAT-2022-1235

Weak secrethash can be brute-forced in GitHub repository livehelperchat/livehelperchat prior to 3.96...

BIT-LIVEHELPERCHAT-2022-1530

Cross-site Scripting XSS in GitHub repository livehelperchat/livehelperchat prior to 3.99v. The attacker can execute malicious JavaScript on the application...

BIT-GITEA-2022-0905 Missing Authorization in go-gitea/gitea

Missing Authorization in GitHub repository go-gitea/gitea prior to 1.16.4...

BIT-GITEA-2022-1058 Open Redirect on login in go-gitea/gitea

Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5...

Path Traversal

langchain is vulnerable to Path Traversal. This vulnerability is due to a flaw in the loadchain function, allowing an actor to control the final part of the path parameter. This bypasses the intended behavior of loading configurations solely from a specific GitHub repository. The consequence coul...

LangChain directory traversal vulnerability

LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...

CVE-2024-28088

LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...

CVE-2024-28088

LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a loadchain call. This bypasses the intended behavior of loading configurations only from the hwchase17/langchain-hub GitHub repository. The outcome can be disclosure...

CVE-2024-0968

CVE-2024-0968 entry is rejected/not used and not an active vulnerability.

Mars: sensitive data-creds for database - private key

The sensitive database credentials, including a username, password, and a private key, were discovered in a publicly accessible GitHub repository. The credentials were stored in plaintext within a configuration file, exposing them to anyone who could access the repository...

CVE-2023-40000

creationtimestamp| type| source ---|---|--- 2024-02-27 15:52:47+00:00| seen| https://t.me/thehackernews/4607 2024-02-27 16:17:36+00:00| seen| Telegram/Gl8DkxBzDx13jCAd1KOQDff27xgk7OvzgQUumKqJfz1gw 2024-02-27 17:17:50+00:00| seen| https://t.me/KomunitiSiber/1555 2024-02-27 17:35:44+00:00| seen|...

mapshaper Path Traversal vulnerability

Path Traversal in GitHub repository mbloch/mapshaper prior to 0.6.44...

CVE-2024-1163

The attacker may exploit a path traversal vulnerability leading to information disclosure...

Design/Logic Flaw

Uncontrolled Resource Consumption in GitHub repository mbloch/mapshaper prior to 0.6.44...

CVE-2024-1163 Path traversal vulnerability in mapshaper

The attacker may exploit a path traversal vulnerability leading to information disclosure...

TensorFlow CI/CD Flaw Exposed Supply Chain to Poisoning Attacks

Continuous integration and continuous delivery CI/CD misconfigurations discovered in the open-source TensorFlow machine learning framework could have been exploited to orchestrate supply chain attacks. The misconfigurations could be abused by an attacker to "conduct a supply chain compromise of...