Malicious code in @malware-test-haars-gluon-pubic-plims/test-mlw3-haars-gluon-pubic-plims (npm)

The package @malware-test-haars-gluon-pubic-plims/test-mlw3-haars-gluon-pubic-plims was found to contain malicious code...

Malicious code in test-mlw2-frags-tummy-snell-gluon (npm)

The package test-mlw2-frags-tummy-snell-gluon was found to contain malicious code...

MAL-2025-35371 Malicious code in test-mlw2-frags-tummy-snell-gluon (npm)

The package test-mlw2-frags-tummy-snell-gluon was found to contain malicious code...

CVE-2024-12216

A vulnerability in the "ImageClassificationDataset.fromcsv" API of the "dmlc/gluon-cv" repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts "tar.gz" files from URLs without proper sanitization, making it susceptible to a TarSlip vulnerability. Attackers...

CVE-2024-12216 Arbitrary File Write via TarSlip in dmlc/gluon-cv

A vulnerability in the ImageClassificationDataset.fromcsv API of the dmlc/gluon-cv repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts tar.gz files from URLs without proper sanitization, making it susceptible to a TarSlip vulnerability. Attackers can...

CVE-2024-12216 Arbitrary File Write via TarSlip in dmlc/gluon-cv

A vulnerability in the ImageClassificationDataset.fromcsv API of the dmlc/gluon-cv repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts tar.gz files from URLs without proper sanitization, making it susceptible to a TarSlip vulnerability. Attackers can...

CVE-2024-12216: Improper Link Resolution Before File Access

A vulnerability in the ImageClassificationDataset.fromcsv API of the dmlc/gluon-cv repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts tar.gz files from URLs without proper sanitization, making it susceptible to a TarSlip vulnerability. Attackers can...

Gluon CV Toolkit has a vulnerability related to input validation.

Gluon CV Toolkit is an open source tool from Distributed Machine Learning Community. An input validation error vulnerability exists in Gluon CV Toolkit version 0.10.0, which stems from an uncleaned tar.gz file download and extraction, and could lead to arbitrary file writes...

gluon:fuzz_parse_dec: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4997670448988160 Project: gluon Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsedec Job Type: libfuzzerasangluon Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommended...

Design/Logic Flaw

The secureload function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to deserialize session information stored in cookies, which might allow remote attackers to execute arbitrary code by leveraging knowledge of encryptionkey...

CVE-2016-3957

The secureload function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to deserialize session information stored in cookies, which might allow remote attackers to execute arbitrary code by leveraging knowledge of encryptionkey...

CVE-2016-3957: Deserialization of Untrusted Data

The secureload function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to deserialize session information stored in cookies, which might allow remote attackers to execute arbitrary code by leveraging knowledge of encryptionkey...

PT-2018-4911

Name of the Vulnerable Software and Affected Versions web2py versions prior to 2.14.2 Description The issue allows remote attackers to execute arbitrary code by leveraging knowledge of encryption key, potentially through deserialization of session information stored in cookies using the...

Web2py gluon/tools.py file open redirect vulnerability

web2py is a set of open source Web framework written in Python , it supports the rapid development of database-driven Web-based applications . An open redirect vulnerability exists in the gluon/tools.py file in web2py version 2.9.11. A remote attacker can exploit this vulnerability by sending the...

UBUNTU-CVE-2015-6961

Open redirect vulnerability in gluon/tools.py in Web2py 2.9.11 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to user/logout...

Open redirect

Open redirect vulnerability in gluon/tools.py in Web2py 2.9.11 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to user/logout...

CVE-2015-6961

Open redirect vulnerability in gluon/tools.py in Web2py 2.9.11 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to user/logout...

CVE-2015-6961: URL Redirection to Untrusted Site

Open redirect vulnerability in gluon/tools.py in Web2py 2.9.11 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the next parameter to user/logout...