Lucene search
+L

1853 matches found

OSV
OSV
added 2025/10/07 10:8 p.m.6 views

GHSA-527M-2XHR-J27G LLaMA Factory's Chat API Contains Critical SSRF and LFI Vulnerabilities

Summary A Server-Side Request Forgery SSRF vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure of sensitive internal services, reconnaissance of the internal network, or...

7.6CVSS6.1AI score0.0035EPSS
SaveExploits1References4
NVD
NVD
added 2025/10/07 8:15 p.m.10 views

CVE-2025-6242

A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an...

7.1CVSS0.00229EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/07 7:45 p.m.3 views

CVE-2025-6242 Vllm: server side request forgery (ssrf) in mediaconnector

A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an...

7.1CVSS6.7AI score0.00229EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/07 7:15 p.m.8 views

CVE-2025-61784

LLaMA-Factory is a tuning library for large language models. Prior to version 0.9.4, a Server-Side Request Forgery SSRF vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure ...

8.1CVSS0.0035EPSS
SaveExploits1References2
OSV
OSV
added 2025/10/07 7:1 p.m.18 views

CVE-2025-61784 LLaMA Factory's Chat API has Critical SSRF and LFI Vulnerabilities

LLaMA-Factory is a tuning library for large language models. Prior to version 0.9.4, a Server-Side Request Forgery SSRF vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure ...

7.6CVSS6.2AI score0.0035EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-9248

Malware in sbrugna...

8.7CVSS8.8AI score0.01633EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2019-7428

Malware in sbrugna...

9.8CVSS9.2AI score0.01335EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2016-10001

Malware in sbrugna...

4.3CVSS4.6AI score0.01537EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2020-12686

Malware in sbrugna...

7.5CVSS7.5AI score0.00664EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-2727

Malware in sbrugna...

10CVSS9.3AI score0.02459EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-10655

Malware in sbrugna...

4.3CVSS4.9AI score0.00743EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-19502

Malware in sbrugna...

6.1CVSS8AI score0.01266EPSS
SaveExploits0References22
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-10957

Malware in sbrugna...

5.3CVSS5.3AI score0.00998EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-17524

Malware in sbrugna...

6.5CVSS6.6AI score0.01836EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2002-1517

Malware in sbrugna...

5CVSS6.4AI score0.02447EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2020-0476

Malware in sbrugna...

6.5CVSS6.4AI score0.0113EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2014-6264

Malware in sbrugna...

7.8CVSS6.4AI score0.02929EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2002-1978

Malware in sbrugna...

5CVSS6.4AI score0.02653EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-17130

Malware in sbrugna...

4.3CVSS4.8AI score0.00266EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2020-17164

Malware in sbrugna...

5.8CVSS5.8AI score0.02077EPSS
SaveExploits0References2
Rows per page
Query Builder