947 matches found
Server-side Request Forgery (SSRF)
Overview llamafactory is an Easy-to-use LLM fine-tuning framework Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the processrequest function, which processes incoming content URLs without proper validation or sanitization. An attacker can access internal...
LLaMA Factory's Chat API Contains Critical SSRF and LFI Vulnerabilities
Summary A Server-Side Request Forgery SSRF vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure of sensitive internal services, reconnaissance of the internal network, or...
CVE-2025-6242 Vllm: server side request forgery (ssrf) in mediaconnector
A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an...
EUVD-2025-32892
A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an...
EUVD-2017-9233
Malware in sbrugna...
EUVD-2017-0657
Malware in sbrugna...
EUVD-2020-6327
Malware in sbrugna...
EUVD-2020-0315
Malware in sbrugna...
EUVD-2021-1688
Malware in sbrugna...
EUVD-2018-1942
Malware in sbrugna...
EUVD-2017-16561
Malware in sbrugna...
EUVD-2001-0479
Malware in sbrugna...
EUVD-2022-24699
Malicious code in bioql PyPI...
EUVD-2025-28246
Malicious code in bioql PyPI...
EUVD-2025-30901
Malicious code in bioql PyPI...
EUVD-2025-31633
Malicious code in bioql PyPI...
EUVD-2025-31632
Malicious code in bioql PyPI...
EUVD-2022-48301
Malicious code in bioql PyPI...