CVE-2024-0759

Should an instance of AnythingLLM be hosted on an internal network and the attacked be explicitly granted a permission level of manager or admin, they could link-scrape internally resolving IPs of other services that are on the same network as AnythingLLM. This would require the attacker also be...

CVE-2024-0759

CVE-2024-0759 involves AnythingLLM enabling an attacker with internal-network access and manager/admin privileges to link-scrape IPs of other services on the same network. The root cause is exposure via a link collector that can be used without authentication, allowing internal IP discovery throu...

libuv Code Issues Vulnerabilities

libuv is a cross-platform asynchronous IO library for nodejs. The platform is used to abstract IOCP for Windows and libev for Unix. currently supported features are non-blocking; TCP sockets; non-blocking named pipes; UDP; timers; child process generation; implementation of asynchronous DNS;...

Denial Of Service (DoS)

github.com/free5gc/free5gc is vulnerable to Denial Of Service DoS. The vulnerability exists due to a null pointer dereference when failing to resolve the IP of a ngap message resulting in an application crash...

Description of Preview of Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows Server 2012 (KB 4467086)

Description of Preview of Quality Rollup for .NET Framework 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows Server 2012 KB 4467086 Applies to: Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6.1, Microsoft .NET Framework 4.6.2, Microsoft .NET Framework 4.7, Microsoft .NET Framework...

Marty Bochane MDBMS 0.9 xbx Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1252/info A vulnerability exists in the MDBMS database, written by Marty Bochane. By supplying a line of sufficient length to the MDBMS server, containing machine executable code, it is possible for a remote attacker to...