1932 matches found
Deserialization of Untrusted Data
Overview pyquokka is a Quokka Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the doaction function in the flight.py file. An attacker can execute arbitrary code on the server by sending maliciously crafted serialized data through the network interface...
GHSA-FGX4-P8XF-QHP9 Lobe Chat vulnerable to Server-Side Request Forgery with native web fetch module
Vulnerability Description --- Vulnerability Overview - When the client sends an arbitrary URL array and impl: "naive" to the tRPC endpoint tools.search.crawlPages, the server issues outbound HTTP requests directly to those URLs. There is no defensive logic that restricts or validates requests to...
CVE-2025-61679
Anyquery is an SQL query engine built on top of SQLite. Versions 0.4.3 and below allow attackers who have already gained access to localhost, even with low privileges, to use the http server through the port unauthenticated, and access private integration data like emails, without any warning of ...
EUVD-2021-2056
Malware in sbrugna...
EUVD-2019-17184
Malware in sbrugna...
EUVD-1999-1211
Malware in sbrugna...
EUVD-2018-10089
Malware in sbrugna...
EUVD-2019-4118
Malware in sbrugna...
EUVD-2021-1086
Malware in sbrugna...
EUVD-2018-9205
Malware in sbrugna...
EUVD-2020-3852
Malware in sbrugna...
EUVD-1999-0290
Malware in sbrugna...
EUVD-2017-9325
Malware in sbrugna...
EUVD-2020-24899
Malware in sbrugna...
EUVD-2020-28790
Malware in sbrugna...
EUVD-2018-4098
Malware in sbrugna...
EUVD-2009-1105
Malware in sbrugna...
EUVD-2018-3184
Malware in sbrugna...