H2O 资源管理错误漏洞

H2O is an in-memory platform for distributed, scalable machine learning open-sourced by H2O.ai. A resource management error vulnerability exists in H2O version 3.46.0.1, which stems from the use of a user-specified regular expression in the /3/Parse endpoint and could lead to a denial of service...

HyperLPR 资源管理错误漏洞

HyperLPR is a high-performance Chinese license plate recognition framework developed by Jack Yu. A resource management error vulnerability exists in HyperLPR v3.0, which stems from the server's inability to handle excessive characters at the end of multi-part boundaries, and an attacker can cause...

GPT Academic 资源管理错误漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. A denial of service vulnerability exists in GPT Academic, which stems from a security issue in the file upload feature that can be exploited by an attacker to cause a denial of service...

NetEase QAnything 资源管理错误漏洞

NetEase QAnything is a local knowledge base question and answer system dedicated to supporting arbitrary format files or databases from China's NetEase NetEase, which can be installed and used offline. A resource management error vulnerability exists in NetEase QAnything version v2.0.0, which ste...

Aim 资源管理错误漏洞

Aim is an easy-to-use and high-performance open source experiment tracker from Aim Open Source USA. Aim version 3.25.0 suffers from a resource management error vulnerability that stems from the tracking server's susceptibility to denial-of-service attacks, which may cause the server to be...

Ollama 资源管理错误漏洞

Ollama is a large language model that can be started and run locally from the Ollama open source. A resource management error vulnerability exists in Ollama version 0.3.14 that stems from not properly handling gzip bomb responses, which could lead to memory exhaustion and denial of service attack...

Danswer 资源管理错误漏洞

Danswer is Danswer AI open source an artificial intelligence assistant that connects to company documents, applications and people. A resource management error vulnerability exists in Danswer version v0.3.94, which stems from the fact that uploading a file with malformed multi-part boundaries may...

Aim 资源管理错误漏洞

Aim is an easy-to-use and high-performance open source experiment tracker from Aim Open Source USA. Aim version 3.23.0 suffers from a Resource Management Error vulnerability that originates when certain methods of requesting data from an external server do not have a timeout set, causing the serv...

Stable Diffusion web UI 资源管理错误漏洞

Stable Diffusion web UI is a web interface for AUTOMATIC1111 individual developers. A resource management error vulnerability exists in Stable Diffusion web UI version 1.10.0, which stems from improper handling of form-data in a file upload request and could lead to a denial of service attack...

ImaginAIry 资源管理错误漏洞

ImaginAIry is a Pythonic AI image and video generating application by Bryce Drennan Personal Developer. A resource management error vulnerability exists in ImaginAIry version 15.0.0 that originates from an unauthenticated request and could lead to a denial of service attack...

PrivateGPT 资源管理错误漏洞

PrivateGPT is an AI project open-sourced by Zylon. A resource management error vulnerability exists in PrivateGPT version 0.5.0, which stems from improper handling of multi-part boundaries when uploading a file, which could lead to a denial of service...

Lightning 资源管理错误漏洞

Lightning is a pre-training framework open-sourced by Lightning AI to fine-tune any AI model of any size on multiple GPUs, TPUs. A resource management error vulnerability exists in Lightning version 2.3.2, which stems from mishandling of the /api/v1/state endpoint and could lead to a denial of...

Google Chrome 资源管理错误漏洞

Google Chrome is a WEB browser developed by Google Inc. Google Chrome suffers from a resource management error vulnerability that can be exploited by an attacker to execute arbitrary code...

CVE-2025-2220

A vulnerability was found in Odyssey CMS up to 10.34. It has been classified as problematic. Affected is an unknown function of the file /modules/odysseycontactform/odysseycontactform.php of the component reCAPTCHA Handler. The manipulation of the argument g-recaptcha-response leads to key...

Libxslt 资源管理错误漏洞

Libxslt is a Libxslt open source XSLT C library developed for the GNOME project. A security vulnerability exists in versions of Libxslt prior to 1.1.43 that stems from reuse after release...

CVE-2025-2220

A vulnerability was found in Odyssey CMS up to 10.34. It has been classified as problematic. Affected is an unknown function of the file /modules/odysseycontactform/odysseycontactform.php of the component reCAPTCHA Handler. The manipulation of the argument g-recaptcha-response leads to key...

CVE-2025-2220

A vulnerability was found in Odyssey CMS up to 10.34. It has been classified as problematic. Affected is an unknown function of the file /modules/odysseycontactform/odysseycontactform.php of the component reCAPTCHA Handler. The manipulation of the argument g-recaptcha-response leads to key...

CVE-2025-2220

Odyssey CMS up to version 10.34 is affected by a vulnerability in the reCAPTCHA Handler, specifically in /modules/odyssey_contact_form/odyssey_contact_form.php. The issue arises from manipulating the g-recaptcha-response argument, leading to a key management error. Local access is required to exp...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a resource management error vulnerability that stems from an SST write failure, which could lead to a kernel crash. The vulnerability can be exploited...

PT-2025-10989

Name of the Vulnerable Software and Affected Versions: Odyssey CMS versions up to 10.34 Description: A key management error can occur due to the manipulation of the g-recaptcha-response argument in an unknown function of the file /modules/odyssey contact form/odyssey contact form.php of the...