Lucene search
+L

14 matches found

Kitploit
Kitploit
•added 2026/10/15 9:02 p.m.•12 views

manim-cranim

cranim Manim toolkit for cryptographic scenes. Check out the example gallery: https://nccgroup.github.io/manim-cranim/ Local install: From the repo's root directory, run pip install -e . or pip install . if you don't expect to ever make local changes. This is a Manim plugin. Manim requires plugin...

6AI score
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•27 views

EUVD-2025-7051

Malicious code in bioql PyPI...

8.8CVSS7.6AI score0.01508EPSS
SaveExploits1References2
CNVD
CNVD
•added 2025/03/27 12:00 a.m.•22 views

GPT Academic Command Injection Vulnerability (CNVD-2025-22740)

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a command injection vulnerability that stems from improper handling of user-supplied prompts in the manim plugin, which can be exploited by an attacker to cau...

8.8CVSS8.6AI score0.01508EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/03/22 12:14 p.m.•17 views

CVE-2024-10954

In the manim plugin of binary-husky/gptacademic, versions prior to the fix, a vulnerability exists due to improper handling of user-provided prompts. The root cause is the execution of untrusted code generated by the LLM without a proper sandbox. This allows an attacker to perform remote code...

8.8CVSS7.8AI score0.01508EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2025/03/20 10:15 a.m.•22 views

CVE-2024-10954

In the manim plugin of binary-husky/gptacademic, versions prior to the fix, a vulnerability exists due to improper handling of user-provided prompts. The root cause is the execution of untrusted code generated by the LLM without a proper sandbox. This allows an attacker to perform remote code...

8.8CVSS6.4AI score0.01508EPSS
SaveExploits1References1
CVE
CVE
•added 2025/03/20 10:10 a.m.•88 views

CVE-2024-10954

CVE-2024-10954 affects the binary-husky/gpt_academic project’s manim plugin. The root cause is improper handling of user-provided prompts, leading to execution of untrusted code generated by the LLM without a sandbox. This enables remote code execution on the app backend when a malicious prompt i...

8.8CVSS8.1AI score0.01508EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2025/03/20 10:10 a.m.•6 views

CVE-2024-10954

In the "manim" plugin of binary-husky/gptacademic, versions prior to the fix, a vulnerability exists due to improper handling of user-provided prompts. The root cause is the execution of untrusted code generated by the LLM without a proper sandbox. This allows an attacker to perform remote code...

8.8CVSS0.01508EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/03/20 10:10 a.m.•11 views

CVE-2024-10954 Prompt Injection Leading to RCE in binary-husky/gpt_academic Plugin `manim`

In the manim plugin of binary-husky/gptacademic, versions prior to the fix, a vulnerability exists due to improper handling of user-provided prompts. The root cause is the execution of untrusted code generated by the LLM without a proper sandbox. This allows an attacker to perform remote code...

8.8CVSS9AI score0.01508EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/20 12:00 a.m.•20 views

GPT Academic 命令注入漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM grand language models such as GPT/GLM. GPT Academic suffers from a command injection vulnerability that stems from improper handling of user-supplied prompts in the manim plugin, which can be exploited by an attacker to cau...

8.8CVSS8.5AI score0.01508EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/20 12:00 a.m.•8 views

PT-2025-12084

Name of the Vulnerable Software and Affected Versions binary-husky/gpt academic versions prior to the fix Description A vulnerability exists due to improper handling of user-provided prompts in the manim plugin. The root cause is the execution of untrusted code generated by the LLM without a prop...

8.8CVSS0.01508EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/20 12:00 a.m.•8 views

CVE-2024-10954: Improper Control of Generation of Code

In the manim plugin of binary-husky/gptacademic, versions prior to the fix, a vulnerability exists due to improper handling of user-provided prompts. The root cause is the execution of untrusted code generated by the LLM without a proper sandbox. This allows an attacker to perform remote code...

8.8CVSS8.1AI score0.01508EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/01/24 12:00 a.m.•21 views

Mathtex Security Breach

Mathtex is a CGI program written in C for the Manim community. A security vulnerability exists in Mathtex version 1.05 and prior versions, which stems from a command injection vulnerability. A remote attacker can use this vulnerability to execute arbitrary code via a crafted string in the...

9.8CVSS8.2AI score0.02472EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/24 12:00 a.m.•22 views

Mathtex Security Breach

Mathtex is a CGI program written in C for the Manim community. A security vulnerability exists in Mathtex version 1.05 and earlier versions, which stems from the presence of a discovery infinite loop problem. A remote attacker can exploit this vulnerability to consume CPU resources via a crafted...

7.5CVSS6.7AI score0.00856EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/24 12:00 a.m.•23 views

Mathtex Security Breach

Mathtex is a CGI program written in C for the Manim community. A security vulnerability exists in Mathtex version 1.05 and prior versions, which stems from the presence of a buffer overflow vulnerability. A remote attacker can exploit this vulnerability to execute arbitrary code via the length of...

9.8CVSS8.1AI score0.01287EPSS
SaveExploits1References2
Rows per page
Query Builder