CVE-2025-4261 GAIR-NLP factool tool.py run_single code injection

A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affects the function runsingle of the file factool/factool/math/tool.py. The manipulation leads to code injection. The attack needs to be approached locally. The...

CVE-2025-4261

CVE-2025-4261 affects GAIR-NLP factool, specifically the run_single function in factool/factool/math/tool.py. The cited pattern indicates a code injection vulnerability introduced up to commit 3f3914bc090b644be044b7e0005113c135d8b20f, with local access required for exploitation. Multiple connecte...

CVE-2025-4261 GAIR-NLP factool tool.py run_single code injection

A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affects the function runsingle of the file factool/factool/math/tool.py. The manipulation leads to code injection. The attack needs to be approached locally. The...

PT-2025-19336 · Unknown · Gair-Nlp Factool

Name of the Vulnerable Software and Affected Versions: GAIR-NLP factool versions up to 3f3914bc090b644be044b7e0005113c135d8b20f Description: A critical issue has been found in GAIR-NLP factool, affecting the run single function of the file factool/factool/math/tool.py. This issue leads to code...

Malicious code in mysql_nlp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48eb776b915f1a51e587f60c794fc62cea65e0bfcbc6bf9ba1f9bc34cb2bc092 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Flair allows arbitrary code execution

A vulnerability, which was classified as critical, was found in flairNLP flair 0.14.0. Affected is the function ClusteringModel of the file flair\models\clustering.py of the component Mode File Loader. The manipulation leads to code injection. It is possible to launch the attack remotely. The...

Security Bulletin: Multiple vulnerabilities in Watson NLP affect IBM Robotic Process Automation

Summary Multiple vulnerabilities in Watson NLP affect IBM Robotic Process Automation. Watson NLP is used by IBM Robotic Process Automation for Natural Language Understanding. This bulletin identifies the security fixes to apply to address the vulnerabilities. Vulnerability Details...

Antisquat - Leverages AI Techniques Such As NLP, ChatGPT And More To Empower Detection Of Typosquatting And Phishing Domains

AntiSquat leverages AI techniques such as natural language processing NLP, large language models ChatGPT and more to empower detection of typosquatting and phishing domains. How to use Clone the project via git clone https://github.com/redhuntlabs/antisquat. Install all dependencies by typing pip...

Security Bulletin: Multiple security vulnerabilities affect IBM Robotic Process Automation for Cloud Pak.

Summary XZ is used by IBM Robotic Process Automation for Cloud Pak as part of base container images, Watson NLP and WebSphere Liberty. CVE-2020-22916. File is used by IBM Robotic Process Automation for Cloud Pak as part of the base container images, Watson NLP and WebSphere Liberty. CVE-2022-4855...

Security Bulletin: A vulnerability in GNU Binutils may affect IBM Robotic Process Automation for Cloud Pak and result in a denial of service (CVE-2019-9074).

Summary GNU Binutils is used by IBM Robotic Process Automation for Cloud Pak as part of Watson NLP. CVE-2019-9074. Vulnerability Details CVEID:CVE-2019-9074 DESCRIPTION: GNU Binutils is vulnerable to a denial of service, caused by an out-of-bounds read leading to a SEGV in bfdgetl32 in libbfd.c i...

Security Bulletin: Vulnerabilities in Watson NLP and WebSphere Liberty may affect IBM Robotic Process Automation for Cloud Pak

Summary Python is used by IBM Robotic Process Automation for Cloud Pak as part of Watson NLP and WebSphere Liberty. CVE-2022-48565. GNU gdb is used by IBM Robotic Process Automation for Cloud Pak as part of WebSphere Liberty and base container images. CVE-2023-39129. Vulnerability Details...

Google Unveils RETVec - Gmail's New Defense Against Spam and Malicious Emails

Google has revealed a new multilingual text vectorizer called RETVec short for Resilient and Efficient Text Vectorizer to help detect potentially harmful content such as spam and malicious emails in Gmail. "RETVec is trained to be resilient against character-level manipulations including insertio...

the-nlp-master.com Cross Site Scripting vulnerability OBB-3661507

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: Multiple security vulnerabilities in Java affect IBM Robotic Process Automation

Summary Java is used by IBM Robotic Process Autoamtion as part of the ILMT, NLP and Containers CVE-2023-2597, CVE-2023-21930, CVE-2023-21937, CVE-2023-21938, CVE-2023-21939, CVE-2023-21954, CVE-2023-21967, CVE-2023-21968. Vulnerability Details CVEID:CVE-2023-21968 DESCRIPTION: An unspecified...

com.github.fracpete:nlp-weka-package (>=2015.3.25 <=2019.3.29), com.github.paramitamirza:CATENA (>=1.0.1 <=1.0.2) +8 more potentially affected by CVE-2023-39020 via edu.stanford.nlp:stanford-parser (>=3.2.0 <=3.9.2)

edu.stanford.nlp:stanford-parser MAVEN version =3.2.0, =2015.3.25, =1.0.1, =1.3.0, =1.1, =7.20.4, =8.0.1 - org.zalando.research:zap =1.0 Source cves: CVE-2023-39020 Source advisory: OSV:GHSA-353M-JH2M-72V4...

Malicious code in nlp-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef6692095c28b968172ac45d43937a7bfe30267c7c27add946d2534ad6c7e24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-626 Malicious code in nlp-react-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2ef6692095c28b968172ac45d43937a7bfe30267c7c27add946d2534ad6c7e24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ChatGPT Injection: a new type of API Abuse attack may steal your OpenAI API credits

ChatGPT is spreading like wildfire all over the internet, being used in everything from casual tools to cybersecurity and even industrial applications. Its so popular, I wouldnt be shocked if it starts running a nuclear power plant soon if it isnt already! Using OpenAIs ChatGPT-3.5, ChatGPT-4, an...

Security Bulletin: A vulnerability in protobuf may affect IBM Robotic Process Automation and result in a denial of service (CVE-2022-1941)

Summary There is a vulnerability in protobuf used by IBM Robotic Process Automation as part of speech and NLP processing which may result in a denial of service. This bulletin identifies the security fixes to apply to address this vulnerability. Vulnerability Details CVEID:CVE-2022-1941...

Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.

Summary Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak. Node.js follow-redirects is used by IBM Robotic Process Automation as part of API Server functionality CVE-2022-0536. Madialize URI.js module for NPM is used by IBM Robotic Process Automation as par...