Integrated Simulation Framework for Adversarial Attacks on Autonomous Vehicles

Autonomous vehicles AVs rely on complex perception and communication systems, making them vulnerable to adversarial attacks that can compromise safety. While simulation offers a scalable and safe environment for robustness testing, existing frameworks typically lack comprehensive supportfor...

Langflow Chatbot Detected

This is an informational plugin to inform the user that the scanner has detected a publicly accessible Langflow chatbot on the target application. Langflow is an open-source visual framework for building multi-agent and RAG. This detection is included in the AI and LLM category. No source data...

CVE-2021-43831

Gradio is an open source framework for building interactive machine learning models and demos. In versions prior to 2.5.0 there is a vulnerability that affects anyone who creates and publicly shares Gradio interfaces. File paths are not restricted and users who receive a Gradio link can access an...

CVE-2021-32824

Apache Dubbo is a java based, open source RPC framework. Versions prior to 2.6.10 and 2.7.10 are vulnerable to pre-auth remote code execution via arbitrary bean manipulation in the Telnet handler. The Dubbo main service port can be used to access a Telnet Handler which offers some basic methods t...

Bootstrap 安全漏洞

Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript by Bootstrap Inc. A security vulnerability exists in Bootstrap versions prior to 3.4.1 through 4.0.0 that stems from improper input neutralization and could lead to a cross-site scripting attack...

CAMEL - The First And The Best Multi-Agent Framework. Finding The Scaling Law Of Agents

🐫 CAMEL is an open-source community dedicated to finding the scaling laws of agents. We believe that studying these agents on a large scale offers valuable insights into their behaviors, capabilities, and potential risks. To facilitate research in this field, we implement and support various type...

Dragonfly 安全漏洞

Dragonfly is an open source framework from DragonflyDB that allows dynamic processing of any content type. A security vulnerability exists in Dragonfly 1.28.2 and earlier versions, which stems from a Lua library command that references a large negative integer, potentially leading to a denial of...

CVE-2025-27092 Path Traversal Vulnerability in GHOSTS Photo Retrieval Endpoint

GHOSTS is an open source user simulation framework for cyber experimentation, simulation, training, and exercise. A path traversal vulnerability was discovered in GHOSTS version 8.0.0.0 that allows an attacker to access files outside of the intended directory through the photo retrieval endpoint...

CVE-2024-54145

Cacti is an open source performance and fault management framework. Cacti has a SQL injection vulnerability in the getdiscoveryresults function of automationdevices.php using the network parameter. This vulnerability is fixed in 1.2.29...

Letta 安全漏洞

Letta MemGPT is an open source framework for building stateful LLM applications from Letta Open Source. A security vulnerability exists in Letta version v0.3.17 that stems from incorrect access control. An attacker exploiting the vulnerability could access sensitive data...

data.all 安全漏洞

data.all is an open source development framework from data-dot-all open source. A security vulnerability exists in data.all that stems from the fact that a member of the data.all management team with access to an AWS account owned by a customer deploying data.all may be able to extract user data...

BYOB 安全漏洞

BYOB Build Your Own Botnet is an open source post-development framework for students, researchers and developers by malwaredllc individual developers. A security vulnerability exists in version 2.0 of BYOB, which stems from the inclusion of an arbitrary file write issue...

Webkul Software Bagisto Security Vulnerability

Webkul Software Bagisto is an open source e-commerce framework from Indian company Webkul Software. A security vulnerability exists in Webkul Software Bagisto version v.1.5.0, which stems from an insecure direct object reference IDOR issue that allows an attacker to obtain sensitive information v...

GPAC Denial of Service Vulnerability (CNVD-2024-06174)

GPAC is an open source multimedia framework. A denial of service vulnerability exists in GPAC version 2.3-DEV, which originates from an infinite loop in function av1uvlc in mediatools/avparsers.c. An attacker can exploit this vulnerability to cause a denial of service...

Fiber Security Breach

Fiber is an open source web framework written in the Go language. A security vulnerability exists in Fiber template versions prior to 3.1.9, which stems from the presence of a cross-site scripting XSS vulnerability. The vulnerability can be exploited by an attacker to execute malicious script in ...

GPAC Security Vulnerabilities

GPAC is an open source multimedia framework. A security vulnerability exists in versions prior to GPAC v.2.3-DEV, which stems from the presence of a buffer overflow vulnerability that could allow a local attacker to cause a denial of service via...

Webkul Software Bagisto 安全漏洞

Webkul Software Bagisto is an open source e-commerce framework from Indian company Webkul Software. A security vulnerability exists in Webkul Software Bagisto v1.5.1 that stems from susceptibility to server-side template injection SSTI attacks...

PowerJob Access Control Error Vulnerability (CNVD-2023-32767)

PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their applications. An Access Control Error vulnerability exists in PowerJob version V4.3.1 that stems from improper access control. An attacker could exploit the...

NVIDIA BMC 安全漏洞

NVIDIA BMC is an OpenBMC open software framework from NVIDIA. A security vulnerability exists in NVIDIA BMC. An attacker exploiting this vulnerability could guess a valid BMC username, which could lead to information disclosure...

NVIDIA BMC 安全漏洞

NVIDIA BMC is an OpenBMC open software framework from NVIDIA. A security vulnerability exists in NVIDIA BMC. An attacker exploiting this vulnerability could access arbitrary files, which could lead to information leakage...