168406 matches found
CVE-2025-27770 UpTrain vulnerable to Remote code execution at `/create_project`
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /createproject endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may b...
CVE-2025-27621
UpTrain ≤0.7.1 ships a static default API key derived from a hardcoded username and an open CORS policy, letting any website send authenticated cross-origin requests via the uptrain-access-token header and perform privileged actions. CVSS 8.7 HIGH. No patch is available; monitor the GitHub adviso...
CVE-2026-73620
creationtimestamp| type| source ---|---|--- 2026-08-17 15:00:04+00:00| seen| https://t.me/bdufstecru/3388 2026-08-18 00:00:28+00:00| published-proof-of-concept| https://t.me/bdufstecru/3388...
MINI-5RMP-P62Q-C84V
Bulletin has no description...
MINI-CQX6-49QF-H332
Bulletin has no description...
MINI-G7CV-JM67-QG45
Bulletin has no description...
MINI-JMQV-2V59-VQQP
Bulletin has no description...
MINI-CVH9-662V-5M6V
Bulletin has no description...
MINI-3PRC-GHH9-VWMV
Bulletin has no description...
MINI-J5HJ-G2PQ-94HM
Bulletin has no description...
MINI-QVFF-5VG9-F952
Bulletin has no description...
MINI-WGCJ-897W-86GQ
Bulletin has no description...
MINI-7JQQ-86PQ-CHFW
Bulletin has no description...
MINI-55JG-637X-VQC7
Bulletin has no description...
MINI-V75R-296C-P5H3
Bulletin has no description...
MINI-X4G7-PR43-C4F3
Bulletin has no description...
MINI-46PM-3CWR-RG8X
Bulletin has no description...
MINI-G2X5-Q7QP-9224
Bulletin has no description...