83 matches found
Zylon PrivateGPT 1.0.1 URI Artifact Loader SSRF
Zylon PrivateGPT versions 1.0.0 and 1.0.1 contain a server-side request forgery vulnerability in the URI Artifact Loader. The proof of concept demonstrates a controlled loopback request. https://packetstorm.news/download/237886...
Exploit for CVE-2026-116000
CVE-2026-116000 — PrivateGPT URI-loader SSRF English | P...
CVE-2026-116000
A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function loadfilefromuri of the file privategpt/server/ingest/uriloader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request...
CVE-2026-116000 Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery
A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function loadfilefromuri of the file privategpt/server/ingest/uriloader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request...
EUVD-2026-109329
A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function loadfilefromuri of the file privategpt/server/ingest/uriloader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request...
CVE-2026-116000 Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery
A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function loadfilefromuri of the file privategpt/server/ingest/uriloader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request...
CVE-2026-116000 Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request forgery
A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function loadfilefromuri of the file privategpt/server/ingest/uriloader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request...
CVE-2026-116000
A security flaw exists in Zylon PrivateGPT versions 1.0.0/1.0.1 within the URI Artifact Loader component. The vulnerability is located in the load_file_from_uri function of the file private_gpt/server/ingest/uri_loader.py. By manipulating the Value argument, an attacker can trigger a server-side ...
PT-2026-122934
A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load file from uri of the file private gpt/server/ingest/uri loader.py of the component URI Artifact Loader. Performing a manipulation of the argument Value results in server-side request...
PrivateGPT - Detect
PrivateGPT panel has been detected. !/usr/bin/env python3 -- coding: utf-8 -- """PrivateGPT panel has been detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'PrivateGPT - Detect', 'description': 'PrivateGPT...
PrivateGPT < 0.5.0 - Open Redirect Detection
An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allows attackers to redirect users to a URL specified by user-controlled input without proper validation or sanitization. !/usr/bin/env python3 -- codin...
EUVD-2025-14244
Malicious code in bioql PyPI...
EUVD-2025-6936
Malicious code in bioql PyPI...
EUVD-2025-7026
Malicious code in bioql PyPI...
EUVD-2024-47065
Malicious code in bioql PyPI...
EUVD-2024-47064
Malicious code in bioql PyPI...
CVE-2024-5936
An open redirect vulnerability exists in imartinez/privategpt version 0.5.0 due to improper handling of the 'file' parameter. This vulnerability allows attackers to redirect users to a URL specified by user-controlled input without proper validation or sanitization. The impact of this vulnerabili...
CVE-2024-5935
A Cross-Site Request Forgery CSRF vulnerability in version 0.5.0 of imartinez/privategpt allows an attacker to delete all uploaded files on the server. This can lead to data loss and service disruption for the application's users...
CVE-2025-4515
A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. This affects an unknown part of the file settings.yaml. The manipulation of the argument alloworigins leads to permissive cross-domain policy with untrusted domains. It is possible to initiate the...
CVE-2025-4515
A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. This affects an unknown part of the file settings.yaml. The manipulation of the argument alloworigins leads to permissive cross-domain policy with untrusted domains. It is possible to initiate the...