CVE-2024-36264

creationtimestamp| type| source ---|---|--- 2025-03-20 19:18:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8263...

CVE-2024-10569

creationtimestamp| type| source ---|---|--- 2025-03-20 18:20:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8254...

CVE-2024-12759

creationtimestamp| type| source ---|---|--- 2025-03-20 18:20:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8252...

GHSA-92CP-5422-2MW7

creationtimestamp| type| source ---|---|--- 2025-03-20 18:20:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8247...

CVE-2024-8998

creationtimestamp| type| source ---|---|--- 2025-03-20 16:18:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8229 2025-04-04 09:36:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10426...

CVE-2024-8026

creationtimestamp| type| source ---|---|--- 2025-03-20 16:18:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8228...

CVE-2024-8966

creationtimestamp| type| source ---|---|--- 2025-03-20 16:18:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8226...

CVE-2024-7776

creationtimestamp| type| source ---|---|--- 2025-03-20 16:18:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8224...

CVE-2024-8952

creationtimestamp| type| source ---|---|--- 2025-03-20 16:18:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8223...

CVE-2024-10727

creationtimestamp| type| source ---|---|--- 2025-03-20 16:18:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8222...

CVE-2024-13060

creationtimestamp| type| source ---|---|--- 2025-03-20 15:18:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8219...

CVE-2024-12375

creationtimestamp| type| source ---|---|--- 2025-03-20 15:18:23+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8211...

CVE-2024-11603

creationtimestamp| type| source ---|---|--- 2025-03-20 15:18:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8207...

CVE-2024-11301

creationtimestamp| type| source ---|---|--- 2025-03-20 15:18:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8206...

CVE-2024-8501

creationtimestamp| type| source ---|---|--- 2025-03-20 15:18:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8204...

External Control of File Name or Path

Overview agentscope is an AgentScope: A Flexible yet Robust Multi-Agent Platform. Affected versions of this package are vulnerable to External Control of File Name or Path through the /read-examples endpoint. An attacker can read any local JSON file, containing API keys by sending a crafted POST...

Server-side Request Forgery (SSRF)

Overview fschat is an An open platform for training, serving, and evaluating large language model based chatbots. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF due to improper web server configuration. An attacker can access internal server resources and dat...

Origin Validation Error

Overview feast is a Python SDK for Feast Affected versions of this package are vulnerable to Origin Validation Error due to improper CORS configuration on the server. An attacker can bypass security controls and potentially access sensitive information by sending requests from unauthorized origin...

Path Equivalence

Overview gradio is a Python library for easily interacting with trained machine learning models Affected versions of this package are vulnerable to Path Equivalence due to the blockedpath function only blocking standard pathnames. On Windows systems, an attacker can read unauthorized files by usi...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS through the runtool command which exposes classes in the water.tools package via the ast parser. An attacker can shut down the server and write large files to arbitrary directories by exploiting the...