1048 matches found
CVE-2025-64511 MaxKB has SSRF in sandbox
MaxKB is an open-source AI assistant for enterprise. In versions prior to 2.3.1, a user can access internal network services such as databases through Python code in the tool module, although the process runs in a sandbox. Version 2.3.1 fixes the issue...
Taught by the Flawed: How Dataset Insecurity Breeds Vulnerable AI Code
AI programming assistants have demonstrated a tendency to generate code containing basic security vulnerabilities. While developers are ultimately responsible for validating and reviewing such outputs, improving the inherent quality of these generated code snippets remains essential. A key...
Eval Injection
Overview talkpipe is a Python internal and external DSL for writing generative AI analytics Affected versions of this package are vulnerable to Eval Injection due to using the function eval unsafe in the compileLambda function in the talkpipe/util/datamanipulation.py file. An attacker can execute...
YouTube-Scraper-POC
What this repo is The code in this repository is a proof of...
MAL-2025-191843 Malicious code in python3-6 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d48e27507362baa15b8e41d1554bce82077fcc870112ab6cb4d17694b47c8ef3 During installation, the obfuscated code is run and connect with a remote server. In the current version, the code just opens a URL without exfiltrating any...
EUVD-2021-13350
Malware in sbrugna...
EUVD-2014-3567
Malware in sbrugna...
EUVD-2017-2447
Malware in sbrugna...
EUVD-2014-2368
Malware in sbrugna...
EUVD-2005-3008
Malware in sbrugna...
EUVD-2009-0012
Malware in sbrugna...
EUVD-2020-0178
Malware in sbrugna...
EUVD-2005-2484
Malware in sbrugna...
EUVD-2021-25633
Malware in sbrugna...
EUVD-2020-7345
Malware in sbrugna...
EUVD-2020-26899
Malware in sbrugna...
EUVD-2018-17775
Malware in sbrugna...
EUVD-2007-0002
Malware in sbrugna...