Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2026/07/09 11:52 p.m.34 views

CVE-2026-54771 Langroid: handle_message() executes user-supplied tool JSON without sender verification

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.3, a Langroid application exposing a chat interface to untrusted users may allow direct tool invocation via raw JSON payloads, even when tools are registered with use=False, handle=True. Version...

8.1CVSS0.00278EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.19 views

PT-2026-56064

Name of the Vulnerable Software and Affected Versions Langroid versions prior to 0.65.3 Description An application using this framework that exposes a chat interface to untrusted users may allow direct tool invocation via raw JSON payloads. This occurs even when tools are registered with use=Fals...

8.1CVSS6AI score0.00278EPSS
SaveExploits0References14
Kitploit
Kitploit
added 2023/12/15 11:30 a.m.45 views

PacketSpy - Powerful Network Packet Sniffing Tool Designed To Capture And Analyze Network Traffic

PacketSpy is a powerful network packet sniffing tool designed to capture and analyze network traffic. It provides a comprehensive set of features for inspecting HTTP requests and responses, viewing raw payload data, and gathering information about network devices. With PacketSpy, you can gain...

7.2AI score
SaveExploits0References2
Rows per page
Query Builder