Lunary 安全漏洞

lunary is lunary open source a production toolkit for LLM . An illegal authorization vulnerability exists in lunary, which stems from the presence of an incorrect authorization vulnerability that allows an unprivileged user to regenerate a private key for an item to which they do not have access...

PT-2023-25650 · Prolion · Prolion Cryptospike

Name of the Vulnerable Software and Affected Versions: ProLion CryptoSpike version 3.0.15P2 Description: A hard-coded cryptographic private key used to sign JWT authentication tokens allows remote attackers to impersonate arbitrary users and roles in web management and REST API endpoints via...