Lucene search
+L

43 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2024-51026

Malicious code in bioql PyPI...

9.3CVSS5.8AI score0.00779EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-49408

Malicious code in bioql PyPI...

6.1CVSS5.8AI score0.00305EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-10857

Malicious code in bioql PyPI...

7.5CVSS5.8AI score0.00468EPSS
SaveExploits0References3
NVD
NVD
•added 2025/04/14 3:15 a.m.•55 views

CVE-2025-3572

SmartRobot from INTUMIT has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to probe internal network and even access arbitrary local files on the server...

7.5CVSS0.00468EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/04/14 3:15 a.m.•25 views

CVE-2025-3572

SmartRobot from INTUMIT has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to probe internal network and even access arbitrary local files on the server...

7.5CVSS6AI score0.00468EPSS
SaveExploits0References2
CVE
CVE
•added 2025/04/14 1:38 a.m.•119 views

CVE-2025-3572

CVE-2025-3572 concerns a Server-Side Request Forgery in INTUMIT’s SmartRobot. The issue allows unauthenticated remote attackers to probe internal networks and access arbitrary local files on the server via SSRF in the affected SmartRobot component. Public listings consistently describe the vulner...

7.5CVSS6AI score0.00468EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/04/14 1:38 a.m.•18 views

CVE-2025-3572 INTUMIT SmartRobot - Server-Side Request Forgery

SmartRobot from INTUMIT has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to probe internal network and even access arbitrary local files on the server...

7.5CVSS6AI score0.00468EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/04/14 1:38 a.m.•45 views

CVE-2025-3572 INTUMIT SmartRobot - Server-Side Request Forgery

SmartRobot from INTUMIT has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to probe internal network and even access arbitrary local files on the server...

7.5CVSS0.00468EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/14 12:00 a.m.•11 views

CVE-2025-3572: Server-Side Request Forgery (SSRF)

SmartRobot from INTUMIT has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to probe internal network and even access arbitrary local files on the server...

7.5CVSS6AI score0.00468EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/14 12:00 a.m.•24 views

Intumit SmartRobot code issue vulnerabilities

Intumit SmartRobot is a web development framework from Intumit, Inc. A code issue vulnerability exists in Intumit SmartRobot that stems from vulnerability to server-side request forgery attacks...

7.5CVSS5.8AI score0.00468EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/12/26 4:15 a.m.•24 views

CVE-2024-12652

A Improper Control of Generation of Code 'Code Injection' vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code...

8.8CVSS6.1AI score0.00779EPSS
SaveExploits0References1
NVD
NVD
•added 2024/12/26 4:15 a.m.•24 views

CVE-2024-12652

A Improper Control of Generation of Code 'Code Injection' vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code...

9.3CVSS0.00779EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/26 4:05 a.m.•43 views

CVE-2024-12652 Intumit SmartRobot′s Conversational AI Platform - Improper Control of Generation of Code ('Code Injection')

A Improper Control of Generation of Code 'Code Injection' vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code...

9.3CVSS0.00779EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/26 4:05 a.m.•14 views

CVE-2024-12652 Intumit SmartRobot′s Conversational AI Platform - Improper Control of Generation of Code ('Code Injection')

A Improper Control of Generation of Code 'Code Injection' vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code...

9.3CVSS6.1AI score0.00779EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/26 4:05 a.m.•70 views

CVE-2024-12652

CVE-2024-12652 affects Intumit SmartRobot’s Conversational AI Platform. A vulnerability in the groovy script function prior to v7.2.0 enables remote authenticated users to execute arbitrary system commands via Groovy code (Code Injection). This can impact availability, confidentiality, and integr...

9.3CVSS6.1AI score0.00779EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•8 views

CVE-2024-12652: Improper Control of Generation of Code

A Improper Control of Generation of Code 'Code Injection' vulnerability in groovy script function in SmartRobot′s Conversational AI Platform before v7.2.0 allows remote authenticated users to perform arbitrary system commands via Groovy code...

9.3CVSS6.1AI score0.00779EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/26 12:00 a.m.•17 views

Intumit SmartRobot Conversational AI Platform has security vulnerabilities

Intumit SmartRobot Conversational AI Platform is a conversational AI platform from Intumit. A security vulnerability previously existed in Intumit SmartRobot Conversational AI Platform version v7.2.0, which stemmed from an improper code generation control issue in Groovy script functions. An...

9.3CVSS6.7AI score0.00779EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/26 12:00 a.m.•22 views

PT-2024-17692

Name of the Vulnerable Software and Affected Versions SmartRobot's Conversational AI Platform versions prior to 7.2.0 Description A Code Injection vulnerability exists in the groovy script function of SmartRobot's Conversational AI Platform, allowing remote authenticated users to perform arbitrar...

9.3CVSS6.3AI score0.00779EPSS
SaveExploits0References10
osv_cve
osv_cve
•added 2024/09/16 6:15 a.m.•22 views

CVE-2024-8776

SmartRobot from INTUMIT does not properly validate a specific page parameter, allowing unautheticated remote attackers to inject JavaScript code to the parameter for Reflected Cross-site Scripting attacks...

6.1CVSS5.9AI score0.00305EPSS
SaveExploits0References2
NVD
NVD
•added 2024/09/16 6:15 a.m.•43 views

CVE-2024-8776

SmartRobot from INTUMIT does not properly validate a specific page parameter, allowing unautheticated remote attackers to inject JavaScript code to the parameter for Reflected Cross-site Scripting attacks...

6.1CVSS0.00305EPSS
SaveExploits0References2
Rows per page
Query Builder