Lucene search
+L

4575 matches found

Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2022-48731

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Red Hat Enterprise Linux - kernel: mm/kmemleak: avoid scanning potential huge holes Ubuntu Linux - mm/kmemleak: avoid scanning potential huge holes When using...

5.5CVSS6AI score0.00168EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2022-4269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Linux kernel Traffic Control TC subsystem. Using a specific networking configuration redirecting egress packets to ingress using TC acti...

5.5CVSS5.9AI score0.00201EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2024-35952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/ast: Fix soft lockup There is a while-loop in astdpsetonoff that could lead to...

5.5CVSS5.8AI score0.00172EPSS
SaveExploits0References2
NVD
NVD
•added 2025/03/03 4:15 p.m.•41 views

CVE-2025-25185

GPT Academic provides interactive interfaces for large language models. In 3.91 and earlier, GPT Academic does not properly account for soft links. An attacker can create a malicious file as a soft link pointing to a target file, then package this soft link file into a tar.gz file and upload it...

7.5CVSS0.00635EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/03/03 3:33 p.m.•15 views

CVE-2025-25185 GPT Academic allows arbitary file read by tarfile uncompress within softlink

GPT Academic provides interactive interfaces for large language models. In 3.91 and earlier, GPT Academic does not properly account for soft links. An attacker can create a malicious file as a soft link pointing to a target file, then package this soft link file into a tar.gz file and upload it...

7.5CVSS7.6AI score0.00635EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/03/03 3:33 p.m.•43 views

CVE-2025-25185 GPT Academic allows arbitary file read by tarfile uncompress within softlink

GPT Academic provides interactive interfaces for large language models. In 3.91 and earlier, GPT Academic does not properly account for soft links. An attacker can create a malicious file as a soft link pointing to a target file, then package this soft link file into a tar.gz file and upload it...

7.5CVSS0.00635EPSS
SaveExploits1References2
Mend
Mend
•added 2025/03/03 3:33 p.m.•7 views

CVE-2025-25185

GPT Academic provides interactive interfaces for large language models. In 3.91 and earlier, GPT Academic does not properly account for soft links. An attacker can create a malicious file as a soft link pointing to a target file, then package this soft link file into a tar.gz file and upload it...

8.7CVSS0.00635EPSS
SaveExploits1References4
CVE
CVE
•added 2025/03/03 3:33 p.m.•122 views

CVE-2025-25185

CVE-2025-25185: GPT Academic exposes a back-linking vulnerability in 3.91 and earlier where soft links are not properly handled during tar.gz extraction. An attacker can create a malicious file as a soft link to a target server file, package it in a tar.gz, upload it, and on decompression the sof...

7.5CVSS7.5AI score0.00635EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2025/03/03 3:33 p.m.•23 views

CVE-2025-25185 GPT Academic allows arbitary file read by tarfile uncompress within softlink

GPT Academic provides interactive interfaces for large language models. In 3.91 and earlier, GPT Academic does not properly account for soft links. An attacker can create a malicious file as a soft link pointing to a target file, then package this soft link file into a tar.gz file and upload it...

7.5CVSS6.8AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/03/03 12:00 a.m.•7 views

PT-2025-9508

Name of the Vulnerable Software and Affected Versions GPT Academic versions 3.91 and earlier Description The issue arises from the improper handling of soft links in GPT Academic. An attacker can exploit this by creating a malicious soft link file, packaging it into a tar.gz file, and uploading i...

7.5CVSS0.00635EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•8 views

CVE-2025-25185: Improper Link Resolution Before File Access

GPT Academic provides interactive interfaces for large language models. In 3.91 and earlier, GPT Academic does not properly account for soft links. An attacker can create a malicious file as a soft link pointing to a target file, then package this soft link file into a tar.gz file and upload it...

7.5CVSS6AI score0.00635EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/03 12:00 a.m.•18 views

GPT Academic 后置链接漏洞

GPT Academic is an interface that provides pragmatic interactions for LLM large language models such as GPT/GLM. GPT Academic suffers from a back-linking vulnerability that stems from not properly handling soft links, which can be exploited by an attacker to cause arbitrary file reads...

7.5CVSS6.9AI score0.00635EPSS
SaveExploits1References4
SUSE CVE
SUSE CVE
•added 2025/02/28 2:23 a.m.•13 views

SUSE CVE-2024-57977

In the Linux kernel, the following vulnerability has been resolved: memcg: fix soft lockup in the OOM process A soft lockup issue was found in the product with about 56,000 tasks were in the OOM cgroup, it was traversing them when the soft lockup was triggered. watchdog: BUG: soft lockup - CPU2...

5.5CVSS7.5AI score0.00204EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2025/02/28 2:23 a.m.•8 views

SUSE CVE-2024-57991

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: chan: fix soft lockup in rtw89entityrecalcmgntroles During rtw89entityrecalcmgntroles, there is a normalizing process which will re-order the list if an entry with target pattern is found. And once one is found, shou...

5.5CVSS6.4AI score0.00218EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/02/28 2:21 a.m.•25 views

SUSE CVE-2025-21749

In the Linux kernel, the following vulnerability has been resolved: net: rose: lock the socket in rosebind syzbot reported a soft lockup in roseloopbacktimer, with a repro calling bind from multiple threads. rosebind must lock the socket to avoid this issue...

3.3CVSS6.4AI score0.00205EPSS
SaveExploits0References13
NVD
NVD
•added 2025/02/27 3:15 a.m.•19 views

CVE-2025-21749

In the Linux kernel, the following vulnerability has been resolved: net: rose: lock the socket in rosebind syzbot reported a soft lockup in roseloopbacktimer, with a repro calling bind from multiple threads. rosebind must lock the socket to avoid this issue...

5.5CVSS0.00205EPSS
SaveExploits0References10
OSV
OSV
•added 2025/02/27 3:15 a.m.•10 views

DEBIAN-CVE-2025-21749

In the Linux kernel, the following vulnerability has been resolved: net: rose: lock the socket in rosebind syzbot reported a soft lockup in roseloopbacktimer, with a repro calling bind from multiple threads. rosebind must lock the socket to avoid this issue...

5.5CVSS5.6AI score0.00205EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/27 3:15 a.m.•16 views

AZL-57826 CVE-2025-21749 affecting package kernel for versions less than 5.15.179.1-1

In the Linux kernel, the following vulnerability has been resolved: net: rose: lock the socket in rosebind syzbot reported a soft lockup in roseloopbacktimer, with a repro calling bind from multiple threads. rosebind must lock the socket to avoid this issue...

5.5CVSS6.6AI score0.00205EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/27 3:15 a.m.•13 views

UBUNTU-CVE-2025-21749

In the Linux kernel, the following vulnerability has been resolved: net: rose: lock the socket in rosebind syzbot reported a soft lockup in roseloopbacktimer, with a repro calling bind from multiple threads. rosebind must lock the socket to avoid this issue...

5.5CVSS6.2AI score0.00205EPSS
SaveExploits0References50
OSV
OSV
•added 2025/02/27 3:15 a.m.•22 views

UBUNTU-CVE-2025-21781

In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix panic during interface removal Reference counting is used to ensure that batadvhardifneighnode and batadvhardiface are not freed before/during batadvvelpthroughputmetricupdate work is finished. But there isn't a...

5.5CVSS6.2AI score0.00225EPSS
SaveExploits0References47
Rows per page
Query Builder