PT-2026-27320

Name of the Vulnerable Software and Affected Versions ncmdump versions prior to 1.4.0 Description A NULL pointer dereference issue exists in taurusxin ncmdump within the src/utils modules, specifically related to the cJSON.Cpp program files. This can lead to unexpected behavior or program crashes...

EUVD-2013-2012

Malware in sbrugna...

PYSEC-2024-318

A Regular Expression Denial of Service ReDoS vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability is located in the filterhistory function within the utils.py module. This function takes a user-provided keyword and attempts to match it against chat history...

ChuanhuChatGPT Security Vulnerability

ChuanhuChatGPT is a lightweight and easy-to-use Web GUI for ChatGPT/ChatGLM/LLaMA/StableLM/MOSS and many other LLMs. A security vulnerability exists in ChuanhuChatGPT, which stems from a lack of cleanup or validation of the keyword parameter, and a denial of service vulnerability in the...

PYSEC-2022-232

NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load instead of yaml.safeload. The deserialization of Untrusted Data, may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to bo...

CVE-2022-31605

NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load instead of yaml.safeload. The deserialization of Untrusted Data, may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to bo...

CVE-2022-31605: Deserialization of Untrusted Data

NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load instead of yaml.safeload. The deserialization of Untrusted Data, may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to bo...

PT-2022-20867

Name of the Vulnerable Software and Affected Versions NVFLARE versions prior to 2.1.2 Description The issue concerns the deserialization of untrusted data in the utils module of NVFLARE, where YAML files are loaded via yaml.load instead of yaml.safe load. This may allow an unprivileged network...

CVE-2013-2024

OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0...

CVE-2013-2024

OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0...

DEBIAN-CVE-2013-2024

OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0...

Command injection

OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0...

UBUNTU-CVE-2013-2024

OS command injection vulnerability in the "qs" procedure from the "utils" module in Chicken before 4.9.0...

CVE-2013-2024

In Chicken, CVE-2013-2024 describes an OS command injection vulnerability in the qs procedure from the utils module, affecting versions before 4.9.0. The root cause is unsafely handling or composing OS commands within that path, enabling an attacker to execute arbitrary commands on the host. The ...

PT-2019-6871 · Chicken +1 · Chicken +1

Name of the Vulnerable Software and Affected Versions: Chicken versions prior to 4.9.0 Description: The issue is related to an OS command injection vulnerability in the qs procedure from the utils module. Recommendations: For versions prior to 4.9.0, update to version 4.9.0 or later to resolve th...