Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/09/17 2:51 p.m.•15 views

LiteLLM Proxy has server-side request forgery via the `user_config` request parameter

Summary A server-side request forgery in LiteLLM Proxy lets an authenticated caller redirect the proxy's outbound request to a host of their choosing by smuggling an apibase inside the userconfig request body, bypassing the existing parameter guard. Details LiteLLM Proxy validates request bodies...

5.3CVSS6AI score0.00439EPSS
SaveExploits0References5Affected Software1
CVE
CVE
•added 2026/09/16 6:36 p.m.•36 views

CVE-2026-59823

LiteLLM is a proxy server (AI Gateway) for calling LLM APIs. Prior to version 1.83.9 , an authenticated caller holding a valid virtual key could place api_base inside the user_config request body, bypassing the is_request_body_safe check that blocks top-level api_base and base_url but did not ins...

5.3CVSS5.9AI score0.00439EPSS
SaveExploits0References3
Exploit DB
Exploit DB
•added 2016/05/10 12:00 a.m.•38 views

All Windows Null-Free Shellcode - Functional Keylogger to File - 601 0x0259 bytes

All Windows Null-Free Shellcode - Functional Keylogger to File - 601 0x0259 bytes. Shellcode exploit for windows platform / ; Exploit Title: All windows null free shellcode - functional keylogger to file - 601 0x0259 bytes ; Date: Sat May 7 19:32:08 GMT 2016 ; Exploit Author: Fugu ; Vendor...

0.1AI score
SaveExploits0
Rows per page
Query Builder