3418 matches found
CVE-2025-62364 text-generation-webui allows arbitrary file read via symbolic link upload
text-generation-webui is an open-source web interface for running Large Language Models. In versions through 3.13, a Local File Inclusion vulnerability exists in the character picture upload feature. An attacker can upload a text file containing a symbolic link to an arbitrary file path. When the...
CVE-2025-62364 text-generation-webui allows arbitrary file read via symbolic link upload
text-generation-webui is an open-source web interface for running Large Language Models. In versions through 3.13, a Local File Inclusion vulnerability exists in the character picture upload feature. An attacker can upload a text file containing a symbolic link to an arbitrary file path. When the...
CVE-2025-62364
The CVE-2025-62364 issue affects text-generation-webui (up to version 3.13). A Local File Inclusion exists in the character picture upload feature: an attacker can upload a text file containing a symbolic link to an arbitrary file path, and when processed the app follows the link and serves the t...
CVE-2025-52647
The BigFix WebUI application responds with HOST information from the HTTP header field making it vulnerable to Host Header Poisoning Attacks...
PT-2025-41812
Name of the Vulnerable Software and Affected Versions text-generation-webui versions through 3.13 Description text-generation-webui is a web interface for running Large Language Models. A Local File Inclusion issue exists in the character picture upload feature. An attacker can upload a text file...
EUVD-2025-33794
The BigFix WebUI application responds with HOST information from the HTTP header field making it vulnerable to Host Header Poisoning Attacks...
CVE-2025-52647
The BigFix WebUI application responds with HOST information from the HTTP header field making it vulnerable to Host Header Poisoning Attacks...
CVE-2025-52647
CVE-2025-52647 affects HCL BigFix WebUI and is described as a host header poisoning vulnerability where the application responds with HOST information from HTTP header fields. Connected sources consistently reference this issue in BigFix WebUI across multiple ecosystems (Red Hat, CNVD, NVD, CVE l...
CVE-2025-52647 HCL BigFix WebUI is affected by a host header poisoning vulnerability
The BigFix WebUI application responds with HOST information from the HTTP header field making it vulnerable to Host Header Poisoning Attacks...
CVE-2025-52647 HCL BigFix WebUI is affected by a host header poisoning vulnerability
The BigFix WebUI application responds with HOST information from the HTTP header field making it vulnerable to Host Header Poisoning Attacks...
PT-2025-41612
Name of the Vulnerable Software and Affected Versions BigFix WebUI affected versions not specified Description The BigFix WebUI application is susceptible to Host Header Poisoning Attacks. The application responds with HOST information from the HTTP header field. Recommendations At the moment,...
CVE-2025-6985 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-M42M-M8CR-8M58 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2025-6985 vulnerabilities
Vulnerabilities for packages: open-webui, py3-langchain-text-splitters...
GHSA-M42M-M8CR-8M58 vulnerabilities
Vulnerabilities for packages: open-webui, py3-langchain-text-splitters...
EUVD-2019-16516
Malware in sbrugna...
EUVD-2019-13050
Malware in sbrugna...
EUVD-2019-6648
Malware in sbrugna...