3436 matches found
CVE-2026-82288
Stable Diffusion WebUI through version 1.10.1 is affected by a credential disclosure vulnerability in the /sdapi/v1/cmd-flags API endpoint. The endpoint returns parsed command-line arguments—including gradio_auth and api_auth values—in cleartext, allowing unauthenticated network attackers to retr...
CVE-2026-33340
CVE-2026-33340: SSRF in lollms-webui Panoramica Campo| Dettaglio ---|--- CVE ID| CVE-2026-33340 Vulnerabilità| Server-Side Request Forgery SSRF Prodotto interessato| ParisNeo/lollms-webui LoLLMs WEBUI Gravità| Critica — CVSS 9.1 Vettore CVSS| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CWE|...
POC_CVE-2024-4322
CVE-2024-4322: LoLLMS WebUI PoC & Nuclei-Validierungslabor Dieses Repository stellt Docker-basierte lokale Laborumgebungen zur Reproduktion von CVE-2024-4322 bereit, einer Path-Traversal-Sicherheitslücke in LoLLMS WebUI v9.6, sowie zur Validierung, dass das zugehörige Nuclei-Template nicht auf...
llama-factory-webui-rce-cve-2026-58116-trust-remote-code-model-path-injection
CVE-2026-58116 — RCE nella WebUI di LLaMA-Factory tramite trustremotecode Prova di concetto per CVE-2026-58116 CVSS 9.8 Critico: esecuzione remota di codice in LLaMA-Factory = v0.9.5. La WebUI di LLaMA-Factory imposta in modo hardcoded trustremotecode=True quando carica un modello...
CVE-2023-20273
CVE-2023-20273 CVE-2023-20273 PoC Exploit Utilizzo root@kitploit: usage: exploit.py -h -t URL -u Username -p Password -c Command | -r -dest Outfile -www | -tcp | -null -ip LocalIP -port LocalPort -fs filesystem -path filepath -operation operationtype -v -q CVE-2023-20273 Exploit PoC options: -h,...
POC-CVE-2024-6778
CVE-2024-6778 Este repositório contém provas de conceito PoCs para CVE-2024-6778, que são vulnerabilidades no navegador Chromium que permitem uma fuga da sandbox através de uma extensão do navegador. Para executar esses exploits, você precisa de uma versão do Chromium anterior a 126.0.6478.54...
COPG
🎮 COPG Lo spoofer di dispositivo e CPU più avanzato per Android: aggira le restrizioni e sblocca grafica premium, FPS più alti e funzionalità esclusive sulla maggior parte di giochi e app. ✨ Perché COPG? COPG è un modulo Zygisk che fa credere alla maggior parte di giochi e app di essere eseguiti ...
POC_CVE-2024-12537
CVE-2024-12537 Lab DoS sul Formato Codice di Open WebUI Questo repository contiene un laboratorio di riproduzione locale e isolato e un candidato template nuclei per CVE-2024-12537, una vulnerabilità di denial-of-service non autenticata nell'endpoint di formattazione del codice di Open WebUI. Il...
enforcement-coverage
تغطية الإنفاذ تكتشف مسارات API التي تحمل تحكمًا في التفويض أضعف من مساراتها الشقيقة. عثرت على CVE-2026-45316 في Open WebUI من الكود المصدري وحده، دون أي معرفة مسبقة بنشرة أمنية: root@kitploit: MISMATCH POST /notes/id/pin notes.py:pinnotebyid 3/3 comparable write operations on note require...
CVE-2026-77815
toabspath in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but does not resolve symbolic links. A symlink placed inside a scanned directory therefore satisfies the containment comparison performed by ispathtrusted in scripts/iib/api.py while...
CVE-2026-77815 Infinite Image Browsing Resolves Paths With normpath, Allowing Symlink Escape From Scanned Directories
toabspath in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but does not resolve symbolic links. A symlink placed inside a scanned directory therefore satisfies the containment comparison performed by ispathtrusted in scripts/iib/api.py while...
CVE-2026-77815 Infinite Image Browsing Resolves Paths With normpath, Allowing Symlink Escape From Scanned Directories
toabspath in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but does not resolve symbolic links. A symlink placed inside a scanned directory therefore satisfies the containment comparison performed by ispathtrusted in scripts/iib/api.py while...
EUVD-2026-63993
toabspath in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but does not resolve symbolic links. A symlink placed inside a scanned directory therefore satisfies the containment comparison performed by ispathtrusted in scripts/iib/api.py while...
CVE-2026-77815
Infinite Image Browsing (a Stable Diffusion WebUI extension) is vulnerable to a symlink-based path traversal in to_abs_path (scripts/iib/tool.py). The function uses os.path.normpath, which collapses dot segments but does not resolve symbolic links. An attacker who can place a symlink inside a sca...
CVE-2026-77814 Infinite Image Browsing is_path_trusted Prefix Comparison Omits the Trailing Path Separator
ispathtrusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswithparentpath, without appending a path separator. A directory whose name merely begins with an allowed path therefore satisfies the comparison, so where /data/images is allowed ...
EUVD-2026-63992
ispathtrusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswithparentpath, without appending a path separator. A directory whose name merely begins with an allowed path therefore satisfies the comparison, so where /data/images is allowed ...
CVE-2026-77814 Infinite Image Browsing is_path_trusted Prefix Comparison Omits the Trailing Path Separator
ispathtrusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswithparentpath, without appending a path separator. A directory whose name merely begins with an allowed path therefore satisfies the comparison, so where /data/images is allowed ...
CVE-2026-19505
Improper cryptographic signature verification in jstfunctions.c in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote attacker to bypass authentication and obtain administrative access via a forged JWT containing an invalid RSA signature...
CVE-2026-19506
Race condition in check.jst in RDK-B WebUI rdkb-2025q4-kirkstone.04.10.26 allows a remote attacker to gain unauthorized access via concurrent authentication requests that exploit shared authentication state...