The vulnerability of the CorpusReader class in the NLTK library for symbolic and statistical processing of natural language allows a hacker to read arbitrary files.

The vulnerability of the CorpusReader class in the NLTK library for symbolic and statistical processing of natural language is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to read arbitrary fil...

The vulnerability of the HTTP Endpoint component in the /upload.cgi file of the BlackVue Dashcam 590X software, which allows a violator to trigger a service failure.

The vulnerability of the HTTP Endpoint component of the /upload.cgi file in the BlackVue Dashcam 590X microprogramming system is related to access control errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Model.load_model() function in the Keras library allows a hacker to execute arbitrary code.

The vulnerability of the Keras Model.loadmodel function in the Keras library is related to insufficient control over resources with dynamic management. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Tlon plugin (Urbit), which targets the AI agent OpenClaw (previously ClawdBot or MoltBot), allows a hacker to perform an SSRF attack.

The vulnerability of the Tlon plugin Urbit, which is part of the AI agent OpenClaw previously known as ClawdBot or MoltBot, stems from insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to execute an SSRF attack...

The vulnerability of the Navigation section in Microsoft Edge and Google Chrome browsers allows a hacker to bypass existing security mechanisms.

The vulnerability of the Navigation section in Microsoft Edge and Google Chrome relates to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass existing security measures through a specially created HTML page, operating remotely...

The vulnerability in the email template description of the state module and the Webmin control panel of the hosting system allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the email template description field in the state module of the Webmin hosting control panel is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Go programming language lies in improper encoding or encapsulation of output data, allowing attackers to gain access to and modify these data.

The vulnerability of the Go programming language is related to incorrect encoding or escaping of output data when processing the tag’s type attribute. Exploiting this vulnerability can allow an attacker to gain read and modify access to data remotely...

The vulnerability of the microprogramming software of the Qualcomm QSC family, related to deficiencies in authentication procedures, allows a perpetrator to execute arbitrary code.

The vulnerability of the microprogramming software in the Qualcomm QSC family is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Go “bug” command in the Go programming language allows a hacker to gain access to read and write arbitrary files.

The vulnerability of the Go “bug” in the Go programming language is related to the incorrect definition of symbolic references before accessing files. Exploiting this vulnerability can allow an attacker to gain access to and read/write arbitrary files...

The vulnerability of Docker’s plugin-based system for creating containerized systems like Moby (Docker Engine) allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of Docker’s plugin-based container creation system, Moby Docker Engine, is related to a single-shift error. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

Vulnerability of the “iHead: Logs” module of the CMS system for 1C-Bitrix: Website management related to lack of measures to protect the website structure, allowing attackers to execute arbitrary code.

Vulnerability of the “iHead: Logs” module in the Content Management System CMS of 1C-Bitrix: Website management is related to the failure to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the command-line interface of the Cisco Catalyst SD-WAN Manager allows a attacker to execute arbitrary code and elevate their privileges to root level.

The vulnerability of the command-line interface of the Cisco Catalyst SD-WAN Manager is related to incorrect encoding or filtering of output data. Exploiting this vulnerability allows an attacker to execute arbitrary code and elevate their privileges to the root level...

The vulnerability of the ParseDependencyExpression() function in the 7-Zip UEFI dependency parser allows a attacker to cause a service failure.

The vulnerability of the ParseDependencyExpression function in the 7-Zip UEFI dependency parser involves reading data beyond the permitted range of memory. Exploiting this vulnerability could allow a malicious actor to cause system failures...

The vulnerability of the OpenCapsule function in UEFI capsule file parsers and 7-Zip archivers allows a hacker to exploit the protected information.

The vulnerability of the OpenCapsule function in UEFI capsule file parsers and 7-Zip archivers is related to the use of uninitialized resources. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the password-changing component in the SOGo software, which allows a hacker to execute arbitrary code or gain unauthorized access to protected information.

The vulnerability of the contact search component in the SOGo software for collaborative work is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or gain unauthorized access to protected...

The vulnerability of the LibreChat artificial intelligence-based platform, related to the lack of access control when processing JWT tokens, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the LibreChat artificial intelligence-based platform is related to deficiencies in access control when processing JWT tokens. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informati...

The vulnerability of the DSP microprogramming software service in Qualcomm’s embedded chips allows attackers to disclose protected information.

The vulnerability of the DSP microprogramming system in Qualcomm’s embedded chips lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of embedded software developed by Qualcomm, related to unreliable pointer assignment, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of embedded software in Qualcomm chips relates to unreliable pointer handling. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the IntelliJ IDEA integrated development environment lies in the improper definition of symbolic links during file access, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the IntelliJ IDEA integrated development environment is related to the incorrect definition of symbolic links during file access. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Next.js web application development software platform, related to the loading of unreliable external data alongside reliable data, allows attackers to trigger service failures.

The vulnerability of the Next.js web application development platform lies in the loading of unreliable external data alongside reliable data. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

The vulnerability of the Perl module from the zlib library allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Perl module from the zlib library is related to incorrect input of configuration data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the get_abs_path() function in the framework for creating AI agents, Agent Zero, allows a hacker to read arbitrary files.

The vulnerability of the getabspath function in the framework used to create AI agents like Agent Zero is related to an incorrect limitation on the path name for the directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to read arbitrary files...

The vulnerability of the OAuth protocol implementation of the artificial intelligence-based platform LibreChat, which allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the OAuth protocol implementation of the artificial intelligence-based LibreChat platform is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the LibreChat artificial intelligence-based platform, related to an error in processing exceptional states at the final `/api/convos` endpoint, allows a violator to trigger a service failure.

The vulnerability of the LibreChat artificial intelligence-based platform is related to an error in processing exceptional states at the final endpoint /api/convos. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Zimbra Collaboration Suite’s email management system, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Zimbra Collaboration Suite email management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability in the Firefox web browser and the Thunderbird email client relates to the issue of allowing operations beyond the buffer in memory, which allows a malicious actor to execute arbitrary code.

The vulnerability in the Firefox web browser and the Thunderbird email client relates to the escape of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Media component in Google Chrome and Microsoft Edge allows a hacker to replace the user interface.

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface with a specially created HTML page...

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge allows a hacker to bypass the sandboxing protection mechanism.

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to bypass the sandboxing protection mechanisms...

The vulnerability of the Media component in Google Chrome and Microsoft Edge allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to improper protection of physical external channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created...

The vulnerability of the WebApp component of Google Chrome and Microsoft Edge allows attackers to replace the user interface.

The vulnerability of the WebApp component of Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...

The vulnerability of the Payments component in Google Chrome and Microsoft Edge browsers allows a hacker to manipulate the URL address bar by using a specially created HTML page.

The vulnerability of the Payments component in Google Chrome and Microsoft Edge is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to forge the URL input by using a specially created HTML page...

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge allows a hacker to replace the user interface.

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to replace the user interface using a specially created Chrome extension...

The vulnerability of the SiteIsolation component in Google Chrome and Microsoft Edge allows a hacker to bypass security restrictions.

The vulnerability of the SiteIsolation component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions through a specially created HTML page...

The vulnerability of the Preload function in Google Chrome and Microsoft Edge browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Preload function in Google Chrome and Microsoft Edge is related to a violation of data protection mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created HTML pag...

The vulnerability of the Cast component in Google Chrome and Microsoft Edge browsers allows attackers to gain unauthorized access to protected information.

The vulnerability of the Cast component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the API Endpoint component of the LibreChat artificial intelligence-based platform, which allows a hacker to compromise the integrity of the protected information.

The vulnerability of the API Endpoint component of the LibreChat artificial intelligence-based platform is related to a violation of expected behavior. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected information...

The vulnerability of the One-Time Password Handler component in the mobile application for managing internet services, the my Excitel App, allows a violator to disclose protected information.

The vulnerability of the One-Time Password Handler component in the mobile application for managing internet services, the my Excitel App, is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclo...

The vulnerability of Qualcomm’s integrated circuit-based microprogramming software, related to the use of dangerous methods or functions, allows attackers to enhance their privileges.

The vulnerability of Qualcomm’s integrated circuit-based microprogramming software relates to the use of dangerous methods or functions. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the ConfigurationHandler component in the Flask-AppBuilder web development framework allows a attacker to redirect users to arbitrary URL addresses.

The vulnerability of the Flask-AppBuilder web development framework lies in the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to remotely redirect users to arbitrary URL addresses by manipulating the Host header in HTTP requests...

The vulnerability of the Go programming language, related to the lack of measures to neutralize special elements, allows attackers to perform cross-site scripting attacks.

The vulnerability of the Go programming language is related to the lack of measures taken to neutralize special elements when processing the content attribute of the tag. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

The vulnerabilities of the functions ParseAddress(), ParseAddressList(), and ParseDate() in the Go programming language allow a hacker to cause a service failure.

The vulnerability of the ParseAddress, ParseAddressList, and ParseDate functions in the Go programming language is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the `net.Dial()` and `net.LookupPort()` functions in the Go programming language for Windows operating systems allows a hacker to cause a service failure.

The vulnerability of the net.Dial and net.LookupPort functions in the Go programming language for Windows operating systems is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the Go tool pack command language allows a perpetrator to gain access to read and write arbitrary files.

The vulnerability of the Go tool pack command language is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain access to read and write arbitrary files...

The vulnerability of the golang-x-image package, a programming language, allows attackers to trigger a service failure.

The vulnerability of the golang-x-image package, a programming language, is related to unlimited resource distribution. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Navigation section in Microsoft Edge and Google Chrome browsers allows a hacker to bypass existing security mechanisms.

The vulnerability of the Navigation section in Microsoft Edge and Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security measures remotely...

The vulnerability of the ReadBlock() function in the SquashFS file processor of the 7-Zip archive creator allows a hacker to disclose protected information or cause service failures.

The vulnerability of the ReadBlock function, a handler for the SquashFS file compressor used by 7-Zip, relates to reading data outside of the permitted range in memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause service failures...

The vulnerability of the ParseLibSymbols() function in the 7-Zip archive viewer allows a hacker to disclose protected information.

The vulnerability of the ParseLibSymbols function in the 7-Zip archive viewer is related to reading data beyond the permitted range of memory. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the ML lifecycle management platform, related to the shortcomings in the authentication process, allows a perpetrator to execute arbitrary code.

The vulnerability of the ML model lifecycle management platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Audio component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Audio component in Google Chrome and Microsoft Edge relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted HTML page...

The vulnerability of the TabGroups component in Google Chrome and Microsoft Edge allows a hacker to replace the user interface.

The vulnerability of the TabGroups component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to replace the user’s interface...