Skip to content
OpenAdvisories

Archive

9 October 2023

Vulnerabilities first published on this day (UTC), newest first.

85 results · Feed

  • Critical 9.8

    langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method

    langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via __import__ in Python code, which is not prohibited by pal_chain/base.py.

  • Unscored —
    CVE-2023-44812 Public exploit Scanner template

    Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a …

  • Unscored —

    hansun CMS v1.0 was discovered to contain a SQL injection vulnerability via the component /ajax/ajax_login.ashx.

  • Unscored —

    Incorrect access control in 70mai a500s v1.2.119 allows attackers to directly access and delete the video files of the …

  • High 7.3

    Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any de…