Archive
9 October 2023
Vulnerabilities first published on this day (UTC), newest first.
85 results · Feed
-
Critical 9.8
langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method
langchain_experimental (aka LangChain Experimental) in LangChain before 0.0.306 allows an attacker to bypass the CVE-2023-36258 fix and execute arbitrary code via __import__ in Python code, which is not prohibited by pal_chain/base.py.
-
Unscored —
Cross Site Scripting (XSS) vulnerability in mooSocial v.3.1.8 allows a remote attacker to execute arbitrary code via a …
-
Unscored —
hansun CMS v1.0 was discovered to contain a SQL injection vulnerability via the component /ajax/ajax_login.ashx.
-
Unscored —
Incorrect access control in 70mai a500s v1.2.119 allows attackers to directly access and delete the video files of the …
-
High 7.3
Nokelock Smart padlock O1 Version 5.3.0 is vulnerable to Insecure Permissions. By sending a request, you can add any de…