Skip to content
OpenAdvisories

Vendor

f

7 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.3

    prompts.chat Blind SSRF via media-generate

    prompts.chat prior to commit 1464475 contains a blind server-side request forgery vulnerability in the Wiro media generator that allows authenticated users to perform server-side fetches of user-controlled inputImageUrl parameters. Attackers can exploit this …

  • Medium 6.5

    Textream Vulnerable to Uncontrolled Resource Consumption (Denial of Service)

    Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server imposes no limit on concurrent connections. Combined with a broadcast timer that sends state to all connected clients every 100 ms, an attacker can exhaus…