6 HIGH · 1 INFO · THREAT ORANGE · 7 items · Generated in 348s
An unauthenticated remote information disclosure vulnerability allows an attacker to read and exfiltrate server's heap memory.
A flaw in AIDC-AI ComfyUI-Copilot up to 2.0.28 allows remote attacks with high complexity.
A vulnerability in MLflow allows remote attacks with high complexity.
A vulnerability in LLaMA-Factory allows attackers to execute arbitrary Python code, potentially leading to remote code execution.
Path traversal vulnerability allows unauthenticated attackers to escape configured root directory and access sensitive files.
Vulnerability allows authenticated users to bypass experiment-level authorization controls, exposing sensitive data and allowing unauthorized modifications.
A challenge to hack an AI assistant was run, with 6,000 attempts failing to leak secrets.