https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 01:55:09 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-199051 EUVD-2026-199051 https://cve.radiocsirt.org/vuln/euvd-2026-199051 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3102 <p>A JSON Injection vulnerability exists in the `mintplex-labs/anything-llm` application, specifically within the username parameter during the login process at the `/api/request-token` endpoint. The vulnerability arises from improper handling of values, allowing attackers to perform brute force attacks without prior knowledge of the username. Once the password is known, attackers can conduct blind attacks to ascertain the full username, significantly compromising system security.</p> <p>A JSON Injection vulnerability exists in the `mintplex-labs/anything-llm` application, specifically within the username parameter during the login process at the `/api/request-token` endpoint. The vulnerability arises from improper handling of values, allowing attackers to perform brute force attacks without prior knowledge of the username. Once the password is known, attackers can conduct blind attacks to ascertain the full username, significantly compromising system security.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-3102 https://cve.radiocsirt.org/vuln/ghsa-f97w-xx7w-xwgf <p>A JSON Injection vulnerability exists in the `mintplex-labs/anything-llm` application, specifically within the username parameter during the login process at the `/api/request-token` endpoint. The vulnerability arises from improper handling of values, allowing attackers to perform brute force attacks without prior knowledge of the username. Once the password is known, attackers can conduct blind attacks to ascertain the full username, significantly compromising system security.</p> <p>A JSON Injection vulnerability exists in the `mintplex-labs/anything-llm` application, specifically within the username parameter during the login process at the `/api/request-token` endpoint. The vulnerability arises from improper handling of values, allowing attackers to perform brute force attacks without prior knowledge of the username. Once the password is known, attackers can conduct blind attacks to ascertain the full username, significantly compromising system security.</p> https://cve.radiocsirt.org/vuln/ghsa-f97w-xx7w-xwgf https://cve.radiocsirt.org/vuln/gsd-2024-3102 gsd-2024-3102 https://cve.radiocsirt.org/vuln/gsd-2024-3102