https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 12:49:32 +0000 https://cve.radiocsirt.org/vuln/cve-2024-11031 <p><strong>Affected:</strong> binary-husky/gpt_academic</p> <p>In version 3.83 of binary-husky/gpt_academic, a Server-Side Request Forgery (SSRF) vulnerability exists in the Markdown_Translate.get_files_from_everything() API. This vulnerability is exploited through the HotReload(Markdown翻译中) plugin function, which allows downloading arbitrary web hosts by only checking if the link starts with &#39;http&#39;. Attackers can exploit this vulnerability to abuse the victim GPT Academic&#39;s Gradio Web server&#39;s credentials to access unauthorized web resources.</p> <p><strong>Affected:</strong> binary-husky/gpt_academic</p> <p>In version 3.83 of binary-husky/gpt_academic, a Server-Side Request Forgery (SSRF) vulnerability exists in the Markdown_Translate.get_files_from_everything() API. This vulnerability is exploited through the HotReload(Markdown翻译中) plugin function, which allows downloading arbitrary web hosts by only checking if the link starts with &#39;http&#39;. Attackers can exploit this vulnerability to abuse the victim GPT Academic&#39;s Gradio Web server&#39;s credentials to access unauthorized web resources.</p> https://cve.radiocsirt.org/vuln/cve-2024-11031