Vulnerabilities

WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies NAT64-prefixed IPv6 addresses as public.

A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0.

A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6.

A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6.

A security vulnerability has been detected in Tencent WeKnora up to 0.8.1.

A vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2.

Tencent BrowserSkill through 0.3.0 contains an authentication bypass vulnerability in the local daemon WebSocket origin validation that accepts any chrome-extension origin with 32 characters in range a-p.

Tencent Mass Service Engine in Cluster (MSEC) allows a remote, unauthenticated attacker to send a crafted POST request including ../ and gain root access on the target device.

WeKnora before 0.7.0 fails to re-validate HTTP redirect targets in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint when downloading documents from user-supplied URLs.

Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding __pycache__ directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces.

A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator.

ncnn is a high-performance neural network inference framework optimized for the mobile platform.

A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301.

A vulnerability has been found in Tencent WeKnora up to 0.3.6.

A vulnerability was found in Tencent AI-Infra-Guard 4.0.

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.

A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables a local user to execute programs with elevated privileges.

A privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a local user to execute programs with elevated privileges.