EILMELDUNGEN LIVE
🔧 AI Nachrichten OpenAI Purchases Tens of Thousands of Mac minis, Mac Studios(31.08.2026 um 21:29 Uhr)
•
🔧 AI Nachrichten OpenAI’s SB Energy Warrants Are Valued at $5.5 Billion(01.09.2026 um 16:29 Uhr)
•
🔧 AI Nachrichten Apple-OpenAI Fight Escalates With New MacBook Evidence(01.09.2026 um 19:59 Uhr)
•
🔧 AI Nachrichten When AI agents go rogue, the law doesn’t disappear(02.09.2026 um 13:03 Uhr)
•
🪟 Windows TippsDell's new 14-inch laptop clearly takes aim at the MacBook Neo — but I'm worried about the price(02.09.2026 um 13:50 Uhr)
•
🔧 AI Nachrichten Chinese AI models threaten US industry by being up to 90% cheaper — and they're driving Google, OpenAI, and Anthropic out of the open market(02.09.2026 um 15:10 Uhr)
•
🔧 AI Nachrichten ‘Horrifying’ — Reddit users are creating uncanny valley photos with ChatGPT, so I asked it to make something creepy and now I deeply regret it(02.09.2026 um 16:09 Uhr)
•
⚠️ Malware / Trojaner / VirenA botnet running for 23 years with over 15,000 endpoints has finally been shut down by law enforcement and Crowdstrike(02.09.2026 um 16:25 Uhr)
•
⚠️ Malware / Trojaner / VirenA malware installer posing as a legitimate download service is infecting brands across almost every industry — Microsoft Edge, Razer, Kaspersky and more actively imitated(02.09.2026 um 18:50 Uhr)
•
🕵️ SicherheitslückenAI is getting closer to being able to exploit OT, and that's very bad news for critical infrastructure(02.09.2026 um 22:05 Uhr)
•
🔧 AI Nachrichten OpenAI Purchases Tens of Thousands of Mac minis, Mac Studios(31.08.2026 um 21:29 Uhr)
•
🔧 AI Nachrichten OpenAI’s SB Energy Warrants Are Valued at $5.5 Billion(01.09.2026 um 16:29 Uhr)
•
🔧 AI Nachrichten Apple-OpenAI Fight Escalates With New MacBook Evidence(01.09.2026 um 19:59 Uhr)
•
🔧 AI Nachrichten When AI agents go rogue, the law doesn’t disappear(02.09.2026 um 13:03 Uhr)
•
🪟 Windows TippsDell's new 14-inch laptop clearly takes aim at the MacBook Neo — but I'm worried about the price(02.09.2026 um 13:50 Uhr)
•
🔧 AI Nachrichten Chinese AI models threaten US industry by being up to 90% cheaper — and they're driving Google, OpenAI, and Anthropic out of the open market(02.09.2026 um 15:10 Uhr)
•
🔧 AI Nachrichten ‘Horrifying’ — Reddit users are creating uncanny valley photos with ChatGPT, so I asked it to make something creepy and now I deeply regret it(02.09.2026 um 16:09 Uhr)
•
⚠️ Malware / Trojaner / VirenA botnet running for 23 years with over 15,000 endpoints has finally been shut down by law enforcement and Crowdstrike(02.09.2026 um 16:25 Uhr)
•
⚠️ Malware / Trojaner / VirenA malware installer posing as a legitimate download service is infecting brands across almost every industry — Microsoft Edge, Razer, Kaspersky and more actively imitated(02.09.2026 um 18:50 Uhr)
•
🕵️ SicherheitslückenAI is getting closer to being able to exploit OT, and that's very bad news for critical infrastructure(02.09.2026 um 22:05 Uhr)
•

4 🕛 kürzlich 1 Min Lesezeit CVE-RADAR
0

KL-001-2024-006: Open WebUI Arbitrary File Upload + Path Traversal

↗ Quelle (seclists.org)
🗣️ Stimme:

Posted by KoreLogic Disclosures via Fulldisclosure on Aug 07

KL-001-2024-006: Open WebUI Arbitrary File Upload + Path Traversal



Title: Open WebUI Arbitrary File Upload + Path Traversal

Advisory ID: KL-001-2024-006

Publication Date: 2024.08.D06

Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2024-006.txt



1. Vulnerability Details



     Affected Vendor: Open WebUI

     Affected Product: Open WebUI

     Affected Version: 0.1.105

     Platform: Debian 12

     CWE...
Vollständiger Original-Bericht
Ausführliche Details, Code-Beispiele & Hersteller-Stellungnahme auf seclists.org.
↗ Original-Artikel auf seclists.org lesen
Wie bewertest du diesen Beitrag?
1 Klick Feedback
Teilen mit Netzwerk & Team:

Community-Analysen & Experten-Meinungen 0

Verfasse deine eigene Analyse, teile Workarounds oder diskutiere diesen Vorfall im Blog.
Noch keine Community-Analyse verfasst. Markiere einen Textabschnitt oder klicke oben auf „ Eigene Analyse verfassen“!
Community Pulse: Relevanz-Einschätzung
1 Klick Experten-Votum
🔴 Akute Relevanz 43%
🟡 In Evaluierung 27%
🟢 Keine Auswirkung 15%
Spannende Innovation 15%
Verwandte Story-Cluster & Quellen (Vektor-KI)
Port 8095 Engine
1 Quelle
Researcher Claims CrowdStrike Falcon 0-Day Privilege Escalation Vulnerability
1 Quelle
Post-DEF CON phishing campaign delivered AMOS and NetSupport malware
1 Quelle
OpenAI Astra Brings Autonomous Zero-Day Exploitation to AI
Tipp: Mit Pfeiltasten [ ← ] und [ → ] blättern
Vollbild-Vorschau
Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten KL-001-2024-006: Open WebUI Arbitrary File Upload + Path Traversal

Thematisch verwandte Begriffe: KL0012024006, Open, WebUI, Arbitrary · 6 Treffer

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Powered by tsecurity.de tsecurity.de Hub
🚀 Auf tsecurity.de entdecken