CVE-2024-28224: Ollama DNS Rebinding Vulnerability
CVE-2024-28224 is a vulnerability in Ollama that allows DNS rebinding attacks to access the Ollama API without authentication. The issue was fixed…
Tag: DNS rebinding
NVIDIA NemoClaw Flaw Lets Malicious Webpages Poison Local AI Models via Ollama
Oasis Security has disclosed a vulnerability in NVIDIA's NemoClaw, an open-source reference stack for running AI agents, that could allow an attacker-controlled…
CISA Adds Actively Exploited Ray Flaw to KEV Catalog: Browser-Based RCE via DNS Rebinding
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Ray, an open-source Python-native distributed computing framework, to…
Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports
Two critical vulnerabilities in Paperclip, an open-source control plane for AI agents, could allow attackers to execute arbitrary commands on a server…
GHSA-x8hx-rhr2-9rf7: DNS Rebinding in Paperclip Local Mode
A high-severity flaw in Paperclip's local_trusted mode allows DNS rebinding attacks to execute commands on the developer's machine with CVSS 9.6. Fixed…