CVE· 2 min read
CVE-2025-51464: Stored XSS in AIM Reports
Stored cross-site scripting vulnerability in AIM Reports allowing malicious Python code to execute arbitrary JavaScript in users’ browsers.
Artemiy Malyshau
Resources
Research, guides and the root causes underneath
Vulnerability research, CVE write-ups and practical guides from the team building Gecko. Written for the engineers who have to fix the thing, not just triage it.
Latest articles
CVE· 1 min readCVE-2025-51480: ONNX Arbitrary File Overwrite in save_external_data
Arbitrary file overwrite vulnerability in ONNX library’s save_external_data function through path traversal attacks.
Artemiy Malyshau
CVE· 2 min readCVE-2025-51458: DB-GPT SQLI via CVE Bypass (CVE-2024-10835 & CVE-2024-10901)
SQL injection vulnerability in DB-GPT 0.7.0 despite fixes for prior CVEs, affecting multiple database endpoints.
Artemiy Malyshau
Showing 40 - 42 of 47 articles
Stay connected with Gecko Security
Occasional updates and insights. No spam; unsubscribe anytime.