2662 matches found
PT-2023-4030 · Splunk · Splunk Soar
Name of the Vulnerable Software and Affected Versions: Splunk SOAR versions prior to 6.1.0 Description: The issue is related to the incorrect handling of log output, which can be exploited by sending a maliciously crafted web request containing special ANSI characters to cause log file poisoning...
CVE-2023-35016: Improper Limitation of a Pathname to a Restricted Directory
IBM Security Verify Governance, Identity Manager 10.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 257772...
Improper Validation
agpt is vulnerable to Improper Validation. The vulnerability exists due to a lack of validated ANSI escape sequences in logs.py, which allow an attacker to publish false messages to the terminal by tricking the LLM into reciting JSON-encoded ANSI escape sequences...
Amazon Linux 2 : grub2 (ALAS-2023-2146)
The version of grub2 installed on the remote host is prior to 2.06-14. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2146 advisory. A flaw was found in grub 2, where a crafted 16-bit grayscale PNG image may lead to an out-of-bounds write. This flaw allows ...
CVE-2023-37275
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. The Auto-GPT command line UI makes heavy use of color-coded print statements to signify different types of system messages to the user, including messages that are crucial for the user to...
Command injection
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. The Auto-GPT command line UI makes heavy use of color-coded print statements to signify different types of system messages to the user, including messages that are crucial for the user to...
CVE-2023-37275 System logs spoofable in Auto-GPT via ANSI control sequences
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. The Auto-GPT command line UI makes heavy use of color-coded print statements to signify different types of system messages to the user, including messages that are crucial for the user to...
CVE-2023-37275
CVE-2023-37275 affects Auto-GPT prior to v0.4.3, where a malicious external resource could cause the LLM to regurgitate JSON-encoded ANSI escape sequences, which are decoded and printed to the console as part of the model’s thinking process, spoofing system logs. The vulnerability is fixed in rel...
CVE-2023-37275 System logs spoofable in Auto-GPT via ANSI control sequences
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. The Auto-GPT command line UI makes heavy use of color-coded print statements to signify different types of system messages to the user, including messages that are crucial for the user to...
CVE-2023-37275 System logs spoofable in Auto-GPT via ANSI control sequences
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. The Auto-GPT command line UI makes heavy use of color-coded print statements to signify different types of system messages to the user, including messages that are crucial for the user to...
CVE-2023-37275: Improper Output Neutralization for Logs
Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. The Auto-GPT command line UI makes heavy use of color-coded print statements to signify different types of system messages to the user, including messages that are crucial for the user to...
Auto-GPT 安全漏洞
Auto-GPT is an artificial intelligence software agent program open-sourced by Significant Gravitas. A security vulnerability exists in versions prior to Auto-GPT 0.4.3, which stems from the possibility that a malicious external resource could cause a misleading message to be printed to the consol...
EulerOS 2.0 SP11 : less (EulerOS-SA-2023-2297)
According to the versions of the less package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In GNU Less before 609, crafted data can result in 'less -R' not filtering ANSI escape sequences sent to the terminal. CVE-2022-46663 Note that...
EulerOS 2.0 SP11 : less (EulerOS-SA-2023-2273)
According to the versions of the less package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In GNU Less before 609, crafted data can result in 'less -R' not filtering ANSI escape sequences sent to the terminal. CVE-2022-46663 Note that...
Huawei EulerOS: Security Advisory for less (EulerOS-SA-2023-2297)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 37 : kubernetes (2023-a1d7a29fe5)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-a1d7a29fe5 advisory. Patch update to Kubernetes 1.25 for Fedora 37. Primarily a security fix for CVE-2023-2431: Bypass of seccomp profile enforcement. Tenable has...
nodejs 安全漏洞
Node.js is an open source, cross-platform JavaScript runtime environment. A security vulnerability exists in nodejs that stems from not strictly using CRLF sequences to delimit HTTP requests, which could lead to HTTP request smuggling HRS...
PT-2023-9025
Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions through 2.4.58 Description The issue is related to faulty input validation in the core of Apache, allowing malicious or exploitable backend/content generators to split HTTP responses. This can be exploited by a remo...
