CVE-2021-44162: Improper Limitation of a Pathname to a Restricted Directory

Chain Sea ai chatbot system’s specific file download function has path traversal vulnerability. The function has improper filtering of special characters in URL parameters, which allows a remote attacker to download arbitrary system files without authentication...

CVE-2021-44164: Unrestricted Upload of File with Dangerous Type

Chain Sea ai chatbot system’s file upload function has insufficient filtering for special characters in URLs, which allows a remote attacker to by-pass file type validation, upload malicious script and execute arbitrary code without authentication, in order to take control of the system or...

CVE-2021-44163: Improper Neutralization of Input During Web Page Generation

Chain Sea ai chatbot backend has improper filtering of special characters in URL parameters, which allows a remote attacker to perform JavaScript injection for XSS reflected Cross-site scripting attack without authentication...

Microsoft says It's Deeply Sorry for Racist and Offensive Tweets by Tay AI Chatbot

After Microsoft's Twitter-based Artificial Intelligence AI chatbot 'Tay' badly defeated earlier this week, Microsoft has expressed apology and explained what went wrong. For those unaware, Tay is Millennial-inspired artificial intelligence chatbot unveiled by Microsoft on Wednesday that's suppose...