8737 matches found
CVE-2025-54135
creationtimestamp| type| source ---|---|--- 2025-08-01 13:31:00+00:00| seen| https://thehackernews.com/2025/08/cursor-ai-code-editor-fixed-flaw.html 2025-08-01 15:45:09+00:00| published-proof-of-concept| https://t.me/thehackernews/7272 2025-08-01 18:23:18+00:00| seen|...
You Are What You Eat: Why Your AI Security Tools Are Only as Strong as the Data You Feed Them
Just as triathletes know that peak performance requires more than expensive gear, cybersecurity teams are discovering that AI success depends less on the tools they deploy and more on the data that powers them The junk food problem in cybersecurity Imagine a triathlete who spares no expense on...
CVE-2025-6398
A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash BSOD. Refer to the ' Security Update for for AI Suite 3 ' section on the ASUS Security Advisory for more...
CVE-2025-6398
CVE-2025-6398 affects ASUS AI Suite 3 via the IOMap64.sys driver, where a null pointer dereference can be triggered by specially crafted input, potentially causing a system crash (BSOD). The issue is local with high privileges required and user interaction not required; impact is primarily availa...
CVE-2025-6398
A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash BSOD. Refer to the ' Security Update for for AI Suite 3 ' section on the ASUS Security Advisory for more...
CVE-2025-6398
A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash BSOD. Refer to the ' Security Update for for AI Suite 3 ' section on the ASUS Security Advisory for more...
3 Key Areas to Focus on When You're Evaluating AI Security
...
PT-2025-31699 · Cursor · Cursor
Name of the Vulnerable Software and Affected Versions: Cursor versions prior to 1.3 Description: Cursor, a code editor built for programming with AI, allows an attacker to bypass the allow list in auto-run mode using a backtick or $cmd. This bypass enables arbitrary command execution outside of t...
PT-2025-31700
Name of the Vulnerable Software and Affected Versions Cursor versions prior to 1.3 Description Cursor is a code editor built for programming with AI. Versions prior to 1.3 allow embedding images through Mermaid, a diagram rendering tool. This can be exploited to exfiltrate sensitive information t...
ASUS AI Suite 3 安全漏洞
ASUS AI Suite 3 is a software for monitoring and tuning the performance of computers from Asus China. A security vulnerability exists in ASUS AI Suite 3 that originates from a null pointer dereference that could cause a system crash...
PT-2025-31624 · Asus · Asus Ai Suite 3
Name of the Vulnerable Software and Affected Versions: ASUS AI Suite 3 affected versions not specified Description: A null pointer dereference issue exists in the IOMap64.sys driver of ASUS AI Suite 3. This can be triggered by a specially crafted input, potentially leading to a system crash Blue...
Malicious code in ai-workbench (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6399 Malicious code in ai-workbench (npm)
--- -= Per source details. Do not edit below this line.=-...
The insider’s guide to Black Hat 2025
Cut through 100+ talks to find what matters: AI vulnerabilities, cloud attacks, and where to grab drinks...
Browser Extensions Can Exploit ChatGPT, Gemini in ‘Man in the Prompt’ Attack
Man in the Prompt attack shows how browser extensions can exploit ChatGPT, Gemini and other AI tools to steal data or inject hidden prompts...
CVE-2025-7847
CVE-2025-7847 affects the WordPress AI Engine plugin versions 2.9.3–2.9.4. The issue is due to missing file type validation in the rest_simpleFileUpload() function, allowing authenticated attackers with Subscriber-level access (and above) to upload arbitrary files when REST API is enabled, potent...
CVE-2025-7847 AI Engine 2.9.3 - 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload
The AI Engine plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the restsimpleFileUpload function in versions 2.9.3 and 2.9.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on...
CVE-2025-7847 AI Engine 2.9.3 - 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload
The AI Engine plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the restsimpleFileUpload function in versions 2.9.3 and 2.9.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on...
WordPress plugin AI Engine 代码问题漏洞
WordPress AI Engine plugin is a WordPress plugin that integrates artificial intelligence features, providing chatbots, content generation, image generation and other features, supporting docking with OpenAI and other platforms. WordPress AI Engine plugin has a code execution vulnerability that...
PT-2025-31474 · WordPress · Ai Engine Wordpress Plugin
Name of the Vulnerable Software and Affected Versions: AI Engine plugin for WordPress versions 2.9.3 and 2.9.4 Description: The AI Engine plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the rest simpleFileUpload function. This allows authenticat...