8871 matches found
CVE-2024-8072
Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users...
CVE-2024-8072 Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users
Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users...
CVE-2024-8072 Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users
Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users...
CVE-2024-8072
Mage AI exposes a vulnerability (CVE-2024-8072) that allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users. Public details across sources consistently describe the issue as an information disclosure involving the terminal history, with no explicit ...
Confidence in GenAI: The Zero Trust Approach
Enterprises have gone all-in on GenAI, but the more they depend on AI models, the more risks they face. Trend Vision One™ – Zero Trust Secure Access ZTSA – AI Service Access bridges the gap between access control and GenAI services to protect the user journey...
PT-2024-38786
Name of the Vulnerable Software and Affected Versions: Mage AI affected versions not specified Description: The issue allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users. Recommendations: At the moment, there is no information about a newer versi...
Securing the Power of AI, Wherever You Need It
Explore how generative AI is transforming cybersecurity and enterprise resilience...
The US Government Wants You—Yes, You—to Hunt Down Generative AI Flaws
The AI ethics nonprofit Humane Intelligence and the US National Institute of Standards and Technology are launching a series of contests to get more people probing for problems in generative AI systems...
Security Bulletin: IBM Maximo Application Suite - AI Broker component uses certifi-2023.7.22-py3-none-any.whl which is vulnerable to this CVE-2024-39689
Summary IBM Maximo Application Suite - AI Broker Component includes certifi-2023.7.22-py3-none-any.whl which is vulnerable to this CVE-2024-39689. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-39689 DESCRIPTION: Certifi...
Security Bulletin: IBM Maximo Application Suite - AI Broker component uses tomcat-embed-core-10.1.20.jar which is vulnerable to this CVE-2024-34750
Summary IBM Maximo Application Suite - AI Broker Component includestomcat-embed-core-10.1.20.jar which is vulnerable to this CVE-2024-34750. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-34750 DESCRIPTION: Apache Tomcat is...
Spring AI with NVIDIA LLM API
Spring AI now supports NVIDIA's Large Language Model API, offering integration with a wide range of models. By leveraging NVIDIA's OpenAI-compatible API, Spring AI allows developers to use NVIDIA's LLMs through the familiar Spring AI API. We'll explore how to configure and use the Spring AI OpenA...
This Week in Spring - August 20th, 2024
Hi, Spring fans! Welcome to another installment in This Week in Spring! And happy week-before-SpringOne! I'm so excited I could spit! As you might imagine, AI, cloud native architecture, and so much more are top-of-mind. I love AI, and all its many applications. In that spirit, let's get ChatGPT ...
Khoj 安全漏洞
Khoj is an open source application from Khoj AI. It can be used to create ready-to-use personal AI agents for users. A security vulnerability exists in versions prior to Khoj 1.15.0 that stems from parameters not being properly cleaned, allowing users to insert arbitrary HTML into task...
AI SPERA and Hackers Central Partner to Expand Mexico’s Security Market with ‘Criminal IP ASM’
Torrance, United States / California, 19th August 2024, CyberNewsWire...
WordPress AI Engine plugin < 2.5.1 - Admin+ RCE vulnerability
Admin+ RCE vulnerability discovered by Karolis Narvilas in WordPress Plugin AI Engine versions 2.5.1...
A week in security (August 12 – August 18)
Last week on Malwarebytes Labs: Dozens of Google products targeted by scammers via malicious search ads Microsoft patches bug that could have allowed an attacker to revert your computer back to an older, vulnerable version We’re making it easier for you to protect your identity X accused of...
CVE-2024-6451
AI Engine 2.4.3 is susceptible to remote-code-execution RCE via Log Poisoning. The AI Engine WordPress plugin before 2.5.1 fails to validate the file extension of "logspath", allowing Administrators to change log filetypes from .log to .php...
CVE-2024-6451
AI Engine 2.4.3 is susceptible to remote-code-execution RCE via Log Poisoning. The AI Engine WordPress plugin before 2.5.1 fails to validate the file extension of "logspath", allowing Administrators to change log filetypes from .log to .php...
CVE-2024-6451 AI Engine < 2.5.1 - Admin+ RCE
AI Engine 2.4.3 is susceptible to remote-code-execution RCE via Log Poisoning. The AI Engine WordPress plugin before 2.5.1 fails to validate the file extension of "logspath", allowing Administrators to change log filetypes from .log to .php...
CVE-2024-6451 AI Engine < 2.5.1 - Admin+ RCE
AI Engine 2.4.3 is susceptible to remote-code-execution RCE via Log Poisoning. The AI Engine WordPress plugin before 2.5.1 fails to validate the file extension of "logspath", allowing Administrators to change log filetypes from .log to .php...