Lucene search
+L

9987 matches found

Openbugbounty
Openbugbounty
•added 2023/07/17 3:32 p.m.•16 views

ai-amido.net Cross Site Scripting vulnerability OBB-3525092

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
HackRead
HackRead
•added 2023/07/17 12:48 p.m.•15 views

How AI is Tightening Cybersecurity for Businesses

By Owais Sultan Discover how AI enhances cybersecurity, with a focus on SAP security. Learn about AIs impact on threat detection,… This is a post from HackRead.com Read the original post: How AI is Tightening Cybersecurity for Businesses...

7AI score
SaveExploits0
Schneier on Security
Schneier on Security
•added 2023/07/17 11:13 a.m.•14 views

Tracking Down a Suspect through Cell Phone Records

Interesting forensics in connection with a serial killer arrest: Investigators went through phone records collected from both midtown Manhattan and the Massapequa Park area of Long Island--two areas connected to a "burner phone" they had tied to the killings. In court, prosecutors later said the...

6.6AI score
SaveExploits0
OSV
OSV
•added 2023/07/16 11:15 a.m.•12 views

CVE-2023-3685

A vulnerability was found in Nesote Inout Search Engine AI Edition 1.1. It has been classified as problematic. This affects an unknown part of the file /index.php. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The associated...

5.4CVSS3.8AI score0.00356EPSS
SaveExploits0References2
Prion
Prion
•added 2023/07/16 11:15 a.m.•24 views

Cross site scripting

A vulnerability was found in Nesote Inout Search Engine AI Edition 1.1. It has been classified as problematic. This affects an unknown part of the file /index.php. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. The associated...

4CVSS5.3AI score0.00356EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2023/07/16 11:00 a.m.•77 views

CVE-2023-3685

CVE-2023-3685 affects Nesote Inout Search Engine AI Edition 1.1. The vulnerability is an XSS in an unknown part of /index.php, caused by manipulation of the page parameter, enabling a remote attack. Exploitation status is not detailed in the provided documents; several sources corroborate the iss...

5.4CVSS4.4AI score0.00356EPSS
SaveExploits0References2Affected Software1
The Hacker News
The Hacker News
•added 2023/07/15 10:30 a.m.•65 views

WormGPT: New AI Tool Allows Cybercriminals to Launch Sophisticated Cyber Attacks

With generative artificial intelligence AI becoming all the rage these days, it's perhaps not surprising that the technology has been repurposed by malicious actors to their own advantage, enabling avenues for accelerated cybercrime. According to findings from SlashNext, a new generative AI...

6.6AI score
SaveExploits0
Trend Micro Simply Security
Trend Micro Simply Security
•added 2023/07/13 12:00 a.m.•12 views

AI Coding Companions: Comparing AWS, GitHub, & Google

Top cloud vendors and software companies are rolling out AI coding companions that use generative AI to speed up and streamline DevOps. In this blog, we take a look at what some of these new tools have in common, where they differ, and what they mean for cybersecurity...

6.9AI score
SaveExploits0
Schneier on Security
Schneier on Security
•added 2023/07/12 2:50 p.m.•14 views

Google Is Using Its Vast Data Stores to Train AI

No surprise, but Google just changed its privacy policy to reflect broader uses of all the surveillance data it has captured over the years: Research and development: Google uses information to improve our services and to develop new products, features and technologies that benefit our users and...

6.8AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2023/07/12 11:04 a.m.•35 views

The Risks and Preventions of AI in Business: Safeguarding Against Potential Pitfalls

Artificial intelligence AI holds immense potential for optimizing internal processes within businesses. However, it also comes with legitimate concerns regarding unauthorized use, including data loss risks and legal consequences. In this article, we will explore the risks associated with AI...

6.4AI score
SaveExploits0
OSV
OSV
•added 2023/07/10 4:15 p.m.•14 views

CVE-2023-3175

The AI ChatBot WordPress plugin before 4.6.1 does not adequately escape some settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

4.8CVSS5.8AI score0.00614EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2023/07/10 12:40 p.m.•31 views

CVE-2023-3175 AI ChatBot < 4.6.1 - Admin+ Stored Cross-Site Scripting

The AI ChatBot WordPress plugin before 4.6.1 does not adequately escape some settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

5.1AI score0.00614EPSS
SaveExploits2References1
CVE
CVE
•added 2023/07/10 12:40 p.m.•88 views

CVE-2023-3175

The CVE-2023-3175 entry is supported by multiple connected documents describing a stored Cross-Site Scripting vulnerability in the AI ChatBot WordPress plugin prior to version 4.6.1. The issue arises because certain settings are not adequately escaped, allowing high-privilege users (e.g., admins)...

4.8CVSS4.8AI score0.00614EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/07/10 12:00 a.m.•16 views

PT-2023-23447 · WordPress · Ai Chatbot

Name of the Vulnerable Software and Affected Versions: AI ChatBot WordPress plugin versions prior to 4.6.1 Description: The issue allows high-privilege users, such as admins, to perform Cross-Site Scripting attacks. This is possible because the plugin does not adequately escape some settings, eve...

4.8CVSS4.8AI score0.00614EPSS
SaveExploits2References3
attackerkb
attackerkb
•added 2023/07/07 4:15 p.m.•8 views

CVE-2023-33664

ai-dev aicombinationsonfly before v0.3.1 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

8.8CVSS7.4AI score0.00912EPSS
SaveExploits1References3
Prion
Prion
•added 2023/07/07 4:15 p.m.•25 views

Sql injection

ai-dev aicombinationsonfly before v0.3.1 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

6.5CVSS8.9AI score0.00912EPSS
SaveExploits1References2Affected Software1
Schneier on Security
Schneier on Security
•added 2023/07/07 11:11 a.m.•22 views

The AI Dividend

For four decades, Alaskans have opened their mailboxes to find checks waiting for them, their cut of the black gold beneath their feet. This is Alaskas Permanent Fund, funded by the states oil revenues and paid to every Alaskan each year. Were now in a different sort of resource rush, with...

6.8AI score
SaveExploits0
Cvelist
Cvelist
•added 2023/07/07 12:00 a.m.•32 views

CVE-2023-33664

ai-dev aicombinationsonfly before v0.3.1 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

9.2AI score0.00912EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/07/07 12:00 a.m.•12 views

CVE-2023-33664

ai-dev aicombinationsonfly before v0.3.1 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

8.3AI score0.00912EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/07/07 12:00 a.m.•15 views

ai-dev aicombinationsonfly SQL注入漏洞

ai-dev aicombinationsonfly is an application from ai-dev. A security vulnerability exists in ai-dev aicombinationsonfly versions prior to v0.3.1, which stems from the component /includes/ajax.php containing an SQL injection vulnerability...

8.8CVSS8.1AI score0.00912EPSS
SaveExploits1References3
Rows per page
Query Builder