11 matches found
CVE-2025-51864
CVE-2025-51864 漏洞描述 AIBOX 是一个用于探索 AI 咨询和试用多种 LLM 的 Web 应用程序。它允许用户与各种 LLM 聊天。聊天组件中存在一个反射型跨站脚本（XSS）漏洞，该漏洞可能导致 JWT 令牌被窃取和远程账户劫持。 攻击向量 AIBOX 是一个用于探索 AI 咨询和试用多种 LLM 的 Web 应用程序。它允许用户与各种 LLM 聊天。聊天组件中存在一个反射型跨站脚本（XSS）漏洞，该漏洞可能导致 JWT 令牌被窃取和远程账户劫持。受害者可能因将恶意文本复制并粘贴到聊天组件中而受到攻击。AIBOX 的后端可能会使用简单规则来过滤 XSS...
EUVD-2025-22316
Malicious code in bioql PyPI...
CVE-2025-51864
A reflected cross-site scripting XSS vulnerability exists in AIBOX LLM chat chat.aibox365.cn through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens...
CVE-2025-51864
A reflected cross-site scripting XSS vulnerability exists in AIBOX LLM chat chat.aibox365.cn through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens...
CVE-2025-51864
A reflected cross-site scripting XSS vulnerability exists in AIBOX LLM chat chat.aibox365.cn through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens...
CVE-2025-51864
A reflected cross-site scripting (XSS) vulnerability exists in the AIBOX LLM chat component (chat.aibox365.cn) for versions through 2025-05-27 . The flaw allows attackers to bypass fragile backend filters—potentially by using specific malicious prompts or inserting characters before and after pay...
CVE-2025-51864
A reflected cross-site scripting XSS vulnerability exists in AIBOX LLM chat chat.aibox365.cn through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens...
PT-2025-30422 · Aibox Llm · Aibox Llm
Name of the Vulnerable Software and Affected Versions: AIBOX LLM chat versions through 2025-05-27 Description: A reflected cross-site scripting XSS issue exists, potentially allowing attackers to hijack accounts through stolen JWT tokens. Recommendations: At the moment, there is no information...
CVE-2025-51864: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability exists in AIBOX LLM chat chat.aibox365.cn through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens...
AIBOX 跨站脚本漏洞
AIBOX is an AI authoring platform from the Chinese company AIBOX. A security vulnerability exists in AIBOX versions 2025-05-27 and earlier, which stems from a reflective cross-site scripting attack that could lead to account hijacking...
