70 matches found
CVE-2024-5184
CVE-2024-5184 affects the EmailGPT service. The vulnerability is a prompt injection flaw in the service’s API, enabling a malicious user to inject prompts and take over service logic. Exploitation can force leakage of hard-coded system prompts and/or execution of unwanted prompts, with attacks po...
CVE-2024-5184 Prompt Injection in EmailGPT
The EmailGPT service contains a prompt injection vulnerability. The service uses an API service that allows a malicious user to inject a direct prompt and take over the service logic. Attackers can exploit the issue by forcing the AI service to leak the standard hard-coded system prompts and/or...
CVE-2024-5184 Prompt Injection in EmailGPT
The EmailGPT service contains a prompt injection vulnerability. The service uses an API service that allows a malicious user to inject a direct prompt and take over the service logic. Attackers can exploit the issue by forcing the AI service to leak the standard hard-coded system prompts and/or...
Shein's Android App Caught Transmitting Clipboard Data to Remote Servers
An older version of Shein's Android application suffered from a bug that periodically captured and transmitted clipboard contents to a remote server. The Microsoft 365 Defender Research Team said it discovered the problem in version 7.9.2 of the app that was released on December 16, 2021. The iss...
CVE-2015-10059 s134328 Webapplication-Veganguide apiService.js cross site scripting
A vulnerability has been found in s134328 Webapplication-Veganguide and classified as problematic. This vulnerability affects unknown code of the file p05-integration/app/shared/api/apiService.js. The manipulation of the argument country/city leads to cross site scripting. The attack can be...
PT-2023-10238 · Unknown · S134328 Webapplication-Veganguide
Name of the Vulnerable Software and Affected Versions: s134328 Webapplication-Veganguide affected versions not specified Description: A vulnerability has been found in the s134328 Webapplication-Veganguide, classified as problematic. It affects unknown code of the file...
container-tools:rhel8 bug fix and enhancement update
An update is available for fuse-overlayfs, container-selinux, udica, containers-common, runc, toolbox, podman, conmon, skopeo, crun, libslirp, oci-seccomp-bpf-hook, python-podman, slirp4netns, containernetworking-plugins, buildah, criu, cockpit-podman. This update affects Rocky Linux 8. A Common...
CVE-2021-36310
Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service. A high-privileged API user may potentially exploit this vulnerability, leading to a denial of service...
Denial of service
Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service. A high-privileged API user may potentially exploit this vulnerability, leading to a denial of service...
CVE-2021-36310
Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service. A high-privileged API user may potentially exploit this vulnerability, leading to a denial of service...
CVE-2021-36310
Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service. A high-privileged API user may potentially exploit this vulnerability, leading to a denial of service...
VMware vCenter Server 资源管理错误漏洞
Vmware VMware vCenter Server is a suite of server and virtualization management software from Vmware, Inc. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructures. vmware vCenter Server suffers fr...
Exploit for Path Traversal in Wazuh
CVE-2021-26814 A simple python PoC to exploit CVE-2021-2681...
CVE-2021-3146
The Dolby Audio X2 DAX2 API service before 0.8.8.90 on Windows allows local users to gain privileges...
CVE-2021-3146
The Dolby Audio X2 DAX2 API service before 0.8.8.90 on Windows allows local users to gain privileges...
CVE-2021-3146
The Dolby Audio X2 DAX2 API service before 0.8.8.90 on Windows allows local users to gain privileges...
CVE-2021-3146
The CVE-2021-3146 issue affects Dolby Audio X2 (DAX2) API service on Windows, where versions prior to 0.8.8.90 allow local users to gain privileges due to a code issue in the API service. Affected component: Dolby DAX2 API service; root cause described as a code issue in DAX2 prior to 0.8.8.90. I...
CVE-2021-3146
The Dolby Audio X2 DAX2 API service before 0.8.8.90 on Windows allows local users to gain privileges...
Authentication flaw
On Juniper Networks SRX Series and NFX Series, a local authenticated user with access to the shell may obtain the Web API service private key that is used to provide encrypted communication between the Juniper device and the authenticator services. Exploitation of this vulnerability may allow an...