CVE-2024-34670

CVE-2024-34670 affects Samsung Sound Assistant prior to version 6.1.0.9, where an issue with implicit intents for sensitive communication could let a local attacker obtain sensitive information. The exposed component/interaction is the misuse of implicit intents within Sound Assistant, and the ri...

CVE-2024-34670

Use of implicit intent for sensitive communication in Sound Assistant prior to version 6.1.0.9 allows local attackers to get sensitive information...

CVE-2024-34670

Use of implicit intent for sensitive communication in Sound Assistant prior to version 6.1.0.9 allows local attackers to get sensitive information...

CVE-2024-34670: Undefined Security Weakness

Use of implicit intent for sensitive communication in Sound Assistant prior to version 6.1.0.9 allows local attackers to get sensitive information...

SAMSUNG Sound Assistant 安全漏洞

SAMSUNG Sound Assistant is an audio assistant application from Samsung South Korea. A security vulnerability exists in SAMSUNG Sound Assistant versions prior to 6.1.0.9. An attacker can exploit the vulnerability to obtain sensitive information...

PT-2024-26091

Name of the Vulnerable Software and Affected Versions Sound Assistant versions prior to 6.1.0.9 Description The issue concerns the use of implicit intent for sensitive communication in Sound Assistant, allowing local attackers to obtain sensitive information. Recommendations For versions prior to...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to denial of service vulnerability in Multiple vendors [ CVE-2023-44487]

Summary Potential denial of service vulnerability in Multiple vendors CVE-2023-44487 have been identified that could affect IBM Watson Assistant for IBM Cloud Pak for Data. The vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-444...

Malicious code in @gintel/personal-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ceacaddd98b873d32e3e6aa49bd9d48f964eca12ffe724a93abeee1ca81004db The OpenSSF Package Analysis project identified '@gintel/personal-assistant' @ 0.180.0 npm as malicious. It is considered malicious because: - T...

MAL-2024-9035 Malicious code in @gintel/personal-assistant (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ceacaddd98b873d32e3e6aa49bd9d48f964eca12ffe724a93abeee1ca81004db The OpenSSF Package Analysis project identified '@gintel/personal-assistant' @ 0.180.0 npm as malicious. It is considered malicious because: - T...

WordPress plugin AI Assistant with ChatGPT by AYS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Monica AI Assistant 安全漏洞

Monica AI Assistant is an AI assistant from Monica. A security vulnerability exists in Monica AI Assistant version 2.3.0, which stems from the presence of an information disclosure vulnerability that allows an unauthorized attacker to access sensitive information...

CVE-2024-45989

Monica AI Assistant desktop application v2.3.0 is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor. A prompt injection allows an attacker to modify chatbot answer with an unloaded image that exfiltrates the user's sensitive chat data of the current session to a malicious...

AI Meets Spring Petclinic: Implementing an AI Assistant with Spring AI (Part I)

Introduction In this two-parts blog post, I will discuss the modifications I made to Spring Petclinic to incorporate an AI assistant that allows users to interact with the application using natural language. Introduction to Spring Petclinic Spring Petclinic serves as the primary reference...

CVE-2024-45989: Improper Neutralization of Special Elements used in a Command

Monica AI Assistant desktop application v2.3.0 is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor. A prompt injection allows an attacker to modify chatbot answer with an unloaded image that exfiltrates the user's sensitive chat data of the current session to a malicious...

CVE-2024-47210

Gladys Assistant before 4.45.1 allows Privilege Escalation a user changing their own role because req.body.role can be used in updateMySelf in server/api/controllers/user.controller.js...

Gladys Assistant 安全漏洞

Gladys Assistant is a source home assistant software from Gladys Assistant open source. A security vulnerability exists in Gladys Assistant versions prior to 4.45.1 that stems from allowing elevation of privilege...

CVE-2024-47210: Uncontrolled Resource Consumption

Gladys Assistant before 4.45.1 allows Privilege Escalation a user changing their own role because req.body.role can be used in updateMySelf in server/api/controllers/user.controller.js...

CVE-2024-47210

Gladys Assistant before 4.45.1 allows Privilege Escalation a user changing their own role because req.body.role can be used in updateMySelf in server/api/controllers/user.controller.js...

CVE-2024-47210

Gladys Assistant before 4.45.1 allows Privilege Escalation a user changing their own role because req.body.role can be used in updateMySelf in server/api/controllers/user.controller.js...

CVE-2024-47210

Gladys Assistant versions prior to 4.45.1 are vulnerable to Privilege Escalation due to an improper input validation flaw. Specifically, the updateMySelf function in server/api/controllers/user.controller.js allows a user to change their own role because req.body.role can be processed by the appl...