123 matches found
SUSE SLES15 / openSUSE 15 Security Update : Multi-Linux Manager Client Tools (SUSE-SU-2025:01989-1)
The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01989-1 advisory. golang-github-prometheus-prometheus was updated to version 2.53.4: - Security issues fixed: CVE-2023-45288: Require Go = 1.23 fo...
prometheus-blackbox_exporter-0.24.0-3.1 on GA media (moderate)
prometheus-blackboxexporter-0.24.0-3.1 on GA media Announcement ID: openSUSE-SU-2025:15162-1 Rating: moderate Cross-References: CVE-2023-45288 CVE-2025-22870 CVSS scores: CVE-2023-45288 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2023-45288 SUSE : 6.9...
OPENSUSE-SU-2025:15162-1 prometheus-blackbox_exporter-0.24.0-3.1 on GA media
These are all security issues fixed in the prometheus-blackboxexporter-0.24.0-3.1 package on the GA media of openSUSE Tumbleweed...
CVE-2024-48139
A prompt injection vulnerability in the chatbox of Blackbox AI v1.3.95 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message...
CVE-2020-16248
Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both intended functionality and also a vulnerability...
Provable Secure Steganography Based on Adaptive Dynamic Sampling
The security of private communication is increasingly at risk due to widespread surveillance. Steganography, a technique for embedding secret messages within innocuous carriers, enables covert communication over monitored channels. Provably Secure Steganography PSS is state of the art for making...
log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered.
...
CVE-2024-48139
A prompt injection vulnerability in the chatbox of Blackbox AI v1.3.95 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message...
CVE-2024-48139
A prompt injection vulnerability in the chatbox of Blackbox AI v1.3.95 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message...
CVE-2024-48139
CVE-2024-48139 describes a prompt-injection vulnerability in the chatbox of Blackbox AI v1.3.95 . The issue allows an attacker to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant through a crafted message. Documents do not provide concrete remediat...
PT-2024-32998
Name of the Vulnerable Software and Affected Versions Blackbox AI version 1.3.95 Description A prompt injection issue in the chatbox allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message. Recommendations For...
CVE-2024-48139
A prompt injection vulnerability in the chatbox of Blackbox AI v1.3.95 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message...
Blackbox AI 安全漏洞
Blackbox AI is an AI coding assistant from Blackbox AI, Inc. that helps developers by providing real-time code completion, documentation, and debugging advice. A security vulnerability exists in Blackbox AI version v1.3.95, which stems from a prompt injection in a chat box that allows an attacker...
OPENSUSE-SU-2024:12904-1 prometheus-blackbox_exporter-0.19.0-13.1 on GA media
These are all security issues fixed in the prometheus-blackboxexporter-0.19.0-13.1 package on the GA media of openSUSE Tumbleweed...
gps-blackbox.de Improper Access Control vulnerability OBB-3818761
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: falcoctl-fips, scorecard, timestamp-authority-fips, prometheus-adapter-fips, terraform-provider-sendgrid, kube-oidc-proxy, aws-efs-csi-driver-fips, src, kiam, kubernetes-csi-livenessprobe-fips, dynamic-localpv-provisioner-fips, kubevela, plutono-fips,...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: src, slsa-verifier, dgraph, k3d, kubeflow, terraform-provider-sendgrid, up, buildkitd, aactl, kubescape, kubevela, spark-operator, scorecard, cortex...
CVE-2023-39325 vulnerabilities
Vulnerabilities for packages: flux, ollama, terraform, mc, prometheus-mongodb-exporter, prometheus-postgres-exporter, k8sgpt-operator, oauth2-proxy, flux-source-controller, k3s, trillian, kubernetes-csi-livenessprobe-fips, atlantis, thanos-operator, wavefront-collector-for-kubernetes, hey,...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: kpt, flux-helm-controller, prometheus-adapter, skaffold, flux-source-controller, terraform, grpcurl, sigstore-scaffolding, weaviate, mc, flux-notification-controller, frp, conftest, git-lfs, terraform-provider-aws, newrelic-infrastructure-agent, bom, nats,...
