Lucene search
+L

2429 matches found

RedHat Linux
RedHat Linux
added 2025/11/11 8:21 a.m.6 views

kernel: vxlan: check vxlan_vnigroup_init() return value

In the Linux kernel, the following vulnerability has been resolved: vxlan: check vxlanvnigroupinit return value vxlaninit must check vxlanvnigroupinit success otherwise a crash happens later, spotted by syzbot. Oops: general protection fault, probably for non-canonical address 0xdffffc000000002c:...

5.5CVSS6.8AI score0.00219EPSS
SaveExploits0References5
Packet Storm News
Packet Storm News
added 2025/11/11 12:0 a.m.11 views

CAHICHA: Computer Automated Hardware Interaction Test to Tell Computer and Humans Apart

As automation bot technology and Artificial Intelligence is evolving rapidly, conventional human verification techniques like voice CAPTCHAs and knowledge-based authentication are becoming less effective. Bots and scrapers with Artificial Intelligence AI capabilities can now detect and solve visu...

6.7AI score
SaveExploits0
Akamai Blog
Akamai Blog
added 2025/11/10 1:0 p.m.7 views

Redefine Trust with Web Bot Authentication

...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/11/08 12:55 a.m.11 views

CVE-2025-63639

The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting XSS due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing th...

6.1CVSS5.9AI score0.0022EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/11/07 9:31 p.m.9 views

EUVD-2025-38296

The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting XSS due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing th...

5.4AI score0.0022EPSS
SaveExploits1References3
NVD
NVD
added 2025/11/07 8:15 p.m.7 views

CVE-2025-63639

The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting XSS due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing th...

6.1CVSS0.0022EPSS
SaveExploits1References2
OSV
OSV
added 2025/11/07 8:15 p.m.10 views

CVE-2025-63639

The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting XSS due to improper handling of user-supplied input. An attacker can inject malicious HTML or JavaScript into chat messages, which executes in the browser of any user viewing th...

6.1CVSS5.8AI score0.0022EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/11/07 6:30 p.m.6 views

Directory Traversal

Overview AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Directory Traversal via the installpluginupload handler, which parses the filename from the request body and assigns it directly to filepath without validation. An attacker can write arbitrary files t...

8.7CVSS6.5AI score0.00754EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/11/07 12:0 a.m.10 views

PT-2025-45496

Name of the Vulnerable Software and Affected Versions Sourcecodester FAQ Bot with AI Assistant version 1.0 Description The application’s chat feature is susceptible to Cross-Site Scripting XSS because of inadequate handling of user-provided input. An attacker can inject malicious HTML or JavaScri...

6.3AI score0.0022EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/11/07 12:0 a.m.10 views

SourceCodester FAQ Bot with AI Assistant 安全漏洞

SourceCodester FAQ Bot with AI Assistant is an open source question and answer bot with artificial intelligence assistant by SourceCodester. A security vulnerability exists in SourceCodester FAQ Bot with AI Assistant v1.0, which stems from improper handling of user-supplied input and could lead t...

6.1CVSS6AI score0.0022EPSS
SaveExploits1References2
CVE
CVE
added 2025/11/07 12:0 a.m.22 views

CVE-2025-63639

The CVE-2025-63639 entry describes an XSS vulnerability in Sourcecodester FAQ Bot with AI Assistant v1.0, specifically in the chat feature where user input is not properly sanitized. Affected component: chat/messages handling in the FAQ Bot. Root cause: improper handling of user-supplied input le...

6.1CVSS5.5AI score0.0022EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/06 12:0 a.m.14 views

PT-2025-45306

Insertion of Sensitive Information Into Sent Data vulnerability in Ays Pro AI ChatBot with ChatGPT and Content Generator by AYS ays-chatgpt-assistant allows Retrieve Embedded Sensitive Data.This issue affects AI ChatBot with ChatGPT and Content Generator by AYS: from n/a through = 2.6.6...

7.5CVSS5.7AI score0.01273EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.5 views

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989780)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989780 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix hang in usbkillurb by adding memory barriers The syzbot fuzzer has identified a b...

7.1CVSS5.9AI score0.00186EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2025/11/03 6:40 p.m.156 views

Keno

Keno-2.0 ---- 2025 Keno bot written for Stake original game...

7AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/11/03 6:33 p.m.170 views

Limbo

Limbo Limbo bot with Lua for How to get clearance cookie and...

7AI score
SaveExploits0
Akamai Blog
Akamai Blog
added 2025/11/03 1:0 p.m.18 views

AI Pulse: How Big Tech Impacts AI Bot Traffic

...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/31 12:13 a.m.5 views

Malicious code in speed-testing-nt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dcfc1b92868e7f4eef0f4c0e901418a557089fe5269a1e4ef07725d397cddbb3 The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

7.1AI score
SaveExploits0References2
OSV
OSV
added 2025/10/31 12:13 a.m.16 views

MAL-2025-191874 Malicious code in speed-testing-nt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dcfc1b92868e7f4eef0f4c0e901418a557089fe5269a1e4ef07725d397cddbb3 The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

7AI score
SaveExploits0References2
Snyk
Snyk
added 2025/10/31 12:3 a.m.3 views

Malicious Package

Overview telegram-bot-start is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Snyk
Snyk
added 2025/10/31 12:3 a.m.2 views

Malicious Package

Overview telegram-bot-starter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
Rows per page
Query Builder