CVE-2025-51869

CVE-2025-51869 Descripción de la vulnerabilidad Liner es un motor de búsqueda confiable basado en IA con más de 10 millones de usuarios en todo el mundo. Liner construye un motor de búsqueda basado en LLM, que es vulnerable a una Referencia Directa Insegura a Objetos IDOR en su componente de chat...

CVE-2025-51864

CVE-2025-51864 Vulnerability description AIBOX is a web application for exploring AI consulting and trying out multiple LLMs. It allows users to chat with various LLMs. A reflected cross-site scripting XSS vulnerability exists in the chat component, which could lead to JWT token theft and remote...

CVE-2025-51868

CVE-2025-51868 Descripción de la vulnerabilidad Dippy es un popular sitio web para chatear con millones de personajes de IA proactivos. Dippy permite a los usuarios chatear con personajes basados en LLM, que es vulnerable a una Referencia Insegura Directa a Objetos IDOR en su componente de chat. ...

CVE-2025-51863

CVE-2025-51863 Descripción de la vulnerabilidad ChatGPTUtil es un asistente de chatbot impulsado por IA, que proporciona acceso tanto a ChatGPT como a un generador de imágenes de IA. Existe una vulnerabilidad de Cross-Site Scripting propio Self-XSS en el componente de chat. Esto puede conducir al...

EUVD-2026-71216

IBM Langflow OSS 1.0.0 through 1.11.2 suffer from a stored cross-site scripting vulnerability in the Playground chat interface...

EUVD-2025-209411

A vulnerability has been found in 1Panel-dev MaxKB up to 2.4.2. Impacted is an unknown function of the file ui/src/chat.ts of the component MdPreview. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used...

EUVD-2008-6843

Malware in sbrugna...

EUVD-2024-35259

Malicious code in bioql PyPI...

CVE-2025-51862

Insecure Direct Object Reference IDOR vulnerability in TelegAI telegai.com thru 2025-05-26 in its chat component. An attacker can exploit this IDOR to tamper other users' conversation. Additionally, malicious contents and XSS payloads can be injected, leading to phishing attack, user spoofing and...

CVE-2025-51862

Insecure Direct Object Reference IDOR vulnerability in TelegAI telegai.com thru 2025-05-26 in its chat component. An attacker can exploit this IDOR to tamper other users' conversation. Additionally, malicious contents and XSS payloads can be injected, leading to phishing attack, user spoofing and...

CVE-2025-51862

Insecure Direct Object Reference IDOR vulnerability in TelegAI telegai.com thru 2025-05-26 in its chat component. An attacker can exploit this IDOR to tamper other users' conversation. Additionally, malicious contents and XSS payloads can be injected, leading to phishing attack, user spoofing and...

CVE-2025-51859

Stored Cross-Site Scripting XSS vulnerability in Chaindesk thru 2025-05-26 in its agent chat component. An attacker can achieve arbitrary client-side script execution by crafting an AI agent whose system prompt instructs the underlying Large Language Model LLM to embed malicious script payloads...

PT-2025-30419 · Telegai · Telegai

Name of the Vulnerable Software and Affected Versions: TelegAI affected versions not specified Description: The application contains a stored cross-site scripting XSS issue in its chat component and character container component. An attacker can execute arbitrary client-side scripts by creating a...

CVE-2025-51860

The web application TelegAI (telegai.com) is vulnerable to Stored Cross-Site Scripting (XSS) in its chat and character container components. The root cause is the improper neutralization of input , allowing an attacker to craft an AI Character containing SVG XSS payloads within the description, g...

CVE-2025-51862

TelegAI, a web application for interacting with AI characters, contains an Insecure Direct Object Reference (IDOR) vulnerability in its chat component (affecting versions through 2025-05-26). The root cause is an improper authorization mechanism in the conversation API (https://ywqesktuqvgsmgraor...

Chaindesk Cross Site Scripting

Chaindesk, a web application for constructing AI Agents, is vulnerable to a persistent cross site scripting vulnerability in its agent chat component. An attacker can achieve arbitrary client-side script execution by crafting an AI agent whose system prompt instructs the underlying Large Language...

Exploit for CVE-2025-51864

CVE-2025-51864 Vulnerability description AIBOX is a web...

PT-2025-26736 · Mitel · Mitel Micontact Center Business

Name of the Vulnerable Software and Affected Versions: Mitel MiContact Center Business versions through 10.2.0.3 Description: A vulnerability in the legacy chat component could allow an unauthenticated attacker to conduct an information disclosure attack due to improper handling of session data. ...

PT-2025-26737 · Mitel · Mitel Micontact Center Business

Name of the Vulnerable Software and Affected Versions: Mitel MiContact Center Business versions 10.0.0.0 through 10.0.0.4 Mitel MiContact Center Business versions 10.1.0.0 through 10.1.0.5 Mitel MiContact Center Business versions 10.2.0.0 through 10.2.0.4 Description: A vulnerability in the legac...

CVE-2024-42514

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an unauthenticated attacker to conduct an unauthorized access attack due to inadequate access control checks. A successful exploit requires user interaction and could allow an attacker to...