Lucene search
+L

8090 matches found

Malwarebytes
Malwarebytes
added 2026/02/24 3:22 p.m.20 views

Roblox gives predators “powerful tools” to target children, says LA County

Los Angeles County has sued online gaming company Roblox, adding to a series of suits that accuse the virtual worlds platform of misleading parents into thinking it's safe while leaving children exposed to predators and sexually explicit content. The February 19 filing makes LA County the first...

5.4AI score
SaveExploits0
HackRead
HackRead
added 2026/02/24 2:46 p.m.16 views

Sendmarc Releases DMARCbis Fireside Chat Featuring Co-Editor Todd Herr

Wilmington, North America, 24th February 2026, CyberNewswire...

5.4AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2026/02/24 8:28 a.m.17 views

Refund scam impersonates Avast to harvest credit card details

A fraudulent website dressed in Avast’s brand is tricking French-speaking users into handing over their full credit card details—card number, expiry date, and three-digit security code—under the cover story of processing a €499.99 refund that was never owed to them. The operation combines live ch...

5.5AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/02/24 7:29 a.m.16 views

CVE-2026-2969

A flaw has been found in datapizza-labs datapizza-ai 0.0.2. Affected is the function ChatPromptTemplate of the file datapizza-ai-core/datapizza/modules/prompt/prompt.py of the component Jinja2 Template Handler. This manipulation of the argument Prompt causes improper neutralization of special...

7.2CVSS4.7AI score0.00686EPSS
SaveExploits2References1
NVD
NVD
added 2026/02/23 9:19 p.m.20 views

CVE-2026-3075

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Jeff Starr Simple Ajax Chat simple-ajax-chat allows Retrieve Embedded Sensitive Data.This issue affects Simple Ajax Chat: from n/a through = 20251121...

5.3CVSS0.00304EPSS
SaveExploits0References1
Malwarebytes
Malwarebytes
added 2026/02/23 9:10 p.m.14 views

OpenClaw: What is it and can you use it safely?

An AI tool with a funny name has caused quite a commotion as of late—including some allegations of machine consciousness—so here is a breakdown on OpenClaw. Launched in November 2025, OpenClaw is an open-source, autonomous artificial intelligence AI agent that was made to run locally on your own...

5.8AI score
SaveExploits0
Cvelist
Cvelist
added 2026/02/23 8:48 p.m.41 views

CVE-2026-3075 WordPress Simple Ajax Chat plugin <= 20251121 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Jeff Starr Simple Ajax Chat simple-ajax-chat allows Retrieve Embedded Sensitive Data.This issue affects Simple Ajax Chat: from n/a through = 20251121...

5.3CVSS0.00304EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/23 8:48 p.m.8 views

CVE-2026-3075

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Jeff Starr Simple Ajax Chat simple-ajax-chat allows Retrieve Embedded Sensitive Data.This issue affects Simple Ajax Chat: from n/a through = 20251121...

5.4AI score0.00304EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/23 8:48 p.m.44 views

CVE-2026-3075

CVE-2026-3075 : WordPress plugin Simple Ajax Chat (simple-ajax-chat)

5.3CVSS5.4AI score0.00304EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/23 8:48 p.m.6 views

CVE-2026-3075 WordPress Simple Ajax Chat plugin <= 20251121 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Jeff Starr Simple Ajax Chat simple-ajax-chat allows Retrieve Embedded Sensitive Data.This issue affects Simple Ajax Chat: from n/a through = 20251121...

5.3CVSS5.9AI score0.00304EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/23 6:30 a.m.4 views

GHSA-Q5XX-FXV3-XXQF datapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handler

A flaw has been found in datapizza-labs datapizza-ai 0.0.2. Affected is the function ChatPromptTemplate of the file datapizza-ai-core/datapizza/modules/prompt/prompt.py of the component Jinja2 Template Handler. This manipulation of the argument Prompt causes improper neutralization of special...

5.1CVSS5.1AI score0.00686EPSS
SaveExploits2References6
Github Security Blog
Github Security Blog
added 2026/02/23 6:30 a.m.13 views

datapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handler

A flaw has been found in datapizza-labs datapizza-ai 0.0.2. Affected is the function ChatPromptTemplate of the file datapizza-ai-core/datapizza/modules/prompt/prompt.py of the component Jinja2 Template Handler. This manipulation of the argument Prompt causes improper neutralization of special...

7.2CVSS5AI score0.00686EPSS
SaveExploits2References6Affected Software1
NVD
NVD
added 2026/02/23 5:16 a.m.18 views

CVE-2026-2969

A flaw has been found in datapizza-labs datapizza-ai 0.0.2. Affected is the function ChatPromptTemplate of the file datapizza-ai-core/datapizza/modules/prompt/prompt.py of the component Jinja2 Template Handler. This manipulation of the argument Prompt causes improper neutralization of special...

7.2CVSS0.00686EPSS
SaveExploits2References5
Cvelist
Cvelist
added 2026/02/23 3:32 a.m.38 views

CVE-2026-2969 datapizza-labs datapizza-ai Jinja2 Template prompt.py ChatPromptTemplate special elements used in a template engine

A flaw has been found in datapizza-labs datapizza-ai 0.0.2. Affected is the function ChatPromptTemplate of the file datapizza-ai-core/datapizza/modules/prompt/prompt.py of the component Jinja2 Template Handler. This manipulation of the argument Prompt causes improper neutralization of special...

5.8CVSS0.00686EPSS
SaveExploits2References5
OSV
OSV
added 2026/02/23 3:32 a.m.11 views

CVE-2026-2969 datapizza-labs datapizza-ai Jinja2 Template prompt.py ChatPromptTemplate special elements used in a template engine

A flaw has been found in datapizza-labs datapizza-ai 0.0.2. Affected is the function ChatPromptTemplate of the file datapizza-ai-core/datapizza/modules/prompt/prompt.py of the component Jinja2 Template Handler. This manipulation of the argument Prompt causes improper neutralization of special...

5.1CVSS5.3AI score
SaveExploits0References7
CNNVD
CNNVD
added 2026/02/23 12:00 a.m.23 views

WordPress plugin Simple Ajax Chat 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin Simple Ajax Chat. The...

5.3CVSS5.7AI score0.00304EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/23 12:00 a.m.28 views

PT-2026-21561

Name of the Vulnerable Software and Affected Versions Jeff Starr Simple Ajax Chat versions prior to 20251122 Description A flaw exists in Jeff Starr Simple Ajax Chat that allows retrieval of embedded sensitive data, potentially exposing sensitive system information to an unauthorized control...

5.2AI score0.00304EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/02/22 1:28 a.m.14 views

CVE-2026-27169

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Versions 1.1.2-alpha and below render untrusted user/model content in chat tool UI surfaces using unsafe HTML interpolation patterns, leading to XSS. Stored content can execute JavaScript when...

8.9CVSS5.8AI score0.00347EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/21 12:00 a.m.20 views

OpenSift 安全漏洞

OpenSift is an open-source artificial intelligence learning assistant developed by OpenSift. Versions of OpenSift 1.1.2-alpha and earlier contain security vulnerabilities. These vulnerabilities stem from the use of insecure HTML interpolation patterns in the chat tool’s UI interface, which render...

8.9CVSS5.6AI score0.00347EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/20 11:51 p.m.32 views

CVE-2026-27169

OpenSift OpenSift: Persistent XSS in chat rendering (versions ≤ 1.1.2-alpha) due to unsafe HTML interpolation. Stored content can execute JavaScript in an authenticated session, enabling actions as the victim within the local app. Affected component: chat tool UI surfaces; root cause: unsafe HTML...

8.9CVSS5.8AI score0.00347EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder