Lucene search
+L

1378 matches found

Wired Threat Level
Wired Threat Level
•added 2022/09/28 6:00 a.m.•16 views

This Chatbot Aims to Steer People Away From Child Abuse Material

Pornhub is trialing a new automated tool that pushes CSAM-searchers to seek help for their online behavior. Will it work?...

1.6AI score
SaveExploits0
Malwarebytes
Malwarebytes
•added 2022/08/10 5:00 p.m.•22 views

Now it's BlenderBot's turn to make shocking, inappropriate, and untrue remarks

Last Friday, Meta unveiled its new BlenderBot 3 AI chatbot, a conversational AI prototype. The company said its chatbot is designed to learn by having natural conversations with people online. It also improves its skills via human feedback. Meta also asserts with confidence that the more the AI...

0.9AI score
SaveExploits0
attackerkb
attackerkb
•added 2022/07/11 1:15 a.m.•16 views

CVE-2022-31587

The yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.3AI score0.01337EPSS
SaveExploits1References2
OSV
OSV
•added 2022/07/11 1:15 a.m.•17 views

CVE-2022-31587

The yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS5.8AI score0.01337EPSS
SaveExploits1References1
CVE
CVE
•added 2022/07/11 1:02 a.m.•82 views

CVE-2022-31587

CVE-2022-31587 affects the yuriyouzhou/KG-fashion-chatbot repository (up to 2018-05-22). The issue is an absolute path traversal caused by unsafe use of Flask’s send_file, enabling access to unintended files. CVSS data in the provided sources indicate a high impact on confidentiality and a signif...

9.3CVSS9.2AI score0.01337EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/07/11 12:00 a.m.•16 views

KG-fashion-chatbot 路径遍历漏洞

KG-fashion-chatbot is a multi-modal chatbot for online shopping assistant by youzhou individual developer. KG-fashion-chatbot has a security vulnerability in versions 2018-05-22 and earlier, which stems from an unsafe use of Flask's sendfile function that allows absolute path traversal...

9.3CVSS8.2AI score0.01337EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/07/11 12:00 a.m.•1 views

PT-2022-20861

Name of the Vulnerable Software and Affected Versions yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. This enables potential access to sensitive files outside the intended...

9.3CVSS0.01337EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•9 views

CVE-2022-31587: Improper Limitation of a Pathname to a Restricted Directory

The yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.2AI score0.01337EPSS
SaveExploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:21 p.m.•7 views

Malicious code in wix-chatbot-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4a7f80fb18364a54e5f27f1204e79a97e59940eb4df46398191bd2bc19fff22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:21 p.m.•9 views

MAL-2022-7163 Malicious code in wix-chatbot-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4a7f80fb18364a54e5f27f1204e79a97e59940eb4df46398191bd2bc19fff22 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:17 p.m.•8 views

Malicious code in glip-chatbot-poly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab956936c2411a96c286ba8864378373c742a10ce48f62643ee9be7d5a227002 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:17 p.m.•11 views

MAL-2022-3385 Malicious code in glip-chatbot-poly (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ab956936c2411a96c286ba8864378373c742a10ce48f62643ee9be7d5a227002 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•55 views

ChatBot App with Suggestion SQL注入漏洞(CNVD-2022-54683)

ChatBot App with Suggestion is a ChatBot application with Suggestion by Carlo Montero's personal developer. v1.0 of ChatBot App with Suggestion is vulnerable to SQL injection, which originates from /simplechatbot/ admin/?page=responses/manageresponse&id=The page lacks validation for external inpu...

7.2CVSS5.3AI score0.01036EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•57 views

ChatBot App with Suggestion SQL注入漏洞(CNVD-2022-54684)

ChatBot App with Suggestion is a ChatBot application with suggestion by Carlo Montero's personal developer. v1.0 of ChatBot App with Suggestion is vulnerable to SQL injection, which originates from /simplechatbot/ admin/?page=responses/viewresponse&id=The page lacks validation for external input...

7.2CVSS5.3AI score0.01008EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•71 views

ChatBot App with Suggestion SQL注入漏洞

ChatBot App with Suggestion is a ChatBot application with suggestion by Carlo Montero's personal developer. v1.0 of ChatBot App with Suggestion is vulnerable to SQL injection, which originates from /simplechatbot/ admin/?page=user/manageuser&id=The page lacks validation for external input SQL...

9.8CVSS5.3AI score0.01137EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•66 views

ChatBot App with Suggestion Arbitrary File Deletion Vulnerability

ChatBot App with Suggestion is a ChatBot application with suggestion by Carlo Montero's personal developer. v1.0 of ChatBot App with Suggestion is vulnerable to an arbitrary file deletion vulnerability that originates in /simplechatbot/ classes/Master.php lacks valid validation for filenames, whi...

6.5CVSS3.2AI score0.00976EPSS
SaveExploits1References1
NVD
NVD
•added 2022/06/02 2:15 p.m.•25 views

CVE-2022-31970

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=responses/manageresponse&id=...

7.2CVSS0.01036EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/06/02 2:15 p.m.•17 views

CVE-2022-31966

ChatBot App with Suggestion v1.0 is vulnerable to Delete any file via /simplechatbot/classes/Master.php?f=deleteimg...

6.5CVSS6.6AI score0.00976EPSS
SaveExploits1References2
OSV
OSV
•added 2022/06/02 2:15 p.m.•10 views

CVE-2022-31971

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=responses/viewresponse&id=...

7.2CVSS5.8AI score0.01008EPSS
SaveExploits1References1
OSV
OSV
•added 2022/06/02 2:15 p.m.•12 views

CVE-2022-31970

ChatBot App with Suggestion v1.0 is vulnerable to SQL Injection via /simplechatbot/admin/?page=responses/manageresponse&id=...

7.2CVSS7.1AI score0.01036EPSS
SaveExploits1References1
Rows per page
Query Builder