Lucene search
+L

1153 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 11:30 a.m.25 views

CVE-2024-34440

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.2.63...

9.1CVSS5.2AI score0.00824EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 7:57 a.m.14 views

CVE-2024-29100

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4...

9.1CVSS5.2AI score0.00644EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 6:56 a.m.9 views

CVE-2024-32700

Unrestricted Upload of File with Dangerous Type vulnerability in Kognetiks Kognetiks Chatbot for WordPress.This issue affects Kognetiks Chatbot for WordPress: from n/a through 2.0.0...

10CVSS7AI score0.02585EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 12:18 a.m.11 views

CVE-2024-4560

The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the chatbotchatgptuploadfiletoassistant function in all versions up to, and including, 1.9.9. This makes it possible for unauthenticated attackers, with to uploa...

9.8CVSS7.9AI score0.00905EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 11:53 p.m.15 views

CVE-2024-13091

The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'qcldwpcfbfileupload' function in all versions up to, and including, 13.5.4. This makes it possible for unauthenticated attackers to upload arbitrary files on th...

9.8CVSS8AI score0.00829EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 11:40 p.m.12 views

CVE-2024-22309

Deserialization of Untrusted Data vulnerability in QuantumCloud ChatBot with AI.This issue affects ChatBot with AI: from n/a through 5.1.0...

9.8CVSS8.6AI score0.00519EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/03 5:25 p.m.5 views

MAL-2025-1021 Malicious code in aws-genai-llm-chatbot (npm)

The package communicates with a domain associated with malicious activity...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/03 4:56 p.m.5 views

Malicious code in mongodb-chatbot-verified-answers (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2025/02/03 4:56 p.m.7 views

MAL-2025-855 Malicious code in mongodb-chatbot-verified-answers (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/02/03 4:48 p.m.5 views

Malicious code in cdc-chatbot (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2025/02/03 4:48 p.m.5 views

MAL-2025-814 Malicious code in cdc-chatbot (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2025/01/31 6:30 p.m.18 views

DeepSeek’s Safety Guardrails Failed Every Test Researchers Threw at Its AI Chatbot

Security researchers tested 50 well-known jailbreaks against DeepSeek’s popular new AI chatbot. It didn’t stop a single one...

7.3AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2025/01/30 1:26 p.m.11 views

The DeepSeek controversy: Authorities ask where does the data come from and how safe is it?

The sudden rise of DeepSeek has raised concerns and questions, especially about the origin and destination of the training data, as well as the security of the data. For those returning from a short holiday away from the news, DeepSeek is a new player on the Artificial Intelligence AI field. The...

7AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 10:08 p.m.21 views

Security Bulletin: A vulnerability in Microsoft.BotBuilder affects IBM Robotic Process Automation which may result in elevated privileges (CVE-2024-35255).

Summary A vulnerability in Microsoft.BotBuilder affects IBM Robotic Process Automation which may result in elevated privileges. Microsoft.BotBuilder is used to enable communication between Azure Bot Services and the ChatBot API. This bulletin identifies the security fixes to apply to address the...

5.5CVSS6.9AI score0.0083EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2025/01/24 6:15 p.m.8 views

CVE-2025-24666

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Stored XSS.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through = 1.2.2...

5.9CVSS0.00354EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/24 5:24 p.m.49 views

CVE-2025-24666

CVE-2025-24666 : The WordPress plugin AI Chatbot for WordPress – Hyve Lite contains a cross-site scripting vulnerability due to improper input neutralization during web page generation. Affects Hyve Lite versions from n/a up to and including 1.2.2 (Stored XSS). The CVSSv3.1 base score is 5.9 (Med...

5.9CVSS7.2AI score0.00354EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/24 5:24 p.m.8 views

CVE-2025-24666 WordPress Hyve Lite plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Stored XSS.This issue affects AI Chatbot for WordPress – Hyve Lite: from n/a through = 1.2.2...

5.9CVSS8.6AI score0.00354EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/24 12:00 a.m.10 views

PT-2025-5487 · WordPress · Ai Chatbot For Wordpress – Hyve Lite

Name of the Vulnerable Software and Affected Versions: AI Chatbot for WordPress – Hyve Lite versions 1.2.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

5.9CVSS5.9AI score0.00354EPSS
SaveExploits0References3
HackRead
HackRead
added 2025/01/23 7:20 p.m.23 views

Meet GhostGPT: The Malicious AI Chatbot Fueling Cybercrime and Scams

Abnormal Security uncovers GhostGPT, an uncensored AI chatbot built for cybercrime. Learn how it boosts cybercriminals' abilities, makes…...

7.4AI score
SaveExploits0
OSV
OSV
added 2025/01/22 6:15 a.m.14 views

CVE-2024-12879

The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'qcwplatestupdatecheckpro' function in all versions up to, and including, 13.5.5. This makes it possible for authenticated attackers, with...

4.3CVSS7.3AI score0.00267EPSS
SaveExploits0References2
Rows per page
Query Builder