llm-security

New: Demonstrating Indirect Injection attacks on Bing Chat Compromising LLMs using Indirect Prompt Injection "... a language model is a Turing-complete weird machine running programs written in natural language; when you do retrieval, you are not 'plugging updated facts into your AI', you are...

r2d2

r2d2 GPT-4 plugin for radare2 Introduction This is a radare2 plugin that uses GPT-4 to let GPT-4 issue r2 commands and interpret the output. https://github.com/dnakov/r2d2/assets/3777433/4bc7b211-bccc-4b04-9350-6bfca8989edb...

IDA_Plugin_PCodeGPT

PCodeGPT A plugin for ida 7.5 7.x and 8.x. Description This is a gepetto and WPeChatGPT modified IDA plug-in that I use to automate code analysis using OpenAI's GPT 3.5 or GPT-4. Currently, only Chinese is supported. Usage Move PCodeGPT.py into the plugins folder, and the plug-in will be...

EUVD-2023-56240

Malicious code in bioql PyPI...

EUVD-2025-21932

Malicious code in bioql PyPI...

EUVD-2023-56239

Malicious code in bioql PyPI...

EUVD-2024-45879

Malicious code in bioql PyPI...

EUVD-2023-41186

Malicious code in bioql PyPI...

EUVD-2023-49384

Malicious code in bioql PyPI...

CVE-2025-50709

An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter...

CVE-2025-50709

An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter...

CVE-2025-50709: Use of GET Request Method With Sensitive Query Strings

An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter...

CVE-2025-50708

An issue in Perplexity AI GPT-4 v.2.51.0 allows a remote attacker to obtain sensitive information via the token component in the shared chat URL...

CVE-2025-50708

An issue in Perplexity AI GPT-4 v.2.51.0 allows a remote attacker to obtain sensitive information via the token component in the shared chat URL...

PT-2025-30092 · Unknown · Perplexity Ai Gpt-4

Name of the Vulnerable Software and Affected Versions: Perplexity AI GPT-4 version 2.51.0 Description: An issue allows a remote attacker to obtain sensitive information via the token component in the shared chat URL. Recommendations: At the moment, there is no information about a newer version th...

CVE-2025-50708: Exposure of Sensitive Information to an Unauthorized Actor

An issue in Perplexity AI GPT-4 v.2.51.0 allows a remote attacker to obtain sensitive information via the token component in the shared chat URL...

CVE-2025-50708

An issue in Perplexity AI GPT-4 v.2.51.0 allows a remote attacker to obtain sensitive information via the token component in the shared chat URL...

CVE-2025-6206: Unrestricted Upload of File with Dangerous Type

The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aiomaticimageeditorajaxsubmit' function in all versions up to, and including, 2.5.0. This makes...

CVE-2023-51528

Cross-Site Request Forgery CSRF vulnerability in Senol Sahin AI Power: Complete AI Pack – Powered by GPT-4.This issue affects AI Power: Complete AI Pack – Powered by GPT-4: from n/a through 1.8.12...

CVE-2024-13882: Unrestricted Upload of File with Dangerous Type

The Aiomatic - Automatic AI Content Writer & Editor, GPT-3 & GPT-4, ChatGPT ChatBot & AI Toolkit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'aiomaticgeneratefeaturedimage' function in all versions up to, and including, 2.3.8. This makes...