Fake News, Real Crashes: Information Injection Attacks on LLM Financial Trading Agents

Large language model LLM agents now trade real capital using news as evidence, yet they cannot reliably tell fabricated headlines from real news. Because they read the same feeds under near-identical policies, a single fabricated post can push them into the same trade at the same moment. We prese...

Ubuntu 24.04 LTS / 25.10 : Valkey vulnerabilities (USN-8106-1)

The remote Ubuntu 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8106-1 advisory. It was discovered that Valkey incorrectly handled errors for lua scripts. An attacker could possibly use this issue to inject arbitrary informati...

CVE-2025-67733

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary information into the response stream for the given client, potentially corrupting or returning tampered data to other users on the same...

EUVD-2020-28276

Malware in sbrugna...

EUVD-2018-1609

Malware in sbrugna...

EUVD-2021-1031

Malware in sbrugna...

CVE-2024-52891

IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow an authenticated user to inject malicious information or obtain information from log files due to improper log neutralization...

CVE-2020-15184

In Helm before versions 2.16.11 and 3.3.2 there is a bug in which the alias field on a Chart.yaml is not properly sanitized. This could lead to the injection of unwanted information into a chart. This issue has been patched in Helm 3.3.2 and 2.16.11. A possible workaround is to manually review th...

CVE-2020-15184: Improper Input Validation

In Helm before versions 2.16.11 and 3.3.2 there is a bug in which the alias field on a Chart.yaml is not properly sanitized. This could lead to the injection of unwanted information into a chart. This issue has been patched in Helm 3.3.2 and 2.16.11. A possible workaround is to manually review th...

CVE-2020-0663: Undefined Security Weakness

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used t...

Microsoft Edge Remote Elevation of Privilege Vulnerability (CNVD-2019-07331)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A privilege extraction vulnerability exists in Microsoft Edge, which stems from the program failing to properly enforce cross-domain policies. A remote attacker could exploit the...

Microsoft Internet Explorer Remote Elevation of Privilege Vulnerability (CNVD-2017-05580)

Internet Explorer is a web browser from Microsoft. Internet Explorer suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain access to information in a domain and insert it into other domains...

PT-2016-5685 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 1.10.4 Foreman versions 1.11.x prior to 1.11.2 Description: The issue allows remote attackers to execute arbitrary code via the PXE template type portion of the PATH INFO to "tftp/". This is due to an eval injection...

Novell Client login form enables reading and writing from and to the clipboard of the logged-in user

Suggested Risk Level: Low. Type of Risk: Information Leakage, Information Injection, Unauthorized Access. Affected Software: Novell Client for Windows, versions 4.9 and 4.8 On windows XP Pro and Windows 2000 Workstation. This versions are the only one tested, thus other version may be vulnerable ...