644 matches found
EUVD-2025-6100
Malicious code in bioql PyPI...
EUVD-2023-54737
Malicious code in bioql PyPI...
EUVD-2025-10934
Malicious code in bioql PyPI...
EUVD-2024-31707
Malicious code in bioql PyPI...
EUVD-2025-28744
Malicious code in bioql PyPI...
EUVD-2025-22316
Malicious code in bioql PyPI...
EUVD-2025-11837
Malicious code in bioql PyPI...
EUVD-2024-1292
Malicious code in bioql PyPI...
EUVD-2025-11357
Malicious code in bioql PyPI...
Indirect Prompt Injection Attacks Against LLM Assistants
Really good research on practical attacks against LLM agents. "Invitation Is All You Need! Promptware Attacks Against LLM-Powered Assistants in Production Are Practical and Dangerous" Abstract: The growing integration of LLMs into applications has introduced new security risks, notably known as...
LLM-GUARD: Large Language Model-Based Detection and Repair of Bugs and Security Vulnerabilities in C++ and Python
Large Language Models LLMs such as ChatGPT-4, Claude 3, and LLaMA 4 are increasingly embedded in software/application development, supporting tasks from code generation to debugging. Yet, their real-world effectiveness in detecting diverse software bugs, particularly complex, security-relevant...
Searching for Privacy Risks in LLM Agents Via Simulation
The widespread deployment of LLM-based agents is likely to introduce a critical privacy threat: malicious agents that proactively engage others in multi-turn interactions to extract sensitive information. These dynamic dialogues enable adaptive attack strategies that can cause severe privacy...
BentoML Detected
This is an informational plugin to inform the user that the scanner has detected a publicly accessible BentoML instance on the target application. BentoML is an open-source inference platform. This detection is included in the AI and LLM category. No source data...
CVE-2025-51864
A reflected cross-site scripting XSS vulnerability exists in AIBOX LLM chat chat.aibox365.cn through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens...
CVE-2025-51864
A reflected cross-site scripting XSS vulnerability exists in AIBOX LLM chat chat.aibox365.cn through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens...
PT-2025-30422 · Aibox Llm · Aibox Llm
Name of the Vulnerable Software and Affected Versions: AIBOX LLM chat versions through 2025-05-27 Description: A reflected cross-site scripting XSS issue exists, potentially allowing attackers to hijack accounts through stolen JWT tokens. Recommendations: At the moment, there is no information...
Deepfiction AI 安全漏洞
Deepfiction AI is an artificial intelligence platform from Deepfiction AI. A security vulnerability exists in Deepfiction AI versions 2025-06-03 and earlier that stems from an unsafe direct object reference that could lead to the use of other user credits to chat with LLM...
CVE-2025-51864
A reflected cross-site scripting XSS vulnerability exists in AIBOX LLM chat chat.aibox365.cn through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens...
CVE-2025-51864
Summary: CVE-2025-51864 is a reflected XSS vulnerability in the AIBOX LLM chat (chat.aibox365.cn) through 2025-05-27 that could enable JWT token theft and remote account hijack via crafted input. What is affected: AIBOX LLM chat front-end component used for chat interactions. Root cause / impact:...
