1242 matches found
Malicious code in openai-py3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 32887a019aca436d09e5e770e5a57d6c1535110f95595f1589e0de9899f9a5d3 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-adfboba Reasons based on the campaign:...
MAL-2024-12319 Malicious code in openai-py3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 32887a019aca436d09e5e770e5a57d6c1535110f95595f1589e0de9899f9a5d3 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2024-07-adfboba Reasons based on the campaign:...
Spring AI - Groq AI inference
Faster information processing not only inform—it transforms how we perceive and innovate. Spring AI, a powerful framework for integrating AI capabilities into Spring applications, now offers support for Groq - a blazingly fast AI inference engine with supports for Tool/Function calling. Because...
Hackers Leaking Taylor Swift Tickets? Don’t Get Your Hopes Up
Plus: Researchers uncover a new way to expose CSAM peddlers, OpenAI suffered a secret cyberattack, cryptocurrency thefts jump in 2024, and Twilio confirms hackers stole 33 million phone numbers...
CVE-2024-40594
The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps...
CVE-2024-40594
The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps...
CVE-2024-40594: Cleartext Storage of Sensitive Information
The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps...
OpenAI ChatGPT Security Breach
OpenAI ChatGPT is a text-based artificial intelligence assistant from OpenAI, Inc. Interaction takes place in the form of a dialog. A security vulnerability exists in versions of OpenAI ChatGPT prior to 2024-07-05 that stems from storing conversations in plaintext in a location accessible to othe...
CVE-2024-40594
The connected PT-2024-28930 entry confirms concrete details for CVE-2024-40594: the OpenAI ChatGPT macOS app prior to 2024-07-05 is vulnerable because it opts out of the sandbox and stores conversations in cleartext in a location accessible to other apps. This creates a potential exposure of sens...
CVE-2024-40594
The OpenAI ChatGPT app before 2024-07-05 for macOS opts out of the sandbox, and stores conversations in cleartext in a location accessible to other apps...
OpenAI Kept Mum About Hack of Sensitive AI Research
Security breach potentially exposed internal secrets at AI research firm OpenAI after hackers accessed discussions on sensitive AI…...
PT-2024-28930 · Openai · Openai Chatgpt
Name of the Vulnerable Software and Affected Versions: OpenAI ChatGPT app versions prior to 2024-07-05 for macOS Description: The issue concerns the OpenAI ChatGPT app for macOS, which opts out of the sandbox and stores conversations in cleartext in a location accessible to other apps. This could...
CVE-2024-36420 GHSL-2023-232: Flowise Path Injection at /api/v1/openai-assistants-file
Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, the /api/v1/openai-assistants-file endpoint in index.ts is vulnerable to arbitrary file read due to lack of sanitization of the fileName body parameter. No known patches for this...
PT-2024-26988
Name of the Vulnerable Software and Affected Versions Flowise version 1.4.3 Description The issue concerns a lack of sanitization of the fileName body parameter in the "/api/v1/openai-assistants-file" endpoint, which is located in the index.ts file. This lack of sanitization leads to an arbitrary...
CVE-2024-36420: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, the /api/v1/openai-assistants-file endpoint in index.ts is vulnerable to arbitrary file read due to lack of sanitization of the fileName body parameter. No known patches for this...
Flowise Security Vulnerabilities
Flowise is a tool for easily building LLM applications. A security vulnerability exists in Flowise version 1.4.3, which stems from a lack of cleanup of the fileName parameter, leaving /api/v1/openai-assistants-file in index.ts vulnerable to arbitrary file read attacks...
Malicious code in TheOpenAI.API (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in OpenAI-Core (NuGet)
--- -= Per source details. Do not edit below this line.=-...