PT-2025-11349

Name of the Vulnerable Software and Affected Versions springboot-openai-chatgpt affected versions not specified Description A vulnerability was found in springboot-openai-chatgpt, affecting the function updateQuestionCou of the file "/api/mjkj-chat/chat/mng/update/questionCou" of the component...

Springboot-openAI-ChatGTP security vulnerabilities

springboot-openai-chatgpt is a SpringCloud microservices based architecture by 274056675 individual developers. A security vulnerability exists in springboot-openai-chatgpt, which stems from hard-coded credentials and could lead to remote attacks...

Springboot-openAI-ChatGTP security vulnerabilities

springboot-openai-chatgpt is a SpringCloud microservices architecture based on SpringCloud by 274056675 individual developers. A security vulnerability exists in springboot-openai-chatgpt that stems from a business logic error and could lead to a remote attack...

PT-2025-11334

Name of the Vulnerable Software and Affected Versions: springboot-openai-chatgpt affected versions not specified Description: A critical issue was found in the software, affecting some unknown functionality of the file /api/mjkj-chat/cgform-api/addData/. The manipulation of the chatUserID argumen...

PT-2025-11370

Name of the Vulnerable Software and Affected Versions: springboot-openai-chatgpt version e84f6f5 Description: A problematic issue has been discovered, affecting the deleteChat function of the Chat History Handler component, specifically in the /api/mjkj-chat/chat/ai/delete/chat API endpoint. The...

Springboot-openAI-ChatGTP security vulnerabilities

springboot-openai-chatgpt is a SpringCloud microservices architecture based on SpringCloud by 274056675 Individual Developer. A security vulnerability exists in springboot-openai-chatgpt version e84f6f5, which stems from improper access control and could lead to remote attacks...

Springboot-openAI-ChatGTP security vulnerabilities

springboot-openai-chatgpt is a SpringCloud microservices based architecture by 274056675 individual developers. A security vulnerability exists in springboot-openai-chatgpt that stems from behavioral workflow coercion and could lead to remote attacks...

CVE-2025-2321: Undefined Security Weakness

A vulnerability was found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this issue is some unknown functionality of the file /api/mjkj-chat/cgform-api/addData/. The manipulation of the argument chatUserID leads to business logic errors. The attack may be...

CVE-2025-2320

A vulnerability has been found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this vulnerability is the function submit of the file /api/blade-user/submit of the component User Handler. The manipulation leads to improper authorization. The attack can be...

CVE-2025-2320 274056675 springboot-openai-chatgpt User submit improper authorization

A vulnerability has been found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this vulnerability is the function submit of the file /api/blade-user/submit of the component User Handler. The manipulation leads to improper authorization. The attack can be...

CVE-2025-2320 274056675 springboot-openai-chatgpt User submit improper authorization

A vulnerability has been found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this vulnerability is the function submit of the file /api/blade-user/submit of the component User Handler. The manipulation leads to improper authorization. The attack can be...

CVE-2025-2320

A vulnerability has been found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this vulnerability is the function submit of the file /api/blade-user/submit of the component User Handler. The manipulation leads to improper authorization. The attack can be...

Symantec Demonstrates OpenAI’s Operator Agent in PoC Phishing Attack

Symantec demonstrates OpenAI's Operator Agent in PoC phishing attack, highlighting AI security risks and the need for proper cybersecurity...

PT-2025-11309

Name of the Vulnerable Software and Affected Versions: springboot-openai-chatgpt affected versions not specified Description: A critical vulnerability has been found in springboot-openai-chatgpt, affecting the function submit of the file "/api/blade-user/submit" of the component User Handler. Thi...

CVE-2025-2320: Improper Authorization

A vulnerability has been found in 274056675 springboot-openai-chatgpt e84f6f5 and classified as critical. Affected by this vulnerability is the function submit of the file /api/blade-user/submit of the component User Handler. The manipulation leads to improper authorization. The attack can be...

Springboot-openAI-ChatGTP security vulnerabilities

springboot-openai-chatgpt is a SpringCloud microservices based architecture by 274056675 individual developers. A security vulnerability exists in springboot-openai-chatgpt that stems from improper authorization and could lead to remote attacks...

‘OpenAI’ Job Scam Targeted International Workers Through Telegram

An alleged job scam, led by “Aiden” from “OpenAI,” recruited workers in Bangladesh for months before disappearing overnight, according to FTC complaints obtained by WIRED...

⚡ THN Weekly Recap: From $1.5B Crypto Heist to AI Misuse & Apple's Data Dilemma

Welcome to your weekly roundup of cyber news, where every headline gives you a peek into the world of online battles. This week, we look at a huge crypto theft, reveal some sneaky AI scam tricks, and discuss big changes in data protection. Let these stories spark your interest and help you...

OpenAI Bans Accounts Misusing ChatGPT for Surveillance and Influence Campaigns

OpenAI on Friday revealed that it banned a set of accounts that used its ChatGPT tool to develop a suspected artificial intelligence AI-powered surveillance tool. The social media listening tool is said to likely originate from China and is powered by one of Meta's Llama models, with the accounts...

Malware in openai-realtime-console

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...