1254 matches found
Design/Logic Flaw
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...
CVE-2023-29374
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...
PT-2023-22231
Name of the Vulnerable Software and Affected Versions LangChain versions 0.0.0 through 0.0.131 Description The issue allows prompt injection attacks that can execute arbitrary code via the Python exec method. This is specifically related to the LLMMathChain chain in LangChain. Recommendations For...
CVE-2023-29374
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...
CVE-2023-29374
CVE-2023-29374 affects LangChain up to version 0.0.131. The vulnerability lies in the LLMMathChain chain, enabling prompt injection that can execute arbitrary Python code via the built-in exec() method. The NVD/CVE data indicate a high-severity issue (CVSS v3.1: 9.8, CRITICAL) with network attack...
CVE-2023-29374
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...
Prompt Injection Attacks on Large Language Models
This is a good survey on prompt injection attacks on large language models like ChatGPT. Abstract: We are currently witnessing dramatic advances in the capabilities of Large Language Models LLMs. They are already being adopted in practice and integrated into many systems, including integrated...
Prompt Injection/Extraction Attacks against AI Systems
This is an interesting attack I had not previously considered. The variants are interesting, and I think were just starting to understand their implications...
laabuelacarmen.com XSS vulnerability
Open Bug Bounty ID: OBB-679593 Description| Value ---|--- Affected Website:| laabuelacarmen.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ilsancs.com XSS vulnerability
Open Bug Bounty ID: OBB-561630 Description| Value ---|--- Affected Website:| ilsancs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
iydo.co.kr XSS vulnerability
Open Bug Bounty ID: OBB-484201 Description| Value ---|--- Affected Website:| iydo.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on...
zenkanmanga.com XSS vulnerability
Open Bug Bounty ID: OBB-385491 Description| Value ---|--- Affected Website:| zenkanmanga.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
advertolog.com XSS vulnerability
Vulnerable URL: http://www.advertolog.com/commercials/search/?x=0=0=999%22%3E%3Csvg/onload=prompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...