1291 matches found
CVE-2023-29374
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...
CVE-2023-29374
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method...
CVE-2023-29374
CVE-2023-29374 affects LangChain up to version 0.0.131. The vulnerability lies in the LLMMathChain chain, enabling prompt injection that can execute arbitrary Python code via the built-in exec() method. The NVD/CVE data indicate a high-severity issue (CVSS v3.1: 9.8, CRITICAL) with network attack...
Prompt Injection Attacks on Large Language Models
This is a good survey on prompt injection attacks on large language models like ChatGPT. Abstract: We are currently witnessing dramatic advances in the capabilities of Large Language Models LLMs. They are already being adopted in practice and integrated into many systems, including integrated...
Prompt Injection/Extraction Attacks against AI Systems
This is an interesting attack I had not previously considered. The variants are interesting, and I think were just starting to understand their implications...
laabuelacarmen.com XSS vulnerability
Open Bug Bounty ID: OBB-679593 Description| Value ---|--- Affected Website:| laabuelacarmen.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
ilsancs.com XSS vulnerability
Open Bug Bounty ID: OBB-561630 Description| Value ---|--- Affected Website:| ilsancs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
iydo.co.kr XSS vulnerability
Open Bug Bounty ID: OBB-484201 Description| Value ---|--- Affected Website:| iydo.co.kr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on...
zenkanmanga.com XSS vulnerability
Open Bug Bounty ID: OBB-385491 Description| Value ---|--- Affected Website:| zenkanmanga.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
advertolog.com XSS vulnerability
Vulnerable URL: http://www.advertolog.com/commercials/search/?x=0=0=999%22%3E%3Csvg/onload=prompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:45 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...