17 matches found
EUVD-2023-35727
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2020-14651
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Roles. Supported versions that are affected are 8.0.20 and prior. Easily...
CVE-2025-27457 CVE-2025-27457
All communication between the VNC server and clients is unencrypted. This allows an attacker to intercept the traffic and obtain sensitive data...
PT-2025-17066 · Bernd Altmeier · Bernd Altmeier Google Maps Gpx Viewer
Name of the Vulnerable Software and Affected Versions: Bernd Altmeier Google Maps GPX Viewer versions n/a through 3.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means an...
PT-2025-10615 · Locals3 · Locals3
Name of the Vulnerable Software and Affected Versions: LocalS3 versions prior to 1.21 Description: The issue concerns XML External Entity XXE injection in the bucket creation endpoint. When processing the CreateBucketConfiguration XML document, the service's XML parser resolves external entities...
Linux Distros Unpatched Vulnerability : CVE-2023-39176
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue results from the lack of proper validati...
PT-2024-7627 · Google +5 · Google Chrome +5
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 130.0.6723.92 Microsoft Edge versions prior to the fixed version affected versions not specified Description: The issue is related to a use-after-free vulnerability in the implementation of WebRTC technology in...
PT-2024-37334 · Unknown · Gaizhenbiao/Chuanhuchatgpt
Name of the Vulnerable Software and Affected Versions: gaizhenbiao/chuanhuchatgpt version 20240410 Description: A vulnerability allows any user to restart the server at will by sending a specific request to the "/queue/join?" endpoint with fn index:66. This unrestricted server restart capability...
Rapid7 Infuses Generative AI into the InsightPlatform to Supercharge SecOps and Augment MDR Services
In the ever-evolving landscape of cybersecurity, staying ahead of threats is not just a goal—it's a necessity. At Rapid7, we are pioneering the infusion of artificial intelligence AI into our platform and service offerings, transforming the way security operations centers SOCs around the globe...
PT-2023-30261 · Unknown · Com.Phlox.Simpleserver.Plus
Name of the Vulnerable Software and Affected Versions: com.phlox.simpleserver.plus aka Simple HTTP Server PLUS version 1.8.1-plus Description: The Android manifest file of the affected software contains an entry with the android:allowBackup attribute set to true. This could be leveraged by an...
CVE-2023-40729
A vulnerability has been identified in QMS Automotive All versions V12.39. The affected application lacks security control to prevent unencrypted communication without HTTPS. An attacker who managed to gain machine-in-the-middle position could manipulate, or steal confidential information...
CVE-2021-44837
An issue was discovered in Delta RM 1.2. It is possible for an unprivileged user to access the same information as an admin user regarding the risk creation information in the /risque/administration/referentiel/json/create/categorie endpoint, using the idcat1 query parameter to indicate the risk...
PT-2022-12241 · Delta Rm · Delta Rm
Name of the Vulnerable Software and Affected Versions: Delta RM version 1.2 Description: An issue allows an unprivileged user to access the same information as an admin user regarding risk creation. This is possible through the "/risque/administration/referentiel/json/create/categorie" endpoint b...
Vulnerabilities fixed in IBM i2 Analyst's Notebook
Vulnerabilities have been fixed in the IBM i2 Analyst's Notebook. A malicious party could exploit the vulnerabilities to obtain system data and sensitive information. IBM has released updates to fix the vulnerabilities. For more information, see: https://www.ibm.com/support/pages/node/6474861...
Extracting Personal Information from Large Language Models Like GPT-2
Researchers have been able to find all sorts of personal information within GPT-2. This information was part of the training data, and can be extracted with the right sorts of queries. Paper: "Extracting Training Data from Large Language Models." Abstract: It has become common to publish large...
Firmwalker - Script for searching the extracted firmware file system for goodies!
A simple bash script for searching the extracted or mounted firmware file system. It will search through the extracted or mounted firmware file system for things of interest such as: etc/shadow and etc/passwd list out the etc/ssl directory search for SSL related files such as .pem, .crt, etc...