CVE-2025-45938

Akeles Out of Office Assistant for Jira 4.0.1 is vulberable to Cross Site Scripting XSS via the Jira fullName parameter...

CVE-2025-45938

Akeles Out of Office Assistant for Jira 4.0.1 is vulberable to Cross Site Scripting XSS via the Jira fullName parameter...

CVE-2025-45938

Akeles Out of Office Assistant for Jira version 4.0.1 is vulnerable to Cross-Site Scripting (XSS) . The root cause is the insufficient protection of the web page structure when processing the Jira fullName parameter , which allows a malicious actor to perform remote XSS attacks. Remediation is no...

CVE-2025-45938: Improper Neutralization of Input During Web Page Generation

Akeles Out of Office Assistant for Jira 4.0.1 is vulberable to Cross Site Scripting XSS via the Jira fullName parameter...

OCAS Assistant Dialog System Code Execution

The vulnerability of the OCAS Assistant dialog system is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted POST request...

Security Bulletin: Vulnerability in Eclipse OMR affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.

Summary Potential vulnerability in Eclipse OMR has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. The vulnerability has been addressed. Refer to details for additional information...

Security Bulletin: There is a vulnerablity in the torch library affecting IBM watsonx Code Assistant On Prem

Summary There is a vulnerablity in the torch library affecting IBM watsonx Code Assistant On Prem. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2025-32434 DESCRIPTION: PyTorch is a Python package that provides tensor computation with...

HP Support Assistant < 9.44.18.0 Privilege Escalation

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write. Note that Nessus has not tested for this issue but has instead relied...

PT-2025-41285

Уязвимость системы управления «Ассистент» связана с обходом авторизации посредством использования ключа, контролируемого пользователем. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...

PT-2025-41284

Уязвимость системы управления «Ассистент» связана с недостатками процедуры авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к доступ к устройству...

PT-2025-41283

Уязвимость системы управления «Ассистент» связана с ошибками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации...

LLMail-Inject: a Dataset from a Realistic Adaptive Prompt Injection Challenge

Indirect Prompt Injection attacks exploit the inherent limitation of Large Language Models LLMs to distinguish between instructions and data in their inputs. Despite numerous defense proposals, the systematic evaluation against adaptive adversaries remains limited, even when successful attacks ca...

PT-2025-27806

Name of the Vulnerable Software and Affected Versions: Akeles Out of Office Assistant for Jira version 4.0.1 Description: The issue is related to Cross Site Scripting XSS via the Jira fullName parameter. This allows for potential malicious script execution. No information is provided about the...

CVE-2025-43026

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write...

CVE-2025-43026

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write...

CVE-2025-43026

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write...

CVE-2025-43026

HP Support Assistant is affected in versions prior to 9.44.18.0 by a local privilege-escalation vulnerability via arbitrary file write. The issue is documented across multiple sources (NVD/NiST/Nessus plugin and vendor guidance) with a consistent remediation: upgrade to version 9.44.18.0 or later...

CVE-2025-43026 HP Support Assistant – Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write...

CVE-2025-43026 HP Support Assistant – Potential Escalation of Privilege

A potential security vulnerability has been identified in the HP Support Assistant for versions prior to 9.44.18.0. The vulnerability could potentially allow a local attacker to escalate privileges via an arbitrary file write...

Security Bulletin: IBM watsonx Code Assistant On Prem product impacted by Input Handling Vulnerability in Jinja2 3.1.5

Summary A vulnerability CVE-2025-27516 has been identified in the jinja2 Python templating library version 3.1.5, which impacts the IBM watsonx Code Assistant On-Premises product. The issue stems from improper handling of untrusted template input, which may allow attackers to bypass sandbox...