Blackbox AI 安全漏洞

Blackbox AI is an AI coding assistant from Blackbox AI, Inc. that helps developers by providing real-time code completion, documentation, and debugging advice. A security vulnerability exists in Blackbox AI version v1.3.95, which stems from a prompt injection in a chat box that allows an attacker...

CVE-2024-48139

A prompt injection vulnerability in the chatbox of Blackbox AI v1.3.95 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message...

OPENSUSE-SU-2024:12904-1 prometheus-blackbox_exporter-0.19.0-13.1 on GA media

These are all security issues fixed in the prometheus-blackboxexporter-0.19.0-13.1 package on the GA media of openSUSE Tumbleweed...

gps-blackbox.de Improper Access Control vulnerability OBB-3818761

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: spark-operator, slsa-verifier, buildkitd, k3d, aactl, kubeflow, kubevela, falco, prometheus-blackbox-exporter, terraform-provider-sendgrid, src, kubescape, scorecard, cortex, up, dgraph...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: timestamp-authority-fips, cluster-autoscaler-fips, falcoctl-fips, kubernetes-csi-livenessprobe, kubeflow, bank-vaults-fips, prometheus-stackdriver-exporter, cortex, aactl, kubeflow-fips, volume-modifier-for-k8s-fips, kubevela, buildkitd, scorecard,...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: prometheus-node-exporter-fips, aws-load-balancer-controller-fips, cluster-autoscaler-fips, kaf, kubernetes-dashboard-metrics-scraper, vertical-pod-autoscaler, kubeflow, dex, runc, prometheus-stackdriver-exporter, gitness, aws-efs-csi-driver,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: metrics-server, sigstore-scaffolding, cosign, oauth2-proxy, flux-notification-controller, gitness, nodetaint, pulumi-language-dotnet, src, node-problem-detector, nginx-stable, coredns, git-lfs, gomplate, ollama, envoy-ratelimit, scorecard, certificate-transparency,...

libqb: Buffer overflow in log_blackbox.c

logblackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered...

SUSE CVE-2023-39976

logblackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered...

AZL-27859 CVE-2023-39976 affecting package libqb 1.0.5-7

logblackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered...

PT-2023-8683 · Libqb +8 · Libqb +8

Name of the Vulnerable Software and Affected Versions: libqb versions prior to 2.0.8 Description: The issue is related to a buffer overflow in the log blackbox.c component of the libqb library. This occurs due to the lack of input size validation when copying data, allowing an attacker to...

SUSE-SU-2023:3122-1 Security update for SUSE Manager Client Tools

This update fixes the following issues: python-tornado: - Security fixes: CVE-2023-28370: Fixed an open redirect issue in the static file handler bsc1211741 kiwi-desc-saltboot: - Update to version 0.1.1687520761.cefb248 Add osimage cert package to bootstrap for SUSE Linux Enterprise 12 images...

DEBIAN-CVE-2023-26735

blackboxexporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE: this is disputed by third parties because authentication can be configured...

UBUNTU-CVE-2023-26735

DISPUTED blackboxexporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE: this is disputed by third parties because authentication can be configured...

Linux Prometheus Blackbox Exporter 代码问题漏洞

Linux Prometheus Blackbox Exporter is a blackbox exporter from the Linux Foundation in the United States that allows blackbox probing of endpoints over HTTP, HTTPS, DNS, TCP and ICMP. A security vulnerability exists in Linux Prometheus Blackbox Exporter version v0.23.0 that stems from the inclusi...

PT-2023-20776 · Unknown +1 · Blackbox Exporter +1

Name of the Vulnerable Software and Affected Versions: blackbox exporter version 0.23.0 Description: The issue is related to an access control problem in the probe interface of blackbox exporter, allowing attackers to detect intranet ports and services, as well as download resources. It is noted...

BlackBox 路径遍历漏洞

BlackBox is an application. BlackBox BlackBox, a virtual engine, supports 5.0 to 12.0, can clone and run virtual apps on Android, has the ability to run without installation and has integrated Xposed framework. BlackBox can take control of the virtual apps being run and do whatever you want. A pa...

SUSE-SU-2022:3382-1 Security update for permissions

This update for permissions fixes the following issues: - CVE-2022-31252: Fixed chkstat group controlled paths bsc1203018. - Add capability for prometheus-blackboxexporter bsc1191194. - Make btmp root:utmp bsc1050467...

Malicious code in express-blackbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c3f084bd8ff56a921dd19425589a261461fc8a6d922935dcdb49a5fd2a5ac0ad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...