4 matches found
EUVD-2025-22327
Malicious code in bioql PyPI...
CVE-2025-51859
Stored Cross-Site Scripting XSS vulnerability in Chaindesk thru 2025-05-26 in its agent chat component. An attacker can achieve arbitrary client-side script execution by crafting an AI agent whose system prompt instructs the underlying Large Language Model LLM to embed malicious script payloads...
CVE-2025-51859
Chaindesk (versions through 2025-05-26 ) is vulnerable to Stored Cross-Site Scripting (XSS) in its agent chat component. An attacker can exploit this by crafting an AI agent with a system prompt that instructs the underlying Large Language Model (LLM) to embed malicious payloads, such as SVG-base...
CVE-2025-51859
Stored Cross-Site Scripting XSS vulnerability in Chaindesk thru 2025-05-26 in its agent chat component. An attacker can achieve arbitrary client-side script execution by crafting an AI agent whose system prompt instructs the underlying Large Language Model LLM to embed malicious script payloads...