10 matches found
CVE-2023-25292
CVE-2023-25292 Cross-Site Scripting XSS Reflejado en Intermesh BV Group-Office versión 6.6.145, permite a los atacantes obtener privilegios elevados y acceder a información sensible a través de la cookie GOLANGUAGE Detalles de la vulnerabilidad Producto: Aplicación Group Office Versión: 6.6.145...
Insecure Coding Preferences in Long-Term Memory: Security Risks for LLM-Based Code Generation
LLM-based systems increasingly incorporate long-term memory to improve cross-session continuity. However, once insecure coding preferences are stored, they may silently influence security-critical decisions in subsequent generations. In this study, we conduct the first systematic empirical study ...
Evaluating Cryptographic API Misuse Detectors for Go
Cryptographic API misuse represents a critical vulnerability class that undermines the security foundations of modern software. Yet, it remains largely unexplored in Go despite its dominance in security-critical infrastructure. This paper presents the first comprehensive study of cryptographic AP...
EUVD-2023-29254
Malicious code in bioql PyPI...
CVE-2023-25292
Reflected Cross Site Scripting XSS in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GOLANGUAGE cookie...
Cross site scripting
Reflected Cross Site Scripting XSS in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GOLANGUAGE cookie...
CVE-2023-25292: Improper Neutralization of Input During Web Page Generation
Reflected Cross Site Scripting XSS in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GOLANGUAGE cookie...
CVE-2023-25292
Reflected Cross Site Scripting XSS in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GOLANGUAGE cookie...
