PINA: Prompt Injection Attack against Navigation Agents

Navigation agents powered by large language models LLMs convert natural language instructions into executable plans and actions. Compared to text-based applications, their security is far more critical: a successful prompt injection attack does not just alter outputs but can directly misguide...

SQL Injection Vulnerability in 3D Indoor Tour System of Zhejiang Yongtuo Information Technology Co.

Zhejiang Yongtuo Information Technology Co., Ltd. is a technology provider focusing on 3D as a presentation method to solve the physical spatial relationship, and is committed to becoming the world's leading 3D visualization enterprise, providing customers and partners with comprehensive services...

c3nav – 32c3 indoor navigation - WebView JavaScript enabled, WebView code execution, WebView files access vulnerabilities

HackApp vulnerability scanner discovered that application c3nav – 32c3 indoor navigation published at the 'play' market has multiple vulnerabilities...