5061 matches found
FreeBSD : FreeBSD -- Multiple issues in the bhyve hypervisor (eb5c615d-a173-11ef-9a62-002590c1f29c)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the eb5c615d-a173-11ef-9a62-002590c1f29c advisory. Several vulnerabilities were found in the bhyve hypervisor's device models. The NVMe driver...
kernel: Possible Denial of Service on Intel(R) Processors
A vulnerability was found in the bus lock regulator mechanism for some Intel processors models. This issue may allow a malicious actor to achieve a Denial of Service attack, impacting the system availability of the targeted host...
CVE-2024-51190
TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting XSS vulnerability via the ptRuleApplicationName1.1.6.0.0 parameter on the /specialap.htm page...
Subverting LLM Coders
Really interesting research: "An LLM-Assisted Easy-to-Trigger Backdoor Attack on Code Completion Models: Injecting Disguised Vulnerabilities against Strong Detection": Abstract : Large Language Models LLMs have transformed code completion tasks, providing context-based suggestions to boost...
CVE-2024-20534
A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 6800, 7800, and 8800 Series, and Cisco Video Phone 8875 with Cisco Multiplatform Firmware could allow an authenticated, remote attacker to conduct stored cross-site scripting XSS attacks against users. This vulnerabilit...
CVE-2024-52022
Netgear R8500 v1.0.2.160, XR300 v1.0.3.78, R7000P v1.3.3.154, and R6400 v2 1.0.4.128 were discovered to contain a command injection vulnerability in the component wlgadv.cgi via the apmodegateway parameter. This vulnerability allows attackers to execute arbitrary OS commands via a crafted request...
The vulnerability of the software’s user data loading function for running large language models (LLMs) like ChuanhuChatGPT allows a perpetrator to execute arbitrary code.
The vulnerability of the software’s user data loading function for running large language models like ChuanhuChatGPT is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
Exploring Artificial Intelligence: Is AI Overhyped?
Dive into AI technologies like inference, deep learning, and generative models to learn how LLMs and AI are transforming cybersecurity and tech industries...
MAI-2024-0035
This vulnerability affects various Large Vision-Language Models LVLMs, wherein ostensibly safe images, when combined with additional safe images and specific prompts, can be exploited to produce unsafe and harmful content. The attack methodology, known as the Safety Snowball Agent, leverages the...
MAI-2024-0003
Large Language Models LLMs are susceptible to the "SequentialBreak" jailbreak attack, wherein a malicious prompt is embedded within a sequence of benign prompts in a single query. This technique exploits the LLM's attention mechanism, which prioritizes benign prompts, thereby allowing the harmful...
MAI-2024-0012
Large Vision-Language Models VLMs are susceptible to a sophisticated black-box jailbreak attack known as IDEATOR. This attack utilizes a separate VLM to craft malicious image-text pairs designed to circumvent the target VLM's safety protocols. By iteratively refining prompts based on the target...
The vulnerability of the microprogramming software of Samsung Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, and Exynos W920 allows attackers to execute arbitrary code.
The vulnerability of microprogramming software for Samsung Exynos 9820, Exynos 9825, Exynos 980, Exynos 990, Exynos 850, and Exynos W920 relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2024-5982
A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability arises from unsanitized input handling in multiple features, including user upload, directory creation, and template loading. Specifically, the loadchathistory function in...
Researchers Reveal 'Deceptive Delight' Method to Jailbreak AI Models
Cybersecurity researchers have shed light on a new adversarial technique that could be used to jailbreak large language models LLMs during the course of an interactive conversation by sneaking in an undesirable instruction between benign ones. The approach has been codenamed Deceptive Delight by...
PT-2024-9134 · Tenda · Tenda Ac1206 +8
Name of the Vulnerable Software and Affected Versions: Tenda AC6, AC7, AC8, AC9, AC10, AC10U, AC15, AC18, AC500, and AC1206 versions up to 20241022 Description: A vulnerability was found in the function websReadEvent of the file /goform/GetIPTV. The manipulation of the argument Content-Length lea...
Leverage the Power of 45k, free, Hugging Face Models with Spring AI and Ollama
This blog post is co-authored by our great contributor Thomas Vitale. Ollama now supports all GGUF models from Hugging Face , allowing access to over 45,000 community-created models through Spring AI's Ollama integration, runnable locally. We'll explore using this new feature with Spring AI. The...
CVE-2024-10193
A vulnerability was found in WAVLINK WN530H4, WN530HG4 and WN572HG3 up to 20221028 and classified as critical. This issue affects the function pingddns of the file internet.cgi. The manipulation of the argument DDNS leads to command injection. The attack may be initiated remotely. The exploit has...
CVE-2024-10073
A vulnerability, which was classified as critical, was found in flairNLP flair 0.14.0. Affected is the function ClusteringModel of the file flair\models\clustering.py of the component Mode File Loader. The manipulation leads to code injection. It is possible to launch the attack remotely. The...
