CVE-2025-6262: Improper Neutralization of Input During Web Page Generation

The muse.ai video embedding plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's muse-ai shortcode in all versions up to, and including, 0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

WordPress plugin muse.ai video embedding 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in WordPress muse.ai video embedding, which stems from insufficient input cleanup and output escaping, and can be exploited by a...

UCD: Unlearning in LLMs Via Contrastive Decoding

Machine unlearning aims to remove specific information, e.g. sensitive or undesirable content, from large language models LLMs while preserving overall performance. We propose an inference-time unlearning algorithm that uses contrastive decoding, leveraging two auxiliary smaller models, one train...

Pentest-Muse-Cli - AI Assistant Tailored For Cybersecurity Professionals

Pentest Muse is an AI assistant tailored for cybersecurity professionals. It can help penetration testers brainstorm ideas, write payloads, analyze code, and perform reconnaissance. It can also take actions, execute command line codes, and iteratively solve complex tasks. Pentest Muse Web App In...

CVE-2023-49914

InteraXon Muse 2 devices allow remote attackers to cause a denial of service incorrect Muse App report of an outstanding, calm meditation state via a 480 MHz RF carrier that is modulated by a "false" brain wave, aka a Brain-Hack attack. For example, the Muse App does not display the reception of ...

CVE-2023-49914

InteraXon Muse 2 devices allow remote attackers to cause a denial of service incorrect Muse App report of an outstanding, calm meditation state via a 480 MHz RF carrier that is modulated by a "false" brain wave, aka a Brain-Hack attack. For example, the Muse App does not display the reception of ...

Spoofing

InteraXon Muse 2 devices allow remote attackers to cause a denial of service incorrect Muse App report of an outstanding, calm meditation state via a 480 MHz RF carrier that is modulated by a "false" brain wave, aka a Brain-Hack attack. For example, the Muse App does not display the reception of ...

CVE-2023-49914

Affected product: InteraXon Muse 2 devices. Vulnerability: remote attackers can trigger a denial of service by delivering a 480 MHz RF carrier modulated with a (false) brain wave, a so‑called Brain‑Hack attack. The Muse App can fail to display the reception of a strong RF carrier and may mislead ...

CVE-2023-49914: Undefined Security Weakness

InteraXon Muse 2 devices allow remote attackers to cause a denial of service incorrect Muse App report of an outstanding, calm meditation state via a 480 MHz RF carrier that is modulated by a "false" brain wave, aka a Brain-Hack attack. For example, the Muse App does not display the reception of ...

PT-2023-31409 · Interaxon · Muse App +1

Name of the Vulnerable Software and Affected Versions: InteraXon Muse 2 devices affected versions not specified Description: The issue allows remote attackers to cause a denial of service, resulting in an incorrect report of an outstanding, calm meditation state. This is achieved via a 480 MHz RF...

InteraXon Muse 2 Security Vulnerability

The InteraXon Muse 2 is a multi-sensor meditation device from InteraXon Canada. A security vulnerability exists in InteraXon Muse 2. An attacker exploited the vulnerability to cause a denial of service on the system...

CVE-2023-49914

InteraXon Muse 2 devices allow remote attackers to cause a denial of service incorrect Muse App report of an outstanding, calm meditation state via a 480 MHz RF carrier that is modulated by a "false" brain wave, aka a Brain-Hack attack. For example, the Muse App does not display the reception of ...

Instagram scam promises money in exchange for your image

Were seeing a number of complaints on Reddit and elsewhere regarding a scam which flares up every so often. Its called the "Muse scam", and targets users of Instagram. Let's hear from one of the Reddit posters impacted: An artist approached me on Instagram asking if they could use one of my photo...

MAL-2022-485 Malicious code in @otvet/muse-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cbe6a1c028dd248a481785419117889ffd039680504871f144e45983f9765867 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

museblockchain.com Improper Access Control vulnerability OBB-2176940

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

muse.dyu.edu.tw vulnerability

Vulnerable URL: http://muse.dyu.edu.tw:8080/1cate/linker?template=slinks:redirect=1473-6357id==openly=jsCate=https://www.xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 21.12.2015 Latest check for patch:| 21.12.2015 16:07 GMT Vulnerability status:| Publicly disclosed Alexa Rank...

Hardcoded credentials

GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value...

CVE-2007-6757

CVE-2007-6757 concerns GE Healthcare Centricity DMS with a Museadmin account password Muse!Admin, reflecting default or hard-coded credentials across Centricity DMS and related GE Healthcare products. The ICS-CERT advisory (ICSMA-18-037-02) documents the use of default/hard-coded credentials in m...

PT-2015-3462

Name of the Vulnerable Software and Affected Versions GE Healthcare Centricity DMS versions 4.0 through 4.2 Description The issue concerns a password for the Museadmin user, with the password being Muse!Admin. The impact and attack vectors of this issue are not specified. It is unclear whether th...

CVE-2007-6757: Undefined Security Weakness

GE Healthcare Centricity DMS 4.2, 4.1, and 4.0 has a password of Muse!Admin for the Museadmin user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value...