Lucene search
K

35 matches found

Microsoft Secure
Microsoft Secure
added 2026/05/14 2:20 p.m.6 views

When configuration becomes a vulnerability: Exploitable misconfigurations in AI apps

In this article 1. Background 2. What is an exploitable misconfiguration? 3. Exploitable misconfigurations in popular AI applications 4. Minimizing the risk: Practical deployment guidance 5. How Microsoft Defender for Cloud helps detect exposures in Kubernetes 6. Learn more AI and agentic...

6.6AI score
Exploits0
Nvidia
Nvidia
added 2025/12/02 12:0 a.m.3 views

Security Bulletin: NVIDIA Triton Inference Server - December 2025

NVIDIA has released a software update for NVIDIA Triton Inference Server to address the issue disclosed in this bulletin. To protect your system, install the latest release from the Triton Inference Server Releases page on GitHub, and view the Secure Deployment Considerations Guide. Go to NVIDIA...

7.5CVSS6.9AI score0.00113EPSS
Exploits0Affected Software1
Nvidia
Nvidia
added 2025/11/11 12:0 a.m.5 views

Security Bulletin: NVIDIA Triton Inference Server- November 2025

NVIDIA has released a software update for NVIDIA Triton Inference Server. To protect your system, download and install the latest release from the Triton Inference Server Releases page on GitHub and view the Secure Deployment Considerations Guide. Go to NVIDIA Product Security. Details The...

6.5CVSS6.7AI score0.00074EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-30124

Malware in sbrugna...

6.5CVSS6.5AI score0.00621EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2023-23786

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.00095EPSS
Exploits0References1
Packet Storm News
Packet Storm News
added 2025/08/08 12:0 a.m.1 views

MALRIS: Malicious Hardware in RIS-Assisted Wireless Communications

Reconfigurable intelligent surfaces RIS enhance wireless communication by dynamically shaping the propagation environment, but their integration introduces hardware-level security risks. This paper presents the concept of Malicious RIS MALRIS, where compromised components behave adversarially, ev...

6.8AI score
Exploits0
Packet Storm News
Packet Storm News
added 2025/08/07 12:0 a.m.1 views

PRvL: Quantifying the Capabilities and Risks of Large Language Models for PII Redaction

Redacting Personally Identifiable Information PII from unstructured text is critical for ensuring data privacy in regulated domains. While earlier approaches have relied on rule-based systems and domain-specific Named Entity Recognition NER models, these methods fail to generalize across formats...

6.9AI score
Exploits0
Wiz blog
Wiz blog
added 2025/06/12 11:55 a.m.8 views

Wiz Integrates with NVIDIA Enterprise AI Factory Validated Design

Wiz is now included in the NVIDIA Enterprise AI Factory validated design, integrating with NVIDIA AI to help developers securely build and deploy enterprise AI agents at scale...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 2:32 a.m.5 views

CVE-2023-1552

ToolboxST prior to version 7.10 is affected by a deserialization vulnerability. An attacker with local access to an HMI or who has conducted a social engineering attack on an authorized operator could execute code in a Toolbox user's context through the deserialization of an untrusted configurati...

7.8CVSS7AI score0.00095EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:34 p.m.6 views

CVE-2020-9300

The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a participant in a restricted incident, and users able to view restricted incidents via the search feature. If your install has followed the secure...

6.5CVSS6.9AI score0.00621EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/30 3:32 p.m.17 views

CVE-2025-30371

Metabase is a business intelligence and embedded analytics tool. Versions prior to v0.52.16.4, v1.52.16.4, v0.53.8, and v1.53.8 are vulnerable to circumvention of local link access protection in GeoJson endpoint. Self hosted Metabase instances that are using the GeoJson feature could be potential...

2.1CVSS6.9AI score0.00278EPSS
Exploits0References1
Nvidia
Nvidia
added 2025/02/11 12:0 a.m.11 views

Security Bulletin: NVIDIA Triton Inference Server - February 2025

NVIDIA has released a software update for NVIDIA® Triton Inference Server. To protect your system, download and install the latest release from the Triton Inference Server Releases page on GitHub and view the Secure Deployment Considerations Guide. Go to NVIDIA Product Security...

6.5CVSS5.1AI score0.00072EPSS
Exploits0Affected Software1
Nvidia
Nvidia
added 2024/09/30 12:0 a.m.21 views

Security Bulletin: NVIDIA Triton Inference Server - September 2024

NVIDIA has released a software update for NVIDIA Triton Inference Server to address the issue disclosed in this bulletin. To protect your system, install the latest release from the Triton Inference Server Releases page on GitHub, and view the Secure Deployment Considerations Guide. Go to NVIDIA...

6.5CVSS5.4AI score0.00208EPSS
Exploits0
GithubExploit
GithubExploit
added 2024/09/28 5:11 p.m.119 views

Exploit for SQL Injection in Langchain

Proof of Concept for Langchain CVE-2024–8309 Vulnerability...

9.8CVSS8.6AI score0.02002EPSS
Exploits2
Nvidia
Nvidia
added 2024/05/01 12:0 a.m.71 views

Security Bulletin: NVIDIA Triton Inference Server - April 2024

NVIDIA has released a software update for NVIDIA Triton Inference Server to address the issue disclosed in this bulletin. To protect your system, install the latest release from the Triton Inference Server Releases page on GitHub, and view the Secure Deployment Considerations Guide. Go to NVIDIA...

9CVSS7.3AI score0.06035EPSS
Exploits0Affected Software1
Nvidia
Nvidia
added 2023/12/19 12:0 a.m.31 views

Security Bulletin: NVIDIA Triton Inference Server - December 2023

NVIDIA has released a software update for NVIDIA Triton Inference Server to address the issue disclosed in this bulletin. This issue affects only nondefault deployments that enable dynamic model loading through the model control APIs by using the command line option --model-control explicit...

8.8CVSS8.9AI score0.00243EPSS
Exploits0
ICS
ICS
added 2023/07/27 12:0 a.m.19 views

PTC KEPServerEX

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: PTC Equipment: KEPServerEX Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could result in the affected device crashing. 3. TECHNICAL...

7.5CVSS7.6AI score0.00107EPSS
Exploits0References8
ICS
ICS
added 2023/07/18 6:0 a.m.16 views

GE Digital CIMPLICITY

1. EXECUTIVE SUMMARY CVSS v3 6.6 ATTENTION: Low attack complexity Vendor: GE Digital Equipment: CIMPLICITY Vulnerability: Heap-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to cause memory corruption issues resulting in unwanted...

9.8CVSS8.5AI score0.00187EPSS
Exploits0References8
OSV
OSV
added 2023/04/11 3:15 p.m.2 views

CVE-2023-1552

ToolboxST prior to version 7.10 is affected by a deserialization vulnerability. An attacker with local access to an HMI or who has conducted a social engineering attack on an authorized operator could execute code in a Toolbox user's context through the deserialization of an untrusted configurati...

7.8CVSS7.1AI score0.00095EPSS
Exploits0References1
NVD
NVD
added 2023/04/11 3:15 p.m.13 views

CVE-2023-1552

ToolboxST prior to version 7.10 is affected by a deserialization vulnerability. An attacker with local access to an HMI or who has conducted a social engineering attack on an authorized operator could execute code in a Toolbox user's context through the deserialization of an untrusted configurati...

7.8CVSS6.8AI score0.00095EPSS
Exploits0References1
Rows per page
Query Builder