4578 matches found
CVE-2020-12861
creationtimestamp| type| source ---|---|--- 2024-10-31 04:43:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1364...
CVE-2020-6458
creationtimestamp| type| source ---|---|--- 2024-10-31 04:28:50+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1362...
CVE-2019-3670
creationtimestamp| type| source ---|---|--- 2024-10-29 19:09:41+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1315...
CVE-2020-5754
creationtimestamp| type| source ---|---|--- 2024-10-29 18:41:06+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1293...
CVE-2024-50550
Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from n/a through = 6.5.1...
CVE-2024-50550
The CVE-2024-50550 entry concerns the WordPress LiteSpeed Cache plugin (versions through 6.5.1) with an Incorrect Privilege Assignment vulnerability that enables privilege escalation. Reports attribute the root cause to weak hash verification in the crawler/role-simulation logic (is_role_simulati...
CVE-2024-50550 WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from n/a through = 6.5.1...
CVE-2024-48145
A prompt injection vulnerability in the chatbox of Netangular Technologies ChatNet AI Version v1.0 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message...
CVE-2024-48145
A prompt injection vulnerability in the chatbox of Netangular Technologies ChatNet AI Version v1.0 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message...
Netangular Technologies ChatNet AI security vulnerabilities
Netangular Technologies ChatNet AI is an application from Netangular Technologies. A security vulnerability exists in Netangular Technologies ChatNet AI v1.0, which stems from a prompt injection vulnerability in the chat box that allows an attacker to access and disclose data from all previous an...
CVE-2024-48145
A prompt injection vulnerability in the chatbox of Netangular Technologies ChatNet AI Version v1.0 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message...
CVE-2024-48145: Improper Neutralization of Special Elements used in a Command
A prompt injection vulnerability in the chatbox of Netangular Technologies ChatNet AI Version v1.0 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message...
CVE-2024-48145
Netangular Technologies ChatNet AI Version v1.0 is vulnerable to a prompt injection flaw within its chatbox. An attacker can use a crafted message to gain unauthorized access to and exfiltrate all previous and subsequent chat data exchanged between a user and the AI assistant. No specific remedia...
CVE-2022-44668
creationtimestamp| type| source ---|---|--- 2024-10-20 18:39:23+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8168...
CVE-2024-44000 WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability
Insufficiently Protected Credentials vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Authentication Bypass.This issue affects LiteSpeed Cache: from n/a through 6.5.0.1...
Hackers Exploit Roundcube Webmail XSS Vulnerability to Steal Login Credentials
Unknown threat actors have been observed attempting to exploit a now-patched security flaw in the open-source Roundcube webmail software as part of a phishing attack designed to steal user credentials. Russian cybersecurity company Positive Technologies said it discovered last month an email that...
PT-2024-43: Remote code execution (RCE) in MediaCMS
The vulnerability was identified in MediaCMS, versions 4.1.0. Discovered vulnerability allows an attacker to execute OS commands on a vulnerable host, gain control over resources, and penetrate the internal network. Vulnerability status: Confirmed by vendor Date of vulnerability remediation:...
PT-2024-42: Insufficient authorization in MediaCMS
The vulnerability was identified in MediaCMS, versions 4.1.0. The discovered vulnerability can be exploited by an authorized attacker to delete any directory in the file system knowing its absolute path, as well as substitute the contents of any user file. Vulnerability status: Confirmed by vendo...