CodeGeeX 安全漏洞

CodeGeeX is an intelligent programming assistant from China-based Smart Spectrum Huazhang CodeGeeX. A security vulnerability exists in CodeGeeX version v2.17.0, which originates from a prompt injection in the chat box, allowing an attacker to access and steal all previous and subsequent chat data...

Integer overflow

Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mmmalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...

Shopizer 安全特征问题漏洞

Shopizer is a Java-based open source e-commerce solution from the Shopizer team. A security signature issue vulnerability exists in Shopizer versions 2.0 through 2.17.0, which can be exploited by an attacker to cause a regular administrator to permanently delete a super administrator...