Prompt Injection Attacks on Large Language Models

This is a [good survey]() on prompt injection attacks on large language models (like ChatGPT). > **Abstract:** We are currently witnessing dramatic advances in the capabilities of Large Language Mo ...

Continue Reading
2022 Year-End API ThreatStats™ Report

In 2022, the Wallarm Threat Research team went through almost 350,000 reports to find 650 API-specific vulnerabilities, and tracked 115 published exploits impacting these vulnerabilities – all of ...

Continue Reading
Shein’s Android App Caught Transmitting Clipboard Data to Remote Servers

[![Shein Android](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() An older version of Shein's [Android application]() suffered fr ...

Continue Reading
Tenable SecurityCenter 6.0.0 Multiple Vulnerabilities (TNS-2023-07)

According to its self-reported version, the Tenable SecurityCenter application installed on the remote host is running 6.0.0 and is therefore affected by multiple vulnerabilities in OpenSSL prior to v ...

Continue Reading

CVSS3 - CRITICAL

Tenable SecurityCenter <= 5.23.1 Multiple Vulnerabilities (TNS-2023-08)

According to its self-reported version, the Tenable SecurityCenter application installed on the remote host is running Read More ...

Continue Reading

CVSS3 - HIGH

Tenable Nessus <= 10.4.2 Multiple Vulnerabilities (TNS-2023-09)

According to its self-reported version, the Tenable Nessus application running on the remote host is 10.4.2 or earlier. It is, therefore, affected by multiple vulnerabilities in OpenSSL prior to versi ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

CVE-2023-27474

Directus is a real-time API and App dashboard for managing SQL database content. Instances relying on an allow-listed reset URL are vulnerable to an HTML injection attack through the use of query para ...

Continue Reading
CVE-2023-22481

FreshRSS is a self-hosted RSS feed aggregator. When using the greader API, the provided password is logged in clear in `users/_/log_api.txt` in the case where the authentication fails. The issues occu ...

Continue Reading

Back to Main

Subscribe for the latest news: