A vulnerability has been found in lunary-ai lunary up to 1.2.2 and classified as critical. This vulnerability affects unknown code of the component PATCH Request Handler. The manipulation leads to improper access controls.
This vulnerability was named…
This week on Lock and Code, we talk about what people lose when they let AI services make choices for dinners, reservations, and even dating.
My question regards tabnabbing and how to block it. I will first describe my understanding of the subject, but I’m no expert, so this introduction is meant for you to correct me if applicable.
Here is my attempt at exhaustively listing the…
A vulnerability, which was classified as problematic, was found in NetEase taurusxin ncmdump 1.3.2. This affects an unknown part of the component NCM File Handler. The manipulation leads to denial of service.
This vulnerability is uniquely identified …
A vulnerability, which was classified as critical, has been found in Zoho ManageEngine ADAudit Plus up to 7271. Affected by this issue is some unknown functionality of the component Report Data Aggregation. The manipulation leads to injection.
This vu…
A vulnerability classified as problematic was found in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting.
This vulnerability …
A vulnerability classified as critical has been found in NetEase taurusxin ncmdump 1.3.2. Affected is the function NeteaseCrypt::FixMetadata of the file /src/ncmcrypt.cpp of the component NCM File Handler. The manipulation leads to memory corruption.
…
A vulnerability was found in OpenText ArcSight Enterprise Security Manager and ArcSight Platform. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting.
The identification of this …
A vulnerability was found in Zoho ManageEngine PAM360 6600. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to improper authorization.
This vulnerability was named CVE-2024-27312. The attack can be ini…
A vulnerability was found in mintplex-labs anything-llm. It has been classified as critical. This affects an unknown part of the file /api/workspace/:workspace-slug/update of the component HTTP POST Request Handler. The manipulation leads to improper i…
