A serious vulnerability has been identified in the GraphCypherQAChain class of langchain-ai/langchain-community version 0.2.5, allowing for SQL injection through prompt injection.
Every 24 hours
Tech
Original briefings on what changed in security. Each story has a small illustration matched to what it covers, a short structure, and links to the catalog records and public identifiers it discusses.
A significant vulnerability in CyberPanel has been identified, enabling remote attackers to execute arbitrary commands due to incorrect default permissions.
A critical vulnerability in CyberPanel has been identified, allowing remote attackers to execute arbitrary commands due to incorrect default permissions.
A significant missing authentication vulnerability has been identified in multiple versions of Fortinet FortiManager, potentially allowing unauthorized access to critical functions.
A significant path traversal vulnerability has been identified in Mitel MiCollab, potentially allowing unauthorized access to sensitive user data.
Research · Oct 18, 2024
Unspecified Vulnerability Discovered in ScienceLogic SL1
An unspecified vulnerability has been identified in ScienceLogic SL1, prompting immediate updates and remediations across multiple versions.
A significant vulnerability has been identified in the low-level GF(2^m) elliptic curve APIs, which can lead to severe memory-related issues, including potential remote code execution.
A serious use-after-free vulnerability has been identified in Mozilla Firefox and Thunderbird, potentially allowing attackers to execute code remotely.
A critical SQL injection vulnerability has been identified in Microsoft Configuration Manager, allowing potential attackers to execute commands on affected servers.
A significant command execution vulnerability has been identified in Synacor's Zimbra Collaboration Suite, affecting multiple versions and allowing unauthenticated command execution.
A severe OS command injection vulnerability has been identified in Palo Alto Networks Expedition, enabling unauthorized access to sensitive information.
Research · Sep 27, 2024
Critical Vulnerability Resolved in Linux Kernel's fou Module
A critical vulnerability in the Linux kernel's fou module has been addressed, ensuring proper initialization of the grc variable to prevent potential security risks.