Aggregator

Researchers Hack Google’s Gemini CLI Through Prompt Injections in GitHub Actions

Cyber Security News
3 weeks 5 days ago

A critical vulnerability class dubbed “PromptPwnd,” affects AI agents integrated into GitHub Actions and GitLab CI/CD pipelines. This flaw allows attackers to inject malicious prompts via untrusted user inputs like issue titles or pull request bodies, tricking AI models into executing privileged commands that leak secrets or alter workflows. At least five Fortune 500 companies […]

The post Researchers Hack Google’s Gemini CLI Through Prompt Injections in GitHub Actions appeared first on Cyber Security News.

Guru Baran

«Люди станут рыбами, ИИ — в 10 000 раз умнее» Глава SoftBank предсказал будущее искусственного суперинтеллекта — но остался оптимистом

Securitylab.ru
3 weeks 5 days ago
Пока одни эксперты предупреждают о возможном вымирании человечества, Масайоши Сон уверяет, что мы просто займем место рыб в аквариуме суперразумных машин.

CVE-2025-12128 | Hide Categories Or Products On Shop Page Plugin up to 1.0.7 on WordPress save_data_hcps cross-site request forgery

Vuldb Updates
3 weeks 5 days ago
A vulnerability categorized as problematic has been discovered in Hide Categories Or Products On Shop Page Plugin up to 1.0.7 on WordPress. Affected by this vulnerability is the function save_data_hcps. The manipulation results in cross-site request forgery. This vulnerability is identified as CVE-2025-12128. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2025-13360 | Quantic Social Image Hover Plugin up to 1.0.8 on WordPress Setting cross-site request forgery

Vuldb Updates
3 weeks 5 days ago
A vulnerability identified as problematic has been detected in Quantic Social Image Hover Plugin up to 1.0.8 on WordPress. Affected by this issue is some unknown functionality of the component Setting Handler. This manipulation causes cross-site request forgery. This vulnerability is tracked as CVE-2025-13360. The attack is possible to be carried out remotely. No exploit exists.
vuldb.com

CVE-2025-12190 | wps Image Optimizer Plugin up to 1.2.0 on WordPress imagopby_ajax_optimize_gallery cross-site request forgery

Vuldb Updates
3 weeks 5 days ago
A vulnerability labeled as problematic has been found in wps Image Optimizer Plugin up to 1.2.0 on WordPress. This affects the function imagopby_ajax_optimize_gallery. Such manipulation leads to cross-site request forgery. This vulnerability is listed as CVE-2025-12190. The attack may be performed from remote. There is no available exploit.
vuldb.com

CVE-2025-13512 | CoSign Single Signon Plugin up to 0.3.1 on WordPress $_SERVER['PHP_SELF'] cross site scripting

Vuldb Updates
3 weeks 5 days ago
A vulnerability marked as problematic has been reported in CoSign Single Signon Plugin up to 0.3.1 on WordPress. This vulnerability affects unknown code. Performing manipulation of the argument $_SERVER['PHP_SELF'] results in cross site scripting. This vulnerability is cataloged as CVE-2025-13512. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

CVE-2025-12133 | EPROLO Dropshipping Plugin up to 2.3.1 on WordPress AJAX Endpoint wp_ajax_eprolo_delete_tracking authorization

Vuldb Updates
3 weeks 5 days ago
A vulnerability labeled as problematic has been found in EPROLO Dropshipping Plugin up to 2.3.1 on WordPress. This impacts the function wp_ajax_eprolo_delete_tracking of the component AJAX Endpoint. Such manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2025-12133. The attack can be launched remotely. No exploit exists.
vuldb.com

Managed ad