Researchers managed to steal GitHub OAuth tokens by abusing a command injection vulnerability.
Command injection in Codex and a hidden outbound channel in ChatGPT exposed risks of credential theft and covert data ...
A new variant of the Mirai-based botnet malware Aquabot has been observed actively exploiting CVE-2024-41710, a command injection vulnerability in Mitel SIP phones. The activity was discovered by ...