Connector/C++ aborts client process on server session-tracking packet via std::stoi
🔹 Severity: Medium
🔹 Weakness: Uncontrolled Resource Consumption
🔹 Reported To: MariaDB
🔹 Reported By: fg0x0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 11:40am (UTC)
🐞 Source: HackerOne
A flaw was discovered in the Connector/C++ driver where the QueryProtocol::handleStateChange function improperly processed session-tracking packets from a server. The code attempted to parse a session variable name as an integer using std::stoi, which caused an std::invalid_argument exception to be thrown. This exception type was not caught by the driver's error handling or by standard application exception…
👉 Read full report
🔹 Severity: Medium
🔹 Weakness: Uncontrolled Resource Consumption
🔹 Reported To: MariaDB
🔹 Reported By: fg0x0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 11:40am (UTC)
🐞 Source: HackerOne
A flaw was discovered in the Connector/C++ driver where the QueryProtocol::handleStateChange function improperly processed session-tracking packets from a server. The code attempted to parse a session variable name as an integer using std::stoi, which caused an std::invalid_argument exception to be thrown. This exception type was not caught by the driver's error handling or by standard application exception…
👉 Read full report
Connector/C++ ignores allowMultiQueries and injects savepoint names into SQL
🔹 Severity: Medium
🔹 Weakness: SQL Injection
🔹 Reported To: MariaDB
🔹 Reported By: fg0x0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 11:40am (UTC)
🐞 Source: HackerOne
Connector/C++ contained two SQL injection vulnerabilities in statement building. The driver ignored the allowMultiQueries configuration setting and passed a hardcoded flag to the database connection function, which caused stacked statements to be accepted on every connection regardless of the configuration. Additionally, savepoint names were concatenated directly into SQL statements without quoting or validation…
👉 Read full report
🔹 Severity: Medium
🔹 Weakness: SQL Injection
🔹 Reported To: MariaDB
🔹 Reported By: fg0x0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 11:40am (UTC)
🐞 Source: HackerOne
Connector/C++ contained two SQL injection vulnerabilities in statement building. The driver ignored the allowMultiQueries configuration setting and passed a hardcoded flag to the database connection function, which caused stacked statements to be accepted on every connection regardless of the configuration. Additionally, savepoint names were concatenated directly into SQL statements without quoting or validation…
👉 Read full report
Stack buffer overflow in 9 of 10 Connector/ODBC catalog functions via unbounded name
🔹 Severity: Medium
🔹 Weakness: Stack Overflow
🔹 Reported To: MariaDB
🔹 Reported By: fg0x0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 12:34pm (UTC)
🐞 Source: HackerOne
A stack buffer overflow vulnerability was discovered in nine of ten catalog functions in a database connector driver. The affected functions failed to validate the length of application-supplied identifiers before escaping them into a fixed-size stack buffer. Identifiers longer than 256 bytes could overflow the 513-byte buffer with attacker-controlled data. The overflow occurred during query string assembly before…
👉 Read full report
🔹 Severity: Medium
🔹 Weakness: Stack Overflow
🔹 Reported To: MariaDB
🔹 Reported By: fg0x0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 12:34pm (UTC)
🐞 Source: HackerOne
A stack buffer overflow vulnerability was discovered in nine of ten catalog functions in a database connector driver. The affected functions failed to validate the length of application-supplied identifiers before escaping them into a fixed-size stack buffer. Identifiers longer than 256 bytes could overflow the 513-byte buffer with attacker-controlled data. The overflow occurred during query string assembly before…
👉 Read full report
Connector/ODBC SQLGetDescRec treats descriptor handle as statement handle, heap OOB write on every call
🔹 Severity: Medium
🔹 Weakness: Type Confusion
🔹 Reported To: MariaDB
🔹 Reported By: fg0x0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 12:35pm (UTC)
🐞 Source: HackerOne
A heap buffer overflow vulnerability was discovered in the ODBC driver's SQLGetDescRec and SQLGetDescRecW functions. These functions incorrectly used a statement handle macro on a descriptor handle, causing writes 13 bytes past the end of a 720-byte descriptor allocation. On standard builds, this memory corruption was sufficient to trigger heap consistency checks and crash the process. Additionally, a portion of…
👉 Read full report
🔹 Severity: Medium
🔹 Weakness: Type Confusion
🔹 Reported To: MariaDB
🔹 Reported By: fg0x0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 12:35pm (UTC)
🐞 Source: HackerOne
A heap buffer overflow vulnerability was discovered in the ODBC driver's SQLGetDescRec and SQLGetDescRecW functions. These functions incorrectly used a statement handle macro on a descriptor handle, causing writes 13 bytes past the end of a 720-byte descriptor allocation. On standard builds, this memory corruption was sufficient to trigger heap consistency checks and crash the process. Additionally, a portion of…
👉 Read full report
Exposure of Sensitive Earthdata User and Internal Employee Credentials via Publicly Indexed Infostealer Logs
🔹 Severity: Critical
🔹 Reported To: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
🔹 Reported By: Piyush69
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026
🐞 Source: Bugcrowd
👉 Read full report
🔹 Severity: Critical
🔹 Reported To: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
🔹 Reported By: Piyush69
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026
🐞 Source: Bugcrowd
👉 Read full report
Content Spoofing via Broken Link Hijacking on science.nasa.gov (@islivingston)
🔹 Severity: Low
🔹 Reported To: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
🔹 Reported By: AbdulRahman-lx
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026
🐞 Source: Bugcrowd
👉 Read full report
🔹 Severity: Low
🔹 Reported To: National Aeronautics and Space Administration (NASA) - Vulnerability Disclosure Program
🔹 Reported By: AbdulRahman-lx
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026
🐞 Source: Bugcrowd
👉 Read full report
Connector/ODBC injects unquoted column names into positioned DELETE and UPDATE via MADB_DynStrGetWhere
🔹 Severity: Medium
🔹 Weakness: SQL Injection
🔹 Reported To: MariaDB
🔹 Reported By: fg0x0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 12:35pm (UTC)
🐞 Source: HackerOne
A SQL injection vulnerability was discovered in the ODBC connector where unquoted column names were injected into positioned DELETE and UPDATE statements. The column values were properly escaped, but the column names were appended directly without any quoting or escaping. This allowed an attacker who could control a column or table name to execute arbitrary SQL on the application's connection with its privileges…
👉 Read full report
🔹 Severity: Medium
🔹 Weakness: SQL Injection
🔹 Reported To: MariaDB
🔹 Reported By: fg0x0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 12:35pm (UTC)
🐞 Source: HackerOne
A SQL injection vulnerability was discovered in the ODBC connector where unquoted column names were injected into positioned DELETE and UPDATE statements. The column values were properly escaped, but the column names were appended directly without any quoting or escaping. This allowed an attacker who could control a column or table name to execute arbitrary SQL on the application's connection with its privileges…
👉 Read full report
r2dbc-mariadb: server message accepted with no command in flight desynchronises the connection and serves one user's rows to another
🔹 Severity: Medium
🔹 Weakness: Information Disclosure
🔹 Reported To: MariaDB
🔹 Reported By: fg0x0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 12:35pm (UTC)
🐞 Source: HackerOne
A vulnerability was discovered in an open-source database connector library that caused desynchronization of request and response messages on database connections. When a packet arrived from the server while no command was outstanding, the driver buffered it and served it to the next unrelated statement without validating any correlation between requests and responses. This allowed an attacker positioned on the…
👉 Read full report
🔹 Severity: Medium
🔹 Weakness: Information Disclosure
🔹 Reported To: MariaDB
🔹 Reported By: fg0x0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 12:35pm (UTC)
🐞 Source: HackerOne
A vulnerability was discovered in an open-source database connector library that caused desynchronization of request and response messages on database connections. When a packet arrived from the server while no command was outstanding, the driver buffered it and served it to the next unrelated statement without validating any correlation between requests and responses. This allowed an attacker positioned on the…
👉 Read full report
Connector/ODBC: SqlwcsOctetLen sizes UTF-16 with a byte-oriented helper, reading past the caller's buffer and sending client memory to the server
🔹 Severity: Medium
🔹 Weakness: Out-of-bounds Read
🔹 Reported To: MariaDB
🔹 Reported By: fg0x0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 12:36pm (UTC)
🐞 Source: HackerOne
A buffer over-read vulnerability was identified in a database connector library's wide character string handling function. The function incorrectly sized UTF-16 strings by using a byte-oriented helper that inspected only the low byte of each code unit, causing the cursor to advance past the intended buffer boundary. This resulted in uninitialized memory being read and transmitted to the database server as part of…
👉 Read full report
🔹 Severity: Medium
🔹 Weakness: Out-of-bounds Read
🔹 Reported To: MariaDB
🔹 Reported By: fg0x0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 12:36pm (UTC)
🐞 Source: HackerOne
A buffer over-read vulnerability was identified in a database connector library's wide character string handling function. The function incorrectly sized UTF-16 strings by using a byte-oriented helper that inspected only the low byte of each code unit, causing the cursor to advance past the intended buffer boundary. This resulted in uninitialized memory being read and transmitted to the database server as part of…
👉 Read full report
Connector/ODBC: MADB_Stmt::ArrayOffset is not reset when an exception unwinds out of MADB_StmtExecute, so the next paramset reads out of bounds
🔹 Severity: Medium
🔹 Weakness: Out-of-bounds Read
🔹 Reported To: MariaDB
🔹 Reported By: fg0x0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 12:36pm (UTC)
🐞 Source: HackerOne
A vulnerability was identified in the Connector/ODBC library where an exception during parameter-array execute operations left the ArrayOffset variable in a stale state. When a server-reported error interrupted a parameter array, the ArrayOffset was not reset, causing the next paramset operation on the same statement handle to read from an incorrect memory location. This resulted in out-of-bounds reads that could…
👉 Read full report
🔹 Severity: Medium
🔹 Weakness: Out-of-bounds Read
🔹 Reported To: MariaDB
🔹 Reported By: fg0x0
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 12:36pm (UTC)
🐞 Source: HackerOne
A vulnerability was identified in the Connector/ODBC library where an exception during parameter-array execute operations left the ArrayOffset variable in a stale state. When a server-reported error interrupted a parameter array, the ArrayOffset was not reset, causing the next paramset operation on the same statement handle to read from an incorrect memory location. This resulted in out-of-bounds reads that could…
👉 Read full report
Connector/C Out-of-bounds read from unterminated GSSAPI SPN in `parse_server_packet()`
🔹 Severity: No Rating
🔹 Weakness: Out-of-bounds Read
🔹 Reported To: MariaDB
🔹 Reported By: mschorm
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 5:31pm (UTC)
🐞 Source: HackerOne
An out-of-bounds read vulnerability was found in the GSSAPI authentication client plugin. The vulnerable code used unsafe string copying functions without proper null termination when parsing server-supplied service principal names. When a server sent a service principal name of 256 or more bytes without a null terminator, the buffer was left unterminated. Subsequent string length operations read past the allocated…
👉 Read full report
🔹 Severity: No Rating
🔹 Weakness: Out-of-bounds Read
🔹 Reported To: MariaDB
🔹 Reported By: mschorm
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 5:31pm (UTC)
🐞 Source: HackerOne
An out-of-bounds read vulnerability was found in the GSSAPI authentication client plugin. The vulnerable code used unsafe string copying functions without proper null termination when parsing server-supplied service principal names. When a server sent a service principal name of 256 or more bytes without a null terminator, the buffer was left unterminated. Subsequent string length operations read past the allocated…
👉 Read full report
Connector/C TLS auth-switch bypass exposes plaintext password on hostname verification failure
🔹 Severity: No Rating
🔹 Weakness: Improper Certificate Validation
🔹 Reported To: MariaDB
🔹 Reported By: mschorm
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 5:31pm (UTC)
🐞 Source: HackerOne
A logic flaw was identified in the TLS authentication verification of a database connector library. The auth-switch guard used an insufficient bitwise check that allowed hostname verification failures to bypass security controls. When a server requested a non-hashing authentication plugin after initial connection, clients with hostname verification enabled could be forced to send their database password in…
👉 Read full report
🔹 Severity: No Rating
🔹 Weakness: Improper Certificate Validation
🔹 Reported To: MariaDB
🔹 Reported By: mschorm
🔹 State: 🟢 Resolved
🔹 Disclosed: November 4, 2026, 5:31pm (UTC)
🐞 Source: HackerOne
A logic flaw was identified in the TLS authentication verification of a database connector library. The auth-switch guard used an insufficient bitwise check that allowed hostname verification failures to bypass security controls. When a server requested a non-hashing authentication plugin after initial connection, clients with hostname verification enabled could be forced to send their database password in…
👉 Read full report
CPU-based Denial of Service in translation-finder via O(N²) per-result wildcard mask matching
🔹 Severity: Medium
🔹 Weakness: Uncontrolled Resource Consumption
🔹 Reported To: Weblate
🔹 Reported By: robin-sabhaya
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2026, 9:51am (UTC)
🐞 Source: HackerOne
A CPU-based denial of service vulnerability was identified in a translation file discovery library. The vulnerability resulted from inefficient algorithmic complexity in wildcard mask matching operations. When processing directories or archives containing multiple files sharing the same suffix, the discovery function performed on the order of N squared fnmatch operations. This was caused by bucket-scanning logic…
👉 Read full report
🔹 Severity: Medium
🔹 Weakness: Uncontrolled Resource Consumption
🔹 Reported To: Weblate
🔹 Reported By: robin-sabhaya
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2026, 9:51am (UTC)
🐞 Source: HackerOne
A CPU-based denial of service vulnerability was identified in a translation file discovery library. The vulnerability resulted from inefficient algorithmic complexity in wildcard mask matching operations. When processing directories or archives containing multiple files sharing the same suffix, the discovery function performed on the order of N squared fnmatch operations. This was caused by bucket-scanning logic…
👉 Read full report
Unauthenticated private CSV export of Meetup organizer PII via broken authz check in WordCamp Reports
🔹 Severity: High
🔹 Weakness: Improper Access Control - Generic
🔹 Reported To: WordPress
🔹 Reported By: 0xbs0d27
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2026, 1:59pm (UTC)
🐞 Source: HackerOne
A broken authorization check in a WordCamp plugin allowed unauthenticated attackers to export a private CSV file containing organizer personally identifiable information. The vulnerability was caused by an inverted logic operator in the security gate that verified nonce validity and user capabilities, resulting in the protection being bypassed for users without authentication or valid nonces. The exported data…
👉 Read full report
🔹 Severity: High
🔹 Weakness: Improper Access Control - Generic
🔹 Reported To: WordPress
🔹 Reported By: 0xbs0d27
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2026, 1:59pm (UTC)
🐞 Source: HackerOne
A broken authorization check in a WordCamp plugin allowed unauthenticated attackers to export a private CSV file containing organizer personally identifiable information. The vulnerability was caused by an inverted logic operator in the security gate that verified nonce validity and user capabilities, resulting in the protection being bypassed for users without authentication or valid nonces. The exported data…
👉 Read full report
Instamojo CampTix: fail-open MAC + webhook Credit without binding payment to order
🔹 Severity: High
🔹 Weakness: Improper Access Control - Generic
🔹 Reported To: WordPress
🔹 Reported By: 0xbs0d27
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2026, 2:18pm (UTC)
🐞 Source: HackerOne
A payment binding vulnerability was identified in the Instamojo payment gateway addon for a ticketing system. The gateway failed to verify and bind Instamojo payments to specific ticket orders. Three attack paths were present: a draft order could be marked pending using only a payment token without Instamojo API verification, invalid webhook signatures were accepted and still marked orders as pending instead of…
👉 Read full report
🔹 Severity: High
🔹 Weakness: Improper Access Control - Generic
🔹 Reported To: WordPress
🔹 Reported By: 0xbs0d27
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2026, 2:18pm (UTC)
🐞 Source: HackerOne
A payment binding vulnerability was identified in the Instamojo payment gateway addon for a ticketing system. The gateway failed to verify and bind Instamojo payments to specific ticket orders. Three attack paths were present: a draft order could be marked pending using only a payment token without Instamojo API verification, invalid webhook signatures were accepted and still marked orders as pending instead of…
👉 Read full report
wordpress.org Rosetta: invite stores unvalidated role — Editor can assign site Administrator despite editable_roles
🔹 Severity: High
🔹 Weakness: Improper Access Control - Generic
🔹 Reported To: WordPress
🔹 Reported By: 0xbs0d27
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2026, 2:18pm (UTC)
🐞 Source: HackerOne
A privilege escalation vulnerability was found in a wordpress.org custom mu-plugin used on locale team sites. The vulnerability allowed authenticated editors to assign the administrator role to users during the account invitation process, despite administrator being explicitly removed from the editable roles list. The role parameter was accepted directly from user input without validation against the permitted…
👉 Read full report
🔹 Severity: High
🔹 Weakness: Improper Access Control - Generic
🔹 Reported To: WordPress
🔹 Reported By: 0xbs0d27
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2026, 2:18pm (UTC)
🐞 Source: HackerOne
A privilege escalation vulnerability was found in a wordpress.org custom mu-plugin used on locale team sites. The vulnerability allowed authenticated editors to assign the administrator role to users during the account invitation process, despite administrator being explicitly removed from the editable roles list. The role parameter was accepted directly from user input without validation against the permitted…
👉 Read full report
WordCamp Meta gpre: password-protected event RSVP list readable without password via /gpre/v1/.../rsvp-responses
🔹 Severity: Medium
🔹 Weakness: Improper Access Control - Generic
🔹 Reported To: WordPress
🔹 Reported By: 0xbs0d27
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2026, 2:18pm (UTC)
🐞 Source: HackerOne
A password protection bypass was identified in a REST API wrapper for recurring events. The wrapper endpoint exposed RSVP attendee roster data without verifying password authentication, while the core API correctly enforced password gates. Unauthenticated requests could retrieve attendee names, user IDs, profile information, and comment details for password-protected events. The vulnerability was caused by the…
👉 Read full report
🔹 Severity: Medium
🔹 Weakness: Improper Access Control - Generic
🔹 Reported To: WordPress
🔹 Reported By: 0xbs0d27
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2026, 2:18pm (UTC)
🐞 Source: HackerOne
A password protection bypass was identified in a REST API wrapper for recurring events. The wrapper endpoint exposed RSVP attendee roster data without verifying password authentication, while the core API correctly enforced password gates. Unauthenticated requests could retrieve attendee names, user IDs, profile information, and comment details for password-protected events. The vulnerability was caused by the…
👉 Read full report
Unauthenticated Disclosure of Private, Draft, and Password-Protected Post Content via Core Read-Permission Bypass in SCF Reference Fields
🔹 Severity: High
🔹 Weakness: Information Disclosure
🔹 Reported To: WordPress
🔹 Reported By: 0x200notfound
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2026, 7:56pm (UTC)
🐞 Source: HackerOne
A vulnerability was discovered in a WordPress plugin's reference field functionality that allowed unauthenticated users to access non-public post content through a permission bypass. The issue existed in the post retrieval function, which did not enforce read permission checks when retrieving posts with any status, including private, draft, and password-protected posts. Sensitive post data including full content…
👉 Read full report
🔹 Severity: High
🔹 Weakness: Information Disclosure
🔹 Reported To: WordPress
🔹 Reported By: 0x200notfound
🔹 State: 🟢 Resolved
🔹 Disclosed: November 5, 2026, 7:56pm (UTC)
🐞 Source: HackerOne
A vulnerability was discovered in a WordPress plugin's reference field functionality that allowed unauthenticated users to access non-public post content through a permission bypass. The issue existed in the post retrieval function, which did not enforce read permission checks when retrieving posts with any status, including private, draft, and password-protected posts. Sensitive post data including full content…
👉 Read full report
Blind SSRF in `/api/img` on blua.bupa.com.au — internal host discovery & port scanning of `*.internal.bupa.com.au`
🔹 Severity: Medium
🔹 Reported To: Bupa Australia Vulnerability Disclosure Engagement
🔹 Reported By: x3c
🔹 State: 🟢 Resolved
🔹 Disclosed: November 6, 2026
🐞 Source: Bugcrowd
👉 Read full report
🔹 Severity: Medium
🔹 Reported To: Bupa Australia Vulnerability Disclosure Engagement
🔹 Reported By: x3c
🔹 State: 🟢 Resolved
🔹 Disclosed: November 6, 2026
🐞 Source: Bugcrowd
👉 Read full report
1-click Remote Code Execution via Link Embed
🔹 Severity: Critical
🔹 Reported To: Asana
🔹 Reported By: JayTaelien
🔹 State: 🟢 Resolved
🔹 Disclosed: November 6, 2026
🐞 Source: Bugcrowd
👉 Read full report
🔹 Severity: Critical
🔹 Reported To: Asana
🔹 Reported By: JayTaelien
🔹 State: 🟢 Resolved
🔹 Disclosed: November 6, 2026
🐞 Source: Bugcrowd
👉 Read full report
Unescaped consent-prompt renderer (HTML()) enables concealed-approval OS command injection in strands-agents/tools use_computer — RCE
🔹 Severity: Medium
🔹 Weakness: OS Command Injection
🔹 Reported To: AWS VDP
🔹 Reported By: hope_no_dupe
🔹 State: 🟢 Resolved
🔹 Disclosed: November 6, 2026, 2:33pm (UTC)
🐞 Source: HackerOne
A vulnerability was discovered in an agent tool framework where user consent prompts were rendered without proper escaping. Markup embedded in tool arguments was interpreted rather than displayed, allowing attackers to conceal malicious commands within prompts that appeared benign to operators. When combined with unsanitized command execution sinks in the application focus feature, this enabled arbitrary operating…
👉 Read full report
🔹 Severity: Medium
🔹 Weakness: OS Command Injection
🔹 Reported To: AWS VDP
🔹 Reported By: hope_no_dupe
🔹 State: 🟢 Resolved
🔹 Disclosed: November 6, 2026, 2:33pm (UTC)
🐞 Source: HackerOne
A vulnerability was discovered in an agent tool framework where user consent prompts were rendered without proper escaping. Markup embedded in tool arguments was interpreted rather than displayed, allowing attackers to conceal malicious commands within prompts that appeared benign to operators. When combined with unsanitized command execution sinks in the application focus feature, this enabled arbitrary operating…
👉 Read full report