Featured Advisory

Broken Hill: A Productionized Greedy Coordinate Gradient Attack Tool for Use Against Large Language Models

Walkthrough the GCG attack at a high level and be introduced to Broken Hill – Bishop Fox’s newly-released tool that can perform the GCG attack against a variety of popular LLMs.
Read More
Bishop Fox Blog Tools Broken Hill Featured
Gauge reading critical severity
Advisory

Apr 11, 2019

Greyhound Critical Vulnerabilities - Road Rewards Program

By Priyank Nigam

Gauge showing high severity reading. CATIE Web - Version 20.04.0.
Advisory

Mar 08, 2019

Cantemo Portal Version 3.8.4 - Cross-Site Scripting

By Chris Davis

Gauge reading medium severity. Mautic Version <=3.2.2 Advisory.
Advisory

Feb 21, 2019

Simple – Better Banking (Android) v. 2.45.0 – 2.45.3 - Sensitive Information Disclosure

By Matt Hamilton

Gauge showing high severity reading. CATIE Web - Version 20.04.0.
Advisory

Feb 19, 2019

Amtrak Mobile APIs - Multiple Vulnerabilities

By Priyank Nigam

Gauge reading critical severity
Advisory

Feb 04, 2019

OpenMRS - Insecure Object Deserialization

By Nicolas Serra

Gauge reading critical severity
Advisory

Jan 15, 2019

Silverpeas 5.15 To 6.0.2: Path Traversal

By Bastien Faure

Gauge showing high severity reading. CATIE Web - Version 20.04.0.
Advisory

Nov 30, 2018

PhpSpreadsheet Versions<=1.5.0 - XXE injection

By Alex Leahu

Gauge showing high severity reading. CATIE Web - Version 20.04.0.
Advisory

Oct 30, 2018

YunoHost 2.7.2 to 2.7.14 - Multiple Vulnerabilities

By Florian Nivette

Gauge showing high severity reading. CATIE Web - Version 20.04.0.
Advisory

Oct 19, 2018

Eaton UPS 9PX 8000 SP - Multiple Vulnerabilities

By Kelly Albrink

Gauge reading critical severity
Advisory

Oct 16, 2018

SV3C L-Series HD Camera – Multiple Vulnerabilities

By Jefferino Siqueria

Gauge reading critical severity
Advisory

Sep 17, 2018

Subsonic 6.1.1 - Multiple Vulnerabilities

By Florian Nivette

Gauge reading medium severity. Mautic Version <=3.2.2 Advisory.
Advisory

Sep 17, 2018

Wallabag 2.2.3 to 2.3.2 - Stored Cross-Site Scripting

By Florian Nivette

Load More

This site uses cookies to provide you with a great user experience. By continuing to use our website, you consent to the use of cookies. To find out more about the cookies we use, please see our Privacy Policy.