Featured Advisory

Broken Hill: A Productionized Greedy Coordinate Gradient Attack Tool for Use Against Large Language Models

Walkthrough the GCG attack at a high level and be introduced to Broken Hill – Bishop Fox’s newly-released tool that can perform the GCG attack against a variety of popular LLMs.
Read More
Bishop Fox Blog Tools Broken Hill Featured
Gauge showing high severity reading. CATIE Web - Version 20.04.0.
Advisory

May 14, 2018

SolarWinds Serv-U Managed File Transfer – Insufficient Session ID Entropy

By Baker Hamilton

Gauge reading medium severity. Mautic Version <=3.2.2 Advisory.
Advisory

May 11, 2018

SolarWinds Serv-U Managed File Transfer – Denial of Service

By Baker Hamilton

Gauge showing high severity reading. CATIE Web - Version 20.04.0.
Advisory

Oct 10, 2017

Windows DNS Client – Memory Corruption Vulnerabilities

By Nick Freeman

Gauge reading medium severity. Mautic Version <=3.2.2 Advisory.
Advisory

Jun 23, 2017

atmail 7 Stored XSS Vulnerability

By Zach Julian

Gauge reading medium severity. Mautic Version <=3.2.2 Advisory.
Advisory

May 12, 2017

SolarWinds Log & Event Manager - Improper Access Control

By Baker Hamilton

Gauge showing high severity reading. CATIE Web - Version 20.04.0.
Advisory

May 12, 2017

SolarWinds Log & Event Manager - Arbitrary Command Injection

By Baker Hamilton

Gauge with medium severity reading for FlowscreenComponents Basepack, Version 3.0.7 Advisory. Mautic Version <=3.2.2 Advisory. eCatcher Desktop, Version 6.6.4 Advisory.
Advisory

Dec 21, 2016

Cisco Jabber Guest Server HTTP URL Redirection Vulnerability

By Jake Miller

Gauge showing high severity reading for a security advisory for EzAdsPro “BlackBox” application.
Advisory

Sep 08, 2016

Accellion Kiteworks Multiple Vulnerabilities

By Shubham Shah

Gauge showing high severity reading for a security advisory for EzAdsPro “BlackBox” application.
Advisory

Apr 08, 2016

OS X Messages (iMessage): XSS & File Disclosure

By Joe DeMesy, Shubham Shah, and Matthew Bryant

Gauge showing high severity reading for a security advisory for EzAdsPro “BlackBox” application.
Advisory

Mar 23, 2016

CA Single Sign-On Unspecified High-Risk Vulnerabilities Advisory

By Mike Brooks

Gauge showing high severity reading for a security advisory for EzAdsPro “BlackBox” application.
Advisory

Aug 27, 2015

Adobe ColdFusion Reflected Cross-Site Scripting Flaw

By Shubham Shah

Gauge showing high severity reading for a security advisory for EzAdsPro “BlackBox” application.
Advisory

Jul 06, 2015

NoScript Bypass

By Matt Bryant

Load More

This site uses cookies to provide you with a great user experience. By continuing to use our website, you consent to the use of cookies. To find out more about the cookies we use, please see our Privacy Policy.