Aggregator

113,000 explicit prompts from AI girlfriend platform exposed, many linked to user IDs

Help Net Security
3 weeks ago

MyLovely.AI, an AI girlfriend platform, suffered a data breach that exposed over 100,000 users. MyLovely.AI allows people to create personalized not safe for work (NSFW) content and engage in real-time conversations with AI-generated companions, often involving highly personal prompts and interactions. According to Have I Been Pwned, the breach exposed email addresses, user-created prompts, links to the resulting AI-generated images, and a limited number of social media profiles, including Discord and X usernames. Based on … More →

The post 113,000 explicit prompts from AI girlfriend platform exposed, many linked to user IDs appeared first on Help Net Security.

Sinisa Markovic

Masjesu botnet targets IoT devices while evading high-profile networks

Security Affairs
3 weeks ago
Masjesu is a stealthy DDoS-for-hire botnet targeting IoT devices, active since 2023 and designed to stay hidden by avoiding high-profile networks. Masjesu is a stealthy botnet active since 2023, advertised as a DDoS-for-hire service. It targets IoT devices like routers and gateways, spanning multiple architectures. Designed for persistence, it executes carefully, avoiding high-profile IP ranges […]
Pierluigi Paganini

CVE-2026-31790 | OpenSSL up to 3.0.19/3.3.6/3.4.4/3.5.5/3.6.1 RSA KEM RSASVE Encapsulation RSA_public_encrypt uninitialized pointer (EUVD-2026-19969 / Nessus ID 305682)

Vuldb Updates
3 weeks ago
A vulnerability was found in OpenSSL up to 3.0.19/3.3.6/3.4.4/3.5.5/3.6.1. It has been declared as problematic. The affected element is the function RSA_public_encrypt of the component RSA KEM RSASVE Encapsulation. Executing a manipulation can lead to uninitialized pointer. This vulnerability is registered as CVE-2026-31790. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.
vuldb.com

CVE-2026-31789 | OpenSSL up to 3.0.19/3.3.6/3.4.4/3.5.5/3.6.1 Hexadecimal Conversion heap-based overflow (EUVD-2026-19968 / Nessus ID 305682)

Vuldb Updates
3 weeks ago
A vulnerability described as critical has been identified in OpenSSL up to 3.0.19/3.3.6/3.4.4/3.5.5/3.6.1. Affected by this issue is some unknown functionality of the component Hexadecimal Conversion Handler. Executing a manipulation can lead to heap-based buffer overflow. This vulnerability is handled as CVE-2026-31789. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.
vuldb.com

CVE-2026-28388 | OpenSSL up to 3.6.1 Delta CRL null pointer dereference (EUVD-2026-19962 / Nessus ID 305682)

Vuldb Updates
3 weeks ago
A vulnerability identified as problematic has been detected in OpenSSL up to 3.6.1. This impacts an unknown function of the component Delta CRL Handler. This manipulation causes null pointer dereference. This vulnerability appears as CVE-2026-28388. The attack may be initiated remotely. There is no available exploit. You should upgrade the affected component.
vuldb.com

CVE-2026-28389 | OpenSSL up to 3.6.1 CMS EnvelopedData Message CMS_decrypt null pointer dereference (EUVD-2026-19965 / Nessus ID 305682)

Vuldb Updates
3 weeks ago
A vulnerability labeled as problematic has been found in OpenSSL up to 3.6.1. Affected is the function CMS_decrypt of the component CMS EnvelopedData Message Handler. Such manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2026-28389. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.
vuldb.com

Managed ad