A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed. The researchers reported the flaw through OpenAI's bug bounty program on October 18, and OpenAI fixed it eight days later and rated it... Weiterlesen: A Shared ChatGPT Link Could Run Attacker Code in Your Session and Rea…
Intelligence View
⚡ tsecurity.de Intelligence
A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — free The top security news daily · unsubscribe anytime
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
No reader ratings yet
Was this page helpful?
0
Powered by tsecurity.de
tsecurity.de Hub
Related story clusters & sources (vector AI)
9 sources
CVE-2026-109150 | WP PageNavi Style Plugin up to 1.4 on WordPress cross site scripting (EUVD-2026-117357)
8 more sources
VVulDB Updates3 hours agoCVE-2026-107787 | CatFolders Plugin up to 2.5.6 on WordPress Folder Maintenance Action authorization (EUVD-2026-117356) VVulDB Updates3 hours agoCVE-2026-107786 | CatFolders Plugin up to 2.5.6 on WordPress sql injection (EUVD-2026-117355) VVulDB Updates3 hours agoCVE-2026-107775 | Dokan Plugin up to 5.3.2 on WordPress authorization (EUVD-2026-117354) VVulDB Updates3 hours agoCVE-2026-107774 | Dokan Plugin up to 5.3.2 on WordPress Contact Form authentication spoofing (EUVD-2026-117353) VVulDB Updates4 hours agoCVE-2026-73996 | Masteriyo Plugin up to 2.3.2 on WordPress unrestricted upload (EUVD-2026-60810) VVulDB Updates4 hours agoCVE-2026-62041 | Ashok Dudhat Event Manager Plugin up to 3.4.1 on WordPress authorization (EUVD-2026-95728)
+2
7 sources
CVE-2022-4052 | Student Attendance Management System /Admin/createClass.php Id sql injection (EUVD-2022-51429)
6 more sources
VVulDB Updates3 hours agoCVE-2022-4053 | Student Attendance Management System createClass.php className cross site scripting (EUVD-2022-51430) VVulDB Updates2 hours agoCVE-2022-4088 | rickxy Stock Management System /pages/processlogin.php user/password sql injection (EUVD-2022-51459) VVulDB Updates2 hours agoCVE-2022-4089 | rickxy Stock Management System /pages/processlogin.php user cross site scripting (EUVD-2022-51460) VVulDB Updates5 hours agoCVE-2025-64070 | SourceCodester Student Grades Management System 1.0 Add New Subject Description cross site scripting VVulDB Updates5 hours agoCVE-2025-65881 | SourceCodester Zoo Management System 1.0 /classes/Login.php cross site scripting VVulDB Updates5 hours agoCVE-2025-65215 | SourceCodester Web-based Pharmacy Product Management System 1.0 add-supplier.php Name cross site scripting
5 sources
CVE-2023-53729 | Linux Kernel up to 6.5.3 soc qmi_encdec out-of-bounds (Nessus ID 376201 / WID-SEC-2025-2394)
4 more sources
VVulDB Updates2 hours agoCVE-2026-86561 | Red Hat Enterprise Linux lib vhost memory corruption (Nessus ID 376199) VVulDB Updates2 hours agoCVE-2026-86562 | Red Hat Enterprise Linux vhost toctou (Nessus ID 376199) BBSI Warn- und Informationsd…2 hours ago[NEU] [hoch] Linux Kernel: Schwachstelle ermöglicht nicht spezifizierten Angriff VVulDB Updates5 hours agoCVE-2026-80948 | Linux Kernel up to 6.18.49/7.2.3 iwlwifi iwl_op_mode_dvm_start nvm_data/eeprom_blob memory leak (WID-SEC-2026-3321)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/en/4310480/cyber-security-bulletins/a-shared-chatgpt-link-could-run-attacker-code-in-your-session-and-read-private-chats/