<h3 id="heading-seclinks">seclinks</h3>
<ul>
<li><a target="_blank" href="https://infosecwriteups.com/art-of-hacking-llm-apps-a22cf60a523b">Art of hacking LLM apps. I am Harish SG, a security researcher…</a>
</li>
<li><a target="_blank" href="https://blog.cloudflare.com/how-cloudflare-images-addressed-the-acropalypse-vulnerability/">How Cloudflare Images addressed the aCropalypse vulnerability</a>
</li>
<li><a target="_blank" href="https://blog.coinfabrik.com/delegate-call-error-decoding-langerror/">Delegate call bug in ink!</a>
</li>
<li><a target="_blank" href="https://ventureinsecurity.net/p/ai-security-market-map">Securing AI: state of the market at the beginning of Q3 2023</a>
</li>
<li><a target="_blank" href="https://krebsonsecurity.com/2023/07/top-suspect-in-2015-ashley-madison-hack-committed-suicide-in-2014/">Top Suspect in 2015 Ashley Madison Hack Committed Suicide in 2014</a>
</li>
<li><a target="_blank" href="https://slidingwindow0xff.wordpress.com/2023/07/11/patch-diffing-moveit-transfer-pre-authenticated-sql-injection-vulnerability-cve-2023-34362-part1/">Patch Diffing: MOVEit Transfer Pre-Authenticated SQL Injection Vulnerability (CVE-2023-34362) – Part1</a>
</li>
<li><a target="_blank" href="https://portswigger.net/research/exploiting-xss-in-hidden-inputs-and-meta-tags">Exploiting XSS in hidden inputs and meta tags</a>
</li>
<li><a target="_blank" href="https://jwlss.pw/mathjs/">How we exploited a remote execution vulnerability in math.js</a>
</li>
</ul>
<h3 id="heading-secgit">secgit</h3>
<ul>
<li><a target="_blank" href="https://github.com/curl/trurl">curl/trurl</a>
</li>
<li><a target="_blank" href="https://github.com/invictus-ir/ALFA">invictus-ir/ALFA</a>
</li>
</ul>

### seclinks

* [Art of hacking LLM apps. I am Harish SG, a security researcher…](https://infosecwriteups.com/art-of-hacking-llm-apps-a22cf60a523b)
    
* [How Cloudflare Images addressed the aCropalypse vulnerability](https://blog.cloudflare.com/how-cloudflare-images-addressed-the-acropalypse-vulnerability/)
    
* [Delegate call bug in ink!](https://blog.coinfabrik.com/delegate-call-error-decoding-langerror/)
    
* [Securing AI: state of the market at the beginning of Q3 2023](https://ventureinsecurity.net/p/ai-security-market-map)
    
* [Top Suspect in 2015 Ashley Madison Hack Committed Suicide in 2014](https://krebsonsecurity.com/2023/07/top-suspect-in-2015-ashley-madison-hack-committed-suicide-in-2014/)
    
* [Patch Diffing: MOVEit Transfer Pre-Authenticated SQL Injection Vulnerability (CVE-2023-34362) – Part1](https://slidingwindow0xff.wordpress.com/2023/07/11/patch-diffing-moveit-transfer-pre-authenticated-sql-injection-vulnerability-cve-2023-34362-part1/)
    
* [Exploiting XSS in hidden inputs and meta tags](https://portswigger.net/research/exploiting-xss-in-hidden-inputs-and-meta-tags)
    
* [How we exploited a remote execution vulnerability in math.js](https://jwlss.pw/mathjs/)
    

### secgit

* [curl/trurl](https://github.com/curl/trurl)
    
* [invictus-ir/ALFA](https://github.com/invictus-ir/ALFA)

Spotlight: remote execution vulnerability in math.js, Art of hacking LLM apps, aCropalypse vulnerability

Seclog - #33

Stay informed with Seclog your weekly update on the latest cybersecurity news, threats, and trends.


Stay informed with Seclog - Securify Spotlight: your weekly update on the latest cybersecurity news, threats, and trends.