Unverified50% confidenceFactExact time
User-generated content (UGC) systems typically involve file upload, download, and parsing, and without strict input validation and sandboxing mechanisms they can become an entry point for remote code execution or denial-of-service attacks.
1
Sources
50%
Confidence
Long-term
Relevance
10/21/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedCode, prompts, and output content passing through relay servers can theoretically all be logged by the service provider, creating a risk of data leakage.65% similarVerified间接提示注入可将恶意指令藏入外部数据源（如网页、文档），待代理读取时自动触发攻击64% similarUnverifiedEthereum nodes expose RPC methods such as eth_call, eth_getBalance and eth_sendRawTransaction by default, and clients can send structured requests via HTTP or WebSocket.63% similarUnverified邮件头注入是一种服务端注入漏洞，当Web应用将用户输入未经过滤拼接进邮件头时，攻击者可通过插入CRLF进行攻击63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1082851API
curl https://kongchang.com/api/v1/knowledge/claims/1082851MCP
get_claim(id=1082851)