CVE-2026-93592

vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by submitting negative token IDs. A single request with a negative token ID triggers a CUDA device-side assertion that...

CVE-2026-93592

vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints. An unauthenticated attacker can send a single request containing a negative token ID , triggering a CUDA device-side assertion that poisons the GPU context and causes all subseq...

CVE-2026-93592 vLLM before 0.28.0 Denial of Service via negative token ID

vLLM versions before 0.28.0 fail to validate the lower bound of token IDs in the /v1/embeddings and /pooling endpoints, allowing unauthenticated attackers to crash the engine by submitting negative token IDs. A single request with a negative token ID triggers a CUDA device-side assertion that...

sandbox

Concave AI 沙盒 安全、快速、不受信任地运行 AI 代码 一个基于 Firecracker 微虚拟机的可自托管代码执行沙盒平台。利用快照预热技术，启动时间低至 200 毫秒内。 关于 Concave 提供安全、隔离的代码执行环境，用于运行不受信任的代码。基于 Firecracker 微虚拟机、gRPC 编排和现代基础设施工具构建。 基于黄金快照的快速虚拟机配置 用于虚拟机生命周期管理的 gRPC 控制面 用于文件传输和实时输出的流式数据面 带身份认证的 HTTP API 网关 用于轻松集成的 Python SDK 仪表盘与文档站点 快速开始 有关完整的部署说明，请参阅...

CallstackSpoofingPOC

Spoofing de pila de llamadas + POC de syscalls indirectas Este proyecto consiste en un dropper simple de autoinyección en C++ centrado en un POC de evasión de EDR. Para implementarlo, he combinado el uso de Windows Thread Pooling para ocultar la pila de llamadas y el uso de indirect syscalls para...

craw

CRAW: Codec Robust Audio Watermarking Source code for CRAW , a robust audio watermarking method built on STFT-magnitude-domain embedding. An encoder embeds a binary message into an audio clip's magnitude spectrogram phase is preserved from the clean signal; a decoder recovers the message under a...

propox

Propox 🛡️🚀 Propox 是一个高性能、安全且可观测的 HTTP/HTTPS 代理，使用 Rust 编写。它旨在处理高吞吐量流量，同时通过高级安全机制主动防御恶意客户端。 ✨ 主要特性 🚀 极致性能 优化并发 ：基于 Tokio 和 Hyper 实现非阻塞 I/O。 无锁状态 ：使用 DashMap 消除热路径上的锁竞争。 连接池 ：复用后端 TCP 连接（Keep-Alive）。 基准测试 ： 标准模式 ：14,000 RPS（每秒请求数）。 基准测试模式 ：28,000 RPS（原始吞吐量）。 🛡️ 主动防御系统 Propox 不仅仅转发流量，它还保护您的后端： 1. 速率限制...

cp30_XXE_partial_fix

c3p0 c3p0 es una librería madura y altamente concurrente de pooling de conexiones JDBC, con soporte para el almacenamiento en caché y la reutilización de PreparedStatements. Está licenciada bajo LGPL v.2.1 o EPL v.1.0, a tu elección. c3p0 ahora se mantiene en github. c3p0 está disponible como...

Linux Distros Unpatched Vulnerability : CVE-2026-90678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QU...

CVE-2025-67733

RESP协议注入概念验证 演示通过Valkey/Redis中的Lua脚本错误消息进行的RESP协议注入漏洞的概念验证。 文件 backend.py Flask后端模拟一个使用共享Valkey连接（连接池）的Web应用程序。 端点： 方法| 端点| 描述 ---|---|--- POST| /api/user/role| 设置用户角色 GET| /api/user/role| 获取用户角色 POST| /api/process| 执行Lua脚本 用法： root@kitploit: python backend.py password 示例 python backend.py...

UBUNTU-CVE-2026-90678

An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QUIC support and configured with a QUIC bind listener, and the affected traffic must reach a backend over HTTP/1.1 using chunked transfer...

CVE-2026-90678

An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QUIC support and configured with a QUIC bind listener, and the affected traffic must reach a backend over HTTP/1.1 using chunked transfer...

CVE-2026-90678

HAProxy 3.3.0 through 3.4.4 and 3.5-dev1 through 3.5-dev5 are affected by an HTTP request smuggling vulnerability in the HTTP/3 (QUIC) multiplexer . When an HTTP/3 request with no Content-Length header is forwarded to an HTTP/1.1 backend using chunked transfer coding on a reused connection, the d...

CVE-2025-29927

CVE-2025-29927 用于 Next.js CVE-2025-29927 的异步 Python 扫描器。使用 aiohttp 和 aiofiles 高效处理大量 URL 列表、检测漏洞并保存结果。具备连接池、缓存和分块处理功能，以实现快速性能。...

Linux Distros Unpatched Vulnerability : CVE-2026-82053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user...

CVE-2026-82053 Improper Session Handling in MongoDB Server LDAP Authorization Integration Leads to Incorrect Role Assignment

A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain configurations. Subsequent authorization queries may execute under an unintended LDAP identity rather than the...

EUVD-2026-72940

A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain configurations. Subsequent authorization queries may execute under an unintended LDAP identity rather than the...

AZL-99795 CVE-2026-80229 affecting package mysql 8.0.46-1

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

EUVD-2026-72167

When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...

curl: CVE-2026-80229: OpenSSL provider use-after-free

Summary When CURLOPTSSLENGINE is set e.g. "default" on OpenSSL 3.x, osslsetprovider line 1791 allocates a per-handle OSSLLIBCTX and stores it in data-state.libctx. During TLS connection setup, SSLCTXnewex line 3750 receives this library context and embeds a pointer to it inside the newly created...