CVE-2026-105755

The vLLM inference and serving engine (prior to version 0.30.0 ) is vulnerable to a cross-request integrity break in its flash late-interaction scoring at the /score and /rerank endpoints. The root cause is that the system derives the query_key value from the caller-controlled X-Request-Id header...

CVE-2026-105755 vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, flash late-interaction scoring at the /score and /rerank endpoints derives each worker's querykey value from the caller-controlled X-Request-Id header. A concurrent request that reuses a victim's identifier can...

CVE-2026-105755 vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, flash late-interaction scoring at the /score and /rerank endpoints derives each worker's querykey value from the caller-controlled X-Request-Id header. A concurrent request that reuses a victim's identifier can...

CVE-2026-101893

Newell Brands DYMO ID 1.5.1.71 parses job files using XmlDocument.Load without disabling DTD processing. The PC Job Files view automatically parses every recognized job file extension on folder browse. A crafted file on any browsed network share can perform SSRF, capture NTLMv2 credentials, read...

CVE-2026-102262

Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attacker could store a job file alongside malicious modules / DLL that sets the process working directory to the job file's folder when a victim clicks on the file, resulting in code...

CVE-2026-102262

Newell Brands DYMO ID version 1.5.1.71 is vulnerable to a path traversal issue due to improper spheres of control. The software resolves its plugin Modules directory relative to the process working directory. An attacker can place a malicious job file and DLLs in a directory, then set the process...

EUVD-2026-92795

Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attacker could store a job file alongside malicious modules / DLL that sets the process working directory to the job file's folder when a victim clicks on the file, resulting in code...

CVE-2026-102262 Newell Brands DYMO ID parent directory open to path traversal through improper spheres of control

Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attacker could store a job file alongside malicious modules / DLL that sets the process working directory to the job file's folder when a victim clicks on the file, resulting in code...

CVE-2026-101893 Newell Brands DYMO ID document parsing failing file type extension authentication check

Newell Brands DYMO ID 1.5.1.71 parses job files using XmlDocument.Load without disabling DTD processing. The PC Job Files view automatically parses every recognized job file extension on folder browse. A crafted file on any browsed network share can perform SSRF, capture NTLMv2 credentials, read...

CVE-2026-101893

Newell Brands DYMO ID version 1.5.1.71 is vulnerable to an XML External Entity (XXE) injection flaw because it uses XmlDocument.Load() without disabling DTD processing. The PC Job Files view automatically parses recognized job file extensions during a folder browse. An attacker can exploit this b...

EUVD-2026-92794

Newell Brands DYMO ID 1.5.1.71 parses job files using XmlDocument.Load without disabling DTD processing. The PC Job Files view automatically parses every recognized job file extension on folder browse. A crafted file on any browsed network share can perform SSRF, capture NTLMv2 credentials, read...

EUVD-2026-92710

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-share-link RPC retrieves a caller-selected share-link ID and verifies only that the caller can edit the parent file. It does not verify that the caller created the share link or has owner or administrator...

CVE-2021-42670

CVE-2021-42670 CVE-2021-42670 - Vulnérabilité d'injection SQL dans le système de portail en ligne des ingénieurs. Description technique : Une vulnérabilité d'injection SQL existe dans le portail en ligne des ingénieurs. Un attaquant peut exploiter le paramètre vulnérable "id" dans la page web...

gitlab-cve-2020-10977

GitLab CVE2020-10977 Introduction Ce script permet une exécution de code à distance sur GitLab Community Edition CE et Enterprise Edition EE. La CVE est une lecture arbitraire de fichier qui vous permet d'extraire le secretkeybase de Rails en téléchargeant le fichier secrets.yaml de GitLab. Ce qu...

CVE-2024-23747

CVE-2024-23747 Moderna Sistemas ModernaNet Hospital Management System 2024 подвержена уязвимости небезопасной прямой ссылки на объект Insecure Direct Object Reference, IDOR. PoC Эта уязвимость заключается в том, как система обрабатывает доступ к пользовательским данным через URL-адрес...

CVE-2023-2986

Preuve de concept originale pour CVE-2023-2986 Preuve de concept pour la vulnérabilité CVE-2023-2986 dans le plugin 'Abandoned Cart Lite for WooCommerce' pour WordPress Détails connexes Lien NVD : https://nvd.nist.gov/vuln/detail/CVE-2023-2986 Source du plugin :...

CVE-2023-0264

Preuve de concept pour CVE-2023-0264 Vulnérabilité Keycloak permettant le détournement de session pendant le flux de code d'autorisation Voir https://github.com/advisories/GHSA-9g98-5mj6-f9mv Prérequis Docker curl jq python3 ou un autre outil pour servir des fichiers statiques sur HTTP Étapes pou...

CVE-2024-34226

Système de gestion des visiteurs 1.0 Soumis par : Kha Do Vulnérabilité Injection SQL Description La vulnérabilité d'injection SQL dans /php-sqlite-vms/?page=managevisitor&id=1 dans SourceCodester Système de gestion des visiteurs 1.0 permet aux attaquants d'exécuter des commandes SQL arbitraires v...

CVE-2020-17530

Qu'est-ce que c'est Ceci est un projet de test simple pour S2-061 qui peut être utilisé pour analyser les détails de cette vulnérabilité. Comment utiliser Étape 1 : Utilisez IDEA pour importer ce projet Étape 2 : Configurez le serveur Tomcat Étape 3 : Accédez via le navigateur à...

CVE-2024-41640

Description AML Surety Eco jusqu'à la version 3.5 est affecté par un cross-site scripting réfléchi non authentifié. L'application web cible gère les erreurs sur une page d'erreur dédiée accessible sans aucune authentification contenant un paramètre URL qui ne nettoie pas les entrées utilisateur. ...