Agentic-SOC-Simulation

🛡️ Agentic SOC Parallel Simulation ASPS: Autonomous Security Operations Parallel Simulation Center Redefining the Future of Security Operations: Full-Stack SOC Parallel Simulation, Multi-Agent Collaboration, and Data-Driven Autonomous Defense 🇨🇳 中文文档 Chinese Version This project is a cutting-edge...

llm-censorship-steering

LLM Censorship Steering This repository contains code implementation for Steering the CensorShip: Uncovering Representation Vectors for LLM "Thought" Control by Hannah Cyberey and David Evans. We introduce a method that finds "steering vectors" from LLM internals for detecting and controlling the...

dsh-infinite-gen-5

PR 01 任务基准 12 个 development、8 个 holdout，每类分别 3/2。registry.mjs 校验输入 SHA、参考摘要、预算和运行记录，不认证调用者填写的 verdict。 构建：scripts/evals/buildtargets.ps1 -Output ，再执行 node scripts/evals/freeze.mjs 。保留实际 MSVC/C/PE/MAP 摘要。verifytargets.mjs 使用真实静态引擎和原审批下的 Unicorn 核对列出输入的返回/内存写，并保存单例调查恢复的回放证据。这不是原生调试观察、全域证明或自主 VM 恢复。...

vLLM DeepSeek-OCR image processing vulnerable to denial of service

Summary Any vLLM deployment serving a model of the DeepSeek-OCR family — deepseek-ai/DeepSeek-OCR, deepseek-ai/DeepSeek-OCR-2, or baidu/Unlimited-OCR whose UnlimitedOCRForCausalLM subclasses DeepseekOCRForCausalLM — can be killed by a single unauthenticated chat request carrying an ordinary,...

EUVD-2026-110032

vLLM DeepSeek-OCR image processing vulnerable to denial of service...

GHSA-GQ5Q-89C7-VHVX vLLM DeepSeek-OCR image processing vulnerable to denial of service

Summary Any vLLM deployment serving a model of the DeepSeek-OCR family — deepseek-ai/DeepSeek-OCR, deepseek-ai/DeepSeek-OCR-2, or baidu/Unlimited-OCR whose UnlimitedOCRForCausalLM subclasses DeepseekOCRForCausalLM — can be killed by a single unauthenticated chat request carrying an ordinary,...

SUSE CVE-2026-115914

vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR image path allows a remote client that can reach the OpenAI-compatible API to submit a legal image whose normalized pixels sum to zero when that image i...

CVE-2026-115914

vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR image path allows a remote client that can reach the OpenAI-compatible API to submit a legal image whose normalized pixels sum to zero when that image i...

CVE-2026-115914 vLLM DeepSeek-OCR image processing vulnerable to denial of service

vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR image path allows a remote client that can reach the OpenAI-compatible API to submit a legal image whose normalized pixels sum to zero when that image i...

CVE-2026-115914

vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR image path allows a remote client that can reach the OpenAI-compatible API to submit a legal image whose normalized pixels sum to zero when that image i...

CVE-2026-115914

The vLLM inference engine (versions 0.11.1 through 0.32.0) is vulnerable to a denial of service via the DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR image paths. A remote client capable of reaching the OpenAI-compatible API can submit a legal image with normalized pixels summing to zero. When ...

CVE-2026-115914 vLLM DeepSeek-OCR image processing vulnerable to denial of service

vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR, DeepSeek-OCR-2, and Unlimited-OCR image path allows a remote client that can reach the OpenAI-compatible API to submit a legal image whose normalized pixels sum to zero when that image i...

CVE-2026-116368

A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.2. This issue affects some unknown processing of the file packages/client/connection/src/browser-auth.ts of the component Browser Auth. This manipulation causes improper authorization. The attack can be initiated remotely. The vend...

CVE-2026-116367

A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possible to launch the attack remotely. The vendor was contacte...

CVE-2026-116368 DeepSeek Harness Browser Auth browser-auth.ts improper authorization

A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.2. This issue affects some unknown processing of the file packages/client/connection/src/browser-auth.ts of the component Browser Auth. This manipulation causes improper authorization. The attack can be initiated remotely. The vend...

CVE-2026-116368

A vulnerability exists in DeepSeek Harness versions up to 0.2.0-rc.2 within the Browser Auth component. The issue stems from improper processing of the file packages/client/connection/src/browser-auth.ts, leading to improper authorization . This vulnerability can be triggered via a remote attack ...

EUVD-2026-109920

A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.2. This issue affects some unknown processing of the file packages/client/connection/src/browser-auth.ts of the component Browser Auth. This manipulation causes improper authorization. The attack can be initiated remotely. The vend...

CVE-2026-116367

A vulnerability exists in DeepSeek Harness up to version 0.1.0-rc.5 . The flaw specifically affects the createContext function within the file packages/extensions/cordis-host-runner/src/sandbox.ts. Improper handling within this component can lead to a sandbox issue , which may be triggered via a ...

EUVD-2026-109917

A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possible to launch the attack remotely. The vendor was contacte...

CVE-2026-116367 DeepSeek Harness sandbox.ts createContext

A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possible to launch the attack remotely. The vendor was contacte...