5748 matches found
vLLM 代码问题漏洞
vLLM is a vLLM open source high throughput and memory efficient inference and service engine for LLM. A code issue vulnerability exists in vLLM that stems from insufficient restriction of the target host for user-supplied URLs in the loadfromurl and loadfromurlasync methods of the MediaConnector...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986406)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986406 advisory. In the Linux kernel, the following vulnerability has been resolved: swiotlb: fix info leak with DMAFROMDEVICE The problem I'm addressing was discovered by the LTP te...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986649)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986649 advisory. In the Linux kernel, the following vulnerability has been resolved: driver: base: fix UAF when driverattach failed When driverattachdrv %NASLMINLEVEL 80900 C Tenabl...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986477)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986477 advisory. In the Linux kernel, the following vulnerability has been resolved: swiotlb: fix info leak with DMAFROMDEVICE The problem I'm addressing was discovered by the LTP te...
CVE-2025-11330
The CVE describes a SQL injection in PHPGurukul Beauty Parlour Management System 1.1, caused by unsafely handling the fromdate/todate parameters in /admin/sales-reports-detail.php. This can be exploited remotely and the exploit has been disclosed. Connected sources corroborate a lack of input val...
PT-2025-40887
Name of the Vulnerable Software and Affected Versions PHPGurukul Beauty Parlour Management System version 1.1 Description A flaw exists in PHPGurukul Beauty Parlour Management System version 1.1 that allows for SQL injection. The issue is located in the /admin/sales-reports-detail.php file,...
Agentic Misalignment: How LLMs Could Be Insider Threats
We stress-tested 16 leading models from multiple developers in hypothetical corporate environments to identify potentially risky agentic behaviors before they cause real harm. In the scenarios, we allowed models to autonomously send emails and access sensitive information. They were assigned only...
RockyLinux 10 : thunderbird (RLSA-2025:8196)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:8196 advisory. thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link CVE-2025-3909 thunderbird: Sender Spoofing via Malformed From Header in...
EUVD-2025-14938
Malicious code in bioql PyPI...
EUVD-2025-29516
Malicious code in bioql PyPI...
EUVD-2024-0184
Malicious code in bioql PyPI...
EUVD-2025-22438
Malicious code in bioql PyPI...
EUVD-2024-21691
Malicious code in bioql PyPI...
EUVD-2025-31334
Malicious code in bioql PyPI...
EUVD-2024-20231
Malicious code in bioql PyPI...
EUVD-2024-53516
Malicious code in bioql PyPI...
EUVD-2025-24742
Malicious code in bioql PyPI...
EUVD-2025-24984
Malicious code in bioql PyPI...