2200 matches found
CVE-2026-105775 vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function convssmforward of the file vllm/modelexecutor/layers/mamba/mambamixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible to b...
CVE-2026-105775 vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function convssmforward of the file vllm/modelexecutor/layers/mamba/mambamixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible to b...
EUVD-2026-92962
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function convssmforward of the file vllm/modelexecutor/layers/mamba/mambamixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible to b...
CVE-2026-105775
A security vulnerability exists in vllm-project vLLM up to version 0.31.0 . The issue resides within the Completions Request Handler component, specifically affecting the conv_ssm_forward function in the file vllm/model_executor/layers/mamba/mamba_mixer2.py . This flaw allows for an out-of-bounds...
CVE-2026-20251
CVE-2026-20251 — Splunk Secure Gateway jsonpickle 역직렬화 RCE 연구자: Fady Oueslati · ReactiveZero Security Research 참조: 2026FO-SPLUNK-20251 CVSS: 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 상태: 공개 — 패치 제공됨 요약 낮은 권한의 인증된 사용자가 KV Storemobilealerts 컬렉션에 조작된 문서를 저장하여 Splunk 호스트에서 원격 코드 실행 을 달성할 수 있습니...
[SECURITY] Fedora 45 Update: ocaml-pyml-20250807-8.fc45
py.ml provides OCaml bindings for Python 2 and Python 3. This library subsumes the pycaml library, which is no longer actively maintained. The Python library is linked at runtime and the same executable can be run in a Python 2 or a Python 3 environment. py.ml does not require any Python library ...
PT-2026-106324
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv ssm forward of the file vllm/model executor/layers/mamba/mamba mixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible ...
PT-2026-107243
Name of the Vulnerable Software and Affected Versions Twisted versions 25.5.0 and earlier Description The wildcardToRegexp function in twisted/mail/imap4.py improperly handles patterns from authenticated clients during LIST or LSUB operations. While it translates IMAP asterisk and percent...
vt-py-scanner
VirusTotal Scanner Python script to analyze ALL files with the VirusTotal API, scanning folders and subfolders recursively. Optimized for Windows. Features Scans ALL files in a folder and its subfolders Configuration via .env file - Save your API key and settings Interactive mode - Also works...
AADOutsider-py
AADOutsider-py はじめに このツールは、AADInternals のアウトサイダーとしての偵察部分を書き直したものです。 AADInternals の以下のキルチェーン機能とそのすべてのサブメソッドを再実装しています: Invoke-AADIntReconAsOutsider Invoke-AADIntUserEnumerationAsOutsider インストール pip3 install git+https://github.com/synacktiv/AADOutsider-py または python3 -m venv venv source...
KeePass-dump-py
KeePass-dump-py KeePass 2.X 마스터 비밀번호 덤퍼 CVE-2023-32784 POC를 Python으로 재작성한 것입니다. 취약점 및 공격 과정에 대한 자세한 내용은 원본 POC를 참조하십시오. 이 스크립트의 기능: 1. KeePass 프로세스가 실행 중인지 확인하고, 그렇지 않으면 KeePass를 실행합니다. 2. WerFault를 사용하여 KeePass 프로세스를 덤프합니다 LSASSY에서 가져온 코드 스니펫 사용. 3. 프로세스 덤프에서 비밀번호를 검색합니다...
evil-winrm-py
evil-winrm-py evil-winrm-py は、WinRM Windows Remote Management プロトコルを使用してリモートの Windows マシン上でコマンドを実行するための Python ベースのツールです。進捗表示とチェックサム検証を備えたファイルのアップロード/ダウンロード、ローカル/リモートパスおよび PowerShell コマンドレットのタブ補完、PowerShell スクリプトの読み込みと実行、DLL および EXE のインメモリ実行、コマンド履歴、色付き出力といった拡張機能を備えたインタラクティブシェルを提供します。また、MCP...
46635.py
이 저장소에는 README가 없습니다...
CVE-2026-94636
Improper handling of highly compressed data data amplification, Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...
CVE-2026-105637: Authorization Bypass Through User-Controlled Key
Plane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in apps/api/plane/app/views/asset/v2.py retrieves assets using idin=assetids and workspaceslug=slug but does not constrain the query with projectid from the URL. A workspace Guest can provide asset UUID...
py-log4shellscanner
PY-Log4ShellScanner 간단한 단일 파일 DNSLog 서버로, 로그 검색을 위한 HTTP 엔드포인트를 제공합니다. 크레딧 fullhunt.io의 Log4jScanner를 기반으로 하여, 멀티스레딩 및 사용자 지정 DNS 콜백 서버로 수정하였습니다. 기능 URL 목록 지원 60개 이상의 HTTP 요청 헤더에 대한 퍼징, 사용자 정의 헤더 추가 기능 HTTP POST 데이터 매개변수 퍼징 JSON 데이터 매개변수 퍼징 멀티스레드 검색 자체 호스팅 scheibling/py-dnslogserver를 통한 DNS 콜백 WA...
CVE-2026-105148 SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery
A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the component Retrieval Completion API Endpoint. Such manipulation of the argument generationconfig.apibase leads to server-side request forgery. The...
CVE-2026-105148 SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery
A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the component Retrieval Completion API Endpoint. Such manipulation of the argument generationconfig.apibase leads to server-side request forgery. The...