CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2547 matches found

Nuclei•added 2026/11/03 2:03 a.m.•46 views

vLLM <= 0.23.0 - Anthropic Router Heap Address Information Leak

vLLM = 0.23.0 incompletely fixes CVE-2026-22778. The original fix added sanitizemessage to the OpenAI router but the Anthropic-compatible router /v1/messages echoes strexc directly. id: CVE-2026-54236 info: name: vLLM = 0.23.0 - Anthropic Router Heap Address Information Leak author: kenlacroix...

9.8CVSS6.8AI score0.18287EPSS

SaveExploits3References2

OPENSUSE Linux•added 2026/11/02 12:00 a.m.•7 views

python313-vllm-0.32.0-1.1 on GA media (moderate)

python313-vllm-0.32.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:12185-1 Rating: moderate Cross-References: CVE-2026-73560 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

6.5CVSS6AI score0.00407EPSS

SaveExploits0

Kitploit•added 2026/11/01 8:07 a.m.•20 views

LeakGauge

LeakGauge This is the code repository for our paper: The Model's Tell: Measuring Context-Leakage Attack Signals with Behavior Gauges. ArXiv version and paper link: https://arxiv.org/abs/2608.17829 This repository implements the LeakGauge pipeline for leakage detection: demo dataset preparation,...

6.4AI score

SaveExploits0References1

Kitploit•added 2026/11/01 5:24 a.m.•30 views

EXPLOIT-CVE-2026-22778

CVE-2026-22778 — vLLM RCE in video processing Vulnerable lab + proof of concept for CVE-2026-22778 CVSS 9.8, an unauthenticated remote code execution chain in vLLM's multimodal ingestion path. | ---|--- CVE| CVE-2026-22778 Advisory| GHSA-4r2x-xpjr-7cvv Affected| vLLM = 0.8.3, vLLM turned...

9.8CVSS7.5AI score0.18287EPSS

SaveExploits2References6

Kitploit•added 2026/10/31 9:21 a.m.•37 views

CVE-2026-22807_Range

🛡️ CVE-2026-22807 Simulation: AI Supply Chain RCE Target Range ⚠️ Disclaimer This project is intended solely for security research and educational purposes , aiming to demonstrate the supply chain attack principle Remote Code Execution during AI model loading. Do not use the generated malicious...

9.8CVSS7.5AI score0.0098EPSS

SaveExploits1

Kitploit•added 2026/10/31 12:28 a.m.•24 views

ai-kubernetes-helm-chart-security

AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...

6.2AI score

SaveExploits0References7

Kitploit•added 2026/10/30 11:57 p.m.•21 views

CVE-2024-11040

CVE-2024-11040 vllm-project vllm version 0.5.2.2 is vulnerable to Denial of Service attacks...

7.5AI score

SaveExploits0