1012 matches found
SneeitScanner-CVE-2025-6389
SneeitScanner-CVE-2025-6389 SneeitScanner - PoC & Scanner for Unauthenticated RCE in Sneeit Framework CVE-2025-6389 ⚡ SneeitScanner ⚡ Proof of Concept PoC and Automated Scanner for Unauthenticated RCE in Sneeit Framework CVE-2025-6389 This robust Python script is a functional PoC and scanner tool...
cve-2015-5477
cve-2015-5477 PoC for BIND9 TKEY assert DoS CVE-2015-5477 $ ps awux | grep -v grep | grep bind bind 2373 0.0 2.2 141164 13424 ? Ssl 14:58 0:00 /var/named/chroot/sbin/named -u bind -t /var/named/chroot -c /etc/named.conf $ python tkill.py 127.0.0.1 Begin emission: ..Finished to send 1 packets...
ROS-20261111-73-0089
The vulnerability in OpenVPN is related to insufficient use of the assert function. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
LibSoup DoS
The vulnerability in the LibSoup library for accessing HTTP servers is related to insufficient use of the assert function. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
FreeRDP DoS
The vulnerability in the urbsendcurrentframenumberresult function within the FreeRDP remote desktop protocol is related to improper usage of the assert function. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
Linux Kernel DoS
The kernel vulnerability in the Linux operating system is related to insufficient use of the assert function. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux Kernel DoS
The kernel vulnerability in the Linux operating system is related to insufficient use of the assert function. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux Kernel DoS
The kernel vulnerability in the Linux operating system is related to insufficient use of the assert function. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux Kernel DoS
The kernel vulnerability in the Linux operating system is related to insufficient use of the assert function. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
PT-2026-137012
FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow server when a CredSSP TSRequest omits negoTokens. Unauthenticated attackers can send a crafted seven-byte TSRequest containing only the version field to trigger a fatal WINPR ASSERT and abort the server...
VLLM: Out-of-vocabulary Prompt Token Id Passes Input Validation And Triggers A CUDA Device-side Assert (engine Crash / D
For a model whose vocabulary size is an exact multiple of the embedding padding size 64 — e.g. any Llama-2-family model, vocab 32000 — a single request carrying a pre-tokenized prompt with token id equal to the vocab size 32000 passes vLLM's input-id validation but is one past the last embedding...
vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)
For a model whose vocabulary size is an exact multiple of the embedding padding size 64 — e.g. any Llama-2-family model, vocab 32000 — a single request carrying a pre-tokenized prompt with token id equal to the vocab size 32000 passes vLLM's input-id validation but is one past the last embedding...
GHSA-Q97C-P368-75C4 vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)
For a model whose vocabulary size is an exact multiple of the embedding padding size 64 — e.g. any Llama-2-family model, vocab 32000 — a single request carrying a pre-tokenized prompt with token id equal to the vocab size 32000 passes vLLM's input-id validation but is one past the last embedding...
Linux Kernel DoS
The kernel vulnerability in the Linux operating system is related to insufficient use of the assert function. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
CVE-2026-115916 vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes maxtokenid with an off-by-one upper bound, allowing a pre-tokenized prompt ID equal to the vocabulary size to pass validation. For a tensor-parallel size of one and an exact...
CVE-2026-115916 vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes maxtokenid with an off-by-one upper bound, allowing a pre-tokenized prompt ID equal to the vocabulary size to pass validation. For a tensor-parallel size of one and an exact...
CVE-2026-115916 vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes maxtokenid with an off-by-one upper bound, allowing a pre-tokenized prompt ID equal to the vocabulary size to pass validation. For a tensor-parallel size of one and an exact...
CVE-2026-115916
The vLLM inference and serving engine (versions prior to 0.32.0 ) is vulnerable to a Denial of Service (DoS) due to an off-by-one error in vllm/tokenizers/hf.py. The max_token_id is calculated with an incorrect upper bound, allowing a pre-tokenized prompt ID equal to the vocabulary size to bypass...
PT-2026-123377
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where the vblank counter callback reads display registers and scanout position without holding the reset domain-sem semaphore. During GPU...
DEBIAN-CVE-2026-109449
In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...