Lucene search
+L

1012 matches found

Kitploit
Kitploit
•added 2026/11/12 8:24 p.m.•29 views

SneeitScanner-CVE-2025-6389

SneeitScanner-CVE-2025-6389 SneeitScanner - PoC & Scanner for Unauthenticated RCE in Sneeit Framework CVE-2025-6389 ⚡ SneeitScanner ⚡ Proof of Concept PoC and Automated Scanner for Unauthenticated RCE in Sneeit Framework CVE-2025-6389 This robust Python script is a functional PoC and scanner tool...

9.8CVSS8.2AI score0.76209EPSS
SaveExploits5
Kitploit
Kitploit
•added 2026/11/11 6:13 a.m.•33 views

cve-2015-5477

cve-2015-5477 PoC for BIND9 TKEY assert DoS CVE-2015-5477 $ ps awux | grep -v grep | grep bind bind 2373 0.0 2.2 141164 13424 ? Ssl 14:58 0:00 /var/named/chroot/sbin/named -u bind -t /var/named/chroot -c /etc/named.conf $ python tkill.py 127.0.0.1 Begin emission: ..Finished to send 1 packets...

7.8CVSS7.8AI score0.99584EPSS
SaveExploits14
Redos
Redos
•added 2026/11/11 12:00 a.m.•6 views

ROS-20261111-73-0089

The vulnerability in OpenVPN is related to insufficient use of the assert function. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

5.9CVSS6.2AI score0.00458EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/11/10 12:00 a.m.•4 views

LibSoup DoS

The vulnerability in the LibSoup library for accessing HTTP servers is related to insufficient use of the assert function. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

5.9CVSS6.4AI score0.00315EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/11/09 12:00 a.m.•4 views

FreeRDP DoS

The vulnerability in the urbsendcurrentframenumberresult function within the FreeRDP remote desktop protocol is related to improper usage of the assert function. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

7.8CVSS6.4AI score0.0038EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
•added 2026/11/06 12:00 a.m.•9 views

Linux Kernel DoS

The kernel vulnerability in the Linux operating system is related to insufficient use of the assert function. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

5.5CVSS6.3AI score0.00215EPSS
SaveExploits0References16Affected Software4
BDU FSTEC
BDU FSTEC
•added 2026/11/06 12:00 a.m.•8 views

Linux Kernel DoS

The kernel vulnerability in the Linux operating system is related to insufficient use of the assert function. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

5.5CVSS6.3AI score0.00216EPSS
SaveExploits0References19Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/11/06 12:00 a.m.•5 views

Linux Kernel DoS

The kernel vulnerability in the Linux operating system is related to insufficient use of the assert function. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

5.5CVSS6.3AI score0.00173EPSS
SaveExploits0References16Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/11/05 12:00 a.m.•7 views

Linux Kernel DoS

The kernel vulnerability in the Linux operating system is related to insufficient use of the assert function. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

5.5CVSS6AI score0.00114EPSS
SaveExploits0References17Affected Software4
Positive Technologies
Positive Technologies
•added 2026/11/04 12:00 a.m.•11 views

PT-2026-137012

FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow server when a CredSSP TSRequest omits negoTokens. Unauthenticated attackers can send a crafted seven-byte TSRequest containing only the version field to trigger a fatal WINPR ASSERT and abort the server...

8.7CVSS7.2AI score0.00557EPSS
SaveExploits1References3
Veracode
Veracode
•added 2026/10/29 5:20 a.m.•19 views

VLLM: Out-of-vocabulary Prompt Token Id Passes Input Validation And Triggers A CUDA Device-side Assert (engine Crash / D

For a model whose vocabulary size is an exact multiple of the embedding padding size 64 — e.g. any Llama-2-family model, vocab 32000 — a single request carrying a pre-tokenized prompt with token id equal to the vocab size 32000 passes vLLM's input-id validation but is one past the last embedding...

6.5CVSS6AI score0.00312EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
•added 2026/10/28 9:15 p.m.•28 views

vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)

For a model whose vocabulary size is an exact multiple of the embedding padding size 64 — e.g. any Llama-2-family model, vocab 32000 — a single request carrying a pre-tokenized prompt with token id equal to the vocab size 32000 passes vLLM's input-id validation but is one past the last embedding...

6.5CVSS6AI score0.00312EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2026/10/28 9:15 p.m.•17 views

GHSA-Q97C-P368-75C4 vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)

For a model whose vocabulary size is an exact multiple of the embedding padding size 64 — e.g. any Llama-2-family model, vocab 32000 — a single request carrying a pre-tokenized prompt with token id equal to the vocab size 32000 passes vLLM's input-id validation but is one past the last embedding...

6.5CVSS6AI score0.00312EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2026/10/28 12:00 a.m.•11 views

Linux Kernel DoS

The kernel vulnerability in the Linux operating system is related to insufficient use of the assert function. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

5.5CVSS7.7AI score0.00224EPSS
SaveExploits0References14Affected Software5
Vulnrichment
Vulnrichment
•added 2026/10/26 5:18 p.m.•8 views

CVE-2026-115916 vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes maxtokenid with an off-by-one upper bound, allowing a pre-tokenized prompt ID equal to the vocabulary size to pass validation. For a tensor-parallel size of one and an exact...

6.5CVSS6AI score0.00312EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/10/26 5:18 p.m.•20 views

CVE-2026-115916 vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes maxtokenid with an off-by-one upper bound, allowing a pre-tokenized prompt ID equal to the vocabulary size to pass validation. For a tensor-parallel size of one and an exact...

6.5CVSS6AI score0.00312EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/26 5:18 p.m.•36 views

CVE-2026-115916 vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes maxtokenid with an off-by-one upper bound, allowing a pre-tokenized prompt ID equal to the vocabulary size to pass validation. For a tensor-parallel size of one and an exact...

6.5CVSS0.00312EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/26 5:18 p.m.•51 views

CVE-2026-115916

The vLLM inference and serving engine (versions prior to 0.32.0 ) is vulnerable to a Denial of Service (DoS) due to an off-by-one error in vllm/tokenizers/hf.py. The max_token_id is calculated with an incorrect upper bound, allowing a pre-tokenized prompt ID equal to the vocabulary size to bypass...

6.5CVSS6AI score0.00312EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/10/26 12:00 a.m.•17 views

PT-2026-123377

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdgpu component where the vblank counter callback reads display registers and scanout position without holding the reset domain-sem semaphore. During GPU...

6AI score0.00164EPSS
SaveExploits0
osv_debian
osv_debian
•added 2026/10/15 4:17 p.m.•14 views

DEBIAN-CVE-2026-109449

In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...

8.7CVSS5.9AI score0.00378EPSS
SaveExploits0References1
Rows per page
Query Builder