2382 matches found
The vulnerability of the `media/i2c/mt9m114.c` component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the media/i2c/mt9m114.c component of the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability allows an attacker to cause a service failure...
IoTEdu: Access Control, Detection, and Automatic Incident Response in Academic IoT Networks
The growing presence of IoT devices in academic environments has increased operational complexity and exposed security weaknesses, especially in academic institutions without unified policies for registration, monitoring, and incident response involving IoT. This work presents IoTEdu, an integrat...
Paris, The Thinker, and why your WAF should block XSS by default
With Thales HQ in Paris, it felt right to detour to the Musée Rodin and stand before The Thinker, the bronze giant by Auguste Rodin whose clenched posture and chin-in-hand stance have become a universal symbol of deep judgment. Conceived for The Gates of Hell in 1880 and first cast monumentally i...
vLLM 安全漏洞
vLLM is a high throughput and memory efficient inference and service engine for LLM from vLLM open source. A security vulnerability exists in vLLM version 0.5.5 through versions prior to 0.11.1, which stems from insufficient validation of the chattemplatekwargs parameter, and may result in API...
GHSA-69J4-GRXJ-J64P vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`
Summary The /v1/chat/completions and /tokenize endpoints allow a chattemplatekwargs request parameter that is used in the code before it is properly validated against the chat template. With the right chattemplatekwargs parameters, it is possible to block processing of the API server for long...
PT-2025-47650
Name of the Vulnerable Software and Affected Versions vLLM versions 0.5.5 through 0.11.0 Description vLLM is an inference and serving engine for large language models LLMs. The /v1/chat/completions and /tokenize API endpoints accept a chat template kwargs request parameter that is not properly...
EUVD-2025-175835
Malicious code in umbra-mensa-bunyan-non-blocking npm...
EUVD-2025-177542
Malicious code in non-blocking-miranda-gridsome-cosmicray npm...
EUVD-2025-177324
Malicious code in parcel-non-blocking-bulma-chakra-ui npm...
EUVD-2025-175855
Malicious code in typeorm-warp-procyon-non-blocking npm...
EUVD-2025-176126
Malicious code in supercluster-grus-non-blocking-lepton npm...
Malicious code in electron-builder-kaus-non-blocking-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc97f9ddff3d836878325e761ded0213655d4240acbfa676ac68ebd722f29c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175429
Malicious code in zenith-geckodriver-rimraf-non-blocking npm...
EUVD-2025-178836
Malicious code in framework-release-it-fornax-non-blocking npm...
EUVD-2025-178557
Malicious code in helmet-pegasus-non-blocking-phoebe npm...
Malicious code in dagda-non-blocking-html-webpack-plugin-astrophysics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c96a0cb89808b6a9d97752e052ed1ed344076a7cfc56315ad0186b572be54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-177513
Malicious code in nucleosynthesis-standard-pulsar-non-blocking npm...
EUVD-2025-177492
Malicious code in octans-non-blocking-repository-cosmiconfig npm...