2870 matches found
UBUNTU-CVE-2025-40238
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix IPsec cleanup over MPV device When we do mlx5edetachnetdev we eventually disable blocking events notifier, among those events are IPsec MPV events from IB to core. So before disabling those blocking events, make sur...
The vulnerability of the Linux operating system’s kernel media component allows a attacker to compromise the integrity and accessibility of protected information.
The vulnerability of the Linux operating system’s kernel media component is related to insufficient blocking measures. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of the protected information...
The vulnerability in the Linux operating system’s component fs/hfsplus/extents.c allows a hacker to trigger a service failure.
The vulnerability of the fs/hfsplus/extents.c component in the Linux operating system is related to insufficient blocking. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel, which allows a hacker to trigger a service failure
The vulnerability of the Linux operating system’s kernel is related to insufficient blocking measures. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of the `media/i2c/mt9m114.c` component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the media/i2c/mt9m114.c component of the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of the drivers/md components of the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the drivers/md components of the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of the `fs/smb/server/smb2pdu.c` component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the fs/smb/server/smb2pdu.c component in the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability allows an attacker to cause service failures...
The vulnerability in the driver/md/dm-crypt.c component of the Linux operating system allows a attacker to compromise the integrity and accessibility of protected information.
The vulnerability of the drivers/md/dm-crypt.c component in the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected information...
The vulnerability of the DRM/amdkfd component in Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the DRM/amdkfd component in Linux kernel relates to the mutual blocking of execution threads. Exploiting this vulnerability allows a perpetrator to cause service failures...
IoTEdu: Access Control, Detection, and Automatic Incident Response in Academic IoT Networks
The growing presence of IoT devices in academic environments has increased operational complexity and exposed security weaknesses, especially in academic institutions without unified policies for registration, monitoring, and incident response involving IoT. This work presents IoTEdu, an integrat...
Paris, The Thinker, and why your WAF should block XSS by default
With Thales HQ in Paris, it felt right to detour to the Musée Rodin and stand before The Thinker, the bronze giant by Auguste Rodin whose clenched posture and chin-in-hand stance have become a universal symbol of deep judgment. Conceived for The Gates of Hell in 1880 and first cast monumentally i...
vLLM 安全漏洞
vLLM is a high throughput and memory efficient inference and service engine for LLM from vLLM open source. A security vulnerability exists in vLLM version 0.5.5 through versions prior to 0.11.1, which stems from insufficient validation of the chattemplatekwargs parameter, and may result in API...
GHSA-69J4-GRXJ-J64P vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`
Summary The /v1/chat/completions and /tokenize endpoints allow a chattemplatekwargs request parameter that is used in the code before it is properly validated against the chat template. With the right chattemplatekwargs parameters, it is possible to block processing of the API server for long...
PT-2025-47650
Name of the Vulnerable Software and Affected Versions vLLM versions 0.5.5 through 0.11.0 Description vLLM is an inference and serving engine for large language models LLMs. The /v1/chat/completions and /tokenize API endpoints accept a chat template kwargs request parameter that is not properly...
The vulnerability of the get_next_corpse() function in the net/netfilter/nf_conntrack_core.c module of the netfilter component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the getnextcorpse function in the net/netfilter/nfconntrackcore.c module of the netfilter component of the Linux operating system is related to improper blocking of resources. Exploiting this vulnerability could allow a attacker to cause a service failure...
EUVD-2025-176126
Malicious code in supercluster-grus-non-blocking-lepton npm...
Malicious code in electron-builder-kaus-non-blocking-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc97f9ddff3d836878325e761ded0213655d4240acbfa676ac68ebd722f29c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in zenith-geckodriver-rimraf-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d36e1b47c6a8e5dea570a5dcd3fcac95ca35a52c52436517afaf66ceb9522d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...