3014 matches found
The vulnerability of the DRM/amdkfd component in Linux kernel allows a hacker to trigger a service failure.
The vulnerability of the DRM/amdkfd component in Linux kernel relates to the mutual blocking of execution threads. Exploiting this vulnerability allows a perpetrator to cause service failures...
The vulnerability in the driver/md/dm-crypt.c component of the Linux operating system allows a attacker to compromise the integrity and accessibility of protected information.
The vulnerability of the drivers/md/dm-crypt.c component in the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of protected information...
The vulnerability of the `media/i2c/mt9m114.c` component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the media/i2c/mt9m114.c component of the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of the drivers/md components of the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the drivers/md components of the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability allows an attacker to cause a service failure...
IoTEdu: Access Control, Detection, and Automatic Incident Response in Academic IoT Networks
The growing presence of IoT devices in academic environments has increased operational complexity and exposed security weaknesses, especially in academic institutions without unified policies for registration, monitoring, and incident response involving IoT. This work presents IoTEdu, an integrat...
Paris, The Thinker, and why your WAF should block XSS by default
With Thales HQ in Paris, it felt right to detour to the Musée Rodin and stand before The Thinker, the bronze giant by Auguste Rodin whose clenched posture and chin-in-hand stance have become a universal symbol of deep judgment. Conceived for The Gates of Hell in 1880 and first cast monumentally i...
vLLM 安全漏洞
vLLM is a high throughput and memory efficient inference and service engine for LLM from vLLM open source. A security vulnerability exists in vLLM version 0.5.5 through versions prior to 0.11.1, which stems from insufficient validation of the chattemplatekwargs parameter, and may result in API...
GHSA-69J4-GRXJ-J64P vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`
Summary The /v1/chat/completions and /tokenize endpoints allow a chattemplatekwargs request parameter that is used in the code before it is properly validated against the chat template. With the right chattemplatekwargs parameters, it is possible to block processing of the API server for long...
PT-2025-47650
Name of the Vulnerable Software and Affected Versions vLLM versions 0.5.5 through 0.11.0 Description vLLM is an inference and serving engine for large language models LLMs. The /v1/chat/completions and /tokenize API endpoints accept a chat template kwargs request parameter that is not properly...
The vulnerability of the get_next_corpse() function in the net/netfilter/nf_conntrack_core.c module of the netfilter component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the getnextcorpse function in the net/netfilter/nfconntrackcore.c module of the netfilter component of the Linux operating system is related to improper blocking of resources. Exploiting this vulnerability could allow a attacker to cause a service failure...
Malicious code in dagda-non-blocking-html-webpack-plugin-astrophysics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8c96a0cb89808b6a9d97752e052ed1ed344076a7cfc56315ad0186b572be54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in electron-builder-kaus-non-blocking-europa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc97f9ddff3d836878325e761ded0213655d4240acbfa676ac68ebd722f29c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in zenith-geckodriver-rimraf-non-blocking (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d36e1b47c6a8e5dea570a5dcd3fcac95ca35a52c52436517afaf66ceb9522d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-175429
Malicious code in zenith-geckodriver-rimraf-non-blocking npm...
EUVD-2025-176126
Malicious code in supercluster-grus-non-blocking-lepton npm...
EUVD-2025-175855
Malicious code in typeorm-warp-procyon-non-blocking npm...
EUVD-2025-175835
Malicious code in umbra-mensa-bunyan-non-blocking npm...
EUVD-2025-175490
Malicious code in xerxes-non-blocking-baryon-solarnebula npm...