13261 matches found
EUVD-2026-45423
A vulnerability was identified in awesto django-shop up to 1.2.4. Affected is an unknown function of the file shop/models/inventory.py of the component Purchase Stock Handler. The manipulation leads to race condition. The attack is possible to be carried out remotely. The attack is considered to...
CVE-2026-16212
A vulnerability was identified in awesto django-shop up to 1.2.4. Affected is an unknown function of the file shop/models/inventory.py of the component Purchase Stock Handler. The manipulation leads to race condition. The attack is possible to be carried out remotely. The attack is considered to...
PT-2026-61046
A vulnerability was identified in awesto django-shop up to 1.2.4. Affected is an unknown function of the file shop/models/inventory.py of the component Purchase Stock Handler. The manipulation leads to race condition. The attack is possible to be carried out remotely. The attack is considered to...
MINI-H25X-FRQ6-733C
Bulletin has no description...
MINI-VGXF-644W-457V
Bulletin has no description...
MINI-MQ6G-XRWW-X4MP
Bulletin has no description...
MINI-M375-9HP4-596Q
Bulletin has no description...
MINI-625P-MXJJ-P6VH
Bulletin has no description...
MINI-HVVH-GP6F-26CM
Bulletin has no description...
GHSA-56R5-2P2F-7CXP PocketSphinx: Buffer overflows in language and acoustic model loading code
Impact The trie language model code introduced in PocketSphinx 5prealpha failed to check various boundary conditions when reading the headers of ARPA, DMP, and binary format language model files. In the case of invalid, corrupted or malicious input files, this could lead to stack and heap buffer...
Allocation of Resources Without Limits or Throttling
Overview mcp is a The official Ruby SDK for Model Context Protocol servers and clients Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the handleinitialization path of lib/mcp/server/transports/streamablehttptransport.rb, which creates a...
Allocation of Resources Without Limits or Throttling
Overview mcp is a The official Ruby SDK for Model Context Protocol servers and clients Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the handlepost method of lib/mcp/server/transports/streamablehttptransport.rb, which reads the entire...
New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes Tokens
A Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys. A Shodan harvester keeps the scan queue stocked with ComfyUI, Ollama, n8n, Open WebUI, Langflow, and Gradio: the image generators, local model runners, an...
GHSA-8WR5-JM2H-8R4F vLLM has Remote DoS via Invalid Recovered Token Reinjection
Summary A frontend-legal multi-request speculative workload can make vLLM produce an out-of-vocabulary recovered token equal to vocabsize, convert that value to -1 when choosing the next live token for a request, and then feed that -1 back into the next drafter input ids. On Qwen3 GPTQ this reach...
EUVD-2026-18522
vLLM: Processing differential in multi-channel audio downmixing enables hidden-input/moderation bypass for audio models...
MINI-754W-QH2M-3FRF
Bulletin has no description...
MINI-R88R-7M75-P2J9
Bulletin has no description...
MINI-3225-G9HP-39WM
Bulletin has no description...