Lucene search
+L

4435 matches found

Packet Storm News
Packet Storm News
added 2026/01/12 12:00 a.m.10 views

Memory-Based Malware Detection under Limited Data Conditions: A Comparative Evaluation of TabPFN and Ensemble Models

Artificial intelligence and machine learning have significantly advanced malware research by enabling automated threat detection and behavior analysis. However, the availability of exploitable data is limited, due to the absence of large datasets with real-world data. Despite the progress of AI i...

6.9AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/01/12 12:00 a.m.16 views

PT-2026-2043

Name of the Vulnerable Software and Affected Versions A-Plus Video Technologies NVR models affected versions not specified Description A security issue exists in certain NVR models developed by A-Plus Video Technologies that allows unauthenticated remote attackers to access the debug page...

6.9CVSS6.2AI score0.00271EPSS
SaveExploits0References6
PyPA
PyPA
added 2026/01/10 7:16 a.m.18 views

PYSEC-2026-143

vLLM is an inference and serving engine for large language models LLMs. In versions from 0.6.4 to before 0.12.0, users can crash the vLLM engine serving multimodal models that use the Idefics3 vision model implementation by sending a specially crafted 1x1 pixel image. This causes a tensor dimensi...

7.5CVSS6.3AI score0.0041EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2026/01/10 7:16 a.m.12 views

CVE-2026-22773

vLLM is an inference and serving engine for large language models LLMs. In versions from 0.6.4 to before 0.12.0, users can crash the vLLM engine serving multimodal models that use the Idefics3 vision model implementation by sending a specially crafted 1x1 pixel image. This causes a tensor dimensi...

7.5CVSS0.0041EPSS
SaveExploits1References1
OSV
OSV
added 2026/01/10 7:16 a.m.14 views

PYSEC-2026-143

vLLM is an inference and serving engine for large language models LLMs. In versions from 0.6.4 to before 0.12.0, users can crash the vLLM engine serving multimodal models that use the Idefics3 vision model implementation by sending a specially crafted 1x1 pixel image. This causes a tensor dimensi...

7.5CVSS7.2AI score0.0041EPSS
SaveExploits1References1
OSV
OSV
added 2026/01/10 6:39 a.m.12 views

CVE-2026-22773 vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions

vLLM is an inference and serving engine for large language models LLMs. In versions from 0.6.4 to before 0.12.0, users can crash the vLLM engine serving multimodal models that use the Idefics3 vision model implementation by sending a specially crafted 1x1 pixel image. This causes a tensor dimensi...

6.5CVSS6.7AI score
SaveExploits0References3
CVE
CVE
added 2026/01/10 6:39 a.m.47 views

CVE-2026-22773

CVE-2026-22773 affects vLLM (inference/serving engine) versions 0.6.4 through before 0.12.0 that serve multimodal models using the Idefics3 vision model. A crafted 1x1 pixel image triggers a tensor dimension mismatch in the image input processing, causing an unhandled runtime error and enabling a...

7.5CVSS6.4AI score0.0041EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2026/01/10 6:39 a.m.32 views

CVE-2026-22773 vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions

vLLM is an inference and serving engine for large language models LLMs. In versions from 0.6.4 to before 0.12.0, users can crash the vLLM engine serving multimodal models that use the Idefics3 vision model implementation by sending a specially crafted 1x1 pixel image. This causes a tensor dimensi...

6.5CVSS0.0041EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2026/01/10 12:00 a.m.12 views

PT-2026-2260

Name of the Vulnerable Software and Affected Versions vLLM versions 0.6.4 through 0.11.9 Description vLLM is an inference and serving engine for large language models LLMs. Users can cause the vLLM engine to crash when serving multimodal models that utilize the Idefics3 vision model implementatio...

6.5CVSS6.6AI score0.0041EPSS
SaveExploits1References5
Packet Storm News
Packet Storm News
added 2026/01/10 12:00 a.m.15 views

SecureDyn-FL: A Robust Privacy-Preserving Federated Learning Framework for Intrusion Detection in IoT Networks

The rapid proliferation of Internet of Things IoT devices across domains such as smart homes, industrial control systems, and healthcare networks has significantly expanded the attack surface for cyber threats, including botnet-driven distributed denial-of-service DDoS, malware injection, and dat...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/09 12:30 p.m.13 views

CVE-2023-40958

A SQL injection vulnerability in Didotech srl Engineering & Lifecycle Management aka pdm v.14.0, v.15.0 and v.16.0 fixed in pdm-14.0.1.0.0, pdm-15.0.1.0.0, and pdm-16.0.1.0.0 allows a remote authenticated attacker to execute arbitrary code via the query parameter in models/baseclient.py component...

8.8CVSS8.3AI score0.01075EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:29 p.m.8 views

CVE-2023-40955

A SQL injection vulnerability in Didotech srl Engineering & Lifecycle Management aka pdm v.14.0, v.15.0 and v.16.0 fixed in pdm-14.0.1.0.0, pdm-15.0.1.0.0, and pdm-16.0.1.0.0 allows a remote authenticated attacker to execute arbitrary code via the select parameter in models/baseclient.py componen...

8.8CVSS8.7AI score0.01075EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:27 p.m.17 views

CVE-2018-12005

An unprivileged user can issue a binder call and cause a system halt in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU,...

5.5CVSS7.4AI score0.00175EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:22 a.m.10 views

CVE-2021-22327

There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to insufficient validation of the input files, successful exploit could cause certain service abnormal. Affected product versions include:HUAWEI P30 versions 10.0.0.186C10E7R5P1,...

6.5CVSS6.9AI score0.00534EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:21 a.m.18 views

CVE-2021-22701

A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 see notification for affected versions, that could cause a user to perform an unintended action on the target device when using the HTTP web...

4.5CVSS6.9AI score0.00324EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:20 a.m.10 views

CVE-2021-22724

A CVE-352 Cross-Site Request Forgery CSRF vulnerability exists that could allow an attacker to impersonate the user or carry out actions on their behalf when crafted malicious parameters are submitted in POST requests sent to the charging station web server. Affected Products: EVlink City EVC1S22...

8.8CVSS6.9AI score0.00468EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:20 a.m.8 views

CVE-2021-22818

A CWE-307 Improper Restriction of Excessive Authentication Attempts vulnerability exists that could allow an attacker to gain unauthorized access to the charging station web interface by performing brute force attacks. Affected Products: EVlink City EVC1S22P4 / EVC1S7P4 All versions prior to R8...

7.5CVSS7AI score0.01005EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:58 a.m.27 views

CVE-2025-23102

An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380, 1480 and 2400. A Double Free in the mobile processor leads to privilege escalation...

8.8CVSS8.7AI score0.00383EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:58 a.m.28 views

CVE-2025-40570

A vulnerability has been identified in SIPROTEC 5 6MD84 CP300 All versions = V7.80 = V7.80 = V7.80 = V7.80 = V7.80 = V7.80 = V7.80 = V7.80 = V7.80 = V7.80 = V7.80 = V7.80 = V7.80 = V7.80 = V7.80 V10.0, SIPROTEC 5 7ST85 CP300 All versions V10.0, SIPROTEC 5 7ST86 CP300 All versions V10.0, SIPROTEC ...

2.4CVSS6.7AI score0.00197EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 10:55 a.m.14 views

CVE-2022-23747

In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback...

9.8CVSS7AI score0.10011EPSS
SaveExploits1References1
Rows per page
Query Builder