30315 matches found
CVE-2025-6242
A Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows an...
GHSA-WR9H-G72X-MWHM vLLM is vulnerable to timing attack at bearer auth
Summary The API key support in vLLM performed validation using a method that was vulnerable to a timing attack. This could potentially allow an attacker to discover a valid API key using an approach more efficient than brute force. Details...
Another Critical RCE Discovered in a Popular MCP Server
Artificial Intelligence development is moving faster than secure coding practices, and attackers are taking notice. Imperva Threat Research recently uncovered and disclosed a critical Remote Code Execution RCE vulnerability CVE-2025-53967 in the Framelink Figma MCP Server. This is just one exampl...
Delta Electronics DIAScreen
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to write data outside of the allocated memory buffer. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA...
EUVD-2020-5563
Malware in sbrugna...
EUVD-2007-6152
Malware in sbrugna...
EUVD-2008-2114
Malware in sbrugna...
EUVD-2021-25548
Malware in sbrugna...
EUVD-2007-6095
Malware in sbrugna...
EUVD-2008-2115
Malware in sbrugna...
EUVD-2021-26897
Malware in sbrugna...
EUVD-2018-9289
Malware in sbrugna...
EUVD-2003-1343
Malware in sbrugna...
EUVD-2018-2678
Malware in sbrugna...
EUVD-2009-3474
Malware in sbrugna...
EUVD-2020-2484
Malware in sbrugna...
EUVD-2019-11028
Malware in sbrugna...
EUVD-2005-2436
Malware in sbrugna...