2200 matches found
CVE-2026-105775 vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function convssmforward of the file vllm/modelexecutor/layers/mamba/mambamixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible to b...
CVE-2026-105775
A security vulnerability exists in vllm-project vLLM up to version 0.31.0 . The issue resides within the Completions Request Handler component, specifically affecting the conv_ssm_forward function in the file vllm/model_executor/layers/mamba/mamba_mixer2.py . This flaw allows for an out-of-bounds...
CVE-2026-105775 vllm-project vLLM Completions Request mamba_mixer2.py conv_ssm_forward out-of-bounds
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function convssmforward of the file vllm/modelexecutor/layers/mamba/mambamixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible to b...
EUVD-2026-92962
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function convssmforward of the file vllm/modelexecutor/layers/mamba/mambamixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible to b...
CVE-2026-20251
CVE-2026-20251 — Splunk Secure Gateway jsonpickle 反序列化远程代码执行 研究员： Fady Oueslati · ReactiveZero Security Research 参考编号： 2026FO-SPLUNK-20251 CVSS： 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 状态： 开放 — 补丁可用 摘要 低权限的已认证用户可以通过在 KV Store（mobilealerts 集合）中存储特制文档，在 Splunk 主机上实现远程代码执行 。Splunk Secure...
[SECURITY] Fedora 45 Update: ocaml-pyml-20250807-8.fc45
py.ml provides OCaml bindings for Python 2 and Python 3. This library subsumes the pycaml library, which is no longer actively maintained. The Python library is linked at runtime and the same executable can be run in a Python 2 or a Python 3 environment. py.ml does not require any Python library ...
PT-2026-106324
A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv ssm forward of the file vllm/model executor/layers/mamba/mamba mixer2.py of the component Completions Request Handler. The manipulation leads to out-of-bounds read. The attack is possible ...
PT-2026-107243
Name of the Vulnerable Software and Affected Versions Twisted versions 25.5.0 and earlier Description The wildcardToRegexp function in twisted/mail/imap4.py improperly handles patterns from authenticated clients during LIST or LSUB operations. While it translates IMAP asterisk and percent...
vt-py-scanner
VirusTotal 扫描器 使用 VirusTotal API 分析所有文件的 Python 脚本，可递归扫描文件夹及其子文件夹。专为 Windows 优化。 功能特性 扫描文件夹及其所有子文件夹中的全部文件 通过 .env 文件配置 - 保存您的 API 密钥和设置 交互模式 - 无需 .env 文件也可使用 针对 Windows 优化 - 正确的路径处理和 UTF-8 编码 完整日志记录 - 将所有事件和错误记录到 .log 文件 CSV 导出 - 将结果保存为 CSV 文件（分号分隔） 时间估算 - 实时显示剩余时间和已用时间 遵守免费 API 每分钟 4 个文件的限制...
AADOutsider-py
AADOutsider-py Introducción Esta herramienta es una reescritura de la parte de reconocimiento como outsider de AADInternals. Reimplementa las siguientes funciones de killchain de AADInternals y todos sus submétodos: Invoke-AADIntReconAsOutsider Invoke-AADIntUserEnumerationAsOutsider Instalación...
KeePass-dump-py
KeePass-dump-py 我尝试用 python 重新编写原始的 KeePass 2.X 主密码转储器 CVE-2023-32784 POC。 请前往 原始 POC 了解更多关于漏洞及利用过程的详细信息。 此脚本的作用： 1. 检查 KeePass 进程是否正在运行，如果没有则启动 KeePass 2. 使用 WerFault 转储 KeePass 进程（代码片段改编自 LSASSY） 3. 搜索进程转储以查找密码...
evil-winrm-py
evil-winrm-py evil-winrm-py es una herramienta basada en Python para ejecutar comandos en máquinas Windows remotas utilizando el protocolo WinRM Windows Remote Management. Proporciona un shell interactivo con características mejoradas como carga/descarga de archivos con progreso y verificación de...
CVE-2026-105637: Authorization Bypass Through User-Controlled Key
Plane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in apps/api/plane/app/views/asset/v2.py retrieves assets using idin=assetids and workspaceslug=slug but does not constrain the query with projectid from the URL. A workspace Guest can provide asset UUID...
CVE-2026-94636
Improper handling of highly compressed data data amplification, Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerability in Apache Thrift py bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to...
py-log4shellscanner
PY-Log4ShellScanner 一个简单的单文件DNSLog服务器，带有HTTP端点用于日志检索 致谢 基于fullhunt.io的Log4jScanner，通过多线程和自定义DNS回调服务器进行了修改 功能 支持URL列表 针对60多个HTTP请求头进行模糊测试，并能够添加自定义头 针对HTTP POST数据参数进行模糊测试 针对JSON数据参数进行模糊测试 多线程搜索 通过自托管的scheibling/py-dnslogserver实现DNS回调 WAF绕过Payload 使用方法 准备工作 pip3 install -r requirements.txt 命令行界面 $...
CVE-2026-105148 SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery
A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the component Retrieval Completion API Endpoint. Such manipulation of the argument generationconfig.apibase leads to server-side request forgery. The...
CVE-2026-105148 SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery
A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the component Retrieval Completion API Endpoint. Such manipulation of the argument generationconfig.apibase leads to server-side request forgery. The...