CVE-2026-7141

A vulnerability was found in vllm up to 0.19.0. The affected element is the function hasmambalayers of the file vllm/v1/kvcacheinterface.py of the component KV Block Handler. Performing a manipulation results in uninitialized resource. It is possible to initiate the attack remotely. The attack is...

CVE-2025-15128

A vulnerability was detected in ZKTeco BioTime up to 9.0.3/9.0.4/9.5.2. This affects an unknown part of the file /base/safesetting/ of the component Endpoint. Performing a manipulation of the argument backupencryptionpassworddecrypt/exportencryptionpassworddecrypt results in unprotected storage o...

Vulnerability in gadget_dev_desc_UDC_store in drivers/usb/gadget/configfs.c (BSC #1171982) of the Linux kernel, related to reading beyond the buffer data boundary, allowing an attacker to cause a service failure.

The vulnerability in drivers/usb/gadget/configfs.c BSC 1171982 of the Linux kernel relates to reading beyond the buffer data boundary. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability in the implementation of the “cssp_read_tsrequest” function in the RDP client rdesktop, related to reading beyond the memory boundary, allows a hacker to cause a service failure.

The vulnerability of the “csspreadtsrequest” function in the RDP client rdesktop implementation relates to reading data beyond the memory boundary. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

OpenJDK HttpURLConnection incomplete TRACE permission check (6981426)

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.227, and 1.3.128 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the...

Discloser 0.0.4-rc2 (index.php more) SQL Injection Vulnerability

No description provided by source. Salvatore "drosophila" Fresta + Application: Discloser + Version: 0.0.4-rc2 + Website: http://discloser.sourceforge.net/ + Bugs: A SQL Injection + Exploitation: Remote + Date: 21 Feb 2004 + Discovered by: Salvatore Fresta aka drosophila + Author: Salvatore Frest...

nForum 1.5 - Multiple SQL Injections

nForum 1.5 - Multiple SQL Injections Salvatore "drosophila" Fresta + Application: nForum + Version: 1.5 + Website: http://sourceforge.net/projects/nforum/ + Bugs: A Multiple SQL Injection + Exploitation: Remote + Date: 06 Mar 2009 + Discovered by: Salvatore "drosophila" Fresta + Author: Salvatore...