Timing Attack

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Timing Attack due to the PageAttention mechanism. An attacker can observe timing differences to infer details about the processed data by analyzing...

TheSpyApp 访问控制错误漏洞

TheSpyApp is the next generation of smartphone monitoring software. TheSpyApp suffers from a security vulnerability that stems from an IDOR Insecure Direct Object Reference vulnerability that arises from a backend infrastructure shared by multiple mobile device monitoring services that does not...

CVE-2022-0732

The backend infrastructure shared by multiple mobile device monitoring services does not adequately authenticate or authorize API requests, creating an IDOR Insecure Direct Object Reference vulnerability...