osint-pattern-analyzer

OSINT Pattern Analyzer 複数のアイデンティティベクトル（電話番号、ユーザー名、将来的にはメールサポート）にわたるOSINT調査を自動化するためのツール。構造化データを抽出し、パターン検出と相関分析を可能にするように設計されています。 機能 電話OSINT 複数のプラットフォームで電話番号を検索 複数の電話番号形式（+34, 0034, スペース区切りなど）をサポート カスタム検索クエリ（エスコート関連、ドメイン固有） 広告タイプの検出： individual group duo 電話番号の存在確認（phonematch） 信頼度分類システム： high →...

OST-C2-Spec

ドラフト: ディスカッション のリクエスト 概要 この文書は、OST C&C 仕様書バージョン 1 の概要を提供します。 また、メッセージとそれらのメッセージ内のフィールドの詳細な説明を提供することを目的としています。 はじめに この仕様書の背後にある動機は、逐語的に実装できる、または単にプロジェクト開発者へのインスピレーションとして役立つ C&C メッセージングプロトコル（タスキング、構造化出力、ピアツーピアルーティングを含む）を提供することです。 この文書は C&C が何であるかを説明することを意図したものではありません。 読者は C&C...

standalone_tdo

TDO スタンドアロン抽出ツール 大規模言語モデル（LLM）と高度な構造化出力機能を用いて、文書からサイバー脅威インテリジェンス（CTI）を抽出するための、強力なスタンドアロン型コマンドラインツールです。 🚀 特徴 マルチフォーマット文書対応 : PDF、DOCX、TXT、Markdown ファイル 高度なLLM統合 : 構造化出力と自動フォールバック解析を備えた Google Gemini モデル 包括的なCTIスキーマ : 豊富なプロパティを備えた12種類のエンティティタイプと24種類のリレーションシップタイプ 検知機会の生成 : エビデンスに裏付けられた実践的な脅威検知ルールを作成...

EUVD-2026-58063

vLLM: ReDoS via structuredoutputs.regex in the lm-format-enforcer backend no compile timeout — missed sibling of GHSA-rwxx-mrjm-wc2m...

Allocation of Resources Without Limits or Throttling

Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the structuredoutputs.regex parameter in the lm-format-enforcer backend. An attacker can...

CVE-2026-73556

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the structuredoutputs.regex parameter in vllm/v1/structuredoutput/backendlmformatenforcer.py is passed to lmformatenforcer.RegexParser without compileregexwithtimeout or validation in...

CVE-2026-73556

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the structuredoutputs.regex parameter in vllm/v1/structuredoutput/backendlmformatenforcer.py is passed to lmformatenforcer.RegexParser without compileregexwithtimeout or validation in...

CVE-2026-73556 vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of CVE-2026-55574

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the structuredoutputs.regex parameter in vllm/v1/structuredoutput/backendlmformatenforcer.py is passed to lmformatenforcer.RegexParser without compileregexwithtimeout or validation in...

Self-Correcting Structured Output in Spring AI 2.0

Large language models are text-in, text-out systems — their interface is natural language. Natural language is a great interface for humans and a poor one for software. The moment downstream code needs to route on a field, persist a value, or branch on a result, the conversation has to become a...

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

MongoBleed CVE-2025-14847 – Vulnerability Checker Systemhaus Sc...

VScanX

VScanX - Ethical Vulnerability Scanner !Versionhttps://img...

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell Scanner – with PoC CVE-2025-55182 – React Ser...

PYSEC-2025-55

vLLM is an inference and serving engine for large language models LLMs. Version 0.8.0 up to but excluding 0.9.0 have a Denial of Service ReDoS that causes the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to...

vLLM 安全漏洞

vLLM is a high throughput and memory efficient inference and service engine for LLM from the vLLM open source. A security vulnerability exists in vLLM versions prior to 0.8.0 through 0.9.0, which stems from the fact that supplying an invalid regular expression when using structured output may...

CVE-2025-48943: Uncaught Exception

vLLM is an inference and serving engine for large language models LLMs. Version 0.8.0 up to but excluding 0.9.0 have a Denial of Service ReDoS that causes the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to...

vLLM allows clients to crash the openai server with invalid regex

Impact A denial of service bug caused the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to GHSA-6qc9-v4r8-22xg, but for regex instead of a JSON schema. Issue with more details: https://github.com/vllm-project/vllm/issues/17313...

GHSA-9HCF-V7M4-6M2J vLLM allows clients to crash the openai server with invalid regex

Impact A denial of service bug caused the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to GHSA-6qc9-v4r8-22xg, but for regex instead of a JSON schema. Issue with more details: https://github.com/vllm-project/vllm/issues/17313...

PT-2025-23227 · Vllm · Vllm

Name of the Vulnerable Software and Affected Versions: vLLM versions 0.8.0 through 0.8.x Description: The issue is a Denial of Service ReDoS that causes the vLLM server to crash if an invalid regex is provided while using structured output. This is similar to a previously identified issue, but it...

This Week in Spring - May 14th, 2024

Hi, Spring fans! Welcome to another installment of This Week in Spring! This week's highlights in the Spring ecosystem emphasize the ongoing advancements and applications of Spring AI. The discussions range from exploring the impressive VectorStore abstraction and enhanced structured output suppo...

Spring AI - Structured Output

UPDATE: 04.06.2024 Adde snippets for using structured output with the new, fluent ChatClient API . UPDATE: 17.05.2024 Generic Types support for BeanOutputConverter added. Science works with chunks and bits and pieces of things with the continuity presumed, and Art works only with the continuities...