14745 matches found
GHSA-6FVQ-23CW-5628 vLLM: Resource-Exhaustion (DoS) through Malicious Jinja Template in OpenAI-Compatible Server
Summary A resource-exhaustion denial-of-service vulnerability exists in multiple endpoints of the OpenAI-Compatible Server due to the ability to specify Jinja templates via the chattemplate and chattemplatekwargs parameters. If an attacker can supply these parameters to the API, they can cause a...
Allocation of Resources Without Limits or Throttling
Overview vllm is an A high-throughput and memory-efficient inference and serving engine for LLMs Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the chattemplate and chattemplatekwargs parameters. An attacker can cause excessive CPU...
UBUNTU-CVE-2023-53684
In the Linux kernel, the following vulnerability has been resolved: xfrm: Zero padding when dumping algos and encap When copying data to user-space we should ensure that only valid data is copied over. Padding in structures may be filled with random possibly sensitve data and should never be give...
EUVD-2025-32723
In the Linux kernel, the following vulnerability has been resolved: xfrm: Zero padding when dumping algos and encap When copying data to user-space we should ensure that only valid data is copied over. Padding in structures may be filled with random possibly sensitve data and should never be give...
CVE-2023-53684 xfrm: Zero padding when dumping algos and encap
In the Linux kernel, the following vulnerability has been resolved: xfrm: Zero padding when dumping algos and encap When copying data to user-space we should ensure that only valid data is copied over. Padding in structures may be filled with random possibly sensitve data and should never be give...
gnutls: Vulnerability in GnuTLS certtool template parsing
A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic within the certtool utility. When it reads certain settings from a template file, it allows an attacker to cause an out-of-bounds OOB NULL pointer write, resulting in memory corruption and a...
Oracle EBS Under Fire as Cl0p Exploits CVE-2025-61882 in Real-World Attacks
CrowdStrike on Monday said it's attributing the exploitation of a recently disclosed security flaw in Oracle E-Business Suite with moderate confidence to a threat actor it tracks as Graceful Spider aka Cl0p, and that the first known exploitation occurred on August 9, 2025. The malicious activity...
EUVD-2003-1415
Malware in sbrugna...
EUVD-2002-2092
Malware in sbrugna...
EUVD-2020-28243
Malware in sbrugna...
EUVD-2020-17975
Malware in sbrugna...
EUVD-2020-14291
Malware in sbrugna...
EUVD-2019-10958
Malware in sbrugna...
EUVD-2007-2138
Malware in sbrugna...
EUVD-2021-12891
Malware in sbrugna...
EUVD-2015-0022
Malware in sbrugna...
EUVD-2011-4540
Malware in sbrugna...
EUVD-2020-0435
Malware in sbrugna...