L2Nce

Name of the Vulnerable Software and Affected Versions vLLM versions 0.16.0 through 0.18.99 Description vLLM, an inference and serving engine for large language models, contains a server-side request forgery (SSRF) flaw in the `download bytes from url` function. This allows an attacker who can control the batch input JSON to make the vLLM batch runner issue arbitrary HTTP/HTTPS requests from the server, without any URL validation or domain restrictions. The vulnerability resides in the `run batch.py` file, specifically within the `download bytes from url` function, which directly calls `session.get(url)` on a URL provided in the batch input JSON. The `file url` parameter within `BatchTranscriptionRequest` and `BatchTranslationRequest` is vulnerable, as it lacks domain, IP, or port restrictions. This can be exploited to target internal services reachable from the vLLM host. Recommendations Update to vLLM version 0.19.0 or later.

**Name of the Vulnerable Software and Affected Versions** SourceCodester AC Repair and Services System version 1.0 **Description** A critical issue has been found in the system, affecting an unknown functionality of the file /classes/Master.php?f=delete inquiry of the component HTTP POST Request Handler. The manipulation of the `id` argument leads to sql injection. The attack can be launched remotely. **Recommendations** For version 1.0, consider disabling the `delete inquiry` functionality in the /classes/Master.php file until a patch is available. Restrict access to the HTTP POST Request Handler to minimize the risk of exploitation. Avoid using the `id` argument in the affected API endpoint until the issue is resolved.