strelka-ui

Releasesrelease | Pull Requestspr | Issuesissues !GitHub releaseimg-version-badgerepo !Build Statusimg-actions-badgeactions-ci !Pull Requestsimg-pr-badgepr !Slackimg-slack-badgeslack !Licenseimg-license-badgelicense The Strelka Web UI is a browser and API-based file submission frontend for the...

CVE-2026-105105

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

CVE-2026-105105

The NASA-AMMOS AIT-Core (versions through 3.1.1 ) is vulnerable to CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server ). The underlying cause is that the ZeroMQ broker binds its XSUB and XPUB sockets to all network interfaces by d...

EUVD-2026-92014

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

CVE-2026-105105 Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

LlamaStack-RCE-Deterministic-Supply-Chain-Exploitation-Hardening-Framework-CVE-2024-50050-

= doi.org/10.5281/zenodo.18278567 = orcid.org/0009-0007-7728-256X 💀 LlamaStack-RCE: CVE-2024-50050 供应链利用框架 非限制机密材料 - 仅限授权红队使用 1. 执行摘要（确定性分析） LlamaStack-RCE 是一个针对 Meta Llama Stack 中 CVE-2024-50050 关键远程代码执行（RCE）漏洞的高保真模拟与利用框架。该漏洞源于 Python 推理 API 中的不安全反序列化 ，具体是在 ZeroMQ 0MQ 传输层上使用 pickle 模块。...

CVE-2020-11652-POC

CVE-2020-11652-CVE-2020-11652-POC 这是一个针对CVE-2020-11651和CVE-2020-11651的修复POC 原始版本: https://github.com/Al1ex/CVE-2020-11652 已修复错误: TransportWarning: Unclosed transport! pip3 install salt 远程代码执行 python3 CVE-2020-11652.py --master --port --exec-choose master --exec-cmd 'whoami'...

CVE-2019-6250-libzmq

CVE-2019-6250-libzmq ZeroMQZMQ ZeroMQZMQ是一个高性能的异步消息库，旨在为分布式或并行计算环境提供一个高效、灵活的消息传递机制。ZeroMQ提供了多种消息传递模式（如请求-应答、发布-订阅、推送-拉取、代理等），并支持多种传输协议（如TCP、IPC、PGM等）。ZeroMQ的设计目标是简化网络编程，并通过提供高效的消息队列来提升性能。 libzmq...

CVE-2026-94624

A flaw was found in vLLM. A remote attacker can exploit a denial of service vulnerability in the P2P KV offloading mechanism. By supplying arbitrary remote host and port values, an attacker can create unreachable peer sessions that consume ZeroMQ sockets. This resource exhaustion leads to an...

CVE-2026-94570

SGLang contains a DoS vulnerability caused by missing input validation for AUXDATA ZeroMQ control messages in the Decode worker, which enables an unauthenticated remote attacker with network reachability to the Decode control PULL socket to terminate the Decode control thread and cause a denial o...

CVE-2026-93088

SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages direct...

EUVD-2026-84425

SGLang contains a DoS vulnerability caused by missing input validation for AUXDATA ZeroMQ control messages in the Decode worker, which enables an unauthenticated remote attacker with network reachability to the Decode control PULL socket to terminate the Decode control thread and cause a denial o...

CVE-2026-94570 CVE-2026-94570

SGLang contains a DoS vulnerability caused by missing input validation for AUXDATA ZeroMQ control messages in the Decode worker, which enables an unauthenticated remote attacker with network reachability to the Decode control PULL socket to terminate the Decode control thread and cause a denial o...

CVE-2026-94570 CVE-2026-94570

SGLang contains a DoS vulnerability caused by missing input validation for AUXDATA ZeroMQ control messages in the Decode worker, which enables an unauthenticated remote attacker with network reachability to the Decode control PULL socket to terminate the Decode control thread and cause a denial o...

EUVD-2026-84408

SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages direct...

CVE-2026-93088 CVE-2026-93088

SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages direct...

CVE-2026-93088 CVE-2026-93088

SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages direct...

CVE-2026-93088 CVE-2026-93088

SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages direct...

EUVD-2026-84218

vLLM through 0.29.0 contains a denial of service vulnerability in P2P KV offloading when OffloadingConnector is configured with TieringOffloadingSpec and a peer-to-peer secondary tier. Attackers can supply arbitrary remote host and port values in kvtransferparams to create unreachable peer sessio...

CVE-2026-94570: Improper Validation of Specified Type of Input

SGLang contains a DoS vulnerability caused by missing input validation for AUXDATA ZeroMQ control messages in the Decode worker, which enables an unauthenticated remote attacker with network reachability to the Decode control PULL socket to terminate the Decode control thread and cause a denial o...