munge

MUNGE Uid 'N' Gid Emporium MUNGE MUNGE Uid 'N' Gid Emporium is an authentication service for creating and validating user credentials. It is designed to be highly scalable for use in an HPC cluster environment. It provides a portable API for encoding the user's identity into a tamper-proof...

CVE-2021-1056

CVE-2021-1056 CVE-2021-1056 is a vulnerability I submitted to NVIDIA PSIRT. Personally, it may lead to high security risks in multi-tenant HPC clusters, especially in cloud machine-learning platforms. This repository simply demonstrates the vulnerability on GPU containers created by...

CVE-2026-59133

Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...

CVE-2026-59124

Deserialization of untrusted data in Microsoft High Performance Computing HPC Pack allows an unauthorized attacker to execute code over a network...

CVE-2026-59133 Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability

...

CVE-2026-59133

Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...

CVE-2026-59133

The CVE-2026-59133 entry concerns the Microsoft High Performance Computing (HPC) Pack, where an authorized attacker can escalate privileges over the network. According to the data, the issue enables Execution with unnecessary privileges, leading to High impact on confidentiality, integrity, and a...

EUVD-2026-56310

Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...

CVE-2026-59124 Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability

...

CVE-2026-59124

Deserialization of untrusted data in Microsoft High Performance Computing HPC Pack allows an unauthorized attacker to execute code over a network...

CVE-2026-59124

CVE-2026-59124 describes a deserialization vulnerability in Microsoft High Performance Computing (HPC) Pack that allows an unauthenticated attacker to execute arbitrary code over the network. The root cause is untrusted data deserialization within HPC Pack components. The vulnerability enables re...

EUVD-2026-56307

Deserialization of untrusted data in Microsoft High Performance Computing HPC Pack allows an unauthorized attacker to execute code over a network...

CVE-2026-59124 Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability

...

Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft High Performance Computing HPC Pack allows an unauthorized attacker to execute code over a network...

Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability

Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...

CVE-2026-59133: Execution with Unnecessary Privileges

Execution with unnecessary privileges in Microsoft High Performance Computing HPC Pack allows an authorized attacker to elevate privileges over a network...

CVE-2026-59124: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft High Performance Computing HPC Pack allows an unauthorized attacker to execute code over a network...

PT-2026-70412

Name of the Vulnerable Software and Affected Versions Microsoft High Performance Computing HPC Pack affected versions not specified Description Execution with unnecessary privileges allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...

PT-2026-70404

Name of the Vulnerable Software and Affected Versions Microsoft High Performance Computing HPC Pack affected versions not specified Description An issue exists where the software performs deserialization of untrusted data. This allows an unauthorized attacker to execute arbitrary code over a...

Malicious Package

Overview mrmustard is a malicious package. This package contains malicious code, and its content was quarantined by the official package manager. Version 0.7.4 was published to PyPI using stolen maintainer credentials and contained an injected credential stealer. The malicious code ran upon impor...