statecraftcyber

Statecraft Cyber Intelligence Threat intelligence platform in Portuguese built from scratch as a personal Blue Team project. It aggregates data from global open sources and turns it into technical briefings, classified news, enriched CVEs, and structured IOCs — all in PT-BR, continuously updated...

AI-Vulnerabilities-Playground

AIVP AI Vulnerabilities Playground AIVP is a hands-on AI security lab platform spanning 4 phases and 50+ labs currently 50+ scenarios across the codebase. It combines Ollama + Llama 3.1 , a FastAPI backend, and a React/Vite frontend to let practitioners safely practice offensive and defensive AI...

Llama-Stack-0.4.0rc3-local-CVE-2026-25211

Llama Stack pgvector Password Leak PoC CVE-2026-25211 Local Proof-of-Concept demonstrating plaintext database password exposure in initialization logs of llama-stack versions 0.4.0rc3. Overview In affected versions of llama-stack before 0.4.0rc3, when using the pgvector vector store provider, the...

Exponentiated-Gradient-Descent-LLM-Attack

Change Readme File. This is a Project that explores the Exponentiated Gradient Descent optimizaiton method to produce adversarial suffix to attack algined Large Language Models. The method is shown to be effective on Llama-2 chat model with 7 Billion parameters. To run pgd script on a number of...

D-Scan

When Context Bites: Detecting RAG Poisoning via Document-Level Attention Collapse Official implementation of SIGIR 2026 paper When Context Bites: Detecting RAG Poisoning via Document-Level Attention Collapse. D-SCAN is an analysis framework for detecting document poisoning attacks in RAG...

refusal-relocates

Project Page · Quick start · Usage · CLI · Results · Reproduce · FAQ · Citation News 2026-09-28 Code released, with the run records and scripts that rebuild the paper's tables. Overview A few dozen harmful examples can remove an aligned model's refusal of harmful requests. Prior work localizes...

one-multiply-too-many-cve-2026-70638-llama-cpp-android-jni-integer-overflow

CVE-2026-70638 - llama.cpp LLaMA-Android JNI Integer Overflow Companion PoC for the Hunt-Benito article "One Multiply Too Many: CVE-2026-70638 — Integer Overflow in llama.cpp's Android JNI Heap Allocation" →...

LlamaStack-RCE-Deterministic-Supply-Chain-Exploitation-Hardening-Framework-CVE-2024-50050-

= doi.org/10.5281/zenodo.18278567 = orcid.org/0009-0007-7728-256X 💀 LlamaStack-RCE: CVE-2024-50050 Supply Chain Exploitation Framework UNRESTRICTED CLASSIFIED MATERIAL - FOR AUTHORIZED RED TEAMING ONLY 1. Executive Summary Deterministic Analysis LlamaStack-RCE is a high-fidelity simulation and...

llama-factory-webui-rce-cve-2026-58116-trust-remote-code-model-path-injection

CVE-2026-58116 — LLaMA-Factory WebUI RCE via trustremotecode Proof of concept for CVE-2026-58116 CVSS 9.8 Critical: remote code execution in LLaMA-Factory = v0.9.5. The LLaMA-Factory WebUI hardcodes trustremotecode=True when loading a model src/llamafactory/webui/chatter.py:139 and...

Quotes llama <= 3.1.5 - SQL Injection

Quotes llama 3.1.5 and earlier contains a time-based blind SQL injection vulnerability caused by improper control of a SQL identifier. The selectsearch AJAX handler registered for guests via wpajaxnoprivselectsearch reads the attacker-controlled 'sc' parameter from $POST and substitutes it into t...

CVE-2025-71439

llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-serve...

CVE-2025-71439

Versions of llama.cpp before b5649 are vulnerable to a heap out-of-bounds read in llama_vocab::impl::print_info(). An attacker can crash llama-cli or llama-server during model loading by providing a crafted GGUF model with an oversized special token ID and a short tokenizer.ggml.tokens array, for...

CVE-2024-58400 llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs

llama.cpp before b3701 contains an out-of-bounds read vulnerability in llamadecodeinternal and llamaencodeinternal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with...

CVE-2024-58400 llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs

llama.cpp before b3701 contains an out-of-bounds read vulnerability in llamadecodeinternal and llamaencodeinternal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with...

CVE-2025-71439 llama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_info

llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-serve...

CVE-2024-58400

Versions of llama.cpp prior to b3701 are susceptible to an out-of-bounds read vulnerability within the llama_decode_internal and llama_encode_internal functions. This flaw is caused by a lack of validation on token IDs; remote unauthenticated attackers can exploit this by sending integer-array pr...

EUVD-2025-211201

llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-serve...

CVE-2025-71439 llama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_info

llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-serve...

CVE-2026-116467

A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown functionality of the file src/llama-sampler.cpp of the component Mirostat Sampler. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The...

CVE-2025-71439

llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-serve...