CVE-2026-34159

CVE-2026-34159 Exploit RCE zero-click per il server RPC Lama.cpp versione b8487 di CVE-2026-34159 exploit sviluppato da Hassan Ali @Casp3r0x0 puoi trovare il write-up completo su https://www.pwntricks.com/ZeroClick-RCE-CVE-2026-34159-llama.cpp...

Kage

Kage Kage ka-geh è uno strumento ispirato ad AhMyth progettato per il server RPC di Metasploit per interagire con sessioni meterpreter e generare payload. Per ora supporta solo windows/meterpreter e android/meterpreter. Per Iniziare Segui queste istruzioni per avere una copia di Kage in esecuzion...

RpcProxyInvoke

RpcProxyInvoke Panoramica Per creare un metodo generale per eseguire codice locale e remoto, abbiamo progettato un metodo di esecuzione del codice relativamente oscuro, che internamente chiamiamo RpcCraft Self e RpcExec Remote Process. Questa tecnica sfrutta una metodologia ben nota tra gli...

EUVD-2026-64671

A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Performing a manipulation of the argument op/opparams results in deserialization. The attack may be...

EUVD-2026-64672

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpcserver::graphcompute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The pu...

CVE-2026-78148

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpcserver::graphcompute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The pu...

CVE-2026-78147

A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Performing a manipulation of the argument op/opparams results in deserialization. The attack may be...

CVE-2026-78148

A null pointer dereference exists in the ggml-RPC Server component of ggml-org llama.cpp (commit bec4772f6), specifically in the function rpc_server::graph_compute within the file ggml/src/ggml-rpc/ggml-rpc.cpp. A remote attacker can trigger this without authentication or user interaction, result...

CVE-2026-78148 ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereference

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpcserver::graphcompute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The pu...

CVE-2026-78147

A deserialization vulnerability exists in the ggml-RPC Server component of llama.cpp (commit bec4772f6), specifically in the deserialize_tensor function in ggml/src/ggml-rpc/ggml-rpc.cpp. Remote attackers can manipulate the op/op_params argument to trigger the flaw with no privileges or user inte...

PT-2026-79788

A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Performing a manipulation of the argument op/op params results in deserialization. The attack may be...

CVE-2026-39909

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...

CVE-2026-39909 llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...

CVE-2026-39909

llama.cpp before build b8585 contains a use-after-free vulnerability in the RPC server's GRAPH_RECOMPUTE handler. An unauthenticated remote attacker can store a computation graph, cause referenced buffers to be freed, then reclaim that memory with attacker-controlled content. Sending a subsequent...

EUVD-2026-64001

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...

CVE-2026-39909 llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...

CVE-2026-39909

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...

CVE-2026-39909 llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...

PT-2026-79400

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPH RECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...

CVE-2026-42976

This CVE concerns Windows RPC API: missing authentication for a critical function allows an authorized attacker to escalate privileges locally. Affected component: Windows RPC server/remote procedure call surface; root cause: lack of authentication on a sensitive function. Impact described as loc...