DEBIAN-CVE-2026-78148

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpcserver::graphcompute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The pu...

CVE-2026-78148

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpcserver::graphcompute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The pu...

DEBIAN-CVE-2026-78147

A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Performing a manipulation of the argument op/opparams results in deserialization. The attack may be...

CVE-2026-78147

A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Performing a manipulation of the argument op/opparams results in deserialization. The attack may be...

CVE-2026-78148

A null pointer dereference exists in the ggml-RPC Server component of ggml-org llama.cpp (commit bec4772f6), specifically in the function rpc_server::graph_compute within the file ggml/src/ggml-rpc/ggml-rpc.cpp. A remote attacker can trigger this without authentication or user interaction, result...

CVE-2026-78148 ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereference

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpcserver::graphcompute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The pu...

CVE-2026-78147

A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Performing a manipulation of the argument op/opparams results in deserialization. The attack may be...

CVE-2026-78147 ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp deserialize_tensor deserialization

A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Performing a manipulation of the argument op/opparams results in deserialization. The attack may be...

CVE-2026-78147

A deserialization vulnerability exists in the ggml-RPC Server component of llama.cpp (commit bec4772f6), specifically in the deserialize_tensor function in ggml/src/ggml-rpc/ggml-rpc.cpp. Remote attackers can manipulate the op/op_params argument to trigger the flaw with no privileges or user inte...

windows-coerced-authentication-methods

Dieses Repository enthält eine Liste vieler Methoden, um eine Windows-Maschine dazu zu zwingen, sich bei einer vom Angreifer kontrollierten Maschine zu authentifizieren. Alle diese Methoden können von einem Standardbenutzer in der Domäne aufgerufen werden, um das Maschinenkonto der...

magicNetdefs

magicNetdfs المرجع https://github.com/Wh04m1001/DFSCoerce الاستخدام يجري النظر في مزيد من التحديثات لاحقًا؛ حاليًا يتم فقط التحقق من قابلية استغلال طريقة RPC هذه، وسيتم التفكير لاحقًا في الاستغلال المحدد للرمز المميز SYSTEM الوصف استخدام بروتوكول MS-DFSNM...

Elevator

Descrizione Elevator consente di bypassare l'UAC e generare un processo elevato con privilegi di amministratore completo. Ciò viene fatto abusando del comportamento del server RPC che implementa la funzionalità UAC, come dimostrato da James Forshaw nel suo articolo Calling Local Windows RPC Serve...

RPC-Triage

RPC-Triage Statico vs dinamico, leggete questo prima. Vale la pena chiarire subito il confine tra analisi dinamica e statica : questo strumento esegue la sua classificazione esclusivamente tramite analisi statica. Legge le strutture MIDL/NDR compilate direttamente dal binario e non esegue mai...

PT-2026-79788

A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Performing a manipulation of the argument op/op params results in deserialization. The attack may be...

MSRPC-to-ATTACK

MSRPC-To-ATT&CK Ein Repository, das häufig verwendete MSRPC-Protokolle auf Mitre ATT&CK abbildet und dabei Kontext zu potenziellen Aktivitätsindikatoren, Präventionsmöglichkeiten und zugehörigen RPC-Informationen liefert. Liste der MSRPC-Protokolle: MS-SCMR: Service Control Manager Remote Protoco...

SharpEfsPotato

SharpEfsPotato Escalation locale dei privilegi da SeImpersonatePrivilege tramite EfsRpc. Basato su SweetPotato di @EthicalChaos e SharpSystemTriggers/SharpEfsTrigger di @cube0x0. Utilizzo root@kitploit: C:\tempSharpEfsPotato.exe -h SharpEfsPotato by @bugch3ck Local privilege escalation from...

Kernelhub

Benvenuto in Kernelhub Premessa L'intenzione originale della realizzazione del progetto è per imparare, analizzare e ricercare le ultime vulnerabilità del kernel senza dover guardare il sistema e i contenuti correlati. Questo progetto è una raccolta proprietaria, ad eccezione dei test falliti o n...

dsh2shell

dsh2shell Unauthenticated RCE PoC for expo...

DEBIAN-CVE-2026-39909

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...

CVE-2026-39909

llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPHRECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with...