Triton

Triton è una libreria di analisi binaria dinamica. Fornisce componenti interni che ti permettono di costruire i tuoi strumenti di analisi dei programmi, automatizzare il reverse engineering, eseguire la verifica del software o semplicemente emulare codice. Esecuzione simbolica dinamica Analisi...

CVE-2026-24207

CVE-2026-24207 — NVIDIA Triton: bypass dell'autenticazione SageMaker verso RCE non autenticata Gli attaccanti non autenticati possono raggiungere la superficie di gestione dei modelli di NVIDIA Triton Inference Server sulle porte HTTP SageMaker e Vertex AI, aggirando la configurazione...

exrop

Exrop Generatore automatico di catene ROP per binari x86-64, basato sull'esecuzione simbolica di Triton. Caratteristiche Imposta i registri a costanti o ad altri registri rdi=0x41414141, rdi=rax Scrive in memoria indirizzi/valori costanti o basati su registri Scrive stringhe/byte in memoria...

NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass

NVIDIA Triton Inference Server contains an authentication bypass vulnerability, letting attackers bypass authentication and potentially execute code, escalate privileges, tamper data, cause denial of service, or disclose information, exploit requires no special conditions. id: CVE-2026-24207 info...

CVE-2026-47155 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0...

GHSA-8WR5-JM2H-8R4F vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0...

GHSA-33CG-GXV8-3P8G vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0...

GHSA-RWXX-MRJM-WC2M vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0...

CVE-2026-55574 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0...

CVE-2026-47630

CVE-2026-47630 — NVIDIA Triton Inference Server: استدعاء dlopen عشوائي عبر TRITONBATCHSTRATEGYPATH ثغرة اجتياز المسار المطلق في محمّل استراتيجية التجميع المخصص داخل triton-inference-server/core. تُمرَّر معلمة من معلمات إعداد النموذج دون أي تحقق إلى dlopenRTLDNOW | RTLDLOCAL، لذا فإن أي شخص قادر ع...

exrop

Exrop Automatic ROP chain generator for x86-64 binaries, powered by Triton symbolic execution. Features Set registers to constants or other registers rdi=0x41414141, rdi=rax Write to memory constant and register-based addresses/values Write strings/bytes to memory Function calls with mixed...

Triton VM Soundness Vulnerability due to Missing Constraint

The instruction spongeabsorbmem Triton VM fails to verify that hashed values come from the claimed memory location. Malicious provers can substitute arbitrary data instead of actual memory contents. Any application using instruction spongeabsorbmem to hash memory data can be given a proof for a...

GHSA-VJF8-9FX6-MV6X Triton VM Soundness Vulnerability due to Missing Constraint

The instruction spongeabsorbmem Triton VM fails to verify that hashed values come from the claimed memory location. Malicious provers can substitute arbitrary data instead of actual memory contents. Any application using instruction spongeabsorbmem to hash memory data can be given a proof for a...

CVE-2026-47629

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation. A successful exploit might lead to denial of service...

CVE-2026-47630

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution...

CVE-2026-47627

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lead to denial of service...

CVE-2026-47628

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resources without limits. A successful exploit might lead to denial of service...

CVE-2026-47606

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution and information disclosure...

CVE-2026-47630

NVIDIA Triton Inference Server for Linux has an absolute path traversal vulnerability exploitable with low privileges locally, rated CVSS 5.5 (MEDIUM), potentially leading to code execution. No exploitation or patch details are provided; monitoring for updates is advised.

CVE-2026-47630

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution...