strelka

Releasesrelease | Documentationwiki | Pull Requestspr | Issuesissues !GitHub releaseimg-version-badgerepo !Build Statusimg-actions-badgeactions-ci !Pull Requestsimg-pr-badgepr !Slackimg-slack-badgeslack !Licenseimg-license-badgelicense Strelka is a real-time, container-based file scanning system...

LlamaStack-RCE-Deterministic-Supply-Chain-Exploitation-Hardening-Framework-CVE-2024-50050-

= doi.org/10.5281/zenodo.18278567 = orcid.org/0009-0007-7728-256X 💀 LlamaStack-RCE: CVE-2024-50050 Supply Chain Exploitation Framework UNRESTRICTED CLASSIFIED MATERIAL - FOR AUTHORIZED RED TEAMING ONLY 1. Executive Summary Deterministic Analysis LlamaStack-RCE is a high-fidelity simulation and...

Exploit for CVE-2026-105192

CVE-2026-105192 LMCache Unauthenticated RCE via Pickle Dese...

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

A critical vulnerability in LMCache , open-source software that speeds up large language model LLM servers such as vLLM, lets an attacker run code on the cache server without logging in, and no fixed version is available. The flaw is in LMCache's multiprocess mode, where the cache runs as a...

CVE-2026-105192

LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. Messages on that socket are msgpack. Extension code 1 is passed to DeviceIPCWrapper.Deserialize, which calls pickle.loads, while the server i...

CVE-2026-105192 LMCache Unauthenticated RCE in multiprocess mode via pickle deserialization

LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. Messages on that socket are msgpack. Extension code 1 is passed to DeviceIPCWrapper.Deserialize, which calls pickle.loads, while the server i...

EUVD-2026-94261

LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. Messages on that socket are msgpack. Extension code 1 is passed to DeviceIPCWrapper.Deserialize, which calls pickle.loads, while the server i...

CVE-2026-105192 LMCache Unauthenticated RCE in multiprocess mode via pickle deserialization

LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. Messages on that socket are msgpack. Extension code 1 is passed to DeviceIPCWrapper.Deserialize, which calls pickle.loads, while the server i...

CVE-2026-105192

The LMCache multiprocess (distributed) mode is vulnerable to unauthenticated Remote Code Execution (RCE) due to insecure pickle deserialization . The application opens an unauthenticated ZeroMQ ROUTER socket (defaulting to port 5555 ) to allow worker processes to share KV cache blocks. When a ZMQ...

PT-2026-107458

Name of the Vulnerable Software and Affected Versions LMCache versions 0.3.9 through 0.5.5 LMCache version 0.5.6 release candidates Description In multiprocess or distributed mode, the software opens an unauthenticated ZeroMQ ROUTER socket on a transport port default 5555 to allow worker processe...

CVE-2026-106513 MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change

MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core application, the ZeroMQ plugin, and the SimpleBackgroundJobs plugin—through its web UI and API to site-admin users. The background job workers trust raw Redis job payloads without additional...

EUVD-2026-93669

MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core application, the ZeroMQ plugin, and the SimpleBackgroundJobs plugin—through its web UI and API to site-admin users. The background job workers trust raw Redis job payloads without additional...

CVE-2026-106513 MISP: Site-Admin Can Repoint Redis Workers to Attacker-Controlled Server via UI/API Configuration Change

MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core application, the ZeroMQ plugin, and the SimpleBackgroundJobs plugin—through its web UI and API to site-admin users. The background job workers trust raw Redis job payloads without additional...

CVE-2026-106513

The MISP platform contains a vulnerability where users with site-admin privileges can reconfigure Redis host addresses for the core application, ZeroMQ plugin, and SimpleBackgroundJobs plugin via the web UI or API. Because background job workers trust raw Redis payloads without validation, an att...

CVE-2020-11652-POC

CVE-2020-11652-CVE-2020-11652-POC This is a fix POC CVE-2020-11651 & CVE-2020-11651 Original version: https://github.com/Al1ex/CVE-2020-11652 Error Fixed: TransportWarning: Unclosed transport! pip3 install salt RCE python3 CVE-2020-11652.py --master --port --exec-choose master --exec-cmd 'whoami'...

PT-2026-107118

Name of the Vulnerable Software and Affected Versions MISP affected versions not specified Description Critical infrastructure settings, specifically the Redis host addresses used by the core application, the ZeroMQ plugin, and the SimpleBackgroundJobs plugin, are exposed through the web UI and A...

CVE-2019-6250-libzmq

CVE-2019-6250-libzmq ZeroMQZMQ ZeroMQZMQ is a high-performance asynchronous messaging library designed to provide an efficient and flexible message delivery mechanism for distributed or parallel computing environments. ZeroMQ offers multiple message delivery patterns such as request-reply,...

CVE-2026-105105

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

EUVD-2026-92014

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

CVE-2026-105105 Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...