strelka-ui

Releasesrelease | Pull Requestspr | Issuesissues !GitHub releaseimg-version-badgerepo !Build Statusimg-actions-badgeactions-ci !Pull Requestsimg-pr-badgepr !Slackimg-slack-badgeslack !Licenseimg-license-badgelicense The Strelka Web UI is a browser and API-based file submission frontend for the...

CVE-2019-6250-libzmq

CVE-2019-6250-libzmq ZeroMQZMQ ZeroMQZMQ is a high-performance asynchronous messaging library designed to provide an efficient and flexible message delivery mechanism for distributed or parallel computing environments. ZeroMQ offers multiple message delivery patterns such as request-reply,...

CVE-2020-11652-POC

CVE-2020-11652-CVE-2020-11652-POC This is a fix POC CVE-2020-11651 & CVE-2020-11651 Original version: https://github.com/Al1ex/CVE-2020-11652 Error Fixed: TransportWarning: Unclosed transport! pip3 install salt RCE python3 CVE-2020-11652.py --master --port --exec-choose master --exec-cmd 'whoami'...

LlamaStack-RCE-Deterministic-Supply-Chain-Exploitation-Hardening-Framework-CVE-2024-50050-

= doi.org/10.5281/zenodo.18278567 = orcid.org/0009-0007-7728-256X 💀 LlamaStack-RCE: CVE-2024-50050 Supply Chain Exploitation Framework UNRESTRICTED CLASSIFIED MATERIAL - FOR AUTHORIZED RED TEAMING ONLY 1. Executive Summary Deterministic Analysis LlamaStack-RCE is a high-fidelity simulation and...

CLEANSTART-2023-QC40432 ZeroMQ parser in tcpdump before 4

Security vulnerability affects the tcpdump package. The ZeroMQ parser in tcpdump before 4...

CLEANSTART-2023-YZ65317 pointer overflow, with code execution, was discovered in ZeroMQ libzmq (aka 0MQ) 4

Security vulnerability affects the zeromq package. A pointer overflow, with code execution, was discovered in ZeroMQ libzmq aka 0MQ 4...

CLEANSTART-2023-AQ50174 In ZeroMQ libzmq before 4

Security vulnerability affects the zeromq package. In ZeroMQ libzmq before 4...

CLEANSTART-2023-ZX80719 In ZeroMQ before version 4

Security vulnerability affects the zeromq package. In ZeroMQ before version 4...

PT-2026-142056

Security vulnerability affects the zeromq package. In ZeroMQ before version 4...

Vllm P2p Never Connected Zmq_exhaustion

Summary When the "OffloadingConnector" uses "TieringOffloadingSpec" with a P2P secondary tier, an API client can submit many unique non-listening peer addresses through "kvtransferparams.prefill". vLLM keeps every never-established P2P session and its ZeroMQ sockets after the request finishes. On...

vllm p2p never connected zmq_exhaustion

Summary When the OffloadingConnector uses TieringOffloadingSpec with a P2P secondary tier, an API client can submit many unique non-listening peer addresses through kvtransferparams.prefill. vLLM keeps every never-established P2P session and its ZeroMQ sockets after the request finishes. On vLLM...

EUVD-2026-84218

vllm p2p never connected zmqexhaustion...

GHSA-FRVG-QW88-HWW9 vllm p2p never connected zmq_exhaustion

Summary When the OffloadingConnector uses TieringOffloadingSpec with a P2P secondary tier, an API client can submit many unique non-listening peer addresses through kvtransferparams.prefill. vLLM keeps every never-established P2P session and its ZeroMQ sockets after the request finishes. On vLLM...

Exploit for CVE-2026-105105

CVE-2026-105105: NASA-AMMOS AIT-Core Unauthenticated ZeroMQ Co...

EUVD-2026-94261

LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport...

Astra Linux – Vulnerability in Zeromq3

There is a flaw in the zeromq server in versions before 4.3.3, located in src/decoderallocators.hpp. The decoder’s static allocator could have its size changed, but the buffer remains unchanged since it is a static buffer. A remote, unauthenticated attacker who sends a crafted request to the zero...

Astra Linux – vulnerability in zeromq3

A flaw involving uncontrolled resource consumption memory leak was found in ZeroMQ’s src/xpub.cpp in versions prior to 4.3.3. This flaw enables a remote, unauthenticated attacker to send specially crafted PUB messages that consume excessive memory when CURVE/ZAP authentication is disabled on the...

Exploit for CVE-2026-105192

CVE-2026-105192 LMCache Unauthenticated RCE via Pickle Dese...

Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

A critical vulnerability in LMCache , open-source software that speeds up large language model LLM servers such as vLLM, lets an attacker run code on the cache server without logging in. The project fixed the flaw in version 0.5.6, released on October 15. The flaw is in LMCache's multiprocess mod...

GHSA-VV44-HJM2-QW2F Duplicate Advisory: Remote code execution via unsafe deserialization in multiprocess mode transport

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-w5f2-9q9c-ff4h. This link is maintained to preserve external references. Original Description LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes c...