CVE-2026-105105

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

CVE-2026-105105 Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

EUVD-2026-92014

CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker ait-server in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticated remote attacker with network access to the ZeroMQ message bus to inject spacecraft command data, exfiltrate command a...

strelka-ui

Releasesrelease | Pull Requestspr | Issuesissues !GitHub releaseimg-version-badgerepo !Build Statusimg-actions-badgeactions-ci !Pull Requestsimg-pr-badgepr !Slackimg-slack-badgeslack !Licenseimg-license-badgelicense The Strelka Web UI is a browser and API-based file submission frontend for the...

LlamaStack-RCE-Deterministic-Supply-Chain-Exploitation-Hardening-Framework-CVE-2024-50050-

= doi.org/10.5281/zenodo.18278567 = orcid.org/0009-0007-7728-256X 💀 LlamaStack-RCE: CVE-2024-50050 サプライチェーンエクスプロイトフレームワーク 無制限・機密指定資料 - 認定レッドチーム専用 1. エグゼクティブサマリー（決定的解析） LlamaStack-RCE は、Meta Llama Stack における重大なリモートコード実行（RCE）脆弱性 CVE-2024-50050...

CVE-2020-11652-POC

CVE-2020-11652-CVE-2020-11652-POC これは CVE-2020-11651 & CVE-2020-11651 の修正版 POC です。 オリジナル版: https://github.com/Al1ex/CVE-2020-11652 修正されたエラー: TransportWarning: Unclosed transport! pip3 install salt RCE python3 CVE-2020-11652.py --master --port --exec-choose master --exec-cmd 'whoami'...

CVE-2019-6250-libzmq

CVE-2019-6250-libzmq ZeroMQZMQ ZeroMQZMQ는 고성능 비동기 메시징 라이브러리로, 분산 또는 병렬 컴퓨팅 환경을 위해 효율적이고 유연한 메시지 전달 메커니즘을 제공합니다. ZeroMQ는 다양한 메시징 패턴예: 요청-응답, 발행-구독, 푸시-풀, 프록시 등을 제공하며, 여러 전송 프로토콜TCP, IPC, PGM 등을 지원합니다. ZeroMQ의 설계 목표는 네트워크 프로그래밍을 단순화하고 효율적인 메시지 큐를 제공하여 성능을 향상시키는 것입니다. libzmq libzmq는 ZeroMQ의 핵심 구현...

CVE-2026-94624

A flaw was found in vLLM. A remote attacker can exploit a denial of service vulnerability in the P2P KV offloading mechanism. By supplying arbitrary remote host and port values, an attacker can create unreachable peer sessions that consume ZeroMQ sockets. This resource exhaustion leads to an...

CVE-2026-94570

SGLang contains a DoS vulnerability caused by missing input validation for AUXDATA ZeroMQ control messages in the Decode worker, which enables an unauthenticated remote attacker with network reachability to the Decode control PULL socket to terminate the Decode control thread and cause a denial o...

CVE-2026-93088

SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages direct...

EUVD-2026-84425

SGLang contains a DoS vulnerability caused by missing input validation for AUXDATA ZeroMQ control messages in the Decode worker, which enables an unauthenticated remote attacker with network reachability to the Decode control PULL socket to terminate the Decode control thread and cause a denial o...

CVE-2026-94570 CVE-2026-94570

SGLang contains a DoS vulnerability caused by missing input validation for AUXDATA ZeroMQ control messages in the Decode worker, which enables an unauthenticated remote attacker with network reachability to the Decode control PULL socket to terminate the Decode control thread and cause a denial o...

CVE-2026-94570 CVE-2026-94570

SGLang contains a DoS vulnerability caused by missing input validation for AUXDATA ZeroMQ control messages in the Decode worker, which enables an unauthenticated remote attacker with network reachability to the Decode control PULL socket to terminate the Decode control thread and cause a denial o...

EUVD-2026-84408

SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages direct...

CVE-2026-93088 CVE-2026-93088

SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages direct...

CVE-2026-93088 CVE-2026-93088

SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages direct...

CVE-2026-93088 CVE-2026-93088

SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages direct...

EUVD-2026-84218

vLLM through 0.29.0 contains a denial of service vulnerability in P2P KV offloading when OffloadingConnector is configured with TieringOffloadingSpec and a peer-to-peer secondary tier. Attackers can supply arbitrary remote host and port values in kvtransferparams to create unreachable peer sessio...

CVE-2026-94570: Improper Validation of Specified Type of Input

SGLang contains a DoS vulnerability caused by missing input validation for AUXDATA ZeroMQ control messages in the Decode worker, which enables an unauthenticated remote attacker with network reachability to the Decode control PULL socket to terminate the Decode control thread and cause a denial o...

PT-2026-96759

Name of the Vulnerable Software and Affected Versions SGLang affected versions not specified Description The multimodal generation runtime contains a flaw allowing unauthenticated arbitrary code execution. The issue occurs because the DiffusionServer within the disaggregated-diffusion orchestrato...