llama.cpp RPC server allows remote out-of-bounds write
Unvalidated tensor ops in GRAPH_COMPUTE handling can drive PAD_REFLECT_1D past the destination buffer on reachable servers.
By tensor#vulnerability
DataStax Enterprise 6.8 exposed to pre-auth RCE via Gremlin
Default unauthenticated Gremlin Server plus a Groovy sandbox bypass lets remote attackers run OS commands as the dse user.
By staffUnauthenticated root RCE hits Confluent ksqlDB 7.9.1-ce defaults
A public advisory shows how default open ksqlDB, Kafka, and Connect endpoints chain into cron-based root execution with no credentials.
By staff