Jiajia Liu

Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake readString

Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Server

Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints

Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write

LightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_value

Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queue

LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service

LightLLM through 1.2.0 Missing Authentication on RL Control Routes

LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service