8 matches found
ShellTorchChecker
Ferramenta de Verificação ShellTorch Esta ferramenta verifica se uma instância do TorchServe é vulnerável ao CVE-2023-43654 e fornece possíveis formas de mitigação. Para mais detalhes, consulte nosso relatório completo em...
Exploit for Server-Side Request Forgery in Pytorch Torchserve
CVE-2023-43654 ShellTorch is a chain of 3 Critical...
PyTorch TorchServe SSRF (CVE-2023-43654)
Binary data pytorchCVE-2023-43654.nbin...
PyTorch Model Server Registration / Deserialization Remote Code Execution Exploit
The PyTorch model server contains multiple vulnerabilities that can be chained together to permit an unauthenticated remote attacker arbitrary Java code execution. The first vulnerability is that the management interface is bound to all IP addresses and not just the loop back interface as the...
Warning: PyTorch Models Vulnerable to Remote Code Execution via ShellTorch
Cybersecurity researchers have disclosed multiple critical security flaws in the TorchServe tool for serving and scaling PyTorch models that could be chained to achieve remote code execution on affected systems. Israel-based runtime application security company Oligo, which made the discovery, ha...
PyTorch Model Server Registration and Deserialization RCE
The PyTorch model server contains multiple vulnerabilities that can be chained together to permit an unauthenticated remote attacker arbitrary Java code execution. The first vulnerability is that the management interface is bound to all IP addresses and not just the loop back interface as the...
CVE-2023-43654
creationtimestamp| type| source ---|---|--- 2023-09-29 02:37:05+00:00| seen| https://t.me/cibsecurity/71245 2023-10-09 21:14:14+00:00| seen| https://t.me/GDSpace/962 2023-10-12 16:04:40+00:00| seen|...
CVE-2023-43654
CVE-2023-43654 affects PyTorch TorchServe: default configuration allows input validation bypass, enabling SSRF via remote HTTP downloads and writing files to disk. Affected versions are 0.1.0 through 0.8.1; upgrading to TorchServe 0.8.2 mitigates the issue as the default behavior was changed to w...