ShellTorchChecker

Herramienta de verificación de ShellTorch Esta herramienta comprueba si una instancia de TorchServe es vulnerable a CVE-2023-43654 y proporciona posibles formas de mitigación. Para obtener más detalles, consulte nuestro informe completo en...

Billions of Apple Devices at Risk from “AirBorne” AirPlay Vulnerabilities

Oligo Security uncovers "AirBorne," a set of 23 vulnerabilities in Apple AirPlay affecting billions of devices. Learn how…...

GHSA-M2MJ-PR4F-H9JP TorchServe ZipSlip

Impact Using the model/workflow management API, there is a chance of uploading potentially harmful archives that contain files that are extracted to any location on the filesystem that is within the process permissions. Leveraging this issue could aid third-party actors in hiding harmful code in...

TorchServe Server-Side Request Forgery vulnerability

Impact Remote Server-Side Request Forgery SSRF Issue: TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity of the system and...