589 matches found
CVE-2026-90919
LightLLM through 1.2.0 is vulnerable to unauthenticated remote code execution via the Config Server 's /visual_register WebSocket endpoint. The endpoint passes the first client frame directly to pickle.loads() , allowing an attacker who can reach the Config Server port to send a malicious seriali...
CVE-2024-37054
CVE-2024-37054 — MLflow pyfunc Désérialisation RCE Sévérité: Critique Affecté: MLflow 0.9.0 – 2.14.1 Type: Exécution de code arbitraire via désérialisation pickle Python Description mlflow.pyfunc.loadmodel désérialise pythonmodel.pkl à partir du store d'artefacts sans aucune vérification. Un...
Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE
Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE Approche alternative : test de reverse shell et de callback Vue d'ensemble Ce dépôt contient des approches alternatives de payload pour la vulnérabilité RCE d'InvokeAI CVE-2024-12029 lorsque l'injection de clé SSH échoue. Les payloads...
Pickle-Deserialization-Exploit-in-Transformers
Exploitation de la vulnérabilité de désérialisation pickle dans Transformers Introduction à l'expérience Présentation du mécanisme de désérialisation pickle et de son principe d'attaque par reduce, reproduction de la vulnérabilité de désérialisation CVE-2024-3568 dans la bibliothèque Hugging Face...
rpc-rce.py
rpc.py RCE Exploit CVE-2022-35411 This is an updated and improved exploit for CVE-2022-35411 , targeting vulnerable versions of rpc.py Original exploit by : Elias Hohl Enhanced by : x7331 for usability, portability, and automation Vulnerability Summary The vulnerability lies in rpc.py's unsafe...
CVE-2025-61765_PoC
Summary A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which the attacker previously gained access to the message queue that the servers use...
CVE-2026-86793
SGLang allows unauthenticated pickle deserialization through /updateweightsfromtensor when no auth keys are configured, and the SafeUnpickler policy can be bypassed because builtins.import and builtins.getattr are resolvable, enabling code execution via pickle REDUCE...
EUVD-2026-76073
SGLang allows unauthenticated pickle deserialization through /updateweightsfromtensor when no auth keys are configured, and the SafeUnpickler policy can be bypassed because builtins.import and builtins.getattr are resolvable, enabling code execution via pickle REDUCE...
CVE-2026-86793 CVE-2026-86793
SGLang allows unauthenticated pickle deserialization through /updateweightsfromtensor when no auth keys are configured, and the SafeUnpickler policy can be bypassed because builtins.import and builtins.getattr are resolvable, enabling code execution via pickle REDUCE...
CVE-2026-86793
SGLang is an AI inference framework vulnerable to unauthenticated remote code execution through its /update_weights_from_tensor endpoint. When no authentication keys are configured, an attacker can send a crafted pickle payload that bypasses the SafeUnpickler policy — because builtins.import and ...
PT-2026-89864
🚨 AI INFRA CRISIS: SGLang just got hit with an unauthenticated RCE CVE-2026-86793 — the 4th critical CVE in AI infrastructure in just 18 days. No vendor patch yet. AI inference servers are now primary attack surface. Time to audit your stack. AI cybersecurity infosec...
PYSEC-2026-3972 PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability CWE-502 in the checkpoint loading mechanism. The LightningModule.loadfromcheckpoint method, which is commonly used to load saved model states, internally calls torch.load without setting the...
PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability CWE-502 in the checkpoint loading mechanism. The LightningModule.loadfromcheckpoint method, which is commonly used to load saved model states, internally calls torch.load without setting the...
CVE-2026-87874
A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...
CVE-2026-87874 Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller
A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...
CVE-2026-87874
The memcached cache plugin in the community.general Ansible collection contains a deserialization flaw. Although its documentation states records are stored in JSON, the plugin performs no explicit serialization and relies on python-memcached , which pickles values on write and unpickles them on ...
CVE-2026-87874 Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution on the ansible controller
A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...
EUVD-2026-75115
A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...
CVE-2026-87874
A flaw was found in the memcached cache plugin of the community.general Ansible collection. Although its documentation states that records are stored in JSON format, the plugin performs no explicit serialization and relies on python-memcached, which pickles values on write and unpickles them on...