79 matches found
CVE-2025-14925 Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability
Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Accelerate. User interaction is required to exploit this vulnerability in that the target...
CVE-2025-14925 Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability
Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Accelerate. User interaction is required to exploit this vulnerability in that the target...
Deserialization of Untrusted Data
Overview accelerate is an Accelerate Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the parsing of checkpoints. An attacker can execute arbitrary code by convincing a user to open a specially crafted file or visit a malicious web page. Note: The report w...
3-04-2025-ttm (0.1.0), a2 (>=0.10.5, <=0.10.13) +3359 more potentially affected by CVE-2025-14925 via accelerate (>=0.5.1, <=1.14.0)
accelerate PYPI version =0.5.1, =0.10.5, =5.0.0, =5.0.5 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 - aait-store-cut-part-003 0.0.1 - aait-store-cut-part-004 0.0.1 - aait-store-cut-part-005 0.0.1 - aait-store-cut-part-006 0.0.1 - aait-store-cut-part-007 0.0.1 -...
CVE-2025-14925
CVE-2025-14925 affects Hugging Face Accelerate. The vulnerability stems from improper validation during parsing of checkpoints, enabling deserialization of untrusted data. An attacker can trigger remote code execution by convincing a user to visit a malicious page or open a crafted file, with cod...
Hugging Face Accelerate 代码问题漏洞
Hugging Face Accelerate is a lightweight tool library for Python open sourced by Hugging Face. A code issue vulnerability exists in Hugging Face Accelerate that stems from a lack of validation of user-supplied data when parsing checkpoints, which could lead to deserialization of untrusted data an...
(0Day) Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Accelerate. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
PT-2025-52382
Name of the Vulnerable Software and Affected Versions Hugging Face Accelerate affected versions not specified Description A flaw exists in Hugging Face Accelerate that allows remote attackers to execute arbitrary code on affected systems. Exploitation requires user interaction, such as visiting a...
EUVD-2019-4095
Malware in sbrugna...
Malicious code in accelerate-cli (npm)
The package accelerate-cli was found to contain malicious code...
Malicious code in generator-accelerate-mern (npm)
The package generator-accelerate-mern was found to contain malicious code...
Malicious code in generator-accelerate-react (npm)
The package generator-accelerate-react was found to contain malicious code...
MAL-2025-21264 Malicious code in generator-accelerate-mern (npm)
The package generator-accelerate-mern was found to contain malicious code...
MAL-2025-21270 Malicious code in generator-accelerate-redux (npm)
The package generator-accelerate-redux was found to contain malicious code...
MAL-2025-21266 Malicious code in generator-accelerate-node-api (npm)
The package generator-accelerate-node-api was found to contain malicious code...
MAL-2025-21268 Malicious code in generator-accelerate-react (npm)
The package generator-accelerate-react was found to contain malicious code...
MAL-2025-21267 Malicious code in generator-accelerate-node-microservice (npm)
The package generator-accelerate-node-microservice was found to contain malicious code...
Malicious code in generator-accelerate-couchdb (npm)
The package generator-accelerate-couchdb was found to contain malicious code...