Lucene search
+L

9 matches found

osv_pysec
osv_pysec
•added 2026/06/21 2:16 p.m.•23 views

PYSEC-2026-247

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load...

7.8CVSS6.9AI score0.0048EPSS
SaveExploits1References2
PyPA
PyPA
•added 2026/06/21 2:16 p.m.•24 views

PYSEC-2026-247

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load...

8.1CVSS6.9AI score0.0048EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2026/06/21 2:16 p.m.•30 views

CVE-2025-71378

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load...

8.1CVSS0.0048EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/06/21 1:26 p.m.•16 views

CVE-2025-71378 picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load...

8.1CVSS6.9AI score0.0048EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/06/21 1:26 p.m.•16 views

CVE-2025-71378

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load...

8.1CVSS6.9AI score0.0048EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2026/06/21 1:26 p.m.•22 views

CVE-2025-71378 picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load...

7.6CVSS6.5AI score
SaveExploits0References4
EUVD
EUVD
•added 2026/06/21 1:26 p.m.•23 views

EUVD-2025-210294

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load...

8.1CVSS6.9AI score0.0048EPSS
SaveExploits1References2
osv_ghsa
osv_ghsa
•added 2025/08/26 9:38 p.m.•17 views

GHSA-9W88-8RMG-7G2P Picklescan is missing detection when calling built-in Python cProfile.runctx

Summary Using cProfile.runctx function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to cProfile.runctx function in reduce method Then when the victim after...

8.1CVSS6.5AI score0.0048EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2025/08/26 9:38 p.m.•22 views

Picklescan is missing detection when calling built-in Python cProfile.runctx

Summary Using cProfile.runctx function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to cProfile.runctx function in reduce method Then when the victim after...

8.1CVSS6.5AI score0.0048EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder