Lucene search
+L

9 matches found

PyPA
PyPA
•added 2026/06/21 2:16 p.m.•20 views

PYSEC-2026-247

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load...

8.1CVSS6.2AI score0.0048EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2026/06/21 2:16 p.m.•12 views

PYSEC-2026-247

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load...

7.8CVSS6.2AI score0.0048EPSS
SaveExploits1References2
NVD
NVD
•added 2026/06/21 2:16 p.m.•23 views

CVE-2025-71378

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load...

8.1CVSS0.0048EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2026/06/21 1:26 p.m.•12 views

CVE-2025-71378 picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load...

8.1CVSS6.8AI score0.0048EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/06/21 1:26 p.m.•11 views

CVE-2025-71378

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load...

8.1CVSS6.4AI score0.0048EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/06/21 1:26 p.m.•19 views

EUVD-2025-210294

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load...

8.1CVSS6.4AI score0.0048EPSS
SaveExploits1References2
OSV
OSV
•added 2026/06/21 1:26 p.m.•18 views

CVE-2025-71378 picklescan - Remote Code Execution via Undetected cProfile.runctx in Pickle Files

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load...

7.6CVSS6.5AI score
SaveExploits0References4
OSV
OSV
•added 2025/08/26 9:38 p.m.•13 views

GHSA-9W88-8RMG-7G2P Picklescan is missing detection when calling built-in Python cProfile.runctx

Summary Using cProfile.runctx function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to cProfile.runctx function in reduce method Then when the victim after...

8.1CVSS6.3AI score0.0048EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2025/08/26 9:38 p.m.•16 views

Picklescan is missing detection when calling built-in Python cProfile.runctx

Summary Using cProfile.runctx function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to cProfile.runctx function in reduce method Then when the victim after...

8.1CVSS6.3AI score0.0048EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder