Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE

Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE 替代方案：反向Shell与回调测试 概述 本仓库提供了针对 InvokeAI RCE 漏洞（CVE-2024-12029）的替代负载方法，适用于 SSH 密钥注入失败的情况。这些负载旨在测试 Pickle 反序列化是否实际发生，并提供替代的访问方法。 问题陈述 当 SSH 密钥注入负载成功投递（状态 201），但 SSH 访问仍需密码时，表明以下情况之一： 1. Pickle 反序列化未发生 2. 命令被阻止/沙箱化 3. 执行方法不兼容 解决方案：替代负载 📁...

Exploit for CVE-2024-12029

Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE...

CVE-2024-12029 Remote Code Execution via Model Deserialization in invoke-ai/invokeai

A remote code execution vulnerability exists in invoke-ai/invokeai versions 5.3.1 through 5.4.2 via the /api/v2/models/install API. The vulnerability arises from unsafe deserialization of model files using torch.load without proper validation. Attackers can exploit this by embedding malicious cod...

InvokeAI Remote Code Execution Exploit

InvokeAI has a critical vulnerability leading to remote code execution in the /api/v2/models/install API through unsafe model deserialization. The API allows users to specify a model URL, which is downloaded and loaded server-side using torch.load without proper validation. This functionality...

CVE-2024-12029

creationtimestamp| type| source ---|---|--- 2025-02-18 13:08:28+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/invokeaircecve202412029.rb 2025-02-19 02:34:22+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-19 21:02:31+00:00| seen...