Lucene search
+L

9 matches found

OSV
OSV
added 2026/07/04 1:23 a.m.15 views

CVE-2025-71372 Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef Gadget

Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle reduce methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded, bypassing Picklescan's safety checks and enabling...

7.6CVSS6.3AI score
SaveExploits0References4
Rows per page
Query Builder