Lucene search
+L

421 matches found

Kitploit
Kitploit
added 2026/09/15 9:34 a.m.6 views

llama-factory-webui-rce-cve-2026-58116-trust-remote-code-model-path-injection

CVE-2026-58116 — RCE en WebUI de LLaMA-Factory mediante trustremotecode Prueba de concepto para CVE-2026-58116 CVSS 9.8 Crítico: ejecución remota de código en LLaMA-Factory = v0.9.5. La WebUI de LLaMA-Factory tiene hardcodeado trustremotecode=True al cargar un modelo...

9.8CVSS5.8AI score0.00904EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/15 7:41 a.m.5 views

CVE-2024-11394

CVE-2024-11394 Hugging Face Transformers Trax 模型反序列化不可信数据导致远程代码执行漏洞 漏洞的高层概述及影响: 攻击者可以通过向 Hugging Face Transformers 仓库中的 convertreformertraxcheckpointtopytorch.py 脚本提供一个恶意的 reformer trax 检查点文件,从而在目标主机上执行任意代码。 如果不知情的用户使用了第三方的 reformer trax 检查点文件,执行 convertreformertraxcheckpointtopytorch.py...

8.8CVSS7.8AI score0.02566EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/14 10:54 p.m.7 views

EasyOCR

EasyOCR Ready-to-use OCR with 80+ supported languages and all popular writing scripts including: Latin, Chinese, Arabic, Devanagari, Cyrillic, etc. Try Demo on our website Integrated into Huggingface Spaces 🤗 using Gradio. Try out the Web Demo: What's new...

5.9AI score
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/14 7:07 p.m.18 views

OpenAttack

文档 • 功能与用途 • 使用示例 • 攻击模型 • 工具包设计 OpenAttack 是一个基于 Python 的开源文本对抗攻击工具包,它处理文本对抗攻击的完整流程,包括文本预处理、访问受害者模型、生成对抗样本和评估。 功能与用途 OpenAttack 具有以下特性: ⭐️ 支持所有攻击类型 。OpenAttack 支持所有类型的攻击,包括句子级/单词级/字符级扰动以及基于梯度/得分/决策/盲攻击模型; ⭐️ 多语言支持 。OpenAttack 目前支持中文和英文。其可扩展的设计能够快速支持更多语言; ⭐️ 并行处理 。OpenAttack...

6AI score
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/14 2:46 p.m.5 views

CVE-2024-11393

CVE-2024-11393 Vulnerabilidad de ejecución remota de código por deserialización de datos no confiables en el modelo MaskFormer de Hugging Face Transformers Resumen general y efectos de la vulnerabilidad: La vulnerabilidad permite a un atacante ejecutar código arbitrario en la máquina anfitriona a...

8.8CVSS7.8AI score0.03074EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/14 11:01 a.m.5 views

CVE-2024-11392

CVE-2024-11392 Hugging Face Transformers MobileViTV2 未信任数据反序列化远程代码执行漏洞 漏洞的高层概述与影响: 该漏洞允许攻击者通过向 Hugging Face Transformers 仓库中的 convertmlcvnetstopytorch.py 脚本提供恶意配置文件,在主机上执行任意代码。 如果不知情的用户使用了伴随恶意配置文件的第三方模型,执行 convertmlcvnetstopytorch.py 脚本将导致受害者系统上的远程代码执行(RCE)。 受影响产品 产品:Hugging Face Transformers...

8.8CVSS7.4AI score0.07262EPSS
SaveExploits4References3
Kitploit
Kitploit
added 2026/09/13 4:54 p.m.5 views

Pickle-Deserialization-Exploit-in-Transformers

Transformers 中的 pickle 反序列化漏洞利用 实验简介 介绍pickle 反序列化机制及其reduce攻击原理,复现 Hugging Face Transformers 库中的反序列化漏洞CVE-2024-3568,分析 Transformers 库中的安全隐患并提出安全加固的有效方案。详细内容参见实验PDF文档 。 (poc作者代码详见CVE-2024-3568或者authorinf 文件夹) 关键信息 1. 漏洞位置 TFAutoModel.loadrepocheckpoint 方法(Transformers ≤ v4.37.2) 2. 攻击原理 恶意检查点中的...

9.6CVSS6.2AI score0.02084EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/11 3:13 a.m.3 views

CVE-2026-23001-Hugging-Face-Transformers-Model-Deserialization-Arbitrary-Code-via-Pickle-

CVE-2026-23001 – RCE por deserialización de modelos Hugging Face Transformers Resumen Los modelos de Hugging Face guardados con torch.save utilizan la serialización pickle de Python, que es inherentemente insegura. Si un usuario descarga un modelo aparentemente legítimo de un repositorio, cargarl...

7.8CVSS7.3AI score0.00195EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 7:12 a.m.6 views

FULL-ANALYSIS---CVE-2026-45829-ChromaDB-

CVE-2026-45829 - ChromaDB Pre-Auth RCE CVSS 10.0 ⚠️ 警告 本仓库包含针对 CVE-2026-45829 的 功能性 PoC 。 仅限在受控环境中进行授权测试。 描述 ChromaDB(版本 1.0.0 至 1.5.8)中的严重漏洞,允许未经身份验证的攻击者通过从 Hugging Face 加载恶意模型(设置 trustremotecode=true)来执行任意代码。 PoC 的使用 准备监听器 root@kitploit: nc -lvnp 4444...

10CVSS8.2AI score0.12387EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/09 5:29 p.m.7 views

CVE-2025-11844-smolagents

🔐 Smolagents XPath 注入模拟框架(CVE-2025-11844) 一个教育性审计沙箱和动态概念验证扫描器,演示了 Hugging Face 的 smolagents 库(最高版本 1.2.0)中发现的 XPath 注入漏洞。 🔍 漏洞概况 指标| 详情 ---|--- CVE ID| CVE-2025-11844 目标组件| visionwebbrowser.py 中的 searchitemctrlf 函数 漏洞类型| 输入验证不当 - XPath 注入 / DOM 逃逸 影响范围| 本地数据提取、信息泄露、任意 DOM 遍历 🚨 攻击向量分析...

5.4CVSS6AI score0.0026EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2026/09/07 6:20 a.m.7 views

CVE-2026-75104

A flaw was found in Hugging Face Transformers. Attackers can exploit this by supplying malicious checkpoint index files with parent-directory references or absolute paths that are not properly validated. This vulnerability allows for reading arbitrary files outside the model directory, leading to...

6.8CVSS0.0019EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2026/09/05 11:01 a.m.43 views

CVE-2026-86169 Axolotl before 0.19.0 Remote Code Execution via Multipack Patching

Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trustremotecode defaults to None instead of False, causing the security guard to be bypassed. Attackers can execute arbitrary Python code by crafting a malicious Hugging Face model repository...

8.8CVSS0.00494EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/09/05 11:01 a.m.6 views

EUVD-2026-71971

Axolotl through 0.18.0 contains a remote code execution vulnerability in the multipack patch path where trustremotecode defaults to None instead of False, causing the security guard to be bypassed. Attackers can execute arbitrary Python code by crafting a malicious Hugging Face model repository...

8.8CVSS6.7AI score0.00494EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/09/05 11:01 a.m.8 views

CVE-2026-86169 Axolotl before 0.19.0 Remote Code Execution via Multipack Patching

Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trustremotecode defaults to None instead of False, causing the security guard to be bypassed. Attackers can execute arbitrary Python code by crafting a malicious Hugging Face model repository...

8.8CVSS0.00494EPSS
SaveExploits0References7
CVE
CVE
added 2026/09/05 11:01 a.m.33 views

CVE-2026-86169

Axolotl (through 0.18.0 ), a Python-based LLM fine-tuning framework, contains a remote code execution vulnerability in its multipack patch code path. The root cause is that the trust_remote_code parameter defaults to None instead of False, effectively bypassing the security guard. An attacker who...

8.8CVSS6.7AI score0.00494EPSS
SaveExploits0References7
OSV
OSV
added 2026/09/05 11:01 a.m.4 views

CVE-2026-86169 Axolotl before 0.19.0 Remote Code Execution via Multipack Patching

Axolotl before 0.19.0 contains a remote code execution vulnerability in the multipack patch path where trustremotecode defaults to None instead of False, causing the security guard to be bypassed. Attackers can execute arbitrary Python code by crafting a malicious Hugging Face model repository...

8.7CVSS6.7AI score
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/09/05 12:00 a.m.19 views

PT-2026-86396

Name of the Vulnerable Software and Affected Versions Axolotl versions prior to 0.18.1 Description A remote code execution issue exists in the multipack patch path. The security guard is bypassed because the trust remote code variable defaults to None instead of False. An attacker can execute...

8.8CVSS6.5AI score0.00494EPSS
SaveExploits0References12
EUVD
EUVD
added 2026/09/04 2:32 p.m.8 views

EUVD-2026-71126

tokenizers Hugging Face is affected by an out-of-bounds buffer access in BpeBuilder::build tokenizers/src/models/bpe/model.rs. When loading a tokenizer.json via Tokenizer::fromfile/fromstr, the builder sizes a scratch buffer to the longest vocabulary key, then writes each concatenated merge rule...

7.1CVSS5.7AI score0.0031EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/04 2:32 p.m.30 views

CVE-2026-85670 tokenizers BpeBuilder Buffer Overflow via merge token

tokenizers Hugging Face is affected by an out-of-bounds buffer access in BpeBuilder::build tokenizers/src/models/bpe/model.rs. When loading a tokenizer.json via Tokenizer::fromfile/fromstr, the builder sizes a scratch buffer to the longest vocabulary key, then writes each concatenated merge rule...

7.1CVSS0.0031EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/01 2:17 p.m.13 views

CVE-2026-80047

A vulnerability in Hugging Face Transformers versions = 4.49.0 and = 5.8.1 allows remote Python files to be written to local disk without user consent when using GenerativePreTrainedModel.loadcustomgenerate. The function fetches and caches a remote module file before performing the required...

7.8CVSS0.00082EPSS
SaveExploits0References3
Rows per page
Query Builder