CVE-2024-5452

CVE-2024-5452 01. Panoramica su RCE e pytorch-lightning 1 Panoramica su RCE e pytorch-lightning La RCE Remote Code Execution, esecuzione remota di codice è una vulnerabilità che consente a un attaccante di eseguire codice arbitrario all'interno di un sistema o di un'applicazione da remoto ed è...

chanleakcheck

chanleakcheck Questo è uno strumento per verificare se il tuo nodo lnd è stato preso di mira da CVE-2019-12999, che è stato recentemente divulgato completamente. Lo strumento controllerà se il tuo nodo ha accettato un canale non valido e tenterà di quantificare l'importo totale di monete perse, s...

detection-tool-cve-2019-13000

Erkennungstool für CVE 2019-13000 Ein Tool, das erkennt, ob Ihr Knoten Opfer des ungültigen Funding-Transaktions-Angriffs geworden ist. Verwendung root@kitploit: java -jar checkfunding.jar --db eclair.sqlite Hilfe root@kitploit: $ java -jar checkfunding.jar --help checkfunding 1.0 Usage:...

poc_salesforce_lightning

Salesforce lightning के लिए PoC केवल शैक्षणिक उद्देश्यों के लिए। यह टूल अतिथि विशेषाधिकार के साथ Aura lightning endpoint के माध्यम से Salesforce object का डेटा डंप करता है। यह अस्त-व्यस्त कोड है, पर माफ कर दो। आवश्यकता Python3 उपयोग root@kitploit: $ python3 exploit.py -h usage: exploit.py -h -u U...

CVE-2026-66431

Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce via CLINK = 1.0.7 versions...

CVE-2026-66431

Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce via CLINK = 1.0.7 versions...

CVE-2026-66431

CVE-2026-66431 concerns the WordPress plugin WordPress Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) with versions up to 1.0.7. The issue is Unauthenticated Broken Access Control, meaning an attacker can access restricted functionality without authentication. The description and c...

EUVD-2026-57864

Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce via CLINK = 1.0.7 versions...

CVE-2026-66431 WordPress Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) plugin <= 1.0.7 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce via CLINK = 1.0.7 versions...

PT-2026-71551

Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce via CLINK = 1.0.7 versions...

CVE-2026-31221

A flaw was found in PyTorch-Lightning. This vulnerability, categorized as insecure deserialization CWE-502, exists in the checkpoint loading mechanism. A remote attacker can exploit this by providing a maliciously crafted checkpoint file, which, when loaded by the LightningModule.loadfromcheckpoi...

WordPress Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) plugin <= 1.0.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Bitcoin Lightning Payment Gateway for WooCommerce via CLINK versions = 1.0.7...

Preview: Cisco Talos at Black Hat USA 2026

We're looking forward to having some great conversations with those of you heading to the desert for Hacker Summer Camp 2026. We have a presence within the Cisco and Splunk booth 2633 during Black Hat where you can chat to us about our latest threat research, incident response, and how Talos powe...

CVE-2026-58659

A flaw was found in PyTorch Lightning. This vulnerability allows attackers to achieve remote code execution by crafting malicious checkpoint files. These files exploit a weakness in the loadstate function, which imports and executes attacker-controlled module names from checkpoint instantiator...

a2rl (>=1.0.0, <=1.2.0), aana (>=0.2.1, <=0.2.2.2) +2017 more potentially affected by CVE-2026-58659 via pytorch-lightning (>=0.5.3.2, <=2.6.5)

pytorch-lightning PYPI version =0.5.3.2, =1.0.0, =0.2.1, =1.1.0, =0.0.0, =1.0.1, =2.1.1, =0.1.0, =2.0.0, =1.3.0, =0.1.0, =0.8.1, =0.1.0, =1.0.1, =1.4.0 and more Source cves: CVE-2026-58659 Source advisory: SNYK:PYTHON-PYTORCHLIGHTNING-18016331...

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

Overview pytorch-lightning is a lightweight PyTorch wrapper for ML researchers. Scale your models. Write less boilerplate. Affected versions of this package are vulnerable to Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' via the loadstate function that imports a...

PYSEC-2026-3624

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the loadstate function that imports and executes attacker-controlled module names from checkpoint instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass...

CVE-2026-58659

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the loadstate function that imports and executes attacker-controlled module names from checkpoint instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass...

CVE-2026-58659

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the loadstate function that imports and executes attacker-controlled module names from checkpoint instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass...

CVE-2026-58659

Summary: CVE-2026-58659 affects PyTorch Lightning up to version 2.6.5. The vulnerability lies in the _load_state function, which can import and execute attacker-controlled module names from the checkpoint _instantiator hyperparameters, enabling remote code execution when LightningModule.load_from...