CVE-2024-5452

CVE-2024-5452 01. RCE与pytorch-lightning概述 1 RCE与pytorch-lightning概述 RCE（Remote Code Execution，远程代码执行）是一种允许攻击者在远程系统或应用程序内执行任意代码的漏洞，对应CWE-94：代码生成控制不当（'代码注入'）。 PyTorch Lightning是一个基于PyTorch的库，帮助简化深度学习模型的训练管理；DeepDiff则是一个用于比较两个Python对象并分析差异的库。...

chanleakcheck

chanleakcheck 这是一个工具，用于检查您的 lnd 节点是否遭到 CVE-2019-12999 的攻击，该漏洞最近已被完整披露。该工具将检查您的节点是否接受了无效通道，并尝试量化丢失的币总量（如果有的话）。 请注意，该工具仅适用于 lnd，不过 eclair 和 c-lightning 也都有各自的检测工具： eclair 的工具 c-lightning 的工具 安装 您可以使用以下命令构建该工具： root@kitploit: go build -mod=vendor -v 检查您的节点 工具安装完成后，您可以使用以下命令检查目标节点： root@kitploit:...

detection-tool-cve-2019-13000

CVE 2019-13000 检测工具 一款用于检测您的节点是否遭受无效资金交易攻击的工具。 用法 root@kitploit: java -jar checkfunding.jar --db eclair.sqlite 帮助 root@kitploit: $ java -jar checkfunding.jar --help checkfunding 1.0 Usage: checkfunding options --db path to eclair.sqlite --conf path to eclair.conf --help prints this usage text Thi...

poc_salesforce_lightning

Salesforce Lightning 的 PoC 仅供学术目的使用 。 该工具通过 Aura Lightning 端点以访客权限转储 Salesforce 对象的数据。 代码虽然粗糙，还请见谅。 要求 Python3 用法 root@kitploit: $ python3 exploit.py -h usage: exploit.py -h -u URL -o OBJECTS OBJECTS ... -l -c -a AURACONTEXT -r RECORDID -d -f -s Exploit Salesforce through the aura endpoint with t...

PT-2026-89872

@BitcoinBrabant @TimDraper Antoine Riard, "Replacement Cycling Attacks," disclosure on Bitcoin-Dev and Lightning-Dev mailing lists, Linux Foundation, 20 October 2023. CVE-2023-40231, CVE-2023-40232, CVE-2023-40233, CVE-2023-40234. Not CTO to be fair. 😉...

PT-2026-89871

@BitcoinBrabant @TimDraper Antoine Riard, "Replacement Cycling Attacks," disclosure on Bitcoin-Dev and Lightning-Dev mailing lists, Linux Foundation, 20 October 2023. CVE-2023-40231, CVE-2023-40232, CVE-2023-40233, CVE-2023-40234. Not CTO to be fair. 😉...

PYSEC-2026-3970 PyTorch Lightning path traversal vulnerability

In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the LightningApp when running on a Windows host. The vulnerability occurs at the /api/v1/uploadfile/ endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to...

PYSEC-2026-3974 Remote code execution in pytorch lightning

A remote code execution RCE vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the deepdiff library. The library uses deepdiff.Delta objects to modify application state base...

pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint

A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the pluginserver, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path...

PYSEC-2026-3971 PyTorch Lightning denial of service vulnerability

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server...

PyTorch Lightning path traversal vulnerability

In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the LightningApp when running on a Windows host. The vulnerability occurs at the /api/v1/uploadfile/ endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to...

Remote code execution in pytorch lightning

A remote code execution RCE vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the deepdiff library. The library uses deepdiff.Delta objects to modify application state base...

PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization

PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability CWE-502 in the checkpoint loading mechanism. The LightningModule.loadfromcheckpoint method, which is commonly used to load saved model states, internally calls torch.load without setting the...

PyTorch Lightning denial of service vulnerability

A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the /api/v1/state endpoint of LightningApp. This issue occurs due to improper handling of unexpected state values, which results in the server...

PYSEC-2026-3972 PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization

PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability CWE-502 in the checkpoint loading mechanism. The LightningModule.loadfromcheckpoint method, which is commonly used to load saved model states, internally calls torch.load without setting the...

PYSEC-2026-3975 pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint

A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the pluginserver, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path...

PT-2026-89719

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

PT-2026-89725

A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with pat...

PT-2026-89720

Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0...

PT-2026-89721

In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the LightningApp when running on a Windows host. The vulnerability occurs at the /api/v1/upload file/ endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to...