CVE-2022-0845: Improper Control of Generation of Code

Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0...

pytorch-lightning 代码注入漏洞

Pytorch-Lightning is an open source lightweight PyTorch wrapper for high-performance Ai research. Used for high-performance Ai research, Pytorch-Lightning is vulnerable to a code injection vulnerability that could be exploited to inject code into the GitHub repository...

Code Injection

Description The attacker can execute commands on the target OS running the operating system by setting the PLTRAINERGPUS when using the Trainer module. Proof of Concept bash $ pip3 install pytorch-lightning python import os from pytorchlightning import Trainer from...

Mageia: Security Advisory (MGASA-2014-0421)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

U.S. General Services Administration: Registered users contact information disclosure on salesforce lightning endpoint https://disposal.gsa.gov

Hi, Sample of the Information Disclosure is below. More records are attached -███ "LastName":"████","FullNamec":"█████████","Id":"██████████","MailingStreet":null,"Activec":false,"Emailc":null,"LastModifiedBy":"Id":"00530000009KyDqAAK","Name":"SNA...

pytorch-lightning is vulnerable to Deserialization of Untrusted Data

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

GHSA-2VJ5-PX25-GJRP pytorch-lightning is vulnerable to Deserialization of Untrusted Data

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

CVE-2021-4118

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

CVE-2021-4118

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

CVE-2021-4118

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

PYSEC-2021-874

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

Deserialization of untrusted data

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

PYSEC-2021-874

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

CVE-2021-4118

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

CVE-2021-4118 Deserialization of Untrusted Data in pytorchlightning/pytorch-lightning

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

CVE-2021-4118

CVE-2021-4118 affects pytorch-lightning and is described as a Deserialization of Untrusted Data vulnerability. The CVSS3 data in the records indicates a HIGH impact on confidentiality, integrity, and availability with a LOCAL attack vector, LOW attack complexity, no privileges required, and USER ...

PT-2021-23155

Name of the Vulnerable Software and Affected Versions pytorch-lightning affected versions not specified Description The issue concerns the deserialization of untrusted data in pytorch-lightning. There is no information provided about the estimated number of potentially affected devices worldwide ...

CVE-2021-4118: Deserialization of Untrusted Data

pytorch-lightning is vulnerable to Deserialization of Untrusted Data...

Pytorch-Lightning 代码问题漏洞

Pytorch-Lightning is an open source lightweight PyTorch wrapper. Used for high-performance Ai research. pytorch-lightning suffers from a code issue vulnerability that stems from the software's tendency to deserialize untrustworthy data, which can be exploited by an attacker to cause code executio...

Unbreakable Enterprise kernel security update

4.1.12-124.57.1 - target; fix print statement warning John Donnelly Orabug: 33495661 - enic;: fix warning on moduleparam disablevlan0, John Donnelly Orabug: 33495661 - bnx2fc: correct BNX2FCTMTIMEOUT to be 60 sec John Donnelly Orabug: 33495661 - target: Fix linux-4.1.y specific compile warning...