ShellTorchChecker

ShellTorch 检测工具 该工具用于检查 TorchServe 实例是否存在 CVE-2023-43654 漏洞，并提供可能的缓解方法。 更多详情请参阅我们的完整报告：https://www.oligo.security/blog/shelltorch-torchserve-ssrf-vulnerability-cve-2023-43654 要运行该工具，请执行以下命令： root@kitploit: bash curl...

Billions of Apple Devices at Risk from “AirBorne” AirPlay Vulnerabilities

Oligo Security uncovers "AirBorne," a set of 23 vulnerabilities in Apple AirPlay affecting billions of devices. Learn how…...

GHSA-M2MJ-PR4F-H9JP TorchServe ZipSlip

Impact Using the model/workflow management API, there is a chance of uploading potentially harmful archives that contain files that are extracted to any location on the filesystem that is within the process permissions. Leveraging this issue could aid third-party actors in hiding harmful code in...

TorchServe Server-Side Request Forgery vulnerability

Impact Remote Server-Side Request Forgery SSRF Issue: TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity of the system and...