CVE-2024-12044: Deserialization of Untrusted Data

A remote code execution vulnerability exists in open-mmlab/mmdetection version v3.3.0. The vulnerability is due to the use of the pickle.loads function in the allreducedict distributed training API without proper sanitization. This allows an attacker to execute arbitrary code by broadcasting a...

CVE-2024-11041: Deserialization of Untrusted Data

vllm-project vllm version v0.6.2 contains a vulnerability in the MessageQueue.dequeue API function. The function uses pickle.loads to parse received sockets directly, leading to a remote code execution vulnerability. An attacker can exploit this by sending a malicious payload to the MessageQueue,...

PT-2025-12116

Name of the Vulnerable Software and Affected Versions open-mmlab/mmdetection version v3.3.0 Description A remote code execution issue exists due to the use of the pickle.loads function in the all reduce dict distributed training API without proper sanitization, allowing an attacker to execute...

PT-2025-12135

Name of the Vulnerable Software and Affected Versions infiniflow/ragflow versions v0.12.0 Description A vulnerability allows for remote code execution. The RPC server in RagFlow uses a hard-coded AuthKey, which can be easily fetched by attackers to join the group communication without restriction...

Code Injection

loguru is vulnerable to code injection. The vulnerability exists in reduce function in recattrs.py due to the use of pickle.loads which allows an attacker to inject and execute arbitrary codes...

CVE-2016-3957

The secureload function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to deserialize session information stored in cookies, which might allow remote attackers to execute arbitrary code by leveraging knowledge of encryptionkey...

CVE-2016-3957: Deserialization of Untrusted Data

The secureload function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to deserialize session information stored in cookies, which might allow remote attackers to execute arbitrary code by leveraging knowledge of encryptionkey...