cve-2025-32434-poc

CVE-2025-32434 Description Technical Details The vulnerability entry point is load in torch/serialization.py when protection weightsonly is enabled: loading a tar file would call these functions in chain: 1. load: torch/serialization.py:1117 2. loadlegacy: torch/serialization.py:1376 to...

cleverhans

CleverHans latest release: v4.0.0 This repository contains the source code for CleverHans, a Python library to benchmark machine learning systems' vulnerability to adversarial examples. You can learn more about such vulnerabilities on the accompanying blog. The CleverHans library is under continu...

alibi-detect

Alibi Detect is a source-available Python library focused on outlier , adversarial and drift detection. The package aims to cover both online and offline detectors for tabular data, text, images and time series. Both TensorFlow and PyTorch backends are supported for drift detection. Documentation...

saffron

Saffron-1: Inference Scaling for LLM Safety Assurance 📖 Paper 🛠️ Dependencies The code was tested under the following dependencies: Python 3.12.3 CUDA 12.2 typingextensions==4.14.0 numpy==2.2.6 torch==2.5.1 huggingfacehub==0.30.2 accelerate==1.1.1 datasets==3.1.0 evaluate==0.4.3...

CVE-2025-32434

CVE-2025-32434: PyTorch RCE Vulnerability - PoC What is CVE-2025-32434? CVE-2025-32434 is a critical Remote Code Execution RCE vulnerability in PyTorch, a widely used Python library for deep learning and neural networks. The Core Problem The vulnerability exists in the torch.load function, even...

EXPLOIT-CVE-2024-7804

CVE-2024-7804 — PyTorch Distributed RPC Unsafe Deserialization RCE Self-contained lab + exploit for CVE-2024-7804 : remote code execution in PyTorch's distributed RPC framework torch.distributed.rpc through unsafe deserialization of untrusted data CWE-502. Affected: torch Note: this advisory was...

Occ

Prohibited Items Segmentation via Occlusion-aware Bilayer Modeling ICME 2025 Official PyTorch Implementation of Prohibited Items Segmentation via Occlusion-aware Bilayer Modeling. Paper link: IEEE, Arxiv. Get Started Dependencies Code is successfully tested on Linux with Pytorch 2.1.2 and CUDA...

CVE-2024-5452

CVE-2024-5452 01. Overview of RCE and pytorch-lightning 1 Overview of RCE and pytorch-lightning RCE Remote Code Execution is a vulnerability that allows an attacker to execute arbitrary code remotely within a system or application, and is classified as CWE-94: Improper Control of Generation of...

CLIPGuard

CLIPGuard Installation 1. Create Virtual Environment Recommended python -m venv clipguardenv source clipguardenv/bin/activate 2. Install PyTorch CUDA Example pip install torch torchvision --index-url https://download.pytorch.org/whl/cu121 For CPU: pip install torch torchvision 3. Install...

CVE-2025-32434-exploit

Overview This exploit demonstrates a critical remote code execution vulnerability CVE-2025-32434 in PyTorch versions /tmp/whoami" Test the exploit loads the model to verify RCE python3 exploit.py -c "id" -t Advanced exploit variant with alternative bypass python3 exploit.py --advanced -c "curl -s...

CVE-2025-50461

CVE-2025-50461: Remote Code Execution via Unsafe Model Deserialization in Verl Status: RESERVED This CVE ID has been assigned but is not yet published in the official CVE list. A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/modelmerger.py script whe...

CVE-2023-43654

CVE-2023-43654 ShellTorch is a chain of 3 Critical Vulnerabilities in PyTorch TorchServe - the default inference server of PyTorch. This is an End-to-End POC for an SSRF vulnerability which leads to Arbitrary Remote Code Execution from the network 1. Run TorchServe 0.8.1 docker run -d --rm -it -p...

foolbox

home: true heroImage: /logo.png heroText: Foolbox tagline: "Foolbox: attacchi adversarial veloci per valutare la robustezza dei modelli di machine learning in PyTorch, TensorFlow e JAX" actionText: Inizia → actionLink: /guide/ features: title: Prestazioni native details: Foolbox 3 è basata su...

Agentic-CLIP-Benchmark

Agentic-CLIP-Benchmark: Zero-Shot Evaluation on CIFAR-10 -green.svg This project implements a robust, automated pipeline for evaluating OpenAI's CLIP ViT-B/32 model on the full CIFAR-10 test set 10,000 images. Developed using an AI Native workflow Trae IDE , it achieves a high-precision zero-shot...

netsentryx

NetSentryx PRO 🛡️ AI-Driven, High-Performance Real-Time Network Observability & Threat Detection Engine NetSentryx PRO is a next-generation, event-driven network monitoring and threat intelligence platform. Combining rule-based signatures with a PyTorch Deep Autoencoder, it provides sub-10ms packe...

fickling

Fickling Fickling ist ein Dekompilierer, statischer Analysator und Bytecode-Umschreiber für Python-Pickle-Objektserialisierungen. Sie können Fickling verwenden, um bösartige Pickle- oder Pickle-basierte Dateien, einschließlich PyTorch-Dateien, zu erkennen, zu analysieren, reverse zu engineering...

LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py

SummaryLMDeploy's PyTorch DistServe/PD-disaggregation control plane usedrecvpyobj to deserialize messages received through a ZeroMQ PULLsocket. PyZMQ implements recvpyobj using Python pickledeserialization, which can execute arbitrary code while reconstructingan object.The peer address used by th...

LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading

Summarylmdeploy = latest contains a code injection vulnerability in lmdeploy/pytorch/config.py line 620 that allows an attacker to execute arbitrary Python code by publishing a malicious HuggingFace model with a crafted quantizationconfig.quantdtype value. When a user loads the model with lmdeplo...

PYSEC-2026-4132 Picklescan has a missing detection when calling built-in python profile.Profile.runctx

Summary Using profile.Profile.runctx, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to profile.Profile.runctx function in reduce method Then when the victim...

Picklescan missing detection when calling pytorch function torch.jit.unsupported_tensor_ops.execWrapper

SummaryUsing torch.jit.unsupportedtensorops.execWrapper function, which is a pytorch library function to execute remote pickle file. DetailsThe attack payload executes in the following steps:First, the attacker craft the payload by calling to torch.jit.unsupportedtensorops.execWrapper function in...