352 matches found
Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER
Summary This is a scanning bypass to scanpytorch function in picklescan. As we can see in the implementation of getmagicnumber that uses pickletools.genopsdata to get the magicnumber with the condition opcode.name includes INT or LONG, but the PyTorch's implemtation simply uses picklemodule.load ...
PT-2026-50469
Name of the Vulnerable Software and Affected Versions picklescan versions prior to 1.0.3 Description A scanning bypass exists in the scan pytorch function. The issue arises from a difference in how magic numbers are handled compared to PyTorch's implementation. While the software uses...
CVE-2026-23122 igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue
In the Linux kernel, the following vulnerability has been resolved: igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue The previous 7 KB per queue caused TX unit hangs under heavy timestamping load. Reducing to 5 KB avoids these hangs and matches the TSN recommendation in I225/I226 SW Use...
CVE-2021-41220
TensorFlow is an open source platform for machine learning. In affected versions the async implementation of CollectiveReduceV2 suffers from a memory leak and a use after free. This occurs due to the asynchronous computation and the fact that objects that have been std::moved from are still...
PT-2026-55679
Name of the Vulnerable Software and Affected Versions Picklescan versions prior to 0.0.33 Description Picklescan fails to detect the numpy.f2py.crackfortran.getlincoef gadget within pickle reduce methods. This allows attackers to craft malicious pickle files that execute arbitrary Python code upo...
PT-2026-55677
Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.34 Description The software fails to detect operator.attrgetter function calls within pickle payloads, which allows security checks to be bypassed. Remote attackers can create malicious pickle files utilizing...
PT-2026-51383
Name of the Vulnerable Software and Affected Versions Picklescan versions prior to 0.0.33 Description Picklescan fails to detect the numpy.f2py.crackfortran. eval length gadget within pickle reduce methods. This allows attackers to craft malicious pickle files that execute arbitrary Python code...
PT-2025-55494
Summary Picklescan uses operator.methodcaller, which is a built-in python library function to execute remote pickle files. Details The attack payload executes in the following steps: - First, the attacker crafts the payload by calling to operator.methodcaller function in reduce method - Then when...
PT-2025-62958
Summary Using pty.spawn, which is a built-in python library function to execute arbitrary commands on the host system. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to pty.spawn function in the reduce method. Then the victim attempts ...
PT-2026-51492
Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.33 Description An issue exists where the software fails to detect malicious pickle files that utilize the reduce method to invoke the numpy.f2py.crackfortran.myeval function. This allows attackers to create...
The vulnerability of the reduce method in the security scanner for analyzing Python Picklescan files allows a perpetrator to execute arbitrary code.
The vulnerability of the reduce method in the Python Picklescan security scanner lies in the use of an incomplete black list when processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
WizOS: Powering Secured Image Adoption with AI
WizOS is now GA to help every organization reduce CVEs and build on a trusted foundation...
The vulnerability of the arp_reduce() and neigh_reduce() functions in the drivers/net/vxlan/vxlan_core.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the arpreduce and neighreduce functions in the drivers/net/vxlan/vxlancore.c module of the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix NPD in arp,neighreduce when using nexthop objects When the "proxy" option is enabled on a VXLAN device, the device will suppress ARP requests and IPv6 Neighbor Solicitation messages if it is able to reply on behalf of...
Why Early Threat Detection Is a Must for Long-Term Business Growth
In cybersecurity, speed isn’t just a win — it’s a multiplier. The faster you learn about emerging threats, the faster you adapt your defenses, the less damage you suffer, and the more confidently your business keeps scaling. Early threat detection isn’t about preventing a breach someday: it’s abo...
EUVD-2021-20329
Malware in sbrugna...
EUVD-2018-0196
Malware in sbrugna...
EUVD-2024-52529
Malicious code in bioql PyPI...
Do Not Enable Insecure SNMP Versions
Simple Network Management Protocol SNMP is a standard protocol designed to manage network nodes in IP networks. This protocol allows the exchange of network management and control data between network elements NEs. If SNMP is installed in scenarios where SNMP is not required, additional system...
