Lucene search
+L

2 matches found

Packet Storm
Packet Storm
added 2026/04/23 12:0 a.m.134 views

📄 Keras 3.13.0 Malicious ML Model Server HDF5 Shape Bomb

This script is a Flask-based web server that distributes .keras machine learning model files, but it is designed in a malicious way for security research/testing scenarios. The main idea is a denial of service via memory exhaustion, where generated Keras models contain artificially declared...

7.5CVSS6.5AI score0.00299EPSS
SaveExploits3
Packet Storm
Packet Storm
added 2026/04/23 12:0 a.m.153 views

📄 Keras 3.13.0 HDF5 Shape Bomb Denial of Service

This script is a security research tool demonstrating a denial of service vulnerability in Keras model loading through malicious HDF5 shape bombs. It generates .keras model archives containing artificially declared extremely large tensor shapes designed to force excessive memory allocation during...

7.5CVSS6.5AI score0.00299EPSS
SaveExploits3
Rows per page
Query Builder