1249 matches found
getrails
GETRAILS Lib of OSINT and Dork hacking that work with Google, Duckduckgo and Torch Feel free to contribute Run import getrails getrails.search'site:scanme.nmap.org' Try Google search if return error use Duckduckgo "http://scanme.nmap.org",... getrails.gogle"term" Searching Google...
PT-2026-128327
Ultralytics torch load Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a...
PT-2026-128329
Ultralytics torch safe load Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious pa...
PT-2026-117223
A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function load word2vec as vocab tensor of the file hanlp/utils/torch util.py. The manipulation of the argument vectors.vocab leads to deserialization. The attack is possible to be carried out remotely...
torch-tensorrt (2.13.0) potentially affected by CVE-2026-65122 via tensorrt (11.0.0.114)
tensorrt PYPI version 11.0.0.114 is affected by a known vulnerability. The following packages have a transitive dependency on tensorrt and may be impacted: - torch-tensorrt 2.13.0 Source cves: CVE-2026-65122 Source advisory: MEND:CVE-2026-65122...
Quantum Fire with Delegated Cloning
Quantum fire is a recently introduced cryptographic primitive consisting of efficiently preparable quantum states, called flames, that admit efficient cloning but resist efficient telegraphing, namely reconstruction via classical communication without preshared entanglement. In all prior...
PT-2026-96011
Name of the Vulnerable Software and Affected Versions dmlc dgl versions prior to 2.1.0 Description A remote attack is possible through the manipulation of the path argument in the load info/ read torch data function within the utils.py file, leading to deserialization. Deserialization occurs when...
cog-hf-template (>=0.0.2, <=0.0.5), datasetrising (>=0.1.0, <=0.1.63) +15 more potentially affected by CVE-2026-69112 via accelerate (0.22.0)
accelerate PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - cog-hf-template =0.0.2, =0.1.0, =0.1.7, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.0.3, =0.26.1, =1.4.2, =1.8.2 and more Source cves: CVE-2026-6911...
CVE-2024-7804
CVE-2024-7804 — Deserialización insegura en PyTorch Distributed RPC RCE Laboratorio autocontenido + exploit para CVE-2024-7804 : ejecución remota de código en el framework RPC distribuido de PyTorch torch.distributed.rpc mediante deserialización insegura de datos no confiables CWE-502. Afectado:...
agilerl (>=0.1.6, <=2.0.6), aihandler (>=1.8.15, <=1.10.2) +8 more potentially affected by CVE-2026-69112 via accelerate (0.18.0)
accelerate PYPI version 0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - agilerl =0.1.6, =1.8.15, =1.8.17, =1.8.14, =0.0.1rc2, =0.0.1rc4 - open-gpts 0.0.1rc1 - pytorch-accelerated 0.1.45 Source cves: CVE-2026-691...
cog-hf-template (>=0.0.2, <=0.0.5), datasetrising (>=0.1.0, <=0.1.63) +15 more potentially affected by CVE-2026-69112 via accelerate (0.22.0)
accelerate PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - cog-hf-template =0.0.2, =0.1.0, =0.1.7, =0.1.0, =0.1.0, =0.1.0, =0.2.0, =0.0.3, =0.26.1, =1.4.2, =1.8.2 and more Source cves: CVE-2026-6911...
PYSEC-2026-3634 Keras: TorchModuleWrapper can deserialize unsafe PyTorch pickle data
A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attacker-controlled PyTorch pickle data through the public keras.layers.TorchModuleWrapper.fromconfig method. This method invokes torch.load..., weightsonly=False without requiring an explicit unsafe opt-in, such ...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-23001 – Hugging Face Transformers Model Deserializati...
EUVD-2026-53366
Hugging Face peft's LoRA-GA and CorDA initialization modules src/peft/tuners/lora/corda.py lines 102 and 163, and src/peft/tuners/lora/loraga.py line 101 call torch.load on config-specified cache/covariance files without weightsonly=True, bypassing peft's own safe-loading wrapper used elsewhere i...
CVE-2026-71281 peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA and CorDA Modules
Hugging Face peft's LoRA-GA and CorDA initialization modules src/peft/tuners/lora/corda.py lines 102 and 163, and src/peft/tuners/lora/loraga.py line 101 call torch.load on config-specified cache/covariance files without weightsonly=True, bypassing peft's own safe-loading wrapper used elsewhere i...
CVE-2026-71281
Hugging Face peft's LoRA-GA and CorDA initialization modules src/peft/tuners/lora/corda.py lines 102 and 163, and src/peft/tuners/lora/loraga.py line 101 call torch.load on config-specified cache/covariance files without weightsonly=True, bypassing peft's own safe-loading wrapper used elsewhere i...
CVE-2026-71281
The CVE-2026-71281 details a vulnerability in Hugging Face PEFT: LoRA-GA and CorDA initialization modules call torch.load() on cache/covariance files without weights_only=True, bypassing PEFT’s safe-loading wrapper. This full pickle deserialization can lead to arbitrary code execution if a malici...
CVE-2026-71281 peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA and CorDA Modules
Hugging Face peft's LoRA-GA and CorDA initialization modules src/peft/tuners/lora/corda.py lines 102 and 163, and src/peft/tuners/lora/loraga.py line 101 call torch.load on config-specified cache/covariance files without weightsonly=True, bypassing peft's own safe-loading wrapper used elsewhere i...