picklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data...
CVE-2025-71369
picklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data.datapipes.utils.decoder.basich
#cwe-502
共收录 945 条相关情报。
← 返回所有主题Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle...
CVE-2025-71372
Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __reduce__ methods, all
picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards...
CVE-2025-71353
picklescan before 0.0.28 fails to detect malicious pickle files that exploit torch._dynamo.guards.GuardBuilder.get funct
picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start...
CVE-2025-71364
picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start function in pickle redu
picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.calltip.get_entity...
CVE-2025-71360
picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.calltip.get_entity function in reduce meth
picklescan before 0.0.29 fails to detect malicious pickle payloads that utilize lib2to3.pgen2...
CVE-2025-71359
picklescan before 0.0.29 fails to detect malicious pickle payloads that utilize lib2to3.pgen2.grammar.Grammar.loads in t
picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran...
CVE-2025-71362
picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbi
picklescan before 0.0.33 fails to detect malicious pickle files using numpy.f2py.crackfortran...
CVE-2025-71347
picklescan before 0.0.33 fails to detect malicious pickle files using numpy.f2py.crackfortran.param_eval function in red
picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.run.Executive...
CVE-2025-71342
picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.run.Executive.runcode in reduce methods. A
picklescan before 0.0.28 fails to detect malicious torch.fx.experimental.symbolic_shapes.ShapeEnv...
CVE-2025-71356
picklescan before 0.0.28 fails to detect malicious torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expres
picklescan before 0.0.30 fails to detect malicious pickle files that exploit lib2to3.pgen2.pgen...
CVE-2025-71343
picklescan before 0.0.30 fails to detect malicious pickle files that exploit lib2to3.pgen2.pgen.ParserGenerator.make_lab
picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning pickle files for malicious code. Attackers can craft malicious pickle payload...
CVE-2025-71375
CVE-2025-71375 影响 picklescan 工具（版本低于 0.0.34），该工具用于扫描 pickle 文件中的恶意代码。漏洞根源在于 picklescan 未能检测到 `_operator.methodcaller` 这一
Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __reduce__ methods, allowing arbitrary code execution. Attackers can craft malic...
CVE-2025-71372
Picklescan 是一款用于检测 pickle 文件中恶意内容的工具。在 0.0.33 之前的版本中，Picklescan 未能检测到 numpy.f2py.crackfortran.getlincoef gadget 在 pickle
picklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data.datapipes.utils.decoder.basichandlers in reduce methods, allowing attackers to bypass s...
CVE-2025-71369
CVE-2025-71369 是 picklescan 工具中的一个安全漏洞，影响版本 0.0.28 之前。picklescan 是一个用于检测恶意 pickle 文件的安全扫描工具，但在处理使用 torch.utils.data.data
picklescan before 0.0.34 fails to detect _operator.attrgetter function calls in pickle payloads, allowing attackers to bypass security checks. Remote attackers can craft malicio...
CVE-2025-71367
picklescan 是一款用于检测 Pickle 文件中恶意 payload 的安全工具。在 0.0.34 版本之前，picklescan 未能正确识别 pickle 数据中的 `_operator.attrgetter` 函数调用，导致
picklescan before 0.0.28 fails to detect malicious torch.utils.bottleneck.__main__.run_cprofile function calls in pickle files, allowing attackers to bypass safety checks. Remot...
CVE-2025-71366
CVE-2025-71366 是一个针对 Python pickle 文件安全扫描工具 picklescan 的绕过漏洞。在 picklescan 0.0.28 之前的版本中，该工具未能正确检测 pickle 文件中通过 torch.uti
picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start function in pickle reduce methods, allowing remote code execution. Attackers can...
CVE-2025-71364
picklescan 是一款用于检测恶意 pickle 文件的安全工具。在版本 0.0.30 之前，picklescan 未能正确识别 asyncio.unix_events._UnixSubprocessTransport._start
picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pick...
CVE-2025-71362
CVE-2025-71362 是影响 Python 安全扫描工具 picklescan（版本 <0.0.33）的一个高危漏洞。picklescan 旨在检测 Pickle 文件中的危险反序列化操作，但其实现存在缺陷：当 Pickle 文件中
picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.calltip.get_entity function in reduce methods. Attackers can embed undetected code in pickle files ...
CVE-2025-71360
CVE-2025-71360 漏洞影响 picklescan 工具 0.0.29 之前的版本。该工具用于检测恶意 pickle 文件，但存在一个缺陷：它无法识别通过 idlelib.calltip.get_entity 函数在 reduce
picklescan before 0.0.29 fails to detect malicious pickle payloads that utilize lib2to3.pgen2.grammar.Grammar.loads in the reduce method, allowing remote code execution. Attacke...
CVE-2025-71359
CVE-2025-71359 是 picklescan 工具中的一个绕过漏洞。picklescan 是一款用于检测恶意 pickle 文件的安全扫描工具，其版本低于 0.0.29 时无法检测利用 lib2to3.pgen2.grammar.